@edgespark/web 0.0.1-beta.5 → 0.0.1-beta.7

package/dist/index.es.js

@@ -1,75 +1,106 @@
-import { createAuthClient as be } from "better-auth/client";
-class j extends Error {
+import { createAuthClient as Ue } from "better-auth/client";
+class ee extends Error {
   constructor(e, s) {
     super(s), this.name = "EdgeSparkError", this.code = e;
   }
 }
-class u extends j {
+class f extends ee {
   constructor(e) {
     super("CONFIG_ERROR", e), this.name = "EdgeSparkConfigError";
   }
 }
-class de extends j {
+class ye extends ee {
   constructor(e) {
     super("RUNTIME_ERROR", e), this.name = "EdgeSparkRuntimeError";
   }
 }
-class w extends j {
+class v extends ee {
   constructor(e, s) {
     super((s == null ? void 0 : s.code) ?? "AUTH_ERROR", e), this.name = "EdgeSparkAuthError", this.cause = s == null ? void 0 : s.cause, this.status = s == null ? void 0 : s.status;
   }
 }
-function ce() {
+function Se(t, e = "Authentication failed.", s) {
+  if (t instanceof v)
+    return t;
+  if (typeof t == "object" && t !== null) {
+    const i = t;
+    return new v(i.message || e, {
+      code: i.code ?? s,
+      status: i.status,
+      cause: t
+    });
+  }
+  return typeof t == "string" ? new v(t, { code: s }) : new v(e, { code: s, cause: t });
+}
+function Pe() {
   if (typeof window > "u" || typeof document > "u")
-    throw new de(
+    throw new ye(
       "@edgespark/web is browser-only. Create the client from a real browser runtime."
     );
 }
-function W() {
-  return ce(), window.location.origin;
+function Q() {
+  return Pe(), window.location.origin;
 }
-function ge(t) {
+function Be(t) {
   return t instanceof URL ? t : typeof t == "string" ? new URL(t, window.location.href) : new URL(t.url, window.location.href);
 }
-function ve(t) {
-  if (t.origin !== W())
-    throw new u(
-      `Cross-origin requests are not supported by this SDK. Received ${t.origin}, expected ${W()}.`
+function ke(t) {
+  if (t.origin !== Q())
+    throw new f(
+      `Cross-origin requests are not supported by this SDK. Received ${t.origin}, expected ${Q()}.`
     );
 }
-function ye() {
+function Me() {
   return {
     async fetch(t, e) {
-      const s = ge(t);
-      return ve(s), fetch(t, {
+      const s = Be(t);
+      return ke(s), fetch(t, {
         ...e,
         credentials: "include"
       });
     }
   };
 }
-const ue = "/api/_es/auth", Pe = "edgespark-auth-session", K = "__edgespark_auth_sync__", he = Symbol("edgespark.notifyAuthTabs");
-function me(t) {
-  return be({
-    baseURL: W(),
-    basePath: ue,
+const Ee = "/api/_es/auth", Oe = "edgespark-auth-session", Le = "__edgespark_auth_sync__", N = "__edgespark_auth_pending_sign_in__", _e = Symbol("edgespark.notifyAuthTabs"), Ve = 10 * 60 * 1e3, Ne = /* @__PURE__ */ new Set([
+  "signOut",
+  "revokeSession",
+  "revokeSessions",
+  "revokeOtherSessions"
+]);
+class Fe {
+  constructor(e) {
+    this.value = e;
+  }
+  deref() {
+    return this.value;
+  }
+}
+const ie = globalThis.WeakRef, ne = globalThis.FinalizationRegistry;
+let F, re = !1;
+const C = /* @__PURE__ */ new Map(), z = ne ? new ne((t) => {
+  C.delete(t);
+}) : null;
+function Ie(t) {
+  return Ue({
+    baseURL: Q(),
+    basePath: Ee,
     ...t != null && t.disableDefaultRedirectPlugin ? { disableDefaultFetchPlugins: !0 } : {},
     fetchOptions: {
       credentials: "include"
     }
   });
 }
-function _(t) {
+function R(t) {
   var e, s;
   return (s = (e = t.$store) == null ? void 0 : e.atoms) == null ? void 0 : s.session;
 }
-function Le(t) {
+function ze(t) {
   return JSON.stringify({
     source: t,
     timestamp: Date.now()
   });
 }
-function Ee(t) {
+function De(t) {
   if (typeof t != "string")
     return null;
   try {
@@ -79,182 +110,314 @@ function Ee(t) {
     return null;
   }
 }
-function Se(t) {
-  if (!(t && typeof t == "object") || "error" in t && t.error)
+async function X(t) {
+  var e;
+  try {
+    return await ((e = R(t)) == null ? void 0 : e.get().refetch()), !0;
+  } catch {
     return !1;
-  const e = "data" in t ? t.data : t;
-  return e && typeof e == "object" ? "token" in e && typeof e.token == "string" && e.token.length > 0 ? !0 : "session" in e && "user" in e && !!e.session && !!e.user : !1;
+  }
 }
-function M(t) {
-  if (t instanceof w)
-    return t;
-  const e = t;
-  return new w(
-    (e == null ? void 0 : e.message) || "Failed to load the current session.",
-    {
-      code: (e == null ? void 0 : e.code) ?? "SESSION_LOOKUP_FAILED",
-      cause: t,
-      status: e == null ? void 0 : e.status
+function Re() {
+  return F === void 0 && (F = typeof BroadcastChannel < "u" ? new BroadcastChannel(Oe) : null), F;
+}
+function oe(t) {
+  const e = De(t);
+  if (e)
+    for (const [s, i] of C) {
+      if (s === e.source)
+        continue;
+      const n = i.deref();
+      if (!n) {
+        C.delete(s);
+        continue;
+      }
+      X(n);
     }
-  );
 }
-async function _e(t) {
-  var e, s;
-  await ((e = _(t)) == null ? void 0 : e.get().refetch()), (s = t[he]) == null || s.call(t);
+function qe() {
+  var t;
+  re || (re = !0, (t = Re()) == null || t.addEventListener("message", (e) => {
+    oe(e.data);
+  }), typeof window < "u" && window.addEventListener("storage", (e) => {
+    e.key !== Le || e.newValue === null || oe(e.newValue);
+  }));
 }
-function Te() {
-  const t = me(), e = `${Date.now()}-${Math.random().toString(36).slice(2)}`, s = typeof BroadcastChannel < "u" ? new BroadcastChannel(Pe) : null, i = 2, r = 500;
-  let a = null, c = !1;
-  const p = () => {
-    var l;
-    return c ? Promise.resolve(((l = _(t)) == null ? void 0 : l.get().data) ?? null) : (a || (a = (async () => {
-      var m, f, g, v;
-      let o = !1, d = null;
-      try {
-        for (let L = 0; L <= i; L++) {
-          const E = await t.getSession(), y = ((m = _(t)) == null ? void 0 : m.get().data) ?? null;
-          if ((f = E.data) != null && f.session && ((g = E.data) != null && g.user))
-            return c = !0, E.data;
-          if (y != null && y.session && (y != null && y.user))
-            return c = !0, y;
-          if (E.error ? d = E.error : o = !0, !E.error && L < i) {
-            await new Promise((k) => setTimeout(k, r));
-            continue;
-          }
-          L < i && await new Promise((k) => setTimeout(k, r));
-        }
-        if (!o)
-          throw a = null, new w("Failed to load the current session.", {
-            code: "SESSION_LOOKUP_FAILED",
-            cause: d
-          });
-        const h = ((v = _(t)) == null ? void 0 : v.get().data) ?? null;
-        return c = !0, h;
-      } catch (h) {
-        throw a = null, M(h);
-      }
-    })()), a);
-  };
-  p().catch(() => {
-  });
-  const T = async () => {
-    var l, o;
+function je(t, e) {
+  ie ? C.set(t, new ie(e)) : (C.clear(), C.set(t, new Fe(e))), z == null || z.register(e, t), qe();
+}
+function I(t) {
+  const e = ze(t), s = Re();
+  let i = !1;
+  if (s)
     try {
-      const d = await t.getSession();
-      if ((l = d.data) != null && l.session && ((o = d.data) != null && o.user))
-        return d.data;
-      throw d.error ? M(d.error) : new w("No authenticated session is available.", {
-        code: "UNAUTHENTICATED"
-      });
-    } catch (d) {
-      throw M(d);
+      s.postMessage(e), i = !0;
+    } catch {
     }
-  }, P = async () => {
-    var l;
+  if (!i)
     try {
-      await ((l = _(t)) == null ? void 0 : l.get().refetch());
+      window.localStorage.setItem(Le, e);
     } catch {
     }
-  }, b = () => {
-    const l = Le(e);
+}
+function D(t) {
+  if (!(typeof window > "u"))
     try {
-      s == null || s.postMessage(l);
+      window.sessionStorage.setItem(
+        N,
+        JSON.stringify({
+          path: t,
+          createdAt: Date.now()
+        })
+      );
     } catch {
     }
+}
+function $() {
+  if (!(typeof window > "u"))
     try {
-      window.localStorage.setItem(K, l);
+      window.sessionStorage.removeItem(N);
     } catch {
     }
-  }, G = (l) => {
-    const o = Ee(l);
-    !o || o.source === e || P();
-  };
-  s == null || s.addEventListener("message", (l) => {
-    G(l.data);
-  }), typeof window < "u" && window.addEventListener("storage", (l) => {
-    l.key !== K || l.newValue === null || G(l.newValue);
+}
+function He(t) {
+  return !!(t != null && t.session && (t != null && t.user));
+}
+function Te() {
+  if (typeof window > "u")
+    return null;
+  try {
+    const t = window.sessionStorage.getItem(N);
+    if (!t)
+      return null;
+    const e = JSON.parse(t);
+    return !e || typeof e != "object" || typeof e.createdAt != "number" || Date.now() - e.createdAt > Ve ? null : { createdAt: e.createdAt };
+  } catch {
+    return null;
+  }
+}
+function ae() {
+  if (!Te())
+    return !1;
+  try {
+    window.sessionStorage.removeItem(N);
+  } catch {
+  }
+  return !0;
+}
+function xe() {
+  return Te() !== null;
+}
+function We(t) {
+  if (!(t && typeof t == "object") || "error" in t && t.error)
+    return !1;
+  const e = "data" in t ? t.data : t;
+  return e && typeof e == "object" ? "token" in e && typeof e.token == "string" && e.token.length > 0 ? !0 : "session" in e && "user" in e && !!e.session && !!e.user : !1;
+}
+function Ge(t) {
+  if (!(t && typeof t == "object") || "error" in t && t.error)
+    return !1;
+  const e = "data" in t ? t.data : t;
+  return e && typeof e == "object" ? "url" in e && typeof e.url == "string" : !1;
+}
+function Ye(t) {
+  if (T(t) || !(t && typeof t == "object"))
+    return !1;
+  const e = "data" in t ? t.data : t;
+  return e && typeof e == "object" ? "user" in e && !!e.user && "token" in e && e.token === null && !("url" in e) : !1;
+}
+function Ke(t, e) {
+  if (t.length !== 1 || t[0] !== "changePassword")
+    return !1;
+  const [s] = e;
+  return !!(s && typeof s == "object" && "revokeOtherSessions" in s && s.revokeOtherSessions === !0);
+}
+function T(t) {
+  return !!(t && typeof t == "object" && "error" in t && t.error);
+}
+function Je(t) {
+  if (T(t) || !(t && typeof t == "object"))
+    return !1;
+  const e = "data" in t ? t.data : t;
+  return e && typeof e == "object" ? "message" in e && e.message === "User deleted" : !1;
+}
+function Ze(t) {
+  return !!(t && (typeof t == "object" || typeof t == "function") && "then" in t && typeof t.then == "function");
+}
+function q(t) {
+  return Se(t, "Failed to load the current session.", "SESSION_LOOKUP_FAILED");
+}
+async function Qe(t) {
+  var s, i;
+  let e = null;
+  try {
+    await ((s = R(t)) == null ? void 0 : s.get().refetch());
+  } catch (n) {
+    e = n;
+  } finally {
+    (i = t[_e]) == null || i.call(t);
+  }
+  if (e)
+    throw e;
+}
+function Xe() {
+  const t = Ie(), e = `${Date.now()}-${Math.random().toString(36).slice(2)}`;
+  je(e, t);
+  const s = 2, i = 500;
+  let n = null, a = !1, h;
+  const w = (o) => (h = o, o), E = () => {
+    var c;
+    const o = (c = R(t)) == null ? void 0 : c.get();
+    return o != null && o.error && !o.data && h !== void 0 ? h : (o == null ? void 0 : o.data) ?? h ?? null;
+  }, L = () => a ? Promise.resolve(E()) : (n || (n = (async () => {
+    var l, u, g;
+    let o = !1, c = null;
+    try {
+      for (let p = 0; p <= s; p++) {
+        let d = null;
+        try {
+          d = await t.getSession();
+        } catch (y) {
+          c = y;
+        }
+        const b = ((l = R(t)) == null ? void 0 : l.get().data) ?? null;
+        if ((u = d == null ? void 0 : d.data) != null && u.session && ((g = d.data) != null && g.user))
+          return a = !0, ae() && I(e), w(d.data);
+        if (b != null && b.session && (b != null && b.user))
+          return a = !0, ae() && I(e), w(b);
+        if (d != null && d.error ? c = d.error : d && (o = !0), d && !d.error && xe() && p < s) {
+          await new Promise(
+            (y) => setTimeout(y, i)
+          );
+          continue;
+        }
+        if (d && !d.error) {
+          const y = E();
+          return a = !0, w(y);
+        }
+        p < s && await new Promise(
+          (y) => setTimeout(y, i)
+        );
+      }
+      if (!o)
+        throw n = null, new v("Failed to load the current session.", {
+          code: "SESSION_LOOKUP_FAILED",
+          cause: c
+        });
+      const m = E();
+      return a = !0, w(m);
+    } catch (m) {
+      throw n = null, q(m);
+    }
+  })()), n);
+  L().catch(() => {
   });
-  const Y = async () => {
-    await P(), b();
-  }, we = (l) => {
-    let o = !1, d = !1, m;
-    const f = (h) => {
-      h !== m && (m = h, l(h));
+  const _ = async () => {
+    var o, c;
+    try {
+      const l = await t.getSession();
+      if ((o = l.data) != null && o.session && ((c = l.data) != null && c.user))
+        return l.data;
+      throw l.error ? q(l.error) : new v("No authenticated session is available.", {
+        code: "UNAUTHENTICATED"
+      });
+    } catch (l) {
+      throw q(l);
+    }
+  }, A = async () => {
+    await X(t), I(e);
+  }, Ce = async () => {
+    var l;
+    const o = await X(t), c = ((l = R(t)) == null ? void 0 : l.get().data) ?? null;
+    He(c) ? ($(), I(e)) : o || I(e);
+  }, Ae = (o) => {
+    let c = !1, l = !1, u;
+    const g = (d) => {
+      d !== u && (u = d, o(d));
     };
-    p().then((h) => {
-      o || (d = !0, f(h));
+    L().then((d) => {
+      c || (l = !0, g(w(d)));
     }).catch(() => {
-      o || (d = !0);
+      c || (l = !0);
     });
-    const g = _(t);
-    if (!g)
+    const m = R(t);
+    if (!m)
       return () => {
-        o = !0;
+        c = !0;
       };
-    const v = g.subscribe((h) => {
-      if (o || !d || h.error && !h.data)
+    const p = m.subscribe((d) => {
+      if (c || !l || d.error && !d.data)
         return;
-      const L = h.data ?? null;
-      f(L);
+      const b = d.data ?? null;
+      g(w(b));
     });
     return () => {
-      o = !0, v();
+      c = !0, p();
     };
-  }, fe = async (...l) => {
-    const o = await t.signOut(...l);
-    return o && typeof o == "object" && "error" in o && o.error || await Y(), o;
-  }, pe = (l) => new Proxy(l, {
-    get(o, d, m) {
-      const f = Reflect.get(o, d, m);
-      return typeof f != "function" ? f : async (...g) => {
-        const v = await f.apply(o, g);
-        return Se(v) && await Y(), v;
-      };
-    }
-  });
-  return new Proxy(t, {
-    get(l, o, d) {
-      if (o === "requireSession")
-        return T;
-      if (o === "onSessionChange")
-        return we;
-      if (o === "signOut")
-        return fe;
-      if (o === he)
-        return b;
-      if (o === "signIn" || o === "signUp") {
-        const m = Reflect.get(l, o, d);
-        return m && typeof m == "object" ? pe(m) : m;
+  }, $e = async (o, c, l) => {
+    const u = o[0], g = o.length >= 2 && u === "emailOtp" && o[1] === "verifyEmail";
+    return o.length === 1 && (u === "deleteUser" || u === "deleteUserCallback") ? ($(), Je(l) && await A(), l) : o.length === 1 && u && Ne.has(u) ? ($(), T(l) || await A(), l) : Ke(o, c) && !T(l) ? ($(), await A(), l) : o.length === 1 && u === "changeEmail" && !T(l) ? (await A(), l) : ((u === "signIn" || u === "signUp" || g) && We(l) ? ($(), await A()) : (u === "signIn" || u === "signUp") && Ge(l) || u === "signUp" && Ye(l) ? D(o) : u === "verifyEmail" && !T(l) && (D(o), await Ce()), l);
+  }, te = /* @__PURE__ */ new WeakMap(), se = (o, c) => {
+    if (!o || typeof o != "object" && typeof o != "function")
+      return o;
+    const l = te.get(o);
+    if (l)
+      return l;
+    const u = new Proxy(o, {
+      get(g, m, p) {
+        if (c.length === 0) {
+          if (m === "requireSession")
+            return _;
+          if (m === "onSessionChange")
+            return Ae;
+          if (m === _e)
+            return () => {
+              I(e);
+            };
+        }
+        const d = Reflect.get(g, m, p);
+        return typeof m != "string" ? d : se(d, [...c, m]);
+      },
+      apply(g, m, p) {
+        const d = Reflect.apply(
+          g,
+          m,
+          p
+        );
+        return Ze(d) ? Promise.resolve(d).then(
+          (b) => $e(c, p, b)
+        ) : d;
       }
-      return Reflect.get(l, o, d);
-    }
-  });
+    });
+    return te.set(o, u), u;
+  };
+  return se(t, []);
 }
-function Ce() {
-  return me({ disableDefaultRedirectPlugin: !0 });
+function et() {
+  return Ie({ disableDefaultRedirectPlugin: !0 });
 }
-function O(t) {
+function tt(t) {
   const e = (() => {
     if (t instanceof URL)
       return t;
     const s = t.trim();
     if (!s)
-      throw new u("redirectTo must not be an empty string.");
+      throw new f("redirectTo must not be an empty string.");
     try {
       return new URL(s, window.location.href);
     } catch {
-      throw new u(
+      throw new f(
         `redirectTo must be a valid relative path or URL. Received: ${JSON.stringify(t)}`
       );
     }
   })();
   if (e.protocol !== "http:" && e.protocol !== "https:")
-    throw new u(
+    throw new f(
       `redirectTo must resolve to an http(s) URL. Received protocol: ${e.protocol}`
     );
   return e;
 }
-function Ie(t, e) {
+function st(t, e) {
   return e ? {
     common: { ...t.common, ...e.common },
     signIn: { ...t.signIn, ...e.signIn },
@@ -266,7 +429,7 @@ function Ie(t, e) {
     errors: { ...t.errors, ...e.errors }
   } : t;
 }
-const B = {
+const V = {
   common: {
     loading: "Loading sign-in…",
     redirecting: "Redirecting…",
@@ -329,7 +492,7 @@ const B = {
     invalidCode: "Enter the 6-digit verification code.",
     generic: "Something went wrong. Please try again."
   }
-}, V = {
+}, j = {
   common: {
     loading: "加载中…",
     redirecting: "跳转中…",
@@ -392,7 +555,7 @@ const B = {
     invalidCode: "请输入 6 位验证码",
     generic: "出现错误，请稍后重试"
   }
-}, J = {
+}, le = {
   common: {
     loading: "サインインを読み込み中…",
     redirecting: "リダイレクト中…",
@@ -455,7 +618,7 @@ const B = {
     invalidCode: "6桁の認証コードを入力してください",
     generic: "エラーが発生しました。もう一度お試しください"
   }
-}, Z = {
+}, de = {
   common: {
     loading: "로그인 로딩 중…",
     redirecting: "리디렉션 중…",
@@ -518,7 +681,7 @@ const B = {
     invalidCode: "6자리 인증 코드를 입력해 주세요",
     generic: "문제가 발생했습니다. 다시 시도해 주세요"
   }
-}, F = {
+}, H = {
   common: {
     loading: "Cargando inicio de sesión…",
     redirecting: "Redirigiendo…",
@@ -581,7 +744,7 @@ const B = {
     invalidCode: "Ingresa el código de verificación de 6 dígitos.",
     generic: "Algo salió mal. Por favor, inténtalo de nuevo."
   }
-}, Q = {
+}, ce = {
   common: {
     loading: "Carregando login…",
     redirecting: "Redirecionando…",
@@ -644,7 +807,7 @@ const B = {
     invalidCode: "Insira o código de verificação de 6 dígitos.",
     generic: "Algo deu errado. Por favor, tente novamente."
   }
-}, X = {
+}, ue = {
   common: {
     loading: "Chargement de la connexion…",
     redirecting: "Redirection…",
@@ -707,7 +870,7 @@ const B = {
     invalidCode: "Saisissez le code de vérification à 6 chiffres.",
     generic: "Une erreur est survenue. Veuillez réessayer."
   }
-}, ee = {
+}, he = {
   common: {
     loading: "Anmeldung wird geladen…",
     redirecting: "Weiterleitung…",
@@ -770,7 +933,7 @@ const B = {
     invalidCode: "Geben Sie den 6-stelligen Bestätigungscode ein.",
     generic: "Etwas ist schiefgelaufen. Bitte versuchen Sie es erneut."
   }
-}, te = {
+}, me = {
   common: {
     loading: "Caricamento accesso…",
     redirecting: "Reindirizzamento…",
@@ -833,7 +996,7 @@ const B = {
     invalidCode: "Inserisci il codice di verifica a 6 cifre.",
     generic: "Qualcosa è andato storto. Riprova."
   }
-}, se = {
+}, fe = {
   common: {
     loading: "Загрузка входа…",
     redirecting: "Перенаправление…",
@@ -896,7 +1059,7 @@ const B = {
     invalidCode: "Введите 6-значный код подтверждения.",
     generic: "Произошла ошибка. Пожалуйста, попробуйте снова."
   }
-}, ie = {
+}, we = {
   common: {
     loading: "جارٍ تحميل تسجيل الدخول…",
     redirecting: "جارٍ إعادة التوجيه…",
@@ -959,7 +1122,7 @@ const B = {
     invalidCode: "يرجى إدخال رمز التحقّق المكوّن من 6 أرقام.",
     generic: "حدث خطأ. يرجى المحاولة مرة أخرى."
   }
-}, ne = {
+}, ge = {
   common: {
     loading: "सधाइन की जुलातीअ लोड हो रही है…",
     redirecting: "रीडायरेक्ट हो रहا है…",
@@ -1022,62 +1185,52 @@ const B = {
     invalidCode: "कृपया 6 अंकों का सत्यापन कोड दर्ज करें।",
     generic: "कुछ गलत हो गई। कृपया फिर से प्रयास करें।"
   }
-}, re = {
-  en: B,
-  "en-US": B,
-  zh: V,
-  "zh-CN": V,
-  "zh-TW": V,
-  ja: J,
-  "ja-JP": J,
-  ko: Z,
-  "ko-KR": Z,
-  es: F,
-  "es-ES": F,
-  "es-MX": F,
-  pt: Q,
-  "pt-BR": Q,
-  fr: X,
-  "fr-FR": X,
-  de: ee,
-  "de-DE": ee,
-  it: te,
-  "it-IT": te,
-  ru: se,
-  "ru-RU": se,
-  ar: ie,
-  "ar-SA": ie,
-  hi: ne,
-  "hi-IN": ne
+}, pe = {
+  en: V,
+  "en-US": V,
+  zh: j,
+  "zh-CN": j,
+  "zh-TW": j,
+  ja: le,
+  "ja-JP": le,
+  ko: de,
+  "ko-KR": de,
+  es: H,
+  "es-ES": H,
+  "es-MX": H,
+  pt: ce,
+  "pt-BR": ce,
+  fr: ue,
+  "fr-FR": ue,
+  de: he,
+  "de-DE": he,
+  it: me,
+  "it-IT": me,
+  ru: fe,
+  "ru-RU": fe,
+  ar: we,
+  "ar-SA": we,
+  hi: ge,
+  "hi-IN": ge
 };
-function Re() {
+function it() {
   if (typeof navigator > "u")
-    return B;
+    return V;
   const t = navigator.languages ?? [navigator.language];
   for (const e of t) {
-    const s = re[e] ?? re[e.split("-")[0]];
+    const s = pe[e] ?? pe[e.split("-")[0]];
     if (s) return s;
   }
-  return B;
+  return V;
 }
-function N(t, e = "Authentication failed.") {
-  if (t instanceof w)
-    return t;
-  if (typeof t == "object" && t !== null) {
-    const s = t;
-    return new w(s.message || e, {
-      code: s.code,
-      status: s.status,
-      cause: t
-    });
-  }
-  return typeof t == "string" ? new w(t) : new w(e, { cause: t });
+function x(t, e = "Authentication failed.") {
+  return Se(t, e);
 }
-async function C(t) {
+async function B(t) {
   var s, i;
   const e = await t.getSession();
   if (e.error)
-    throw new w(
+    throw new v(
       e.error.message || "Failed to load the current session.",
       {
         code: e.error.code ?? "SESSION_LOOKUP_FAILED",
@@ -1093,7 +1246,13 @@ async function C(t) {
     session: null
   };
 }
-const $e = "data-edgespark-auth", n = "edgespark-auth", z = "es_auth_completion", I = "es_auth_email", oe = "oauth", R = "verify-sign-in", S = "verify-sign-up", ae = 200, q = 2, D = {
+const nt = "data-edgespark-auth", r = "edgespark-auth", W = "es_auth_completion", k = "es_auth_email", G = "oauth", U = "verify-sign-in", S = "verify-sign-up", be = 200, Y = 2, rt = {
+  "&": "&amp;",
+  "<": "&lt;",
+  ">": "&gt;",
+  '"': "&quot;",
+  "'": "&#39;"
+}, K = {
   google: "Google",
   apple: "Apple",
   microsoft: "Microsoft",
@@ -1101,24 +1260,27 @@ const $e = "data-edgespark-auth", n = "edgespark-auth", z = "es_auth_completion"
   gitlab: "GitLab",
   discord: "Discord"
 };
-function $(t) {
+function P(t) {
   return "redirectTo" in t;
 }
-function H(t) {
+function J(t) {
   return "onSuccess" in t && !("redirectTo" in t);
 }
-function x(t) {
+function Z(t) {
   return !t || typeof t != "string" ? !1 : /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(t.trim());
 }
-function Ue(t) {
+function ot(t) {
   return /^\d{6}$/.test(t.trim());
 }
-function Ae(t) {
+function at(t) {
   return t === "email" || t === "name" || t === "password" || t === "confirmPassword" || t === "code" || t === "newPassword";
 }
-class Be {
-  constructor(e, s, i, r, a) {
-    if (this.container = e, this.auth = s, this.options = i, this.loadConfig = r, this.runtimeOptions = a, this.state = {
+function lt(t) {
+  return !!(t.error || t.errorDescription);
+}
+class dt {
+  constructor(e, s, i, n, a) {
+    this.container = e, this.auth = s, this.options = i, this.loadConfig = n, this.runtimeOptions = a, this.state = {
       view: "loading",
       busy: !0,
       busyLabel: void 0,
@@ -1130,56 +1292,74 @@ class Be {
       confirmPassword: "",
       code: "",
       newPassword: ""
-    }, this.destroyed = !1, this.terminalActionInProgress = !1, this.config = null, this.countdownUntil = null, this.countdownTimer = null, this.pendingFocusSnapshot = null, this.focusRestoreTimer = null, this.verificationCompletionAction = null, !(e instanceof HTMLElement))
-      throw new u("authUI.mount(container, options) requires a real HTMLElement container.");
-    this.labels = Ie(Re(), i.labels), this.root = document.createElement("div"), this.root.setAttribute($e, ""), e.innerHTML = "", e.appendChild(this.root), this.render(), this.initialize();
+    }, this.destroyed = !1, this.terminalActionInProgress = !1, this.config = null, this.countdownUntil = null, this.countdownTimer = null, this.pendingFocusSnapshot = null, this.focusRestoreTimer = null, this.verificationCompletionAction = null, this.labels = st(it(), i.labels), this.root = document.createElement("div"), this.root.setAttribute(nt, ""), e.innerHTML = "", e.appendChild(this.root), this.render(), this.initialize();
   }
   destroy() {
     this.destroyed || (this.destroyed = !0, this.clearCountdown(), this.clearFocusRestoreTimer(), this.container.innerHTML = "");
   }
   async initialize() {
+    const e = this.consumeManagedReturnContext();
     try {
-      const e = this.consumeManagedReturnContext(), [s, i] = await Promise.all([
+      const [s, i] = await Promise.allSettled([
         this.loadConfig(),
         this.readMountSession(e)
       ]);
       if (this.destroyed)
         return;
-      if (this.config = s, i.user && i.session) {
-        switch (e.marker) {
-          case oe:
-          case R:
-            await this.completeAuth("sign-in", i);
-            return;
-          case S:
-            await this.completeAuth("sign-up", i);
-            return;
-          default:
-            break;
+      if (i.status === "rejected") {
+        if (e.marker && !lt(e) && P(this.options)) {
+          this.redirectAfterManagedReturnLookupFailure();
+          return;
+        }
+      } else {
+        const a = i.value;
+        if (a.user && a.session) {
+          switch (e.marker) {
+            case G:
+            case U:
+              await this.completeAuth("sign-in", a);
+              return;
+            case S:
+              await this.completeAuth("sign-up", a);
+              return;
+            default:
+              break;
+          }
+          this.handleExistingSessionOnMount();
+          return;
         }
-        this.handleExistingSessionOnMount(i);
-        return;
       }
-      if (this.handleSessionlessManagedReturn(e))
+      if (s.status === "rejected")
+        throw i.status === "rejected" ? i.reason : s.reason;
+      if (this.config = s.value, this.handleSessionlessManagedReturn(e))
         return;
+      if (i.status === "rejected")
+        throw i.reason;
+      const n = i.value;
       this.state.view = "sign-in", this.state.busy = !1, this.state.busyLabel = void 0, this.render();
-    } catch (e) {
-      this.handleError(e, "Failed to load the authentication UI.");
+    } catch (s) {
+      this.handleError(s, "Failed to load the authentication UI.");
     }
   }
+  redirectAfterManagedReturnLookupFailure() {
+    P(this.options) && this.navigateToRedirect();
+  }
+  navigateToRedirect() {
+    P(this.options) && (this.terminalActionInProgress = !0, this.state.busy = !0, this.state.busyLabel = this.labels.common.redirecting, this.state.error = null, this.state.notice = null, this.render(), window.location.assign(tt(this.options.redirectTo).toString()));
+  }
   async readMountSession(e) {
     if (!e.marker)
-      return C(this.auth);
+      return B(this.auth);
     let s = null;
-    for (let i = 0; i <= q; i++) {
+    for (let i = 0; i <= Y; i++) {
       try {
-        const r = await C(this.auth);
-        if (r.user && r.session)
-          return r;
-      } catch (r) {
-        s = r;
+        const n = await B(this.auth);
+        if (n.user && n.session)
+          return n;
+      } catch (n) {
+        s = n;
       }
-      i < q && await new Promise((r) => setTimeout(r, ae));
+      i < Y && await new Promise((n) => setTimeout(n, be));
     }
     if (s)
       throw s;
@@ -1197,8 +1377,8 @@ class Be {
       return;
     }
     this.root.innerHTML = `
-      <div class="${n}__shell">
-        <div class="${n}__card">
+      <div class="${r}__shell">
+        <div class="${r}__card">
           ${this.renderStatus()}
           ${this.renderCurrentView()}
         </div>
@@ -1208,9 +1388,9 @@ class Be {
   renderLoading() {
     const e = this.renderStatus();
     return `
-      <div class="${n}__shell">
-        <div class="${n}__card">
-          ${e || `<div class="${n}__status ${n}__status--info">${this.escape(this.labels.common.loading)}</div>`}
+      <div class="${r}__shell">
+        <div class="${r}__card">
+          ${e || `<div class="${r}__status ${r}__status--info">${this.escape(this.labels.common.loading)}</div>`}
         </div>
       </div>
     `;
@@ -1218,11 +1398,11 @@ class Be {
   renderStatus() {
     const e = [];
     return this.state.error && e.push(
-      `<div class="${n}__status ${n}__status--error">${this.escape(this.state.error)}</div>`
+      `<div class="${r}__status ${r}__status--error">${this.escape(this.state.error)}</div>`
     ), this.state.notice && e.push(
-      `<div class="${n}__status ${n}__status--info">${this.escape(this.state.notice)}</div>`
+      `<div class="${r}__status ${r}__status--info">${this.escape(this.state.notice)}</div>`
     ), this.state.busy && this.state.busyLabel && e.push(
-      `<div class="${n}__status ${n}__status--muted">${this.escape(this.state.busyLabel)}</div>`
+      `<div class="${r}__status ${r}__status--muted">${this.escape(this.state.busyLabel)}</div>`
     ), e.join("");
   }
   renderCurrentView() {
@@ -1239,38 +1419,38 @@ class Be {
         return this.renderResetPasswordView();
       case "loading":
       default:
-        return `<p class="${n}__copy">${this.escape(this.labels.common.loading)}</p>`;
+        return `<p class="${r}__copy">${this.escape(this.labels.common.loading)}</p>`;
     }
   }
   renderSignInView() {
-    var i, r;
+    var i, n;
     const e = this.renderOAuthProviders(), s = ((i = this.config) == null ? void 0 : i.emailPasswordEnabled) ?? !0;
     return `
-      <section class="${n}__section">
-        <header class="${n}__header">
-          <h1 class="${n}__title">${this.escape(this.labels.signIn.title)}</h1>
-          <p class="${n}__copy">${this.escape(this.labels.signIn.subtitle)}</p>
+      <section class="${r}__section">
+        <header class="${r}__header">
+          <h1 class="${r}__title">${this.escape(this.labels.signIn.title)}</h1>
+          <p class="${r}__copy">${this.escape(this.labels.signIn.subtitle)}</p>
         </header>
         ${e}
-        ${e && s ? `<div class="${n}__divider"><span>${this.escape(this.labels.oauth.dividerText)}</span></div>` : ""}
+        ${e && s ? `<div class="${r}__divider"><span>${this.escape(this.labels.oauth.dividerText)}</span></div>` : ""}
         ${s ? `
-          <form class="${n}__form" data-view="sign-in" novalidate>
+          <form class="${r}__form" data-view="sign-in" novalidate>
             ${this.renderInput("email", this.labels.signIn.emailLabel, "email", this.state.email, "email")}
             ${this.renderInput("password", this.labels.signIn.passwordLabel, "password", this.state.password, "current-password")}
-            <button class="${n}__button ${n}__button--primary" type="submit" ${this.state.busy ? "disabled" : ""}>
+            <button class="${r}__button ${r}__button--primary" type="submit" ${this.state.busy ? "disabled" : ""}>
               ${this.escape(this.labels.signIn.submitButton)}
             </button>
           </form>
-          <div class="${n}__actions">
+          <div class="${r}__actions">
             ${this.canUsePasswordResetEmailOtp() ? `
-              <button class="${n}__link" type="button" data-action="forgot-password" ${this.state.busy ? "disabled" : ""}>
+              <button class="${r}__link" type="button" data-action="forgot-password" ${this.state.busy ? "disabled" : ""}>
                 ${this.escape(this.labels.signIn.forgotPassword)}
               </button>
             ` : ""}
-            ${(r = this.config) != null && r.disableSignUp ? "" : `
-              <p class="${n}__meta">
+            ${(n = this.config) != null && n.disableSignUp ? "" : `
+              <p class="${r}__meta">
                 ${this.escape(this.labels.signIn.signUpPrompt)}
-                <button class="${n}__link" type="button" data-action="switch-sign-up" ${this.state.busy ? "disabled" : ""}>
+                <button class="${r}__link" type="button" data-action="switch-sign-up" ${this.state.busy ? "disabled" : ""}>
                   ${this.escape(this.labels.signIn.switchToSignUp)}
                 </button>
               </p>
@@ -1283,25 +1463,25 @@ class Be {
   renderSignUpView() {
     const e = this.renderOAuthProviders();
     return `
-      <section class="${n}__section">
-        <header class="${n}__header">
-          <h1 class="${n}__title">${this.escape(this.labels.signUp.title)}</h1>
-          <p class="${n}__copy">${this.escape(this.labels.signUp.subtitle)}</p>
+      <section class="${r}__section">
+        <header class="${r}__header">
+          <h1 class="${r}__title">${this.escape(this.labels.signUp.title)}</h1>
+          <p class="${r}__copy">${this.escape(this.labels.signUp.subtitle)}</p>
         </header>
         ${e}
-        ${e ? `<div class="${n}__divider"><span>${this.escape(this.labels.oauth.dividerText)}</span></div>` : ""}
-        <form class="${n}__form" data-view="sign-up" novalidate>
+        ${e ? `<div class="${r}__divider"><span>${this.escape(this.labels.oauth.dividerText)}</span></div>` : ""}
+        <form class="${r}__form" data-view="sign-up" novalidate>
           ${this.renderInput("name", this.labels.signUp.nameLabel, "text", this.state.name, "name")}
           ${this.renderInput("email", this.labels.signUp.emailLabel, "email", this.state.email, "email")}
           ${this.renderInput("password", this.labels.signUp.passwordLabel, "password", this.state.password, "new-password")}
           ${this.renderInput("confirmPassword", this.labels.signUp.confirmPasswordLabel, "password", this.state.confirmPassword, "new-password")}
-          <button class="${n}__button ${n}__button--primary" type="submit" ${this.state.busy ? "disabled" : ""}>
+          <button class="${r}__button ${r}__button--primary" type="submit" ${this.state.busy ? "disabled" : ""}>
             ${this.escape(this.labels.signUp.submitButton)}
           </button>
         </form>
-        <p class="${n}__meta">
+        <p class="${r}__meta">
           ${this.escape(this.labels.signUp.signInPrompt)}
-          <button class="${n}__link" type="button" data-action="switch-sign-in" ${this.state.busy ? "disabled" : ""}>
+          <button class="${r}__link" type="button" data-action="switch-sign-in" ${this.state.busy ? "disabled" : ""}>
             ${this.escape(this.labels.signUp.switchToSignIn)}
           </button>
         </p>
@@ -1314,20 +1494,20 @@ class Be {
       this.labels.verifyEmail.resendCountdown
     );
     return `
-      <section class="${n}__section">
-        <header class="${n}__header">
-          <h1 class="${n}__title">${this.escape(this.labels.verifyEmail.title)}</h1>
-          <p class="${n}__copy">${this.escape(this.labels.verifyEmail.subtitle)}</p>
+      <section class="${r}__section">
+        <header class="${r}__header">
+          <h1 class="${r}__title">${this.escape(this.labels.verifyEmail.title)}</h1>
+          <p class="${r}__copy">${this.escape(this.labels.verifyEmail.subtitle)}</p>
         </header>
-        <p class="${n}__copy">
+        <p class="${r}__copy">
           <strong>${this.escape(this.labels.verifyEmail.sentToLabel)}:</strong>
           ${this.escape(this.state.email)}
         </p>
-        <div class="${n}__stack">
-          <button class="${n}__button ${n}__button--secondary" type="button" data-action="resend-verification" ${this.state.busy || this.isCountdownActive() ? "disabled" : ""}>
+        <div class="${r}__stack">
+          <button class="${r}__button ${r}__button--secondary" type="button" data-action="resend-verification" ${this.state.busy || this.isCountdownActive() ? "disabled" : ""}>
             ${this.escape(e)}
           </button>
-          <button class="${n}__link" type="button" data-action="use-different-email" ${this.state.busy ? "disabled" : ""}>
+          <button class="${r}__link" type="button" data-action="use-different-email" ${this.state.busy ? "disabled" : ""}>
             ${this.escape(this.labels.verifyEmail.changeEmailButton)}
           </button>
         </div>
@@ -1336,18 +1516,18 @@ class Be {
   }
   renderForgotPasswordView() {
     return `
-      <section class="${n}__section">
-        <header class="${n}__header">
-          <h1 class="${n}__title">${this.escape(this.labels.forgotPassword.title)}</h1>
-          <p class="${n}__copy">${this.escape(this.labels.forgotPassword.subtitle)}</p>
+      <section class="${r}__section">
+        <header class="${r}__header">
+          <h1 class="${r}__title">${this.escape(this.labels.forgotPassword.title)}</h1>
+          <p class="${r}__copy">${this.escape(this.labels.forgotPassword.subtitle)}</p>
         </header>
-        <form class="${n}__form" data-view="forgot-password" novalidate>
+        <form class="${r}__form" data-view="forgot-password" novalidate>
           ${this.renderInput("email", this.labels.forgotPassword.emailLabel, "email", this.state.email, "email")}
-          <button class="${n}__button ${n}__button--primary" type="submit" ${this.state.busy ? "disabled" : ""}>
+          <button class="${r}__button ${r}__button--primary" type="submit" ${this.state.busy ? "disabled" : ""}>
             ${this.escape(this.labels.forgotPassword.submitButton)}
           </button>
         </form>
-        <button class="${n}__link" type="button" data-action="switch-sign-in" ${this.state.busy ? "disabled" : ""}>
+        <button class="${r}__link" type="button" data-action="switch-sign-in" ${this.state.busy ? "disabled" : ""}>
           ${this.escape(this.labels.common.backToSignIn)}
         </button>
       </section>
@@ -1359,23 +1539,23 @@ class Be {
       this.labels.resetPassword.resendCountdown
     );
     return `
-      <section class="${n}__section">
-        <header class="${n}__header">
-          <h1 class="${n}__title">${this.escape(this.labels.resetPassword.title)}</h1>
-          <p class="${n}__copy">${this.escape(this.labels.resetPassword.subtitle)}</p>
+      <section class="${r}__section">
+        <header class="${r}__header">
+          <h1 class="${r}__title">${this.escape(this.labels.resetPassword.title)}</h1>
+          <p class="${r}__copy">${this.escape(this.labels.resetPassword.subtitle)}</p>
         </header>
-        <form class="${n}__form" data-view="reset-password" novalidate>
+        <form class="${r}__form" data-view="reset-password" novalidate>
           ${this.renderInput("code", this.labels.resetPassword.codeLabel, "text", this.state.code, "one-time-code")}
           ${this.renderInput("newPassword", this.labels.resetPassword.newPasswordLabel, "password", this.state.newPassword, "new-password")}
           ${this.renderInput("confirmPassword", this.labels.resetPassword.confirmPasswordLabel, "password", this.state.confirmPassword, "new-password")}
-          <button class="${n}__button ${n}__button--primary" type="submit" ${this.state.busy ? "disabled" : ""}>
+          <button class="${r}__button ${r}__button--primary" type="submit" ${this.state.busy ? "disabled" : ""}>
             ${this.escape(this.labels.resetPassword.submitButton)}
           </button>
         </form>
-        <button class="${n}__button ${n}__button--secondary" type="button" data-action="resend-reset-code" ${this.state.busy || this.isCountdownActive() ? "disabled" : ""}>
+        <button class="${r}__button ${r}__button--secondary" type="button" data-action="resend-reset-code" ${this.state.busy || this.isCountdownActive() ? "disabled" : ""}>
           ${this.escape(e)}
         </button>
-        <button class="${n}__link" type="button" data-action="switch-sign-in" ${this.state.busy ? "disabled" : ""}>
+        <button class="${r}__link" type="button" data-action="switch-sign-in" ${this.state.busy ? "disabled" : ""}>
           ${this.escape(this.labels.common.backToSignIn)}
         </button>
       </section>
@@ -1385,24 +1565,24 @@ class Be {
     var s;
     const e = ((s = this.config) == null ? void 0 : s.oauthProviders) ?? [];
     return e.length === 0 ? "" : `
-      <div class="${n}__stack">
+      <div class="${r}__stack">
         ${e.map((i) => `
-            <button class="${n}__button ${n}__button--secondary" type="button" data-action="oauth" data-provider="${i}" ${this.state.busy ? "disabled" : ""}>
-              ${this.escape(`${this.labels.oauth.continueWith} ${D[i]}`)}
+            <button class="${r}__button ${r}__button--secondary" type="button" data-action="oauth" data-provider="${i}" ${this.state.busy ? "disabled" : ""}>
+              ${this.escape(`${this.labels.oauth.continueWith} ${K[i]}`)}
             </button>
           `).join("")}
       </div>
     `;
   }
-  renderInput(e, s, i, r, a) {
+  renderInput(e, s, i, n, a) {
     return `
-      <label class="${n}__field">
-        <span class="${n}__label">${this.escape(s)}</span>
+      <label class="${r}__field">
+        <span class="${r}__label">${this.escape(s)}</span>
         <input
-          class="${n}__input"
+          class="${r}__input"
           name="${this.escape(e)}"
           type="${this.escape(i)}"
-          value="${this.escape(r)}"
+          value="${this.escape(n)}"
           autocomplete="${this.escape(a)}"
           ${this.state.busy ? "disabled" : ""}
         />
@@ -1410,20 +1590,20 @@ class Be {
     `;
   }
   bindDOM() {
-    this.root.querySelectorAll("form[data-view]").forEach((r) => {
-      r.addEventListener("submit", (a) => {
+    this.root.querySelectorAll("form[data-view]").forEach((n) => {
+      n.addEventListener("submit", (a) => {
         a.preventDefault();
-        const c = r.dataset.view;
-        c === "sign-in" && this.handleSignIn(), c === "sign-up" && this.handleSignUp(), c === "forgot-password" && this.handleForgotPassword(), c === "reset-password" && this.handleResetPassword();
+        const h = n.dataset.view;
+        h === "sign-in" && this.handleSignIn(), h === "sign-up" && this.handleSignUp(), h === "forgot-password" && this.handleForgotPassword(), h === "reset-password" && this.handleResetPassword();
       });
-    }), this.root.querySelectorAll("input[name]").forEach((r) => {
-      r.addEventListener("input", () => {
-        Ae(r.name) && (this.state[r.name] = r.value);
+    }), this.root.querySelectorAll("input[name]").forEach((n) => {
+      n.addEventListener("input", () => {
+        at(n.name) && (this.state[n.name] = n.value);
       });
-    }), this.root.querySelectorAll("[data-action]").forEach((r) => {
-      r.addEventListener("click", () => {
-        const a = r.dataset.action;
-        a === "switch-sign-up" && this.switchView("sign-up"), a === "switch-sign-in" && this.switchView("sign-in"), a === "forgot-password" && this.switchView("forgot-password"), a === "resend-verification" && this.resendVerificationEmail(), a === "use-different-email" && this.switchView(this.verificationCompletionAction === "sign-in" ? "sign-in" : "sign-up"), a === "resend-reset-code" && this.resendResetCode(), a === "oauth" && this.handleOAuthSignIn(r.dataset.provider);
+    }), this.root.querySelectorAll("[data-action]").forEach((n) => {
+      n.addEventListener("click", () => {
+        const a = n.dataset.action;
+        a === "switch-sign-up" && this.switchView("sign-up"), a === "switch-sign-in" && this.switchView("sign-in"), a === "forgot-password" && this.switchView("forgot-password"), a === "resend-verification" && this.resendVerificationEmail(), a === "use-different-email" && this.switchView(this.verificationCompletionAction === "sign-in" ? "sign-in" : "sign-up"), a === "resend-reset-code" && this.resendResetCode(), a === "oauth" && this.handleOAuthSignIn(n.dataset.provider);
       });
     });
   }
@@ -1431,7 +1611,7 @@ class Be {
     this.clearCountdown(), e !== "verify-email" && (this.verificationCompletionAction = null), this.state.view = e, this.state.error = null, this.state.notice = null, this.state.busy = !1, this.state.busyLabel = void 0, this.terminalActionInProgress = !1, this.render();
   }
   async handleSignIn() {
-    if (!x(this.state.email)) {
+    if (!Z(this.state.email)) {
       this.failValidation(this.labels.errors.invalidEmail);
       return;
     }
@@ -1443,7 +1623,7 @@ class Be {
       const e = await this.auth.signIn.email({
         email: this.state.email.trim(),
         password: this.state.password,
-        callbackURL: this.getManagedReturnURL(R, this.state.email.trim())
+        callbackURL: this.getManagedReturnURL(U, this.state.email.trim())
       });
       if (e.error)
         throw e.error;
@@ -1456,7 +1636,7 @@ class Be {
       this.failValidation(this.labels.errors.requiredField);
       return;
     }
-    if (!x(this.state.email)) {
+    if (!Z(this.state.email)) {
       this.failValidation(this.labels.errors.invalidEmail);
       return;
     }
@@ -1475,7 +1655,7 @@ class Be {
       return;
     }
     await this.runAction("Creating account…", async () => {
-      var r;
+      var n;
       const i = await this.auth.signUp.email({
         name: this.state.name.trim(),
         email: this.state.email.trim(),
@@ -1484,7 +1664,7 @@ class Be {
       });
       if (i.error)
         throw i.error;
-      if ((r = this.config) != null && r.requireEmailVerification) {
+      if ((n = this.config) != null && n.requireEmailVerification) {
         this.verificationCompletionAction = "sign-up", this.state.view = "verify-email", this.state.notice = "Check your inbox to verify your email address.", this.startCountdown();
         return;
       }
@@ -1492,7 +1672,7 @@ class Be {
     });
   }
   async handleOAuthSignIn(e) {
-    await this.runAction(`Redirecting to ${D[e]}…`, async () => {
+    await this.runAction(`Redirecting to ${K[e]}…`, async () => {
       const s = await this.auth.signIn.social({
         provider: e,
         callbackURL: this.getManagedReturnURL("oauth"),
@@ -1502,18 +1682,18 @@ class Be {
         throw s.error;
       const i = this.extractRedirectURL(s.data);
       if (!i)
-        throw new u(`OAuth sign-in did not return a redirect URL for provider "${e}".`);
-      this.terminalActionInProgress = !0, this.state.busy = !0, this.state.busyLabel = `Opening ${D[e]}…`, this.state.error = null, this.state.notice = null, this.render(), window.location.assign(i);
+        throw new f(`OAuth sign-in did not return a redirect URL for provider "${e}".`);
+      this.terminalActionInProgress = !0, this.state.busy = !0, this.state.busyLabel = `Opening ${K[e]}…`, this.state.error = null, this.state.notice = null, this.render(), window.location.assign(i);
     });
   }
   async handleForgotPassword() {
     if (!this.canUsePasswordResetEmailOtp()) {
       this.handleError(
-        new u("Password reset via email OTP is not enabled for this project.")
+        new f("Password reset via email OTP is not enabled for this project.")
       );
       return;
     }
-    if (!x(this.state.email)) {
+    if (!Z(this.state.email)) {
       this.failValidation(this.labels.errors.invalidEmail);
       return;
     }
@@ -1533,11 +1713,11 @@ class Be {
     var e, s;
     if (!this.canUsePasswordResetEmailOtp()) {
       this.handleError(
-        new u("Password reset via email OTP is not enabled for this project.")
+        new f("Password reset via email OTP is not enabled for this project.")
       );
       return;
     }
-    if (!Ue(this.state.code)) {
+    if (!ot(this.state.code)) {
       this.failValidation(this.labels.errors.invalidCode);
       return;
     }
@@ -1574,7 +1754,7 @@ class Be {
       const s = await this.auth.sendVerificationEmail({
         email: this.state.email.trim(),
         callbackURL: this.getManagedReturnURL(
-          this.verificationCompletionAction === "sign-up" ? S : R,
+          this.verificationCompletionAction === "sign-up" ? S : U,
           this.state.email.trim()
         )
       });
@@ -1587,47 +1767,53 @@ class Be {
     const i = await this.retryAuthCompletionDataIfNeeded(
       s ?? await this.resolveAuthCompletionData()
     );
+    if (this.destroyed)
+      return;
     if (!i.user || !i.session) {
-      if (i.lookupError && $(this.options)) {
-        this.terminalActionInProgress = !0, this.state.busy = !0, this.state.busyLabel = this.labels.common.redirecting, this.state.error = null, this.state.notice = null, this.render(), window.location.assign(O(this.options.redirectTo).toString());
+      if (this.destroyed)
+        return;
+      if (i.lookupError && P(this.options)) {
+        this.navigateToRedirect();
         return;
       }
       if (e === "sign-in")
-        throw i.lookupError ?? new de(
+        throw i.lookupError ?? new ye(
           "Managed sign-in completed without an authenticated session."
         );
       this.state.view = "sign-in", this.state.password = "", this.state.confirmPassword = "", this.state.error = null, this.state.busy = !1, this.state.busyLabel = void 0, this.state.notice = "Account created. Sign in to continue.", this.render();
       return;
     }
-    const r = {
+    const n = {
       action: e,
       user: i.user,
       session: i.session
     };
-    if (await this.syncPublicSessionBestEffort(), $(this.options)) {
-      this.terminalActionInProgress = !0, this.invokeRedirectModeSuccessHook(r), this.state.busy = !0, this.state.busyLabel = this.labels.common.redirecting, this.state.error = null, this.state.notice = null, this.render(), window.location.assign(O(this.options.redirectTo).toString());
-      return;
-    }
-    if (H(this.options)) {
-      this.destroy(), this.options.onSuccess(r);
-      return;
+    if (await this.syncPublicSessionBestEffort(), !this.destroyed) {
+      if (P(this.options)) {
+        this.invokeRedirectModeSuccessHook(n), this.navigateToRedirect();
+        return;
+      }
+      if (J(this.options)) {
+        this.options.onSuccess(n), this.terminalActionInProgress = !0;
+        return;
+      }
     }
   }
   async retryAuthCompletionDataIfNeeded(e) {
     if (e.session)
       return e;
     let s = e.lookupError;
-    for (let i = 0; i < q; i++) {
-      await new Promise((r) => setTimeout(r, ae));
+    for (let i = 0; i < Y; i++) {
+      await new Promise((n) => setTimeout(n, be));
       try {
-        const r = await C(this.auth);
-        if (r.user && r.session)
+        const n = await B(this.auth);
+        if (n.user && n.session)
           return {
-            user: r.user,
-            session: r.session
+            user: n.user,
+            session: n.session
           };
-      } catch (r) {
-        s = r;
+      } catch (n) {
+        s = n;
       }
     }
     return {
@@ -1644,7 +1830,7 @@ class Be {
   }
   async resolveAuthCompletionData(e) {
     try {
-      const s = await C(this.auth), i = this.extractUser(e);
+      const s = await B(this.auth), i = this.extractUser(e);
       return {
         user: s.user ?? i,
         session: s.session
@@ -1663,19 +1849,21 @@ class Be {
       user: null,
       session: null
     };
-    if (H(this.options)) {
-      this.destroy(), this.options.onSuccess(e);
-      return;
+    if (await this.syncPublicSessionBestEffort(), !this.destroyed) {
+      if (J(this.options)) {
+        this.clearCountdown(), this.options.onSuccess(e), this.terminalActionInProgress = !0;
+        return;
+      }
+      this.invokeRedirectModeSuccessHook(e), this.clearCountdown(), this.state.view = "sign-in", this.state.password = "", this.state.confirmPassword = "", this.state.newPassword = "", this.state.code = "", this.state.busy = !1, this.state.busyLabel = void 0, this.state.error = null, this.state.notice = "Password updated. Sign in with your new password.", this.render();
     }
-    this.invokeRedirectModeSuccessHook(e), this.clearCountdown(), this.state.view = "sign-in", this.state.password = "", this.state.confirmPassword = "", this.state.newPassword = "", this.state.code = "", this.state.busy = !1, this.state.busyLabel = void 0, this.state.error = null, this.state.notice = "Password updated. Sign in with your new password.", this.render();
   }
-  handleExistingSessionOnMount(e) {
-    if ($(this.options)) {
-      this.terminalActionInProgress = !0, this.state.busy = !0, this.state.busyLabel = this.labels.common.redirecting, this.state.error = null, this.state.notice = null, this.render(), window.location.assign(O(this.options.redirectTo).toString());
+  handleExistingSessionOnMount() {
+    if (P(this.options)) {
+      this.navigateToRedirect();
       return;
     }
-    if (H(this.options))
-      throw this.state.view = "sign-in", this.state.busy = !1, this.state.busyLabel = void 0, this.state.notice = null, new u(
+    if (J(this.options))
+      throw this.state.view = "sign-in", this.state.busy = !1, this.state.busyLabel = void 0, this.state.notice = null, new f(
         "authUI.mount(container, { onSuccess }) cannot run while a session already exists. Check es.auth.getSession() before mounting controlled auth UI."
       );
   }
@@ -1692,18 +1880,18 @@ class Be {
     !this.destroyed && !this.terminalActionInProgress && (this.state.busy = !1, this.state.busyLabel = void 0, this.render());
   }
   maybeHandleVerificationRequired(e) {
-    return N(e).code !== "EMAIL_NOT_VERIFIED" ? !1 : (this.verificationCompletionAction = "sign-in", this.state.view = "verify-email", this.state.busy = !1, this.state.busyLabel = void 0, this.state.error = null, this.state.notice = `Verify your email to finish signing in as ${this.state.email.trim()}.`, this.render(), this.sendVerificationEmail(!0), !0);
+    return x(e).code !== "EMAIL_NOT_VERIFIED" ? !1 : (this.verificationCompletionAction = "sign-in", this.state.view = "verify-email", this.state.busy = !1, this.state.busyLabel = void 0, this.state.error = null, this.state.notice = `Verify your email to finish signing in as ${this.state.email.trim()}.`, this.render(), this.sendVerificationEmail(!0), !0);
   }
   handleVerificationEmailSent(e, s) {
     this.state.notice = s ? `We sent another verification email to ${e}.` : `We sent a verification email to ${e}.`, this.startCountdown();
   }
   invokeRedirectModeSuccessHook(e) {
     var s, i;
-    if (!(!$(this.options) || !this.options.onSuccess))
+    if (!(!P(this.options) || !this.options.onSuccess))
       try {
         this.options.onSuccess(e);
-      } catch (r) {
-        const a = N(r, "Post-auth callback failed.");
+      } catch (n) {
+        const a = x(n, "Post-auth callback failed.");
         try {
           (i = (s = this.options).onError) == null || i.call(s, a);
         } catch {
@@ -1711,9 +1899,9 @@ class Be {
       }
   }
   handleError(e, s) {
-    var r, a;
-    const i = N(e, s);
-    this.state.busy = !1, this.state.busyLabel = void 0, this.state.error = i.message, this.render(), (a = (r = this.options).onError) == null || a.call(r, i);
+    var n, a;
+    const i = x(e, s);
+    this.state.busy = !1, this.state.busyLabel = void 0, this.state.error = i.message, this.render(), (a = (n = this.options).onError) == null || a.call(n, i);
   }
   failValidation(e) {
     this.state.error = e, this.state.notice = null, this.render();
@@ -1722,15 +1910,15 @@ class Be {
     if (!e)
       return window.location.href;
     const i = new URL(window.location.href);
-    return i.searchParams.set(z, e), s ? i.searchParams.set(I, s) : i.searchParams.delete(I), i.toString();
+    return i.searchParams.set(W, e), s ? i.searchParams.set(k, s) : i.searchParams.delete(k), i.toString();
   }
   consumeManagedReturnContext() {
-    const e = new URL(window.location.href), s = e.searchParams.get(z), i = e.searchParams.get(I), r = s ? e.searchParams.get("error") : null, a = s ? e.searchParams.get("error_description") : null;
-    return (s || i) && (e.searchParams.delete(z), e.searchParams.delete(I), s && (e.searchParams.delete("error"), e.searchParams.delete("error_description")), window.history.replaceState(null, "", e.toString())), {
-      marker: s,
-      email: i,
-      error: r,
-      errorDescription: a
+    const e = new URL(window.location.href), s = e.searchParams.get(W), i = s === G || s === U || s === S ? s : null, n = e.searchParams.get(k), a = i ? e.searchParams.get("error") : null, h = i ? e.searchParams.get("error_description") : null;
+    return (i || n) && (e.searchParams.delete(W), e.searchParams.delete(k), i && (e.searchParams.delete("error"), e.searchParams.delete("error_description")), window.history.replaceState(null, "", e.toString())), {
+      marker: i,
+      email: n,
+      error: a,
+      errorDescription: h
     };
   }
   startCountdown(e = 60) {
@@ -1764,8 +1952,8 @@ class Be {
           try {
             i.setSelectionRange(e.selectionStart, e.selectionEnd);
           } catch {
-            const r = i.value.length;
-            i.setSelectionRange(r, r);
+            const n = i.value.length;
+            i.setSelectionRange(n, n);
           }
         this.pendingFocusSnapshot = null;
       }
@@ -1794,10 +1982,10 @@ class Be {
     return !!((e = this.config) != null && e.passwordResetEmailOtpEnabled);
   }
   handleSessionlessManagedReturn(e) {
-    return e.email && (this.state.email = e.email), e.marker === S && !e.error ? (this.verificationCompletionAction = null, this.clearCountdown(), this.state.view = "sign-in", this.state.password = "", this.state.confirmPassword = "", this.state.error = null, this.state.busy = !1, this.state.busyLabel = void 0, this.state.notice = "Account created. Sign in to continue.", this.render(), !0) : e.marker === R || e.marker === S ? (this.verificationCompletionAction = e.marker === S ? "sign-up" : "sign-in", this.state.view = "verify-email", this.state.busy = !1, this.state.busyLabel = void 0, this.state.notice = null, e.error || e.errorDescription ? this.handleError(new w(
+    return e.email && (this.state.email = e.email), e.marker === S && !e.error ? (this.verificationCompletionAction = null, this.clearCountdown(), this.state.view = "sign-in", this.state.password = "", this.state.confirmPassword = "", this.state.error = null, this.state.busy = !1, this.state.busyLabel = void 0, this.state.notice = "Account created. Sign in to continue.", this.render(), !0) : e.marker === U || e.marker === S ? (this.verificationCompletionAction = e.marker === S ? "sign-up" : "sign-in", this.state.view = "verify-email", this.state.busy = !1, this.state.busyLabel = void 0, this.state.notice = null, e.error || e.errorDescription ? this.handleError(new v(
       e.errorDescription ?? "Verification failed. Request a new verification email and try again.",
       { code: e.error ?? "VERIFY_EMAIL_ERROR" }
-    )) : this.render(), !0) : e.marker === oe && (e.error || e.errorDescription) ? (this.state.view = "sign-in", this.state.busy = !1, this.state.busyLabel = void 0, this.state.notice = null, this.handleError(new w(
+    )) : this.render(), !0) : e.marker === G && (e.error || e.errorDescription) ? (this.state.view = "sign-in", this.state.busy = !1, this.state.busyLabel = void 0, this.state.notice = null, this.handleError(new v(
       e.errorDescription ?? "OAuth sign-in failed.",
       { code: e.error ?? "OAUTH_ERROR" }
     )), !0) : !1;
@@ -1813,106 +2001,106 @@ class Be {
     return i <= 0 ? e : s.replace("{seconds}", String(i));
   }
   escape(e) {
-    return e.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;");
+    return e.replace(/[&<>"']/g, (s) => rt[s]);
   }
 }
-function ke(t) {
+function ct(t) {
   return "data" in t && t.data ? t.data : t;
 }
-const Me = [
+const ut = [
   { id: "google", key: "providerGoogle" },
   { id: "apple", key: "providerApple" },
   { id: "microsoft", key: "providerMicrosoft" },
   { id: "github", key: "providerGithub" },
   { id: "gitlab", key: "providerGitlab" },
   { id: "discord", key: "providerDiscord" }
-], le = 2, Oe = 500;
-async function Ve() {
-  const t = `${window.location.origin}${ue}/config`;
+], ve = 2, ht = 500;
+async function mt() {
+  const t = `${window.location.origin}${Ee}/config`;
   let e;
-  for (let s = 0; s <= le; s++)
+  for (let s = 0; s <= ve; s++)
     try {
       const i = await fetch(t, { method: "GET", credentials: "include" });
       if (!i.ok)
-        throw new u(`Failed to load auth config: HTTP ${i.status}`);
-      const r = await i.json();
-      return Ne(ke(r));
+        throw new f(`Failed to load auth config: HTTP ${i.status}`);
+      const n = await i.json();
+      return wt(ct(n));
     } catch (i) {
-      e = i, s < le && await new Promise((r) => setTimeout(r, Oe));
+      e = i, s < ve && await new Promise((n) => setTimeout(n, ht));
     }
   throw e;
 }
-let U = null;
-async function Fe() {
-  return U || (U = Ve().catch((t) => {
-    throw U = null, t;
-  })), U;
+let M = null;
+async function ft() {
+  return M || (M = mt().catch((t) => {
+    throw M = null, t;
+  })), M;
 }
-function Ne(t) {
-  var s, i, r, a, c, p, T;
-  const e = Me.filter(({ key: P }) => {
-    const b = t[P];
-    return typeof b == "object" && b !== null && "enabled" in b && !!b.enabled;
-  }).map(({ id: P }) => P);
+function wt(t) {
+  var s, i, n, a, h, w, E;
+  const e = ut.filter(({ key: L }) => {
+    const _ = t[L];
+    return typeof _ == "object" && _ !== null && "enabled" in _ && !!_.enabled;
+  }).map(({ id: L }) => L);
   return {
     disableSignUp: !!t.disableSignUp,
     emailPasswordEnabled: !!((s = t.providerEmailPassword) != null && s.enabled),
-    minPasswordLength: ((r = (i = t.providerEmailPassword) == null ? void 0 : i.config) == null ? void 0 : r.minPasswordLength) ?? 8,
-    requireEmailVerification: !!((c = (a = t.providerEmailPassword) == null ? void 0 : a.config) != null && c.requireEmailVerification),
-    passwordResetEmailOtpEnabled: !!((T = (p = t.providerEmailPassword) == null ? void 0 : p.config) != null && T.requirePasswordResetEmailVerification),
+    minPasswordLength: ((n = (i = t.providerEmailPassword) == null ? void 0 : i.config) == null ? void 0 : n.minPasswordLength) ?? 8,
+    requireEmailVerification: !!((h = (a = t.providerEmailPassword) == null ? void 0 : a.config) != null && h.requireEmailVerification),
+    passwordResetEmailOtpEnabled: !!((E = (w = t.providerEmailPassword) == null ? void 0 : w.config) != null && E.requirePasswordResetEmailVerification),
     oauthProviders: e
   };
 }
-const A = /* @__PURE__ */ new WeakMap();
-function ze(t) {
+const O = /* @__PURE__ */ new WeakMap();
+function gt(t) {
   if (!t)
-    throw new u(
+    throw new f(
       "authUI.mount(container, options) requires either { redirectTo } or { onSuccess }."
     );
   const e = "redirectTo" in t, s = "onSuccess" in t && typeof t.onSuccess == "function";
   if (!e && !s)
-    throw new u(
+    throw new f(
       "authUI.mount(container, options) requires either { redirectTo } or { onSuccess }."
     );
   if ("redirectTo" in t) {
     const i = t.redirectTo;
     if (!(typeof i == "string" || i instanceof URL))
-      throw new u(
+      throw new f(
         "authUI.mount(container, options) expected redirectTo to be a string or URL."
       );
   }
   if ("onSuccess" in t && t.onSuccess !== void 0 && typeof t.onSuccess != "function")
-    throw new u(
+    throw new f(
       "authUI.mount(container, options) expected onSuccess to be a function."
     );
   if ("onError" in t && t.onError !== void 0 && typeof t.onError != "function")
-    throw new u(
+    throw new f(
       "authUI.mount(container, options) expected onError to be a function."
     );
 }
-function qe(t) {
+function pt(t) {
   if (!(t instanceof HTMLElement))
-    throw new u("authUI.mount(container, options) requires a real HTMLElement container.");
+    throw new f("authUI.mount(container, options) requires a real HTMLElement container.");
 }
-function De(t, e) {
+function bt(t, e) {
   return {
     mount(s, i) {
-      var p;
-      ze(i), qe(s), (p = A.get(s)) == null || p.destroy();
-      const r = new Be(s, t, i, Fe, e), a = r.destroy.bind(r), c = {
+      var w;
+      gt(i), pt(s), (w = O.get(s)) == null || w.destroy();
+      const n = new dt(s, t, i, ft, e), a = n.destroy.bind(n), h = {
         destroy() {
-          a(), A.get(s) === c && A.delete(s);
+          a(), O.get(s) === h && O.delete(s);
         }
       };
-      return A.set(s, c), c;
+      return O.set(s, h), h;
     }
   };
 }
-function xe() {
-  ce();
-  const t = Te(), e = Ce(), s = ye(), i = De(e, {
+function yt() {
+  Pe();
+  const t = Xe(), e = et(), s = Me(), i = bt(e, {
     syncPublicSession: async () => {
-      await _e(t);
+      await Qe(t);
     }
   });
   return {
@@ -1922,22 +2110,22 @@ function xe() {
   };
 }
 export {
-  w as EdgeSparkAuthError,
-  u as EdgeSparkConfigError,
-  j as EdgeSparkError,
-  de as EdgeSparkRuntimeError,
-  ie as ar,
-  xe as createEdgeSpark,
-  ee as de,
-  Re as detectLocale,
-  B as enUS,
-  F as es,
-  X as fr,
-  ne as hi,
-  te as it,
-  J as ja,
-  Z as ko,
-  Q as ptBR,
-  se as ru,
-  V as zhCN
+  v as EdgeSparkAuthError,
+  f as EdgeSparkConfigError,
+  ee as EdgeSparkError,
+  ye as EdgeSparkRuntimeError,
+  we as ar,
+  yt as createEdgeSpark,
+  he as de,
+  it as detectLocale,
+  V as enUS,
+  H as es,
+  ue as fr,
+  ge as hi,
+  me as it,
+  le as ja,
+  de as ko,
+  ce as ptBR,
+  fe as ru,
+  j as zhCN
 };