@edgespark/web 0.0.2 → 0.0.4

package/dist/index.es.js

@@ -1,72 +1,72 @@
-import { createAuthClient as Oe } from "better-auth/client";
-class te extends Error {
-  constructor(e, s) {
-    super(s), this.name = "EdgeSparkError", this.code = e;
+import { createAuthClient as Ge } from "better-auth/client";
+class le extends Error {
+  constructor(e, i) {
+    super(i), this.name = "EdgeSparkError", this.code = e;
   }
 }
-class f extends te {
+class g extends le {
   constructor(e) {
     super("CONFIG_ERROR", e), this.name = "EdgeSparkConfigError";
   }
 }
-class Ee extends te {
+class Re extends le {
   constructor(e) {
     super("RUNTIME_ERROR", e), this.name = "EdgeSparkRuntimeError";
   }
 }
-class v extends te {
-  constructor(e, s) {
-    super((s == null ? void 0 : s.code) ?? "AUTH_ERROR", e), this.name = "EdgeSparkAuthError", this.cause = s == null ? void 0 : s.cause, this.status = s == null ? void 0 : s.status;
+class L extends le {
+  constructor(e, i) {
+    super((i == null ? void 0 : i.code) ?? "AUTH_ERROR", e), this.name = "EdgeSparkAuthError", this.cause = i == null ? void 0 : i.cause, this.status = i == null ? void 0 : i.status;
   }
 }
-function Se(t, e = "Authentication failed.", s) {
-  if (t instanceof v)
+function de(t, e = "Authentication failed.", i) {
+  if (t instanceof L)
     return t;
   if (typeof t == "object" && t !== null) {
-    const i = t;
-    return new v(i.message || e, {
-      code: i.code ?? s,
-      status: i.status,
+    const s = t;
+    return new L(s.message || e, {
+      code: s.code ?? i,
+      status: s.status,
       cause: t
     });
   }
-  return typeof t == "string" ? new v(t, { code: s }) : new v(e, { code: s, cause: t });
+  return typeof t == "string" ? new L(t, { code: i }) : new L(e, { code: i, cause: t });
 }
-function Pe() {
+function Ce() {
   if (typeof window > "u" || typeof document > "u")
-    throw new Ee(
+    throw new Re(
       "@edgespark/web is browser-only. Create the client from a real browser runtime."
     );
 }
-function Q() {
-  return Pe(), window.location.origin;
+function oe() {
+  return Ce(), window.location.origin;
 }
-function Ne(t) {
+function He(t) {
   return t instanceof URL ? t : typeof t == "string" ? new URL(t, window.location.href) : new URL(t.url, window.location.href);
 }
-function Ve(t) {
-  if (t.origin !== Q())
-    throw new f(
-      `Cross-origin requests are not supported by this SDK. Received ${t.origin}, expected ${Q()}.`
+function ze(t) {
+  if (t.origin !== oe())
+    throw new g(
+      `Cross-origin requests are not supported by this SDK. Received ${t.origin}, expected ${oe()}.`
     );
 }
-function De() {
+function xe() {
   return {
     async fetch(t, e) {
-      const s = Ne(t);
-      return Ve(s), fetch(t, {
+      const i = He(t);
+      return ze(i), fetch(t, {
         ...e,
         credentials: "include"
       });
     }
   };
 }
-const _e = "/api/_es/auth", Fe = "edgespark-auth-session", Le = "__edgespark_auth_sync__", D = "__edgespark_auth_pending_sign_in__", Ae = Symbol("edgespark.notifyAuthTabs"), He = 10 * 60 * 1e3, ze = /* @__PURE__ */ new Set([
+const Ue = "/api/_es/auth", je = "edgespark-auth-session", $e = "__edgespark_auth_sync__", j = "__edgespark_auth_pending_sign_in__", ke = Symbol("edgespark.notifyAuthTabs"), qe = 10 * 60 * 1e3, Ke = /* @__PURE__ */ new Set([
   "signOut",
   "revokeSession",
   "revokeSessions",
   "revokeOtherSessions"
-]), je = /* @__PURE__ */ new Map([
+]), We = /* @__PURE__ */ new Map([
   [
     "changeEmail",
     "changeEmail() is not currently supported by EdgeSpark platform auth. Use authUI.mount() or other supported client.auth flows instead of wiring raw /api/_es/auth/* routes manually."
@@ -80,7 +80,7 @@ const _e = "/api/_es/auth", Fe = "edgespark-auth-session", Le = "__edgespark_aut
     "deleteUserCallback() is not currently supported by EdgeSpark platform auth. Handle account removal through your own app flow until the platform enables this capability."
   ]
 ]);
-class xe {
+class Ye {
   constructor(e) {
     this.value = e;
   }
@@ -88,32 +88,32 @@ class xe {
     return this.value;
   }
 }
-const ne = globalThis.WeakRef, re = globalThis.FinalizationRegistry;
-let F, oe = !1;
-const $ = /* @__PURE__ */ new Map(), H = re ? new re((t) => {
-  $.delete(t);
+const ce = globalThis.WeakRef, ue = globalThis.FinalizationRegistry;
+let q, he = !1;
+const M = /* @__PURE__ */ new Map(), K = ue ? new ue((t) => {
+  M.delete(t);
 }) : null;
-function Re(t) {
-  return Oe({
-    baseURL: Q(),
-    basePath: _e,
+function Be(t) {
+  return Ge({
+    baseURL: oe(),
+    basePath: Ue,
     ...t != null && t.disableDefaultRedirectPlugin ? { disableDefaultFetchPlugins: !0 } : {},
     fetchOptions: {
       credentials: "include"
     }
   });
 }
-function U(t) {
-  var e, s;
-  return (s = (e = t.$store) == null ? void 0 : e.atoms) == null ? void 0 : s.session;
+function O(t) {
+  var e, i;
+  return (i = (e = t.$store) == null ? void 0 : e.atoms) == null ? void 0 : i.session;
 }
-function qe(t) {
+function Je(t) {
   return JSON.stringify({
     source: t,
     timestamp: Date.now()
   });
 }
-function Ge(t) {
+function Xe(t) {
   if (typeof t != "string")
     return null;
   try {
@@ -123,70 +123,70 @@ function Ge(t) {
     return null;
   }
 }
-function Ke(t) {
+function Ze(t) {
   return t.join(".");
 }
-function We(t) {
-  const e = Ke(t), s = je.get(e);
-  return s ? new v(s, {
+function Qe(t) {
+  const e = Ze(t), i = We.get(e);
+  return i ? new L(i, {
     code: "UNSUPPORTED_AUTH_METHOD"
   }) : null;
 }
-async function ee(t) {
+async function ae(t) {
   var e;
   try {
-    return await ((e = U(t)) == null ? void 0 : e.get().refetch()), !0;
+    return await ((e = O(t)) == null ? void 0 : e.get().refetch()), !0;
   } catch {
     return !1;
   }
 }
-function Te() {
-  return F === void 0 && (F = typeof BroadcastChannel < "u" ? new BroadcastChannel(Fe) : null), F;
+function Oe() {
+  return q === void 0 && (q = typeof BroadcastChannel < "u" ? new BroadcastChannel(je) : null), q;
 }
-function ae(t) {
-  const e = Ge(t);
+function me(t) {
+  const e = Xe(t);
   if (e)
-    for (const [s, i] of $) {
-      if (s === e.source)
+    for (const [i, s] of M) {
+      if (i === e.source)
         continue;
-      const n = i.deref();
+      const n = s.deref();
       if (!n) {
-        $.delete(s);
+        M.delete(i);
         continue;
       }
-      ee(n);
+      ae(n);
     }
 }
-function Ye() {
+function et() {
   var t;
-  oe || (oe = !0, (t = Te()) == null || t.addEventListener("message", (e) => {
-    ae(e.data);
+  he || (he = !0, (t = Oe()) == null || t.addEventListener("message", (e) => {
+    me(e.data);
   }), typeof window < "u" && window.addEventListener("storage", (e) => {
-    e.key !== Le || e.newValue === null || ae(e.newValue);
+    e.key !== $e || e.newValue === null || me(e.newValue);
   }));
 }
-function Je(t, e) {
-  ne ? $.set(t, new ne(e)) : ($.clear(), $.set(t, new xe(e))), H == null || H.register(e, t), Ye();
+function tt(t, e) {
+  ce ? M.set(t, new ce(e)) : (M.clear(), M.set(t, new Ye(e))), K == null || K.register(e, t), et();
 }
-function I(t) {
-  const e = qe(t), s = Te();
-  let i = !1;
-  if (s)
+function k(t) {
+  const e = Je(t), i = Oe();
+  let s = !1;
+  if (i)
     try {
-      s.postMessage(e), i = !0;
+      i.postMessage(e), s = !0;
     } catch {
     }
-  if (!i)
+  if (!s)
     try {
-      window.localStorage.setItem(Le, e);
+      window.localStorage.setItem($e, e);
     } catch {
     }
 }
-function z(t) {
+function W(t) {
   if (!(typeof window > "u"))
     try {
       window.sessionStorage.setItem(
-        D,
+        j,
         JSON.stringify({
           path: t,
           createdAt: Date.now()
@@ -195,287 +195,315 @@ function z(t) {
     } catch {
     }
 }
-function C() {
+function B() {
   if (!(typeof window > "u"))
     try {
-      window.sessionStorage.removeItem(D);
+      window.sessionStorage.removeItem(j);
     } catch {
     }
 }
-function Xe(t) {
+function st(t) {
   return !!(t != null && t.session && (t != null && t.user));
 }
-function m(t) {
+function w(t) {
   return t instanceof Date ? t.toISOString() : t === null || typeof t == "string" || typeof t == "number" || typeof t == "boolean" ? t : t == null ? null : String(t);
 }
-function Ze(t) {
+function it(t) {
   return t ? JSON.stringify({
     session: {
-      createdAt: m(t.session.createdAt),
-      expiresAt: m(t.session.expiresAt),
-      id: m(t.session.id),
-      impersonatedBy: m(t.session.impersonatedBy),
-      ipAddress: m(t.session.ipAddress),
-      token: m(t.session.token),
-      updatedAt: m(t.session.updatedAt),
-      userAgent: m(t.session.userAgent),
-      userId: m(t.session.userId)
+      createdAt: w(t.session.createdAt),
+      expiresAt: w(t.session.expiresAt),
+      id: w(t.session.id),
+      impersonatedBy: w(t.session.impersonatedBy),
+      ipAddress: w(t.session.ipAddress),
+      token: w(t.session.token),
+      updatedAt: w(t.session.updatedAt),
+      userAgent: w(t.session.userAgent),
+      userId: w(t.session.userId)
     },
     user: {
-      banExpires: m(t.user.banExpires),
-      banReason: m(t.user.banReason),
-      banned: m(t.user.banned),
-      createdAt: m(t.user.createdAt),
-      email: m(t.user.email),
-      emailVerified: m(t.user.emailVerified),
-      id: m(t.user.id),
-      image: m(t.user.image),
-      lastLoginAt: m(t.user.lastLoginAt),
-      name: m(t.user.name),
-      role: m(t.user.role),
-      updatedAt: m(t.user.updatedAt)
+      banExpires: w(t.user.banExpires),
+      banReason: w(t.user.banReason),
+      banned: w(t.user.banned),
+      createdAt: w(t.user.createdAt),
+      email: w(t.user.email),
+      emailVerified: w(t.user.emailVerified),
+      id: w(t.user.id),
+      image: w(t.user.image),
+      lastLoginAt: w(t.user.lastLoginAt),
+      name: w(t.user.name),
+      role: w(t.user.role),
+      updatedAt: w(t.user.updatedAt)
     }
   }) : "__null__";
 }
-function Ie() {
+function Me() {
   if (typeof window > "u")
     return null;
   try {
-    const t = window.sessionStorage.getItem(D);
+    const t = window.sessionStorage.getItem(j);
     if (!t)
       return null;
     const e = JSON.parse(t);
-    return !e || typeof e != "object" || typeof e.createdAt != "number" || Date.now() - e.createdAt > He ? null : { createdAt: e.createdAt };
+    return !e || typeof e != "object" || typeof e.createdAt != "number" || Date.now() - e.createdAt > qe ? null : { createdAt: e.createdAt };
   } catch {
     return null;
   }
 }
-function le() {
-  if (!Ie())
+function fe() {
+  if (!Me())
     return !1;
   try {
-    window.sessionStorage.removeItem(D);
+    window.sessionStorage.removeItem(j);
   } catch {
   }
   return !0;
 }
-function Qe() {
-  return Ie() !== null;
+function nt() {
+  return Me() !== null;
 }
-function et(t) {
+function rt(t) {
   if (!(t && typeof t == "object") || "error" in t && t.error)
     return !1;
   const e = "data" in t ? t.data : t;
   return e && typeof e == "object" ? "token" in e && typeof e.token == "string" && e.token.length > 0 ? !0 : "session" in e && "user" in e && !!e.session && !!e.user : !1;
 }
-function tt(t) {
+function ot(t) {
   if (!(t && typeof t == "object") || "error" in t && t.error)
     return !1;
   const e = "data" in t ? t.data : t;
   return e && typeof e == "object" ? "url" in e && typeof e.url == "string" : !1;
 }
-function st(t) {
-  if (L(t) || !(t && typeof t == "object"))
+function at(t) {
+  if ($(t) || !(t && typeof t == "object"))
     return !1;
   const e = "data" in t ? t.data : t;
   return e && typeof e == "object" ? "user" in e && !!e.user && "token" in e && e.token === null && !("url" in e) : !1;
 }
-function it(t, e) {
+function lt(t, e) {
   if (t.length !== 1 || t[0] !== "changePassword")
     return !1;
-  const [s] = e;
-  return !!(s && typeof s == "object" && "revokeOtherSessions" in s && s.revokeOtherSessions === !0);
+  const [i] = e;
+  return !!(i && typeof i == "object" && "revokeOtherSessions" in i && i.revokeOtherSessions === !0);
 }
-function L(t) {
+function $(t) {
   return !!(t && typeof t == "object" && "error" in t && t.error);
 }
-function nt(t) {
-  if (L(t) || !(t && typeof t == "object"))
+function dt(t) {
+  if ($(t) || !(t && typeof t == "object"))
     return !1;
   const e = "data" in t ? t.data : t;
   return e && typeof e == "object" ? "message" in e && e.message === "User deleted" : !1;
 }
-function rt(t) {
+function ct(t) {
   return !!(t && (typeof t == "object" || typeof t == "function") && "then" in t && typeof t.then == "function");
 }
-function j(t) {
-  return Se(t, "Failed to load the current session.", "SESSION_LOOKUP_FAILED");
+function Y(t) {
+  return de(t, "Failed to load the current session.", "SESSION_LOOKUP_FAILED");
 }
-async function ot(t) {
-  var s, i;
+async function ut(t) {
+  var i, s;
   let e = null;
   try {
-    await ((s = U(t)) == null ? void 0 : s.get().refetch());
+    await ((i = O(t)) == null ? void 0 : i.get().refetch());
   } catch (n) {
     e = n;
   } finally {
-    (i = t[Ae]) == null || i.call(t);
+    (s = t[ke]) == null || s.call(t);
   }
   if (e)
     throw e;
 }
-function at() {
-  const t = Re(), e = `${Date.now()}-${Math.random().toString(36).slice(2)}`;
-  Je(e, t);
-  const s = 2, i = 500;
-  let n = null, a = !1, u;
-  const g = (o) => (u = o, o), E = () => {
-    var c;
-    const o = (c = U(t)) == null ? void 0 : c.get();
-    return o != null && o.error && !o.data && u !== void 0 ? u : (o == null ? void 0 : o.data) ?? u ?? null;
-  }, A = () => a ? Promise.resolve(E()) : (n || (n = (async () => {
-    var l, h, y;
-    let o = !1, c = null;
+function ht() {
+  const t = Be(), e = `${Date.now()}-${Math.random().toString(36).slice(2)}`;
+  tt(e, t);
+  const i = 2, s = 500;
+  let n = null, o = !1, u;
+  const f = (a) => (u = a, a), p = () => {
+    var h;
+    const a = (h = O(t)) == null ? void 0 : h.get();
+    return a != null && a.error && !a.data && u !== void 0 ? u : (a == null ? void 0 : a.data) ?? u ?? null;
+  }, A = () => o ? Promise.resolve(p()) : (n || (n = (async () => {
+    var l, m, T;
+    let a = !1, h = null;
     try {
-      for (let b = 0; b <= s; b++) {
-        let d = null;
+      for (let _ = 0; _ <= i; _++) {
+        let c = null;
         try {
-          d = await t.getSession();
-        } catch (S) {
-          c = S;
+          c = await t.getSession();
+        } catch (I) {
+          h = I;
         }
-        const p = ((l = U(t)) == null ? void 0 : l.get().data) ?? null;
-        if ((h = d == null ? void 0 : d.data) != null && h.session && ((y = d.data) != null && y.user))
-          return a = !0, le() && I(e), g(d.data);
-        if (p != null && p.session && (p != null && p.user))
-          return a = !0, le() && I(e), g(p);
-        if (d != null && d.error ? c = d.error : d && (o = !0), d && !d.error && Qe() && b < s) {
+        const E = ((l = O(t)) == null ? void 0 : l.get().data) ?? null;
+        if ((m = c == null ? void 0 : c.data) != null && m.session && ((T = c.data) != null && T.user))
+          return o = !0, fe() && k(e), f(c.data);
+        if (E != null && E.session && (E != null && E.user))
+          return o = !0, fe() && k(e), f(E);
+        if (c != null && c.error ? h = c.error : c && (a = !0), c && !c.error && nt() && _ < i) {
           await new Promise(
-            (S) => setTimeout(S, i)
+            (I) => setTimeout(I, s)
           );
           continue;
         }
-        if (d && !d.error) {
-          const S = E();
-          return a = !0, g(S);
+        if (c && !c.error) {
+          const I = p();
+          return o = !0, f(I);
         }
-        b < s && await new Promise(
-          (S) => setTimeout(S, i)
+        _ < i && await new Promise(
+          (I) => setTimeout(I, s)
         );
       }
-      if (!o)
-        throw n = null, new v("Failed to load the current session.", {
+      if (!a)
+        throw n = null, new L("Failed to load the current session.", {
           code: "SESSION_LOOKUP_FAILED",
-          cause: c
+          cause: h
         });
-      const w = E();
-      return a = !0, g(w);
-    } catch (w) {
-      throw n = null, j(w);
+      const y = p();
+      return o = !0, f(y);
+    } catch (y) {
+      throw n = null, Y(y);
     }
   })()), n);
   A().catch(() => {
   });
-  const R = async () => {
-    var o, c;
+  const v = async () => {
+    var a, h;
     try {
       const l = await t.getSession();
-      if ((o = l.data) != null && o.session && ((c = l.data) != null && c.user))
+      if ((a = l.data) != null && a.session && ((h = l.data) != null && h.user))
         return l.data;
-      throw l.error ? j(l.error) : new v("No authenticated session is available.", {
+      throw l.error ? Y(l.error) : new L("No authenticated session is available.", {
         code: "UNAUTHENTICATED"
       });
     } catch (l) {
-      throw j(l);
+      throw Y(l);
     }
-  }, T = async () => {
-    await ee(t), I(e);
-  }, Be = async () => {
+  }, b = async () => {
+    await ae(t), k(e);
+  }, P = async () => {
     var l;
-    const o = await ee(t), c = ((l = U(t)) == null ? void 0 : l.get().data) ?? null;
-    Xe(c) ? (C(), I(e)) : o || I(e);
-  }, ke = (o) => {
-    let c = !1, l = !1, h;
-    const y = (d) => {
-      const p = Ze(d);
-      p !== h && (h = p, o(d));
+    const a = await ae(t), h = ((l = O(t)) == null ? void 0 : l.get().data) ?? null;
+    st(h) ? (B(), k(e)) : a || k(e);
+  }, d = (a) => {
+    let h = !1, l = !1, m;
+    const T = (c) => {
+      const E = it(c);
+      E !== m && (m = E, a(c));
     };
-    A().then((d) => {
-      c || (l = !0, y(g(d)));
+    A().then((c) => {
+      h || (l = !0, T(f(c)));
     }).catch(() => {
-      c || (l = !0);
+      h || (l = !0);
     });
-    const w = U(t);
-    if (!w)
+    const y = O(t);
+    if (!y)
       return () => {
-        c = !0;
+        h = !0;
       };
-    const b = w.subscribe((d) => {
-      if (c || !l || d.error && !d.data)
+    const _ = y.subscribe((c) => {
+      if (h || !l || c.error && !c.data)
         return;
-      const p = d.data ?? null;
-      y(g(p));
+      const E = c.data ?? null;
+      T(f(E));
     });
     return () => {
-      c = !0, b();
+      h = !0, _();
     };
-  }, Me = async (o, c, l) => {
-    const h = o[0], y = o.length >= 2 && h === "emailOtp" && o[1] === "verifyEmail", w = o.length >= 2 && h === "emailOtp" && o[1] === "resetPassword", b = o.length >= 2 && h === "resetPassword" && o[1] === "emailOtp";
-    return o.length === 1 && (h === "deleteUser" || h === "deleteUserCallback") ? (C(), nt(l) && await T(), l) : o.length === 1 && h && ze.has(h) ? (C(), L(l) || await T(), l) : it(o, c) && !L(l) ? (C(), await T(), l) : (w || b) && !L(l) ? (C(), await T(), l) : o.length === 1 && h === "changeEmail" && !L(l) ? (await T(), l) : ((h === "signIn" || h === "signUp" || y) && et(l) ? (C(), await T()) : (h === "signIn" || h === "signUp") && tt(l) || h === "signUp" && st(l) ? z(o) : h === "verifyEmail" && !L(l) && (z(o), await Be()), l);
-  }, se = /* @__PURE__ */ new WeakMap(), ie = (o, c) => {
-    if (!o || typeof o != "object" && typeof o != "function")
-      return o;
-    const l = se.get(o);
+  }, S = async (a, h, l) => {
+    const m = a[0], T = a.length >= 2 && m === "emailOtp" && a[1] === "verifyEmail", y = a.length >= 2 && m === "emailOtp" && a[1] === "resetPassword", _ = a.length >= 2 && m === "resetPassword" && a[1] === "emailOtp", c = a.length >= 2 && m === "oneTap" && a[1] === "callback";
+    return a.length === 1 && (m === "deleteUser" || m === "deleteUserCallback") ? (B(), dt(l) && await b(), l) : a.length === 1 && m && Ke.has(m) ? (B(), $(l) || await b(), l) : lt(a, h) && !$(l) ? (B(), await b(), l) : (y || _) && !$(l) ? (B(), await b(), l) : a.length === 1 && m === "changeEmail" && !$(l) ? (await b(), l) : ((m === "signIn" || m === "signUp" || T || c) && rt(l) ? (B(), await b()) : (m === "signIn" || m === "signUp") && ot(l) || m === "signUp" && at(l) ? W(a) : m === "verifyEmail" && !$(l) && (W(a), await P()), l);
+  }, R = /* @__PURE__ */ new WeakMap(), D = (a, h) => {
+    if (!a || typeof a != "object" && typeof a != "function")
+      return a;
+    const l = R.get(a);
     if (l)
       return l;
-    const h = new Proxy(o, {
-      get(y, w, b) {
-        if (c.length === 0) {
-          if (w === "requireSession")
-            return R;
-          if (w === "onSessionChange")
-            return ke;
-          if (w === Ae)
+    const m = new Proxy(a, {
+      get(T, y, _) {
+        if (h.length === 0) {
+          if (y === "requireSession")
+            return v;
+          if (y === "onSessionChange")
+            return d;
+          if (y === ke)
             return () => {
-              I(e);
+              k(e);
             };
         }
-        const d = Reflect.get(y, w, b);
-        return typeof w != "string" ? d : ie(d, [...c, w]);
+        const c = Reflect.get(T, y, _);
+        return typeof y != "string" ? c : D(c, [...h, y]);
       },
-      apply(y, w, b) {
-        const d = We(c);
-        if (d)
-          throw d;
-        const p = Reflect.apply(
+      apply(T, y, _) {
+        const c = Qe(h);
+        if (c)
+          throw c;
+        const E = Reflect.apply(
+          T,
           y,
-          w,
-          b
+          _
         );
-        return rt(p) ? Promise.resolve(p).then(
-          (S) => Me(c, b, S)
-        ) : p;
+        return ct(E) ? Promise.resolve(E).then(
+          (I) => S(h, _, I)
+        ) : E;
       }
     });
-    return se.set(o, h), h;
+    return R.set(a, m), m;
   };
-  return ie(t, []);
-}
-function lt() {
-  return Re({ disableDefaultRedirectPlugin: !0 });
+  return D(t, []);
+}
+function mt() {
+  return Be({ disableDefaultRedirectPlugin: !0 });
+}
+const De = "/api/_es/dev";
+function ft() {
+  if (typeof document > "u") return !1;
+  const t = document.querySelector('meta[name="edgespark-local-dev"]');
+  return (t == null ? void 0 : t.getAttribute("content")) === "true";
+}
+async function wt(t) {
+  const e = typeof window < "u" ? window.location.origin : "";
+  if (!e) return !1;
+  const i = await fetch(
+    `${e}${De}/auto-verify?email=${encodeURIComponent(t)}`,
+    { credentials: "include" }
+  );
+  return i.ok ? (await i.json()).verified === !0 : !1;
+}
+async function gt(t) {
+  const e = typeof window < "u" ? window.location.origin : "";
+  if (!e) return null;
+  try {
+    const i = await fetch(
+      `${e}${De}/pending-otp?email=${encodeURIComponent(t)}`,
+      { credentials: "include" }
+    );
+    return i.ok ? (await i.json()).otp ?? null : null;
+  } catch {
+    return null;
+  }
 }
-function dt(t) {
+function pt(t) {
   const e = (() => {
     if (t instanceof URL)
       return t;
-    const s = t.trim();
-    if (!s)
-      throw new f("redirectTo must not be an empty string.");
+    const i = t.trim();
+    if (!i)
+      throw new g("redirectTo must not be an empty string.");
     try {
-      return new URL(s, window.location.href);
+      return new URL(i, window.location.href);
     } catch {
-      throw new f(
+      throw new g(
         `redirectTo must be a valid relative path or URL. Received: ${JSON.stringify(t)}`
       );
     }
   })();
   if (e.protocol !== "http:" && e.protocol !== "https:")
-    throw new f(
+    throw new g(
       `redirectTo must resolve to an http(s) URL. Received protocol: ${e.protocol}`
     );
   return e;
 }
-function ct(t, e) {
+function bt(t, e) {
   return e ? {
     common: { ...t.common, ...e.common },
     signIn: { ...t.signIn, ...e.signIn },
@@ -487,7 +515,7 @@ function ct(t, e) {
     errors: { ...t.errors, ...e.errors }
   } : t;
 }
-const V = {
+const x = {
   common: {
     loading: "Loading sign-in…",
     redirecting: "Redirecting…",
@@ -550,7 +578,7 @@ const V = {
     invalidCode: "Enter the 6-digit verification code.",
     generic: "Something went wrong. Please try again."
   }
-}, x = {
+}, J = {
   common: {
     loading: "加载中…",
     redirecting: "跳转中…",
@@ -613,7 +641,7 @@ const V = {
     invalidCode: "请输入 6 位验证码",
     generic: "出现错误，请稍后重试"
   }
-}, de = {
+}, we = {
   common: {
     loading: "サインインを読み込み中…",
     redirecting: "リダイレクト中…",
@@ -676,7 +704,7 @@ const V = {
     invalidCode: "6桁の認証コードを入力してください",
     generic: "エラーが発生しました。もう一度お試しください"
   }
-}, ce = {
+}, ge = {
   common: {
     loading: "로그인 로딩 중…",
     redirecting: "리디렉션 중…",
@@ -739,7 +767,7 @@ const V = {
     invalidCode: "6자리 인증 코드를 입력해 주세요",
     generic: "문제가 발생했습니다. 다시 시도해 주세요"
   }
-}, q = {
+}, X = {
   common: {
     loading: "Cargando inicio de sesión…",
     redirecting: "Redirigiendo…",
@@ -802,7 +830,7 @@ const V = {
     invalidCode: "Ingresa el código de verificación de 6 dígitos.",
     generic: "Algo salió mal. Por favor, inténtalo de nuevo."
   }
-}, ue = {
+}, pe = {
   common: {
     loading: "Carregando login…",
     redirecting: "Redirecionando…",
@@ -865,7 +893,7 @@ const V = {
     invalidCode: "Insira o código de verificação de 6 dígitos.",
     generic: "Algo deu errado. Por favor, tente novamente."
   }
-}, he = {
+}, be = {
   common: {
     loading: "Chargement de la connexion…",
     redirecting: "Redirection…",
@@ -928,7 +956,7 @@ const V = {
     invalidCode: "Saisissez le code de vérification à 6 chiffres.",
     generic: "Une erreur est survenue. Veuillez réessayer."
   }
-}, me = {
+}, ve = {
   common: {
     loading: "Anmeldung wird geladen…",
     redirecting: "Weiterleitung…",
@@ -991,7 +1019,7 @@ const V = {
     invalidCode: "Geben Sie den 6-stelligen Bestätigungscode ein.",
     generic: "Etwas ist schiefgelaufen. Bitte versuchen Sie es erneut."
   }
-}, fe = {
+}, ye = {
   common: {
     loading: "Caricamento accesso…",
     redirecting: "Reindirizzamento…",
@@ -1054,7 +1082,7 @@ const V = {
     invalidCode: "Inserisci il codice di verifica a 6 cifre.",
     generic: "Qualcosa è andato storto. Riprova."
   }
-}, we = {
+}, Ee = {
   common: {
     loading: "Загрузка входа…",
     redirecting: "Перенаправление…",
@@ -1117,7 +1145,7 @@ const V = {
     invalidCode: "Введите 6-значный код подтверждения.",
     generic: "Произошла ошибка. Пожалуйста, попробуйте снова."
   }
-}, pe = {
+}, Se = {
   common: {
     loading: "جارٍ تحميل تسجيل الدخول…",
     redirecting: "جارٍ إعادة التوجيه…",
@@ -1180,7 +1208,7 @@ const V = {
     invalidCode: "يرجى إدخال رمز التحقّق المكوّن من 6 أرقام.",
     generic: "حدث خطأ. يرجى المحاولة مرة أخرى."
   }
-}, ge = {
+}, Pe = {
   common: {
     loading: "सधाइन की जुलातीअ लोड हो रही है…",
     redirecting: "रीडायरेक्ट हो रहا है…",
@@ -1243,48 +1271,48 @@ const V = {
     invalidCode: "कृपया 6 अंकों का सत्यापन कोड दर्ज करें।",
     generic: "कुछ गलत हो गई। कृपया फिर से प्रयास करें।"
   }
-}, be = {
-  en: V,
-  "en-US": V,
-  zh: x,
-  "zh-CN": x,
-  "zh-TW": x,
-  ja: de,
-  "ja-JP": de,
-  ko: ce,
-  "ko-KR": ce,
-  es: q,
-  "es-ES": q,
-  "es-MX": q,
-  pt: ue,
-  "pt-BR": ue,
-  fr: he,
-  "fr-FR": he,
-  de: me,
-  "de-DE": me,
-  it: fe,
-  "it-IT": fe,
-  ru: we,
-  "ru-RU": we,
-  ar: pe,
-  "ar-SA": pe,
-  hi: ge,
-  "hi-IN": ge
+}, _e = {
+  en: x,
+  "en-US": x,
+  zh: J,
+  "zh-CN": J,
+  "zh-TW": J,
+  ja: we,
+  "ja-JP": we,
+  ko: ge,
+  "ko-KR": ge,
+  es: X,
+  "es-ES": X,
+  "es-MX": X,
+  pt: pe,
+  "pt-BR": pe,
+  fr: be,
+  "fr-FR": be,
+  de: ve,
+  "de-DE": ve,
+  it: ye,
+  "it-IT": ye,
+  ru: Ee,
+  "ru-RU": Ee,
+  ar: Se,
+  "ar-SA": Se,
+  hi: Pe,
+  "hi-IN": Pe
 };
-function ut() {
+function vt() {
   if (typeof navigator > "u")
-    return V;
+    return x;
   const t = navigator.languages ?? [navigator.language];
   for (const e of t) {
-    const s = be[e] ?? be[e.split("-")[0]];
-    if (s) return s;
+    const i = _e[e] ?? _e[e.split("-")[0]];
+    if (i) return i;
   }
-  return V;
+  return x;
 }
-const Ce = {
+const Ne = {
   LIGHT: "light",
   DARK: "dark"
-}, Ue = Ce.LIGHT, ht = Ce.DARK, $e = [Ue, ht], mt = Ue, ft = {
+}, Ve = Ne.LIGHT, yt = Ne.DARK, Fe = [Ve, yt], Et = Ve, St = {
   BACKGROUND: "--edgespark-auth-bg",
   BACKGROUND_MUTED: "--edgespark-auth-bg-muted",
   CARD_BACKGROUND: "--edgespark-auth-card-bg",
@@ -1304,31 +1332,31 @@ const Ce = {
   MODAL_BACKDROP: "--edgespark-auth-modal-backdrop",
   MODAL_CARD_BACKGROUND: "--edgespark-auth-modal-card-bg",
   MODAL_SHADOW: "--edgespark-auth-modal-shadow"
-}, wt = Object.values(
-  ft
+}, Pt = Object.values(
+  St
 );
-function pt(t) {
-  return typeof t == "string" && $e.includes(t);
+function _t(t) {
+  return typeof t == "string" && Fe.includes(t);
 }
-function gt(t) {
-  return wt.includes(t);
+function Lt(t) {
+  return Pt.includes(t);
 }
-function bt(t) {
+function At(t) {
   var e;
   return {
-    theme: (t == null ? void 0 : t.theme) ?? mt,
+    theme: (t == null ? void 0 : t.theme) ?? Et,
     className: ((e = t == null ? void 0 : t.className) == null ? void 0 : e.trim()) ?? "",
     variables: { ...(t == null ? void 0 : t.variables) ?? {} }
   };
 }
-function G(t, e = "Authentication failed.") {
-  return Se(t, e);
+function Z(t, e = "Authentication failed.") {
+  return de(t, e);
 }
-async function k(t) {
-  var s, i;
+async function V(t) {
+  var i, s;
   const e = await t.getSession();
   if (e.error)
-    throw new v(
+    throw new L(
       e.error.message || "Failed to load the current session.",
       {
         code: e.error.code ?? "SESSION_LOOKUP_FAILED",
@@ -1336,7 +1364,7 @@ async function k(t) {
         cause: e.error
       }
     );
-  return (s = e.data) != null && s.user && ((i = e.data) != null && i.session) ? {
+  return (i = e.data) != null && i.user && ((s = e.data) != null && s.session) ? {
     user: e.data.user,
     session: e.data
   } : {
@@ -1344,13 +1372,13 @@ async function k(t) {
     session: null
   };
 }
-const yt = "data-edgespark-auth", vt = "data-edgespark-auth-theme", r = "edgespark-auth", K = "es_auth_completion", M = "es_auth_email", W = "oauth", B = "verify-sign-in", P = "verify-sign-up", ye = 200, Y = 2, Et = {
+const Tt = "data-edgespark-auth", It = "data-edgespark-auth-theme", r = "edgespark-auth", Q = "es_auth_completion", F = "es_auth_email", ee = "oauth", N = "verify-sign-in", C = "verify-sign-up", Le = 200, te = 2, Rt = {
   "&": "&amp;",
   "<": "&lt;",
   ">": "&gt;",
   '"': "&quot;",
   "'": "&#39;"
-}, J = {
+}, se = {
   google: "Google",
   apple: "Apple",
   microsoft: "Microsoft",
@@ -1358,27 +1386,27 @@ const yt = "data-edgespark-auth", vt = "data-edgespark-auth-theme", r = "edgespa
   gitlab: "GitLab",
   discord: "Discord"
 };
-function _(t) {
+function U(t) {
   return "redirectTo" in t;
 }
-function X(t) {
+function ie(t) {
   return "onSuccess" in t && !("redirectTo" in t);
 }
-function Z(t) {
+function ne(t) {
   return !t || typeof t != "string" ? !1 : /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(t.trim());
 }
-function St(t) {
+function Ct(t) {
   return /^\d{6}$/.test(t.trim());
 }
-function Pt(t) {
+function Ut(t) {
   return t === "email" || t === "name" || t === "password" || t === "confirmPassword" || t === "code" || t === "newPassword";
 }
-function _t(t) {
+function $t(t) {
   return !!(t.error || t.errorDescription);
 }
-class Lt {
-  constructor(e, s, i, n, a) {
-    this.container = e, this.auth = s, this.options = i, this.loadConfig = n, this.runtimeOptions = a, this.state = {
+class kt {
+  constructor(e, i, s, n, o) {
+    this.container = e, this.auth = i, this.options = s, this.loadConfig = n, this.runtimeOptions = o, this.state = {
       view: "loading",
       busy: !0,
       busyLabel: void 0,
@@ -1391,39 +1419,39 @@ class Lt {
       code: "",
       newPassword: ""
     }, this.destroyed = !1, this.terminalActionInProgress = !1, this.config = null, this.countdownUntil = null, this.countdownTimer = null, this.pendingFocusSnapshot = null, this.focusRestoreTimer = null, this.verificationCompletionAction = null;
-    const u = bt(i.appearance);
-    this.labels = ct(ut(), i.labels), this.root = document.createElement("div"), this.root.className = u.className ? `${r} ${u.className}` : r, this.root.setAttribute(yt, ""), this.root.setAttribute(vt, u.theme);
-    for (const [g, E] of Object.entries(u.variables))
-      E !== void 0 && this.root.style.setProperty(g, E);
-    e.innerHTML = "", e.appendChild(this.root), this.render(), this.initialize();
+    const u = At(s.appearance);
+    this.labels = bt(vt(), s.labels), this.root = document.createElement("div"), this.root.className = u.className ? `${r} ${u.className}` : r, this.root.setAttribute(Tt, ""), this.root.setAttribute(It, u.theme);
+    for (const [f, p] of Object.entries(u.variables))
+      p !== void 0 && this.root.style.setProperty(f, p);
+    e.appendChild(this.root), this.render(), this.initialize();
   }
   destroy() {
-    this.destroyed || (this.destroyed = !0, this.clearCountdown(), this.clearFocusRestoreTimer(), this.container.innerHTML = "");
+    this.destroyed || (this.destroyed = !0, this.clearCountdown(), this.clearFocusRestoreTimer(), this.root.remove());
   }
   async initialize() {
     const e = this.consumeManagedReturnContext();
     try {
-      const [s, i] = await Promise.allSettled([
+      const [i, s] = await Promise.allSettled([
         this.loadConfig(),
         this.readMountSession(e)
       ]);
       if (this.destroyed)
         return;
-      if (i.status === "rejected") {
-        if (e.marker && !_t(e) && _(this.options)) {
+      if (s.status === "rejected") {
+        if (e.marker && !$t(e) && U(this.options)) {
           this.redirectAfterManagedReturnLookupFailure();
           return;
         }
       } else {
-        const a = i.value;
-        if (a.user && a.session) {
+        const o = s.value;
+        if (o.user && o.session) {
           switch (e.marker) {
-            case W:
-            case B:
-              await this.completeAuth("sign-in", a);
+            case ee:
+            case N:
+              await this.completeAuth("sign-in", o);
               return;
-            case P:
-              await this.completeAuth("sign-up", a);
+            case C:
+              await this.completeAuth("sign-up", o);
               return;
             default:
               break;
@@ -1432,40 +1460,40 @@ class Lt {
           return;
         }
       }
-      if (s.status === "rejected")
-        throw i.status === "rejected" ? i.reason : s.reason;
-      if (this.config = s.value, this.handleSessionlessManagedReturn(e))
-        return;
       if (i.status === "rejected")
-        throw i.reason;
-      const n = i.value;
+        throw s.status === "rejected" ? s.reason : i.reason;
+      if (this.config = i.value, this.handleSessionlessManagedReturn(e))
+        return;
+      if (s.status === "rejected")
+        throw s.reason;
+      const n = s.value;
       this.state.view = "sign-in", this.state.busy = !1, this.state.busyLabel = void 0, this.render();
-    } catch (s) {
-      this.handleError(s, "Failed to load the authentication UI.");
+    } catch (i) {
+      this.handleError(i, "Failed to load the authentication UI.");
     }
   }
   redirectAfterManagedReturnLookupFailure() {
-    _(this.options) && this.navigateToRedirect();
+    U(this.options) && this.navigateToRedirect();
   }
   navigateToRedirect() {
-    _(this.options) && (this.terminalActionInProgress = !0, this.state.busy = !0, this.state.busyLabel = this.labels.common.redirecting, this.state.error = null, this.state.notice = null, this.render(), window.location.assign(dt(this.options.redirectTo).toString()));
+    U(this.options) && (this.terminalActionInProgress = !0, this.state.busy = !0, this.state.busyLabel = this.labels.common.redirecting, this.state.error = null, this.state.notice = null, this.render(), window.location.assign(pt(this.options.redirectTo).toString()));
   }
   async readMountSession(e) {
     if (!e.marker)
-      return k(this.auth);
-    let s = null;
-    for (let i = 0; i <= Y; i++) {
+      return V(this.auth);
+    let i = null;
+    for (let s = 0; s <= te; s++) {
       try {
-        const n = await k(this.auth);
+        const n = await V(this.auth);
         if (n.user && n.session)
           return n;
       } catch (n) {
-        s = n;
+        i = n;
       }
-      i < Y && await new Promise((n) => setTimeout(n, ye));
+      s < te && await new Promise((n) => setTimeout(n, Le));
     }
-    if (s)
-      throw s;
+    if (i)
+      throw i;
     return {
       user: null,
       session: null
@@ -1481,6 +1509,7 @@ class Lt {
     }
     this.root.innerHTML = `
       <div class="${r}__shell">
+        ${this.renderDevModeBanner()}
         <div class="${r}__card">
           ${this.renderStatus()}
           ${this.renderCurrentView()}
@@ -1498,6 +1527,10 @@ class Lt {
       </div>
     `;
   }
+  renderDevModeBanner() {
+    var e;
+    return (e = this.config) != null && e.isLocalDev ? `<div class="${r}__dev-banner">Local dev mode — emails are mocked, OAuth uses test identities</div>` : "";
+  }
   renderStatus() {
     const e = [];
     return this.state.error && e.push(
@@ -1526,8 +1559,8 @@ class Lt {
     }
   }
   renderSignInView() {
-    var i, n;
-    const e = this.renderOAuthProviders(), s = ((i = this.config) == null ? void 0 : i.emailPasswordEnabled) ?? !0;
+    var s, n;
+    const e = this.renderOAuthProviders(), i = ((s = this.config) == null ? void 0 : s.emailPasswordEnabled) ?? !0;
     return `
       <section class="${r}__section">
         <header class="${r}__header">
@@ -1535,8 +1568,8 @@ class Lt {
           <p class="${r}__copy">${this.escape(this.labels.signIn.subtitle)}</p>
         </header>
         ${e}
-        ${e && s ? `<div class="${r}__divider"><span>${this.escape(this.labels.oauth.dividerText)}</span></div>` : ""}
-        ${s ? `
+        ${e && i ? `<div class="${r}__divider"><span>${this.escape(this.labels.oauth.dividerText)}</span></div>` : ""}
+        ${i ? `
           <form class="${r}__form" data-view="sign-in" novalidate>
             ${this.renderInput("email", this.labels.signIn.emailLabel, "email", this.state.email, "email")}
             ${this.renderInput("password", this.labels.signIn.passwordLabel, "password", this.state.password, "current-password")}
@@ -1665,28 +1698,28 @@ class Lt {
     `;
   }
   renderOAuthProviders() {
-    var s;
-    const e = ((s = this.config) == null ? void 0 : s.oauthProviders) ?? [];
+    var i;
+    const e = ((i = this.config) == null ? void 0 : i.oauthProviders) ?? [];
     return e.length === 0 ? "" : `
       <div class="${r}__stack">
-        ${e.map((i) => `
-            <button class="${r}__button ${r}__button--secondary" type="button" data-action="oauth" data-provider="${i}" ${this.state.busy ? "disabled" : ""}>
-              ${this.escape(`${this.labels.oauth.continueWith} ${J[i]}`)}
+        ${e.map((s) => `
+            <button class="${r}__button ${r}__button--secondary" type="button" data-action="oauth" data-provider="${s}" ${this.state.busy ? "disabled" : ""}>
+              ${this.escape(`${this.labels.oauth.continueWith} ${se[s]}`)}
             </button>
           `).join("")}
       </div>
     `;
   }
-  renderInput(e, s, i, n, a) {
+  renderInput(e, i, s, n, o) {
     return `
       <label class="${r}__field">
-        <span class="${r}__label">${this.escape(s)}</span>
+        <span class="${r}__label">${this.escape(i)}</span>
         <input
           class="${r}__input"
           name="${this.escape(e)}"
-          type="${this.escape(i)}"
+          type="${this.escape(s)}"
           value="${this.escape(n)}"
-          autocomplete="${this.escape(a)}"
+          autocomplete="${this.escape(o)}"
           ${this.state.busy ? "disabled" : ""}
         />
       </label>
@@ -1694,19 +1727,19 @@ class Lt {
   }
   bindDOM() {
     this.root.querySelectorAll("form[data-view]").forEach((n) => {
-      n.addEventListener("submit", (a) => {
-        a.preventDefault();
+      n.addEventListener("submit", (o) => {
+        o.preventDefault();
         const u = n.dataset.view;
         u === "sign-in" && this.handleSignIn(), u === "sign-up" && this.handleSignUp(), u === "forgot-password" && this.handleForgotPassword(), u === "reset-password" && this.handleResetPassword();
       });
     }), this.root.querySelectorAll("input[name]").forEach((n) => {
       n.addEventListener("input", () => {
-        Pt(n.name) && (this.state[n.name] = n.value);
+        Ut(n.name) && (this.state[n.name] = n.value);
       });
     }), this.root.querySelectorAll("[data-action]").forEach((n) => {
       n.addEventListener("click", () => {
-        const a = n.dataset.action;
-        a === "switch-sign-up" && this.switchView("sign-up"), a === "switch-sign-in" && this.switchView("sign-in"), a === "forgot-password" && this.switchView("forgot-password"), a === "resend-verification" && this.resendVerificationEmail(), a === "use-different-email" && this.switchView(this.verificationCompletionAction === "sign-in" ? "sign-in" : "sign-up"), a === "resend-reset-code" && this.resendResetCode(), a === "oauth" && this.handleOAuthSignIn(n.dataset.provider);
+        const o = n.dataset.action;
+        o === "switch-sign-up" && this.switchView("sign-up"), o === "switch-sign-in" && this.switchView("sign-in"), o === "forgot-password" && this.switchView("forgot-password"), o === "resend-verification" && this.resendVerificationEmail(), o === "use-different-email" && this.switchView(this.verificationCompletionAction === "sign-in" ? "sign-in" : "sign-up"), o === "resend-reset-code" && this.resendResetCode(), o === "oauth" && this.handleOAuthSignIn(n.dataset.provider);
       });
     });
   }
@@ -1714,7 +1747,7 @@ class Lt {
     this.clearCountdown(), e !== "verify-email" && (this.verificationCompletionAction = null), this.state.view = e, this.state.error = null, this.state.notice = null, this.state.busy = !1, this.state.busyLabel = void 0, this.terminalActionInProgress = !1, this.render();
   }
   async handleSignIn() {
-    if (!Z(this.state.email)) {
+    if (!ne(this.state.email)) {
       this.failValidation(this.labels.errors.invalidEmail);
       return;
     }
@@ -1726,7 +1759,7 @@ class Lt {
       const e = await this.auth.signIn.email({
         email: this.state.email.trim(),
         password: this.state.password,
-        callbackURL: this.getManagedReturnURL(B, this.state.email.trim())
+        callbackURL: this.getManagedReturnURL(N, this.state.email.trim())
       });
       if (e.error)
         throw e.error;
@@ -1734,12 +1767,12 @@ class Lt {
     });
   }
   async handleSignUp() {
-    var e, s;
+    var e, i;
     if (!this.state.name.trim()) {
       this.failValidation(this.labels.errors.requiredField);
       return;
     }
-    if (!Z(this.state.email)) {
+    if (!ne(this.state.email)) {
       this.failValidation(this.labels.errors.invalidEmail);
       return;
     }
@@ -1749,7 +1782,7 @@ class Lt {
     }
     if (this.state.password.length < (((e = this.config) == null ? void 0 : e.minPasswordLength) ?? 8)) {
       this.failValidation(
-        this.labels.errors.passwordTooShort.replace("{min}", String(((s = this.config) == null ? void 0 : s.minPasswordLength) ?? 8))
+        this.labels.errors.passwordTooShort.replace("{min}", String(((i = this.config) == null ? void 0 : i.minPasswordLength) ?? 8))
       );
       return;
     }
@@ -1759,68 +1792,77 @@ class Lt {
     }
     await this.runAction("Creating account…", async () => {
       var n;
-      const i = await this.auth.signUp.email({
+      const s = await this.auth.signUp.email({
         name: this.state.name.trim(),
         email: this.state.email.trim(),
         password: this.state.password,
-        callbackURL: this.getManagedReturnURL(P, this.state.email.trim())
+        callbackURL: this.getManagedReturnURL(C, this.state.email.trim())
       });
-      if (i.error)
-        throw i.error;
+      if (s.error)
+        throw s.error;
       if ((n = this.config) != null && n.requireEmailVerification) {
-        this.verificationCompletionAction = "sign-up", this.state.view = "verify-email", this.state.notice = "Check your inbox to verify your email address.", this.startCountdown();
+        if (this.config.isLocalDev && await this.tryDevAutoVerify("sign-up", s.data))
+          return;
+        this.verificationCompletionAction = "sign-up", this.state.view = "verify-email", this.state.notice = this.config.isLocalDev ? "Dev mode: auto-verify didn’t complete. Click resend to retry." : "Check your inbox to verify your email address.", this.startCountdown();
         return;
       }
-      await this.completeAuth("sign-up", await this.resolveAuthCompletionData(i.data));
+      await this.completeAuth("sign-up", await this.resolveAuthCompletionData(s.data));
     });
   }
   async handleOAuthSignIn(e) {
-    await this.runAction(`Redirecting to ${J[e]}…`, async () => {
-      const s = await this.auth.signIn.social({
+    await this.runAction(`Redirecting to ${se[e]}…`, async () => {
+      const i = await this.auth.signIn.social({
         provider: e,
         callbackURL: this.getManagedReturnURL("oauth"),
         errorCallbackURL: this.getManagedReturnURL("oauth")
       });
-      if (s.error)
-        throw s.error;
-      const i = this.extractRedirectURL(s.data);
-      if (!i)
-        throw new f(`OAuth sign-in did not return a redirect URL for provider "${e}".`);
-      this.terminalActionInProgress = !0, this.state.busy = !0, this.state.busyLabel = `Opening ${J[e]}…`, this.state.error = null, this.state.notice = null, this.render(), window.location.assign(i);
+      if (i.error)
+        throw i.error;
+      const s = this.extractRedirectURL(i.data);
+      if (!s)
+        throw new g(`OAuth sign-in did not return a redirect URL for provider "${e}".`);
+      this.terminalActionInProgress = !0, this.state.busy = !0, this.state.busyLabel = `Opening ${se[e]}…`, this.state.error = null, this.state.notice = null, this.render(), window.location.assign(s);
     });
   }
   async handleForgotPassword() {
     if (!this.canUsePasswordResetEmailOtp()) {
       this.handleError(
-        new f("Password reset via email OTP is not enabled for this project.")
+        new g("Password reset via email OTP is not enabled for this project.")
       );
       return;
     }
-    if (!Z(this.state.email)) {
+    if (!ne(this.state.email)) {
       this.failValidation(this.labels.errors.invalidEmail);
       return;
     }
     await this.runAction("Sending reset code…", async () => {
+      var i;
       const e = await this.passwordResetEndpoints().forgetPassword.emailOtp({
         email: this.state.email.trim()
       });
       if (e.error)
         throw e.error;
-      this.state.view = "reset-password", this.state.notice = `We sent a reset code to ${this.state.email.trim()}.`, this.startCountdown();
+      if (this.state.view = "reset-password", (i = this.config) != null && i.isLocalDev) {
+        this.state.busyLabel = "Dev mode: fetching reset code…", this.render();
+        const s = await gt(this.state.email.trim());
+        s ? (this.state.code = s, this.state.notice = `Dev mode: reset code auto-filled (${s})`) : this.state.notice = "Dev mode: could not retrieve reset code — check server logs";
+      } else
+        this.state.notice = `We sent a reset code to ${this.state.email.trim()}.`;
+      this.startCountdown();
     });
   }
   async resendResetCode() {
     this.isCountdownActive() || await this.handleForgotPassword();
   }
   async handleResetPassword() {
-    var e, s;
+    var e, i;
     if (!this.canUsePasswordResetEmailOtp()) {
       this.handleError(
-        new f("Password reset via email OTP is not enabled for this project.")
+        new g("Password reset via email OTP is not enabled for this project.")
       );
       return;
     }
-    if (!St(this.state.code)) {
+    if (!Ct(this.state.code)) {
       this.failValidation(this.labels.errors.invalidCode);
       return;
     }
@@ -1830,7 +1872,7 @@ class Lt {
     }
     if (this.state.newPassword.length < (((e = this.config) == null ? void 0 : e.minPasswordLength) ?? 8)) {
       this.failValidation(
-        this.labels.errors.passwordTooShort.replace("{min}", String(((s = this.config) == null ? void 0 : s.minPasswordLength) ?? 8))
+        this.labels.errors.passwordTooShort.replace("{min}", String(((i = this.config) == null ? void 0 : i.minPasswordLength) ?? 8))
       );
       return;
     }
@@ -1839,48 +1881,73 @@ class Lt {
       return;
     }
     await this.runAction("Updating password…", async () => {
-      const i = await this.passwordResetEndpoints().emailOtp.resetPassword({
+      const s = await this.passwordResetEndpoints().emailOtp.resetPassword({
         email: this.state.email.trim(),
         otp: this.state.code.trim(),
         password: this.state.newPassword
       });
-      if (i.error)
-        throw i.error;
+      if (s.error)
+        throw s.error;
       await this.completePasswordReset();
     });
   }
   async resendVerificationEmail() {
+    var e;
+    if ((e = this.config) != null && e.isLocalDev) {
+      if (this.isCountdownActive()) return;
+      await this.runAction("Dev mode: retrying auto-verify…", async () => {
+        const i = this.verificationCompletionAction ?? "sign-in";
+        if (!await this.tryDevAutoVerify(i))
+          throw new Error(
+            "Dev auto-verify did not complete. Check the edgespark dev logs and try again."
+          );
+      });
+      return;
+    }
     await this.sendVerificationEmail(!1);
   }
+  /**
+   * Drive the local-dev auto-verify endpoint and, on success, complete the
+   * auth flow. Returns whether auto-verify completed — callers decide what
+   * to do on `false` (sign-up falls through to a retry UI; resend throws).
+   */
+  async tryDevAutoVerify(e, i) {
+    const s = this.state.email.trim();
+    try {
+      return this.state.busyLabel = "Dev mode: auto-verifying email…", this.render(), await wt(s) ? (this.state.notice = "Dev mode: email verification auto-completed", await this.completeAuth(e, await this.resolveAuthCompletionData(i)), !0) : (console.warn("[edgespark] Dev auto-verify returned false — falling through"), !1);
+    } catch (n) {
+      return console.warn("[edgespark] Dev auto-verify failed:", n), !1;
+    }
+  }
   async sendVerificationEmail(e) {
     !e && this.isCountdownActive() || await this.runAction("Sending verification email…", async () => {
-      const s = await this.auth.sendVerificationEmail({
+      const i = await this.auth.sendVerificationEmail({
         email: this.state.email.trim(),
         callbackURL: this.getManagedReturnURL(
-          this.verificationCompletionAction === "sign-up" ? P : B,
+          this.verificationCompletionAction === "sign-up" ? C : N,
           this.state.email.trim()
         )
       });
-      if (s.error)
-        throw s.error;
+      if (i.error)
+        throw i.error;
       this.handleVerificationEmailSent(this.state.email.trim(), !0);
     });
   }
-  async completeAuth(e, s) {
-    const i = await this.retryAuthCompletionDataIfNeeded(
-      s ?? await this.resolveAuthCompletionData()
+  async completeAuth(e, i) {
+    const s = await this.retryAuthCompletionDataIfNeeded(
+      i ?? await this.resolveAuthCompletionData()
     );
     if (this.destroyed)
       return;
-    if (!i.user || !i.session) {
+    if (!s.user || !s.session) {
       if (this.destroyed)
         return;
-      if (i.lookupError && _(this.options)) {
+      if (s.lookupError && U(this.options)) {
         this.navigateToRedirect();
         return;
       }
       if (e === "sign-in")
-        throw i.lookupError ?? new Ee(
+        throw s.lookupError ?? new Re(
           "Managed sign-in completed without an authenticated session."
         );
       this.state.view = "sign-in", this.state.password = "", this.state.confirmPassword = "", this.state.error = null, this.state.busy = !1, this.state.busyLabel = void 0, this.state.notice = "Account created. Sign in to continue.", this.render();
@@ -1888,15 +1955,15 @@ class Lt {
     }
     const n = {
       action: e,
-      user: i.user,
-      session: i.session
+      user: s.user,
+      session: s.session
     };
     if (await this.syncPublicSessionBestEffort(), !this.destroyed) {
-      if (_(this.options)) {
+      if (U(this.options)) {
         this.invokeRedirectModeSuccessHook(n), this.navigateToRedirect();
         return;
       }
-      if (X(this.options)) {
+      if (ie(this.options)) {
         this.options.onSuccess(n), this.terminalActionInProgress = !0;
         return;
       }
@@ -1905,44 +1972,44 @@ class Lt {
   async retryAuthCompletionDataIfNeeded(e) {
     if (e.session)
       return e;
-    let s = e.lookupError;
-    for (let i = 0; i < Y; i++) {
-      await new Promise((n) => setTimeout(n, ye));
+    let i = e.lookupError;
+    for (let s = 0; s < te; s++) {
+      await new Promise((n) => setTimeout(n, Le));
       try {
-        const n = await k(this.auth);
+        const n = await V(this.auth);
         if (n.user && n.session)
           return {
             user: n.user,
             session: n.session
           };
       } catch (n) {
-        s = n;
+        i = n;
       }
     }
     return {
       ...e,
-      lookupError: s ?? e.lookupError
+      lookupError: i ?? e.lookupError
     };
   }
   async syncPublicSessionBestEffort() {
-    var e, s;
+    var e, i;
     try {
-      await ((s = (e = this.runtimeOptions) == null ? void 0 : e.syncPublicSession) == null ? void 0 : s.call(e));
+      await ((i = (e = this.runtimeOptions) == null ? void 0 : e.syncPublicSession) == null ? void 0 : i.call(e));
     } catch {
     }
   }
   async resolveAuthCompletionData(e) {
     try {
-      const s = await k(this.auth), i = this.extractUser(e);
+      const i = await V(this.auth), s = this.extractUser(e);
       return {
-        user: s.user ?? i,
-        session: s.session
+        user: i.user ?? s,
+        session: i.session
       };
-    } catch (s) {
+    } catch (i) {
       return {
         user: this.extractUser(e),
         session: null,
-        lookupError: s
+        lookupError: i
       };
     }
   }
@@ -1953,7 +2020,7 @@ class Lt {
       session: null
     };
     if (await this.syncPublicSessionBestEffort(), !this.destroyed) {
-      if (X(this.options)) {
+      if (ie(this.options)) {
         this.clearCountdown(), this.options.onSuccess(e), this.terminalActionInProgress = !0;
         return;
       }
@@ -1961,66 +2028,66 @@ class Lt {
     }
   }
   handleExistingSessionOnMount() {
-    if (_(this.options)) {
+    if (U(this.options)) {
       this.navigateToRedirect();
       return;
     }
-    if (X(this.options))
-      throw this.state.view = "sign-in", this.state.busy = !1, this.state.busyLabel = void 0, this.state.notice = null, new f(
+    if (ie(this.options))
+      throw this.state.view = "sign-in", this.state.busy = !1, this.state.busyLabel = void 0, this.state.notice = null, new g(
         "authUI.mount(container, { onSuccess }) cannot run while a session already exists. Check es.auth.getSession() before mounting controlled auth UI."
       );
   }
-  async runAction(e, s) {
+  async runAction(e, i) {
     this.state.busy = !0, this.state.busyLabel = e, this.state.error = null, this.state.notice = null, this.render();
     try {
-      await s();
-    } catch (i) {
-      if (this.maybeHandleVerificationRequired(i))
+      await i();
+    } catch (s) {
+      if (this.maybeHandleVerificationRequired(s))
         return;
-      this.handleError(i);
+      this.handleError(s);
       return;
     }
     !this.destroyed && !this.terminalActionInProgress && (this.state.busy = !1, this.state.busyLabel = void 0, this.render());
   }
   maybeHandleVerificationRequired(e) {
-    return G(e).code !== "EMAIL_NOT_VERIFIED" ? !1 : (this.verificationCompletionAction = "sign-in", this.state.view = "verify-email", this.state.busy = !1, this.state.busyLabel = void 0, this.state.error = null, this.state.notice = `Verify your email to finish signing in as ${this.state.email.trim()}.`, this.render(), this.sendVerificationEmail(!0), !0);
+    return Z(e).code !== "EMAIL_NOT_VERIFIED" ? !1 : (this.verificationCompletionAction = "sign-in", this.state.view = "verify-email", this.state.busy = !1, this.state.busyLabel = void 0, this.state.error = null, this.state.notice = `Verify your email to finish signing in as ${this.state.email.trim()}.`, this.render(), this.sendVerificationEmail(!0), !0);
   }
-  handleVerificationEmailSent(e, s) {
-    this.state.notice = s ? `We sent another verification email to ${e}.` : `We sent a verification email to ${e}.`, this.startCountdown();
+  handleVerificationEmailSent(e, i) {
+    this.state.notice = i ? `We sent another verification email to ${e}.` : `We sent a verification email to ${e}.`, this.startCountdown();
   }
   invokeRedirectModeSuccessHook(e) {
-    var s, i;
-    if (!(!_(this.options) || !this.options.onSuccess))
+    var i, s;
+    if (!(!U(this.options) || !this.options.onSuccess))
       try {
         this.options.onSuccess(e);
       } catch (n) {
-        const a = G(n, "Post-auth callback failed.");
+        const o = Z(n, "Post-auth callback failed.");
         try {
-          (i = (s = this.options).onError) == null || i.call(s, a);
+          (s = (i = this.options).onError) == null || s.call(i, o);
         } catch {
         }
       }
   }
-  handleError(e, s) {
-    var n, a;
-    const i = G(e, s);
-    this.state.busy = !1, this.state.busyLabel = void 0, this.state.error = i.message, this.render(), (a = (n = this.options).onError) == null || a.call(n, i);
+  handleError(e, i) {
+    var n, o;
+    const s = Z(e, i);
+    this.state.busy = !1, this.state.busyLabel = void 0, this.state.error = s.message, this.render(), (o = (n = this.options).onError) == null || o.call(n, s);
   }
   failValidation(e) {
     this.state.error = e, this.state.notice = null, this.render();
   }
-  getManagedReturnURL(e, s) {
+  getManagedReturnURL(e, i) {
     if (!e)
       return window.location.href;
-    const i = new URL(window.location.href);
-    return i.searchParams.set(K, e), s ? i.searchParams.set(M, s) : i.searchParams.delete(M), i.toString();
+    const s = new URL(window.location.href);
+    return s.searchParams.set(Q, e), i ? s.searchParams.set(F, i) : s.searchParams.delete(F), s.toString();
   }
   consumeManagedReturnContext() {
-    const e = new URL(window.location.href), s = e.searchParams.get(K), i = s === W || s === B || s === P ? s : null, n = e.searchParams.get(M), a = i ? e.searchParams.get("error") : null, u = i ? e.searchParams.get("error_description") : null;
-    return (i || n) && (e.searchParams.delete(K), e.searchParams.delete(M), i && (e.searchParams.delete("error"), e.searchParams.delete("error_description")), window.history.replaceState(null, "", e.toString())), {
-      marker: i,
+    const e = new URL(window.location.href), i = e.searchParams.get(Q), s = i === ee || i === N || i === C ? i : null, n = e.searchParams.get(F), o = s ? e.searchParams.get("error") : null, u = s ? e.searchParams.get("error_description") : null;
+    return (s || n) && (e.searchParams.delete(Q), e.searchParams.delete(F), s && (e.searchParams.delete("error"), e.searchParams.delete("error_description")), window.history.replaceState(null, "", e.toString())), {
+      marker: s,
       email: n,
-      error: a,
+      error: o,
       errorDescription: u
     };
   }
@@ -2049,14 +2116,14 @@ class Lt {
     this.pendingFocusSnapshot && (this.clearFocusRestoreTimer(), this.focusRestoreTimer = window.setTimeout(() => {
       if (this.focusRestoreTimer = null, this.destroyed || !this.pendingFocusSnapshot)
         return;
-      const e = this.pendingFocusSnapshot, s = `input[name="${this.escape(e.name)}"][type="${this.escape(e.type)}"]`, i = this.root.querySelector(s);
-      if (!(!i || i.disabled)) {
-        if (i.focus(), e.selectionStart !== null && e.selectionEnd !== null)
+      const e = this.pendingFocusSnapshot, i = `input[name="${this.escape(e.name)}"][type="${this.escape(e.type)}"]`, s = this.root.querySelector(i);
+      if (!(!s || s.disabled)) {
+        if (s.focus(), e.selectionStart !== null && e.selectionEnd !== null)
           try {
-            i.setSelectionRange(e.selectionStart, e.selectionEnd);
+            s.setSelectionRange(e.selectionStart, e.selectionEnd);
           } catch {
-            const n = i.value.length;
-            i.setSelectionRange(n, n);
+            const n = s.value.length;
+            s.setSelectionRange(n, n);
           }
         this.pendingFocusSnapshot = null;
       }
@@ -2071,24 +2138,24 @@ class Lt {
   extractRedirectURL(e) {
     if (!e || typeof e != "object")
       return null;
-    const s = e;
-    return s.redirect && typeof s.url == "string" && s.url.length > 0 ? s.url : null;
+    const i = e;
+    return i.redirect && typeof i.url == "string" && i.url.length > 0 ? i.url : null;
   }
   extractUser(e) {
     if (!e || typeof e != "object")
       return null;
-    const s = e;
-    return s.user && typeof s.user == "object" ? s.user : null;
+    const i = e;
+    return i.user && typeof i.user == "object" ? i.user : null;
   }
   canUsePasswordResetEmailOtp() {
     var e;
     return !!((e = this.config) != null && e.passwordResetEmailOtpEnabled);
   }
   handleSessionlessManagedReturn(e) {
-    return e.email && (this.state.email = e.email), e.marker === P && !e.error ? (this.verificationCompletionAction = null, this.clearCountdown(), this.state.view = "sign-in", this.state.password = "", this.state.confirmPassword = "", this.state.error = null, this.state.busy = !1, this.state.busyLabel = void 0, this.state.notice = "Account created. Sign in to continue.", this.render(), !0) : e.marker === B || e.marker === P ? (this.verificationCompletionAction = e.marker === P ? "sign-up" : "sign-in", this.state.view = "verify-email", this.state.busy = !1, this.state.busyLabel = void 0, this.state.notice = null, e.error || e.errorDescription ? this.handleError(new v(
+    return e.email && (this.state.email = e.email), e.marker === C && !e.error ? (this.verificationCompletionAction = null, this.clearCountdown(), this.state.view = "sign-in", this.state.password = "", this.state.confirmPassword = "", this.state.error = null, this.state.busy = !1, this.state.busyLabel = void 0, this.state.notice = "Account created. Sign in to continue.", this.render(), !0) : e.marker === N || e.marker === C ? (this.verificationCompletionAction = e.marker === C ? "sign-up" : "sign-in", this.state.view = "verify-email", this.state.busy = !1, this.state.busyLabel = void 0, this.state.notice = null, e.error || e.errorDescription ? this.handleError(new L(
       e.errorDescription ?? "Verification failed. Request a new verification email and try again.",
       { code: e.error ?? "VERIFY_EMAIL_ERROR" }
-    )) : this.render(), !0) : e.marker === W && (e.error || e.errorDescription) ? (this.state.view = "sign-in", this.state.busy = !1, this.state.busyLabel = void 0, this.state.notice = null, this.handleError(new v(
+    )) : this.render(), !0) : e.marker === ee && (e.error || e.errorDescription) ? (this.state.view = "sign-in", this.state.busy = !1, this.state.busyLabel = void 0, this.state.notice = null, this.handleError(new L(
       e.errorDescription ?? "OAuth sign-in failed.",
       { code: e.error ?? "OAUTH_ERROR" }
     )), !0) : !1;
@@ -2099,174 +2166,402 @@ class Lt {
   getCountdownSecondsRemaining() {
     return this.countdownUntil ? Math.max(0, Math.ceil((this.countdownUntil - Date.now()) / 1e3)) : 0;
   }
-  countdownText(e, s) {
-    const i = this.getCountdownSecondsRemaining();
-    return i <= 0 ? e : s.replace("{seconds}", String(i));
+  countdownText(e, i) {
+    const s = this.getCountdownSecondsRemaining();
+    return s <= 0 ? e : i.replace("{seconds}", String(s));
   }
   escape(e) {
-    return e.replace(/[&<>"']/g, (s) => Et[s]);
+    return e.replace(/[&<>"']/g, (i) => Rt[i]);
   }
 }
-function At(t) {
+function Bt(t) {
   return "data" in t && t.data ? t.data : t;
 }
-const Rt = [
+const Ot = [
   { id: "google", key: "providerGoogle" },
   { id: "apple", key: "providerApple" },
   { id: "microsoft", key: "providerMicrosoft" },
   { id: "github", key: "providerGithub" },
   { id: "gitlab", key: "providerGitlab" },
   { id: "discord", key: "providerDiscord" }
-], ve = 2, Tt = 500;
-async function It() {
-  const t = `${window.location.origin}${_e}/config`;
+], Ae = 2, Mt = 500;
+async function Dt() {
+  const t = `${window.location.origin}${Ue}/config`;
   let e;
-  for (let s = 0; s <= ve; s++)
+  for (let i = 0; i <= Ae; i++)
     try {
-      const i = await fetch(t, { method: "GET", credentials: "include" });
-      if (!i.ok)
-        throw new f(`Failed to load auth config: HTTP ${i.status}`);
-      const n = await i.json();
-      return Ut(At(n));
-    } catch (i) {
-      e = i, s < ve && await new Promise((n) => setTimeout(n, Tt));
+      const s = await fetch(t, { method: "GET", credentials: "include" });
+      if (!s.ok)
+        throw new g(`Failed to load auth config: HTTP ${s.status}`);
+      const n = await s.json(), o = Bt(n);
+      return Nt(o, ft());
+    } catch (s) {
+      e = s, i < Ae && await new Promise((n) => setTimeout(n, Mt));
     }
   throw e;
 }
-let O = null;
-async function Ct() {
-  return O || (O = It().catch((t) => {
-    throw O = null, t;
-  })), O;
-}
-function Ut(t) {
-  var s, i, n, a, u, g, E;
-  const e = Rt.filter(({ key: A }) => {
-    const R = t[A];
-    return typeof R == "object" && R !== null && "enabled" in R && !!R.enabled;
-  }).map(({ id: A }) => A);
+let G = null;
+async function Te() {
+  return G || (G = Dt().catch((t) => {
+    throw G = null, t;
+  })), G;
+}
+function Nt(t, e = !1) {
+  var o, u, f, p, A, v, b, P;
+  const i = Ot.filter(({ key: d }) => {
+    const S = t[d];
+    return typeof S == "object" && S !== null && "enabled" in S && !!S.enabled;
+  }).map(({ id: d }) => d), s = t.providerGoogle, n = s != null && s.enabled && typeof ((o = s.config) == null ? void 0 : o.clientId) == "string" ? s.config.clientId : null;
   return {
     disableSignUp: !!t.disableSignUp,
-    emailPasswordEnabled: !!((s = t.providerEmailPassword) != null && s.enabled),
-    minPasswordLength: ((n = (i = t.providerEmailPassword) == null ? void 0 : i.config) == null ? void 0 : n.minPasswordLength) ?? 8,
-    requireEmailVerification: !!((u = (a = t.providerEmailPassword) == null ? void 0 : a.config) != null && u.requireEmailVerification),
-    passwordResetEmailOtpEnabled: !!((E = (g = t.providerEmailPassword) == null ? void 0 : g.config) != null && E.requirePasswordResetEmailVerification),
-    oauthProviders: e
+    emailPasswordEnabled: !!((u = t.providerEmailPassword) != null && u.enabled),
+    minPasswordLength: ((p = (f = t.providerEmailPassword) == null ? void 0 : f.config) == null ? void 0 : p.minPasswordLength) ?? 8,
+    requireEmailVerification: !!((v = (A = t.providerEmailPassword) == null ? void 0 : A.config) != null && v.requireEmailVerification),
+    passwordResetEmailOtpEnabled: !!((P = (b = t.providerEmailPassword) == null ? void 0 : b.config) != null && P.requirePasswordResetEmailVerification),
+    oauthProviders: i,
+    googleClientId: n,
+    isLocalDev: e
   };
 }
-const N = /* @__PURE__ */ new WeakMap();
-function $t(t) {
+const Vt = "https://accounts.google.com/gsi/client", Ie = "data-edgespark-gsi";
+let H = null;
+function re() {
+  var t, e;
+  return (e = (t = window.google) == null ? void 0 : t.accounts) == null ? void 0 : e.id;
+}
+function Ft() {
+  if (typeof window > "u")
+    return Promise.reject(new Error("Google Identity Services is unavailable outside the browser."));
+  const t = re();
+  return t ? Promise.resolve(t) : (H || (H = new Promise((e, i) => {
+    const s = document.querySelector(
+      `script[${Ie}]`
+    );
+    if (s) {
+      const o = re();
+      if (o) {
+        e(o);
+        return;
+      }
+      s.remove();
+    }
+    const n = document.createElement("script");
+    n.src = Vt, n.async = !0, n.defer = !0, n.setAttribute(Ie, ""), n.addEventListener(
+      "load",
+      () => {
+        const o = re();
+        o ? e(o) : (n.remove(), i(new Error("Google Identity Services loaded but did not expose google.accounts.id.")));
+      },
+      { once: !0 }
+    ), n.addEventListener(
+      "error",
+      () => {
+        n.remove(), i(new Error("Failed to load Google Identity Services."));
+      },
+      { once: !0 }
+    ), document.head.appendChild(n);
+  }).catch((e) => {
+    throw H = null, e;
+  })), H);
+}
+function Gt() {
+  return { cancel: () => {
+  } };
+}
+function Ht(t) {
+  let e = null;
+  return function(s) {
+    if (typeof window > "u")
+      return console.error(
+        "[edgespark] promptGoogleOneTap() requires a browser environment."
+      ), Gt();
+    if (e)
+      return console.warn(
+        "[edgespark] promptGoogleOneTap() is already in flight; returning the existing handle. Call cancel() on the original before re-prompting."
+      ), e;
+    let n = !1, o = null;
+    const u = () => {
+      n || (n = !0, e === f && (e = null));
+    }, f = {
+      cancel() {
+        if (!n && (u(), o))
+          try {
+            o.cancel();
+          } catch {
+          }
+      }
+    }, p = () => {
+      var b;
+      if (!n) {
+        u();
+        try {
+          (b = s == null ? void 0 : s.onUnavailable) == null || b.call(s);
+        } catch (P) {
+          console.error("[edgespark] onUnavailable threw:", P);
+        }
+      }
+    }, A = (b, P) => {
+      var S;
+      if (n) return;
+      u();
+      const d = de(b, P);
+      try {
+        (S = s == null ? void 0 : s.onError) == null || S.call(s, d);
+      } catch (R) {
+        console.error("[edgespark] onError threw:", R);
+      }
+    }, v = (b, P) => {
+      var d;
+      if (!n) {
+        u();
+        try {
+          (d = s == null ? void 0 : s.onSuccess) == null || d.call(s, { action: "sign-in", user: b, session: P });
+        } catch (S) {
+          console.error("[edgespark] onSuccess threw:", S);
+        }
+      }
+    };
+    return e = f, (async () => {
+      let b;
+      try {
+        b = await t.loadConfig();
+      } catch (d) {
+        A(d, "Failed to load auth config for Google One Tap.");
+        return;
+      }
+      if (n) return;
+      if (b.isLocalDev) {
+        console.error(
+          "[edgespark] promptGoogleOneTap() is disabled in local dev mode — Google Identity Services cannot run against mock OAuth."
+        ), u();
+        return;
+      }
+      const P = b.googleClientId;
+      if (!P) {
+        console.error(
+          "[edgespark] promptGoogleOneTap() called but Google is not configured. Set `providerGoogle` in `auth-config.yaml` with resolvable credentials."
+        ), u();
+        return;
+      }
+      try {
+        o = await Ft();
+      } catch (d) {
+        console.warn(
+          "[edgespark] Google Identity Services failed to load; treating as unavailable.",
+          d
+        ), p();
+        return;
+      }
+      if (!n) {
+        o.initialize({
+          client_id: P,
+          callback: (d) => {
+            n || typeof (d == null ? void 0 : d.credential) != "string" || d.credential.length === 0 || zt(d.credential, t, {
+              emitSuccess: v,
+              emitError: A,
+              isDone: () => n
+            });
+          },
+          cancel_on_tap_outside: !1,
+          use_fedcm_for_prompt: !0,
+          context: "signin"
+        });
+        try {
+          o.prompt((d) => {
+            var S, R, D, a;
+            if (!n) {
+              if ((S = d.isDismissedMoment) != null && S.call(d)) {
+                const h = (R = d.getDismissedReason) == null ? void 0 : R.call(d);
+                if (h === "credential_returned" || h === "cancel_called") return;
+                p();
+                return;
+              }
+              ((D = d.isNotDisplayed) != null && D.call(d) || (a = d.isSkippedMoment) != null && a.call(d)) && p();
+            }
+          });
+        } catch (d) {
+          A(d, "Failed to prompt Google One Tap.");
+        }
+      }
+    })(), f;
+  };
+}
+async function zt(t, e, i) {
+  var A;
+  const { emitSuccess: s, emitError: n, isDone: o } = i, u = e.authClient;
+  if (!((A = u.oneTap) != null && A.callback)) {
+    n(
+      new L(
+        "Google One Tap endpoint not registered. Update the EdgeSpark sidecar.",
+        { code: "ONE_TAP_UNAVAILABLE" }
+      ),
+      "Google One Tap endpoint not registered."
+    );
+    return;
+  }
+  try {
+    const v = await u.oneTap.callback({ idToken: t });
+    if (o()) return;
+    if (v.error) {
+      n(
+        new L(
+          v.error.message ?? "Google One Tap sign-in failed.",
+          {
+            code: v.error.code ?? "ONE_TAP_FAILED",
+            status: v.error.status,
+            cause: v.error
+          }
+        ),
+        "Google One Tap sign-in failed."
+      );
+      return;
+    }
+  } catch (v) {
+    if (o()) return;
+    n(v, "Google One Tap sign-in failed.");
+    return;
+  }
+  let f = null, p = null;
+  try {
+    const v = await V(e.authClient);
+    if (o()) return;
+    f = v.user, p = v.session;
+  } catch (v) {
+    if (o()) return;
+    n(v, "Sign-in succeeded but session lookup failed.");
+    return;
+  }
+  if (!f || !p) {
+    n(
+      new L(
+        "Google One Tap completed without an authenticated session.",
+        { code: "ONE_TAP_NO_SESSION" }
+      ),
+      "Google One Tap completed without an authenticated session."
+    );
+    return;
+  }
+  s(f, p);
+}
+const z = /* @__PURE__ */ new WeakMap();
+function xt(t) {
   if (!t)
-    throw new f(
+    throw new g(
       "authUI.mount(container, options) requires either { redirectTo } or { onSuccess }."
     );
-  const e = "redirectTo" in t, s = "onSuccess" in t && typeof t.onSuccess == "function";
-  if (!e && !s)
-    throw new f(
+  const e = "redirectTo" in t, i = "onSuccess" in t && typeof t.onSuccess == "function";
+  if (!e && !i)
+    throw new g(
       "authUI.mount(container, options) requires either { redirectTo } or { onSuccess }."
     );
   if ("redirectTo" in t) {
-    const i = t.redirectTo;
-    if (!(typeof i == "string" || i instanceof URL))
-      throw new f(
+    const s = t.redirectTo;
+    if (!(typeof s == "string" || s instanceof URL))
+      throw new g(
         "authUI.mount(container, options) expected redirectTo to be a string or URL."
       );
   }
   if ("onSuccess" in t && t.onSuccess !== void 0 && typeof t.onSuccess != "function")
-    throw new f(
+    throw new g(
       "authUI.mount(container, options) expected onSuccess to be a function."
     );
   if ("onError" in t && t.onError !== void 0 && typeof t.onError != "function")
-    throw new f(
+    throw new g(
       "authUI.mount(container, options) expected onError to be a function."
     );
   if ("appearance" in t && t.appearance !== void 0) {
-    const i = t.appearance;
-    if (!i || typeof i != "object" || Array.isArray(i))
-      throw new f(
+    const s = t.appearance;
+    if (!s || typeof s != "object" || Array.isArray(s))
+      throw new g(
         "authUI.mount(container, options) expected appearance to be an object."
       );
-    if ("theme" in i && i.theme !== void 0 && !pt(i.theme))
-      throw new f(
-        `authUI.mount(container, options) expected appearance.theme to be one of: ${$e.join(", ")}.`
+    if ("theme" in s && s.theme !== void 0 && !_t(s.theme))
+      throw new g(
+        `authUI.mount(container, options) expected appearance.theme to be one of: ${Fe.join(", ")}.`
       );
-    if ("className" in i && i.className !== void 0 && typeof i.className != "string")
-      throw new f(
+    if ("className" in s && s.className !== void 0 && typeof s.className != "string")
+      throw new g(
         "authUI.mount(container, options) expected appearance.className to be a string."
       );
-    if ("variables" in i && i.variables !== void 0) {
-      if (!i.variables || typeof i.variables != "object" || Array.isArray(i.variables))
-        throw new f(
+    if ("variables" in s && s.variables !== void 0) {
+      if (!s.variables || typeof s.variables != "object" || Array.isArray(s.variables))
+        throw new g(
           "authUI.mount(container, options) expected appearance.variables to be an object."
         );
-      for (const [n, a] of Object.entries(i.variables)) {
-        if (!gt(n))
-          throw new f(
+      for (const [n, o] of Object.entries(s.variables)) {
+        if (!Lt(n))
+          throw new g(
             `authUI.mount(container, options) received unsupported appearance.variables key "${n}".`
           );
-        if (a !== void 0 && typeof a != "string")
-          throw new f(
+        if (o !== void 0 && typeof o != "string")
+          throw new g(
             `authUI.mount(container, options) expected appearance.variables["${n}"] to be a string.`
           );
       }
     }
   }
 }
-function Bt(t) {
+function jt(t) {
   if (!(t instanceof HTMLElement))
-    throw new f("authUI.mount(container, options) requires a real HTMLElement container.");
+    throw new g("authUI.mount(container, options) requires a real HTMLElement container.");
 }
-function kt(t, e) {
+function qt(t, e) {
+  const i = Ht({
+    authClient: e.publicAuthClient,
+    loadConfig: Te
+  });
   return {
-    mount(s, i) {
-      var g;
-      $t(i), Bt(s), (g = N.get(s)) == null || g.destroy();
-      const n = new Lt(s, t, i, Ct, e), a = n.destroy.bind(n), u = {
+    mount(s, n) {
+      var p;
+      xt(n), jt(s), (p = z.get(s)) == null || p.destroy();
+      const o = new kt(s, t, n, Te, e), u = o.destroy.bind(o), f = {
         destroy() {
-          a(), N.get(s) === u && N.delete(s);
+          u(), z.get(s) === f && z.delete(s);
         }
       };
-      return N.set(s, u), u;
-    }
+      return z.set(s, f), f;
+    },
+    promptGoogleOneTap: i
   };
 }
-function Ot() {
-  Pe();
-  const t = at(), e = lt(), s = De(), i = kt(e, {
+function Wt() {
+  Ce();
+  const t = ht(), e = mt(), i = xe(), s = qt(e, {
     syncPublicSession: async () => {
-      await ot(t);
-    }
+      await ut(t);
+    },
+    publicAuthClient: t
   });
   return {
     auth: t,
-    api: s,
-    authUI: i
+    api: i,
+    authUI: s
   };
 }
 export {
-  ft as AUTH_UI_APPEARANCE_VARIABLE,
-  wt as AUTH_UI_APPEARANCE_VARIABLE_NAMES,
-  mt as AUTH_UI_DEFAULT_THEME,
-  Ce as AUTH_UI_THEME,
-  $e as AUTH_UI_THEMES,
-  ht as AUTH_UI_THEME_DARK,
-  Ue as AUTH_UI_THEME_LIGHT,
-  v as EdgeSparkAuthError,
-  f as EdgeSparkConfigError,
-  te as EdgeSparkError,
-  Ee as EdgeSparkRuntimeError,
-  pe as ar,
-  Ot as createEdgeSpark,
-  me as de,
-  ut as detectLocale,
-  V as enUS,
-  q as es,
-  he as fr,
-  ge as hi,
-  fe as it,
-  de as ja,
-  ce as ko,
-  ue as ptBR,
-  we as ru,
-  x as zhCN
+  St as AUTH_UI_APPEARANCE_VARIABLE,
+  Pt as AUTH_UI_APPEARANCE_VARIABLE_NAMES,
+  Et as AUTH_UI_DEFAULT_THEME,
+  Ne as AUTH_UI_THEME,
+  Fe as AUTH_UI_THEMES,
+  yt as AUTH_UI_THEME_DARK,
+  Ve as AUTH_UI_THEME_LIGHT,
+  L as EdgeSparkAuthError,
+  g as EdgeSparkConfigError,
+  le as EdgeSparkError,
+  Re as EdgeSparkRuntimeError,
+  Se as ar,
+  Wt as createEdgeSpark,
+  ve as de,
+  vt as detectLocale,
+  x as enUS,
+  X as es,
+  be as fr,
+  Pe as hi,
+  ye as it,
+  we as ja,
+  ge as ko,
+  pe as ptBR,
+  Ee as ru,
+  J as zhCN
 };