@edgespark/web 0.0.3 → 0.0.5

package/dist/index.es.js

@@ -1,72 +1,72 @@
-import { createAuthClient as De } from "better-auth/client";
-class te extends Error {
+import { createAuthClient as He } from "better-auth/client";
+class le extends Error {
   constructor(e, s) {
     super(s), this.name = "EdgeSparkError", this.code = e;
   }
 }
-class f extends te {
+class b extends le {
   constructor(e) {
     super("CONFIG_ERROR", e), this.name = "EdgeSparkConfigError";
   }
 }
-class Ee extends te {
+class Ue extends le {
   constructor(e) {
     super("RUNTIME_ERROR", e), this.name = "EdgeSparkRuntimeError";
   }
 }
-class E extends te {
+class L extends le {
   constructor(e, s) {
     super((s == null ? void 0 : s.code) ?? "AUTH_ERROR", e), this.name = "EdgeSparkAuthError", this.cause = s == null ? void 0 : s.cause, this.status = s == null ? void 0 : s.status;
   }
 }
-function Se(t, e = "Authentication failed.", s) {
-  if (t instanceof E)
+function de(t, e = "Authentication failed.", s) {
+  if (t instanceof L)
     return t;
   if (typeof t == "object" && t !== null) {
     const i = t;
-    return new E(i.message || e, {
+    return new L(i.message || e, {
       code: i.code ?? s,
       status: i.status,
       cause: t
     });
   }
-  return typeof t == "string" ? new E(t, { code: s }) : new E(e, { code: s, cause: t });
+  return typeof t == "string" ? new L(t, { code: s }) : new L(e, { code: s, cause: t });
 }
-function Pe() {
+function $e() {
   if (typeof window > "u" || typeof document > "u")
-    throw new Ee(
+    throw new Ue(
       "@edgespark/web is browser-only. Create the client from a real browser runtime."
     );
 }
-function Q() {
-  return Pe(), window.location.origin;
+function oe() {
+  return $e(), window.location.origin;
 }
-function Ne(t) {
+function ze(t) {
   return t instanceof URL ? t : typeof t == "string" ? new URL(t, window.location.href) : new URL(t.url, window.location.href);
 }
-function Ve(t) {
-  if (t.origin !== Q())
-    throw new f(
-      `Cross-origin requests are not supported by this SDK. Received ${t.origin}, expected ${Q()}.`
+function xe(t) {
+  if (t.origin !== oe())
+    throw new b(
+      `Cross-origin requests are not supported by this SDK. Received ${t.origin}, expected ${oe()}.`
     );
 }
-function Fe() {
+function je() {
   return {
     async fetch(t, e) {
-      const s = Ne(t);
-      return Ve(s), fetch(t, {
+      const s = ze(t);
+      return xe(s), fetch(t, {
         ...e,
         credentials: "include"
       });
     }
   };
 }
-const Le = "/api/_es/auth", He = "edgespark-auth-session", _e = "__edgespark_auth_sync__", V = "__edgespark_auth_pending_sign_in__", Ae = Symbol("edgespark.notifyAuthTabs"), ze = 10 * 60 * 1e3, je = /* @__PURE__ */ new Set([
+const ke = "/api/_es/auth", qe = "edgespark-auth-session", Oe = "__edgespark_auth_sync__", q = "__edgespark_auth_pending_sign_in__", Be = Symbol("edgespark.notifyAuthTabs"), We = 10 * 60 * 1e3, Ke = /* @__PURE__ */ new Set([
   "signOut",
   "revokeSession",
   "revokeSessions",
   "revokeOtherSessions"
-]), qe = /* @__PURE__ */ new Map([
+]), Ye = /* @__PURE__ */ new Map([
   [
     "changeEmail",
     "changeEmail() is not currently supported by EdgeSpark platform auth. Use authUI.mount() or other supported client.auth flows instead of wiring raw /api/_es/auth/* routes manually."
@@ -80,7 +80,7 @@ const Le = "/api/_es/auth", He = "edgespark-auth-session", _e = "__edgespark_aut
     "deleteUserCallback() is not currently supported by EdgeSpark platform auth. Handle account removal through your own app flow until the platform enables this capability."
   ]
 ]);
-class xe {
+class Je {
   constructor(e) {
     this.value = e;
   }
@@ -88,32 +88,32 @@ class xe {
     return this.value;
   }
 }
-const ne = globalThis.WeakRef, re = globalThis.FinalizationRegistry;
-let F, oe = !1;
-const C = /* @__PURE__ */ new Map(), H = re ? new re((t) => {
-  C.delete(t);
+const ue = globalThis.WeakRef, he = globalThis.FinalizationRegistry;
+let W, me = !1;
+const M = /* @__PURE__ */ new Map(), K = he ? new he((t) => {
+  M.delete(t);
 }) : null;
-function Re(t) {
-  return De({
-    baseURL: Q(),
-    basePath: Le,
+function Me(t) {
+  return He({
+    baseURL: oe(),
+    basePath: ke,
     ...t != null && t.disableDefaultRedirectPlugin ? { disableDefaultFetchPlugins: !0 } : {},
     fetchOptions: {
       credentials: "include"
     }
   });
 }
-function I(t) {
+function B(t) {
   var e, s;
   return (s = (e = t.$store) == null ? void 0 : e.atoms) == null ? void 0 : s.session;
 }
-function Ge(t) {
+function Xe(t) {
   return JSON.stringify({
     source: t,
     timestamp: Date.now()
   });
 }
-function Ke(t) {
+function Ze(t) {
   if (typeof t != "string")
     return null;
   try {
@@ -123,53 +123,53 @@ function Ke(t) {
     return null;
   }
 }
-function We(t) {
+function Qe(t) {
   return t.join(".");
 }
-function Ye(t) {
-  const e = We(t), s = qe.get(e);
-  return s ? new E(s, {
+function et(t) {
+  const e = Qe(t), s = Ye.get(e);
+  return s ? new L(s, {
     code: "UNSUPPORTED_AUTH_METHOD"
   }) : null;
 }
-async function ee(t) {
+async function ae(t) {
   var e;
   try {
-    return await ((e = I(t)) == null ? void 0 : e.get().refetch()), !0;
+    return await ((e = B(t)) == null ? void 0 : e.get().refetch()), !0;
   } catch {
     return !1;
   }
 }
-function Te() {
-  return F === void 0 && (F = typeof BroadcastChannel < "u" ? new BroadcastChannel(He) : null), F;
+function De() {
+  return W === void 0 && (W = typeof BroadcastChannel < "u" ? new BroadcastChannel(qe) : null), W;
 }
-function ae(t) {
-  const e = Ke(t);
+function fe(t) {
+  const e = Ze(t);
   if (e)
-    for (const [s, i] of C) {
+    for (const [s, i] of M) {
       if (s === e.source)
         continue;
       const n = i.deref();
       if (!n) {
-        C.delete(s);
+        M.delete(s);
         continue;
       }
-      ee(n);
+      ae(n);
     }
 }
-function Je() {
+function tt() {
   var t;
-  oe || (oe = !0, (t = Te()) == null || t.addEventListener("message", (e) => {
-    ae(e.data);
+  me || (me = !0, (t = De()) == null || t.addEventListener("message", (e) => {
+    fe(e.data);
   }), typeof window < "u" && window.addEventListener("storage", (e) => {
-    e.key !== _e || e.newValue === null || ae(e.newValue);
+    e.key !== Oe || e.newValue === null || fe(e.newValue);
   }));
 }
-function Xe(t, e) {
-  ne ? C.set(t, new ne(e)) : (C.clear(), C.set(t, new xe(e))), H == null || H.register(e, t), Je();
+function st(t, e) {
+  ue ? M.set(t, new ue(e)) : (M.clear(), M.set(t, new Je(e))), K == null || K.register(e, t), tt();
 }
-function R(t) {
-  const e = Ge(t), s = Te();
+function k(t) {
+  const e = Xe(t), s = De();
   let i = !1;
   if (s)
     try {
@@ -178,15 +178,15 @@ function R(t) {
     }
   if (!i)
     try {
-      window.localStorage.setItem(_e, e);
+      window.localStorage.setItem(Oe, e);
     } catch {
     }
 }
-function z(t) {
+function Y(t) {
   if (!(typeof window > "u"))
     try {
       window.sessionStorage.setItem(
-        V,
+        q,
         JSON.stringify({
           path: t,
           createdAt: Date.now()
@@ -195,286 +195,286 @@ function z(t) {
     } catch {
     }
 }
-function T() {
+function O() {
   if (!(typeof window > "u"))
     try {
-      window.sessionStorage.removeItem(V);
+      window.sessionStorage.removeItem(q);
     } catch {
     }
 }
-function Ze(t) {
+function it(t) {
   return !!(t != null && t.session && (t != null && t.user));
 }
-function m(t) {
+function v(t) {
   return t instanceof Date ? t.toISOString() : t === null || typeof t == "string" || typeof t == "number" || typeof t == "boolean" ? t : t == null ? null : String(t);
 }
-function Qe(t) {
+function nt(t) {
   return t ? JSON.stringify({
     session: {
-      createdAt: m(t.session.createdAt),
-      expiresAt: m(t.session.expiresAt),
-      id: m(t.session.id),
-      impersonatedBy: m(t.session.impersonatedBy),
-      ipAddress: m(t.session.ipAddress),
-      token: m(t.session.token),
-      updatedAt: m(t.session.updatedAt),
-      userAgent: m(t.session.userAgent),
-      userId: m(t.session.userId)
+      createdAt: v(t.session.createdAt),
+      expiresAt: v(t.session.expiresAt),
+      id: v(t.session.id),
+      impersonatedBy: v(t.session.impersonatedBy),
+      ipAddress: v(t.session.ipAddress),
+      token: v(t.session.token),
+      updatedAt: v(t.session.updatedAt),
+      userAgent: v(t.session.userAgent),
+      userId: v(t.session.userId)
     },
     user: {
-      banExpires: m(t.user.banExpires),
-      banReason: m(t.user.banReason),
-      banned: m(t.user.banned),
-      createdAt: m(t.user.createdAt),
-      email: m(t.user.email),
-      emailVerified: m(t.user.emailVerified),
-      id: m(t.user.id),
-      image: m(t.user.image),
-      lastLoginAt: m(t.user.lastLoginAt),
-      name: m(t.user.name),
-      role: m(t.user.role),
-      updatedAt: m(t.user.updatedAt)
+      banExpires: v(t.user.banExpires),
+      banReason: v(t.user.banReason),
+      banned: v(t.user.banned),
+      createdAt: v(t.user.createdAt),
+      email: v(t.user.email),
+      emailVerified: v(t.user.emailVerified),
+      id: v(t.user.id),
+      image: v(t.user.image),
+      lastLoginAt: v(t.user.lastLoginAt),
+      name: v(t.user.name),
+      role: v(t.user.role),
+      updatedAt: v(t.user.updatedAt)
     }
   }) : "__null__";
 }
-function Ie() {
+function Ne() {
   if (typeof window > "u")
     return null;
   try {
-    const t = window.sessionStorage.getItem(V);
+    const t = window.sessionStorage.getItem(q);
     if (!t)
       return null;
     const e = JSON.parse(t);
-    return !e || typeof e != "object" || typeof e.createdAt != "number" || Date.now() - e.createdAt > ze ? null : { createdAt: e.createdAt };
+    return !e || typeof e != "object" || typeof e.createdAt != "number" || Date.now() - e.createdAt > We ? null : { createdAt: e.createdAt };
   } catch {
     return null;
   }
 }
-function le() {
-  if (!Ie())
+function ge() {
+  if (!Ne())
     return !1;
   try {
-    window.sessionStorage.removeItem(V);
+    window.sessionStorage.removeItem(q);
   } catch {
   }
   return !0;
 }
-function et() {
-  return Ie() !== null;
+function rt() {
+  return Ne() !== null;
 }
-function tt(t) {
+function ot(t) {
   if (!(t && typeof t == "object") || "error" in t && t.error)
     return !1;
   const e = "data" in t ? t.data : t;
   return e && typeof e == "object" ? "token" in e && typeof e.token == "string" && e.token.length > 0 ? !0 : "session" in e && "user" in e && !!e.session && !!e.user : !1;
 }
-function st(t) {
+function at(t) {
   if (!(t && typeof t == "object") || "error" in t && t.error)
     return !1;
   const e = "data" in t ? t.data : t;
   return e && typeof e == "object" ? "url" in e && typeof e.url == "string" : !1;
 }
-function it(t) {
-  if (A(t) || !(t && typeof t == "object"))
+function lt(t) {
+  if ($(t) || !(t && typeof t == "object"))
     return !1;
   const e = "data" in t ? t.data : t;
   return e && typeof e == "object" ? "user" in e && !!e.user && "token" in e && e.token === null && !("url" in e) : !1;
 }
-function nt(t, e) {
+function dt(t, e) {
   if (t.length !== 1 || t[0] !== "changePassword")
     return !1;
   const [s] = e;
   return !!(s && typeof s == "object" && "revokeOtherSessions" in s && s.revokeOtherSessions === !0);
 }
-function A(t) {
+function $(t) {
   return !!(t && typeof t == "object" && "error" in t && t.error);
 }
-function rt(t) {
-  if (A(t) || !(t && typeof t == "object"))
+function ct(t) {
+  if ($(t) || !(t && typeof t == "object"))
     return !1;
   const e = "data" in t ? t.data : t;
   return e && typeof e == "object" ? "message" in e && e.message === "User deleted" : !1;
 }
-function ot(t) {
+function ut(t) {
   return !!(t && (typeof t == "object" || typeof t == "function") && "then" in t && typeof t.then == "function");
 }
-function j(t) {
-  return Se(t, "Failed to load the current session.", "SESSION_LOOKUP_FAILED");
+function J(t) {
+  return de(t, "Failed to load the current session.", "SESSION_LOOKUP_FAILED");
 }
-async function at(t) {
+async function ht(t) {
   var s, i;
   let e = null;
   try {
-    await ((s = I(t)) == null ? void 0 : s.get().refetch());
+    await ((s = B(t)) == null ? void 0 : s.get().refetch());
   } catch (n) {
     e = n;
   } finally {
-    (i = t[Ae]) == null || i.call(t);
+    (i = t[Be]) == null || i.call(t);
   }
   if (e)
     throw e;
 }
-function lt() {
-  const t = Re(), e = `${Date.now()}-${Math.random().toString(36).slice(2)}`;
-  Xe(e, t);
+function mt() {
+  const t = Me(), e = `${Date.now()}-${Math.random().toString(36).slice(2)}`;
+  st(e, t);
   const s = 2, i = 500;
-  let n = null, a = !1, u;
-  const g = (o) => (u = o, o), S = () => {
-    var c;
-    const o = (c = I(t)) == null ? void 0 : c.get();
-    return o != null && o.error && !o.data && u !== void 0 ? u : (o == null ? void 0 : o.data) ?? u ?? null;
-  }, U = () => a ? Promise.resolve(S()) : (n || (n = (async () => {
-    var l, h, y;
-    let o = !1, c = null;
+  let n = null, o = !1, c;
+  const h = (a) => (c = a, a), p = () => {
+    var m;
+    const a = (m = B(t)) == null ? void 0 : m.get();
+    return a != null && a.error && !a.data && c !== void 0 ? c : (a == null ? void 0 : a.data) ?? c ?? null;
+  }, P = () => o ? Promise.resolve(p()) : (n || (n = (async () => {
+    var d, f, T;
+    let a = !1, m = null;
     try {
-      for (let b = 0; b <= s; b++) {
-        let d = null;
+      for (let I = 0; I <= s; I++) {
+        let u = null;
         try {
-          d = await t.getSession();
-        } catch (P) {
-          c = P;
+          u = await t.getSession();
+        } catch (C) {
+          m = C;
         }
-        const p = ((l = I(t)) == null ? void 0 : l.get().data) ?? null;
-        if ((h = d == null ? void 0 : d.data) != null && h.session && ((y = d.data) != null && y.user))
-          return a = !0, le() && R(e), g(d.data);
-        if (p != null && p.session && (p != null && p.user))
-          return a = !0, le() && R(e), g(p);
-        if (d != null && d.error ? c = d.error : d && (o = !0), d && !d.error && et() && b < s) {
+        const E = ((d = B(t)) == null ? void 0 : d.get().data) ?? null;
+        if ((f = u == null ? void 0 : u.data) != null && f.session && ((T = u.data) != null && T.user))
+          return o = !0, ge() && k(e), h(u.data);
+        if (E != null && E.session && (E != null && E.user))
+          return o = !0, ge() && k(e), h(E);
+        if (u != null && u.error ? m = u.error : u && (a = !0), u && !u.error && rt() && I < s) {
           await new Promise(
-            (P) => setTimeout(P, i)
+            (C) => setTimeout(C, i)
           );
           continue;
         }
-        if (d && !d.error) {
-          const P = S();
-          return a = !0, g(P);
+        if (u && !u.error) {
+          const C = p();
+          return o = !0, h(C);
         }
-        b < s && await new Promise(
-          (P) => setTimeout(P, i)
+        I < s && await new Promise(
+          (C) => setTimeout(C, i)
         );
       }
-      if (!o)
-        throw n = null, new E("Failed to load the current session.", {
+      if (!a)
+        throw n = null, new L("Failed to load the current session.", {
           code: "SESSION_LOOKUP_FAILED",
-          cause: c
+          cause: m
         });
-      const w = S();
-      return a = !0, g(w);
-    } catch (w) {
-      throw n = null, j(w);
+      const y = p();
+      return o = !0, h(y);
+    } catch (y) {
+      throw n = null, J(y);
     }
   })()), n);
-  U().catch(() => {
+  P().catch(() => {
   });
-  const $ = async () => {
-    var o, c;
+  const w = async () => {
+    var a, m;
     try {
-      const l = await t.getSession();
-      if ((o = l.data) != null && o.session && ((c = l.data) != null && c.user))
-        return l.data;
-      throw l.error ? j(l.error) : new E("No authenticated session is available.", {
+      const d = await t.getSession();
+      if ((a = d.data) != null && a.session && ((m = d.data) != null && m.user))
+        return d.data;
+      throw d.error ? J(d.error) : new L("No authenticated session is available.", {
         code: "UNAUTHENTICATED"
       });
-    } catch (l) {
-      throw j(l);
+    } catch (d) {
+      throw J(d);
     }
-  }, v = async () => {
-    await ee(t), R(e);
-  }, Be = async () => {
-    var l;
-    const o = await ee(t), c = ((l = I(t)) == null ? void 0 : l.get().data) ?? null;
-    Ze(c) ? (T(), R(e)) : o || R(e);
-  }, Me = (o) => {
-    let c = !1, l = !1, h;
-    const y = (d) => {
-      const p = Qe(d);
-      p !== h && (h = p, o(d));
+  }, g = async () => {
+    await ae(t), k(e);
+  }, S = async () => {
+    var d;
+    const a = await ae(t), m = ((d = B(t)) == null ? void 0 : d.get().data) ?? null;
+    it(m) ? (O(), k(e)) : a || k(e);
+  }, l = (a) => {
+    let m = !1, d = !1, f;
+    const T = (u) => {
+      const E = nt(u);
+      E !== f && (f = E, a(u));
     };
-    U().then((d) => {
-      c || (l = !0, y(g(d)));
+    P().then((u) => {
+      m || (d = !0, T(h(u)));
     }).catch(() => {
-      c || (l = !0);
+      m || (d = !0);
     });
-    const w = I(t);
-    if (!w)
+    const y = B(t);
+    if (!y)
       return () => {
-        c = !0;
+        m = !0;
       };
-    const b = w.subscribe((d) => {
-      if (c || !l || d.error && !d.data)
+    const I = y.subscribe((u) => {
+      if (m || !d || u.error && !u.data)
         return;
-      const p = d.data ?? null;
-      y(g(p));
+      const E = u.data ?? null;
+      T(h(E));
     });
     return () => {
-      c = !0, b();
+      m = !0, I();
     };
-  }, Oe = async (o, c, l) => {
-    const h = o[0], y = o.length >= 2 && h === "emailOtp" && o[1] === "verifyEmail", w = o.length >= 2 && h === "emailOtp" && o[1] === "resetPassword", b = o.length >= 2 && h === "resetPassword" && o[1] === "emailOtp";
-    return o.length === 1 && (h === "deleteUser" || h === "deleteUserCallback") ? (T(), rt(l) && await v(), l) : o.length === 1 && h && je.has(h) ? (T(), A(l) || await v(), l) : nt(o, c) && !A(l) ? (T(), await v(), l) : (w || b) && !A(l) ? (T(), await v(), l) : o.length === 1 && h === "changeEmail" && !A(l) ? (await v(), l) : ((h === "signIn" || h === "signUp" || y) && tt(l) ? (T(), await v()) : (h === "signIn" || h === "signUp") && st(l) || h === "signUp" && it(l) ? z(o) : h === "verifyEmail" && !A(l) && (z(o), await Be()), l);
-  }, se = /* @__PURE__ */ new WeakMap(), ie = (o, c) => {
-    if (!o || typeof o != "object" && typeof o != "function")
-      return o;
-    const l = se.get(o);
-    if (l)
-      return l;
-    const h = new Proxy(o, {
-      get(y, w, b) {
-        if (c.length === 0) {
-          if (w === "requireSession")
-            return $;
-          if (w === "onSessionChange")
-            return Me;
-          if (w === Ae)
+  }, _ = async (a, m, d) => {
+    const f = a[0], T = a.length >= 2 && f === "emailOtp" && a[1] === "verifyEmail", y = a.length >= 2 && f === "emailOtp" && a[1] === "resetPassword", I = a.length >= 2 && f === "resetPassword" && a[1] === "emailOtp", u = a.length >= 2 && f === "oneTap" && a[1] === "callback";
+    return a.length === 1 && (f === "deleteUser" || f === "deleteUserCallback") ? (O(), ct(d) && await g(), d) : a.length === 1 && f && Ke.has(f) ? (O(), $(d) || await g(), d) : dt(a, m) && !$(d) ? (O(), await g(), d) : (y || I) && !$(d) ? (O(), await g(), d) : a.length === 1 && f === "changeEmail" && !$(d) ? (await g(), d) : ((f === "signIn" || f === "signUp" || T || u) && ot(d) ? (O(), await g()) : (f === "signIn" || f === "signUp") && at(d) || f === "signUp" && lt(d) ? Y(a) : f === "verifyEmail" && !$(d) && (Y(a), await S()), d);
+  }, A = /* @__PURE__ */ new WeakMap(), D = (a, m) => {
+    if (!a || typeof a != "object" && typeof a != "function")
+      return a;
+    const d = A.get(a);
+    if (d)
+      return d;
+    const f = new Proxy(a, {
+      get(T, y, I) {
+        if (m.length === 0) {
+          if (y === "requireSession")
+            return w;
+          if (y === "onSessionChange")
+            return l;
+          if (y === Be)
             return () => {
-              R(e);
+              k(e);
             };
         }
-        const d = Reflect.get(y, w, b);
-        return typeof w != "string" ? d : ie(d, [...c, w]);
+        const u = Reflect.get(T, y, I);
+        return typeof y != "string" ? u : D(u, [...m, y]);
       },
-      apply(y, w, b) {
-        const d = Ye(c);
-        if (d)
-          throw d;
-        const p = Reflect.apply(
+      apply(T, y, I) {
+        const u = et(m);
+        if (u)
+          throw u;
+        const E = Reflect.apply(
+          T,
           y,
-          w,
-          b
+          I
         );
-        return ot(p) ? Promise.resolve(p).then(
-          (P) => Oe(c, b, P)
-        ) : p;
+        return ut(E) ? Promise.resolve(E).then(
+          (C) => _(m, I, C)
+        ) : E;
       }
     });
-    return se.set(o, h), h;
+    return A.set(a, f), f;
   };
-  return ie(t, []);
+  return D(t, []);
 }
-function dt() {
-  return Re({ disableDefaultRedirectPlugin: !0 });
+function ft() {
+  return Me({ disableDefaultRedirectPlugin: !0 });
 }
-const Ce = "/api/_es/dev";
-function ct() {
+const ce = "/api/_es/dev";
+function gt() {
   if (typeof document > "u") return !1;
   const t = document.querySelector('meta[name="edgespark-local-dev"]');
   return (t == null ? void 0 : t.getAttribute("content")) === "true";
 }
-async function ut(t) {
+async function pt(t) {
   const e = typeof window < "u" ? window.location.origin : "";
   if (!e) return !1;
   const s = await fetch(
-    `${e}${Ce}/auto-verify?email=${encodeURIComponent(t)}`,
+    `${e}${ce}/auto-verify?email=${encodeURIComponent(t)}`,
     { credentials: "include" }
   );
   return s.ok ? (await s.json()).verified === !0 : !1;
 }
-async function ht(t) {
+async function wt(t) {
   const e = typeof window < "u" ? window.location.origin : "";
   if (!e) return null;
   try {
     const s = await fetch(
-      `${e}${Ce}/pending-otp?email=${encodeURIComponent(t)}`,
+      `${e}${ce}/pending-otp?email=${encodeURIComponent(t)}`,
       { credentials: "include" }
     );
     return s.ok ? (await s.json()).otp ?? null : null;
@@ -482,28 +482,41 @@ async function ht(t) {
     return null;
   }
 }
-function mt(t) {
+async function bt(t) {
+  const e = typeof window < "u" ? window.location.origin : "";
+  if (!e) return null;
+  try {
+    const s = await fetch(
+      `${e}${ce}/pending-sign-in-otp?email=${encodeURIComponent(t)}`,
+      { credentials: "include" }
+    );
+    return s.ok ? (await s.json()).otp ?? null : null;
+  } catch {
+    return null;
+  }
+}
+function vt(t) {
   const e = (() => {
     if (t instanceof URL)
       return t;
     const s = t.trim();
     if (!s)
-      throw new f("redirectTo must not be an empty string.");
+      throw new b("redirectTo must not be an empty string.");
     try {
       return new URL(s, window.location.href);
     } catch {
-      throw new f(
+      throw new b(
         `redirectTo must be a valid relative path or URL. Received: ${JSON.stringify(t)}`
       );
     }
   })();
   if (e.protocol !== "http:" && e.protocol !== "https:")
-    throw new f(
+    throw new b(
       `redirectTo must resolve to an http(s) URL. Received protocol: ${e.protocol}`
     );
   return e;
 }
-function ft(t, e) {
+function yt(t, e) {
   return e ? {
     common: { ...t.common, ...e.common },
     signIn: { ...t.signIn, ...e.signIn },
@@ -515,7 +528,7 @@ function ft(t, e) {
     errors: { ...t.errors, ...e.errors }
   } : t;
 }
-const N = {
+const j = {
   common: {
     loading: "Loading sign-in…",
     redirecting: "Redirecting…",
@@ -527,6 +540,8 @@ const N = {
     emailLabel: "Email",
     passwordLabel: "Password",
     submitButton: "Sign in",
+    resendCodeButton: "Resend code",
+    resendCountdown: "Resend in {seconds}s",
     forgotPassword: "Forgot password?",
     switchToSignUp: "Create an account",
     signUpPrompt: "Don’t have an account?"
@@ -578,7 +593,7 @@ const N = {
     invalidCode: "Enter the 6-digit verification code.",
     generic: "Something went wrong. Please try again."
   }
-}, q = {
+}, X = {
   common: {
     loading: "加载中…",
     redirecting: "跳转中…",
@@ -641,7 +656,7 @@ const N = {
     invalidCode: "请输入 6 位验证码",
     generic: "出现错误，请稍后重试"
   }
-}, de = {
+}, pe = {
   common: {
     loading: "サインインを読み込み中…",
     redirecting: "リダイレクト中…",
@@ -704,7 +719,7 @@ const N = {
     invalidCode: "6桁の認証コードを入力してください",
     generic: "エラーが発生しました。もう一度お試しください"
   }
-}, ce = {
+}, we = {
   common: {
     loading: "로그인 로딩 중…",
     redirecting: "리디렉션 중…",
@@ -767,7 +782,7 @@ const N = {
     invalidCode: "6자리 인증 코드를 입력해 주세요",
     generic: "문제가 발생했습니다. 다시 시도해 주세요"
   }
-}, x = {
+}, Z = {
   common: {
     loading: "Cargando inicio de sesión…",
     redirecting: "Redirigiendo…",
@@ -830,7 +845,7 @@ const N = {
     invalidCode: "Ingresa el código de verificación de 6 dígitos.",
     generic: "Algo salió mal. Por favor, inténtalo de nuevo."
   }
-}, ue = {
+}, be = {
   common: {
     loading: "Carregando login…",
     redirecting: "Redirecionando…",
@@ -893,7 +908,7 @@ const N = {
     invalidCode: "Insira o código de verificação de 6 dígitos.",
     generic: "Algo deu errado. Por favor, tente novamente."
   }
-}, he = {
+}, ve = {
   common: {
     loading: "Chargement de la connexion…",
     redirecting: "Redirection…",
@@ -956,7 +971,7 @@ const N = {
     invalidCode: "Saisissez le code de vérification à 6 chiffres.",
     generic: "Une erreur est survenue. Veuillez réessayer."
   }
-}, me = {
+}, ye = {
   common: {
     loading: "Anmeldung wird geladen…",
     redirecting: "Weiterleitung…",
@@ -1019,7 +1034,7 @@ const N = {
     invalidCode: "Geben Sie den 6-stelligen Bestätigungscode ein.",
     generic: "Etwas ist schiefgelaufen. Bitte versuchen Sie es erneut."
   }
-}, fe = {
+}, Se = {
   common: {
     loading: "Caricamento accesso…",
     redirecting: "Reindirizzamento…",
@@ -1082,7 +1097,7 @@ const N = {
     invalidCode: "Inserisci il codice di verifica a 6 cifre.",
     generic: "Qualcosa è andato storto. Riprova."
   }
-}, we = {
+}, Ee = {
   common: {
     loading: "Загрузка входа…",
     redirecting: "Перенаправление…",
@@ -1145,7 +1160,7 @@ const N = {
     invalidCode: "Введите 6-значный код подтверждения.",
     generic: "Произошла ошибка. Пожалуйста, попробуйте снова."
   }
-}, pe = {
+}, Pe = {
   common: {
     loading: "جارٍ تحميل تسجيل الدخول…",
     redirecting: "جارٍ إعادة التوجيه…",
@@ -1208,7 +1223,7 @@ const N = {
     invalidCode: "يرجى إدخال رمز التحقّق المكوّن من 6 أرقام.",
     generic: "حدث خطأ. يرجى المحاولة مرة أخرى."
   }
-}, ge = {
+}, _e = {
   common: {
     loading: "सधाइन की जुलातीअ लोड हो रही है…",
     redirecting: "रीडायरेक्ट हो रहا है…",
@@ -1271,48 +1286,48 @@ const N = {
     invalidCode: "कृपया 6 अंकों का सत्यापन कोड दर्ज करें।",
     generic: "कुछ गलत हो गई। कृपया फिर से प्रयास करें।"
   }
-}, be = {
-  en: N,
-  "en-US": N,
-  zh: q,
-  "zh-CN": q,
-  "zh-TW": q,
-  ja: de,
-  "ja-JP": de,
-  ko: ce,
-  "ko-KR": ce,
-  es: x,
-  "es-ES": x,
-  "es-MX": x,
-  pt: ue,
-  "pt-BR": ue,
-  fr: he,
-  "fr-FR": he,
-  de: me,
-  "de-DE": me,
-  it: fe,
-  "it-IT": fe,
-  ru: we,
-  "ru-RU": we,
-  ar: pe,
-  "ar-SA": pe,
-  hi: ge,
-  "hi-IN": ge
+}, Ie = {
+  en: j,
+  "en-US": j,
+  zh: X,
+  "zh-CN": X,
+  "zh-TW": X,
+  ja: pe,
+  "ja-JP": pe,
+  ko: we,
+  "ko-KR": we,
+  es: Z,
+  "es-ES": Z,
+  "es-MX": Z,
+  pt: be,
+  "pt-BR": be,
+  fr: ve,
+  "fr-FR": ve,
+  de: ye,
+  "de-DE": ye,
+  it: Se,
+  "it-IT": Se,
+  ru: Ee,
+  "ru-RU": Ee,
+  ar: Pe,
+  "ar-SA": Pe,
+  hi: _e,
+  "hi-IN": _e
 };
-function wt() {
+function St() {
   if (typeof navigator > "u")
-    return N;
+    return j;
   const t = navigator.languages ?? [navigator.language];
   for (const e of t) {
-    const s = be[e] ?? be[e.split("-")[0]];
+    const s = Ie[e] ?? Ie[e.split("-")[0]];
     if (s) return s;
   }
-  return N;
+  return j;
 }
-const Ue = {
+const Ve = {
   LIGHT: "light",
   DARK: "dark"
-}, $e = Ue.LIGHT, pt = Ue.DARK, ke = [$e, pt], gt = $e, bt = {
+}, Fe = Ve.LIGHT, Et = Ve.DARK, Ge = [Fe, Et], Pt = Fe, _t = {
   BACKGROUND: "--edgespark-auth-bg",
   BACKGROUND_MUTED: "--edgespark-auth-bg-muted",
   CARD_BACKGROUND: "--edgespark-auth-card-bg",
@@ -1332,31 +1347,31 @@ const Ue = {
   MODAL_BACKDROP: "--edgespark-auth-modal-backdrop",
   MODAL_CARD_BACKGROUND: "--edgespark-auth-modal-card-bg",
   MODAL_SHADOW: "--edgespark-auth-modal-shadow"
-}, vt = Object.values(
-  bt
+}, It = Object.values(
+  _t
 );
-function yt(t) {
-  return typeof t == "string" && ke.includes(t);
+function Lt(t) {
+  return typeof t == "string" && Ge.includes(t);
 }
-function Et(t) {
-  return vt.includes(t);
+function At(t) {
+  return It.includes(t);
 }
-function St(t) {
+function Tt(t) {
   var e;
   return {
-    theme: (t == null ? void 0 : t.theme) ?? gt,
+    theme: (t == null ? void 0 : t.theme) ?? Pt,
     className: ((e = t == null ? void 0 : t.className) == null ? void 0 : e.trim()) ?? "",
     variables: { ...(t == null ? void 0 : t.variables) ?? {} }
   };
 }
-function G(t, e = "Authentication failed.") {
-  return Se(t, e);
+function Q(t, e = "Authentication failed.") {
+  return de(t, e);
 }
-async function B(t) {
+async function V(t) {
   var s, i;
   const e = await t.getSession();
   if (e.error)
-    throw new E(
+    throw new L(
       e.error.message || "Failed to load the current session.",
       {
         code: e.error.code ?? "SESSION_LOOKUP_FAILED",
@@ -1372,13 +1387,13 @@ async function B(t) {
     session: null
   };
 }
-const Pt = "data-edgespark-auth", Lt = "data-edgespark-auth-theme", r = "edgespark-auth", K = "es_auth_completion", M = "es_auth_email", W = "oauth", k = "verify-sign-in", L = "verify-sign-up", ve = 200, Y = 2, _t = {
+const Ct = "data-edgespark-auth", Rt = "data-edgespark-auth-theme", r = "edgespark-auth", ee = "es_auth_completion", F = "es_auth_email", te = "oauth", N = "verify-sign-in", R = "verify-sign-up", Le = 200, se = 2, Ut = {
   "&": "&amp;",
   "<": "&lt;",
   ">": "&gt;",
   '"': "&quot;",
   "'": "&#39;"
-}, J = {
+}, ie = {
   google: "Google",
   apple: "Apple",
   microsoft: "Microsoft",
@@ -1386,27 +1401,27 @@ const Pt = "data-edgespark-auth", Lt = "data-edgespark-auth-theme", r = "edgespa
   gitlab: "GitLab",
   discord: "Discord"
 };
-function _(t) {
+function U(t) {
   return "redirectTo" in t;
 }
-function X(t) {
+function ne(t) {
   return "onSuccess" in t && !("redirectTo" in t);
 }
-function Z(t) {
+function G(t) {
   return !t || typeof t != "string" ? !1 : /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(t.trim());
 }
-function At(t) {
+function Ae(t) {
   return /^\d{6}$/.test(t.trim());
 }
-function Rt(t) {
+function $t(t) {
   return t === "email" || t === "name" || t === "password" || t === "confirmPassword" || t === "code" || t === "newPassword";
 }
-function Tt(t) {
+function kt(t) {
   return !!(t.error || t.errorDescription);
 }
-class It {
-  constructor(e, s, i, n, a) {
-    this.container = e, this.auth = s, this.options = i, this.loadConfig = n, this.runtimeOptions = a, this.state = {
+class Ot {
+  constructor(e, s, i, n, o) {
+    this.container = e, this.auth = s, this.options = i, this.loadConfig = n, this.runtimeOptions = o, this.state = {
       view: "loading",
       busy: !0,
       busyLabel: void 0,
@@ -1417,16 +1432,18 @@ class It {
       password: "",
       confirmPassword: "",
       code: "",
-      newPassword: ""
+      newPassword: "",
+      signInMethod: "password",
+      signInOtpSent: !1
     }, this.destroyed = !1, this.terminalActionInProgress = !1, this.config = null, this.countdownUntil = null, this.countdownTimer = null, this.pendingFocusSnapshot = null, this.focusRestoreTimer = null, this.verificationCompletionAction = null;
-    const u = St(i.appearance);
-    this.labels = ft(wt(), i.labels), this.root = document.createElement("div"), this.root.className = u.className ? `${r} ${u.className}` : r, this.root.setAttribute(Pt, ""), this.root.setAttribute(Lt, u.theme);
-    for (const [g, S] of Object.entries(u.variables))
-      S !== void 0 && this.root.style.setProperty(g, S);
-    e.innerHTML = "", e.appendChild(this.root), this.render(), this.initialize();
+    const c = Tt(i.appearance);
+    this.labels = yt(St(), i.labels), this.root = document.createElement("div"), this.root.className = c.className ? `${r} ${c.className}` : r, this.root.setAttribute(Ct, ""), this.root.setAttribute(Rt, c.theme);
+    for (const [h, p] of Object.entries(c.variables))
+      p !== void 0 && this.root.style.setProperty(h, p);
+    e.appendChild(this.root), this.render(), this.initialize();
   }
   destroy() {
-    this.destroyed || (this.destroyed = !0, this.clearCountdown(), this.clearFocusRestoreTimer(), this.container.innerHTML = "");
+    this.destroyed || (this.destroyed = !0, this.clearCountdown(), this.clearFocusRestoreTimer(), this.root.remove());
   }
   async initialize() {
     const e = this.consumeManagedReturnContext();
@@ -1438,20 +1455,20 @@ class It {
       if (this.destroyed)
         return;
       if (i.status === "rejected") {
-        if (e.marker && !Tt(e) && _(this.options)) {
+        if (e.marker && !kt(e) && U(this.options)) {
           this.redirectAfterManagedReturnLookupFailure();
           return;
         }
       } else {
-        const a = i.value;
-        if (a.user && a.session) {
+        const o = i.value;
+        if (o.user && o.session) {
           switch (e.marker) {
-            case W:
-            case k:
-              await this.completeAuth("sign-in", a);
+            case te:
+            case N:
+              await this.completeAuth("sign-in", o);
               return;
-            case L:
-              await this.completeAuth("sign-up", a);
+            case R:
+              await this.completeAuth("sign-up", o);
               return;
             default:
               break;
@@ -1462,7 +1479,7 @@ class It {
       }
       if (s.status === "rejected")
         throw i.status === "rejected" ? i.reason : s.reason;
-      if (this.config = s.value, this.handleSessionlessManagedReturn(e))
+      if (this.config = s.value, this.state.signInMethod = this.resolveInitialSignInMethod(), this.handleSessionlessManagedReturn(e))
         return;
       if (i.status === "rejected")
         throw i.reason;
@@ -1473,24 +1490,24 @@ class It {
     }
   }
   redirectAfterManagedReturnLookupFailure() {
-    _(this.options) && this.navigateToRedirect();
+    U(this.options) && this.navigateToRedirect();
   }
   navigateToRedirect() {
-    _(this.options) && (this.terminalActionInProgress = !0, this.state.busy = !0, this.state.busyLabel = this.labels.common.redirecting, this.state.error = null, this.state.notice = null, this.render(), window.location.assign(mt(this.options.redirectTo).toString()));
+    U(this.options) && (this.terminalActionInProgress = !0, this.state.busy = !0, this.state.busyLabel = this.labels.common.redirecting, this.state.error = null, this.state.notice = null, this.render(), window.location.assign(vt(this.options.redirectTo).toString()));
   }
   async readMountSession(e) {
     if (!e.marker)
-      return B(this.auth);
+      return V(this.auth);
     let s = null;
-    for (let i = 0; i <= Y; i++) {
+    for (let i = 0; i <= se; i++) {
       try {
-        const n = await B(this.auth);
+        const n = await V(this.auth);
         if (n.user && n.session)
           return n;
       } catch (n) {
         s = n;
       }
-      i < Y && await new Promise((n) => setTimeout(n, ve));
+      i < se && await new Promise((n) => setTimeout(n, Le));
     }
     if (s)
       throw s;
@@ -1559,8 +1576,11 @@ class It {
     }
   }
   renderSignInView() {
-    var i, n;
-    const e = this.renderOAuthProviders(), s = ((i = this.config) == null ? void 0 : i.emailPasswordEnabled) ?? !0;
+    var w, g, S, l;
+    const e = this.renderOAuthProviders(), s = !!((w = this.config) != null && w.emailPasswordEnabled), i = !!((g = this.config) != null && g.emailOtpSignInEnabled), n = s || i, o = s && i, c = i && !s ? "otp" : this.state.signInMethod, h = c === "otp", p = h ? this.state.signInOtpSent ? this.labels.signIn.verifyCodeButton ?? "Verify code" : this.labels.signIn.sendCodeButton ?? "Send code" : this.labels.signIn.submitButton, P = this.countdownText(
+      this.labels.signIn.resendCodeButton ?? "Resend code",
+      this.labels.signIn.resendCountdown ?? "Resend in {seconds}s"
+    );
     return `
       <section class="${r}__section">
         <header class="${r}__header">
@@ -1568,29 +1588,44 @@ class It {
           <p class="${r}__copy">${this.escape(this.labels.signIn.subtitle)}</p>
         </header>
         ${e}
-        ${e && s ? `<div class="${r}__divider"><span>${this.escape(this.labels.oauth.dividerText)}</span></div>` : ""}
-        ${s ? `
+        ${e && n ? `<div class="${r}__divider"><span>${this.escape(this.labels.oauth.dividerText)}</span></div>` : ""}
+        ${n ? `
+          ${o ? `
+            <div class="${r}__tabs" role="tablist" aria-label="Sign-in method">
+              <button class="${r}__tab ${c === "password" ? `${r}__tab--active` : ""}" type="button" data-action="sign-in-method" data-method="password" ${this.state.busy ? "disabled" : ""}>
+                ${this.escape(this.labels.signIn.passwordTab ?? "Password")}
+              </button>
+              <button class="${r}__tab ${c === "otp" ? `${r}__tab--active` : ""}" type="button" data-action="sign-in-method" data-method="otp" ${this.state.busy ? "disabled" : ""}>
+                ${this.escape(this.labels.signIn.codeTab ?? "Code")}
+              </button>
+            </div>
+          ` : ""}
           <form class="${r}__form" data-view="sign-in" novalidate>
             ${this.renderInput("email", this.labels.signIn.emailLabel, "email", this.state.email, "email")}
-            ${this.renderInput("password", this.labels.signIn.passwordLabel, "password", this.state.password, "current-password")}
+            ${h ? this.state.signInOtpSent ? this.renderInput("code", this.labels.signIn.codeLabel ?? "Code", "text", this.state.code, "one-time-code") : "" : this.renderInput("password", this.labels.signIn.passwordLabel, "password", this.state.password, "current-password")}
             <button class="${r}__button ${r}__button--primary" type="submit" ${this.state.busy ? "disabled" : ""}>
-              ${this.escape(this.labels.signIn.submitButton)}
+              ${this.escape(p)}
             </button>
           </form>
+          ${h && this.state.signInOtpSent ? `
+            <button class="${r}__text-action" type="button" data-action="resend-sign-in-code" ${this.state.busy || this.isCountdownActive() ? "disabled" : ""}>
+              ${this.escape(P)}
+            </button>
+          ` : ""}
           <div class="${r}__actions">
-            ${this.canUsePasswordResetEmailOtp() ? `
+            ${!h && this.canUsePasswordResetEmailOtp() ? `
               <button class="${r}__link" type="button" data-action="forgot-password" ${this.state.busy ? "disabled" : ""}>
                 ${this.escape(this.labels.signIn.forgotPassword)}
               </button>
             ` : ""}
-            ${(n = this.config) != null && n.disableSignUp ? "" : `
+            ${!((S = this.config) != null && S.disableSignUp) && ((l = this.config) != null && l.emailPasswordEnabled) ? `
               <p class="${r}__meta">
                 ${this.escape(this.labels.signIn.signUpPrompt)}
                 <button class="${r}__link" type="button" data-action="switch-sign-up" ${this.state.busy ? "disabled" : ""}>
                   ${this.escape(this.labels.signIn.switchToSignUp)}
                 </button>
               </p>
-            `}
+            ` : ""}
           </div>
         ` : ""}
       </section>
@@ -1704,13 +1739,13 @@ class It {
       <div class="${r}__stack">
         ${e.map((i) => `
             <button class="${r}__button ${r}__button--secondary" type="button" data-action="oauth" data-provider="${i}" ${this.state.busy ? "disabled" : ""}>
-              ${this.escape(`${this.labels.oauth.continueWith} ${J[i]}`)}
+              ${this.escape(`${this.labels.oauth.continueWith} ${ie[i]}`)}
             </button>
           `).join("")}
       </div>
     `;
   }
-  renderInput(e, s, i, n, a) {
+  renderInput(e, s, i, n, o) {
     return `
       <label class="${r}__field">
         <span class="${r}__label">${this.escape(s)}</span>
@@ -1719,7 +1754,7 @@ class It {
           name="${this.escape(e)}"
           type="${this.escape(i)}"
           value="${this.escape(n)}"
-          autocomplete="${this.escape(a)}"
+          autocomplete="${this.escape(o)}"
           ${this.state.busy ? "disabled" : ""}
         />
       </label>
@@ -1727,19 +1762,19 @@ class It {
   }
   bindDOM() {
     this.root.querySelectorAll("form[data-view]").forEach((n) => {
-      n.addEventListener("submit", (a) => {
-        a.preventDefault();
-        const u = n.dataset.view;
-        u === "sign-in" && this.handleSignIn(), u === "sign-up" && this.handleSignUp(), u === "forgot-password" && this.handleForgotPassword(), u === "reset-password" && this.handleResetPassword();
+      n.addEventListener("submit", (o) => {
+        o.preventDefault();
+        const c = n.dataset.view;
+        c === "sign-in" && this.handleSignIn(), c === "sign-up" && this.handleSignUp(), c === "forgot-password" && this.handleForgotPassword(), c === "reset-password" && this.handleResetPassword();
       });
     }), this.root.querySelectorAll("input[name]").forEach((n) => {
       n.addEventListener("input", () => {
-        Rt(n.name) && (this.state[n.name] = n.value);
+        $t(n.name) && (this.state[n.name] = n.value, n.name === "email" && this.state.signInOtpSent && (this.state.signInOtpSent = !1, this.state.code = "", this.clearCountdown()));
       });
     }), this.root.querySelectorAll("[data-action]").forEach((n) => {
       n.addEventListener("click", () => {
-        const a = n.dataset.action;
-        a === "switch-sign-up" && this.switchView("sign-up"), a === "switch-sign-in" && this.switchView("sign-in"), a === "forgot-password" && this.switchView("forgot-password"), a === "resend-verification" && this.resendVerificationEmail(), a === "use-different-email" && this.switchView(this.verificationCompletionAction === "sign-in" ? "sign-in" : "sign-up"), a === "resend-reset-code" && this.resendResetCode(), a === "oauth" && this.handleOAuthSignIn(n.dataset.provider);
+        const o = n.dataset.action;
+        o === "switch-sign-up" && this.switchView("sign-up"), o === "switch-sign-in" && this.switchView("sign-in"), o === "forgot-password" && this.switchView("forgot-password"), o === "resend-verification" && this.resendVerificationEmail(), o === "use-different-email" && this.switchView(this.verificationCompletionAction === "sign-in" ? "sign-in" : "sign-up"), o === "sign-in-method" && this.setSignInMethod(n.dataset.method === "otp" ? "otp" : "password"), o === "resend-sign-in-code" && this.resendSignInCode(), o === "resend-reset-code" && this.resendResetCode(), o === "oauth" && this.handleOAuthSignIn(n.dataset.provider);
       });
     });
   }
@@ -1747,7 +1782,12 @@ class It {
     this.clearCountdown(), e !== "verify-email" && (this.verificationCompletionAction = null), this.state.view = e, this.state.error = null, this.state.notice = null, this.state.busy = !1, this.state.busyLabel = void 0, this.terminalActionInProgress = !1, this.render();
   }
   async handleSignIn() {
-    if (!Z(this.state.email)) {
+    var s, i;
+    if (((s = this.config) != null && s.emailOtpSignInEnabled && !((i = this.config) != null && i.emailPasswordEnabled) ? "otp" : this.state.signInMethod) === "otp") {
+      await this.handleEmailOtpSignIn();
+      return;
+    }
+    if (!G(this.state.email)) {
       this.failValidation(this.labels.errors.invalidEmail);
       return;
     }
@@ -1756,23 +1796,73 @@ class It {
       return;
     }
     await this.runAction("Signing in…", async () => {
-      const e = await this.auth.signIn.email({
+      const n = await this.auth.signIn.email({
         email: this.state.email.trim(),
         password: this.state.password,
-        callbackURL: this.getManagedReturnURL(k, this.state.email.trim())
+        callbackURL: this.getManagedReturnURL(N, this.state.email.trim())
+      });
+      if (n.error)
+        throw n.error;
+      await this.completeAuth("sign-in");
+    });
+  }
+  async handleEmailOtpSignIn() {
+    if (!this.canUseEmailOtpSignIn()) {
+      this.handleError(
+        new b("Email OTP sign-in is not enabled for this project.")
+      );
+      return;
+    }
+    if (!G(this.state.email)) {
+      this.failValidation(this.labels.errors.invalidEmail);
+      return;
+    }
+    if (!this.state.signInOtpSent) {
+      await this.sendSignInOtp();
+      return;
+    }
+    if (!Ae(this.state.code)) {
+      this.failValidation(this.labels.errors.invalidCode);
+      return;
+    }
+    await this.runAction("Signing in...", async () => {
+      const e = await this.emailOtpSignInEndpoints().signIn.emailOtp({
+        email: this.state.email.trim(),
+        otp: this.state.code.trim()
       });
       if (e.error)
         throw e.error;
-      await this.completeAuth("sign-in");
+      await this.completeAuth("sign-in", await this.resolveAuthCompletionData(e.data));
     });
   }
+  async sendSignInOtp(e = !1) {
+    await this.runAction("Sending sign-in code...", async () => {
+      var i;
+      const s = await this.emailOtpSignInEndpoints().emailOtp.sendVerificationOtp({
+        email: this.state.email.trim(),
+        type: "sign-in"
+      });
+      if (s.error)
+        throw s.error;
+      if (this.state.signInOtpSent = !0, this.state.code = "", (i = this.config) != null && i.isLocalDev) {
+        this.state.busyLabel = "Dev mode: fetching sign-in code...", this.render();
+        const n = await bt(this.state.email.trim());
+        n ? (this.state.code = n, this.state.notice = `Dev mode: sign-in code auto-filled (${n})`) : this.state.notice = "Dev mode: could not retrieve sign-in code — check server logs";
+      } else
+        this.state.notice = e ? `We sent another sign-in code to ${this.state.email.trim()}.` : `We sent a sign-in code to ${this.state.email.trim()}.`;
+      this.startCountdown();
+    });
+  }
+  async resendSignInCode() {
+    this.isCountdownActive() || await this.sendSignInOtp(!0);
+  }
   async handleSignUp() {
     var e, s;
     if (!this.state.name.trim()) {
       this.failValidation(this.labels.errors.requiredField);
       return;
     }
-    if (!Z(this.state.email)) {
+    if (!G(this.state.email)) {
       this.failValidation(this.labels.errors.invalidEmail);
       return;
     }
@@ -1796,7 +1886,7 @@ class It {
         name: this.state.name.trim(),
         email: this.state.email.trim(),
         password: this.state.password,
-        callbackURL: this.getManagedReturnURL(L, this.state.email.trim())
+        callbackURL: this.getManagedReturnURL(R, this.state.email.trim())
       });
       if (i.error)
         throw i.error;
@@ -1810,7 +1900,7 @@ class It {
     });
   }
   async handleOAuthSignIn(e) {
-    await this.runAction(`Redirecting to ${J[e]}…`, async () => {
+    await this.runAction(`Redirecting to ${ie[e]}…`, async () => {
       const s = await this.auth.signIn.social({
         provider: e,
         callbackURL: this.getManagedReturnURL("oauth"),
@@ -1820,18 +1910,18 @@ class It {
         throw s.error;
       const i = this.extractRedirectURL(s.data);
       if (!i)
-        throw new f(`OAuth sign-in did not return a redirect URL for provider "${e}".`);
-      this.terminalActionInProgress = !0, this.state.busy = !0, this.state.busyLabel = `Opening ${J[e]}…`, this.state.error = null, this.state.notice = null, this.render(), window.location.assign(i);
+        throw new b(`OAuth sign-in did not return a redirect URL for provider "${e}".`);
+      this.terminalActionInProgress = !0, this.state.busy = !0, this.state.busyLabel = `Opening ${ie[e]}…`, this.state.error = null, this.state.notice = null, this.render(), window.location.assign(i);
     });
   }
   async handleForgotPassword() {
     if (!this.canUsePasswordResetEmailOtp()) {
       this.handleError(
-        new f("Password reset via email OTP is not enabled for this project.")
+        new b("Password reset via email OTP is not enabled for this project.")
       );
       return;
     }
-    if (!Z(this.state.email)) {
+    if (!G(this.state.email)) {
       this.failValidation(this.labels.errors.invalidEmail);
       return;
     }
@@ -1844,7 +1934,7 @@ class It {
         throw e.error;
       if (this.state.view = "reset-password", (s = this.config) != null && s.isLocalDev) {
         this.state.busyLabel = "Dev mode: fetching reset code…", this.render();
-        const i = await ht(this.state.email.trim());
+        const i = await wt(this.state.email.trim());
         i ? (this.state.code = i, this.state.notice = `Dev mode: reset code auto-filled (${i})`) : this.state.notice = "Dev mode: could not retrieve reset code — check server logs";
       } else
         this.state.notice = `We sent a reset code to ${this.state.email.trim()}.`;
@@ -1858,11 +1948,11 @@ class It {
     var e, s;
     if (!this.canUsePasswordResetEmailOtp()) {
       this.handleError(
-        new f("Password reset via email OTP is not enabled for this project.")
+        new b("Password reset via email OTP is not enabled for this project.")
       );
       return;
     }
-    if (!At(this.state.code)) {
+    if (!Ae(this.state.code)) {
       this.failValidation(this.labels.errors.invalidCode);
       return;
     }
@@ -1914,7 +2004,7 @@ class It {
   async tryDevAutoVerify(e, s) {
     const i = this.state.email.trim();
     try {
-      return this.state.busyLabel = "Dev mode: auto-verifying email…", this.render(), await ut(i) ? (this.state.notice = "Dev mode: email verification auto-completed", await this.completeAuth(e, await this.resolveAuthCompletionData(s)), !0) : (console.warn("[edgespark] Dev auto-verify returned false — falling through"), !1);
+      return this.state.busyLabel = "Dev mode: auto-verifying email…", this.render(), await pt(i) ? (this.state.notice = "Dev mode: email verification auto-completed", await this.completeAuth(e, await this.resolveAuthCompletionData(s)), !0) : (console.warn("[edgespark] Dev auto-verify returned false — falling through"), !1);
     } catch (n) {
       return console.warn("[edgespark] Dev auto-verify failed:", n), !1;
     }
@@ -1924,7 +2014,7 @@ class It {
       const s = await this.auth.sendVerificationEmail({
         email: this.state.email.trim(),
         callbackURL: this.getManagedReturnURL(
-          this.verificationCompletionAction === "sign-up" ? L : k,
+          this.verificationCompletionAction === "sign-up" ? R : N,
           this.state.email.trim()
         )
       });
@@ -1942,12 +2032,12 @@ class It {
     if (!i.user || !i.session) {
       if (this.destroyed)
         return;
-      if (i.lookupError && _(this.options)) {
+      if (i.lookupError && U(this.options)) {
         this.navigateToRedirect();
         return;
       }
       if (e === "sign-in")
-        throw i.lookupError ?? new Ee(
+        throw i.lookupError ?? new Ue(
           "Managed sign-in completed without an authenticated session."
         );
       this.state.view = "sign-in", this.state.password = "", this.state.confirmPassword = "", this.state.error = null, this.state.busy = !1, this.state.busyLabel = void 0, this.state.notice = "Account created. Sign in to continue.", this.render();
@@ -1959,11 +2049,11 @@ class It {
       session: i.session
     };
     if (await this.syncPublicSessionBestEffort(), !this.destroyed) {
-      if (_(this.options)) {
+      if (U(this.options)) {
         this.invokeRedirectModeSuccessHook(n), this.navigateToRedirect();
         return;
       }
-      if (X(this.options)) {
+      if (ne(this.options)) {
         this.options.onSuccess(n), this.terminalActionInProgress = !0;
         return;
       }
@@ -1973,10 +2063,10 @@ class It {
     if (e.session)
       return e;
     let s = e.lookupError;
-    for (let i = 0; i < Y; i++) {
-      await new Promise((n) => setTimeout(n, ve));
+    for (let i = 0; i < se; i++) {
+      await new Promise((n) => setTimeout(n, Le));
       try {
-        const n = await B(this.auth);
+        const n = await V(this.auth);
         if (n.user && n.session)
           return {
             user: n.user,
@@ -2000,7 +2090,7 @@ class It {
   }
   async resolveAuthCompletionData(e) {
     try {
-      const s = await B(this.auth), i = this.extractUser(e);
+      const s = await V(this.auth), i = this.extractUser(e);
       return {
         user: s.user ?? i,
         session: s.session
@@ -2020,7 +2110,7 @@ class It {
       session: null
     };
     if (await this.syncPublicSessionBestEffort(), !this.destroyed) {
-      if (X(this.options)) {
+      if (ne(this.options)) {
         this.clearCountdown(), this.options.onSuccess(e), this.terminalActionInProgress = !0;
         return;
       }
@@ -2028,12 +2118,12 @@ class It {
     }
   }
   handleExistingSessionOnMount() {
-    if (_(this.options)) {
+    if (U(this.options)) {
       this.navigateToRedirect();
       return;
     }
-    if (X(this.options))
-      throw this.state.view = "sign-in", this.state.busy = !1, this.state.busyLabel = void 0, this.state.notice = null, new f(
+    if (ne(this.options))
+      throw this.state.view = "sign-in", this.state.busy = !1, this.state.busyLabel = void 0, this.state.notice = null, new b(
         "authUI.mount(container, { onSuccess }) cannot run while a session already exists. Check es.auth.getSession() before mounting controlled auth UI."
       );
   }
@@ -2050,28 +2140,28 @@ class It {
     !this.destroyed && !this.terminalActionInProgress && (this.state.busy = !1, this.state.busyLabel = void 0, this.render());
   }
   maybeHandleVerificationRequired(e) {
-    return G(e).code !== "EMAIL_NOT_VERIFIED" ? !1 : (this.verificationCompletionAction = "sign-in", this.state.view = "verify-email", this.state.busy = !1, this.state.busyLabel = void 0, this.state.error = null, this.state.notice = `Verify your email to finish signing in as ${this.state.email.trim()}.`, this.render(), this.sendVerificationEmail(!0), !0);
+    return Q(e).code !== "EMAIL_NOT_VERIFIED" ? !1 : (this.verificationCompletionAction = "sign-in", this.state.view = "verify-email", this.state.busy = !1, this.state.busyLabel = void 0, this.state.error = null, this.state.notice = `Verify your email to finish signing in as ${this.state.email.trim()}.`, this.render(), this.sendVerificationEmail(!0), !0);
   }
   handleVerificationEmailSent(e, s) {
     this.state.notice = s ? `We sent another verification email to ${e}.` : `We sent a verification email to ${e}.`, this.startCountdown();
   }
   invokeRedirectModeSuccessHook(e) {
     var s, i;
-    if (!(!_(this.options) || !this.options.onSuccess))
+    if (!(!U(this.options) || !this.options.onSuccess))
       try {
         this.options.onSuccess(e);
       } catch (n) {
-        const a = G(n, "Post-auth callback failed.");
+        const o = Q(n, "Post-auth callback failed.");
         try {
-          (i = (s = this.options).onError) == null || i.call(s, a);
+          (i = (s = this.options).onError) == null || i.call(s, o);
         } catch {
         }
       }
   }
   handleError(e, s) {
-    var n, a;
-    const i = G(e, s);
-    this.state.busy = !1, this.state.busyLabel = void 0, this.state.error = i.message, this.render(), (a = (n = this.options).onError) == null || a.call(n, i);
+    var n, o;
+    const i = Q(e, s);
+    this.state.busy = !1, this.state.busyLabel = void 0, this.state.error = i.message, this.render(), (o = (n = this.options).onError) == null || o.call(n, i);
   }
   failValidation(e) {
     this.state.error = e, this.state.notice = null, this.render();
@@ -2080,15 +2170,15 @@ class It {
     if (!e)
       return window.location.href;
     const i = new URL(window.location.href);
-    return i.searchParams.set(K, e), s ? i.searchParams.set(M, s) : i.searchParams.delete(M), i.toString();
+    return i.searchParams.set(ee, e), s ? i.searchParams.set(F, s) : i.searchParams.delete(F), i.toString();
   }
   consumeManagedReturnContext() {
-    const e = new URL(window.location.href), s = e.searchParams.get(K), i = s === W || s === k || s === L ? s : null, n = e.searchParams.get(M), a = i ? e.searchParams.get("error") : null, u = i ? e.searchParams.get("error_description") : null;
-    return (i || n) && (e.searchParams.delete(K), e.searchParams.delete(M), i && (e.searchParams.delete("error"), e.searchParams.delete("error_description")), window.history.replaceState(null, "", e.toString())), {
+    const e = new URL(window.location.href), s = e.searchParams.get(ee), i = s === te || s === N || s === R ? s : null, n = e.searchParams.get(F), o = i ? e.searchParams.get("error") : null, c = i ? e.searchParams.get("error_description") : null;
+    return (i || n) && (e.searchParams.delete(ee), e.searchParams.delete(F), i && (e.searchParams.delete("error"), e.searchParams.delete("error_description")), window.history.replaceState(null, "", e.toString())), {
       marker: i,
       email: n,
-      error: a,
-      errorDescription: u
+      error: o,
+      errorDescription: c
     };
   }
   startCountdown(e = 60) {
@@ -2135,6 +2225,20 @@ class It {
   passwordResetEndpoints() {
     return this.auth;
   }
+  emailOtpSignInEndpoints() {
+    return this.auth;
+  }
+  resolveInitialSignInMethod() {
+    var e, s;
+    return (e = this.config) != null && e.emailPasswordEnabled ? "password" : (s = this.config) != null && s.emailOtpSignInEnabled ? "otp" : "password";
+  }
+  setSignInMethod(e) {
+    this.state.signInMethod !== e && (this.state.signInMethod = e, this.state.signInOtpSent = !1, this.state.code = "", this.state.error = null, this.state.notice = null, this.render());
+  }
+  canUseEmailOtpSignIn() {
+    var e;
+    return !!((e = this.config) != null && e.emailOtpSignInEnabled);
+  }
   extractRedirectURL(e) {
     if (!e || typeof e != "object")
       return null;
@@ -2152,10 +2256,10 @@ class It {
     return !!((e = this.config) != null && e.passwordResetEmailOtpEnabled);
   }
   handleSessionlessManagedReturn(e) {
-    return e.email && (this.state.email = e.email), e.marker === L && !e.error ? (this.verificationCompletionAction = null, this.clearCountdown(), this.state.view = "sign-in", this.state.password = "", this.state.confirmPassword = "", this.state.error = null, this.state.busy = !1, this.state.busyLabel = void 0, this.state.notice = "Account created. Sign in to continue.", this.render(), !0) : e.marker === k || e.marker === L ? (this.verificationCompletionAction = e.marker === L ? "sign-up" : "sign-in", this.state.view = "verify-email", this.state.busy = !1, this.state.busyLabel = void 0, this.state.notice = null, e.error || e.errorDescription ? this.handleError(new E(
+    return e.email && (this.state.email = e.email), e.marker === R && !e.error ? (this.verificationCompletionAction = null, this.clearCountdown(), this.state.view = "sign-in", this.state.password = "", this.state.confirmPassword = "", this.state.error = null, this.state.busy = !1, this.state.busyLabel = void 0, this.state.notice = "Account created. Sign in to continue.", this.render(), !0) : e.marker === N || e.marker === R ? (this.verificationCompletionAction = e.marker === R ? "sign-up" : "sign-in", this.state.view = "verify-email", this.state.busy = !1, this.state.busyLabel = void 0, this.state.notice = null, e.error || e.errorDescription ? this.handleError(new L(
       e.errorDescription ?? "Verification failed. Request a new verification email and try again.",
       { code: e.error ?? "VERIFY_EMAIL_ERROR" }
-    )) : this.render(), !0) : e.marker === W && (e.error || e.errorDescription) ? (this.state.view = "sign-in", this.state.busy = !1, this.state.busyLabel = void 0, this.state.notice = null, this.handleError(new E(
+    )) : this.render(), !0) : e.marker === te && (e.error || e.errorDescription) ? (this.state.view = "sign-in", this.state.busy = !1, this.state.busyLabel = void 0, this.state.notice = null, this.handleError(new L(
       e.errorDescription ?? "OAuth sign-in failed.",
       { code: e.error ?? "OAUTH_ERROR" }
     )), !0) : !1;
@@ -2171,139 +2275,367 @@ class It {
     return i <= 0 ? e : s.replace("{seconds}", String(i));
   }
   escape(e) {
-    return e.replace(/[&<>"']/g, (s) => _t[s]);
+    return e.replace(/[&<>"']/g, (s) => Ut[s]);
   }
 }
-function Ct(t) {
+function Bt(t) {
   return "data" in t && t.data ? t.data : t;
 }
-const Ut = [
+const Mt = [
   { id: "google", key: "providerGoogle" },
   { id: "apple", key: "providerApple" },
   { id: "microsoft", key: "providerMicrosoft" },
   { id: "github", key: "providerGithub" },
   { id: "gitlab", key: "providerGitlab" },
   { id: "discord", key: "providerDiscord" }
-], ye = 2, $t = 500;
-async function kt() {
-  const t = `${window.location.origin}${Le}/config`;
+], Te = 2, Dt = 500;
+async function Nt() {
+  const t = `${window.location.origin}${ke}/config`;
   let e;
-  for (let s = 0; s <= ye; s++)
+  for (let s = 0; s <= Te; s++)
     try {
       const i = await fetch(t, { method: "GET", credentials: "include" });
       if (!i.ok)
-        throw new f(`Failed to load auth config: HTTP ${i.status}`);
-      const n = await i.json(), a = Ct(n);
-      return Mt(a, ct());
+        throw new b(`Failed to load auth config: HTTP ${i.status}`);
+      const n = await i.json(), o = Bt(n);
+      return Vt(o, gt());
     } catch (i) {
-      e = i, s < ye && await new Promise((n) => setTimeout(n, $t));
+      e = i, s < Te && await new Promise((n) => setTimeout(n, Dt));
     }
   throw e;
 }
-let O = null;
-async function Bt() {
-  return O || (O = kt().catch((t) => {
-    throw O = null, t;
-  })), O;
-}
-function Mt(t, e = !1) {
-  var i, n, a, u, g, S, U;
-  const s = Ut.filter(({ key: $ }) => {
-    const v = t[$];
-    return typeof v == "object" && v !== null && "enabled" in v && !!v.enabled;
-  }).map(({ id: $ }) => $);
+let H = null;
+async function Ce() {
+  return H || (H = Nt().catch((t) => {
+    throw H = null, t;
+  })), H;
+}
+function Vt(t, e = !1) {
+  var o, c, h, p, P, w, g, S, l;
+  const s = Mt.filter(({ key: _ }) => {
+    const A = t[_];
+    return typeof A == "object" && A !== null && "enabled" in A && !!A.enabled;
+  }).map(({ id: _ }) => _), i = t.providerGoogle, n = i != null && i.enabled && typeof ((o = i.config) == null ? void 0 : o.clientId) == "string" ? i.config.clientId : null;
   return {
     disableSignUp: !!t.disableSignUp,
-    emailPasswordEnabled: !!((i = t.providerEmailPassword) != null && i.enabled),
-    minPasswordLength: ((a = (n = t.providerEmailPassword) == null ? void 0 : n.config) == null ? void 0 : a.minPasswordLength) ?? 8,
-    requireEmailVerification: !!((g = (u = t.providerEmailPassword) == null ? void 0 : u.config) != null && g.requireEmailVerification),
-    passwordResetEmailOtpEnabled: !!((U = (S = t.providerEmailPassword) == null ? void 0 : S.config) != null && U.requirePasswordResetEmailVerification),
+    emailPasswordEnabled: !!((c = t.providerEmailPassword) != null && c.enabled),
+    emailOtpSignInEnabled: !!((h = t.providerEmailOtp) != null && h.enabled),
+    minPasswordLength: ((P = (p = t.providerEmailPassword) == null ? void 0 : p.config) == null ? void 0 : P.minPasswordLength) ?? 8,
+    requireEmailVerification: !!((g = (w = t.providerEmailPassword) == null ? void 0 : w.config) != null && g.requireEmailVerification),
+    passwordResetEmailOtpEnabled: !!((l = (S = t.providerEmailPassword) == null ? void 0 : S.config) != null && l.requirePasswordResetEmailVerification),
     oauthProviders: s,
+    googleClientId: n,
     isLocalDev: e
   };
 }
-const D = /* @__PURE__ */ new WeakMap();
-function Ot(t) {
+const Ft = "https://accounts.google.com/gsi/client", Re = "data-edgespark-gsi";
+let z = null;
+function re() {
+  var t, e;
+  return (e = (t = window.google) == null ? void 0 : t.accounts) == null ? void 0 : e.id;
+}
+function Gt() {
+  if (typeof window > "u")
+    return Promise.reject(new Error("Google Identity Services is unavailable outside the browser."));
+  const t = re();
+  return t ? Promise.resolve(t) : (z || (z = new Promise((e, s) => {
+    const i = document.querySelector(
+      `script[${Re}]`
+    );
+    if (i) {
+      const o = re();
+      if (o) {
+        e(o);
+        return;
+      }
+      i.remove();
+    }
+    const n = document.createElement("script");
+    n.src = Ft, n.async = !0, n.defer = !0, n.setAttribute(Re, ""), n.addEventListener(
+      "load",
+      () => {
+        const o = re();
+        o ? e(o) : (n.remove(), s(new Error("Google Identity Services loaded but did not expose google.accounts.id.")));
+      },
+      { once: !0 }
+    ), n.addEventListener(
+      "error",
+      () => {
+        n.remove(), s(new Error("Failed to load Google Identity Services."));
+      },
+      { once: !0 }
+    ), document.head.appendChild(n);
+  }).catch((e) => {
+    throw z = null, e;
+  })), z);
+}
+function Ht() {
+  return { cancel: () => {
+  } };
+}
+function zt(t) {
+  let e = null;
+  return function(i) {
+    if (typeof window > "u")
+      return console.error(
+        "[edgespark] promptGoogleOneTap() requires a browser environment."
+      ), Ht();
+    if (e)
+      return console.warn(
+        "[edgespark] promptGoogleOneTap() is already in flight; returning the existing handle. Call cancel() on the original before re-prompting."
+      ), e;
+    let n = !1, o = null;
+    const c = () => {
+      n || (n = !0, e === h && (e = null));
+    }, h = {
+      cancel() {
+        if (!n && (c(), o))
+          try {
+            o.cancel();
+          } catch {
+          }
+      }
+    }, p = () => {
+      var g;
+      if (!n) {
+        c();
+        try {
+          (g = i == null ? void 0 : i.onUnavailable) == null || g.call(i);
+        } catch (S) {
+          console.error("[edgespark] onUnavailable threw:", S);
+        }
+      }
+    }, P = (g, S) => {
+      var _;
+      if (n) return;
+      c();
+      const l = de(g, S);
+      try {
+        (_ = i == null ? void 0 : i.onError) == null || _.call(i, l);
+      } catch (A) {
+        console.error("[edgespark] onError threw:", A);
+      }
+    }, w = (g, S) => {
+      var l;
+      if (!n) {
+        c();
+        try {
+          (l = i == null ? void 0 : i.onSuccess) == null || l.call(i, { action: "sign-in", user: g, session: S });
+        } catch (_) {
+          console.error("[edgespark] onSuccess threw:", _);
+        }
+      }
+    };
+    return e = h, (async () => {
+      let g;
+      try {
+        g = await t.loadConfig();
+      } catch (l) {
+        P(l, "Failed to load auth config for Google One Tap.");
+        return;
+      }
+      if (n) return;
+      if (g.isLocalDev) {
+        console.error(
+          "[edgespark] promptGoogleOneTap() is disabled in local dev mode — Google Identity Services cannot run against mock OAuth."
+        ), c();
+        return;
+      }
+      const S = g.googleClientId;
+      if (!S) {
+        console.error(
+          "[edgespark] promptGoogleOneTap() called but Google is not configured. Set `providerGoogle` in `auth-config.yaml` with resolvable credentials."
+        ), c();
+        return;
+      }
+      try {
+        o = await Gt();
+      } catch (l) {
+        console.warn(
+          "[edgespark] Google Identity Services failed to load; treating as unavailable.",
+          l
+        ), p();
+        return;
+      }
+      if (!n) {
+        o.initialize({
+          client_id: S,
+          callback: (l) => {
+            n || typeof (l == null ? void 0 : l.credential) != "string" || l.credential.length === 0 || xt(l.credential, t, {
+              emitSuccess: w,
+              emitError: P,
+              isDone: () => n
+            });
+          },
+          cancel_on_tap_outside: !1,
+          use_fedcm_for_prompt: !0,
+          context: "signin"
+        });
+        try {
+          o.prompt((l) => {
+            var _, A, D, a;
+            if (!n) {
+              if ((_ = l.isDismissedMoment) != null && _.call(l)) {
+                const m = (A = l.getDismissedReason) == null ? void 0 : A.call(l);
+                if (m === "credential_returned" || m === "cancel_called") return;
+                p();
+                return;
+              }
+              ((D = l.isNotDisplayed) != null && D.call(l) || (a = l.isSkippedMoment) != null && a.call(l)) && p();
+            }
+          });
+        } catch (l) {
+          P(l, "Failed to prompt Google One Tap.");
+        }
+      }
+    })(), h;
+  };
+}
+async function xt(t, e, s) {
+  var P;
+  const { emitSuccess: i, emitError: n, isDone: o } = s, c = e.authClient;
+  if (!((P = c.oneTap) != null && P.callback)) {
+    n(
+      new L(
+        "Google One Tap endpoint not registered. Update the EdgeSpark sidecar.",
+        { code: "ONE_TAP_UNAVAILABLE" }
+      ),
+      "Google One Tap endpoint not registered."
+    );
+    return;
+  }
+  try {
+    const w = await c.oneTap.callback({ idToken: t });
+    if (o()) return;
+    if (w.error) {
+      n(
+        new L(
+          w.error.message ?? "Google One Tap sign-in failed.",
+          {
+            code: w.error.code ?? "ONE_TAP_FAILED",
+            status: w.error.status,
+            cause: w.error
+          }
+        ),
+        "Google One Tap sign-in failed."
+      );
+      return;
+    }
+  } catch (w) {
+    if (o()) return;
+    n(w, "Google One Tap sign-in failed.");
+    return;
+  }
+  let h = null, p = null;
+  try {
+    const w = await V(e.authClient);
+    if (o()) return;
+    h = w.user, p = w.session;
+  } catch (w) {
+    if (o()) return;
+    n(w, "Sign-in succeeded but session lookup failed.");
+    return;
+  }
+  if (!h || !p) {
+    n(
+      new L(
+        "Google One Tap completed without an authenticated session.",
+        { code: "ONE_TAP_NO_SESSION" }
+      ),
+      "Google One Tap completed without an authenticated session."
+    );
+    return;
+  }
+  i(h, p);
+}
+const x = /* @__PURE__ */ new WeakMap();
+function jt(t) {
   if (!t)
-    throw new f(
+    throw new b(
       "authUI.mount(container, options) requires either { redirectTo } or { onSuccess }."
     );
   const e = "redirectTo" in t, s = "onSuccess" in t && typeof t.onSuccess == "function";
   if (!e && !s)
-    throw new f(
+    throw new b(
       "authUI.mount(container, options) requires either { redirectTo } or { onSuccess }."
     );
   if ("redirectTo" in t) {
     const i = t.redirectTo;
     if (!(typeof i == "string" || i instanceof URL))
-      throw new f(
+      throw new b(
         "authUI.mount(container, options) expected redirectTo to be a string or URL."
       );
   }
   if ("onSuccess" in t && t.onSuccess !== void 0 && typeof t.onSuccess != "function")
-    throw new f(
+    throw new b(
       "authUI.mount(container, options) expected onSuccess to be a function."
     );
   if ("onError" in t && t.onError !== void 0 && typeof t.onError != "function")
-    throw new f(
+    throw new b(
       "authUI.mount(container, options) expected onError to be a function."
     );
   if ("appearance" in t && t.appearance !== void 0) {
     const i = t.appearance;
     if (!i || typeof i != "object" || Array.isArray(i))
-      throw new f(
+      throw new b(
         "authUI.mount(container, options) expected appearance to be an object."
       );
-    if ("theme" in i && i.theme !== void 0 && !yt(i.theme))
-      throw new f(
-        `authUI.mount(container, options) expected appearance.theme to be one of: ${ke.join(", ")}.`
+    if ("theme" in i && i.theme !== void 0 && !Lt(i.theme))
+      throw new b(
+        `authUI.mount(container, options) expected appearance.theme to be one of: ${Ge.join(", ")}.`
       );
     if ("className" in i && i.className !== void 0 && typeof i.className != "string")
-      throw new f(
+      throw new b(
         "authUI.mount(container, options) expected appearance.className to be a string."
       );
     if ("variables" in i && i.variables !== void 0) {
       if (!i.variables || typeof i.variables != "object" || Array.isArray(i.variables))
-        throw new f(
+        throw new b(
           "authUI.mount(container, options) expected appearance.variables to be an object."
         );
-      for (const [n, a] of Object.entries(i.variables)) {
-        if (!Et(n))
-          throw new f(
+      for (const [n, o] of Object.entries(i.variables)) {
+        if (!At(n))
+          throw new b(
             `authUI.mount(container, options) received unsupported appearance.variables key "${n}".`
           );
-        if (a !== void 0 && typeof a != "string")
-          throw new f(
+        if (o !== void 0 && typeof o != "string")
+          throw new b(
             `authUI.mount(container, options) expected appearance.variables["${n}"] to be a string.`
           );
       }
     }
   }
 }
-function Dt(t) {
+function qt(t) {
   if (!(t instanceof HTMLElement))
-    throw new f("authUI.mount(container, options) requires a real HTMLElement container.");
+    throw new b("authUI.mount(container, options) requires a real HTMLElement container.");
 }
-function Nt(t, e) {
+function Wt(t, e) {
+  const s = zt({
+    authClient: e.publicAuthClient,
+    loadConfig: Ce
+  });
   return {
-    mount(s, i) {
-      var g;
-      Ot(i), Dt(s), (g = D.get(s)) == null || g.destroy();
-      const n = new It(s, t, i, Bt, e), a = n.destroy.bind(n), u = {
+    mount(i, n) {
+      var p;
+      jt(n), qt(i), (p = x.get(i)) == null || p.destroy();
+      const o = new Ot(i, t, n, Ce, e), c = o.destroy.bind(o), h = {
         destroy() {
-          a(), D.get(s) === u && D.delete(s);
+          c(), x.get(i) === h && x.delete(i);
         }
       };
-      return D.set(s, u), u;
-    }
+      return x.set(i, h), h;
+    },
+    promptGoogleOneTap: s
   };
 }
-function Ft() {
-  Pe();
-  const t = lt(), e = dt(), s = Fe(), i = Nt(e, {
+function Yt() {
+  $e();
+  const t = mt(), e = ft(), s = je(), i = Wt(e, {
     syncPublicSession: async () => {
-      await at(t);
-    }
+      await ht(t);
+    },
+    publicAuthClient: t
   });
   return {
     auth: t,
@@ -2312,29 +2644,29 @@ function Ft() {
   };
 }
 export {
-  bt as AUTH_UI_APPEARANCE_VARIABLE,
-  vt as AUTH_UI_APPEARANCE_VARIABLE_NAMES,
-  gt as AUTH_UI_DEFAULT_THEME,
-  Ue as AUTH_UI_THEME,
-  ke as AUTH_UI_THEMES,
-  pt as AUTH_UI_THEME_DARK,
-  $e as AUTH_UI_THEME_LIGHT,
-  E as EdgeSparkAuthError,
-  f as EdgeSparkConfigError,
-  te as EdgeSparkError,
-  Ee as EdgeSparkRuntimeError,
-  pe as ar,
-  Ft as createEdgeSpark,
-  me as de,
-  wt as detectLocale,
-  N as enUS,
-  x as es,
-  he as fr,
-  ge as hi,
-  fe as it,
-  de as ja,
-  ce as ko,
-  ue as ptBR,
-  we as ru,
-  q as zhCN
+  _t as AUTH_UI_APPEARANCE_VARIABLE,
+  It as AUTH_UI_APPEARANCE_VARIABLE_NAMES,
+  Pt as AUTH_UI_DEFAULT_THEME,
+  Ve as AUTH_UI_THEME,
+  Ge as AUTH_UI_THEMES,
+  Et as AUTH_UI_THEME_DARK,
+  Fe as AUTH_UI_THEME_LIGHT,
+  L as EdgeSparkAuthError,
+  b as EdgeSparkConfigError,
+  le as EdgeSparkError,
+  Ue as EdgeSparkRuntimeError,
+  Pe as ar,
+  Yt as createEdgeSpark,
+  ye as de,
+  St as detectLocale,
+  j as enUS,
+  Z as es,
+  ve as fr,
+  _e as hi,
+  Se as it,
+  pe as ja,
+  we as ko,
+  be as ptBR,
+  Ee as ru,
+  X as zhCN
 };