@edgespark/web 0.0.2 → 0.0.3

package/dist/index.es.js

@@ -1,4 +1,4 @@
-import { createAuthClient as Oe } from "better-auth/client";
+import { createAuthClient as De } from "better-auth/client";
 class te extends Error {
   constructor(e, s) {
     super(s), this.name = "EdgeSparkError", this.code = e;
@@ -14,23 +14,23 @@ class Ee extends te {
     super("RUNTIME_ERROR", e), this.name = "EdgeSparkRuntimeError";
   }
 }
-class v extends te {
+class E extends te {
   constructor(e, s) {
     super((s == null ? void 0 : s.code) ?? "AUTH_ERROR", e), this.name = "EdgeSparkAuthError", this.cause = s == null ? void 0 : s.cause, this.status = s == null ? void 0 : s.status;
   }
 }
 function Se(t, e = "Authentication failed.", s) {
-  if (t instanceof v)
+  if (t instanceof E)
     return t;
   if (typeof t == "object" && t !== null) {
     const i = t;
-    return new v(i.message || e, {
+    return new E(i.message || e, {
       code: i.code ?? s,
       status: i.status,
       cause: t
     });
   }
-  return typeof t == "string" ? new v(t, { code: s }) : new v(e, { code: s, cause: t });
+  return typeof t == "string" ? new E(t, { code: s }) : new E(e, { code: s, cause: t });
 }
 function Pe() {
   if (typeof window > "u" || typeof document > "u")
@@ -50,7 +50,7 @@ function Ve(t) {
       `Cross-origin requests are not supported by this SDK. Received ${t.origin}, expected ${Q()}.`
     );
 }
-function De() {
+function Fe() {
   return {
     async fetch(t, e) {
       const s = Ne(t);
@@ -61,12 +61,12 @@ function De() {
     }
   };
 }
-const _e = "/api/_es/auth", Fe = "edgespark-auth-session", Le = "__edgespark_auth_sync__", D = "__edgespark_auth_pending_sign_in__", Ae = Symbol("edgespark.notifyAuthTabs"), He = 10 * 60 * 1e3, ze = /* @__PURE__ */ new Set([
+const Le = "/api/_es/auth", He = "edgespark-auth-session", _e = "__edgespark_auth_sync__", V = "__edgespark_auth_pending_sign_in__", Ae = Symbol("edgespark.notifyAuthTabs"), ze = 10 * 60 * 1e3, je = /* @__PURE__ */ new Set([
   "signOut",
   "revokeSession",
   "revokeSessions",
   "revokeOtherSessions"
-]), je = /* @__PURE__ */ new Map([
+]), qe = /* @__PURE__ */ new Map([
   [
     "changeEmail",
     "changeEmail() is not currently supported by EdgeSpark platform auth. Use authUI.mount() or other supported client.auth flows instead of wiring raw /api/_es/auth/* routes manually."
@@ -90,30 +90,30 @@ class xe {
 }
 const ne = globalThis.WeakRef, re = globalThis.FinalizationRegistry;
 let F, oe = !1;
-const $ = /* @__PURE__ */ new Map(), H = re ? new re((t) => {
-  $.delete(t);
+const C = /* @__PURE__ */ new Map(), H = re ? new re((t) => {
+  C.delete(t);
 }) : null;
 function Re(t) {
-  return Oe({
+  return De({
     baseURL: Q(),
-    basePath: _e,
+    basePath: Le,
     ...t != null && t.disableDefaultRedirectPlugin ? { disableDefaultFetchPlugins: !0 } : {},
     fetchOptions: {
       credentials: "include"
     }
   });
 }
-function U(t) {
+function I(t) {
   var e, s;
   return (s = (e = t.$store) == null ? void 0 : e.atoms) == null ? void 0 : s.session;
 }
-function qe(t) {
+function Ge(t) {
   return JSON.stringify({
     source: t,
     timestamp: Date.now()
   });
 }
-function Ge(t) {
+function Ke(t) {
   if (typeof t != "string")
     return null;
   try {
@@ -123,53 +123,53 @@ function Ge(t) {
     return null;
   }
 }
-function Ke(t) {
+function We(t) {
   return t.join(".");
 }
-function We(t) {
-  const e = Ke(t), s = je.get(e);
-  return s ? new v(s, {
+function Ye(t) {
+  const e = We(t), s = qe.get(e);
+  return s ? new E(s, {
     code: "UNSUPPORTED_AUTH_METHOD"
   }) : null;
 }
 async function ee(t) {
   var e;
   try {
-    return await ((e = U(t)) == null ? void 0 : e.get().refetch()), !0;
+    return await ((e = I(t)) == null ? void 0 : e.get().refetch()), !0;
   } catch {
     return !1;
   }
 }
 function Te() {
-  return F === void 0 && (F = typeof BroadcastChannel < "u" ? new BroadcastChannel(Fe) : null), F;
+  return F === void 0 && (F = typeof BroadcastChannel < "u" ? new BroadcastChannel(He) : null), F;
 }
 function ae(t) {
-  const e = Ge(t);
+  const e = Ke(t);
   if (e)
-    for (const [s, i] of $) {
+    for (const [s, i] of C) {
       if (s === e.source)
         continue;
       const n = i.deref();
       if (!n) {
-        $.delete(s);
+        C.delete(s);
         continue;
       }
       ee(n);
     }
 }
-function Ye() {
+function Je() {
   var t;
   oe || (oe = !0, (t = Te()) == null || t.addEventListener("message", (e) => {
     ae(e.data);
   }), typeof window < "u" && window.addEventListener("storage", (e) => {
-    e.key !== Le || e.newValue === null || ae(e.newValue);
+    e.key !== _e || e.newValue === null || ae(e.newValue);
   }));
 }
-function Je(t, e) {
-  ne ? $.set(t, new ne(e)) : ($.clear(), $.set(t, new xe(e))), H == null || H.register(e, t), Ye();
+function Xe(t, e) {
+  ne ? C.set(t, new ne(e)) : (C.clear(), C.set(t, new xe(e))), H == null || H.register(e, t), Je();
 }
-function I(t) {
-  const e = qe(t), s = Te();
+function R(t) {
+  const e = Ge(t), s = Te();
   let i = !1;
   if (s)
     try {
@@ -178,7 +178,7 @@ function I(t) {
     }
   if (!i)
     try {
-      window.localStorage.setItem(Le, e);
+      window.localStorage.setItem(_e, e);
     } catch {
     }
 }
@@ -186,7 +186,7 @@ function z(t) {
   if (!(typeof window > "u"))
     try {
       window.sessionStorage.setItem(
-        D,
+        V,
         JSON.stringify({
           path: t,
           createdAt: Date.now()
@@ -195,20 +195,20 @@ function z(t) {
     } catch {
     }
 }
-function C() {
+function T() {
   if (!(typeof window > "u"))
     try {
-      window.sessionStorage.removeItem(D);
+      window.sessionStorage.removeItem(V);
     } catch {
     }
 }
-function Xe(t) {
+function Ze(t) {
   return !!(t != null && t.session && (t != null && t.user));
 }
 function m(t) {
   return t instanceof Date ? t.toISOString() : t === null || typeof t == "string" || typeof t == "number" || typeof t == "boolean" ? t : t == null ? null : String(t);
 }
-function Ze(t) {
+function Qe(t) {
   return t ? JSON.stringify({
     session: {
       createdAt: m(t.session.createdAt),
@@ -241,11 +241,11 @@ function Ie() {
   if (typeof window > "u")
     return null;
   try {
-    const t = window.sessionStorage.getItem(D);
+    const t = window.sessionStorage.getItem(V);
     if (!t)
       return null;
     const e = JSON.parse(t);
-    return !e || typeof e != "object" || typeof e.createdAt != "number" || Date.now() - e.createdAt > He ? null : { createdAt: e.createdAt };
+    return !e || typeof e != "object" || typeof e.createdAt != "number" || Date.now() - e.createdAt > ze ? null : { createdAt: e.createdAt };
   } catch {
     return null;
   }
@@ -254,58 +254,58 @@ function le() {
   if (!Ie())
     return !1;
   try {
-    window.sessionStorage.removeItem(D);
+    window.sessionStorage.removeItem(V);
   } catch {
   }
   return !0;
 }
-function Qe() {
+function et() {
   return Ie() !== null;
 }
-function et(t) {
+function tt(t) {
   if (!(t && typeof t == "object") || "error" in t && t.error)
     return !1;
   const e = "data" in t ? t.data : t;
   return e && typeof e == "object" ? "token" in e && typeof e.token == "string" && e.token.length > 0 ? !0 : "session" in e && "user" in e && !!e.session && !!e.user : !1;
 }
-function tt(t) {
+function st(t) {
   if (!(t && typeof t == "object") || "error" in t && t.error)
     return !1;
   const e = "data" in t ? t.data : t;
   return e && typeof e == "object" ? "url" in e && typeof e.url == "string" : !1;
 }
-function st(t) {
-  if (L(t) || !(t && typeof t == "object"))
+function it(t) {
+  if (A(t) || !(t && typeof t == "object"))
     return !1;
   const e = "data" in t ? t.data : t;
   return e && typeof e == "object" ? "user" in e && !!e.user && "token" in e && e.token === null && !("url" in e) : !1;
 }
-function it(t, e) {
+function nt(t, e) {
   if (t.length !== 1 || t[0] !== "changePassword")
     return !1;
   const [s] = e;
   return !!(s && typeof s == "object" && "revokeOtherSessions" in s && s.revokeOtherSessions === !0);
 }
-function L(t) {
+function A(t) {
   return !!(t && typeof t == "object" && "error" in t && t.error);
 }
-function nt(t) {
-  if (L(t) || !(t && typeof t == "object"))
+function rt(t) {
+  if (A(t) || !(t && typeof t == "object"))
     return !1;
   const e = "data" in t ? t.data : t;
   return e && typeof e == "object" ? "message" in e && e.message === "User deleted" : !1;
 }
-function rt(t) {
+function ot(t) {
   return !!(t && (typeof t == "object" || typeof t == "function") && "then" in t && typeof t.then == "function");
 }
 function j(t) {
   return Se(t, "Failed to load the current session.", "SESSION_LOOKUP_FAILED");
 }
-async function ot(t) {
+async function at(t) {
   var s, i;
   let e = null;
   try {
-    await ((s = U(t)) == null ? void 0 : s.get().refetch());
+    await ((s = I(t)) == null ? void 0 : s.get().refetch());
   } catch (n) {
     e = n;
   } finally {
@@ -314,16 +314,16 @@ async function ot(t) {
   if (e)
     throw e;
 }
-function at() {
+function lt() {
   const t = Re(), e = `${Date.now()}-${Math.random().toString(36).slice(2)}`;
-  Je(e, t);
+  Xe(e, t);
   const s = 2, i = 500;
   let n = null, a = !1, u;
-  const g = (o) => (u = o, o), E = () => {
+  const g = (o) => (u = o, o), S = () => {
     var c;
-    const o = (c = U(t)) == null ? void 0 : c.get();
+    const o = (c = I(t)) == null ? void 0 : c.get();
     return o != null && o.error && !o.data && u !== void 0 ? u : (o == null ? void 0 : o.data) ?? u ?? null;
-  }, A = () => a ? Promise.resolve(E()) : (n || (n = (async () => {
+  }, U = () => a ? Promise.resolve(S()) : (n || (n = (async () => {
     var l, h, y;
     let o = !1, c = null;
     try {
@@ -331,71 +331,71 @@ function at() {
         let d = null;
         try {
           d = await t.getSession();
-        } catch (S) {
-          c = S;
+        } catch (P) {
+          c = P;
         }
-        const p = ((l = U(t)) == null ? void 0 : l.get().data) ?? null;
+        const p = ((l = I(t)) == null ? void 0 : l.get().data) ?? null;
         if ((h = d == null ? void 0 : d.data) != null && h.session && ((y = d.data) != null && y.user))
-          return a = !0, le() && I(e), g(d.data);
+          return a = !0, le() && R(e), g(d.data);
         if (p != null && p.session && (p != null && p.user))
-          return a = !0, le() && I(e), g(p);
-        if (d != null && d.error ? c = d.error : d && (o = !0), d && !d.error && Qe() && b < s) {
+          return a = !0, le() && R(e), g(p);
+        if (d != null && d.error ? c = d.error : d && (o = !0), d && !d.error && et() && b < s) {
           await new Promise(
-            (S) => setTimeout(S, i)
+            (P) => setTimeout(P, i)
           );
           continue;
         }
         if (d && !d.error) {
-          const S = E();
-          return a = !0, g(S);
+          const P = S();
+          return a = !0, g(P);
         }
         b < s && await new Promise(
-          (S) => setTimeout(S, i)
+          (P) => setTimeout(P, i)
         );
       }
       if (!o)
-        throw n = null, new v("Failed to load the current session.", {
+        throw n = null, new E("Failed to load the current session.", {
           code: "SESSION_LOOKUP_FAILED",
           cause: c
         });
-      const w = E();
+      const w = S();
       return a = !0, g(w);
     } catch (w) {
       throw n = null, j(w);
     }
   })()), n);
-  A().catch(() => {
+  U().catch(() => {
   });
-  const R = async () => {
+  const $ = async () => {
     var o, c;
     try {
       const l = await t.getSession();
       if ((o = l.data) != null && o.session && ((c = l.data) != null && c.user))
         return l.data;
-      throw l.error ? j(l.error) : new v("No authenticated session is available.", {
+      throw l.error ? j(l.error) : new E("No authenticated session is available.", {
         code: "UNAUTHENTICATED"
       });
     } catch (l) {
       throw j(l);
     }
-  }, T = async () => {
-    await ee(t), I(e);
+  }, v = async () => {
+    await ee(t), R(e);
   }, Be = async () => {
     var l;
-    const o = await ee(t), c = ((l = U(t)) == null ? void 0 : l.get().data) ?? null;
-    Xe(c) ? (C(), I(e)) : o || I(e);
-  }, ke = (o) => {
+    const o = await ee(t), c = ((l = I(t)) == null ? void 0 : l.get().data) ?? null;
+    Ze(c) ? (T(), R(e)) : o || R(e);
+  }, Me = (o) => {
     let c = !1, l = !1, h;
     const y = (d) => {
-      const p = Ze(d);
+      const p = Qe(d);
       p !== h && (h = p, o(d));
     };
-    A().then((d) => {
+    U().then((d) => {
       c || (l = !0, y(g(d)));
     }).catch(() => {
       c || (l = !0);
     });
-    const w = U(t);
+    const w = I(t);
     if (!w)
       return () => {
         c = !0;
@@ -409,9 +409,9 @@ function at() {
     return () => {
       c = !0, b();
     };
-  }, Me = async (o, c, l) => {
+  }, Oe = async (o, c, l) => {
     const h = o[0], y = o.length >= 2 && h === "emailOtp" && o[1] === "verifyEmail", w = o.length >= 2 && h === "emailOtp" && o[1] === "resetPassword", b = o.length >= 2 && h === "resetPassword" && o[1] === "emailOtp";
-    return o.length === 1 && (h === "deleteUser" || h === "deleteUserCallback") ? (C(), nt(l) && await T(), l) : o.length === 1 && h && ze.has(h) ? (C(), L(l) || await T(), l) : it(o, c) && !L(l) ? (C(), await T(), l) : (w || b) && !L(l) ? (C(), await T(), l) : o.length === 1 && h === "changeEmail" && !L(l) ? (await T(), l) : ((h === "signIn" || h === "signUp" || y) && et(l) ? (C(), await T()) : (h === "signIn" || h === "signUp") && tt(l) || h === "signUp" && st(l) ? z(o) : h === "verifyEmail" && !L(l) && (z(o), await Be()), l);
+    return o.length === 1 && (h === "deleteUser" || h === "deleteUserCallback") ? (T(), rt(l) && await v(), l) : o.length === 1 && h && je.has(h) ? (T(), A(l) || await v(), l) : nt(o, c) && !A(l) ? (T(), await v(), l) : (w || b) && !A(l) ? (T(), await v(), l) : o.length === 1 && h === "changeEmail" && !A(l) ? (await v(), l) : ((h === "signIn" || h === "signUp" || y) && tt(l) ? (T(), await v()) : (h === "signIn" || h === "signUp") && st(l) || h === "signUp" && it(l) ? z(o) : h === "verifyEmail" && !A(l) && (z(o), await Be()), l);
   }, se = /* @__PURE__ */ new WeakMap(), ie = (o, c) => {
     if (!o || typeof o != "object" && typeof o != "function")
       return o;
@@ -422,19 +422,19 @@ function at() {
       get(y, w, b) {
         if (c.length === 0) {
           if (w === "requireSession")
-            return R;
+            return $;
           if (w === "onSessionChange")
-            return ke;
+            return Me;
           if (w === Ae)
             return () => {
-              I(e);
+              R(e);
             };
         }
         const d = Reflect.get(y, w, b);
         return typeof w != "string" ? d : ie(d, [...c, w]);
       },
       apply(y, w, b) {
-        const d = We(c);
+        const d = Ye(c);
         if (d)
           throw d;
         const p = Reflect.apply(
@@ -442,8 +442,8 @@ function at() {
           w,
           b
         );
-        return rt(p) ? Promise.resolve(p).then(
-          (S) => Me(c, b, S)
+        return ot(p) ? Promise.resolve(p).then(
+          (P) => Oe(c, b, P)
         ) : p;
       }
     });
@@ -451,10 +451,38 @@ function at() {
   };
   return ie(t, []);
 }
-function lt() {
+function dt() {
   return Re({ disableDefaultRedirectPlugin: !0 });
 }
-function dt(t) {
+const Ce = "/api/_es/dev";
+function ct() {
+  if (typeof document > "u") return !1;
+  const t = document.querySelector('meta[name="edgespark-local-dev"]');
+  return (t == null ? void 0 : t.getAttribute("content")) === "true";
+}
+async function ut(t) {
+  const e = typeof window < "u" ? window.location.origin : "";
+  if (!e) return !1;
+  const s = await fetch(
+    `${e}${Ce}/auto-verify?email=${encodeURIComponent(t)}`,
+    { credentials: "include" }
+  );
+  return s.ok ? (await s.json()).verified === !0 : !1;
+}
+async function ht(t) {
+  const e = typeof window < "u" ? window.location.origin : "";
+  if (!e) return null;
+  try {
+    const s = await fetch(
+      `${e}${Ce}/pending-otp?email=${encodeURIComponent(t)}`,
+      { credentials: "include" }
+    );
+    return s.ok ? (await s.json()).otp ?? null : null;
+  } catch {
+    return null;
+  }
+}
+function mt(t) {
   const e = (() => {
     if (t instanceof URL)
       return t;
@@ -475,7 +503,7 @@ function dt(t) {
     );
   return e;
 }
-function ct(t, e) {
+function ft(t, e) {
   return e ? {
     common: { ...t.common, ...e.common },
     signIn: { ...t.signIn, ...e.signIn },
@@ -487,7 +515,7 @@ function ct(t, e) {
     errors: { ...t.errors, ...e.errors }
   } : t;
 }
-const V = {
+const N = {
   common: {
     loading: "Loading sign-in…",
     redirecting: "Redirecting…",
@@ -550,7 +578,7 @@ const V = {
     invalidCode: "Enter the 6-digit verification code.",
     generic: "Something went wrong. Please try again."
   }
-}, x = {
+}, q = {
   common: {
     loading: "加载中…",
     redirecting: "跳转中…",
@@ -739,7 +767,7 @@ const V = {
     invalidCode: "6자리 인증 코드를 입력해 주세요",
     generic: "문제가 발생했습니다. 다시 시도해 주세요"
   }
-}, q = {
+}, x = {
   common: {
     loading: "Cargando inicio de sesión…",
     redirecting: "Redirigiendo…",
@@ -1244,18 +1272,18 @@ const V = {
     generic: "कुछ गलत हो गई। कृपया फिर से प्रयास करें।"
   }
 }, be = {
-  en: V,
-  "en-US": V,
-  zh: x,
-  "zh-CN": x,
-  "zh-TW": x,
+  en: N,
+  "en-US": N,
+  zh: q,
+  "zh-CN": q,
+  "zh-TW": q,
   ja: de,
   "ja-JP": de,
   ko: ce,
   "ko-KR": ce,
-  es: q,
-  "es-ES": q,
-  "es-MX": q,
+  es: x,
+  "es-ES": x,
+  "es-MX": x,
   pt: ue,
   "pt-BR": ue,
   fr: he,
@@ -1271,20 +1299,20 @@ const V = {
   hi: ge,
   "hi-IN": ge
 };
-function ut() {
+function wt() {
   if (typeof navigator > "u")
-    return V;
+    return N;
   const t = navigator.languages ?? [navigator.language];
   for (const e of t) {
     const s = be[e] ?? be[e.split("-")[0]];
     if (s) return s;
   }
-  return V;
+  return N;
 }
-const Ce = {
+const Ue = {
   LIGHT: "light",
   DARK: "dark"
-}, Ue = Ce.LIGHT, ht = Ce.DARK, $e = [Ue, ht], mt = Ue, ft = {
+}, $e = Ue.LIGHT, pt = Ue.DARK, ke = [$e, pt], gt = $e, bt = {
   BACKGROUND: "--edgespark-auth-bg",
   BACKGROUND_MUTED: "--edgespark-auth-bg-muted",
   CARD_BACKGROUND: "--edgespark-auth-card-bg",
@@ -1304,19 +1332,19 @@ const Ce = {
   MODAL_BACKDROP: "--edgespark-auth-modal-backdrop",
   MODAL_CARD_BACKGROUND: "--edgespark-auth-modal-card-bg",
   MODAL_SHADOW: "--edgespark-auth-modal-shadow"
-}, wt = Object.values(
-  ft
+}, vt = Object.values(
+  bt
 );
-function pt(t) {
-  return typeof t == "string" && $e.includes(t);
+function yt(t) {
+  return typeof t == "string" && ke.includes(t);
 }
-function gt(t) {
-  return wt.includes(t);
+function Et(t) {
+  return vt.includes(t);
 }
-function bt(t) {
+function St(t) {
   var e;
   return {
-    theme: (t == null ? void 0 : t.theme) ?? mt,
+    theme: (t == null ? void 0 : t.theme) ?? gt,
     className: ((e = t == null ? void 0 : t.className) == null ? void 0 : e.trim()) ?? "",
     variables: { ...(t == null ? void 0 : t.variables) ?? {} }
   };
@@ -1324,11 +1352,11 @@ function bt(t) {
 function G(t, e = "Authentication failed.") {
   return Se(t, e);
 }
-async function k(t) {
+async function B(t) {
   var s, i;
   const e = await t.getSession();
   if (e.error)
-    throw new v(
+    throw new E(
       e.error.message || "Failed to load the current session.",
       {
         code: e.error.code ?? "SESSION_LOOKUP_FAILED",
@@ -1344,7 +1372,7 @@ async function k(t) {
     session: null
   };
 }
-const yt = "data-edgespark-auth", vt = "data-edgespark-auth-theme", r = "edgespark-auth", K = "es_auth_completion", M = "es_auth_email", W = "oauth", B = "verify-sign-in", P = "verify-sign-up", ye = 200, Y = 2, Et = {
+const Pt = "data-edgespark-auth", Lt = "data-edgespark-auth-theme", r = "edgespark-auth", K = "es_auth_completion", M = "es_auth_email", W = "oauth", k = "verify-sign-in", L = "verify-sign-up", ve = 200, Y = 2, _t = {
   "&": "&amp;",
   "<": "&lt;",
   ">": "&gt;",
@@ -1367,16 +1395,16 @@ function X(t) {
 function Z(t) {
   return !t || typeof t != "string" ? !1 : /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(t.trim());
 }
-function St(t) {
+function At(t) {
   return /^\d{6}$/.test(t.trim());
 }
-function Pt(t) {
+function Rt(t) {
   return t === "email" || t === "name" || t === "password" || t === "confirmPassword" || t === "code" || t === "newPassword";
 }
-function _t(t) {
+function Tt(t) {
   return !!(t.error || t.errorDescription);
 }
-class Lt {
+class It {
   constructor(e, s, i, n, a) {
     this.container = e, this.auth = s, this.options = i, this.loadConfig = n, this.runtimeOptions = a, this.state = {
       view: "loading",
@@ -1391,10 +1419,10 @@ class Lt {
       code: "",
       newPassword: ""
     }, this.destroyed = !1, this.terminalActionInProgress = !1, this.config = null, this.countdownUntil = null, this.countdownTimer = null, this.pendingFocusSnapshot = null, this.focusRestoreTimer = null, this.verificationCompletionAction = null;
-    const u = bt(i.appearance);
-    this.labels = ct(ut(), i.labels), this.root = document.createElement("div"), this.root.className = u.className ? `${r} ${u.className}` : r, this.root.setAttribute(yt, ""), this.root.setAttribute(vt, u.theme);
-    for (const [g, E] of Object.entries(u.variables))
-      E !== void 0 && this.root.style.setProperty(g, E);
+    const u = St(i.appearance);
+    this.labels = ft(wt(), i.labels), this.root = document.createElement("div"), this.root.className = u.className ? `${r} ${u.className}` : r, this.root.setAttribute(Pt, ""), this.root.setAttribute(Lt, u.theme);
+    for (const [g, S] of Object.entries(u.variables))
+      S !== void 0 && this.root.style.setProperty(g, S);
     e.innerHTML = "", e.appendChild(this.root), this.render(), this.initialize();
   }
   destroy() {
@@ -1410,7 +1438,7 @@ class Lt {
       if (this.destroyed)
         return;
       if (i.status === "rejected") {
-        if (e.marker && !_t(e) && _(this.options)) {
+        if (e.marker && !Tt(e) && _(this.options)) {
           this.redirectAfterManagedReturnLookupFailure();
           return;
         }
@@ -1419,10 +1447,10 @@ class Lt {
         if (a.user && a.session) {
           switch (e.marker) {
             case W:
-            case B:
+            case k:
               await this.completeAuth("sign-in", a);
               return;
-            case P:
+            case L:
               await this.completeAuth("sign-up", a);
               return;
             default:
@@ -1448,21 +1476,21 @@ class Lt {
     _(this.options) && this.navigateToRedirect();
   }
   navigateToRedirect() {
-    _(this.options) && (this.terminalActionInProgress = !0, this.state.busy = !0, this.state.busyLabel = this.labels.common.redirecting, this.state.error = null, this.state.notice = null, this.render(), window.location.assign(dt(this.options.redirectTo).toString()));
+    _(this.options) && (this.terminalActionInProgress = !0, this.state.busy = !0, this.state.busyLabel = this.labels.common.redirecting, this.state.error = null, this.state.notice = null, this.render(), window.location.assign(mt(this.options.redirectTo).toString()));
   }
   async readMountSession(e) {
     if (!e.marker)
-      return k(this.auth);
+      return B(this.auth);
     let s = null;
     for (let i = 0; i <= Y; i++) {
       try {
-        const n = await k(this.auth);
+        const n = await B(this.auth);
         if (n.user && n.session)
           return n;
       } catch (n) {
         s = n;
       }
-      i < Y && await new Promise((n) => setTimeout(n, ye));
+      i < Y && await new Promise((n) => setTimeout(n, ve));
     }
     if (s)
       throw s;
@@ -1481,6 +1509,7 @@ class Lt {
     }
     this.root.innerHTML = `
       <div class="${r}__shell">
+        ${this.renderDevModeBanner()}
         <div class="${r}__card">
           ${this.renderStatus()}
           ${this.renderCurrentView()}
@@ -1498,6 +1527,10 @@ class Lt {
       </div>
     `;
   }
+  renderDevModeBanner() {
+    var e;
+    return (e = this.config) != null && e.isLocalDev ? `<div class="${r}__dev-banner">Local dev mode — emails are mocked, OAuth uses test identities</div>` : "";
+  }
   renderStatus() {
     const e = [];
     return this.state.error && e.push(
@@ -1701,7 +1734,7 @@ class Lt {
       });
     }), this.root.querySelectorAll("input[name]").forEach((n) => {
       n.addEventListener("input", () => {
-        Pt(n.name) && (this.state[n.name] = n.value);
+        Rt(n.name) && (this.state[n.name] = n.value);
       });
     }), this.root.querySelectorAll("[data-action]").forEach((n) => {
       n.addEventListener("click", () => {
@@ -1726,7 +1759,7 @@ class Lt {
       const e = await this.auth.signIn.email({
         email: this.state.email.trim(),
         password: this.state.password,
-        callbackURL: this.getManagedReturnURL(B, this.state.email.trim())
+        callbackURL: this.getManagedReturnURL(k, this.state.email.trim())
       });
       if (e.error)
         throw e.error;
@@ -1763,12 +1796,14 @@ class Lt {
         name: this.state.name.trim(),
         email: this.state.email.trim(),
         password: this.state.password,
-        callbackURL: this.getManagedReturnURL(P, this.state.email.trim())
+        callbackURL: this.getManagedReturnURL(L, this.state.email.trim())
       });
       if (i.error)
         throw i.error;
       if ((n = this.config) != null && n.requireEmailVerification) {
-        this.verificationCompletionAction = "sign-up", this.state.view = "verify-email", this.state.notice = "Check your inbox to verify your email address.", this.startCountdown();
+        if (this.config.isLocalDev && await this.tryDevAutoVerify("sign-up", i.data))
+          return;
+        this.verificationCompletionAction = "sign-up", this.state.view = "verify-email", this.state.notice = this.config.isLocalDev ? "Dev mode: auto-verify didn’t complete. Click resend to retry." : "Check your inbox to verify your email address.", this.startCountdown();
         return;
       }
       await this.completeAuth("sign-up", await this.resolveAuthCompletionData(i.data));
@@ -1801,12 +1836,19 @@ class Lt {
       return;
     }
     await this.runAction("Sending reset code…", async () => {
+      var s;
       const e = await this.passwordResetEndpoints().forgetPassword.emailOtp({
         email: this.state.email.trim()
       });
       if (e.error)
         throw e.error;
-      this.state.view = "reset-password", this.state.notice = `We sent a reset code to ${this.state.email.trim()}.`, this.startCountdown();
+      if (this.state.view = "reset-password", (s = this.config) != null && s.isLocalDev) {
+        this.state.busyLabel = "Dev mode: fetching reset code…", this.render();
+        const i = await ht(this.state.email.trim());
+        i ? (this.state.code = i, this.state.notice = `Dev mode: reset code auto-filled (${i})`) : this.state.notice = "Dev mode: could not retrieve reset code — check server logs";
+      } else
+        this.state.notice = `We sent a reset code to ${this.state.email.trim()}.`;
+      this.startCountdown();
     });
   }
   async resendResetCode() {
@@ -1820,7 +1862,7 @@ class Lt {
       );
       return;
     }
-    if (!St(this.state.code)) {
+    if (!At(this.state.code)) {
       this.failValidation(this.labels.errors.invalidCode);
       return;
     }
@@ -1850,14 +1892,39 @@ class Lt {
     });
   }
   async resendVerificationEmail() {
+    var e;
+    if ((e = this.config) != null && e.isLocalDev) {
+      if (this.isCountdownActive()) return;
+      await this.runAction("Dev mode: retrying auto-verify…", async () => {
+        const s = this.verificationCompletionAction ?? "sign-in";
+        if (!await this.tryDevAutoVerify(s))
+          throw new Error(
+            "Dev auto-verify did not complete. Check the edgespark dev logs and try again."
+          );
+      });
+      return;
+    }
     await this.sendVerificationEmail(!1);
   }
+  /**
+   * Drive the local-dev auto-verify endpoint and, on success, complete the
+   * auth flow. Returns whether auto-verify completed — callers decide what
+   * to do on `false` (sign-up falls through to a retry UI; resend throws).
+   */
+  async tryDevAutoVerify(e, s) {
+    const i = this.state.email.trim();
+    try {
+      return this.state.busyLabel = "Dev mode: auto-verifying email…", this.render(), await ut(i) ? (this.state.notice = "Dev mode: email verification auto-completed", await this.completeAuth(e, await this.resolveAuthCompletionData(s)), !0) : (console.warn("[edgespark] Dev auto-verify returned false — falling through"), !1);
+    } catch (n) {
+      return console.warn("[edgespark] Dev auto-verify failed:", n), !1;
+    }
+  }
   async sendVerificationEmail(e) {
     !e && this.isCountdownActive() || await this.runAction("Sending verification email…", async () => {
       const s = await this.auth.sendVerificationEmail({
         email: this.state.email.trim(),
         callbackURL: this.getManagedReturnURL(
-          this.verificationCompletionAction === "sign-up" ? P : B,
+          this.verificationCompletionAction === "sign-up" ? L : k,
           this.state.email.trim()
         )
       });
@@ -1907,9 +1974,9 @@ class Lt {
       return e;
     let s = e.lookupError;
     for (let i = 0; i < Y; i++) {
-      await new Promise((n) => setTimeout(n, ye));
+      await new Promise((n) => setTimeout(n, ve));
       try {
-        const n = await k(this.auth);
+        const n = await B(this.auth);
         if (n.user && n.session)
           return {
             user: n.user,
@@ -1933,7 +2000,7 @@ class Lt {
   }
   async resolveAuthCompletionData(e) {
     try {
-      const s = await k(this.auth), i = this.extractUser(e);
+      const s = await B(this.auth), i = this.extractUser(e);
       return {
         user: s.user ?? i,
         session: s.session
@@ -2016,7 +2083,7 @@ class Lt {
     return i.searchParams.set(K, e), s ? i.searchParams.set(M, s) : i.searchParams.delete(M), i.toString();
   }
   consumeManagedReturnContext() {
-    const e = new URL(window.location.href), s = e.searchParams.get(K), i = s === W || s === B || s === P ? s : null, n = e.searchParams.get(M), a = i ? e.searchParams.get("error") : null, u = i ? e.searchParams.get("error_description") : null;
+    const e = new URL(window.location.href), s = e.searchParams.get(K), i = s === W || s === k || s === L ? s : null, n = e.searchParams.get(M), a = i ? e.searchParams.get("error") : null, u = i ? e.searchParams.get("error_description") : null;
     return (i || n) && (e.searchParams.delete(K), e.searchParams.delete(M), i && (e.searchParams.delete("error"), e.searchParams.delete("error_description")), window.history.replaceState(null, "", e.toString())), {
       marker: i,
       email: n,
@@ -2085,10 +2152,10 @@ class Lt {
     return !!((e = this.config) != null && e.passwordResetEmailOtpEnabled);
   }
   handleSessionlessManagedReturn(e) {
-    return e.email && (this.state.email = e.email), e.marker === P && !e.error ? (this.verificationCompletionAction = null, this.clearCountdown(), this.state.view = "sign-in", this.state.password = "", this.state.confirmPassword = "", this.state.error = null, this.state.busy = !1, this.state.busyLabel = void 0, this.state.notice = "Account created. Sign in to continue.", this.render(), !0) : e.marker === B || e.marker === P ? (this.verificationCompletionAction = e.marker === P ? "sign-up" : "sign-in", this.state.view = "verify-email", this.state.busy = !1, this.state.busyLabel = void 0, this.state.notice = null, e.error || e.errorDescription ? this.handleError(new v(
+    return e.email && (this.state.email = e.email), e.marker === L && !e.error ? (this.verificationCompletionAction = null, this.clearCountdown(), this.state.view = "sign-in", this.state.password = "", this.state.confirmPassword = "", this.state.error = null, this.state.busy = !1, this.state.busyLabel = void 0, this.state.notice = "Account created. Sign in to continue.", this.render(), !0) : e.marker === k || e.marker === L ? (this.verificationCompletionAction = e.marker === L ? "sign-up" : "sign-in", this.state.view = "verify-email", this.state.busy = !1, this.state.busyLabel = void 0, this.state.notice = null, e.error || e.errorDescription ? this.handleError(new E(
       e.errorDescription ?? "Verification failed. Request a new verification email and try again.",
       { code: e.error ?? "VERIFY_EMAIL_ERROR" }
-    )) : this.render(), !0) : e.marker === W && (e.error || e.errorDescription) ? (this.state.view = "sign-in", this.state.busy = !1, this.state.busyLabel = void 0, this.state.notice = null, this.handleError(new v(
+    )) : this.render(), !0) : e.marker === W && (e.error || e.errorDescription) ? (this.state.view = "sign-in", this.state.busy = !1, this.state.busyLabel = void 0, this.state.notice = null, this.handleError(new E(
       e.errorDescription ?? "OAuth sign-in failed.",
       { code: e.error ?? "OAUTH_ERROR" }
     )), !0) : !1;
@@ -2104,58 +2171,59 @@ class Lt {
     return i <= 0 ? e : s.replace("{seconds}", String(i));
   }
   escape(e) {
-    return e.replace(/[&<>"']/g, (s) => Et[s]);
+    return e.replace(/[&<>"']/g, (s) => _t[s]);
   }
 }
-function At(t) {
+function Ct(t) {
   return "data" in t && t.data ? t.data : t;
 }
-const Rt = [
+const Ut = [
   { id: "google", key: "providerGoogle" },
   { id: "apple", key: "providerApple" },
   { id: "microsoft", key: "providerMicrosoft" },
   { id: "github", key: "providerGithub" },
   { id: "gitlab", key: "providerGitlab" },
   { id: "discord", key: "providerDiscord" }
-], ve = 2, Tt = 500;
-async function It() {
-  const t = `${window.location.origin}${_e}/config`;
+], ye = 2, $t = 500;
+async function kt() {
+  const t = `${window.location.origin}${Le}/config`;
   let e;
-  for (let s = 0; s <= ve; s++)
+  for (let s = 0; s <= ye; s++)
     try {
       const i = await fetch(t, { method: "GET", credentials: "include" });
       if (!i.ok)
         throw new f(`Failed to load auth config: HTTP ${i.status}`);
-      const n = await i.json();
-      return Ut(At(n));
+      const n = await i.json(), a = Ct(n);
+      return Mt(a, ct());
     } catch (i) {
-      e = i, s < ve && await new Promise((n) => setTimeout(n, Tt));
+      e = i, s < ye && await new Promise((n) => setTimeout(n, $t));
     }
   throw e;
 }
 let O = null;
-async function Ct() {
-  return O || (O = It().catch((t) => {
+async function Bt() {
+  return O || (O = kt().catch((t) => {
     throw O = null, t;
   })), O;
 }
-function Ut(t) {
-  var s, i, n, a, u, g, E;
-  const e = Rt.filter(({ key: A }) => {
-    const R = t[A];
-    return typeof R == "object" && R !== null && "enabled" in R && !!R.enabled;
-  }).map(({ id: A }) => A);
+function Mt(t, e = !1) {
+  var i, n, a, u, g, S, U;
+  const s = Ut.filter(({ key: $ }) => {
+    const v = t[$];
+    return typeof v == "object" && v !== null && "enabled" in v && !!v.enabled;
+  }).map(({ id: $ }) => $);
   return {
     disableSignUp: !!t.disableSignUp,
-    emailPasswordEnabled: !!((s = t.providerEmailPassword) != null && s.enabled),
-    minPasswordLength: ((n = (i = t.providerEmailPassword) == null ? void 0 : i.config) == null ? void 0 : n.minPasswordLength) ?? 8,
-    requireEmailVerification: !!((u = (a = t.providerEmailPassword) == null ? void 0 : a.config) != null && u.requireEmailVerification),
-    passwordResetEmailOtpEnabled: !!((E = (g = t.providerEmailPassword) == null ? void 0 : g.config) != null && E.requirePasswordResetEmailVerification),
-    oauthProviders: e
+    emailPasswordEnabled: !!((i = t.providerEmailPassword) != null && i.enabled),
+    minPasswordLength: ((a = (n = t.providerEmailPassword) == null ? void 0 : n.config) == null ? void 0 : a.minPasswordLength) ?? 8,
+    requireEmailVerification: !!((g = (u = t.providerEmailPassword) == null ? void 0 : u.config) != null && g.requireEmailVerification),
+    passwordResetEmailOtpEnabled: !!((U = (S = t.providerEmailPassword) == null ? void 0 : S.config) != null && U.requirePasswordResetEmailVerification),
+    oauthProviders: s,
+    isLocalDev: e
   };
 }
-const N = /* @__PURE__ */ new WeakMap();
-function $t(t) {
+const D = /* @__PURE__ */ new WeakMap();
+function Ot(t) {
   if (!t)
     throw new f(
       "authUI.mount(container, options) requires either { redirectTo } or { onSuccess }."
@@ -2186,9 +2254,9 @@ function $t(t) {
       throw new f(
         "authUI.mount(container, options) expected appearance to be an object."
       );
-    if ("theme" in i && i.theme !== void 0 && !pt(i.theme))
+    if ("theme" in i && i.theme !== void 0 && !yt(i.theme))
       throw new f(
-        `authUI.mount(container, options) expected appearance.theme to be one of: ${$e.join(", ")}.`
+        `authUI.mount(container, options) expected appearance.theme to be one of: ${ke.join(", ")}.`
       );
     if ("className" in i && i.className !== void 0 && typeof i.className != "string")
       throw new f(
@@ -2200,7 +2268,7 @@ function $t(t) {
           "authUI.mount(container, options) expected appearance.variables to be an object."
         );
       for (const [n, a] of Object.entries(i.variables)) {
-        if (!gt(n))
+        if (!Et(n))
           throw new f(
             `authUI.mount(container, options) received unsupported appearance.variables key "${n}".`
           );
@@ -2212,29 +2280,29 @@ function $t(t) {
     }
   }
 }
-function Bt(t) {
+function Dt(t) {
   if (!(t instanceof HTMLElement))
     throw new f("authUI.mount(container, options) requires a real HTMLElement container.");
 }
-function kt(t, e) {
+function Nt(t, e) {
   return {
     mount(s, i) {
       var g;
-      $t(i), Bt(s), (g = N.get(s)) == null || g.destroy();
-      const n = new Lt(s, t, i, Ct, e), a = n.destroy.bind(n), u = {
+      Ot(i), Dt(s), (g = D.get(s)) == null || g.destroy();
+      const n = new It(s, t, i, Bt, e), a = n.destroy.bind(n), u = {
         destroy() {
-          a(), N.get(s) === u && N.delete(s);
+          a(), D.get(s) === u && D.delete(s);
         }
       };
-      return N.set(s, u), u;
+      return D.set(s, u), u;
     }
   };
 }
-function Ot() {
+function Ft() {
   Pe();
-  const t = at(), e = lt(), s = De(), i = kt(e, {
+  const t = lt(), e = dt(), s = Fe(), i = Nt(e, {
     syncPublicSession: async () => {
-      await ot(t);
+      await at(t);
     }
   });
   return {
@@ -2244,23 +2312,23 @@ function Ot() {
   };
 }
 export {
-  ft as AUTH_UI_APPEARANCE_VARIABLE,
-  wt as AUTH_UI_APPEARANCE_VARIABLE_NAMES,
-  mt as AUTH_UI_DEFAULT_THEME,
-  Ce as AUTH_UI_THEME,
-  $e as AUTH_UI_THEMES,
-  ht as AUTH_UI_THEME_DARK,
-  Ue as AUTH_UI_THEME_LIGHT,
-  v as EdgeSparkAuthError,
+  bt as AUTH_UI_APPEARANCE_VARIABLE,
+  vt as AUTH_UI_APPEARANCE_VARIABLE_NAMES,
+  gt as AUTH_UI_DEFAULT_THEME,
+  Ue as AUTH_UI_THEME,
+  ke as AUTH_UI_THEMES,
+  pt as AUTH_UI_THEME_DARK,
+  $e as AUTH_UI_THEME_LIGHT,
+  E as EdgeSparkAuthError,
   f as EdgeSparkConfigError,
   te as EdgeSparkError,
   Ee as EdgeSparkRuntimeError,
   pe as ar,
-  Ot as createEdgeSpark,
+  Ft as createEdgeSpark,
   me as de,
-  ut as detectLocale,
-  V as enUS,
-  q as es,
+  wt as detectLocale,
+  N as enUS,
+  x as es,
   he as fr,
   ge as hi,
   fe as it,
@@ -2268,5 +2336,5 @@ export {
   ce as ko,
   ue as ptBR,
   we as ru,
-  x as zhCN
+  q as zhCN
 };