@edgespark/web 0.0.4 → 0.0.6

package/dist/index.es.js

@@ -1,72 +1,72 @@
-import { createAuthClient as Ge } from "better-auth/client";
+import { createAuthClient as He } from "better-auth/client";
 class le extends Error {
-  constructor(e, i) {
-    super(i), this.name = "EdgeSparkError", this.code = e;
+  constructor(e, s) {
+    super(s), this.name = "EdgeSparkError", this.code = e;
   }
 }
-class g extends le {
+class b extends le {
   constructor(e) {
     super("CONFIG_ERROR", e), this.name = "EdgeSparkConfigError";
   }
 }
-class Re extends le {
+class Ue extends le {
   constructor(e) {
     super("RUNTIME_ERROR", e), this.name = "EdgeSparkRuntimeError";
   }
 }
 class L extends le {
-  constructor(e, i) {
-    super((i == null ? void 0 : i.code) ?? "AUTH_ERROR", e), this.name = "EdgeSparkAuthError", this.cause = i == null ? void 0 : i.cause, this.status = i == null ? void 0 : i.status;
+  constructor(e, s) {
+    super((s == null ? void 0 : s.code) ?? "AUTH_ERROR", e), this.name = "EdgeSparkAuthError", this.cause = s == null ? void 0 : s.cause, this.status = s == null ? void 0 : s.status;
   }
 }
-function de(t, e = "Authentication failed.", i) {
+function de(t, e = "Authentication failed.", s) {
   if (t instanceof L)
     return t;
   if (typeof t == "object" && t !== null) {
-    const s = t;
-    return new L(s.message || e, {
-      code: s.code ?? i,
-      status: s.status,
+    const i = t;
+    return new L(i.message || e, {
+      code: i.code ?? s,
+      status: i.status,
       cause: t
     });
   }
-  return typeof t == "string" ? new L(t, { code: i }) : new L(e, { code: i, cause: t });
+  return typeof t == "string" ? new L(t, { code: s }) : new L(e, { code: s, cause: t });
 }
-function Ce() {
+function $e() {
   if (typeof window > "u" || typeof document > "u")
-    throw new Re(
+    throw new Ue(
       "@edgespark/web is browser-only. Create the client from a real browser runtime."
     );
 }
 function oe() {
-  return Ce(), window.location.origin;
+  return $e(), window.location.origin;
 }
-function He(t) {
+function ze(t) {
   return t instanceof URL ? t : typeof t == "string" ? new URL(t, window.location.href) : new URL(t.url, window.location.href);
 }
-function ze(t) {
+function xe(t) {
   if (t.origin !== oe())
-    throw new g(
+    throw new b(
       `Cross-origin requests are not supported by this SDK. Received ${t.origin}, expected ${oe()}.`
     );
 }
-function xe() {
+function je() {
   return {
     async fetch(t, e) {
-      const i = He(t);
-      return ze(i), fetch(t, {
+      const s = ze(t);
+      return xe(s), fetch(t, {
         ...e,
         credentials: "include"
       });
     }
   };
 }
-const Ue = "/api/_es/auth", je = "edgespark-auth-session", $e = "__edgespark_auth_sync__", j = "__edgespark_auth_pending_sign_in__", ke = Symbol("edgespark.notifyAuthTabs"), qe = 10 * 60 * 1e3, Ke = /* @__PURE__ */ new Set([
+const ke = "/api/_es/auth", qe = "edgespark-auth-session", Oe = "__edgespark_auth_sync__", q = "__edgespark_auth_pending_sign_in__", Be = Symbol("edgespark.notifyAuthTabs"), We = 10 * 60 * 1e3, Ke = /* @__PURE__ */ new Set([
   "signOut",
   "revokeSession",
   "revokeSessions",
   "revokeOtherSessions"
-]), We = /* @__PURE__ */ new Map([
+]), Ye = /* @__PURE__ */ new Map([
   [
     "changeEmail",
     "changeEmail() is not currently supported by EdgeSpark platform auth. Use authUI.mount() or other supported client.auth flows instead of wiring raw /api/_es/auth/* routes manually."
@@ -80,7 +80,7 @@ const Ue = "/api/_es/auth", je = "edgespark-auth-session", $e = "__edgespark_aut
     "deleteUserCallback() is not currently supported by EdgeSpark platform auth. Handle account removal through your own app flow until the platform enables this capability."
   ]
 ]);
-class Ye {
+class Je {
   constructor(e) {
     this.value = e;
   }
@@ -88,32 +88,32 @@ class Ye {
     return this.value;
   }
 }
-const ce = globalThis.WeakRef, ue = globalThis.FinalizationRegistry;
-let q, he = !1;
-const M = /* @__PURE__ */ new Map(), K = ue ? new ue((t) => {
+const ue = globalThis.WeakRef, he = globalThis.FinalizationRegistry;
+let W, me = !1;
+const M = /* @__PURE__ */ new Map(), K = he ? new he((t) => {
   M.delete(t);
 }) : null;
-function Be(t) {
-  return Ge({
+function Me(t) {
+  return He({
     baseURL: oe(),
-    basePath: Ue,
+    basePath: ke,
     ...t != null && t.disableDefaultRedirectPlugin ? { disableDefaultFetchPlugins: !0 } : {},
     fetchOptions: {
       credentials: "include"
     }
   });
 }
-function O(t) {
-  var e, i;
-  return (i = (e = t.$store) == null ? void 0 : e.atoms) == null ? void 0 : i.session;
+function B(t) {
+  var e, s;
+  return (s = (e = t.$store) == null ? void 0 : e.atoms) == null ? void 0 : s.session;
 }
-function Je(t) {
+function Xe(t) {
   return JSON.stringify({
     source: t,
     timestamp: Date.now()
   });
 }
-function Xe(t) {
+function Ze(t) {
   if (typeof t != "string")
     return null;
   try {
@@ -123,70 +123,70 @@ function Xe(t) {
     return null;
   }
 }
-function Ze(t) {
+function Qe(t) {
   return t.join(".");
 }
-function Qe(t) {
-  const e = Ze(t), i = We.get(e);
-  return i ? new L(i, {
+function et(t) {
+  const e = Qe(t), s = Ye.get(e);
+  return s ? new L(s, {
     code: "UNSUPPORTED_AUTH_METHOD"
   }) : null;
 }
 async function ae(t) {
   var e;
   try {
-    return await ((e = O(t)) == null ? void 0 : e.get().refetch()), !0;
+    return await ((e = B(t)) == null ? void 0 : e.get().refetch()), !0;
   } catch {
     return !1;
   }
 }
-function Oe() {
-  return q === void 0 && (q = typeof BroadcastChannel < "u" ? new BroadcastChannel(je) : null), q;
+function De() {
+  return W === void 0 && (W = typeof BroadcastChannel < "u" ? new BroadcastChannel(qe) : null), W;
 }
-function me(t) {
-  const e = Xe(t);
+function fe(t) {
+  const e = Ze(t);
   if (e)
-    for (const [i, s] of M) {
-      if (i === e.source)
+    for (const [s, i] of M) {
+      if (s === e.source)
         continue;
-      const n = s.deref();
+      const n = i.deref();
       if (!n) {
-        M.delete(i);
+        M.delete(s);
         continue;
       }
       ae(n);
     }
 }
-function et() {
+function tt() {
   var t;
-  he || (he = !0, (t = Oe()) == null || t.addEventListener("message", (e) => {
-    me(e.data);
+  me || (me = !0, (t = De()) == null || t.addEventListener("message", (e) => {
+    fe(e.data);
   }), typeof window < "u" && window.addEventListener("storage", (e) => {
-    e.key !== $e || e.newValue === null || me(e.newValue);
+    e.key !== Oe || e.newValue === null || fe(e.newValue);
   }));
 }
-function tt(t, e) {
-  ce ? M.set(t, new ce(e)) : (M.clear(), M.set(t, new Ye(e))), K == null || K.register(e, t), et();
+function st(t, e) {
+  ue ? M.set(t, new ue(e)) : (M.clear(), M.set(t, new Je(e))), K == null || K.register(e, t), tt();
 }
 function k(t) {
-  const e = Je(t), i = Oe();
-  let s = !1;
-  if (i)
+  const e = Xe(t), s = De();
+  let i = !1;
+  if (s)
     try {
-      i.postMessage(e), s = !0;
+      s.postMessage(e), i = !0;
     } catch {
     }
-  if (!s)
+  if (!i)
     try {
-      window.localStorage.setItem($e, e);
+      window.localStorage.setItem(Oe, e);
     } catch {
     }
 }
-function W(t) {
+function Y(t) {
   if (!(typeof window > "u"))
     try {
       window.sessionStorage.setItem(
-        j,
+        q,
         JSON.stringify({
           path: t,
           createdAt: Date.now()
@@ -195,315 +195,328 @@ function W(t) {
     } catch {
     }
 }
-function B() {
+function O() {
   if (!(typeof window > "u"))
     try {
-      window.sessionStorage.removeItem(j);
+      window.sessionStorage.removeItem(q);
     } catch {
     }
 }
-function st(t) {
+function it(t) {
   return !!(t != null && t.session && (t != null && t.user));
 }
-function w(t) {
+function v(t) {
   return t instanceof Date ? t.toISOString() : t === null || typeof t == "string" || typeof t == "number" || typeof t == "boolean" ? t : t == null ? null : String(t);
 }
-function it(t) {
+function nt(t) {
   return t ? JSON.stringify({
     session: {
-      createdAt: w(t.session.createdAt),
-      expiresAt: w(t.session.expiresAt),
-      id: w(t.session.id),
-      impersonatedBy: w(t.session.impersonatedBy),
-      ipAddress: w(t.session.ipAddress),
-      token: w(t.session.token),
-      updatedAt: w(t.session.updatedAt),
-      userAgent: w(t.session.userAgent),
-      userId: w(t.session.userId)
+      createdAt: v(t.session.createdAt),
+      expiresAt: v(t.session.expiresAt),
+      id: v(t.session.id),
+      impersonatedBy: v(t.session.impersonatedBy),
+      ipAddress: v(t.session.ipAddress),
+      token: v(t.session.token),
+      updatedAt: v(t.session.updatedAt),
+      userAgent: v(t.session.userAgent),
+      userId: v(t.session.userId)
     },
     user: {
-      banExpires: w(t.user.banExpires),
-      banReason: w(t.user.banReason),
-      banned: w(t.user.banned),
-      createdAt: w(t.user.createdAt),
-      email: w(t.user.email),
-      emailVerified: w(t.user.emailVerified),
-      id: w(t.user.id),
-      image: w(t.user.image),
-      lastLoginAt: w(t.user.lastLoginAt),
-      name: w(t.user.name),
-      role: w(t.user.role),
-      updatedAt: w(t.user.updatedAt)
+      banExpires: v(t.user.banExpires),
+      banReason: v(t.user.banReason),
+      banned: v(t.user.banned),
+      createdAt: v(t.user.createdAt),
+      email: v(t.user.email),
+      emailVerified: v(t.user.emailVerified),
+      id: v(t.user.id),
+      image: v(t.user.image),
+      lastLoginAt: v(t.user.lastLoginAt),
+      name: v(t.user.name),
+      role: v(t.user.role),
+      updatedAt: v(t.user.updatedAt)
     }
   }) : "__null__";
 }
-function Me() {
+function Ne() {
   if (typeof window > "u")
     return null;
   try {
-    const t = window.sessionStorage.getItem(j);
+    const t = window.sessionStorage.getItem(q);
     if (!t)
       return null;
     const e = JSON.parse(t);
-    return !e || typeof e != "object" || typeof e.createdAt != "number" || Date.now() - e.createdAt > qe ? null : { createdAt: e.createdAt };
+    return !e || typeof e != "object" || typeof e.createdAt != "number" || Date.now() - e.createdAt > We ? null : { createdAt: e.createdAt };
   } catch {
     return null;
   }
 }
-function fe() {
-  if (!Me())
+function ge() {
+  if (!Ne())
     return !1;
   try {
-    window.sessionStorage.removeItem(j);
+    window.sessionStorage.removeItem(q);
   } catch {
   }
   return !0;
 }
-function nt() {
-  return Me() !== null;
+function rt() {
+  return Ne() !== null;
 }
-function rt(t) {
+function ot(t) {
   if (!(t && typeof t == "object") || "error" in t && t.error)
     return !1;
   const e = "data" in t ? t.data : t;
   return e && typeof e == "object" ? "token" in e && typeof e.token == "string" && e.token.length > 0 ? !0 : "session" in e && "user" in e && !!e.session && !!e.user : !1;
 }
-function ot(t) {
+function at(t) {
   if (!(t && typeof t == "object") || "error" in t && t.error)
     return !1;
   const e = "data" in t ? t.data : t;
   return e && typeof e == "object" ? "url" in e && typeof e.url == "string" : !1;
 }
-function at(t) {
+function lt(t) {
   if ($(t) || !(t && typeof t == "object"))
     return !1;
   const e = "data" in t ? t.data : t;
   return e && typeof e == "object" ? "user" in e && !!e.user && "token" in e && e.token === null && !("url" in e) : !1;
 }
-function lt(t, e) {
+function dt(t, e) {
   if (t.length !== 1 || t[0] !== "changePassword")
     return !1;
-  const [i] = e;
-  return !!(i && typeof i == "object" && "revokeOtherSessions" in i && i.revokeOtherSessions === !0);
+  const [s] = e;
+  return !!(s && typeof s == "object" && "revokeOtherSessions" in s && s.revokeOtherSessions === !0);
 }
 function $(t) {
   return !!(t && typeof t == "object" && "error" in t && t.error);
 }
-function dt(t) {
+function ct(t) {
   if ($(t) || !(t && typeof t == "object"))
     return !1;
   const e = "data" in t ? t.data : t;
   return e && typeof e == "object" ? "message" in e && e.message === "User deleted" : !1;
 }
-function ct(t) {
+function ut(t) {
   return !!(t && (typeof t == "object" || typeof t == "function") && "then" in t && typeof t.then == "function");
 }
-function Y(t) {
+function J(t) {
   return de(t, "Failed to load the current session.", "SESSION_LOOKUP_FAILED");
 }
-async function ut(t) {
-  var i, s;
+async function ht(t) {
+  var s, i;
   let e = null;
   try {
-    await ((i = O(t)) == null ? void 0 : i.get().refetch());
+    await ((s = B(t)) == null ? void 0 : s.get().refetch());
   } catch (n) {
     e = n;
   } finally {
-    (s = t[ke]) == null || s.call(t);
+    (i = t[Be]) == null || i.call(t);
   }
   if (e)
     throw e;
 }
-function ht() {
-  const t = Be(), e = `${Date.now()}-${Math.random().toString(36).slice(2)}`;
-  tt(e, t);
-  const i = 2, s = 500;
-  let n = null, o = !1, u;
-  const f = (a) => (u = a, a), p = () => {
-    var h;
-    const a = (h = O(t)) == null ? void 0 : h.get();
-    return a != null && a.error && !a.data && u !== void 0 ? u : (a == null ? void 0 : a.data) ?? u ?? null;
-  }, A = () => o ? Promise.resolve(p()) : (n || (n = (async () => {
-    var l, m, T;
-    let a = !1, h = null;
+function mt() {
+  const t = Me(), e = `${Date.now()}-${Math.random().toString(36).slice(2)}`;
+  st(e, t);
+  const s = 2, i = 500;
+  let n = null, o = !1, c;
+  const h = (a) => (c = a, a), p = () => {
+    var m;
+    const a = (m = B(t)) == null ? void 0 : m.get();
+    return a != null && a.error && !a.data && c !== void 0 ? c : (a == null ? void 0 : a.data) ?? c ?? null;
+  }, P = () => o ? Promise.resolve(p()) : (n || (n = (async () => {
+    var d, f, T;
+    let a = !1, m = null;
     try {
-      for (let _ = 0; _ <= i; _++) {
-        let c = null;
+      for (let _ = 0; _ <= s; _++) {
+        let u = null;
         try {
-          c = await t.getSession();
-        } catch (I) {
-          h = I;
+          u = await t.getSession();
+        } catch (C) {
+          m = C;
         }
-        const E = ((l = O(t)) == null ? void 0 : l.get().data) ?? null;
-        if ((m = c == null ? void 0 : c.data) != null && m.session && ((T = c.data) != null && T.user))
-          return o = !0, fe() && k(e), f(c.data);
+        const E = ((d = B(t)) == null ? void 0 : d.get().data) ?? null;
+        if ((f = u == null ? void 0 : u.data) != null && f.session && ((T = u.data) != null && T.user))
+          return o = !0, ge() && k(e), h(u.data);
         if (E != null && E.session && (E != null && E.user))
-          return o = !0, fe() && k(e), f(E);
-        if (c != null && c.error ? h = c.error : c && (a = !0), c && !c.error && nt() && _ < i) {
+          return o = !0, ge() && k(e), h(E);
+        if (u != null && u.error ? m = u.error : u && (a = !0), u && !u.error && rt() && _ < s) {
           await new Promise(
-            (I) => setTimeout(I, s)
+            (C) => setTimeout(C, i)
           );
           continue;
         }
-        if (c && !c.error) {
-          const I = p();
-          return o = !0, f(I);
+        if (u && !u.error) {
+          const C = p();
+          return o = !0, h(C);
         }
-        _ < i && await new Promise(
-          (I) => setTimeout(I, s)
+        _ < s && await new Promise(
+          (C) => setTimeout(C, i)
         );
       }
       if (!a)
         throw n = null, new L("Failed to load the current session.", {
           code: "SESSION_LOOKUP_FAILED",
-          cause: h
+          cause: m
         });
       const y = p();
-      return o = !0, f(y);
+      return o = !0, h(y);
     } catch (y) {
-      throw n = null, Y(y);
+      throw n = null, J(y);
     }
   })()), n);
-  A().catch(() => {
+  P().catch(() => {
   });
-  const v = async () => {
-    var a, h;
+  const w = async () => {
+    var a, m;
     try {
-      const l = await t.getSession();
-      if ((a = l.data) != null && a.session && ((h = l.data) != null && h.user))
-        return l.data;
-      throw l.error ? Y(l.error) : new L("No authenticated session is available.", {
+      const d = await t.getSession();
+      if ((a = d.data) != null && a.session && ((m = d.data) != null && m.user))
+        return d.data;
+      throw d.error ? J(d.error) : new L("No authenticated session is available.", {
         code: "UNAUTHENTICATED"
       });
-    } catch (l) {
-      throw Y(l);
+    } catch (d) {
+      throw J(d);
     }
-  }, b = async () => {
+  }, g = async () => {
     await ae(t), k(e);
-  }, P = async () => {
-    var l;
-    const a = await ae(t), h = ((l = O(t)) == null ? void 0 : l.get().data) ?? null;
-    st(h) ? (B(), k(e)) : a || k(e);
-  }, d = (a) => {
-    let h = !1, l = !1, m;
-    const T = (c) => {
-      const E = it(c);
-      E !== m && (m = E, a(c));
+  }, S = async () => {
+    var d;
+    const a = await ae(t), m = ((d = B(t)) == null ? void 0 : d.get().data) ?? null;
+    it(m) ? (O(), k(e)) : a || k(e);
+  }, l = (a) => {
+    let m = !1, d = !1, f;
+    const T = (u) => {
+      const E = nt(u);
+      E !== f && (f = E, a(u));
     };
-    A().then((c) => {
-      h || (l = !0, T(f(c)));
+    P().then((u) => {
+      m || (d = !0, T(h(u)));
     }).catch(() => {
-      h || (l = !0);
+      m || (d = !0);
     });
-    const y = O(t);
+    const y = B(t);
     if (!y)
       return () => {
-        h = !0;
+        m = !0;
       };
-    const _ = y.subscribe((c) => {
-      if (h || !l || c.error && !c.data)
+    const _ = y.subscribe((u) => {
+      if (m || !d || u.error && !u.data)
         return;
-      const E = c.data ?? null;
-      T(f(E));
+      const E = u.data ?? null;
+      T(h(E));
     });
     return () => {
-      h = !0, _();
+      m = !0, _();
     };
-  }, S = async (a, h, l) => {
-    const m = a[0], T = a.length >= 2 && m === "emailOtp" && a[1] === "verifyEmail", y = a.length >= 2 && m === "emailOtp" && a[1] === "resetPassword", _ = a.length >= 2 && m === "resetPassword" && a[1] === "emailOtp", c = a.length >= 2 && m === "oneTap" && a[1] === "callback";
-    return a.length === 1 && (m === "deleteUser" || m === "deleteUserCallback") ? (B(), dt(l) && await b(), l) : a.length === 1 && m && Ke.has(m) ? (B(), $(l) || await b(), l) : lt(a, h) && !$(l) ? (B(), await b(), l) : (y || _) && !$(l) ? (B(), await b(), l) : a.length === 1 && m === "changeEmail" && !$(l) ? (await b(), l) : ((m === "signIn" || m === "signUp" || T || c) && rt(l) ? (B(), await b()) : (m === "signIn" || m === "signUp") && ot(l) || m === "signUp" && at(l) ? W(a) : m === "verifyEmail" && !$(l) && (W(a), await P()), l);
-  }, R = /* @__PURE__ */ new WeakMap(), D = (a, h) => {
+  }, I = async (a, m, d) => {
+    const f = a[0], T = a.length >= 2 && f === "emailOtp" && a[1] === "verifyEmail", y = a.length >= 2 && f === "emailOtp" && a[1] === "resetPassword", _ = a.length >= 2 && f === "resetPassword" && a[1] === "emailOtp", u = a.length >= 2 && f === "oneTap" && a[1] === "callback";
+    return a.length === 1 && (f === "deleteUser" || f === "deleteUserCallback") ? (O(), ct(d) && await g(), d) : a.length === 1 && f && Ke.has(f) ? (O(), $(d) || await g(), d) : dt(a, m) && !$(d) ? (O(), await g(), d) : (y || _) && !$(d) ? (O(), await g(), d) : a.length === 1 && f === "changeEmail" && !$(d) ? (await g(), d) : ((f === "signIn" || f === "signUp" || T || u) && ot(d) ? (O(), await g()) : (f === "signIn" || f === "signUp") && at(d) || f === "signUp" && lt(d) ? Y(a) : f === "verifyEmail" && !$(d) && (Y(a), await S()), d);
+  }, A = /* @__PURE__ */ new WeakMap(), D = (a, m) => {
     if (!a || typeof a != "object" && typeof a != "function")
       return a;
-    const l = R.get(a);
-    if (l)
-      return l;
-    const m = new Proxy(a, {
+    const d = A.get(a);
+    if (d)
+      return d;
+    const f = new Proxy(a, {
       get(T, y, _) {
-        if (h.length === 0) {
+        if (m.length === 0) {
           if (y === "requireSession")
-            return v;
+            return w;
           if (y === "onSessionChange")
-            return d;
-          if (y === ke)
+            return l;
+          if (y === Be)
             return () => {
               k(e);
             };
         }
-        const c = Reflect.get(T, y, _);
-        return typeof y != "string" ? c : D(c, [...h, y]);
+        const u = Reflect.get(T, y, _);
+        return typeof y != "string" ? u : D(u, [...m, y]);
       },
       apply(T, y, _) {
-        const c = Qe(h);
-        if (c)
-          throw c;
+        const u = et(m);
+        if (u)
+          throw u;
         const E = Reflect.apply(
           T,
           y,
           _
         );
-        return ct(E) ? Promise.resolve(E).then(
-          (I) => S(h, _, I)
+        return ut(E) ? Promise.resolve(E).then(
+          (C) => I(m, _, C)
         ) : E;
       }
     });
-    return R.set(a, m), m;
+    return A.set(a, f), f;
   };
   return D(t, []);
 }
-function mt() {
-  return Be({ disableDefaultRedirectPlugin: !0 });
-}
-const De = "/api/_es/dev";
 function ft() {
+  return Me({ disableDefaultRedirectPlugin: !0 });
+}
+const ce = "/api/_es/dev";
+function gt() {
   if (typeof document > "u") return !1;
   const t = document.querySelector('meta[name="edgespark-local-dev"]');
   return (t == null ? void 0 : t.getAttribute("content")) === "true";
 }
-async function wt(t) {
+async function pt(t) {
   const e = typeof window < "u" ? window.location.origin : "";
   if (!e) return !1;
-  const i = await fetch(
-    `${e}${De}/auto-verify?email=${encodeURIComponent(t)}`,
+  const s = await fetch(
+    `${e}${ce}/auto-verify?email=${encodeURIComponent(t)}`,
     { credentials: "include" }
   );
-  return i.ok ? (await i.json()).verified === !0 : !1;
+  return s.ok ? (await s.json()).verified === !0 : !1;
+}
+async function wt(t) {
+  const e = typeof window < "u" ? window.location.origin : "";
+  if (!e) return null;
+  try {
+    const s = await fetch(
+      `${e}${ce}/pending-otp?email=${encodeURIComponent(t)}`,
+      { credentials: "include" }
+    );
+    return s.ok ? (await s.json()).otp ?? null : null;
+  } catch {
+    return null;
+  }
 }
-async function gt(t) {
+async function bt(t) {
   const e = typeof window < "u" ? window.location.origin : "";
   if (!e) return null;
   try {
-    const i = await fetch(
-      `${e}${De}/pending-otp?email=${encodeURIComponent(t)}`,
+    const s = await fetch(
+      `${e}${ce}/pending-sign-in-otp?email=${encodeURIComponent(t)}`,
       { credentials: "include" }
     );
-    return i.ok ? (await i.json()).otp ?? null : null;
+    return s.ok ? (await s.json()).otp ?? null : null;
   } catch {
     return null;
   }
 }
-function pt(t) {
+function vt(t) {
   const e = (() => {
     if (t instanceof URL)
       return t;
-    const i = t.trim();
-    if (!i)
-      throw new g("redirectTo must not be an empty string.");
+    const s = t.trim();
+    if (!s)
+      throw new b("redirectTo must not be an empty string.");
     try {
-      return new URL(i, window.location.href);
+      return new URL(s, window.location.href);
     } catch {
-      throw new g(
+      throw new b(
         `redirectTo must be a valid relative path or URL. Received: ${JSON.stringify(t)}`
       );
     }
   })();
   if (e.protocol !== "http:" && e.protocol !== "https:")
-    throw new g(
+    throw new b(
       `redirectTo must resolve to an http(s) URL. Received protocol: ${e.protocol}`
     );
   return e;
 }
-function bt(t, e) {
+function yt(t, e) {
   return e ? {
     common: { ...t.common, ...e.common },
     signIn: { ...t.signIn, ...e.signIn },
@@ -515,7 +528,7 @@ function bt(t, e) {
     errors: { ...t.errors, ...e.errors }
   } : t;
 }
-const x = {
+const j = {
   common: {
     loading: "Loading sign-in…",
     redirecting: "Redirecting…",
@@ -527,6 +540,8 @@ const x = {
     emailLabel: "Email",
     passwordLabel: "Password",
     submitButton: "Sign in",
+    resendCodeButton: "Resend code",
+    resendCountdown: "Resend in {seconds}s",
     forgotPassword: "Forgot password?",
     switchToSignUp: "Create an account",
     signUpPrompt: "Don’t have an account?"
@@ -578,7 +593,7 @@ const x = {
     invalidCode: "Enter the 6-digit verification code.",
     generic: "Something went wrong. Please try again."
   }
-}, J = {
+}, X = {
   common: {
     loading: "加载中…",
     redirecting: "跳转中…",
@@ -641,7 +656,7 @@ const x = {
     invalidCode: "请输入 6 位验证码",
     generic: "出现错误，请稍后重试"
   }
-}, we = {
+}, pe = {
   common: {
     loading: "サインインを読み込み中…",
     redirecting: "リダイレクト中…",
@@ -704,7 +719,7 @@ const x = {
     invalidCode: "6桁の認証コードを入力してください",
     generic: "エラーが発生しました。もう一度お試しください"
   }
-}, ge = {
+}, we = {
   common: {
     loading: "로그인 로딩 중…",
     redirecting: "리디렉션 중…",
@@ -767,7 +782,7 @@ const x = {
     invalidCode: "6자리 인증 코드를 입력해 주세요",
     generic: "문제가 발생했습니다. 다시 시도해 주세요"
   }
-}, X = {
+}, Z = {
   common: {
     loading: "Cargando inicio de sesión…",
     redirecting: "Redirigiendo…",
@@ -830,7 +845,7 @@ const x = {
     invalidCode: "Ingresa el código de verificación de 6 dígitos.",
     generic: "Algo salió mal. Por favor, inténtalo de nuevo."
   }
-}, pe = {
+}, be = {
   common: {
     loading: "Carregando login…",
     redirecting: "Redirecionando…",
@@ -893,7 +908,7 @@ const x = {
     invalidCode: "Insira o código de verificação de 6 dígitos.",
     generic: "Algo deu errado. Por favor, tente novamente."
   }
-}, be = {
+}, ve = {
   common: {
     loading: "Chargement de la connexion…",
     redirecting: "Redirection…",
@@ -956,7 +971,7 @@ const x = {
     invalidCode: "Saisissez le code de vérification à 6 chiffres.",
     generic: "Une erreur est survenue. Veuillez réessayer."
   }
-}, ve = {
+}, ye = {
   common: {
     loading: "Anmeldung wird geladen…",
     redirecting: "Weiterleitung…",
@@ -1019,7 +1034,7 @@ const x = {
     invalidCode: "Geben Sie den 6-stelligen Bestätigungscode ein.",
     generic: "Etwas ist schiefgelaufen. Bitte versuchen Sie es erneut."
   }
-}, ye = {
+}, Se = {
   common: {
     loading: "Caricamento accesso…",
     redirecting: "Reindirizzamento…",
@@ -1145,7 +1160,7 @@ const x = {
     invalidCode: "Введите 6-значный код подтверждения.",
     generic: "Произошла ошибка. Пожалуйста, попробуйте снова."
   }
-}, Se = {
+}, Pe = {
   common: {
     loading: "جارٍ تحميل تسجيل الدخول…",
     redirecting: "جارٍ إعادة التوجيه…",
@@ -1208,7 +1223,7 @@ const x = {
     invalidCode: "يرجى إدخال رمز التحقّق المكوّن من 6 أرقام.",
     generic: "حدث خطأ. يرجى المحاولة مرة أخرى."
   }
-}, Pe = {
+}, Ie = {
   common: {
     loading: "सधाइन की जुलातीअ लोड हो रही है…",
     redirecting: "रीडायरेक्ट हो रहا है…",
@@ -1272,47 +1287,47 @@ const x = {
     generic: "कुछ गलत हो गई। कृपया फिर से प्रयास करें।"
   }
 }, _e = {
-  en: x,
-  "en-US": x,
-  zh: J,
-  "zh-CN": J,
-  "zh-TW": J,
-  ja: we,
-  "ja-JP": we,
-  ko: ge,
-  "ko-KR": ge,
-  es: X,
-  "es-ES": X,
-  "es-MX": X,
-  pt: pe,
-  "pt-BR": pe,
-  fr: be,
-  "fr-FR": be,
-  de: ve,
-  "de-DE": ve,
-  it: ye,
-  "it-IT": ye,
+  en: j,
+  "en-US": j,
+  zh: X,
+  "zh-CN": X,
+  "zh-TW": X,
+  ja: pe,
+  "ja-JP": pe,
+  ko: we,
+  "ko-KR": we,
+  es: Z,
+  "es-ES": Z,
+  "es-MX": Z,
+  pt: be,
+  "pt-BR": be,
+  fr: ve,
+  "fr-FR": ve,
+  de: ye,
+  "de-DE": ye,
+  it: Se,
+  "it-IT": Se,
   ru: Ee,
   "ru-RU": Ee,
-  ar: Se,
-  "ar-SA": Se,
-  hi: Pe,
-  "hi-IN": Pe
+  ar: Pe,
+  "ar-SA": Pe,
+  hi: Ie,
+  "hi-IN": Ie
 };
-function vt() {
+function St() {
   if (typeof navigator > "u")
-    return x;
+    return j;
   const t = navigator.languages ?? [navigator.language];
   for (const e of t) {
-    const i = _e[e] ?? _e[e.split("-")[0]];
-    if (i) return i;
+    const s = _e[e] ?? _e[e.split("-")[0]];
+    if (s) return s;
   }
-  return x;
+  return j;
 }
-const Ne = {
+const Ve = {
   LIGHT: "light",
   DARK: "dark"
-}, Ve = Ne.LIGHT, yt = Ne.DARK, Fe = [Ve, yt], Et = Ve, St = {
+}, Fe = Ve.LIGHT, Et = Ve.DARK, Ge = [Fe, Et], Pt = Fe, It = {
   BACKGROUND: "--edgespark-auth-bg",
   BACKGROUND_MUTED: "--edgespark-auth-bg-muted",
   CARD_BACKGROUND: "--edgespark-auth-card-bg",
@@ -1332,28 +1347,28 @@ const Ne = {
   MODAL_BACKDROP: "--edgespark-auth-modal-backdrop",
   MODAL_CARD_BACKGROUND: "--edgespark-auth-modal-card-bg",
   MODAL_SHADOW: "--edgespark-auth-modal-shadow"
-}, Pt = Object.values(
-  St
+}, _t = Object.values(
+  It
 );
-function _t(t) {
-  return typeof t == "string" && Fe.includes(t);
-}
 function Lt(t) {
-  return Pt.includes(t);
+  return typeof t == "string" && Ge.includes(t);
 }
 function At(t) {
+  return _t.includes(t);
+}
+function Tt(t) {
   var e;
   return {
-    theme: (t == null ? void 0 : t.theme) ?? Et,
+    theme: (t == null ? void 0 : t.theme) ?? Pt,
     className: ((e = t == null ? void 0 : t.className) == null ? void 0 : e.trim()) ?? "",
     variables: { ...(t == null ? void 0 : t.variables) ?? {} }
   };
 }
-function Z(t, e = "Authentication failed.") {
+function Q(t, e = "Authentication failed.") {
   return de(t, e);
 }
 async function V(t) {
-  var i, s;
+  var s, i;
   const e = await t.getSession();
   if (e.error)
     throw new L(
@@ -1364,7 +1379,7 @@ async function V(t) {
         cause: e.error
       }
     );
-  return (i = e.data) != null && i.user && ((s = e.data) != null && s.session) ? {
+  return (s = e.data) != null && s.user && ((i = e.data) != null && i.session) ? {
     user: e.data.user,
     session: e.data
   } : {
@@ -1372,13 +1387,13 @@ async function V(t) {
     session: null
   };
 }
-const Tt = "data-edgespark-auth", It = "data-edgespark-auth-theme", r = "edgespark-auth", Q = "es_auth_completion", F = "es_auth_email", ee = "oauth", N = "verify-sign-in", C = "verify-sign-up", Le = 200, te = 2, Rt = {
+const Ct = "data-edgespark-auth", Rt = "data-edgespark-auth-theme", r = "edgespark-auth", ee = "es_auth_completion", F = "es_auth_email", te = "oauth", N = "verify-sign-in", R = "verify-sign-up", Le = 200, se = 2, Ut = {
   "&": "&amp;",
   "<": "&lt;",
   ">": "&gt;",
   '"': "&quot;",
   "'": "&#39;"
-}, se = {
+}, ie = {
   google: "Google",
   apple: "Apple",
   microsoft: "Microsoft",
@@ -1389,24 +1404,24 @@ const Tt = "data-edgespark-auth", It = "data-edgespark-auth-theme", r = "edgespa
 function U(t) {
   return "redirectTo" in t;
 }
-function ie(t) {
+function ne(t) {
   return "onSuccess" in t && !("redirectTo" in t);
 }
-function ne(t) {
+function G(t) {
   return !t || typeof t != "string" ? !1 : /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(t.trim());
 }
-function Ct(t) {
+function Ae(t) {
   return /^\d{6}$/.test(t.trim());
 }
-function Ut(t) {
+function $t(t) {
   return t === "email" || t === "name" || t === "password" || t === "confirmPassword" || t === "code" || t === "newPassword";
 }
-function $t(t) {
+function kt(t) {
   return !!(t.error || t.errorDescription);
 }
-class kt {
-  constructor(e, i, s, n, o) {
-    this.container = e, this.auth = i, this.options = s, this.loadConfig = n, this.runtimeOptions = o, this.state = {
+class Ot {
+  constructor(e, s, i, n, o) {
+    this.container = e, this.auth = s, this.options = i, this.loadConfig = n, this.runtimeOptions = o, this.state = {
       view: "loading",
       busy: !0,
       busyLabel: void 0,
@@ -1417,12 +1432,14 @@ class kt {
       password: "",
       confirmPassword: "",
       code: "",
-      newPassword: ""
+      newPassword: "",
+      signInMethod: "password",
+      signInOtpSent: !1
     }, this.destroyed = !1, this.terminalActionInProgress = !1, this.config = null, this.countdownUntil = null, this.countdownTimer = null, this.pendingFocusSnapshot = null, this.focusRestoreTimer = null, this.verificationCompletionAction = null;
-    const u = At(s.appearance);
-    this.labels = bt(vt(), s.labels), this.root = document.createElement("div"), this.root.className = u.className ? `${r} ${u.className}` : r, this.root.setAttribute(Tt, ""), this.root.setAttribute(It, u.theme);
-    for (const [f, p] of Object.entries(u.variables))
-      p !== void 0 && this.root.style.setProperty(f, p);
+    const c = Tt(i.appearance);
+    this.labels = yt(St(), i.labels), this.root = document.createElement("div"), this.root.className = c.className ? `${r} ${c.className}` : r, this.root.setAttribute(Ct, ""), this.root.setAttribute(Rt, c.theme);
+    for (const [h, p] of Object.entries(c.variables))
+      p !== void 0 && this.root.style.setProperty(h, p);
     e.appendChild(this.root), this.render(), this.initialize();
   }
   destroy() {
@@ -1431,26 +1448,26 @@ class kt {
   async initialize() {
     const e = this.consumeManagedReturnContext();
     try {
-      const [i, s] = await Promise.allSettled([
+      const [s, i] = await Promise.allSettled([
         this.loadConfig(),
         this.readMountSession(e)
       ]);
       if (this.destroyed)
         return;
-      if (s.status === "rejected") {
-        if (e.marker && !$t(e) && U(this.options)) {
+      if (i.status === "rejected") {
+        if (e.marker && !kt(e) && U(this.options)) {
           this.redirectAfterManagedReturnLookupFailure();
           return;
         }
       } else {
-        const o = s.value;
+        const o = i.value;
         if (o.user && o.session) {
           switch (e.marker) {
-            case ee:
+            case te:
             case N:
               await this.completeAuth("sign-in", o);
               return;
-            case C:
+            case R:
               await this.completeAuth("sign-up", o);
               return;
             default:
@@ -1460,40 +1477,40 @@ class kt {
           return;
         }
       }
-      if (i.status === "rejected")
-        throw s.status === "rejected" ? s.reason : i.reason;
-      if (this.config = i.value, this.handleSessionlessManagedReturn(e))
-        return;
       if (s.status === "rejected")
-        throw s.reason;
-      const n = s.value;
+        throw i.status === "rejected" ? i.reason : s.reason;
+      if (this.config = s.value, this.state.signInMethod = this.resolveInitialSignInMethod(), this.handleSessionlessManagedReturn(e))
+        return;
+      if (i.status === "rejected")
+        throw i.reason;
+      const n = i.value;
       this.state.view = "sign-in", this.state.busy = !1, this.state.busyLabel = void 0, this.render();
-    } catch (i) {
-      this.handleError(i, "Failed to load the authentication UI.");
+    } catch (s) {
+      this.handleError(s, "Failed to load the authentication UI.");
     }
   }
   redirectAfterManagedReturnLookupFailure() {
     U(this.options) && this.navigateToRedirect();
   }
   navigateToRedirect() {
-    U(this.options) && (this.terminalActionInProgress = !0, this.state.busy = !0, this.state.busyLabel = this.labels.common.redirecting, this.state.error = null, this.state.notice = null, this.render(), window.location.assign(pt(this.options.redirectTo).toString()));
+    U(this.options) && (this.terminalActionInProgress = !0, this.state.busy = !0, this.state.busyLabel = this.labels.common.redirecting, this.state.error = null, this.state.notice = null, this.render(), window.location.assign(vt(this.options.redirectTo).toString()));
   }
   async readMountSession(e) {
     if (!e.marker)
       return V(this.auth);
-    let i = null;
-    for (let s = 0; s <= te; s++) {
+    let s = null;
+    for (let i = 0; i <= se; i++) {
       try {
         const n = await V(this.auth);
         if (n.user && n.session)
           return n;
       } catch (n) {
-        i = n;
+        s = n;
       }
-      s < te && await new Promise((n) => setTimeout(n, Le));
+      i < se && await new Promise((n) => setTimeout(n, Le));
     }
-    if (i)
-      throw i;
+    if (s)
+      throw s;
     return {
       user: null,
       session: null
@@ -1559,8 +1576,11 @@ class kt {
     }
   }
   renderSignInView() {
-    var s, n;
-    const e = this.renderOAuthProviders(), i = ((s = this.config) == null ? void 0 : s.emailPasswordEnabled) ?? !0;
+    var w, g, S, l;
+    const e = this.renderOAuthProviders(), s = !!((w = this.config) != null && w.emailPasswordEnabled), i = !!((g = this.config) != null && g.emailOtpSignInEnabled), n = s || i, o = s && i, c = i && !s ? "otp" : this.state.signInMethod, h = c === "otp", p = h ? this.state.signInOtpSent ? this.labels.signIn.verifyCodeButton ?? "Verify code" : this.labels.signIn.sendCodeButton ?? "Send code" : this.labels.signIn.submitButton, P = this.countdownText(
+      this.labels.signIn.resendCodeButton ?? "Resend code",
+      this.labels.signIn.resendCountdown ?? "Resend in {seconds}s"
+    );
     return `
       <section class="${r}__section">
         <header class="${r}__header">
@@ -1568,29 +1588,44 @@ class kt {
           <p class="${r}__copy">${this.escape(this.labels.signIn.subtitle)}</p>
         </header>
         ${e}
-        ${e && i ? `<div class="${r}__divider"><span>${this.escape(this.labels.oauth.dividerText)}</span></div>` : ""}
-        ${i ? `
+        ${e && n ? `<div class="${r}__divider"><span>${this.escape(this.labels.oauth.dividerText)}</span></div>` : ""}
+        ${n ? `
+          ${o ? `
+            <div class="${r}__tabs" role="tablist" aria-label="Sign-in method">
+              <button class="${r}__tab ${c === "password" ? `${r}__tab--active` : ""}" type="button" data-action="sign-in-method" data-method="password" ${this.state.busy ? "disabled" : ""}>
+                ${this.escape(this.labels.signIn.passwordTab ?? "Password")}
+              </button>
+              <button class="${r}__tab ${c === "otp" ? `${r}__tab--active` : ""}" type="button" data-action="sign-in-method" data-method="otp" ${this.state.busy ? "disabled" : ""}>
+                ${this.escape(this.labels.signIn.codeTab ?? "Code")}
+              </button>
+            </div>
+          ` : ""}
           <form class="${r}__form" data-view="sign-in" novalidate>
             ${this.renderInput("email", this.labels.signIn.emailLabel, "email", this.state.email, "email")}
-            ${this.renderInput("password", this.labels.signIn.passwordLabel, "password", this.state.password, "current-password")}
+            ${h ? this.state.signInOtpSent ? this.renderInput("code", this.labels.signIn.codeLabel ?? "Code", "text", this.state.code, "one-time-code") : "" : this.renderInput("password", this.labels.signIn.passwordLabel, "password", this.state.password, "current-password")}
             <button class="${r}__button ${r}__button--primary" type="submit" ${this.state.busy ? "disabled" : ""}>
-              ${this.escape(this.labels.signIn.submitButton)}
+              ${this.escape(p)}
             </button>
           </form>
+          ${h && this.state.signInOtpSent ? `
+            <button class="${r}__text-action" type="button" data-action="resend-sign-in-code" ${this.state.busy || this.isCountdownActive() ? "disabled" : ""}>
+              ${this.escape(P)}
+            </button>
+          ` : ""}
           <div class="${r}__actions">
-            ${this.canUsePasswordResetEmailOtp() ? `
+            ${!h && this.canUsePasswordResetEmailOtp() ? `
               <button class="${r}__link" type="button" data-action="forgot-password" ${this.state.busy ? "disabled" : ""}>
                 ${this.escape(this.labels.signIn.forgotPassword)}
               </button>
             ` : ""}
-            ${(n = this.config) != null && n.disableSignUp ? "" : `
+            ${!((S = this.config) != null && S.disableSignUp) && ((l = this.config) != null && l.emailPasswordEnabled) ? `
               <p class="${r}__meta">
                 ${this.escape(this.labels.signIn.signUpPrompt)}
                 <button class="${r}__link" type="button" data-action="switch-sign-up" ${this.state.busy ? "disabled" : ""}>
                   ${this.escape(this.labels.signIn.switchToSignUp)}
                 </button>
               </p>
-            `}
+            ` : ""}
           </div>
         ` : ""}
       </section>
@@ -1698,26 +1733,26 @@ class kt {
     `;
   }
   renderOAuthProviders() {
-    var i;
-    const e = ((i = this.config) == null ? void 0 : i.oauthProviders) ?? [];
+    var s;
+    const e = ((s = this.config) == null ? void 0 : s.oauthProviders) ?? [];
     return e.length === 0 ? "" : `
       <div class="${r}__stack">
-        ${e.map((s) => `
-            <button class="${r}__button ${r}__button--secondary" type="button" data-action="oauth" data-provider="${s}" ${this.state.busy ? "disabled" : ""}>
-              ${this.escape(`${this.labels.oauth.continueWith} ${se[s]}`)}
+        ${e.map((i) => `
+            <button class="${r}__button ${r}__button--secondary" type="button" data-action="oauth" data-provider="${i}" ${this.state.busy ? "disabled" : ""}>
+              ${this.escape(`${this.labels.oauth.continueWith} ${ie[i]}`)}
             </button>
           `).join("")}
       </div>
     `;
   }
-  renderInput(e, i, s, n, o) {
+  renderInput(e, s, i, n, o) {
     return `
       <label class="${r}__field">
-        <span class="${r}__label">${this.escape(i)}</span>
+        <span class="${r}__label">${this.escape(s)}</span>
         <input
           class="${r}__input"
           name="${this.escape(e)}"
-          type="${this.escape(s)}"
+          type="${this.escape(i)}"
           value="${this.escape(n)}"
           autocomplete="${this.escape(o)}"
           ${this.state.busy ? "disabled" : ""}
@@ -1729,17 +1764,17 @@ class kt {
     this.root.querySelectorAll("form[data-view]").forEach((n) => {
       n.addEventListener("submit", (o) => {
         o.preventDefault();
-        const u = n.dataset.view;
-        u === "sign-in" && this.handleSignIn(), u === "sign-up" && this.handleSignUp(), u === "forgot-password" && this.handleForgotPassword(), u === "reset-password" && this.handleResetPassword();
+        const c = n.dataset.view;
+        c === "sign-in" && this.handleSignIn(), c === "sign-up" && this.handleSignUp(), c === "forgot-password" && this.handleForgotPassword(), c === "reset-password" && this.handleResetPassword();
       });
     }), this.root.querySelectorAll("input[name]").forEach((n) => {
       n.addEventListener("input", () => {
-        Ut(n.name) && (this.state[n.name] = n.value);
+        $t(n.name) && (this.state[n.name] = n.value, n.name === "email" && this.state.signInOtpSent && (this.state.signInOtpSent = !1, this.state.code = "", this.clearCountdown()));
       });
     }), this.root.querySelectorAll("[data-action]").forEach((n) => {
       n.addEventListener("click", () => {
         const o = n.dataset.action;
-        o === "switch-sign-up" && this.switchView("sign-up"), o === "switch-sign-in" && this.switchView("sign-in"), o === "forgot-password" && this.switchView("forgot-password"), o === "resend-verification" && this.resendVerificationEmail(), o === "use-different-email" && this.switchView(this.verificationCompletionAction === "sign-in" ? "sign-in" : "sign-up"), o === "resend-reset-code" && this.resendResetCode(), o === "oauth" && this.handleOAuthSignIn(n.dataset.provider);
+        o === "switch-sign-up" && this.switchView("sign-up"), o === "switch-sign-in" && this.switchView("sign-in"), o === "forgot-password" && this.switchView("forgot-password"), o === "resend-verification" && this.resendVerificationEmail(), o === "use-different-email" && this.switchView(this.verificationCompletionAction === "sign-in" ? "sign-in" : "sign-up"), o === "sign-in-method" && this.setSignInMethod(n.dataset.method === "otp" ? "otp" : "password"), o === "resend-sign-in-code" && this.resendSignInCode(), o === "resend-reset-code" && this.resendResetCode(), o === "oauth" && this.handleOAuthSignIn(n.dataset.provider);
       });
     });
   }
@@ -1747,7 +1782,12 @@ class kt {
     this.clearCountdown(), e !== "verify-email" && (this.verificationCompletionAction = null), this.state.view = e, this.state.error = null, this.state.notice = null, this.state.busy = !1, this.state.busyLabel = void 0, this.terminalActionInProgress = !1, this.render();
   }
   async handleSignIn() {
-    if (!ne(this.state.email)) {
+    var s, i;
+    if (((s = this.config) != null && s.emailOtpSignInEnabled && !((i = this.config) != null && i.emailPasswordEnabled) ? "otp" : this.state.signInMethod) === "otp") {
+      await this.handleEmailOtpSignIn();
+      return;
+    }
+    if (!G(this.state.email)) {
       this.failValidation(this.labels.errors.invalidEmail);
       return;
     }
@@ -1756,23 +1796,73 @@ class kt {
       return;
     }
     await this.runAction("Signing in…", async () => {
-      const e = await this.auth.signIn.email({
+      const n = await this.auth.signIn.email({
         email: this.state.email.trim(),
         password: this.state.password,
         callbackURL: this.getManagedReturnURL(N, this.state.email.trim())
       });
+      if (n.error)
+        throw n.error;
+      await this.completeAuth("sign-in");
+    });
+  }
+  async handleEmailOtpSignIn() {
+    if (!this.canUseEmailOtpSignIn()) {
+      this.handleError(
+        new b("Email OTP sign-in is not enabled for this project.")
+      );
+      return;
+    }
+    if (!G(this.state.email)) {
+      this.failValidation(this.labels.errors.invalidEmail);
+      return;
+    }
+    if (!this.state.signInOtpSent) {
+      await this.sendSignInOtp();
+      return;
+    }
+    if (!Ae(this.state.code)) {
+      this.failValidation(this.labels.errors.invalidCode);
+      return;
+    }
+    await this.runAction("Signing in...", async () => {
+      const e = await this.emailOtpSignInEndpoints().signIn.emailOtp({
+        email: this.state.email.trim(),
+        otp: this.state.code.trim()
+      });
       if (e.error)
         throw e.error;
-      await this.completeAuth("sign-in");
+      await this.completeAuth("sign-in", await this.resolveAuthCompletionData(e.data));
     });
   }
+  async sendSignInOtp(e = !1) {
+    await this.runAction("Sending sign-in code...", async () => {
+      var i;
+      const s = await this.emailOtpSignInEndpoints().emailOtp.sendVerificationOtp({
+        email: this.state.email.trim(),
+        type: "sign-in"
+      });
+      if (s.error)
+        throw s.error;
+      if (this.state.signInOtpSent = !0, this.state.code = "", (i = this.config) != null && i.isLocalDev) {
+        this.state.busyLabel = "Dev mode: fetching sign-in code...", this.render();
+        const n = await bt(this.state.email.trim());
+        n ? (this.state.code = n, this.state.notice = `Dev mode: sign-in code auto-filled (${n})`) : this.state.notice = "Dev mode: could not retrieve sign-in code — check server logs";
+      } else
+        this.state.notice = e ? `We sent another sign-in code to ${this.state.email.trim()}.` : `We sent a sign-in code to ${this.state.email.trim()}.`;
+      this.startCountdown();
+    });
+  }
+  async resendSignInCode() {
+    this.isCountdownActive() || await this.sendSignInOtp(!0);
+  }
   async handleSignUp() {
-    var e, i;
+    var e, s;
     if (!this.state.name.trim()) {
       this.failValidation(this.labels.errors.requiredField);
       return;
     }
-    if (!ne(this.state.email)) {
+    if (!G(this.state.email)) {
       this.failValidation(this.labels.errors.invalidEmail);
       return;
     }
@@ -1782,7 +1872,7 @@ class kt {
     }
     if (this.state.password.length < (((e = this.config) == null ? void 0 : e.minPasswordLength) ?? 8)) {
       this.failValidation(
-        this.labels.errors.passwordTooShort.replace("{min}", String(((i = this.config) == null ? void 0 : i.minPasswordLength) ?? 8))
+        this.labels.errors.passwordTooShort.replace("{min}", String(((s = this.config) == null ? void 0 : s.minPasswordLength) ?? 8))
       );
       return;
     }
@@ -1792,60 +1882,60 @@ class kt {
     }
     await this.runAction("Creating account…", async () => {
       var n;
-      const s = await this.auth.signUp.email({
+      const i = await this.auth.signUp.email({
         name: this.state.name.trim(),
         email: this.state.email.trim(),
         password: this.state.password,
-        callbackURL: this.getManagedReturnURL(C, this.state.email.trim())
+        callbackURL: this.getManagedReturnURL(R, this.state.email.trim())
       });
-      if (s.error)
-        throw s.error;
+      if (i.error)
+        throw i.error;
       if ((n = this.config) != null && n.requireEmailVerification) {
-        if (this.config.isLocalDev && await this.tryDevAutoVerify("sign-up", s.data))
+        if (this.config.isLocalDev && await this.tryDevAutoVerify("sign-up", i.data))
           return;
         this.verificationCompletionAction = "sign-up", this.state.view = "verify-email", this.state.notice = this.config.isLocalDev ? "Dev mode: auto-verify didn’t complete. Click resend to retry." : "Check your inbox to verify your email address.", this.startCountdown();
         return;
       }
-      await this.completeAuth("sign-up", await this.resolveAuthCompletionData(s.data));
+      await this.completeAuth("sign-up", await this.resolveAuthCompletionData(i.data));
     });
   }
   async handleOAuthSignIn(e) {
-    await this.runAction(`Redirecting to ${se[e]}…`, async () => {
-      const i = await this.auth.signIn.social({
+    await this.runAction(`Redirecting to ${ie[e]}…`, async () => {
+      const s = await this.auth.signIn.social({
         provider: e,
         callbackURL: this.getManagedReturnURL("oauth"),
         errorCallbackURL: this.getManagedReturnURL("oauth")
       });
-      if (i.error)
-        throw i.error;
-      const s = this.extractRedirectURL(i.data);
-      if (!s)
-        throw new g(`OAuth sign-in did not return a redirect URL for provider "${e}".`);
-      this.terminalActionInProgress = !0, this.state.busy = !0, this.state.busyLabel = `Opening ${se[e]}…`, this.state.error = null, this.state.notice = null, this.render(), window.location.assign(s);
+      if (s.error)
+        throw s.error;
+      const i = this.extractRedirectURL(s.data);
+      if (!i)
+        throw new b(`OAuth sign-in did not return a redirect URL for provider "${e}".`);
+      this.terminalActionInProgress = !0, this.state.busy = !0, this.state.busyLabel = `Opening ${ie[e]}…`, this.state.error = null, this.state.notice = null, this.render(), window.location.assign(i);
     });
   }
   async handleForgotPassword() {
     if (!this.canUsePasswordResetEmailOtp()) {
       this.handleError(
-        new g("Password reset via email OTP is not enabled for this project.")
+        new b("Password reset via email OTP is not enabled for this project.")
       );
       return;
     }
-    if (!ne(this.state.email)) {
+    if (!G(this.state.email)) {
       this.failValidation(this.labels.errors.invalidEmail);
       return;
     }
     await this.runAction("Sending reset code…", async () => {
-      var i;
+      var s;
       const e = await this.passwordResetEndpoints().forgetPassword.emailOtp({
         email: this.state.email.trim()
       });
       if (e.error)
         throw e.error;
-      if (this.state.view = "reset-password", (i = this.config) != null && i.isLocalDev) {
+      if (this.state.view = "reset-password", (s = this.config) != null && s.isLocalDev) {
         this.state.busyLabel = "Dev mode: fetching reset code…", this.render();
-        const s = await gt(this.state.email.trim());
-        s ? (this.state.code = s, this.state.notice = `Dev mode: reset code auto-filled (${s})`) : this.state.notice = "Dev mode: could not retrieve reset code — check server logs";
+        const i = await wt(this.state.email.trim());
+        i ? (this.state.code = i, this.state.notice = `Dev mode: reset code auto-filled (${i})`) : this.state.notice = "Dev mode: could not retrieve reset code — check server logs";
       } else
         this.state.notice = `We sent a reset code to ${this.state.email.trim()}.`;
       this.startCountdown();
@@ -1855,14 +1945,14 @@ class kt {
     this.isCountdownActive() || await this.handleForgotPassword();
   }
   async handleResetPassword() {
-    var e, i;
+    var e, s;
     if (!this.canUsePasswordResetEmailOtp()) {
       this.handleError(
-        new g("Password reset via email OTP is not enabled for this project.")
+        new b("Password reset via email OTP is not enabled for this project.")
       );
       return;
     }
-    if (!Ct(this.state.code)) {
+    if (!Ae(this.state.code)) {
       this.failValidation(this.labels.errors.invalidCode);
       return;
     }
@@ -1872,7 +1962,7 @@ class kt {
     }
     if (this.state.newPassword.length < (((e = this.config) == null ? void 0 : e.minPasswordLength) ?? 8)) {
       this.failValidation(
-        this.labels.errors.passwordTooShort.replace("{min}", String(((i = this.config) == null ? void 0 : i.minPasswordLength) ?? 8))
+        this.labels.errors.passwordTooShort.replace("{min}", String(((s = this.config) == null ? void 0 : s.minPasswordLength) ?? 8))
       );
       return;
     }
@@ -1881,13 +1971,13 @@ class kt {
       return;
     }
     await this.runAction("Updating password…", async () => {
-      const s = await this.passwordResetEndpoints().emailOtp.resetPassword({
+      const i = await this.passwordResetEndpoints().emailOtp.resetPassword({
         email: this.state.email.trim(),
         otp: this.state.code.trim(),
         password: this.state.newPassword
       });
-      if (s.error)
-        throw s.error;
+      if (i.error)
+        throw i.error;
       await this.completePasswordReset();
     });
   }
@@ -1896,8 +1986,8 @@ class kt {
     if ((e = this.config) != null && e.isLocalDev) {
       if (this.isCountdownActive()) return;
       await this.runAction("Dev mode: retrying auto-verify…", async () => {
-        const i = this.verificationCompletionAction ?? "sign-in";
-        if (!await this.tryDevAutoVerify(i))
+        const s = this.verificationCompletionAction ?? "sign-in";
+        if (!await this.tryDevAutoVerify(s))
           throw new Error(
             "Dev auto-verify did not complete. Check the edgespark dev logs and try again."
           );
@@ -1911,43 +2001,43 @@ class kt {
    * auth flow. Returns whether auto-verify completed — callers decide what
    * to do on `false` (sign-up falls through to a retry UI; resend throws).
    */
-  async tryDevAutoVerify(e, i) {
-    const s = this.state.email.trim();
+  async tryDevAutoVerify(e, s) {
+    const i = this.state.email.trim();
     try {
-      return this.state.busyLabel = "Dev mode: auto-verifying email…", this.render(), await wt(s) ? (this.state.notice = "Dev mode: email verification auto-completed", await this.completeAuth(e, await this.resolveAuthCompletionData(i)), !0) : (console.warn("[edgespark] Dev auto-verify returned false — falling through"), !1);
+      return this.state.busyLabel = "Dev mode: auto-verifying email…", this.render(), await pt(i) ? (this.state.notice = "Dev mode: email verification auto-completed", await this.completeAuth(e, await this.resolveAuthCompletionData(s)), !0) : (console.warn("[edgespark] Dev auto-verify returned false — falling through"), !1);
     } catch (n) {
       return console.warn("[edgespark] Dev auto-verify failed:", n), !1;
     }
   }
   async sendVerificationEmail(e) {
     !e && this.isCountdownActive() || await this.runAction("Sending verification email…", async () => {
-      const i = await this.auth.sendVerificationEmail({
+      const s = await this.auth.sendVerificationEmail({
         email: this.state.email.trim(),
         callbackURL: this.getManagedReturnURL(
-          this.verificationCompletionAction === "sign-up" ? C : N,
+          this.verificationCompletionAction === "sign-up" ? R : N,
           this.state.email.trim()
         )
       });
-      if (i.error)
-        throw i.error;
+      if (s.error)
+        throw s.error;
       this.handleVerificationEmailSent(this.state.email.trim(), !0);
     });
   }
-  async completeAuth(e, i) {
-    const s = await this.retryAuthCompletionDataIfNeeded(
-      i ?? await this.resolveAuthCompletionData()
+  async completeAuth(e, s) {
+    const i = await this.retryAuthCompletionDataIfNeeded(
+      s ?? await this.resolveAuthCompletionData()
     );
     if (this.destroyed)
       return;
-    if (!s.user || !s.session) {
+    if (!i.user || !i.session) {
       if (this.destroyed)
         return;
-      if (s.lookupError && U(this.options)) {
+      if (i.lookupError && U(this.options)) {
         this.navigateToRedirect();
         return;
       }
       if (e === "sign-in")
-        throw s.lookupError ?? new Re(
+        throw i.lookupError ?? new Ue(
           "Managed sign-in completed without an authenticated session."
         );
       this.state.view = "sign-in", this.state.password = "", this.state.confirmPassword = "", this.state.error = null, this.state.busy = !1, this.state.busyLabel = void 0, this.state.notice = "Account created. Sign in to continue.", this.render();
@@ -1955,15 +2045,15 @@ class kt {
     }
     const n = {
       action: e,
-      user: s.user,
-      session: s.session
+      user: i.user,
+      session: i.session
     };
     if (await this.syncPublicSessionBestEffort(), !this.destroyed) {
       if (U(this.options)) {
         this.invokeRedirectModeSuccessHook(n), this.navigateToRedirect();
         return;
       }
-      if (ie(this.options)) {
+      if (ne(this.options)) {
         this.options.onSuccess(n), this.terminalActionInProgress = !0;
         return;
       }
@@ -1972,8 +2062,8 @@ class kt {
   async retryAuthCompletionDataIfNeeded(e) {
     if (e.session)
       return e;
-    let i = e.lookupError;
-    for (let s = 0; s < te; s++) {
+    let s = e.lookupError;
+    for (let i = 0; i < se; i++) {
       await new Promise((n) => setTimeout(n, Le));
       try {
         const n = await V(this.auth);
@@ -1983,33 +2073,33 @@ class kt {
             session: n.session
           };
       } catch (n) {
-        i = n;
+        s = n;
       }
     }
     return {
       ...e,
-      lookupError: i ?? e.lookupError
+      lookupError: s ?? e.lookupError
     };
   }
   async syncPublicSessionBestEffort() {
-    var e, i;
+    var e, s;
     try {
-      await ((i = (e = this.runtimeOptions) == null ? void 0 : e.syncPublicSession) == null ? void 0 : i.call(e));
+      await ((s = (e = this.runtimeOptions) == null ? void 0 : e.syncPublicSession) == null ? void 0 : s.call(e));
     } catch {
     }
   }
   async resolveAuthCompletionData(e) {
     try {
-      const i = await V(this.auth), s = this.extractUser(e);
+      const s = await V(this.auth), i = this.extractUser(e);
       return {
-        user: i.user ?? s,
-        session: i.session
+        user: s.user ?? i,
+        session: s.session
       };
-    } catch (i) {
+    } catch (s) {
       return {
         user: this.extractUser(e),
         session: null,
-        lookupError: i
+        lookupError: s
       };
     }
   }
@@ -2020,7 +2110,7 @@ class kt {
       session: null
     };
     if (await this.syncPublicSessionBestEffort(), !this.destroyed) {
-      if (ie(this.options)) {
+      if (ne(this.options)) {
         this.clearCountdown(), this.options.onSuccess(e), this.terminalActionInProgress = !0;
         return;
       }
@@ -2032,74 +2122,99 @@ class kt {
       this.navigateToRedirect();
       return;
     }
-    if (ie(this.options))
-      throw this.state.view = "sign-in", this.state.busy = !1, this.state.busyLabel = void 0, this.state.notice = null, new g(
+    if (ne(this.options))
+      throw this.state.view = "sign-in", this.state.busy = !1, this.state.busyLabel = void 0, this.state.notice = null, new b(
         "authUI.mount(container, { onSuccess }) cannot run while a session already exists. Check es.auth.getSession() before mounting controlled auth UI."
       );
   }
-  async runAction(e, i) {
+  async runAction(e, s) {
     this.state.busy = !0, this.state.busyLabel = e, this.state.error = null, this.state.notice = null, this.render();
     try {
-      await i();
-    } catch (s) {
-      if (this.maybeHandleVerificationRequired(s))
+      await s();
+    } catch (i) {
+      if (this.maybeHandleVerificationRequired(i))
         return;
-      this.handleError(s);
+      this.handleError(i);
       return;
     }
     !this.destroyed && !this.terminalActionInProgress && (this.state.busy = !1, this.state.busyLabel = void 0, this.render());
   }
   maybeHandleVerificationRequired(e) {
-    return Z(e).code !== "EMAIL_NOT_VERIFIED" ? !1 : (this.verificationCompletionAction = "sign-in", this.state.view = "verify-email", this.state.busy = !1, this.state.busyLabel = void 0, this.state.error = null, this.state.notice = `Verify your email to finish signing in as ${this.state.email.trim()}.`, this.render(), this.sendVerificationEmail(!0), !0);
+    return Q(e).code !== "EMAIL_NOT_VERIFIED" ? !1 : (this.verificationCompletionAction = "sign-in", this.state.view = "verify-email", this.state.busy = !1, this.state.busyLabel = void 0, this.state.error = null, this.state.notice = `Verify your email to finish signing in as ${this.state.email.trim()}.`, this.render(), this.sendVerificationEmail(!0), !0);
   }
-  handleVerificationEmailSent(e, i) {
-    this.state.notice = i ? `We sent another verification email to ${e}.` : `We sent a verification email to ${e}.`, this.startCountdown();
+  handleVerificationEmailSent(e, s) {
+    this.state.notice = s ? `We sent another verification email to ${e}.` : `We sent a verification email to ${e}.`, this.startCountdown();
   }
   invokeRedirectModeSuccessHook(e) {
-    var i, s;
+    var s, i;
     if (!(!U(this.options) || !this.options.onSuccess))
       try {
         this.options.onSuccess(e);
       } catch (n) {
-        const o = Z(n, "Post-auth callback failed.");
+        const o = Q(n, "Post-auth callback failed.");
         try {
-          (s = (i = this.options).onError) == null || s.call(i, o);
+          (i = (s = this.options).onError) == null || i.call(s, o);
         } catch {
         }
       }
   }
-  handleError(e, i) {
+  handleError(e, s) {
     var n, o;
-    const s = Z(e, i);
-    this.state.busy = !1, this.state.busyLabel = void 0, this.state.error = s.message, this.render(), (o = (n = this.options).onError) == null || o.call(n, s);
+    const i = Q(e, s);
+    this.state.busy = !1, this.state.busyLabel = void 0, this.state.error = i.message, this.render(), (o = (n = this.options).onError) == null || o.call(n, i);
   }
   failValidation(e) {
     this.state.error = e, this.state.notice = null, this.render();
   }
-  getManagedReturnURL(e, i) {
+  getManagedReturnURL(e, s) {
     if (!e)
       return window.location.href;
-    const s = new URL(window.location.href);
-    return s.searchParams.set(Q, e), i ? s.searchParams.set(F, i) : s.searchParams.delete(F), s.toString();
+    const i = new URL(window.location.href);
+    return i.searchParams.set(ee, e), s ? i.searchParams.set(F, s) : i.searchParams.delete(F), i.toString();
   }
   consumeManagedReturnContext() {
-    const e = new URL(window.location.href), i = e.searchParams.get(Q), s = i === ee || i === N || i === C ? i : null, n = e.searchParams.get(F), o = s ? e.searchParams.get("error") : null, u = s ? e.searchParams.get("error_description") : null;
-    return (s || n) && (e.searchParams.delete(Q), e.searchParams.delete(F), s && (e.searchParams.delete("error"), e.searchParams.delete("error_description")), window.history.replaceState(null, "", e.toString())), {
-      marker: s,
+    const e = new URL(window.location.href), s = e.searchParams.get(ee), i = s === te || s === N || s === R ? s : null, n = e.searchParams.get(F), o = i ? e.searchParams.get("error") : null, c = i ? e.searchParams.get("error_description") : null;
+    return (i || n) && (e.searchParams.delete(ee), e.searchParams.delete(F), i && (e.searchParams.delete("error"), e.searchParams.delete("error_description")), window.history.replaceState(null, "", e.toString())), {
+      marker: i,
       email: n,
       error: o,
-      errorDescription: u
+      errorDescription: c
     };
   }
   startCountdown(e = 60) {
     this.countdownUntil = Date.now() + e * 1e3, this.countdownTimer && window.clearInterval(this.countdownTimer), this.countdownTimer = window.setInterval(() => {
       if (!this.isCountdownActive()) {
-        this.countdownTimer && (window.clearInterval(this.countdownTimer), this.countdownTimer = null), this.render();
+        this.countdownTimer && (window.clearInterval(this.countdownTimer), this.countdownTimer = null), this.updateCountdownControls();
         return;
       }
-      this.render();
+      this.updateCountdownControls();
     }, 1e3);
   }
+  updateCountdownControls() {
+    const e = [
+      {
+        action: "resend-sign-in-code",
+        base: this.labels.signIn.resendCodeButton ?? "Resend code",
+        template: this.labels.signIn.resendCountdown ?? "Resend in {seconds}s"
+      },
+      {
+        action: "resend-verification",
+        base: this.labels.verifyEmail.resendButton,
+        template: this.labels.verifyEmail.resendCountdown
+      },
+      {
+        action: "resend-reset-code",
+        base: this.labels.resetPassword.resendCodeButton,
+        template: this.labels.resetPassword.resendCountdown
+      }
+    ];
+    for (const s of e) {
+      const i = this.root.querySelector(
+        `[data-action="${s.action}"]`
+      );
+      i && (i.textContent = this.countdownText(s.base, s.template), i.disabled = this.state.busy || this.isCountdownActive());
+    }
+  }
   clearCountdown() {
     this.countdownUntil = null, this.countdownTimer && (window.clearInterval(this.countdownTimer), this.countdownTimer = null);
   }
@@ -2116,14 +2231,14 @@ class kt {
     this.pendingFocusSnapshot && (this.clearFocusRestoreTimer(), this.focusRestoreTimer = window.setTimeout(() => {
       if (this.focusRestoreTimer = null, this.destroyed || !this.pendingFocusSnapshot)
         return;
-      const e = this.pendingFocusSnapshot, i = `input[name="${this.escape(e.name)}"][type="${this.escape(e.type)}"]`, s = this.root.querySelector(i);
-      if (!(!s || s.disabled)) {
-        if (s.focus(), e.selectionStart !== null && e.selectionEnd !== null)
+      const e = this.pendingFocusSnapshot, s = `input[name="${this.escape(e.name)}"][type="${this.escape(e.type)}"]`, i = this.root.querySelector(s);
+      if (!(!i || i.disabled)) {
+        if (i.focus(), e.selectionStart !== null && e.selectionEnd !== null)
           try {
-            s.setSelectionRange(e.selectionStart, e.selectionEnd);
+            i.setSelectionRange(e.selectionStart, e.selectionEnd);
           } catch {
-            const n = s.value.length;
-            s.setSelectionRange(n, n);
+            const n = i.value.length;
+            i.setSelectionRange(n, n);
           }
         this.pendingFocusSnapshot = null;
       }
@@ -2135,27 +2250,41 @@ class kt {
   passwordResetEndpoints() {
     return this.auth;
   }
+  emailOtpSignInEndpoints() {
+    return this.auth;
+  }
+  resolveInitialSignInMethod() {
+    var e, s;
+    return (e = this.config) != null && e.emailPasswordEnabled ? "password" : (s = this.config) != null && s.emailOtpSignInEnabled ? "otp" : "password";
+  }
+  setSignInMethod(e) {
+    this.state.signInMethod !== e && (this.state.signInMethod = e, this.state.signInOtpSent = !1, this.state.code = "", this.state.error = null, this.state.notice = null, this.render());
+  }
+  canUseEmailOtpSignIn() {
+    var e;
+    return !!((e = this.config) != null && e.emailOtpSignInEnabled);
+  }
   extractRedirectURL(e) {
     if (!e || typeof e != "object")
       return null;
-    const i = e;
-    return i.redirect && typeof i.url == "string" && i.url.length > 0 ? i.url : null;
+    const s = e;
+    return s.redirect && typeof s.url == "string" && s.url.length > 0 ? s.url : null;
   }
   extractUser(e) {
     if (!e || typeof e != "object")
       return null;
-    const i = e;
-    return i.user && typeof i.user == "object" ? i.user : null;
+    const s = e;
+    return s.user && typeof s.user == "object" ? s.user : null;
   }
   canUsePasswordResetEmailOtp() {
     var e;
     return !!((e = this.config) != null && e.passwordResetEmailOtpEnabled);
   }
   handleSessionlessManagedReturn(e) {
-    return e.email && (this.state.email = e.email), e.marker === C && !e.error ? (this.verificationCompletionAction = null, this.clearCountdown(), this.state.view = "sign-in", this.state.password = "", this.state.confirmPassword = "", this.state.error = null, this.state.busy = !1, this.state.busyLabel = void 0, this.state.notice = "Account created. Sign in to continue.", this.render(), !0) : e.marker === N || e.marker === C ? (this.verificationCompletionAction = e.marker === C ? "sign-up" : "sign-in", this.state.view = "verify-email", this.state.busy = !1, this.state.busyLabel = void 0, this.state.notice = null, e.error || e.errorDescription ? this.handleError(new L(
+    return e.email && (this.state.email = e.email), e.marker === R && !e.error ? (this.verificationCompletionAction = null, this.clearCountdown(), this.state.view = "sign-in", this.state.password = "", this.state.confirmPassword = "", this.state.error = null, this.state.busy = !1, this.state.busyLabel = void 0, this.state.notice = "Account created. Sign in to continue.", this.render(), !0) : e.marker === N || e.marker === R ? (this.verificationCompletionAction = e.marker === R ? "sign-up" : "sign-in", this.state.view = "verify-email", this.state.busy = !1, this.state.busyLabel = void 0, this.state.notice = null, e.error || e.errorDescription ? this.handleError(new L(
       e.errorDescription ?? "Verification failed. Request a new verification email and try again.",
       { code: e.error ?? "VERIFY_EMAIL_ERROR" }
-    )) : this.render(), !0) : e.marker === ee && (e.error || e.errorDescription) ? (this.state.view = "sign-in", this.state.busy = !1, this.state.busyLabel = void 0, this.state.notice = null, this.handleError(new L(
+    )) : this.render(), !0) : e.marker === te && (e.error || e.errorDescription) ? (this.state.view = "sign-in", this.state.busy = !1, this.state.busyLabel = void 0, this.state.notice = null, this.handleError(new L(
       e.errorDescription ?? "OAuth sign-in failed.",
       { code: e.error ?? "OAUTH_ERROR" }
     )), !0) : !1;
@@ -2166,199 +2295,200 @@ class kt {
   getCountdownSecondsRemaining() {
     return this.countdownUntil ? Math.max(0, Math.ceil((this.countdownUntil - Date.now()) / 1e3)) : 0;
   }
-  countdownText(e, i) {
-    const s = this.getCountdownSecondsRemaining();
-    return s <= 0 ? e : i.replace("{seconds}", String(s));
+  countdownText(e, s) {
+    const i = this.getCountdownSecondsRemaining();
+    return i <= 0 ? e : s.replace("{seconds}", String(i));
   }
   escape(e) {
-    return e.replace(/[&<>"']/g, (i) => Rt[i]);
+    return e.replace(/[&<>"']/g, (s) => Ut[s]);
   }
 }
 function Bt(t) {
   return "data" in t && t.data ? t.data : t;
 }
-const Ot = [
+const Mt = [
   { id: "google", key: "providerGoogle" },
   { id: "apple", key: "providerApple" },
   { id: "microsoft", key: "providerMicrosoft" },
   { id: "github", key: "providerGithub" },
   { id: "gitlab", key: "providerGitlab" },
   { id: "discord", key: "providerDiscord" }
-], Ae = 2, Mt = 500;
-async function Dt() {
-  const t = `${window.location.origin}${Ue}/config`;
+], Te = 2, Dt = 500;
+async function Nt() {
+  const t = `${window.location.origin}${ke}/config`;
   let e;
-  for (let i = 0; i <= Ae; i++)
+  for (let s = 0; s <= Te; s++)
     try {
-      const s = await fetch(t, { method: "GET", credentials: "include" });
-      if (!s.ok)
-        throw new g(`Failed to load auth config: HTTP ${s.status}`);
-      const n = await s.json(), o = Bt(n);
-      return Nt(o, ft());
-    } catch (s) {
-      e = s, i < Ae && await new Promise((n) => setTimeout(n, Mt));
+      const i = await fetch(t, { method: "GET", credentials: "include" });
+      if (!i.ok)
+        throw new b(`Failed to load auth config: HTTP ${i.status}`);
+      const n = await i.json(), o = Bt(n);
+      return Vt(o, gt());
+    } catch (i) {
+      e = i, s < Te && await new Promise((n) => setTimeout(n, Dt));
     }
   throw e;
 }
-let G = null;
-async function Te() {
-  return G || (G = Dt().catch((t) => {
-    throw G = null, t;
-  })), G;
-}
-function Nt(t, e = !1) {
-  var o, u, f, p, A, v, b, P;
-  const i = Ot.filter(({ key: d }) => {
-    const S = t[d];
-    return typeof S == "object" && S !== null && "enabled" in S && !!S.enabled;
-  }).map(({ id: d }) => d), s = t.providerGoogle, n = s != null && s.enabled && typeof ((o = s.config) == null ? void 0 : o.clientId) == "string" ? s.config.clientId : null;
+let H = null;
+async function Ce() {
+  return H || (H = Nt().catch((t) => {
+    throw H = null, t;
+  })), H;
+}
+function Vt(t, e = !1) {
+  var o, c, h, p, P, w, g, S, l;
+  const s = Mt.filter(({ key: I }) => {
+    const A = t[I];
+    return typeof A == "object" && A !== null && "enabled" in A && !!A.enabled;
+  }).map(({ id: I }) => I), i = t.providerGoogle, n = i != null && i.enabled && typeof ((o = i.config) == null ? void 0 : o.clientId) == "string" ? i.config.clientId : null;
   return {
     disableSignUp: !!t.disableSignUp,
-    emailPasswordEnabled: !!((u = t.providerEmailPassword) != null && u.enabled),
-    minPasswordLength: ((p = (f = t.providerEmailPassword) == null ? void 0 : f.config) == null ? void 0 : p.minPasswordLength) ?? 8,
-    requireEmailVerification: !!((v = (A = t.providerEmailPassword) == null ? void 0 : A.config) != null && v.requireEmailVerification),
-    passwordResetEmailOtpEnabled: !!((P = (b = t.providerEmailPassword) == null ? void 0 : b.config) != null && P.requirePasswordResetEmailVerification),
-    oauthProviders: i,
+    emailPasswordEnabled: !!((c = t.providerEmailPassword) != null && c.enabled),
+    emailOtpSignInEnabled: !!((h = t.providerEmailOtp) != null && h.enabled),
+    minPasswordLength: ((P = (p = t.providerEmailPassword) == null ? void 0 : p.config) == null ? void 0 : P.minPasswordLength) ?? 8,
+    requireEmailVerification: !!((g = (w = t.providerEmailPassword) == null ? void 0 : w.config) != null && g.requireEmailVerification),
+    passwordResetEmailOtpEnabled: !!((l = (S = t.providerEmailPassword) == null ? void 0 : S.config) != null && l.requirePasswordResetEmailVerification),
+    oauthProviders: s,
     googleClientId: n,
     isLocalDev: e
   };
 }
-const Vt = "https://accounts.google.com/gsi/client", Ie = "data-edgespark-gsi";
-let H = null;
+const Ft = "https://accounts.google.com/gsi/client", Re = "data-edgespark-gsi";
+let z = null;
 function re() {
   var t, e;
   return (e = (t = window.google) == null ? void 0 : t.accounts) == null ? void 0 : e.id;
 }
-function Ft() {
+function Gt() {
   if (typeof window > "u")
     return Promise.reject(new Error("Google Identity Services is unavailable outside the browser."));
   const t = re();
-  return t ? Promise.resolve(t) : (H || (H = new Promise((e, i) => {
-    const s = document.querySelector(
-      `script[${Ie}]`
+  return t ? Promise.resolve(t) : (z || (z = new Promise((e, s) => {
+    const i = document.querySelector(
+      `script[${Re}]`
     );
-    if (s) {
+    if (i) {
       const o = re();
       if (o) {
         e(o);
         return;
       }
-      s.remove();
+      i.remove();
     }
     const n = document.createElement("script");
-    n.src = Vt, n.async = !0, n.defer = !0, n.setAttribute(Ie, ""), n.addEventListener(
+    n.src = Ft, n.async = !0, n.defer = !0, n.setAttribute(Re, ""), n.addEventListener(
       "load",
       () => {
         const o = re();
-        o ? e(o) : (n.remove(), i(new Error("Google Identity Services loaded but did not expose google.accounts.id.")));
+        o ? e(o) : (n.remove(), s(new Error("Google Identity Services loaded but did not expose google.accounts.id.")));
       },
       { once: !0 }
     ), n.addEventListener(
       "error",
       () => {
-        n.remove(), i(new Error("Failed to load Google Identity Services."));
+        n.remove(), s(new Error("Failed to load Google Identity Services."));
       },
       { once: !0 }
     ), document.head.appendChild(n);
   }).catch((e) => {
-    throw H = null, e;
-  })), H);
+    throw z = null, e;
+  })), z);
 }
-function Gt() {
+function Ht() {
   return { cancel: () => {
   } };
 }
-function Ht(t) {
+function zt(t) {
   let e = null;
-  return function(s) {
+  return function(i) {
     if (typeof window > "u")
       return console.error(
         "[edgespark] promptGoogleOneTap() requires a browser environment."
-      ), Gt();
+      ), Ht();
     if (e)
       return console.warn(
         "[edgespark] promptGoogleOneTap() is already in flight; returning the existing handle. Call cancel() on the original before re-prompting."
       ), e;
     let n = !1, o = null;
-    const u = () => {
-      n || (n = !0, e === f && (e = null));
-    }, f = {
+    const c = () => {
+      n || (n = !0, e === h && (e = null));
+    }, h = {
       cancel() {
-        if (!n && (u(), o))
+        if (!n && (c(), o))
           try {
             o.cancel();
           } catch {
           }
       }
     }, p = () => {
-      var b;
+      var g;
       if (!n) {
-        u();
+        c();
         try {
-          (b = s == null ? void 0 : s.onUnavailable) == null || b.call(s);
-        } catch (P) {
-          console.error("[edgespark] onUnavailable threw:", P);
+          (g = i == null ? void 0 : i.onUnavailable) == null || g.call(i);
+        } catch (S) {
+          console.error("[edgespark] onUnavailable threw:", S);
         }
       }
-    }, A = (b, P) => {
-      var S;
+    }, P = (g, S) => {
+      var I;
       if (n) return;
-      u();
-      const d = de(b, P);
+      c();
+      const l = de(g, S);
       try {
-        (S = s == null ? void 0 : s.onError) == null || S.call(s, d);
-      } catch (R) {
-        console.error("[edgespark] onError threw:", R);
+        (I = i == null ? void 0 : i.onError) == null || I.call(i, l);
+      } catch (A) {
+        console.error("[edgespark] onError threw:", A);
       }
-    }, v = (b, P) => {
-      var d;
+    }, w = (g, S) => {
+      var l;
       if (!n) {
-        u();
+        c();
         try {
-          (d = s == null ? void 0 : s.onSuccess) == null || d.call(s, { action: "sign-in", user: b, session: P });
-        } catch (S) {
-          console.error("[edgespark] onSuccess threw:", S);
+          (l = i == null ? void 0 : i.onSuccess) == null || l.call(i, { action: "sign-in", user: g, session: S });
+        } catch (I) {
+          console.error("[edgespark] onSuccess threw:", I);
         }
       }
     };
-    return e = f, (async () => {
-      let b;
+    return e = h, (async () => {
+      let g;
       try {
-        b = await t.loadConfig();
-      } catch (d) {
-        A(d, "Failed to load auth config for Google One Tap.");
+        g = await t.loadConfig();
+      } catch (l) {
+        P(l, "Failed to load auth config for Google One Tap.");
         return;
       }
       if (n) return;
-      if (b.isLocalDev) {
+      if (g.isLocalDev) {
         console.error(
           "[edgespark] promptGoogleOneTap() is disabled in local dev mode — Google Identity Services cannot run against mock OAuth."
-        ), u();
+        ), c();
         return;
       }
-      const P = b.googleClientId;
-      if (!P) {
+      const S = g.googleClientId;
+      if (!S) {
         console.error(
           "[edgespark] promptGoogleOneTap() called but Google is not configured. Set `providerGoogle` in `auth-config.yaml` with resolvable credentials."
-        ), u();
+        ), c();
         return;
       }
       try {
-        o = await Ft();
-      } catch (d) {
+        o = await Gt();
+      } catch (l) {
         console.warn(
           "[edgespark] Google Identity Services failed to load; treating as unavailable.",
-          d
+          l
         ), p();
         return;
       }
       if (!n) {
         o.initialize({
-          client_id: P,
-          callback: (d) => {
-            n || typeof (d == null ? void 0 : d.credential) != "string" || d.credential.length === 0 || zt(d.credential, t, {
-              emitSuccess: v,
-              emitError: A,
+          client_id: S,
+          callback: (l) => {
+            n || typeof (l == null ? void 0 : l.credential) != "string" || l.credential.length === 0 || xt(l.credential, t, {
+              emitSuccess: w,
+              emitError: P,
               isDone: () => n
             });
           },
@@ -2367,29 +2497,29 @@ function Ht(t) {
           context: "signin"
         });
         try {
-          o.prompt((d) => {
-            var S, R, D, a;
+          o.prompt((l) => {
+            var I, A, D, a;
             if (!n) {
-              if ((S = d.isDismissedMoment) != null && S.call(d)) {
-                const h = (R = d.getDismissedReason) == null ? void 0 : R.call(d);
-                if (h === "credential_returned" || h === "cancel_called") return;
+              if ((I = l.isDismissedMoment) != null && I.call(l)) {
+                const m = (A = l.getDismissedReason) == null ? void 0 : A.call(l);
+                if (m === "credential_returned" || m === "cancel_called") return;
                 p();
                 return;
               }
-              ((D = d.isNotDisplayed) != null && D.call(d) || (a = d.isSkippedMoment) != null && a.call(d)) && p();
+              ((D = l.isNotDisplayed) != null && D.call(l) || (a = l.isSkippedMoment) != null && a.call(l)) && p();
             }
           });
-        } catch (d) {
-          A(d, "Failed to prompt Google One Tap.");
+        } catch (l) {
+          P(l, "Failed to prompt Google One Tap.");
         }
       }
-    })(), f;
+    })(), h;
   };
 }
-async function zt(t, e, i) {
-  var A;
-  const { emitSuccess: s, emitError: n, isDone: o } = i, u = e.authClient;
-  if (!((A = u.oneTap) != null && A.callback)) {
+async function xt(t, e, s) {
+  var P;
+  const { emitSuccess: i, emitError: n, isDone: o } = s, c = e.authClient;
+  if (!((P = c.oneTap) != null && P.callback)) {
     n(
       new L(
         "Google One Tap endpoint not registered. Update the EdgeSpark sidecar.",
@@ -2400,38 +2530,38 @@ async function zt(t, e, i) {
     return;
   }
   try {
-    const v = await u.oneTap.callback({ idToken: t });
+    const w = await c.oneTap.callback({ idToken: t });
     if (o()) return;
-    if (v.error) {
+    if (w.error) {
       n(
         new L(
-          v.error.message ?? "Google One Tap sign-in failed.",
+          w.error.message ?? "Google One Tap sign-in failed.",
           {
-            code: v.error.code ?? "ONE_TAP_FAILED",
-            status: v.error.status,
-            cause: v.error
+            code: w.error.code ?? "ONE_TAP_FAILED",
+            status: w.error.status,
+            cause: w.error
           }
         ),
         "Google One Tap sign-in failed."
       );
       return;
     }
-  } catch (v) {
+  } catch (w) {
     if (o()) return;
-    n(v, "Google One Tap sign-in failed.");
+    n(w, "Google One Tap sign-in failed.");
     return;
   }
-  let f = null, p = null;
+  let h = null, p = null;
   try {
-    const v = await V(e.authClient);
+    const w = await V(e.authClient);
     if (o()) return;
-    f = v.user, p = v.session;
-  } catch (v) {
+    h = w.user, p = w.session;
+  } catch (w) {
     if (o()) return;
-    n(v, "Sign-in succeeded but session lookup failed.");
+    n(w, "Sign-in succeeded but session lookup failed.");
     return;
   }
-  if (!f || !p) {
+  if (!h || !p) {
     n(
       new L(
         "Google One Tap completed without an authenticated session.",
@@ -2441,127 +2571,127 @@ async function zt(t, e, i) {
     );
     return;
   }
-  s(f, p);
+  i(h, p);
 }
-const z = /* @__PURE__ */ new WeakMap();
-function xt(t) {
+const x = /* @__PURE__ */ new WeakMap();
+function jt(t) {
   if (!t)
-    throw new g(
+    throw new b(
       "authUI.mount(container, options) requires either { redirectTo } or { onSuccess }."
     );
-  const e = "redirectTo" in t, i = "onSuccess" in t && typeof t.onSuccess == "function";
-  if (!e && !i)
-    throw new g(
+  const e = "redirectTo" in t, s = "onSuccess" in t && typeof t.onSuccess == "function";
+  if (!e && !s)
+    throw new b(
       "authUI.mount(container, options) requires either { redirectTo } or { onSuccess }."
     );
   if ("redirectTo" in t) {
-    const s = t.redirectTo;
-    if (!(typeof s == "string" || s instanceof URL))
-      throw new g(
+    const i = t.redirectTo;
+    if (!(typeof i == "string" || i instanceof URL))
+      throw new b(
         "authUI.mount(container, options) expected redirectTo to be a string or URL."
       );
   }
   if ("onSuccess" in t && t.onSuccess !== void 0 && typeof t.onSuccess != "function")
-    throw new g(
+    throw new b(
       "authUI.mount(container, options) expected onSuccess to be a function."
     );
   if ("onError" in t && t.onError !== void 0 && typeof t.onError != "function")
-    throw new g(
+    throw new b(
       "authUI.mount(container, options) expected onError to be a function."
     );
   if ("appearance" in t && t.appearance !== void 0) {
-    const s = t.appearance;
-    if (!s || typeof s != "object" || Array.isArray(s))
-      throw new g(
+    const i = t.appearance;
+    if (!i || typeof i != "object" || Array.isArray(i))
+      throw new b(
         "authUI.mount(container, options) expected appearance to be an object."
       );
-    if ("theme" in s && s.theme !== void 0 && !_t(s.theme))
-      throw new g(
-        `authUI.mount(container, options) expected appearance.theme to be one of: ${Fe.join(", ")}.`
+    if ("theme" in i && i.theme !== void 0 && !Lt(i.theme))
+      throw new b(
+        `authUI.mount(container, options) expected appearance.theme to be one of: ${Ge.join(", ")}.`
       );
-    if ("className" in s && s.className !== void 0 && typeof s.className != "string")
-      throw new g(
+    if ("className" in i && i.className !== void 0 && typeof i.className != "string")
+      throw new b(
         "authUI.mount(container, options) expected appearance.className to be a string."
       );
-    if ("variables" in s && s.variables !== void 0) {
-      if (!s.variables || typeof s.variables != "object" || Array.isArray(s.variables))
-        throw new g(
+    if ("variables" in i && i.variables !== void 0) {
+      if (!i.variables || typeof i.variables != "object" || Array.isArray(i.variables))
+        throw new b(
           "authUI.mount(container, options) expected appearance.variables to be an object."
         );
-      for (const [n, o] of Object.entries(s.variables)) {
-        if (!Lt(n))
-          throw new g(
+      for (const [n, o] of Object.entries(i.variables)) {
+        if (!At(n))
+          throw new b(
             `authUI.mount(container, options) received unsupported appearance.variables key "${n}".`
           );
         if (o !== void 0 && typeof o != "string")
-          throw new g(
+          throw new b(
             `authUI.mount(container, options) expected appearance.variables["${n}"] to be a string.`
           );
       }
     }
   }
 }
-function jt(t) {
+function qt(t) {
   if (!(t instanceof HTMLElement))
-    throw new g("authUI.mount(container, options) requires a real HTMLElement container.");
+    throw new b("authUI.mount(container, options) requires a real HTMLElement container.");
 }
-function qt(t, e) {
-  const i = Ht({
+function Wt(t, e) {
+  const s = zt({
     authClient: e.publicAuthClient,
-    loadConfig: Te
+    loadConfig: Ce
   });
   return {
-    mount(s, n) {
+    mount(i, n) {
       var p;
-      xt(n), jt(s), (p = z.get(s)) == null || p.destroy();
-      const o = new kt(s, t, n, Te, e), u = o.destroy.bind(o), f = {
+      jt(n), qt(i), (p = x.get(i)) == null || p.destroy();
+      const o = new Ot(i, t, n, Ce, e), c = o.destroy.bind(o), h = {
         destroy() {
-          u(), z.get(s) === f && z.delete(s);
+          c(), x.get(i) === h && x.delete(i);
         }
       };
-      return z.set(s, f), f;
+      return x.set(i, h), h;
     },
-    promptGoogleOneTap: i
+    promptGoogleOneTap: s
   };
 }
-function Wt() {
-  Ce();
-  const t = ht(), e = mt(), i = xe(), s = qt(e, {
+function Yt() {
+  $e();
+  const t = mt(), e = ft(), s = je(), i = Wt(e, {
     syncPublicSession: async () => {
-      await ut(t);
+      await ht(t);
     },
     publicAuthClient: t
   });
   return {
     auth: t,
-    api: i,
-    authUI: s
+    api: s,
+    authUI: i
   };
 }
 export {
-  St as AUTH_UI_APPEARANCE_VARIABLE,
-  Pt as AUTH_UI_APPEARANCE_VARIABLE_NAMES,
-  Et as AUTH_UI_DEFAULT_THEME,
-  Ne as AUTH_UI_THEME,
-  Fe as AUTH_UI_THEMES,
-  yt as AUTH_UI_THEME_DARK,
-  Ve as AUTH_UI_THEME_LIGHT,
+  It as AUTH_UI_APPEARANCE_VARIABLE,
+  _t as AUTH_UI_APPEARANCE_VARIABLE_NAMES,
+  Pt as AUTH_UI_DEFAULT_THEME,
+  Ve as AUTH_UI_THEME,
+  Ge as AUTH_UI_THEMES,
+  Et as AUTH_UI_THEME_DARK,
+  Fe as AUTH_UI_THEME_LIGHT,
   L as EdgeSparkAuthError,
-  g as EdgeSparkConfigError,
+  b as EdgeSparkConfigError,
   le as EdgeSparkError,
-  Re as EdgeSparkRuntimeError,
-  Se as ar,
-  Wt as createEdgeSpark,
-  ve as de,
-  vt as detectLocale,
-  x as enUS,
-  X as es,
-  be as fr,
-  Pe as hi,
-  ye as it,
-  we as ja,
-  ge as ko,
-  pe as ptBR,
+  Ue as EdgeSparkRuntimeError,
+  Pe as ar,
+  Yt as createEdgeSpark,
+  ye as de,
+  St as detectLocale,
+  j as enUS,
+  Z as es,
+  ve as fr,
+  Ie as hi,
+  Se as it,
+  pe as ja,
+  we as ko,
+  be as ptBR,
   Ee as ru,
-  J as zhCN
+  X as zhCN
 };