@edgespark/web 0.0.1 → 0.0.3

package/dist/index.es.js

@@ -1,77 +1,86 @@
-import { createAuthClient as Be } from "better-auth/client";
+import { createAuthClient as De } from "better-auth/client";
 class te extends Error {
   constructor(e, s) {
     super(s), this.name = "EdgeSparkError", this.code = e;
   }
 }
-class p extends te {
+class f extends te {
   constructor(e) {
     super("CONFIG_ERROR", e), this.name = "EdgeSparkConfigError";
   }
 }
-class Se extends te {
+class Ee extends te {
   constructor(e) {
     super("RUNTIME_ERROR", e), this.name = "EdgeSparkRuntimeError";
   }
 }
-class v extends te {
+class E extends te {
   constructor(e, s) {
     super((s == null ? void 0 : s.code) ?? "AUTH_ERROR", e), this.name = "EdgeSparkAuthError", this.cause = s == null ? void 0 : s.cause, this.status = s == null ? void 0 : s.status;
   }
 }
-function Pe(t, e = "Authentication failed.", s) {
-  if (t instanceof v)
+function Se(t, e = "Authentication failed.", s) {
+  if (t instanceof E)
     return t;
   if (typeof t == "object" && t !== null) {
     const i = t;
-    return new v(i.message || e, {
+    return new E(i.message || e, {
       code: i.code ?? s,
       status: i.status,
       cause: t
     });
   }
-  return typeof t == "string" ? new v(t, { code: s }) : new v(e, { code: s, cause: t });
+  return typeof t == "string" ? new E(t, { code: s }) : new E(e, { code: s, cause: t });
 }
-function Ee() {
+function Pe() {
   if (typeof window > "u" || typeof document > "u")
-    throw new Se(
+    throw new Ee(
       "@edgespark/web is browser-only. Create the client from a real browser runtime."
     );
 }
-function X() {
-  return Ee(), window.location.origin;
+function Q() {
+  return Pe(), window.location.origin;
 }
-function ke(t) {
+function Ne(t) {
   return t instanceof URL ? t : typeof t == "string" ? new URL(t, window.location.href) : new URL(t.url, window.location.href);
 }
-function Me(t) {
-  if (t.origin !== X())
-    throw new p(
-      `Cross-origin requests are not supported by this SDK. Received ${t.origin}, expected ${X()}.`
+function Ve(t) {
+  if (t.origin !== Q())
+    throw new f(
+      `Cross-origin requests are not supported by this SDK. Received ${t.origin}, expected ${Q()}.`
     );
 }
-function Oe() {
+function Fe() {
   return {
     async fetch(t, e) {
-      const s = ke(t);
-      return Me(s), fetch(t, {
+      const s = Ne(t);
+      return Ve(s), fetch(t, {
         ...e,
         credentials: "include"
       });
     }
   };
 }
-const Le = "/api/_es/auth", Ve = "edgespark-auth-session", _e = "__edgespark_auth_sync__", F = "__edgespark_auth_pending_sign_in__", Re = Symbol("edgespark.notifyAuthTabs"), Ne = 10 * 60 * 1e3, Fe = /* @__PURE__ */ new Set([
+const Le = "/api/_es/auth", He = "edgespark-auth-session", _e = "__edgespark_auth_sync__", V = "__edgespark_auth_pending_sign_in__", Ae = Symbol("edgespark.notifyAuthTabs"), ze = 10 * 60 * 1e3, je = /* @__PURE__ */ new Set([
   "signOut",
   "revokeSession",
   "revokeSessions",
   "revokeOtherSessions"
-]), ze = /* @__PURE__ */ new Map([
-  ["changeEmail", "changeEmail() is not currently supported by EdgeSpark platform auth."],
-  ["deleteUser", "deleteUser() is not currently supported by EdgeSpark platform auth."],
-  ["deleteUserCallback", "deleteUserCallback() is not currently supported by EdgeSpark platform auth."]
+]), qe = /* @__PURE__ */ new Map([
+  [
+    "changeEmail",
+    "changeEmail() is not currently supported by EdgeSpark platform auth. Use authUI.mount() or other supported client.auth flows instead of wiring raw /api/_es/auth/* routes manually."
+  ],
+  [
+    "deleteUser",
+    "deleteUser() is not currently supported by EdgeSpark platform auth. Handle account removal through your own app flow until the platform enables this capability."
+  ],
+  [
+    "deleteUserCallback",
+    "deleteUserCallback() is not currently supported by EdgeSpark platform auth. Handle account removal through your own app flow until the platform enables this capability."
+  ]
 ]);
-class De {
+class xe {
   constructor(e) {
     this.value = e;
   }
@@ -80,13 +89,13 @@ class De {
   }
 }
 const ne = globalThis.WeakRef, re = globalThis.FinalizationRegistry;
-let z, oe = !1;
-const $ = /* @__PURE__ */ new Map(), D = re ? new re((t) => {
-  $.delete(t);
+let F, oe = !1;
+const C = /* @__PURE__ */ new Map(), H = re ? new re((t) => {
+  C.delete(t);
 }) : null;
-function Te(t) {
-  return Be({
-    baseURL: X(),
+function Re(t) {
+  return De({
+    baseURL: Q(),
     basePath: Le,
     ...t != null && t.disableDefaultRedirectPlugin ? { disableDefaultFetchPlugins: !0 } : {},
     fetchOptions: {
@@ -94,17 +103,17 @@ function Te(t) {
     }
   });
 }
-function U(t) {
+function I(t) {
   var e, s;
   return (s = (e = t.$store) == null ? void 0 : e.atoms) == null ? void 0 : s.session;
 }
-function qe(t) {
+function Ge(t) {
   return JSON.stringify({
     source: t,
     timestamp: Date.now()
   });
 }
-function He(t) {
+function Ke(t) {
   if (typeof t != "string")
     return null;
   try {
@@ -114,53 +123,53 @@ function He(t) {
     return null;
   }
 }
-function je(t) {
+function We(t) {
   return t.join(".");
 }
-function xe(t) {
-  const e = je(t), s = ze.get(e);
-  return s ? new v(s, {
+function Ye(t) {
+  const e = We(t), s = qe.get(e);
+  return s ? new E(s, {
     code: "UNSUPPORTED_AUTH_METHOD"
   }) : null;
 }
 async function ee(t) {
   var e;
   try {
-    return await ((e = U(t)) == null ? void 0 : e.get().refetch()), !0;
+    return await ((e = I(t)) == null ? void 0 : e.get().refetch()), !0;
   } catch {
     return !1;
   }
 }
-function Ie() {
-  return z === void 0 && (z = typeof BroadcastChannel < "u" ? new BroadcastChannel(Ve) : null), z;
+function Te() {
+  return F === void 0 && (F = typeof BroadcastChannel < "u" ? new BroadcastChannel(He) : null), F;
 }
 function ae(t) {
-  const e = He(t);
+  const e = Ke(t);
   if (e)
-    for (const [s, i] of $) {
+    for (const [s, i] of C) {
       if (s === e.source)
         continue;
       const n = i.deref();
       if (!n) {
-        $.delete(s);
+        C.delete(s);
         continue;
       }
       ee(n);
     }
 }
-function We() {
+function Je() {
   var t;
-  oe || (oe = !0, (t = Ie()) == null || t.addEventListener("message", (e) => {
+  oe || (oe = !0, (t = Te()) == null || t.addEventListener("message", (e) => {
     ae(e.data);
   }), typeof window < "u" && window.addEventListener("storage", (e) => {
     e.key !== _e || e.newValue === null || ae(e.newValue);
   }));
 }
-function Ge(t, e) {
-  ne ? $.set(t, new ne(e)) : ($.clear(), $.set(t, new De(e))), D == null || D.register(e, t), We();
+function Xe(t, e) {
+  ne ? C.set(t, new ne(e)) : (C.clear(), C.set(t, new xe(e))), H == null || H.register(e, t), Je();
 }
-function C(t) {
-  const e = qe(t), s = Ie();
+function R(t) {
+  const e = Ge(t), s = Te();
   let i = !1;
   if (s)
     try {
@@ -173,11 +182,11 @@ function C(t) {
     } catch {
     }
 }
-function q(t) {
+function z(t) {
   if (!(typeof window > "u"))
     try {
       window.sessionStorage.setItem(
-        F,
+        V,
         JSON.stringify({
           path: t,
           createdAt: Date.now()
@@ -186,287 +195,315 @@ function q(t) {
     } catch {
     }
 }
-function A() {
+function T() {
   if (!(typeof window > "u"))
     try {
-      window.sessionStorage.removeItem(F);
+      window.sessionStorage.removeItem(V);
     } catch {
     }
 }
-function Ke(t) {
+function Ze(t) {
   return !!(t != null && t.session && (t != null && t.user));
 }
-function h(t) {
+function m(t) {
   return t instanceof Date ? t.toISOString() : t === null || typeof t == "string" || typeof t == "number" || typeof t == "boolean" ? t : t == null ? null : String(t);
 }
-function Ye(t) {
+function Qe(t) {
   return t ? JSON.stringify({
     session: {
-      createdAt: h(t.session.createdAt),
-      expiresAt: h(t.session.expiresAt),
-      id: h(t.session.id),
-      impersonatedBy: h(t.session.impersonatedBy),
-      ipAddress: h(t.session.ipAddress),
-      token: h(t.session.token),
-      updatedAt: h(t.session.updatedAt),
-      userAgent: h(t.session.userAgent),
-      userId: h(t.session.userId)
+      createdAt: m(t.session.createdAt),
+      expiresAt: m(t.session.expiresAt),
+      id: m(t.session.id),
+      impersonatedBy: m(t.session.impersonatedBy),
+      ipAddress: m(t.session.ipAddress),
+      token: m(t.session.token),
+      updatedAt: m(t.session.updatedAt),
+      userAgent: m(t.session.userAgent),
+      userId: m(t.session.userId)
     },
     user: {
-      banExpires: h(t.user.banExpires),
-      banReason: h(t.user.banReason),
-      banned: h(t.user.banned),
-      createdAt: h(t.user.createdAt),
-      email: h(t.user.email),
-      emailVerified: h(t.user.emailVerified),
-      id: h(t.user.id),
-      image: h(t.user.image),
-      lastLoginAt: h(t.user.lastLoginAt),
-      name: h(t.user.name),
-      role: h(t.user.role),
-      updatedAt: h(t.user.updatedAt)
+      banExpires: m(t.user.banExpires),
+      banReason: m(t.user.banReason),
+      banned: m(t.user.banned),
+      createdAt: m(t.user.createdAt),
+      email: m(t.user.email),
+      emailVerified: m(t.user.emailVerified),
+      id: m(t.user.id),
+      image: m(t.user.image),
+      lastLoginAt: m(t.user.lastLoginAt),
+      name: m(t.user.name),
+      role: m(t.user.role),
+      updatedAt: m(t.user.updatedAt)
     }
   }) : "__null__";
 }
-function Ce() {
+function Ie() {
   if (typeof window > "u")
     return null;
   try {
-    const t = window.sessionStorage.getItem(F);
+    const t = window.sessionStorage.getItem(V);
     if (!t)
       return null;
     const e = JSON.parse(t);
-    return !e || typeof e != "object" || typeof e.createdAt != "number" || Date.now() - e.createdAt > Ne ? null : { createdAt: e.createdAt };
+    return !e || typeof e != "object" || typeof e.createdAt != "number" || Date.now() - e.createdAt > ze ? null : { createdAt: e.createdAt };
   } catch {
     return null;
   }
 }
 function le() {
-  if (!Ce())
+  if (!Ie())
     return !1;
   try {
-    window.sessionStorage.removeItem(F);
+    window.sessionStorage.removeItem(V);
   } catch {
   }
   return !0;
 }
-function Je() {
-  return Ce() !== null;
+function et() {
+  return Ie() !== null;
 }
-function Ze(t) {
+function tt(t) {
   if (!(t && typeof t == "object") || "error" in t && t.error)
     return !1;
   const e = "data" in t ? t.data : t;
   return e && typeof e == "object" ? "token" in e && typeof e.token == "string" && e.token.length > 0 ? !0 : "session" in e && "user" in e && !!e.session && !!e.user : !1;
 }
-function Qe(t) {
+function st(t) {
   if (!(t && typeof t == "object") || "error" in t && t.error)
     return !1;
   const e = "data" in t ? t.data : t;
   return e && typeof e == "object" ? "url" in e && typeof e.url == "string" : !1;
 }
-function Xe(t) {
-  if (L(t) || !(t && typeof t == "object"))
+function it(t) {
+  if (A(t) || !(t && typeof t == "object"))
     return !1;
   const e = "data" in t ? t.data : t;
   return e && typeof e == "object" ? "user" in e && !!e.user && "token" in e && e.token === null && !("url" in e) : !1;
 }
-function et(t, e) {
+function nt(t, e) {
   if (t.length !== 1 || t[0] !== "changePassword")
     return !1;
   const [s] = e;
   return !!(s && typeof s == "object" && "revokeOtherSessions" in s && s.revokeOtherSessions === !0);
 }
-function L(t) {
+function A(t) {
   return !!(t && typeof t == "object" && "error" in t && t.error);
 }
-function tt(t) {
-  if (L(t) || !(t && typeof t == "object"))
+function rt(t) {
+  if (A(t) || !(t && typeof t == "object"))
     return !1;
   const e = "data" in t ? t.data : t;
   return e && typeof e == "object" ? "message" in e && e.message === "User deleted" : !1;
 }
-function st(t) {
+function ot(t) {
   return !!(t && (typeof t == "object" || typeof t == "function") && "then" in t && typeof t.then == "function");
 }
-function H(t) {
-  return Pe(t, "Failed to load the current session.", "SESSION_LOOKUP_FAILED");
+function j(t) {
+  return Se(t, "Failed to load the current session.", "SESSION_LOOKUP_FAILED");
 }
-async function it(t) {
+async function at(t) {
   var s, i;
   let e = null;
   try {
-    await ((s = U(t)) == null ? void 0 : s.get().refetch());
+    await ((s = I(t)) == null ? void 0 : s.get().refetch());
   } catch (n) {
     e = n;
   } finally {
-    (i = t[Re]) == null || i.call(t);
+    (i = t[Ae]) == null || i.call(t);
   }
   if (e)
     throw e;
 }
-function nt() {
-  const t = Te(), e = `${Date.now()}-${Math.random().toString(36).slice(2)}`;
-  Ge(e, t);
+function lt() {
+  const t = Re(), e = `${Date.now()}-${Math.random().toString(36).slice(2)}`;
+  Xe(e, t);
   const s = 2, i = 500;
-  let n = null, a = !1, m;
-  const b = (o) => (m = o, o), _ = () => {
+  let n = null, a = !1, u;
+  const g = (o) => (u = o, o), S = () => {
     var c;
-    const o = (c = U(t)) == null ? void 0 : c.get();
-    return o != null && o.error && !o.data && m !== void 0 ? m : (o == null ? void 0 : o.data) ?? m ?? null;
-  }, R = () => a ? Promise.resolve(_()) : (n || (n = (async () => {
-    var l, u, y;
+    const o = (c = I(t)) == null ? void 0 : c.get();
+    return o != null && o.error && !o.data && u !== void 0 ? u : (o == null ? void 0 : o.data) ?? u ?? null;
+  }, U = () => a ? Promise.resolve(S()) : (n || (n = (async () => {
+    var l, h, y;
     let o = !1, c = null;
     try {
-      for (let g = 0; g <= s; g++) {
+      for (let b = 0; b <= s; b++) {
         let d = null;
         try {
           d = await t.getSession();
-        } catch (S) {
-          c = S;
+        } catch (P) {
+          c = P;
         }
-        const w = ((l = U(t)) == null ? void 0 : l.get().data) ?? null;
-        if ((u = d == null ? void 0 : d.data) != null && u.session && ((y = d.data) != null && y.user))
-          return a = !0, le() && C(e), b(d.data);
-        if (w != null && w.session && (w != null && w.user))
-          return a = !0, le() && C(e), b(w);
-        if (d != null && d.error ? c = d.error : d && (o = !0), d && !d.error && Je() && g < s) {
+        const p = ((l = I(t)) == null ? void 0 : l.get().data) ?? null;
+        if ((h = d == null ? void 0 : d.data) != null && h.session && ((y = d.data) != null && y.user))
+          return a = !0, le() && R(e), g(d.data);
+        if (p != null && p.session && (p != null && p.user))
+          return a = !0, le() && R(e), g(p);
+        if (d != null && d.error ? c = d.error : d && (o = !0), d && !d.error && et() && b < s) {
           await new Promise(
-            (S) => setTimeout(S, i)
+            (P) => setTimeout(P, i)
           );
           continue;
         }
         if (d && !d.error) {
-          const S = _();
-          return a = !0, b(S);
+          const P = S();
+          return a = !0, g(P);
         }
-        g < s && await new Promise(
-          (S) => setTimeout(S, i)
+        b < s && await new Promise(
+          (P) => setTimeout(P, i)
         );
       }
       if (!o)
-        throw n = null, new v("Failed to load the current session.", {
+        throw n = null, new E("Failed to load the current session.", {
           code: "SESSION_LOOKUP_FAILED",
           cause: c
         });
-      const f = _();
-      return a = !0, b(f);
-    } catch (f) {
-      throw n = null, H(f);
+      const w = S();
+      return a = !0, g(w);
+    } catch (w) {
+      throw n = null, j(w);
     }
   })()), n);
-  R().catch(() => {
+  U().catch(() => {
   });
-  const T = async () => {
+  const $ = async () => {
     var o, c;
     try {
       const l = await t.getSession();
       if ((o = l.data) != null && o.session && ((c = l.data) != null && c.user))
         return l.data;
-      throw l.error ? H(l.error) : new v("No authenticated session is available.", {
+      throw l.error ? j(l.error) : new E("No authenticated session is available.", {
         code: "UNAUTHENTICATED"
       });
     } catch (l) {
-      throw H(l);
+      throw j(l);
     }
-  }, I = async () => {
-    await ee(t), C(e);
-  }, Ae = async () => {
+  }, v = async () => {
+    await ee(t), R(e);
+  }, Be = async () => {
     var l;
-    const o = await ee(t), c = ((l = U(t)) == null ? void 0 : l.get().data) ?? null;
-    Ke(c) ? (A(), C(e)) : o || C(e);
-  }, Ue = (o) => {
-    let c = !1, l = !1, u;
+    const o = await ee(t), c = ((l = I(t)) == null ? void 0 : l.get().data) ?? null;
+    Ze(c) ? (T(), R(e)) : o || R(e);
+  }, Me = (o) => {
+    let c = !1, l = !1, h;
     const y = (d) => {
-      const w = Ye(d);
-      w !== u && (u = w, o(d));
+      const p = Qe(d);
+      p !== h && (h = p, o(d));
     };
-    R().then((d) => {
-      c || (l = !0, y(b(d)));
+    U().then((d) => {
+      c || (l = !0, y(g(d)));
     }).catch(() => {
       c || (l = !0);
     });
-    const f = U(t);
-    if (!f)
+    const w = I(t);
+    if (!w)
       return () => {
         c = !0;
       };
-    const g = f.subscribe((d) => {
+    const b = w.subscribe((d) => {
       if (c || !l || d.error && !d.data)
         return;
-      const w = d.data ?? null;
-      y(b(w));
+      const p = d.data ?? null;
+      y(g(p));
     });
     return () => {
-      c = !0, g();
+      c = !0, b();
     };
-  }, $e = async (o, c, l) => {
-    const u = o[0], y = o.length >= 2 && u === "emailOtp" && o[1] === "verifyEmail", f = o.length >= 2 && u === "emailOtp" && o[1] === "resetPassword", g = o.length >= 2 && u === "resetPassword" && o[1] === "emailOtp";
-    return o.length === 1 && (u === "deleteUser" || u === "deleteUserCallback") ? (A(), tt(l) && await I(), l) : o.length === 1 && u && Fe.has(u) ? (A(), L(l) || await I(), l) : et(o, c) && !L(l) ? (A(), await I(), l) : (f || g) && !L(l) ? (A(), await I(), l) : o.length === 1 && u === "changeEmail" && !L(l) ? (await I(), l) : ((u === "signIn" || u === "signUp" || y) && Ze(l) ? (A(), await I()) : (u === "signIn" || u === "signUp") && Qe(l) || u === "signUp" && Xe(l) ? q(o) : u === "verifyEmail" && !L(l) && (q(o), await Ae()), l);
+  }, Oe = async (o, c, l) => {
+    const h = o[0], y = o.length >= 2 && h === "emailOtp" && o[1] === "verifyEmail", w = o.length >= 2 && h === "emailOtp" && o[1] === "resetPassword", b = o.length >= 2 && h === "resetPassword" && o[1] === "emailOtp";
+    return o.length === 1 && (h === "deleteUser" || h === "deleteUserCallback") ? (T(), rt(l) && await v(), l) : o.length === 1 && h && je.has(h) ? (T(), A(l) || await v(), l) : nt(o, c) && !A(l) ? (T(), await v(), l) : (w || b) && !A(l) ? (T(), await v(), l) : o.length === 1 && h === "changeEmail" && !A(l) ? (await v(), l) : ((h === "signIn" || h === "signUp" || y) && tt(l) ? (T(), await v()) : (h === "signIn" || h === "signUp") && st(l) || h === "signUp" && it(l) ? z(o) : h === "verifyEmail" && !A(l) && (z(o), await Be()), l);
   }, se = /* @__PURE__ */ new WeakMap(), ie = (o, c) => {
     if (!o || typeof o != "object" && typeof o != "function")
       return o;
     const l = se.get(o);
     if (l)
       return l;
-    const u = new Proxy(o, {
-      get(y, f, g) {
+    const h = new Proxy(o, {
+      get(y, w, b) {
         if (c.length === 0) {
-          if (f === "requireSession")
-            return T;
-          if (f === "onSessionChange")
-            return Ue;
-          if (f === Re)
+          if (w === "requireSession")
+            return $;
+          if (w === "onSessionChange")
+            return Me;
+          if (w === Ae)
             return () => {
-              C(e);
+              R(e);
             };
         }
-        const d = Reflect.get(y, f, g);
-        return typeof f != "string" ? d : ie(d, [...c, f]);
+        const d = Reflect.get(y, w, b);
+        return typeof w != "string" ? d : ie(d, [...c, w]);
       },
-      apply(y, f, g) {
-        const d = xe(c);
+      apply(y, w, b) {
+        const d = Ye(c);
         if (d)
           throw d;
-        const w = Reflect.apply(
+        const p = Reflect.apply(
           y,
-          f,
-          g
+          w,
+          b
         );
-        return st(w) ? Promise.resolve(w).then(
-          (S) => $e(c, g, S)
-        ) : w;
+        return ot(p) ? Promise.resolve(p).then(
+          (P) => Oe(c, b, P)
+        ) : p;
       }
     });
-    return se.set(o, u), u;
+    return se.set(o, h), h;
   };
   return ie(t, []);
 }
-function rt() {
-  return Te({ disableDefaultRedirectPlugin: !0 });
+function dt() {
+  return Re({ disableDefaultRedirectPlugin: !0 });
 }
-function ot(t) {
+const Ce = "/api/_es/dev";
+function ct() {
+  if (typeof document > "u") return !1;
+  const t = document.querySelector('meta[name="edgespark-local-dev"]');
+  return (t == null ? void 0 : t.getAttribute("content")) === "true";
+}
+async function ut(t) {
+  const e = typeof window < "u" ? window.location.origin : "";
+  if (!e) return !1;
+  const s = await fetch(
+    `${e}${Ce}/auto-verify?email=${encodeURIComponent(t)}`,
+    { credentials: "include" }
+  );
+  return s.ok ? (await s.json()).verified === !0 : !1;
+}
+async function ht(t) {
+  const e = typeof window < "u" ? window.location.origin : "";
+  if (!e) return null;
+  try {
+    const s = await fetch(
+      `${e}${Ce}/pending-otp?email=${encodeURIComponent(t)}`,
+      { credentials: "include" }
+    );
+    return s.ok ? (await s.json()).otp ?? null : null;
+  } catch {
+    return null;
+  }
+}
+function mt(t) {
   const e = (() => {
     if (t instanceof URL)
       return t;
     const s = t.trim();
     if (!s)
-      throw new p("redirectTo must not be an empty string.");
+      throw new f("redirectTo must not be an empty string.");
     try {
       return new URL(s, window.location.href);
     } catch {
-      throw new p(
+      throw new f(
         `redirectTo must be a valid relative path or URL. Received: ${JSON.stringify(t)}`
       );
     }
   })();
   if (e.protocol !== "http:" && e.protocol !== "https:")
-    throw new p(
+    throw new f(
       `redirectTo must resolve to an http(s) URL. Received protocol: ${e.protocol}`
     );
   return e;
 }
-function at(t, e) {
+function ft(t, e) {
   return e ? {
     common: { ...t.common, ...e.common },
     signIn: { ...t.signIn, ...e.signIn },
@@ -541,7 +578,7 @@ const N = {
     invalidCode: "Enter the 6-digit verification code.",
     generic: "Something went wrong. Please try again."
   }
-}, j = {
+}, q = {
   common: {
     loading: "加载中…",
     redirecting: "跳转中…",
@@ -1237,9 +1274,9 @@ const N = {
 }, be = {
   en: N,
   "en-US": N,
-  zh: j,
-  "zh-CN": j,
-  "zh-TW": j,
+  zh: q,
+  "zh-CN": q,
+  "zh-TW": q,
   ja: de,
   "ja-JP": de,
   ko: ce,
@@ -1262,7 +1299,7 @@ const N = {
   hi: ge,
   "hi-IN": ge
 };
-function lt() {
+function wt() {
   if (typeof navigator > "u")
     return N;
   const t = navigator.languages ?? [navigator.language];
@@ -1272,14 +1309,54 @@ function lt() {
   }
   return N;
 }
-function W(t, e = "Authentication failed.") {
-  return Pe(t, e);
+const Ue = {
+  LIGHT: "light",
+  DARK: "dark"
+}, $e = Ue.LIGHT, pt = Ue.DARK, ke = [$e, pt], gt = $e, bt = {
+  BACKGROUND: "--edgespark-auth-bg",
+  BACKGROUND_MUTED: "--edgespark-auth-bg-muted",
+  CARD_BACKGROUND: "--edgespark-auth-card-bg",
+  BORDER: "--edgespark-auth-border",
+  TEXT: "--edgespark-auth-text",
+  TEXT_MUTED: "--edgespark-auth-text-muted",
+  DIVIDER_BACKGROUND: "--edgespark-auth-divider-bg",
+  PRIMARY: "--edgespark-auth-primary",
+  PRIMARY_HOVER: "--edgespark-auth-primary-hover",
+  PRIMARY_CONTRAST: "--edgespark-auth-primary-contrast",
+  ERROR: "--edgespark-auth-error",
+  INFO: "--edgespark-auth-info",
+  CARD_RADIUS: "--edgespark-auth-radius-card",
+  CONTROL_RADIUS: "--edgespark-auth-radius-control",
+  SHADOW: "--edgespark-auth-shadow",
+  FONT: "--edgespark-auth-font",
+  MODAL_BACKDROP: "--edgespark-auth-modal-backdrop",
+  MODAL_CARD_BACKGROUND: "--edgespark-auth-modal-card-bg",
+  MODAL_SHADOW: "--edgespark-auth-modal-shadow"
+}, vt = Object.values(
+  bt
+);
+function yt(t) {
+  return typeof t == "string" && ke.includes(t);
+}
+function Et(t) {
+  return vt.includes(t);
 }
-async function k(t) {
+function St(t) {
+  var e;
+  return {
+    theme: (t == null ? void 0 : t.theme) ?? gt,
+    className: ((e = t == null ? void 0 : t.className) == null ? void 0 : e.trim()) ?? "",
+    variables: { ...(t == null ? void 0 : t.variables) ?? {} }
+  };
+}
+function G(t, e = "Authentication failed.") {
+  return Se(t, e);
+}
+async function B(t) {
   var s, i;
   const e = await t.getSession();
   if (e.error)
-    throw new v(
+    throw new E(
       e.error.message || "Failed to load the current session.",
       {
         code: e.error.code ?? "SESSION_LOOKUP_FAILED",
@@ -1295,7 +1372,7 @@ async function k(t) {
     session: null
   };
 }
-const dt = "data-edgespark-auth", r = "edgespark-auth", G = "es_auth_completion", M = "es_auth_email", K = "oauth", B = "verify-sign-in", P = "verify-sign-up", ye = 200, Y = 2, ct = {
+const Pt = "data-edgespark-auth", Lt = "data-edgespark-auth-theme", r = "edgespark-auth", K = "es_auth_completion", M = "es_auth_email", W = "oauth", k = "verify-sign-in", L = "verify-sign-up", ve = 200, Y = 2, _t = {
   "&": "&amp;",
   "<": "&lt;",
   ">": "&gt;",
@@ -1309,25 +1386,25 @@ const dt = "data-edgespark-auth", r = "edgespark-auth", G = "es_auth_completion"
   gitlab: "GitLab",
   discord: "Discord"
 };
-function E(t) {
+function _(t) {
   return "redirectTo" in t;
 }
-function Z(t) {
+function X(t) {
   return "onSuccess" in t && !("redirectTo" in t);
 }
-function Q(t) {
+function Z(t) {
   return !t || typeof t != "string" ? !1 : /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(t.trim());
 }
-function ut(t) {
+function At(t) {
   return /^\d{6}$/.test(t.trim());
 }
-function ht(t) {
+function Rt(t) {
   return t === "email" || t === "name" || t === "password" || t === "confirmPassword" || t === "code" || t === "newPassword";
 }
-function mt(t) {
+function Tt(t) {
   return !!(t.error || t.errorDescription);
 }
-class ft {
+class It {
   constructor(e, s, i, n, a) {
     this.container = e, this.auth = s, this.options = i, this.loadConfig = n, this.runtimeOptions = a, this.state = {
       view: "loading",
@@ -1341,7 +1418,12 @@ class ft {
       confirmPassword: "",
       code: "",
       newPassword: ""
-    }, this.destroyed = !1, this.terminalActionInProgress = !1, this.config = null, this.countdownUntil = null, this.countdownTimer = null, this.pendingFocusSnapshot = null, this.focusRestoreTimer = null, this.verificationCompletionAction = null, this.labels = at(lt(), i.labels), this.root = document.createElement("div"), this.root.setAttribute(dt, ""), e.innerHTML = "", e.appendChild(this.root), this.render(), this.initialize();
+    }, this.destroyed = !1, this.terminalActionInProgress = !1, this.config = null, this.countdownUntil = null, this.countdownTimer = null, this.pendingFocusSnapshot = null, this.focusRestoreTimer = null, this.verificationCompletionAction = null;
+    const u = St(i.appearance);
+    this.labels = ft(wt(), i.labels), this.root = document.createElement("div"), this.root.className = u.className ? `${r} ${u.className}` : r, this.root.setAttribute(Pt, ""), this.root.setAttribute(Lt, u.theme);
+    for (const [g, S] of Object.entries(u.variables))
+      S !== void 0 && this.root.style.setProperty(g, S);
+    e.innerHTML = "", e.appendChild(this.root), this.render(), this.initialize();
   }
   destroy() {
     this.destroyed || (this.destroyed = !0, this.clearCountdown(), this.clearFocusRestoreTimer(), this.container.innerHTML = "");
@@ -1356,7 +1438,7 @@ class ft {
       if (this.destroyed)
         return;
       if (i.status === "rejected") {
-        if (e.marker && !mt(e) && E(this.options)) {
+        if (e.marker && !Tt(e) && _(this.options)) {
           this.redirectAfterManagedReturnLookupFailure();
           return;
         }
@@ -1364,11 +1446,11 @@ class ft {
         const a = i.value;
         if (a.user && a.session) {
           switch (e.marker) {
-            case K:
-            case B:
+            case W:
+            case k:
               await this.completeAuth("sign-in", a);
               return;
-            case P:
+            case L:
               await this.completeAuth("sign-up", a);
               return;
             default:
@@ -1391,24 +1473,24 @@ class ft {
     }
   }
   redirectAfterManagedReturnLookupFailure() {
-    E(this.options) && this.navigateToRedirect();
+    _(this.options) && this.navigateToRedirect();
   }
   navigateToRedirect() {
-    E(this.options) && (this.terminalActionInProgress = !0, this.state.busy = !0, this.state.busyLabel = this.labels.common.redirecting, this.state.error = null, this.state.notice = null, this.render(), window.location.assign(ot(this.options.redirectTo).toString()));
+    _(this.options) && (this.terminalActionInProgress = !0, this.state.busy = !0, this.state.busyLabel = this.labels.common.redirecting, this.state.error = null, this.state.notice = null, this.render(), window.location.assign(mt(this.options.redirectTo).toString()));
   }
   async readMountSession(e) {
     if (!e.marker)
-      return k(this.auth);
+      return B(this.auth);
     let s = null;
     for (let i = 0; i <= Y; i++) {
       try {
-        const n = await k(this.auth);
+        const n = await B(this.auth);
         if (n.user && n.session)
           return n;
       } catch (n) {
         s = n;
       }
-      i < Y && await new Promise((n) => setTimeout(n, ye));
+      i < Y && await new Promise((n) => setTimeout(n, ve));
     }
     if (s)
       throw s;
@@ -1427,6 +1509,7 @@ class ft {
     }
     this.root.innerHTML = `
       <div class="${r}__shell">
+        ${this.renderDevModeBanner()}
         <div class="${r}__card">
           ${this.renderStatus()}
           ${this.renderCurrentView()}
@@ -1444,6 +1527,10 @@ class ft {
       </div>
     `;
   }
+  renderDevModeBanner() {
+    var e;
+    return (e = this.config) != null && e.isLocalDev ? `<div class="${r}__dev-banner">Local dev mode — emails are mocked, OAuth uses test identities</div>` : "";
+  }
   renderStatus() {
     const e = [];
     return this.state.error && e.push(
@@ -1642,12 +1729,12 @@ class ft {
     this.root.querySelectorAll("form[data-view]").forEach((n) => {
       n.addEventListener("submit", (a) => {
         a.preventDefault();
-        const m = n.dataset.view;
-        m === "sign-in" && this.handleSignIn(), m === "sign-up" && this.handleSignUp(), m === "forgot-password" && this.handleForgotPassword(), m === "reset-password" && this.handleResetPassword();
+        const u = n.dataset.view;
+        u === "sign-in" && this.handleSignIn(), u === "sign-up" && this.handleSignUp(), u === "forgot-password" && this.handleForgotPassword(), u === "reset-password" && this.handleResetPassword();
       });
     }), this.root.querySelectorAll("input[name]").forEach((n) => {
       n.addEventListener("input", () => {
-        ht(n.name) && (this.state[n.name] = n.value);
+        Rt(n.name) && (this.state[n.name] = n.value);
       });
     }), this.root.querySelectorAll("[data-action]").forEach((n) => {
       n.addEventListener("click", () => {
@@ -1660,7 +1747,7 @@ class ft {
     this.clearCountdown(), e !== "verify-email" && (this.verificationCompletionAction = null), this.state.view = e, this.state.error = null, this.state.notice = null, this.state.busy = !1, this.state.busyLabel = void 0, this.terminalActionInProgress = !1, this.render();
   }
   async handleSignIn() {
-    if (!Q(this.state.email)) {
+    if (!Z(this.state.email)) {
       this.failValidation(this.labels.errors.invalidEmail);
       return;
     }
@@ -1672,7 +1759,7 @@ class ft {
       const e = await this.auth.signIn.email({
         email: this.state.email.trim(),
         password: this.state.password,
-        callbackURL: this.getManagedReturnURL(B, this.state.email.trim())
+        callbackURL: this.getManagedReturnURL(k, this.state.email.trim())
       });
       if (e.error)
         throw e.error;
@@ -1685,7 +1772,7 @@ class ft {
       this.failValidation(this.labels.errors.requiredField);
       return;
     }
-    if (!Q(this.state.email)) {
+    if (!Z(this.state.email)) {
       this.failValidation(this.labels.errors.invalidEmail);
       return;
     }
@@ -1709,12 +1796,14 @@ class ft {
         name: this.state.name.trim(),
         email: this.state.email.trim(),
         password: this.state.password,
-        callbackURL: this.getManagedReturnURL(P, this.state.email.trim())
+        callbackURL: this.getManagedReturnURL(L, this.state.email.trim())
       });
       if (i.error)
         throw i.error;
       if ((n = this.config) != null && n.requireEmailVerification) {
-        this.verificationCompletionAction = "sign-up", this.state.view = "verify-email", this.state.notice = "Check your inbox to verify your email address.", this.startCountdown();
+        if (this.config.isLocalDev && await this.tryDevAutoVerify("sign-up", i.data))
+          return;
+        this.verificationCompletionAction = "sign-up", this.state.view = "verify-email", this.state.notice = this.config.isLocalDev ? "Dev mode: auto-verify didn’t complete. Click resend to retry." : "Check your inbox to verify your email address.", this.startCountdown();
         return;
       }
       await this.completeAuth("sign-up", await this.resolveAuthCompletionData(i.data));
@@ -1731,28 +1820,35 @@ class ft {
         throw s.error;
       const i = this.extractRedirectURL(s.data);
       if (!i)
-        throw new p(`OAuth sign-in did not return a redirect URL for provider "${e}".`);
+        throw new f(`OAuth sign-in did not return a redirect URL for provider "${e}".`);
       this.terminalActionInProgress = !0, this.state.busy = !0, this.state.busyLabel = `Opening ${J[e]}…`, this.state.error = null, this.state.notice = null, this.render(), window.location.assign(i);
     });
   }
   async handleForgotPassword() {
     if (!this.canUsePasswordResetEmailOtp()) {
       this.handleError(
-        new p("Password reset via email OTP is not enabled for this project.")
+        new f("Password reset via email OTP is not enabled for this project.")
       );
       return;
     }
-    if (!Q(this.state.email)) {
+    if (!Z(this.state.email)) {
       this.failValidation(this.labels.errors.invalidEmail);
       return;
     }
     await this.runAction("Sending reset code…", async () => {
+      var s;
       const e = await this.passwordResetEndpoints().forgetPassword.emailOtp({
         email: this.state.email.trim()
       });
       if (e.error)
         throw e.error;
-      this.state.view = "reset-password", this.state.notice = `We sent a reset code to ${this.state.email.trim()}.`, this.startCountdown();
+      if (this.state.view = "reset-password", (s = this.config) != null && s.isLocalDev) {
+        this.state.busyLabel = "Dev mode: fetching reset code…", this.render();
+        const i = await ht(this.state.email.trim());
+        i ? (this.state.code = i, this.state.notice = `Dev mode: reset code auto-filled (${i})`) : this.state.notice = "Dev mode: could not retrieve reset code — check server logs";
+      } else
+        this.state.notice = `We sent a reset code to ${this.state.email.trim()}.`;
+      this.startCountdown();
     });
   }
   async resendResetCode() {
@@ -1762,11 +1858,11 @@ class ft {
     var e, s;
     if (!this.canUsePasswordResetEmailOtp()) {
       this.handleError(
-        new p("Password reset via email OTP is not enabled for this project.")
+        new f("Password reset via email OTP is not enabled for this project.")
       );
       return;
     }
-    if (!ut(this.state.code)) {
+    if (!At(this.state.code)) {
       this.failValidation(this.labels.errors.invalidCode);
       return;
     }
@@ -1796,14 +1892,39 @@ class ft {
     });
   }
   async resendVerificationEmail() {
+    var e;
+    if ((e = this.config) != null && e.isLocalDev) {
+      if (this.isCountdownActive()) return;
+      await this.runAction("Dev mode: retrying auto-verify…", async () => {
+        const s = this.verificationCompletionAction ?? "sign-in";
+        if (!await this.tryDevAutoVerify(s))
+          throw new Error(
+            "Dev auto-verify did not complete. Check the edgespark dev logs and try again."
+          );
+      });
+      return;
+    }
     await this.sendVerificationEmail(!1);
   }
+  /**
+   * Drive the local-dev auto-verify endpoint and, on success, complete the
+   * auth flow. Returns whether auto-verify completed — callers decide what
+   * to do on `false` (sign-up falls through to a retry UI; resend throws).
+   */
+  async tryDevAutoVerify(e, s) {
+    const i = this.state.email.trim();
+    try {
+      return this.state.busyLabel = "Dev mode: auto-verifying email…", this.render(), await ut(i) ? (this.state.notice = "Dev mode: email verification auto-completed", await this.completeAuth(e, await this.resolveAuthCompletionData(s)), !0) : (console.warn("[edgespark] Dev auto-verify returned false — falling through"), !1);
+    } catch (n) {
+      return console.warn("[edgespark] Dev auto-verify failed:", n), !1;
+    }
+  }
   async sendVerificationEmail(e) {
     !e && this.isCountdownActive() || await this.runAction("Sending verification email…", async () => {
       const s = await this.auth.sendVerificationEmail({
         email: this.state.email.trim(),
         callbackURL: this.getManagedReturnURL(
-          this.verificationCompletionAction === "sign-up" ? P : B,
+          this.verificationCompletionAction === "sign-up" ? L : k,
           this.state.email.trim()
         )
       });
@@ -1821,12 +1942,12 @@ class ft {
     if (!i.user || !i.session) {
       if (this.destroyed)
         return;
-      if (i.lookupError && E(this.options)) {
+      if (i.lookupError && _(this.options)) {
         this.navigateToRedirect();
         return;
       }
       if (e === "sign-in")
-        throw i.lookupError ?? new Se(
+        throw i.lookupError ?? new Ee(
           "Managed sign-in completed without an authenticated session."
         );
       this.state.view = "sign-in", this.state.password = "", this.state.confirmPassword = "", this.state.error = null, this.state.busy = !1, this.state.busyLabel = void 0, this.state.notice = "Account created. Sign in to continue.", this.render();
@@ -1838,11 +1959,11 @@ class ft {
       session: i.session
     };
     if (await this.syncPublicSessionBestEffort(), !this.destroyed) {
-      if (E(this.options)) {
+      if (_(this.options)) {
         this.invokeRedirectModeSuccessHook(n), this.navigateToRedirect();
         return;
       }
-      if (Z(this.options)) {
+      if (X(this.options)) {
         this.options.onSuccess(n), this.terminalActionInProgress = !0;
         return;
       }
@@ -1853,9 +1974,9 @@ class ft {
       return e;
     let s = e.lookupError;
     for (let i = 0; i < Y; i++) {
-      await new Promise((n) => setTimeout(n, ye));
+      await new Promise((n) => setTimeout(n, ve));
       try {
-        const n = await k(this.auth);
+        const n = await B(this.auth);
         if (n.user && n.session)
           return {
             user: n.user,
@@ -1879,7 +2000,7 @@ class ft {
   }
   async resolveAuthCompletionData(e) {
     try {
-      const s = await k(this.auth), i = this.extractUser(e);
+      const s = await B(this.auth), i = this.extractUser(e);
       return {
         user: s.user ?? i,
         session: s.session
@@ -1899,7 +2020,7 @@ class ft {
       session: null
     };
     if (await this.syncPublicSessionBestEffort(), !this.destroyed) {
-      if (Z(this.options)) {
+      if (X(this.options)) {
         this.clearCountdown(), this.options.onSuccess(e), this.terminalActionInProgress = !0;
         return;
       }
@@ -1907,12 +2028,12 @@ class ft {
     }
   }
   handleExistingSessionOnMount() {
-    if (E(this.options)) {
+    if (_(this.options)) {
       this.navigateToRedirect();
       return;
     }
-    if (Z(this.options))
-      throw this.state.view = "sign-in", this.state.busy = !1, this.state.busyLabel = void 0, this.state.notice = null, new p(
+    if (X(this.options))
+      throw this.state.view = "sign-in", this.state.busy = !1, this.state.busyLabel = void 0, this.state.notice = null, new f(
         "authUI.mount(container, { onSuccess }) cannot run while a session already exists. Check es.auth.getSession() before mounting controlled auth UI."
       );
   }
@@ -1929,18 +2050,18 @@ class ft {
     !this.destroyed && !this.terminalActionInProgress && (this.state.busy = !1, this.state.busyLabel = void 0, this.render());
   }
   maybeHandleVerificationRequired(e) {
-    return W(e).code !== "EMAIL_NOT_VERIFIED" ? !1 : (this.verificationCompletionAction = "sign-in", this.state.view = "verify-email", this.state.busy = !1, this.state.busyLabel = void 0, this.state.error = null, this.state.notice = `Verify your email to finish signing in as ${this.state.email.trim()}.`, this.render(), this.sendVerificationEmail(!0), !0);
+    return G(e).code !== "EMAIL_NOT_VERIFIED" ? !1 : (this.verificationCompletionAction = "sign-in", this.state.view = "verify-email", this.state.busy = !1, this.state.busyLabel = void 0, this.state.error = null, this.state.notice = `Verify your email to finish signing in as ${this.state.email.trim()}.`, this.render(), this.sendVerificationEmail(!0), !0);
   }
   handleVerificationEmailSent(e, s) {
     this.state.notice = s ? `We sent another verification email to ${e}.` : `We sent a verification email to ${e}.`, this.startCountdown();
   }
   invokeRedirectModeSuccessHook(e) {
     var s, i;
-    if (!(!E(this.options) || !this.options.onSuccess))
+    if (!(!_(this.options) || !this.options.onSuccess))
       try {
         this.options.onSuccess(e);
       } catch (n) {
-        const a = W(n, "Post-auth callback failed.");
+        const a = G(n, "Post-auth callback failed.");
         try {
           (i = (s = this.options).onError) == null || i.call(s, a);
         } catch {
@@ -1949,7 +2070,7 @@ class ft {
   }
   handleError(e, s) {
     var n, a;
-    const i = W(e, s);
+    const i = G(e, s);
     this.state.busy = !1, this.state.busyLabel = void 0, this.state.error = i.message, this.render(), (a = (n = this.options).onError) == null || a.call(n, i);
   }
   failValidation(e) {
@@ -1959,15 +2080,15 @@ class ft {
     if (!e)
       return window.location.href;
     const i = new URL(window.location.href);
-    return i.searchParams.set(G, e), s ? i.searchParams.set(M, s) : i.searchParams.delete(M), i.toString();
+    return i.searchParams.set(K, e), s ? i.searchParams.set(M, s) : i.searchParams.delete(M), i.toString();
   }
   consumeManagedReturnContext() {
-    const e = new URL(window.location.href), s = e.searchParams.get(G), i = s === K || s === B || s === P ? s : null, n = e.searchParams.get(M), a = i ? e.searchParams.get("error") : null, m = i ? e.searchParams.get("error_description") : null;
-    return (i || n) && (e.searchParams.delete(G), e.searchParams.delete(M), i && (e.searchParams.delete("error"), e.searchParams.delete("error_description")), window.history.replaceState(null, "", e.toString())), {
+    const e = new URL(window.location.href), s = e.searchParams.get(K), i = s === W || s === k || s === L ? s : null, n = e.searchParams.get(M), a = i ? e.searchParams.get("error") : null, u = i ? e.searchParams.get("error_description") : null;
+    return (i || n) && (e.searchParams.delete(K), e.searchParams.delete(M), i && (e.searchParams.delete("error"), e.searchParams.delete("error_description")), window.history.replaceState(null, "", e.toString())), {
       marker: i,
       email: n,
       error: a,
-      errorDescription: m
+      errorDescription: u
     };
   }
   startCountdown(e = 60) {
@@ -2031,10 +2152,10 @@ class ft {
     return !!((e = this.config) != null && e.passwordResetEmailOtpEnabled);
   }
   handleSessionlessManagedReturn(e) {
-    return e.email && (this.state.email = e.email), e.marker === P && !e.error ? (this.verificationCompletionAction = null, this.clearCountdown(), this.state.view = "sign-in", this.state.password = "", this.state.confirmPassword = "", this.state.error = null, this.state.busy = !1, this.state.busyLabel = void 0, this.state.notice = "Account created. Sign in to continue.", this.render(), !0) : e.marker === B || e.marker === P ? (this.verificationCompletionAction = e.marker === P ? "sign-up" : "sign-in", this.state.view = "verify-email", this.state.busy = !1, this.state.busyLabel = void 0, this.state.notice = null, e.error || e.errorDescription ? this.handleError(new v(
+    return e.email && (this.state.email = e.email), e.marker === L && !e.error ? (this.verificationCompletionAction = null, this.clearCountdown(), this.state.view = "sign-in", this.state.password = "", this.state.confirmPassword = "", this.state.error = null, this.state.busy = !1, this.state.busyLabel = void 0, this.state.notice = "Account created. Sign in to continue.", this.render(), !0) : e.marker === k || e.marker === L ? (this.verificationCompletionAction = e.marker === L ? "sign-up" : "sign-in", this.state.view = "verify-email", this.state.busy = !1, this.state.busyLabel = void 0, this.state.notice = null, e.error || e.errorDescription ? this.handleError(new E(
       e.errorDescription ?? "Verification failed. Request a new verification email and try again.",
       { code: e.error ?? "VERIFY_EMAIL_ERROR" }
-    )) : this.render(), !0) : e.marker === K && (e.error || e.errorDescription) ? (this.state.view = "sign-in", this.state.busy = !1, this.state.busyLabel = void 0, this.state.notice = null, this.handleError(new v(
+    )) : this.render(), !0) : e.marker === W && (e.error || e.errorDescription) ? (this.state.view = "sign-in", this.state.busy = !1, this.state.busyLabel = void 0, this.state.notice = null, this.handleError(new E(
       e.errorDescription ?? "OAuth sign-in failed.",
       { code: e.error ?? "OAUTH_ERROR" }
     )), !0) : !1;
@@ -2050,106 +2171,138 @@ class ft {
     return i <= 0 ? e : s.replace("{seconds}", String(i));
   }
   escape(e) {
-    return e.replace(/[&<>"']/g, (s) => ct[s]);
+    return e.replace(/[&<>"']/g, (s) => _t[s]);
   }
 }
-function wt(t) {
+function Ct(t) {
   return "data" in t && t.data ? t.data : t;
 }
-const pt = [
+const Ut = [
   { id: "google", key: "providerGoogle" },
   { id: "apple", key: "providerApple" },
   { id: "microsoft", key: "providerMicrosoft" },
   { id: "github", key: "providerGithub" },
   { id: "gitlab", key: "providerGitlab" },
   { id: "discord", key: "providerDiscord" }
-], ve = 2, gt = 500;
-async function bt() {
+], ye = 2, $t = 500;
+async function kt() {
   const t = `${window.location.origin}${Le}/config`;
   let e;
-  for (let s = 0; s <= ve; s++)
+  for (let s = 0; s <= ye; s++)
     try {
       const i = await fetch(t, { method: "GET", credentials: "include" });
       if (!i.ok)
-        throw new p(`Failed to load auth config: HTTP ${i.status}`);
-      const n = await i.json();
-      return vt(wt(n));
+        throw new f(`Failed to load auth config: HTTP ${i.status}`);
+      const n = await i.json(), a = Ct(n);
+      return Mt(a, ct());
     } catch (i) {
-      e = i, s < ve && await new Promise((n) => setTimeout(n, gt));
+      e = i, s < ye && await new Promise((n) => setTimeout(n, $t));
     }
   throw e;
 }
 let O = null;
-async function yt() {
-  return O || (O = bt().catch((t) => {
+async function Bt() {
+  return O || (O = kt().catch((t) => {
     throw O = null, t;
   })), O;
 }
-function vt(t) {
-  var s, i, n, a, m, b, _;
-  const e = pt.filter(({ key: R }) => {
-    const T = t[R];
-    return typeof T == "object" && T !== null && "enabled" in T && !!T.enabled;
-  }).map(({ id: R }) => R);
+function Mt(t, e = !1) {
+  var i, n, a, u, g, S, U;
+  const s = Ut.filter(({ key: $ }) => {
+    const v = t[$];
+    return typeof v == "object" && v !== null && "enabled" in v && !!v.enabled;
+  }).map(({ id: $ }) => $);
   return {
     disableSignUp: !!t.disableSignUp,
-    emailPasswordEnabled: !!((s = t.providerEmailPassword) != null && s.enabled),
-    minPasswordLength: ((n = (i = t.providerEmailPassword) == null ? void 0 : i.config) == null ? void 0 : n.minPasswordLength) ?? 8,
-    requireEmailVerification: !!((m = (a = t.providerEmailPassword) == null ? void 0 : a.config) != null && m.requireEmailVerification),
-    passwordResetEmailOtpEnabled: !!((_ = (b = t.providerEmailPassword) == null ? void 0 : b.config) != null && _.requirePasswordResetEmailVerification),
-    oauthProviders: e
+    emailPasswordEnabled: !!((i = t.providerEmailPassword) != null && i.enabled),
+    minPasswordLength: ((a = (n = t.providerEmailPassword) == null ? void 0 : n.config) == null ? void 0 : a.minPasswordLength) ?? 8,
+    requireEmailVerification: !!((g = (u = t.providerEmailPassword) == null ? void 0 : u.config) != null && g.requireEmailVerification),
+    passwordResetEmailOtpEnabled: !!((U = (S = t.providerEmailPassword) == null ? void 0 : S.config) != null && U.requirePasswordResetEmailVerification),
+    oauthProviders: s,
+    isLocalDev: e
   };
 }
-const V = /* @__PURE__ */ new WeakMap();
-function St(t) {
+const D = /* @__PURE__ */ new WeakMap();
+function Ot(t) {
   if (!t)
-    throw new p(
+    throw new f(
       "authUI.mount(container, options) requires either { redirectTo } or { onSuccess }."
     );
   const e = "redirectTo" in t, s = "onSuccess" in t && typeof t.onSuccess == "function";
   if (!e && !s)
-    throw new p(
+    throw new f(
       "authUI.mount(container, options) requires either { redirectTo } or { onSuccess }."
     );
   if ("redirectTo" in t) {
     const i = t.redirectTo;
     if (!(typeof i == "string" || i instanceof URL))
-      throw new p(
+      throw new f(
         "authUI.mount(container, options) expected redirectTo to be a string or URL."
       );
   }
   if ("onSuccess" in t && t.onSuccess !== void 0 && typeof t.onSuccess != "function")
-    throw new p(
+    throw new f(
       "authUI.mount(container, options) expected onSuccess to be a function."
     );
   if ("onError" in t && t.onError !== void 0 && typeof t.onError != "function")
-    throw new p(
+    throw new f(
       "authUI.mount(container, options) expected onError to be a function."
     );
+  if ("appearance" in t && t.appearance !== void 0) {
+    const i = t.appearance;
+    if (!i || typeof i != "object" || Array.isArray(i))
+      throw new f(
+        "authUI.mount(container, options) expected appearance to be an object."
+      );
+    if ("theme" in i && i.theme !== void 0 && !yt(i.theme))
+      throw new f(
+        `authUI.mount(container, options) expected appearance.theme to be one of: ${ke.join(", ")}.`
+      );
+    if ("className" in i && i.className !== void 0 && typeof i.className != "string")
+      throw new f(
+        "authUI.mount(container, options) expected appearance.className to be a string."
+      );
+    if ("variables" in i && i.variables !== void 0) {
+      if (!i.variables || typeof i.variables != "object" || Array.isArray(i.variables))
+        throw new f(
+          "authUI.mount(container, options) expected appearance.variables to be an object."
+        );
+      for (const [n, a] of Object.entries(i.variables)) {
+        if (!Et(n))
+          throw new f(
+            `authUI.mount(container, options) received unsupported appearance.variables key "${n}".`
+          );
+        if (a !== void 0 && typeof a != "string")
+          throw new f(
+            `authUI.mount(container, options) expected appearance.variables["${n}"] to be a string.`
+          );
+      }
+    }
+  }
 }
-function Pt(t) {
+function Dt(t) {
   if (!(t instanceof HTMLElement))
-    throw new p("authUI.mount(container, options) requires a real HTMLElement container.");
+    throw new f("authUI.mount(container, options) requires a real HTMLElement container.");
 }
-function Et(t, e) {
+function Nt(t, e) {
   return {
     mount(s, i) {
-      var b;
-      St(i), Pt(s), (b = V.get(s)) == null || b.destroy();
-      const n = new ft(s, t, i, yt, e), a = n.destroy.bind(n), m = {
+      var g;
+      Ot(i), Dt(s), (g = D.get(s)) == null || g.destroy();
+      const n = new It(s, t, i, Bt, e), a = n.destroy.bind(n), u = {
         destroy() {
-          a(), V.get(s) === m && V.delete(s);
+          a(), D.get(s) === u && D.delete(s);
         }
       };
-      return V.set(s, m), m;
+      return D.set(s, u), u;
     }
   };
 }
-function _t() {
-  Ee();
-  const t = nt(), e = rt(), s = Oe(), i = Et(e, {
+function Ft() {
+  Pe();
+  const t = lt(), e = dt(), s = Fe(), i = Nt(e, {
     syncPublicSession: async () => {
-      await it(t);
+      await at(t);
     }
   });
   return {
@@ -2159,14 +2312,21 @@ function _t() {
   };
 }
 export {
-  v as EdgeSparkAuthError,
-  p as EdgeSparkConfigError,
+  bt as AUTH_UI_APPEARANCE_VARIABLE,
+  vt as AUTH_UI_APPEARANCE_VARIABLE_NAMES,
+  gt as AUTH_UI_DEFAULT_THEME,
+  Ue as AUTH_UI_THEME,
+  ke as AUTH_UI_THEMES,
+  pt as AUTH_UI_THEME_DARK,
+  $e as AUTH_UI_THEME_LIGHT,
+  E as EdgeSparkAuthError,
+  f as EdgeSparkConfigError,
   te as EdgeSparkError,
-  Se as EdgeSparkRuntimeError,
+  Ee as EdgeSparkRuntimeError,
   pe as ar,
-  _t as createEdgeSpark,
+  Ft as createEdgeSpark,
   me as de,
-  lt as detectLocale,
+  wt as detectLocale,
   N as enUS,
   x as es,
   he as fr,
@@ -2176,5 +2336,5 @@ export {
   ce as ko,
   ue as ptBR,
   we as ru,
-  j as zhCN
+  q as zhCN
 };