@edgespark/web 0.0.1-beta.6 → 0.0.1-beta.7

package/dist/index.es.js

@@ -4,24 +4,37 @@ class ee extends Error {
     super(s), this.name = "EdgeSparkError", this.code = e;
   }
 }
-class m extends ee {
+class f extends ee {
   constructor(e) {
     super("CONFIG_ERROR", e), this.name = "EdgeSparkConfigError";
   }
 }
-class Se extends ee {
+class ye extends ee {
   constructor(e) {
     super("RUNTIME_ERROR", e), this.name = "EdgeSparkRuntimeError";
   }
 }
-class y extends ee {
+class v extends ee {
   constructor(e, s) {
     super((s == null ? void 0 : s.code) ?? "AUTH_ERROR", e), this.name = "EdgeSparkAuthError", this.cause = s == null ? void 0 : s.cause, this.status = s == null ? void 0 : s.status;
   }
 }
+function Se(t, e = "Authentication failed.", s) {
+  if (t instanceof v)
+    return t;
+  if (typeof t == "object" && t !== null) {
+    const i = t;
+    return new v(i.message || e, {
+      code: i.code ?? s,
+      status: i.status,
+      cause: t
+    });
+  }
+  return typeof t == "string" ? new v(t, { code: s }) : new v(e, { code: s, cause: t });
+}
 function Pe() {
   if (typeof window > "u" || typeof document > "u")
-    throw new Se(
+    throw new ye(
       "@edgespark/web is browser-only. Create the client from a real browser runtime."
     );
 }
@@ -33,7 +46,7 @@ function Be(t) {
 }
 function ke(t) {
   if (t.origin !== Q())
-    throw new m(
+    throw new f(
       `Cross-origin requests are not supported by this SDK. Received ${t.origin}, expected ${Q()}.`
     );
 }
@@ -48,13 +61,13 @@ function Me() {
     }
   };
 }
-const Ee = "/api/_es/auth", Oe = "edgespark-auth-session", Le = "__edgespark_auth_sync__", S = "__edgespark_auth_pending_sign_in__", _e = Symbol("edgespark.notifyAuthTabs"), Ie = 10 * 60 * 1e3, Ve = /* @__PURE__ */ new Set([
+const Ee = "/api/_es/auth", Oe = "edgespark-auth-session", Le = "__edgespark_auth_sync__", N = "__edgespark_auth_pending_sign_in__", _e = Symbol("edgespark.notifyAuthTabs"), Ve = 10 * 60 * 1e3, Ne = /* @__PURE__ */ new Set([
   "signOut",
   "revokeSession",
   "revokeSessions",
   "revokeOtherSessions"
 ]);
-class Ne {
+class Fe {
   constructor(e) {
     this.value = e;
   }
@@ -63,11 +76,11 @@ class Ne {
   }
 }
 const ie = globalThis.WeakRef, ne = globalThis.FinalizationRegistry;
-let z, re = !1;
-const A = /* @__PURE__ */ new Map(), D = ne ? new ne((t) => {
-  A.delete(t);
+let F, re = !1;
+const C = /* @__PURE__ */ new Map(), z = ne ? new ne((t) => {
+  C.delete(t);
 }) : null;
-function Ce(t) {
+function Ie(t) {
   return Ue({
     baseURL: Q(),
     basePath: Ee,
@@ -77,17 +90,17 @@ function Ce(t) {
     }
   });
 }
-function T(t) {
+function R(t) {
   var e, s;
   return (s = (e = t.$store) == null ? void 0 : e.atoms) == null ? void 0 : s.session;
 }
-function Fe(t) {
+function ze(t) {
   return JSON.stringify({
     source: t,
     timestamp: Date.now()
   });
 }
-function ze(t) {
+function De(t) {
   if (typeof t != "string")
     return null;
   try {
@@ -100,56 +113,58 @@ function ze(t) {
 async function X(t) {
   var e;
   try {
-    return await ((e = T(t)) == null ? void 0 : e.get().refetch()), !0;
+    return await ((e = R(t)) == null ? void 0 : e.get().refetch()), !0;
   } catch {
     return !1;
   }
 }
-function Te() {
-  return z === void 0 && (z = typeof BroadcastChannel < "u" ? new BroadcastChannel(Oe) : null), z;
+function Re() {
+  return F === void 0 && (F = typeof BroadcastChannel < "u" ? new BroadcastChannel(Oe) : null), F;
 }
 function oe(t) {
-  const e = ze(t);
+  const e = De(t);
   if (e)
-    for (const [s, i] of A) {
+    for (const [s, i] of C) {
       if (s === e.source)
         continue;
       const n = i.deref();
       if (!n) {
-        A.delete(s);
+        C.delete(s);
         continue;
       }
       X(n);
     }
 }
-function De() {
+function qe() {
   var t;
-  re || (re = !0, (t = Te()) == null || t.addEventListener("message", (e) => {
+  re || (re = !0, (t = Re()) == null || t.addEventListener("message", (e) => {
     oe(e.data);
   }), typeof window < "u" && window.addEventListener("storage", (e) => {
     e.key !== Le || e.newValue === null || oe(e.newValue);
   }));
 }
-function qe(t, e) {
-  ie ? A.set(t, new ie(e)) : (A.clear(), A.set(t, new Ne(e))), D == null || D.register(e, t), De();
+function je(t, e) {
+  ie ? C.set(t, new ie(e)) : (C.clear(), C.set(t, new Fe(e))), z == null || z.register(e, t), qe();
 }
-function _(t) {
-  var s;
-  const e = Fe(t);
-  try {
-    (s = Te()) == null || s.postMessage(e);
-  } catch {
-  }
-  try {
-    window.localStorage.setItem(Le, e);
-  } catch {
-  }
+function I(t) {
+  const e = ze(t), s = Re();
+  let i = !1;
+  if (s)
+    try {
+      s.postMessage(e), i = !0;
+    } catch {
+    }
+  if (!i)
+    try {
+      window.localStorage.setItem(Le, e);
+    } catch {
+    }
 }
-function q(t) {
+function D(t) {
   if (!(typeof window > "u"))
     try {
       window.sessionStorage.setItem(
-        S,
+        N,
         JSON.stringify({
           path: t,
           createdAt: Date.now()
@@ -158,97 +173,85 @@ function q(t) {
     } catch {
     }
 }
-function U() {
+function $() {
   if (!(typeof window > "u"))
     try {
-      window.sessionStorage.removeItem(S);
+      window.sessionStorage.removeItem(N);
     } catch {
     }
 }
 function He(t) {
   return !!(t != null && t.session && (t != null && t.user));
 }
-function ae() {
+function Te() {
   if (typeof window > "u")
-    return !1;
+    return null;
   try {
-    const t = window.sessionStorage.getItem(S);
+    const t = window.sessionStorage.getItem(N);
     if (!t)
-      return !1;
-    window.sessionStorage.removeItem(S);
+      return null;
     const e = JSON.parse(t);
-    return !e || typeof e != "object" || typeof e.createdAt != "number" ? !1 : Date.now() - e.createdAt <= Ie;
+    return !e || typeof e != "object" || typeof e.createdAt != "number" || Date.now() - e.createdAt > Ve ? null : { createdAt: e.createdAt };
   } catch {
-    return !1;
+    return null;
   }
 }
-function je() {
-  if (typeof window > "u")
+function ae() {
+  if (!Te())
     return !1;
   try {
-    const t = window.sessionStorage.getItem(S);
-    if (!t)
-      return !1;
-    const e = JSON.parse(t);
-    return !e || typeof e != "object" || typeof e.createdAt != "number" || Date.now() - e.createdAt > Ie ? (window.sessionStorage.removeItem(S), !1) : !0;
+    window.sessionStorage.removeItem(N);
   } catch {
-    return !1;
   }
+  return !0;
+}
+function xe() {
+  return Te() !== null;
 }
-function xe(t) {
+function We(t) {
   if (!(t && typeof t == "object") || "error" in t && t.error)
     return !1;
   const e = "data" in t ? t.data : t;
   return e && typeof e == "object" ? "token" in e && typeof e.token == "string" && e.token.length > 0 ? !0 : "session" in e && "user" in e && !!e.session && !!e.user : !1;
 }
-function We(t) {
+function Ge(t) {
   if (!(t && typeof t == "object") || "error" in t && t.error)
     return !1;
   const e = "data" in t ? t.data : t;
   return e && typeof e == "object" ? "url" in e && typeof e.url == "string" : !1;
 }
-function Ge(t) {
-  if (R(t) || !(t && typeof t == "object"))
+function Ye(t) {
+  if (T(t) || !(t && typeof t == "object"))
     return !1;
   const e = "data" in t ? t.data : t;
   return e && typeof e == "object" ? "user" in e && !!e.user && "token" in e && e.token === null && !("url" in e) : !1;
 }
-function Ye(t, e) {
+function Ke(t, e) {
   if (t.length !== 1 || t[0] !== "changePassword")
     return !1;
   const [s] = e;
   return !!(s && typeof s == "object" && "revokeOtherSessions" in s && s.revokeOtherSessions === !0);
 }
-function R(t) {
+function T(t) {
   return !!(t && typeof t == "object" && "error" in t && t.error);
 }
-function Ke(t) {
-  if (R(t) || !(t && typeof t == "object"))
+function Je(t) {
+  if (T(t) || !(t && typeof t == "object"))
     return !1;
   const e = "data" in t ? t.data : t;
   return e && typeof e == "object" ? "message" in e && e.message === "User deleted" : !1;
 }
-function Je(t) {
+function Ze(t) {
   return !!(t && (typeof t == "object" || typeof t == "function") && "then" in t && typeof t.then == "function");
 }
-function H(t) {
-  if (t instanceof y)
-    return t;
-  const e = t;
-  return new y(
-    (e == null ? void 0 : e.message) || "Failed to load the current session.",
-    {
-      code: (e == null ? void 0 : e.code) ?? "SESSION_LOOKUP_FAILED",
-      cause: t,
-      status: e == null ? void 0 : e.status
-    }
-  );
+function q(t) {
+  return Se(t, "Failed to load the current session.", "SESSION_LOOKUP_FAILED");
 }
-async function Ze(t) {
+async function Qe(t) {
   var s, i;
   let e = null;
   try {
-    await ((s = T(t)) == null ? void 0 : s.get().refetch());
+    await ((s = R(t)) == null ? void 0 : s.get().refetch());
   } catch (n) {
     e = n;
   } finally {
@@ -257,16 +260,16 @@ async function Ze(t) {
   if (e)
     throw e;
 }
-function Qe() {
-  const t = Ce(), e = `${Date.now()}-${Math.random().toString(36).slice(2)}`;
-  qe(e, t);
+function Xe() {
+  const t = Ie(), e = `${Date.now()}-${Math.random().toString(36).slice(2)}`;
+  je(e, t);
   const s = 2, i = 500;
   let n = null, a = !1, h;
-  const w = (o) => (h = o, o), P = () => {
+  const w = (o) => (h = o, o), E = () => {
     var c;
-    const o = (c = T(t)) == null ? void 0 : c.get();
+    const o = (c = R(t)) == null ? void 0 : c.get();
     return o != null && o.error && !o.data && h !== void 0 ? h : (o == null ? void 0 : o.data) ?? h ?? null;
-  }, E = () => a ? Promise.resolve(P()) : (n || (n = (async () => {
+  }, L = () => a ? Promise.resolve(E()) : (n || (n = (async () => {
     var l, u, g;
     let o = !1, c = null;
     try {
@@ -274,75 +277,75 @@ function Qe() {
         let d = null;
         try {
           d = await t.getSession();
-        } catch (v) {
-          c = v;
+        } catch (y) {
+          c = y;
         }
-        const b = ((l = T(t)) == null ? void 0 : l.get().data) ?? null;
+        const b = ((l = R(t)) == null ? void 0 : l.get().data) ?? null;
         if ((u = d == null ? void 0 : d.data) != null && u.session && ((g = d.data) != null && g.user))
-          return a = !0, ae() && _(e), w(d.data);
+          return a = !0, ae() && I(e), w(d.data);
         if (b != null && b.session && (b != null && b.user))
-          return a = !0, ae() && _(e), w(b);
-        if (d != null && d.error ? c = d.error : d && (o = !0), d && !d.error && je() && p < s) {
+          return a = !0, ae() && I(e), w(b);
+        if (d != null && d.error ? c = d.error : d && (o = !0), d && !d.error && xe() && p < s) {
           await new Promise(
-            (v) => setTimeout(v, i)
+            (y) => setTimeout(y, i)
           );
           continue;
         }
         if (d && !d.error) {
-          const v = P();
-          return a = !0, w(v);
+          const y = E();
+          return a = !0, w(y);
         }
         p < s && await new Promise(
-          (v) => setTimeout(v, i)
+          (y) => setTimeout(y, i)
         );
       }
       if (!o)
-        throw n = null, new y("Failed to load the current session.", {
+        throw n = null, new v("Failed to load the current session.", {
           code: "SESSION_LOOKUP_FAILED",
           cause: c
         });
-      const f = P();
-      return a = !0, w(f);
-    } catch (f) {
-      throw n = null, H(f);
+      const m = E();
+      return a = !0, w(m);
+    } catch (m) {
+      throw n = null, q(m);
     }
   })()), n);
-  E().catch(() => {
+  L().catch(() => {
   });
-  const L = async () => {
+  const _ = async () => {
     var o, c;
     try {
       const l = await t.getSession();
       if ((o = l.data) != null && o.session && ((c = l.data) != null && c.user))
         return l.data;
-      throw l.error ? H(l.error) : new y("No authenticated session is available.", {
+      throw l.error ? q(l.error) : new v("No authenticated session is available.", {
         code: "UNAUTHENTICATED"
       });
     } catch (l) {
-      throw H(l);
+      throw q(l);
     }
-  }, $ = async () => {
-    await X(t), _(e);
-  }, Re = async () => {
+  }, A = async () => {
+    await X(t), I(e);
+  }, Ce = async () => {
     var l;
-    const o = await X(t), c = ((l = T(t)) == null ? void 0 : l.get().data) ?? null;
-    He(c) ? (U(), _(e)) : o || _(e);
+    const o = await X(t), c = ((l = R(t)) == null ? void 0 : l.get().data) ?? null;
+    He(c) ? ($(), I(e)) : o || I(e);
   }, Ae = (o) => {
     let c = !1, l = !1, u;
     const g = (d) => {
       d !== u && (u = d, o(d));
     };
-    E().then((d) => {
+    L().then((d) => {
       c || (l = !0, g(w(d)));
     }).catch(() => {
       c || (l = !0);
     });
-    const f = T(t);
-    if (!f)
+    const m = R(t);
+    if (!m)
       return () => {
         c = !0;
       };
-    const p = f.subscribe((d) => {
+    const p = m.subscribe((d) => {
       if (c || !l || d.error && !d.data)
         return;
       const b = d.data ?? null;
@@ -353,7 +356,7 @@ function Qe() {
     };
   }, $e = async (o, c, l) => {
     const u = o[0], g = o.length >= 2 && u === "emailOtp" && o[1] === "verifyEmail";
-    return o.length === 1 && (u === "deleteUser" || u === "deleteUserCallback") ? (U(), Ke(l) && await $(), l) : o.length === 1 && u && Ve.has(u) ? (U(), R(l) || await $(), l) : Ye(o, c) && !R(l) ? (U(), await $(), l) : o.length === 1 && u === "changeEmail" && !R(l) ? (await $(), l) : ((u === "signIn" || u === "signUp" || g) && xe(l) ? (U(), await $()) : (u === "signIn" || u === "signUp") && We(l) || u === "signUp" && Ge(l) ? q(o) : u === "verifyEmail" && !R(l) && (q(o), await Re()), l);
+    return o.length === 1 && (u === "deleteUser" || u === "deleteUserCallback") ? ($(), Je(l) && await A(), l) : o.length === 1 && u && Ne.has(u) ? ($(), T(l) || await A(), l) : Ke(o, c) && !T(l) ? ($(), await A(), l) : o.length === 1 && u === "changeEmail" && !T(l) ? (await A(), l) : ((u === "signIn" || u === "signUp" || g) && We(l) ? ($(), await A()) : (u === "signIn" || u === "signUp") && Ge(l) || u === "signUp" && Ye(l) ? D(o) : u === "verifyEmail" && !T(l) && (D(o), await Ce()), l);
   }, te = /* @__PURE__ */ new WeakMap(), se = (o, c) => {
     if (!o || typeof o != "object" && typeof o != "function")
       return o;
@@ -361,27 +364,27 @@ function Qe() {
     if (l)
       return l;
     const u = new Proxy(o, {
-      get(g, f, p) {
+      get(g, m, p) {
         if (c.length === 0) {
-          if (f === "requireSession")
-            return L;
-          if (f === "onSessionChange")
+          if (m === "requireSession")
+            return _;
+          if (m === "onSessionChange")
             return Ae;
-          if (f === _e)
+          if (m === _e)
             return () => {
-              _(e);
+              I(e);
             };
         }
-        const d = Reflect.get(g, f, p);
-        return typeof f != "string" ? d : se(d, [...c, f]);
+        const d = Reflect.get(g, m, p);
+        return typeof m != "string" ? d : se(d, [...c, m]);
       },
-      apply(g, f, p) {
+      apply(g, m, p) {
         const d = Reflect.apply(
           g,
-          f,
+          m,
           p
         );
-        return Je(d) ? Promise.resolve(d).then(
+        return Ze(d) ? Promise.resolve(d).then(
           (b) => $e(c, p, b)
         ) : d;
       }
@@ -390,31 +393,31 @@ function Qe() {
   };
   return se(t, []);
 }
-function Xe() {
-  return Ce({ disableDefaultRedirectPlugin: !0 });
+function et() {
+  return Ie({ disableDefaultRedirectPlugin: !0 });
 }
-function B(t) {
+function tt(t) {
   const e = (() => {
     if (t instanceof URL)
       return t;
     const s = t.trim();
     if (!s)
-      throw new m("redirectTo must not be an empty string.");
+      throw new f("redirectTo must not be an empty string.");
     try {
       return new URL(s, window.location.href);
     } catch {
-      throw new m(
+      throw new f(
         `redirectTo must be a valid relative path or URL. Received: ${JSON.stringify(t)}`
       );
     }
   })();
   if (e.protocol !== "http:" && e.protocol !== "https:")
-    throw new m(
+    throw new f(
       `redirectTo must resolve to an http(s) URL. Received protocol: ${e.protocol}`
     );
   return e;
 }
-function et(t, e) {
+function st(t, e) {
   return e ? {
     common: { ...t.common, ...e.common },
     signIn: { ...t.signIn, ...e.signIn },
@@ -426,7 +429,7 @@ function et(t, e) {
     errors: { ...t.errors, ...e.errors }
   } : t;
 }
-const F = {
+const V = {
   common: {
     loading: "Loading sign-in…",
     redirecting: "Redirecting…",
@@ -678,7 +681,7 @@ const F = {
     invalidCode: "6자리 인증 코드를 입력해 주세요",
     generic: "문제가 발생했습니다. 다시 시도해 주세요"
   }
-}, x = {
+}, H = {
   common: {
     loading: "Cargando inicio de sesión…",
     redirecting: "Redirigiendo…",
@@ -1183,8 +1186,8 @@ const F = {
     generic: "कुछ गलत हो गई। कृपया फिर से प्रयास करें।"
   }
 }, pe = {
-  en: F,
-  "en-US": F,
+  en: V,
+  "en-US": V,
   zh: j,
   "zh-CN": j,
   "zh-TW": j,
@@ -1192,9 +1195,9 @@ const F = {
   "ja-JP": le,
   ko: de,
   "ko-KR": de,
-  es: x,
-  "es-ES": x,
-  "es-MX": x,
+  es: H,
+  "es-ES": H,
+  "es-MX": H,
   pt: ce,
   "pt-BR": ce,
   fr: ue,
@@ -1210,34 +1213,24 @@ const F = {
   hi: ge,
   "hi-IN": ge
 };
-function tt() {
+function it() {
   if (typeof navigator > "u")
-    return F;
+    return V;
   const t = navigator.languages ?? [navigator.language];
   for (const e of t) {
     const s = pe[e] ?? pe[e.split("-")[0]];
     if (s) return s;
   }
-  return F;
+  return V;
 }
-function W(t, e = "Authentication failed.") {
-  if (t instanceof y)
-    return t;
-  if (typeof t == "object" && t !== null) {
-    const s = t;
-    return new y(s.message || e, {
-      code: s.code,
-      status: s.status,
-      cause: t
-    });
-  }
-  return typeof t == "string" ? new y(t) : new y(e, { cause: t });
+function x(t, e = "Authentication failed.") {
+  return Se(t, e);
 }
-async function k(t) {
+async function B(t) {
   var s, i;
   const e = await t.getSession();
   if (e.error)
-    throw new y(
+    throw new v(
       e.error.message || "Failed to load the current session.",
       {
         code: e.error.code ?? "SESSION_LOOKUP_FAILED",
@@ -1253,7 +1246,13 @@ async function k(t) {
     session: null
   };
 }
-const st = "data-edgespark-auth", r = "edgespark-auth", G = "es_auth_completion", M = "es_auth_email", be = "oauth", O = "verify-sign-in", I = "verify-sign-up", ye = 200, Y = 2, K = {
+const nt = "data-edgespark-auth", r = "edgespark-auth", W = "es_auth_completion", k = "es_auth_email", G = "oauth", U = "verify-sign-in", S = "verify-sign-up", be = 200, Y = 2, rt = {
+  "&": "&amp;",
+  "<": "&lt;",
+  ">": "&gt;",
+  '"': "&quot;",
+  "'": "&#39;"
+}, K = {
   google: "Google",
   apple: "Apple",
   microsoft: "Microsoft",
@@ -1261,7 +1260,7 @@ const st = "data-edgespark-auth", r = "edgespark-auth", G = "es_auth_completion"
   gitlab: "GitLab",
   discord: "Discord"
 };
-function C(t) {
+function P(t) {
   return "redirectTo" in t;
 }
 function J(t) {
@@ -1270,18 +1269,18 @@ function J(t) {
 function Z(t) {
   return !t || typeof t != "string" ? !1 : /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(t.trim());
 }
-function it(t) {
+function ot(t) {
   return /^\d{6}$/.test(t.trim());
 }
-function nt(t) {
+function at(t) {
   return t === "email" || t === "name" || t === "password" || t === "confirmPassword" || t === "code" || t === "newPassword";
 }
-function rt(t) {
+function lt(t) {
   return !!(t.error || t.errorDescription);
 }
-class ot {
+class dt {
   constructor(e, s, i, n, a) {
-    if (this.container = e, this.auth = s, this.options = i, this.loadConfig = n, this.runtimeOptions = a, this.state = {
+    this.container = e, this.auth = s, this.options = i, this.loadConfig = n, this.runtimeOptions = a, this.state = {
       view: "loading",
       busy: !0,
       busyLabel: void 0,
@@ -1293,9 +1292,7 @@ class ot {
       confirmPassword: "",
       code: "",
       newPassword: ""
-    }, this.destroyed = !1, this.terminalActionInProgress = !1, this.config = null, this.countdownUntil = null, this.countdownTimer = null, this.pendingFocusSnapshot = null, this.focusRestoreTimer = null, this.verificationCompletionAction = null, !(e instanceof HTMLElement))
-      throw new m("authUI.mount(container, options) requires a real HTMLElement container.");
-    this.labels = et(tt(), i.labels), this.root = document.createElement("div"), this.root.setAttribute(st, ""), e.innerHTML = "", e.appendChild(this.root), this.render(), this.initialize();
+    }, this.destroyed = !1, this.terminalActionInProgress = !1, this.config = null, this.countdownUntil = null, this.countdownTimer = null, this.pendingFocusSnapshot = null, this.focusRestoreTimer = null, this.verificationCompletionAction = null, this.labels = st(it(), i.labels), this.root = document.createElement("div"), this.root.setAttribute(nt, ""), e.innerHTML = "", e.appendChild(this.root), this.render(), this.initialize();
   }
   destroy() {
     this.destroyed || (this.destroyed = !0, this.clearCountdown(), this.clearFocusRestoreTimer(), this.container.innerHTML = "");
@@ -1310,7 +1307,7 @@ class ot {
       if (this.destroyed)
         return;
       if (i.status === "rejected") {
-        if (e.marker && !rt(e) && C(this.options)) {
+        if (e.marker && !lt(e) && P(this.options)) {
           this.redirectAfterManagedReturnLookupFailure();
           return;
         }
@@ -1318,17 +1315,17 @@ class ot {
         const a = i.value;
         if (a.user && a.session) {
           switch (e.marker) {
-            case be:
-            case O:
+            case G:
+            case U:
               await this.completeAuth("sign-in", a);
               return;
-            case I:
+            case S:
               await this.completeAuth("sign-up", a);
               return;
             default:
               break;
           }
-          this.handleExistingSessionOnMount(a);
+          this.handleExistingSessionOnMount();
           return;
         }
       }
@@ -1345,21 +1342,24 @@ class ot {
     }
   }
   redirectAfterManagedReturnLookupFailure() {
-    C(this.options) && (this.terminalActionInProgress = !0, this.state.busy = !0, this.state.busyLabel = this.labels.common.redirecting, this.state.error = null, this.state.notice = null, this.render(), window.location.assign(B(this.options.redirectTo).toString()));
+    P(this.options) && this.navigateToRedirect();
+  }
+  navigateToRedirect() {
+    P(this.options) && (this.terminalActionInProgress = !0, this.state.busy = !0, this.state.busyLabel = this.labels.common.redirecting, this.state.error = null, this.state.notice = null, this.render(), window.location.assign(tt(this.options.redirectTo).toString()));
   }
   async readMountSession(e) {
     if (!e.marker)
-      return k(this.auth);
+      return B(this.auth);
     let s = null;
     for (let i = 0; i <= Y; i++) {
       try {
-        const n = await k(this.auth);
+        const n = await B(this.auth);
         if (n.user && n.session)
           return n;
       } catch (n) {
         s = n;
       }
-      i < Y && await new Promise((n) => setTimeout(n, ye));
+      i < Y && await new Promise((n) => setTimeout(n, be));
     }
     if (s)
       throw s;
@@ -1598,7 +1598,7 @@ class ot {
       });
     }), this.root.querySelectorAll("input[name]").forEach((n) => {
       n.addEventListener("input", () => {
-        nt(n.name) && (this.state[n.name] = n.value);
+        at(n.name) && (this.state[n.name] = n.value);
       });
     }), this.root.querySelectorAll("[data-action]").forEach((n) => {
       n.addEventListener("click", () => {
@@ -1623,7 +1623,7 @@ class ot {
       const e = await this.auth.signIn.email({
         email: this.state.email.trim(),
         password: this.state.password,
-        callbackURL: this.getManagedReturnURL(O, this.state.email.trim())
+        callbackURL: this.getManagedReturnURL(U, this.state.email.trim())
       });
       if (e.error)
         throw e.error;
@@ -1660,7 +1660,7 @@ class ot {
         name: this.state.name.trim(),
         email: this.state.email.trim(),
         password: this.state.password,
-        callbackURL: this.getManagedReturnURL(I, this.state.email.trim())
+        callbackURL: this.getManagedReturnURL(S, this.state.email.trim())
       });
       if (i.error)
         throw i.error;
@@ -1682,14 +1682,14 @@ class ot {
         throw s.error;
       const i = this.extractRedirectURL(s.data);
       if (!i)
-        throw new m(`OAuth sign-in did not return a redirect URL for provider "${e}".`);
+        throw new f(`OAuth sign-in did not return a redirect URL for provider "${e}".`);
       this.terminalActionInProgress = !0, this.state.busy = !0, this.state.busyLabel = `Opening ${K[e]}…`, this.state.error = null, this.state.notice = null, this.render(), window.location.assign(i);
     });
   }
   async handleForgotPassword() {
     if (!this.canUsePasswordResetEmailOtp()) {
       this.handleError(
-        new m("Password reset via email OTP is not enabled for this project.")
+        new f("Password reset via email OTP is not enabled for this project.")
       );
       return;
     }
@@ -1713,11 +1713,11 @@ class ot {
     var e, s;
     if (!this.canUsePasswordResetEmailOtp()) {
       this.handleError(
-        new m("Password reset via email OTP is not enabled for this project.")
+        new f("Password reset via email OTP is not enabled for this project.")
       );
       return;
     }
-    if (!it(this.state.code)) {
+    if (!ot(this.state.code)) {
       this.failValidation(this.labels.errors.invalidCode);
       return;
     }
@@ -1754,7 +1754,7 @@ class ot {
       const s = await this.auth.sendVerificationEmail({
         email: this.state.email.trim(),
         callbackURL: this.getManagedReturnURL(
-          this.verificationCompletionAction === "sign-up" ? I : O,
+          this.verificationCompletionAction === "sign-up" ? S : U,
           this.state.email.trim()
         )
       });
@@ -1772,12 +1772,12 @@ class ot {
     if (!i.user || !i.session) {
       if (this.destroyed)
         return;
-      if (i.lookupError && C(this.options)) {
-        this.terminalActionInProgress = !0, this.state.busy = !0, this.state.busyLabel = this.labels.common.redirecting, this.state.error = null, this.state.notice = null, this.render(), window.location.assign(B(this.options.redirectTo).toString());
+      if (i.lookupError && P(this.options)) {
+        this.navigateToRedirect();
         return;
       }
       if (e === "sign-in")
-        throw i.lookupError ?? new Se(
+        throw i.lookupError ?? new ye(
           "Managed sign-in completed without an authenticated session."
         );
       this.state.view = "sign-in", this.state.password = "", this.state.confirmPassword = "", this.state.error = null, this.state.busy = !1, this.state.busyLabel = void 0, this.state.notice = "Account created. Sign in to continue.", this.render();
@@ -1789,8 +1789,8 @@ class ot {
       session: i.session
     };
     if (await this.syncPublicSessionBestEffort(), !this.destroyed) {
-      if (C(this.options)) {
-        this.terminalActionInProgress = !0, this.invokeRedirectModeSuccessHook(n), this.state.busy = !0, this.state.busyLabel = this.labels.common.redirecting, this.state.error = null, this.state.notice = null, this.render(), window.location.assign(B(this.options.redirectTo).toString());
+      if (P(this.options)) {
+        this.invokeRedirectModeSuccessHook(n), this.navigateToRedirect();
         return;
       }
       if (J(this.options)) {
@@ -1804,9 +1804,9 @@ class ot {
       return e;
     let s = e.lookupError;
     for (let i = 0; i < Y; i++) {
-      await new Promise((n) => setTimeout(n, ye));
+      await new Promise((n) => setTimeout(n, be));
       try {
-        const n = await k(this.auth);
+        const n = await B(this.auth);
         if (n.user && n.session)
           return {
             user: n.user,
@@ -1830,7 +1830,7 @@ class ot {
   }
   async resolveAuthCompletionData(e) {
     try {
-      const s = await k(this.auth), i = this.extractUser(e);
+      const s = await B(this.auth), i = this.extractUser(e);
       return {
         user: s.user ?? i,
         session: s.session
@@ -1857,13 +1857,13 @@ class ot {
       this.invokeRedirectModeSuccessHook(e), this.clearCountdown(), this.state.view = "sign-in", this.state.password = "", this.state.confirmPassword = "", this.state.newPassword = "", this.state.code = "", this.state.busy = !1, this.state.busyLabel = void 0, this.state.error = null, this.state.notice = "Password updated. Sign in with your new password.", this.render();
     }
   }
-  handleExistingSessionOnMount(e) {
-    if (C(this.options)) {
-      this.terminalActionInProgress = !0, this.state.busy = !0, this.state.busyLabel = this.labels.common.redirecting, this.state.error = null, this.state.notice = null, this.render(), window.location.assign(B(this.options.redirectTo).toString());
+  handleExistingSessionOnMount() {
+    if (P(this.options)) {
+      this.navigateToRedirect();
       return;
     }
     if (J(this.options))
-      throw this.state.view = "sign-in", this.state.busy = !1, this.state.busyLabel = void 0, this.state.notice = null, new m(
+      throw this.state.view = "sign-in", this.state.busy = !1, this.state.busyLabel = void 0, this.state.notice = null, new f(
         "authUI.mount(container, { onSuccess }) cannot run while a session already exists. Check es.auth.getSession() before mounting controlled auth UI."
       );
   }
@@ -1880,18 +1880,18 @@ class ot {
     !this.destroyed && !this.terminalActionInProgress && (this.state.busy = !1, this.state.busyLabel = void 0, this.render());
   }
   maybeHandleVerificationRequired(e) {
-    return W(e).code !== "EMAIL_NOT_VERIFIED" ? !1 : (this.verificationCompletionAction = "sign-in", this.state.view = "verify-email", this.state.busy = !1, this.state.busyLabel = void 0, this.state.error = null, this.state.notice = `Verify your email to finish signing in as ${this.state.email.trim()}.`, this.render(), this.sendVerificationEmail(!0), !0);
+    return x(e).code !== "EMAIL_NOT_VERIFIED" ? !1 : (this.verificationCompletionAction = "sign-in", this.state.view = "verify-email", this.state.busy = !1, this.state.busyLabel = void 0, this.state.error = null, this.state.notice = `Verify your email to finish signing in as ${this.state.email.trim()}.`, this.render(), this.sendVerificationEmail(!0), !0);
   }
   handleVerificationEmailSent(e, s) {
     this.state.notice = s ? `We sent another verification email to ${e}.` : `We sent a verification email to ${e}.`, this.startCountdown();
   }
   invokeRedirectModeSuccessHook(e) {
     var s, i;
-    if (!(!C(this.options) || !this.options.onSuccess))
+    if (!(!P(this.options) || !this.options.onSuccess))
       try {
         this.options.onSuccess(e);
       } catch (n) {
-        const a = W(n, "Post-auth callback failed.");
+        const a = x(n, "Post-auth callback failed.");
         try {
           (i = (s = this.options).onError) == null || i.call(s, a);
         } catch {
@@ -1900,7 +1900,7 @@ class ot {
   }
   handleError(e, s) {
     var n, a;
-    const i = W(e, s);
+    const i = x(e, s);
     this.state.busy = !1, this.state.busyLabel = void 0, this.state.error = i.message, this.render(), (a = (n = this.options).onError) == null || a.call(n, i);
   }
   failValidation(e) {
@@ -1910,15 +1910,15 @@ class ot {
     if (!e)
       return window.location.href;
     const i = new URL(window.location.href);
-    return i.searchParams.set(G, e), s ? i.searchParams.set(M, s) : i.searchParams.delete(M), i.toString();
+    return i.searchParams.set(W, e), s ? i.searchParams.set(k, s) : i.searchParams.delete(k), i.toString();
   }
   consumeManagedReturnContext() {
-    const e = new URL(window.location.href), s = e.searchParams.get(G), i = e.searchParams.get(M), n = s ? e.searchParams.get("error") : null, a = s ? e.searchParams.get("error_description") : null;
-    return (s || i) && (e.searchParams.delete(G), e.searchParams.delete(M), s && (e.searchParams.delete("error"), e.searchParams.delete("error_description")), window.history.replaceState(null, "", e.toString())), {
-      marker: s,
-      email: i,
-      error: n,
-      errorDescription: a
+    const e = new URL(window.location.href), s = e.searchParams.get(W), i = s === G || s === U || s === S ? s : null, n = e.searchParams.get(k), a = i ? e.searchParams.get("error") : null, h = i ? e.searchParams.get("error_description") : null;
+    return (i || n) && (e.searchParams.delete(W), e.searchParams.delete(k), i && (e.searchParams.delete("error"), e.searchParams.delete("error_description")), window.history.replaceState(null, "", e.toString())), {
+      marker: i,
+      email: n,
+      error: a,
+      errorDescription: h
     };
   }
   startCountdown(e = 60) {
@@ -1982,10 +1982,10 @@ class ot {
     return !!((e = this.config) != null && e.passwordResetEmailOtpEnabled);
   }
   handleSessionlessManagedReturn(e) {
-    return e.email && (this.state.email = e.email), e.marker === I && !e.error ? (this.verificationCompletionAction = null, this.clearCountdown(), this.state.view = "sign-in", this.state.password = "", this.state.confirmPassword = "", this.state.error = null, this.state.busy = !1, this.state.busyLabel = void 0, this.state.notice = "Account created. Sign in to continue.", this.render(), !0) : e.marker === O || e.marker === I ? (this.verificationCompletionAction = e.marker === I ? "sign-up" : "sign-in", this.state.view = "verify-email", this.state.busy = !1, this.state.busyLabel = void 0, this.state.notice = null, e.error || e.errorDescription ? this.handleError(new y(
+    return e.email && (this.state.email = e.email), e.marker === S && !e.error ? (this.verificationCompletionAction = null, this.clearCountdown(), this.state.view = "sign-in", this.state.password = "", this.state.confirmPassword = "", this.state.error = null, this.state.busy = !1, this.state.busyLabel = void 0, this.state.notice = "Account created. Sign in to continue.", this.render(), !0) : e.marker === U || e.marker === S ? (this.verificationCompletionAction = e.marker === S ? "sign-up" : "sign-in", this.state.view = "verify-email", this.state.busy = !1, this.state.busyLabel = void 0, this.state.notice = null, e.error || e.errorDescription ? this.handleError(new v(
       e.errorDescription ?? "Verification failed. Request a new verification email and try again.",
       { code: e.error ?? "VERIFY_EMAIL_ERROR" }
-    )) : this.render(), !0) : e.marker === be && (e.error || e.errorDescription) ? (this.state.view = "sign-in", this.state.busy = !1, this.state.busyLabel = void 0, this.state.notice = null, this.handleError(new y(
+    )) : this.render(), !0) : e.marker === G && (e.error || e.errorDescription) ? (this.state.view = "sign-in", this.state.busy = !1, this.state.busyLabel = void 0, this.state.notice = null, this.handleError(new v(
       e.errorDescription ?? "OAuth sign-in failed.",
       { code: e.error ?? "OAUTH_ERROR" }
     )), !0) : !1;
@@ -2001,106 +2001,106 @@ class ot {
     return i <= 0 ? e : s.replace("{seconds}", String(i));
   }
   escape(e) {
-    return e.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;");
+    return e.replace(/[&<>"']/g, (s) => rt[s]);
   }
 }
-function at(t) {
+function ct(t) {
   return "data" in t && t.data ? t.data : t;
 }
-const lt = [
+const ut = [
   { id: "google", key: "providerGoogle" },
   { id: "apple", key: "providerApple" },
   { id: "microsoft", key: "providerMicrosoft" },
   { id: "github", key: "providerGithub" },
   { id: "gitlab", key: "providerGitlab" },
   { id: "discord", key: "providerDiscord" }
-], ve = 2, dt = 500;
-async function ct() {
+], ve = 2, ht = 500;
+async function mt() {
   const t = `${window.location.origin}${Ee}/config`;
   let e;
   for (let s = 0; s <= ve; s++)
     try {
       const i = await fetch(t, { method: "GET", credentials: "include" });
       if (!i.ok)
-        throw new m(`Failed to load auth config: HTTP ${i.status}`);
+        throw new f(`Failed to load auth config: HTTP ${i.status}`);
       const n = await i.json();
-      return ht(at(n));
+      return wt(ct(n));
     } catch (i) {
-      e = i, s < ve && await new Promise((n) => setTimeout(n, dt));
+      e = i, s < ve && await new Promise((n) => setTimeout(n, ht));
     }
   throw e;
 }
-let V = null;
-async function ut() {
-  return V || (V = ct().catch((t) => {
-    throw V = null, t;
-  })), V;
+let M = null;
+async function ft() {
+  return M || (M = mt().catch((t) => {
+    throw M = null, t;
+  })), M;
 }
-function ht(t) {
-  var s, i, n, a, h, w, P;
-  const e = lt.filter(({ key: E }) => {
-    const L = t[E];
-    return typeof L == "object" && L !== null && "enabled" in L && !!L.enabled;
-  }).map(({ id: E }) => E);
+function wt(t) {
+  var s, i, n, a, h, w, E;
+  const e = ut.filter(({ key: L }) => {
+    const _ = t[L];
+    return typeof _ == "object" && _ !== null && "enabled" in _ && !!_.enabled;
+  }).map(({ id: L }) => L);
   return {
     disableSignUp: !!t.disableSignUp,
     emailPasswordEnabled: !!((s = t.providerEmailPassword) != null && s.enabled),
     minPasswordLength: ((n = (i = t.providerEmailPassword) == null ? void 0 : i.config) == null ? void 0 : n.minPasswordLength) ?? 8,
     requireEmailVerification: !!((h = (a = t.providerEmailPassword) == null ? void 0 : a.config) != null && h.requireEmailVerification),
-    passwordResetEmailOtpEnabled: !!((P = (w = t.providerEmailPassword) == null ? void 0 : w.config) != null && P.requirePasswordResetEmailVerification),
+    passwordResetEmailOtpEnabled: !!((E = (w = t.providerEmailPassword) == null ? void 0 : w.config) != null && E.requirePasswordResetEmailVerification),
     oauthProviders: e
   };
 }
-const N = /* @__PURE__ */ new WeakMap();
-function mt(t) {
+const O = /* @__PURE__ */ new WeakMap();
+function gt(t) {
   if (!t)
-    throw new m(
+    throw new f(
       "authUI.mount(container, options) requires either { redirectTo } or { onSuccess }."
     );
   const e = "redirectTo" in t, s = "onSuccess" in t && typeof t.onSuccess == "function";
   if (!e && !s)
-    throw new m(
+    throw new f(
       "authUI.mount(container, options) requires either { redirectTo } or { onSuccess }."
     );
   if ("redirectTo" in t) {
     const i = t.redirectTo;
     if (!(typeof i == "string" || i instanceof URL))
-      throw new m(
+      throw new f(
         "authUI.mount(container, options) expected redirectTo to be a string or URL."
       );
   }
   if ("onSuccess" in t && t.onSuccess !== void 0 && typeof t.onSuccess != "function")
-    throw new m(
+    throw new f(
       "authUI.mount(container, options) expected onSuccess to be a function."
     );
   if ("onError" in t && t.onError !== void 0 && typeof t.onError != "function")
-    throw new m(
+    throw new f(
       "authUI.mount(container, options) expected onError to be a function."
     );
 }
-function ft(t) {
+function pt(t) {
   if (!(t instanceof HTMLElement))
-    throw new m("authUI.mount(container, options) requires a real HTMLElement container.");
+    throw new f("authUI.mount(container, options) requires a real HTMLElement container.");
 }
-function wt(t, e) {
+function bt(t, e) {
   return {
     mount(s, i) {
       var w;
-      mt(i), ft(s), (w = N.get(s)) == null || w.destroy();
-      const n = new ot(s, t, i, ut, e), a = n.destroy.bind(n), h = {
+      gt(i), pt(s), (w = O.get(s)) == null || w.destroy();
+      const n = new dt(s, t, i, ft, e), a = n.destroy.bind(n), h = {
         destroy() {
-          a(), N.get(s) === h && N.delete(s);
+          a(), O.get(s) === h && O.delete(s);
         }
       };
-      return N.set(s, h), h;
+      return O.set(s, h), h;
     }
   };
 }
-function pt() {
+function yt() {
   Pe();
-  const t = Qe(), e = Xe(), s = Me(), i = wt(e, {
+  const t = Xe(), e = et(), s = Me(), i = bt(e, {
     syncPublicSession: async () => {
-      await Ze(t);
+      await Qe(t);
     }
   });
   return {
@@ -2110,16 +2110,16 @@ function pt() {
   };
 }
 export {
-  y as EdgeSparkAuthError,
-  m as EdgeSparkConfigError,
+  v as EdgeSparkAuthError,
+  f as EdgeSparkConfigError,
   ee as EdgeSparkError,
-  Se as EdgeSparkRuntimeError,
+  ye as EdgeSparkRuntimeError,
   we as ar,
-  pt as createEdgeSpark,
+  yt as createEdgeSpark,
   he as de,
-  tt as detectLocale,
-  F as enUS,
-  x as es,
+  it as detectLocale,
+  V as enUS,
+  H as es,
   ue as fr,
   ge as hi,
   me as it,