@forgerock/login-widget 1.2.0-beta.3 → 1.2.0-beta.5

package/index.d.ts

@@ -1041,6 +1041,7 @@ declare abstract class ZodType<Output = any, Def extends ZodTypeDef = ZodTypeDef
     _refinement(refinement: RefinementEffect<Output>["refinement"]): ZodEffects<this, Output, Input>;
     superRefine<RefinedOutput extends Output>(refinement: (arg: Output, ctx: RefinementCtx) => arg is RefinedOutput): ZodEffects<this, RefinedOutput, Input>;
     superRefine(refinement: (arg: Output, ctx: RefinementCtx) => void): ZodEffects<this, Output, Input>;
+    superRefine(refinement: (arg: Output, ctx: RefinementCtx) => Promise<void>): ZodEffects<this, Output, Input>;
     constructor(def: Def);
     optional(): ZodOptional<this>;
     nullable(): ZodNullable<this>;
@@ -1060,6 +1061,7 @@ declare abstract class ZodType<Output = any, Def extends ZodTypeDef = ZodTypeDef
     }) => Output): ZodCatch<this>;
     describe(description: string): this;
     pipe<T extends ZodTypeAny>(target: T): ZodPipeline<this, T>;
+    readonly(): ZodReadonly<this>;
     isOptional(): boolean;
     isNullable(): boolean;
 }
@@ -1515,7 +1517,7 @@ declare type TransformEffect<T> = {
 };
 declare type PreprocessEffect<T> = {
     type: "preprocess";
-    transform: (arg: T) => any;
+    transform: (arg: T, ctx: RefinementCtx) => any;
 };
 declare type Effect<T> = RefinementEffect<T> | TransformEffect<T> | PreprocessEffect<T>;
 interface ZodEffectsDef<T extends ZodTypeAny = ZodTypeAny> extends ZodTypeDef {
@@ -1528,7 +1530,7 @@ declare class ZodEffects<T extends ZodTypeAny, Output = output<T>, Input = input
     sourceType(): T;
     _parse(input: ParseInput): ParseReturnType<this["_output"]>;
     static create: <I extends ZodTypeAny>(schema: I, effect: Effect<I["_output"]>, params?: RawCreateParams) => ZodEffects<I, I["_output"], input<I>>;
-    static createWithPreprocess: <I extends ZodTypeAny>(preprocess: (arg: unknown) => unknown, schema: I, params?: RawCreateParams) => ZodEffects<I, I["_output"], unknown>;
+    static createWithPreprocess: <I extends ZodTypeAny>(preprocess: (arg: unknown, ctx: RefinementCtx) => unknown, schema: I, params?: RawCreateParams) => ZodEffects<I, I["_output"], unknown>;
 }
 
 interface ZodOptionalDef<T extends ZodTypeAny = ZodTypeAny> extends ZodTypeDef {
@@ -1609,6 +1611,18 @@ declare class ZodPipeline<A extends ZodTypeAny, B extends ZodTypeAny> extends Zo
     _parse(input: ParseInput): ParseReturnType<any>;
     static create<A extends ZodTypeAny, B extends ZodTypeAny>(a: A, b: B): ZodPipeline<A, B>;
 }
+declare type BuiltIn = (((...args: any[]) => any) | (new (...args: any[]) => any)) | {
+    readonly [Symbol.toStringTag]: string;
+} | Date | Error | Generator | Promise<unknown> | RegExp;
+declare type MakeReadonly<T> = T extends Map<infer K, infer V> ? ReadonlyMap<K, V> : T extends Set<infer V> ? ReadonlySet<V> : T extends [infer Head, ...infer Tail] ? readonly [Head, ...Tail] : T extends Array<infer V> ? ReadonlyArray<V> : T extends BuiltIn ? T : Readonly<T>;
+interface ZodReadonlyDef<T extends ZodTypeAny = ZodTypeAny> extends ZodTypeDef {
+    innerType: T;
+    typeName: ZodFirstPartyTypeKind.ZodReadonly;
+}
+declare class ZodReadonly<T extends ZodTypeAny> extends ZodType<MakeReadonly<T["_output"]>, ZodReadonlyDef<T>, T["_input"]> {
+    _parse(input: ParseInput): ParseReturnType<this["_output"]>;
+    static create: <T_1 extends ZodTypeAny>(type: T_1, params?: RawCreateParams) => ZodReadonly<T_1>;
+}
 declare enum ZodFirstPartyTypeKind {
     ZodString = "ZodString",
     ZodNumber = "ZodNumber",
@@ -1644,7 +1658,8 @@ declare enum ZodFirstPartyTypeKind {
     ZodCatch = "ZodCatch",
     ZodPromise = "ZodPromise",
     ZodBranded = "ZodBranded",
-    ZodPipeline = "ZodPipeline"
+    ZodPipeline = "ZodPipeline",
+    ZodReadonly = "ZodReadonly"
 }
 
 declare const partialConfigSchema: ZodObject<{
@@ -1702,55 +1717,55 @@ declare const partialConfigSchema: ZodObject<{
     serverConfig: ZodOptional<ZodObject<{
         baseUrl: ZodString;
         paths: ZodOptional<ZodObject<{
-            authenticate: ZodString;
-            authorize: ZodString;
-            accessToken: ZodString;
-            endSession: ZodString;
-            userInfo: ZodString;
-            revoke: ZodString;
-            sessions: ZodString;
-        }, "strip", ZodTypeAny, {
-            authenticate: string;
-            authorize: string;
-            accessToken: string;
-            endSession: string;
-            userInfo: string;
-            revoke: string;
-            sessions: string;
+            authenticate: ZodOptional<ZodString>;
+            authorize: ZodOptional<ZodString>;
+            accessToken: ZodOptional<ZodString>;
+            endSession: ZodOptional<ZodString>;
+            userInfo: ZodOptional<ZodString>;
+            revoke: ZodOptional<ZodString>;
+            sessions: ZodOptional<ZodString>;
+        }, "strict", ZodTypeAny, {
+            authenticate?: string | undefined;
+            authorize?: string | undefined;
+            accessToken?: string | undefined;
+            endSession?: string | undefined;
+            userInfo?: string | undefined;
+            revoke?: string | undefined;
+            sessions?: string | undefined;
         }, {
-            authenticate: string;
-            authorize: string;
-            accessToken: string;
-            endSession: string;
-            userInfo: string;
-            revoke: string;
-            sessions: string;
+            authenticate?: string | undefined;
+            authorize?: string | undefined;
+            accessToken?: string | undefined;
+            endSession?: string | undefined;
+            userInfo?: string | undefined;
+            revoke?: string | undefined;
+            sessions?: string | undefined;
         }>>;
-        timeout: ZodNumber;
-    }, "strip", ZodTypeAny, {
-        timeout: number;
+        timeout: ZodOptional<ZodNumber>;
+    }, "strict", ZodTypeAny, {
         baseUrl: string;
         paths?: {
-            authenticate: string;
-            authorize: string;
-            accessToken: string;
-            endSession: string;
-            userInfo: string;
-            revoke: string;
-            sessions: string;
+            authenticate?: string | undefined;
+            authorize?: string | undefined;
+            accessToken?: string | undefined;
+            endSession?: string | undefined;
+            userInfo?: string | undefined;
+            revoke?: string | undefined;
+            sessions?: string | undefined;
         } | undefined;
+        timeout?: number | undefined;
     }, {
-        timeout: number;
         baseUrl: string;
         paths?: {
-            authenticate: string;
-            authorize: string;
-            accessToken: string;
-            endSession: string;
-            userInfo: string;
-            revoke: string;
-            sessions: string;
+            authenticate?: string | undefined;
+            authorize?: string | undefined;
+            accessToken?: string | undefined;
+            endSession?: string | undefined;
+            userInfo?: string | undefined;
+            revoke?: string | undefined;
+            sessions?: string | undefined;
         } | undefined;
+        timeout?: number | undefined;
     }>>;
     support: ZodOptional<ZodOptional<ZodUnion<[ZodLiteral<"legacy">, ZodLiteral<"modern">]>>>;
     tokenStore: ZodOptional<ZodOptional<ZodUnion<[ZodObject<{
@@ -1772,7 +1787,7 @@ declare const partialConfigSchema: ZodObject<{
         }>>>;
         set: ZodFunction<ZodTuple<[ZodString], ZodUnknown>, ZodPromise<ZodVoid>>;
         remove: ZodFunction<ZodTuple<[ZodString], ZodUnknown>, ZodPromise<ZodVoid>>;
-    }, "strip", ZodTypeAny, {
+    }, "strict", ZodTypeAny, {
         set: (args_0: string, ...args_1: unknown[]) => Promise<void>;
         remove: (args_0: string, ...args_1: unknown[]) => Promise<void>;
         get: (args_0: string, ...args_1: unknown[]) => Promise<{
@@ -1813,17 +1828,17 @@ declare const partialConfigSchema: ZodObject<{
     redirectUri?: string | undefined;
     scope?: string | undefined;
     serverConfig?: {
-        timeout: number;
         baseUrl: string;
         paths?: {
-            authenticate: string;
-            authorize: string;
-            accessToken: string;
-            endSession: string;
-            userInfo: string;
-            revoke: string;
-            sessions: string;
+            authenticate?: string | undefined;
+            authorize?: string | undefined;
+            accessToken?: string | undefined;
+            endSession?: string | undefined;
+            userInfo?: string | undefined;
+            revoke?: string | undefined;
+            sessions?: string | undefined;
         } | undefined;
+        timeout?: number | undefined;
     } | undefined;
     support?: "legacy" | "modern" | undefined;
     tokenStore?: "localStorage" | "sessionStorage" | {
@@ -1858,17 +1873,17 @@ declare const partialConfigSchema: ZodObject<{
     redirectUri?: string | undefined;
     scope?: string | undefined;
     serverConfig?: {
-        timeout: number;
         baseUrl: string;
         paths?: {
-            authenticate: string;
-            authorize: string;
-            accessToken: string;
-            endSession: string;
-            userInfo: string;
-            revoke: string;
-            sessions: string;
+            authenticate?: string | undefined;
+            authorize?: string | undefined;
+            accessToken?: string | undefined;
+            endSession?: string | undefined;
+            userInfo?: string | undefined;
+            revoke?: string | undefined;
+            sessions?: string | undefined;
         } | undefined;
+        timeout?: number | undefined;
     } | undefined;
     support?: "legacy" | "modern" | undefined;
     tokenStore?: "localStorage" | "sessionStorage" | {
@@ -2255,14 +2270,14 @@ declare const partialStyleSchema: ZodObject<{
     }>>>;
     sections: ZodOptional<ZodOptional<ZodObject<{
         header: ZodOptional<ZodBoolean>;
-    }, "strip", ZodTypeAny, {
+    }, "strict", ZodTypeAny, {
         header?: boolean | undefined;
     }, {
         header?: boolean | undefined;
     }>>>;
     stage: ZodOptional<ZodOptional<ZodObject<{
         icon: ZodOptional<ZodBoolean>;
-    }, "strip", ZodTypeAny, {
+    }, "strict", ZodTypeAny, {
         icon?: boolean | undefined;
     }, {
         icon?: boolean | undefined;

package/index.js

@@ -5532,7 +5532,8 @@ class ParseStatus {
                 status.dirty();
             if (value.status === "dirty")
                 status.dirty();
-            if (typeof value.value !== "undefined" || pair.alwaysSet) {
+            if (key.value !== "__proto__" &&
+                (typeof value.value !== "undefined" || pair.alwaysSet)) {
                 finalObject[key.value] = value.value;
             }
         }
@@ -5640,6 +5641,7 @@ class ZodType {
         this.catch = this.catch.bind(this);
         this.describe = this.describe.bind(this);
         this.pipe = this.pipe.bind(this);
+        this.readonly = this.readonly.bind(this);
         this.isNullable = this.isNullable.bind(this);
         this.isOptional = this.isOptional.bind(this);
     }
@@ -5856,6 +5858,9 @@ class ZodType {
     pipe(target) {
         return ZodPipeline.create(this, target);
     }
+    readonly() {
+        return ZodReadonly.create(this);
+    }
     isOptional() {
         return this.safeParse(undefined).success;
     }
@@ -5866,14 +5871,24 @@ class ZodType {
 const cuidRegex = /^c[^\s-]{8,}$/i;
 const cuid2Regex = /^[a-z][a-z0-9]*$/;
 const ulidRegex = /[0-9A-HJKMNP-TV-Z]{26}/;
-const uuidRegex = /^([a-f0-9]{8}-[a-f0-9]{4}-[1-5][a-f0-9]{3}-[a-f0-9]{4}-[a-f0-9]{12}|00000000-0000-0000-0000-000000000000)$/i;
+// const uuidRegex =
+//   /^([a-f0-9]{8}-[a-f0-9]{4}-[1-5][a-f0-9]{3}-[a-f0-9]{4}-[a-f0-9]{12}|00000000-0000-0000-0000-000000000000)$/i;
+const uuidRegex = /^[0-9a-fA-F]{8}\b-[0-9a-fA-F]{4}\b-[0-9a-fA-F]{4}\b-[0-9a-fA-F]{4}\b-[0-9a-fA-F]{12}$/i;
 // from https://stackoverflow.com/a/46181/1550155
 // old version: too slow, didn't support unicode
 // const emailRegex = /^((([a-z]|\d|[!#\$%&'\*\+\-\/=\?\^_`{\|}~]|[\u00A0-\uD7FF\uF900-\uFDCF\uFDF0-\uFFEF])+(\.([a-z]|\d|[!#\$%&'\*\+\-\/=\?\^_`{\|}~]|[\u00A0-\uD7FF\uF900-\uFDCF\uFDF0-\uFFEF])+)*)|((\x22)((((\x20|\x09)*(\x0d\x0a))?(\x20|\x09)+)?(([\x01-\x08\x0b\x0c\x0e-\x1f\x7f]|\x21|[\x23-\x5b]|[\x5d-\x7e]|[\u00A0-\uD7FF\uF900-\uFDCF\uFDF0-\uFFEF])|(\\([\x01-\x09\x0b\x0c\x0d-\x7f]|[\u00A0-\uD7FF\uF900-\uFDCF\uFDF0-\uFFEF]))))*(((\x20|\x09)*(\x0d\x0a))?(\x20|\x09)+)?(\x22)))@((([a-z]|\d|[\u00A0-\uD7FF\uF900-\uFDCF\uFDF0-\uFFEF])|(([a-z]|\d|[\u00A0-\uD7FF\uF900-\uFDCF\uFDF0-\uFFEF])([a-z]|\d|-|\.|_|~|[\u00A0-\uD7FF\uF900-\uFDCF\uFDF0-\uFFEF])*([a-z]|\d|[\u00A0-\uD7FF\uF900-\uFDCF\uFDF0-\uFFEF])))\.)+(([a-z]|[\u00A0-\uD7FF\uF900-\uFDCF\uFDF0-\uFFEF])|(([a-z]|[\u00A0-\uD7FF\uF900-\uFDCF\uFDF0-\uFFEF])([a-z]|\d|-|\.|_|~|[\u00A0-\uD7FF\uF900-\uFDCF\uFDF0-\uFFEF])*([a-z]|[\u00A0-\uD7FF\uF900-\uFDCF\uFDF0-\uFFEF])))$/i;
 //old email regex
 // const emailRegex = /^(([^<>()[\].,;:\s@"]+(\.[^<>()[\].,;:\s@"]+)*)|(".+"))@((?!-)([^<>()[\].,;:\s@"]+\.)+[^<>()[\].,;:\s@"]{1,})[^-<>()[\].,;:\s@"]$/i;
 // eslint-disable-next-line
-const emailRegex = /^(([^<>()[\]\\.,;:\s@\"]+(\.[^<>()[\]\\.,;:\s@\"]+)*)|(\".+\"))@((\[(((25[0-5])|(2[0-4][0-9])|(1[0-9]{2})|([0-9]{1,2}))\.){3}((25[0-5])|(2[0-4][0-9])|(1[0-9]{2})|([0-9]{1,2}))\])|(\[IPv6:(([a-f0-9]{1,4}:){7}|::([a-f0-9]{1,4}:){0,6}|([a-f0-9]{1,4}:){1}:([a-f0-9]{1,4}:){0,5}|([a-f0-9]{1,4}:){2}:([a-f0-9]{1,4}:){0,4}|([a-f0-9]{1,4}:){3}:([a-f0-9]{1,4}:){0,3}|([a-f0-9]{1,4}:){4}:([a-f0-9]{1,4}:){0,2}|([a-f0-9]{1,4}:){5}:([a-f0-9]{1,4}:){0,1})([a-f0-9]{1,4}|(((25[0-5])|(2[0-4][0-9])|(1[0-9]{2})|([0-9]{1,2}))\.){3}((25[0-5])|(2[0-4][0-9])|(1[0-9]{2})|([0-9]{1,2})))\])|([A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])*(\.[A-Za-z]{2,})+))$/;
+// const emailRegex =
+//   /^(([^<>()[\]\\.,;:\s@\"]+(\.[^<>()[\]\\.,;:\s@\"]+)*)|(\".+\"))@((\[(((25[0-5])|(2[0-4][0-9])|(1[0-9]{2})|([0-9]{1,2}))\.){3}((25[0-5])|(2[0-4][0-9])|(1[0-9]{2})|([0-9]{1,2}))\])|(\[IPv6:(([a-f0-9]{1,4}:){7}|::([a-f0-9]{1,4}:){0,6}|([a-f0-9]{1,4}:){1}:([a-f0-9]{1,4}:){0,5}|([a-f0-9]{1,4}:){2}:([a-f0-9]{1,4}:){0,4}|([a-f0-9]{1,4}:){3}:([a-f0-9]{1,4}:){0,3}|([a-f0-9]{1,4}:){4}:([a-f0-9]{1,4}:){0,2}|([a-f0-9]{1,4}:){5}:([a-f0-9]{1,4}:){0,1})([a-f0-9]{1,4}|(((25[0-5])|(2[0-4][0-9])|(1[0-9]{2})|([0-9]{1,2}))\.){3}((25[0-5])|(2[0-4][0-9])|(1[0-9]{2})|([0-9]{1,2})))\])|([A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])*(\.[A-Za-z]{2,})+))$/;
+// const emailRegex =
+//   /^[a-zA-Z0-9\.\!\#\$\%\&\'\*\+\/\=\?\^\_\`\{\|\}\~\-]+@[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?(?:\.[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?)*$/;
+// const emailRegex =
+//   /^(?:[a-z0-9!#$%&'*+/=?^_`{|}~-]+(?:\.[a-z0-9!#$%&'*+/=?^_`{|}~-]+)*|"(?:[\x01-\x08\x0b\x0c\x0e-\x1f\x21\x23-\x5b\x5d-\x7f]|\\[\x01-\x09\x0b\x0c\x0e-\x7f])*")@(?:(?:[a-z0-9](?:[a-z0-9-]*[a-z0-9])?\.)+[a-z0-9](?:[a-z0-9-]*[a-z0-9])?|\[(?:(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?|[a-z0-9-]*[a-z0-9]:(?:[\x01-\x08\x0b\x0c\x0e-\x1f\x21-\x5a\x53-\x7f]|\\[\x01-\x09\x0b\x0c\x0e-\x7f])+)\])$/i;
+const emailRegex = /^(?!\.)(?!.*\.\.)([A-Z0-9_+-\.]*)[A-Z0-9_+-]@([A-Z0-9][A-Z0-9\-]*\.)+[A-Z]{2,}$/i;
+// const emailRegex =
+//   /^[a-z0-9.!#$%&’*+/=?^_`{|}~-]+@[a-z0-9-]+(?:\.[a-z0-9\-]+)*$/i;
 // from https://thekevinscott.com/emojis-in-javascript/#writing-a-regular-expression
 const emojiRegex = /^(\p{Extended_Pictographic}|\p{Emoji_Component})+$/u;
 const ipv4Regex = /^(((25[0-5])|(2[0-4][0-9])|(1[0-9]{2})|([0-9]{1,2}))\.){3}((25[0-5])|(2[0-4][0-9])|(1[0-9]{2})|([0-9]{1,2}))$/;
@@ -7984,6 +7999,12 @@ class ZodRecord extends ZodType {
     }
 }
 class ZodMap extends ZodType {
+    get keySchema() {
+        return this._def.keyType;
+    }
+    get valueSchema() {
+        return this._def.valueType;
+    }
     _parse(input) {
         const { status, ctx } = this._processInputParams(input);
         if (ctx.parsedType !== ZodParsedType.map) {
@@ -8180,16 +8201,20 @@ class ZodFunction extends ZodType {
         const params = { errorMap: ctx.common.contextualErrorMap };
         const fn = ctx.data;
         if (this._def.returns instanceof ZodPromise) {
-            return OK(async (...args) => {
+            // Would love a way to avoid disabling this rule, but we need
+            // an alias (using an arrow function was what caused 2651).
+            // eslint-disable-next-line @typescript-eslint/no-this-alias
+            const me = this;
+            return OK(async function (...args) {
                 const error = new ZodError([]);
-                const parsedArgs = await this._def.args
+                const parsedArgs = await me._def.args
                     .parseAsync(args, params)
                     .catch((e) => {
                     error.addIssue(makeArgsIssue(args, e));
                     throw error;
                 });
-                const result = await fn(...parsedArgs);
-                const parsedReturns = await this._def.returns._def.type
+                const result = await Reflect.apply(fn, this, parsedArgs);
+                const parsedReturns = await me._def.returns._def.type
                     .parseAsync(result, params)
                     .catch((e) => {
                     error.addIssue(makeReturnsIssue(result, e));
@@ -8199,13 +8224,17 @@ class ZodFunction extends ZodType {
             });
         }
         else {
-            return OK((...args) => {
-                const parsedArgs = this._def.args.safeParse(args, params);
+            // Would love a way to avoid disabling this rule, but we need
+            // an alias (using an arrow function was what caused 2651).
+            // eslint-disable-next-line @typescript-eslint/no-this-alias
+            const me = this;
+            return OK(function (...args) {
+                const parsedArgs = me._def.args.safeParse(args, params);
                 if (!parsedArgs.success) {
                     throw new ZodError([makeArgsIssue(args, parsedArgs.error)]);
                 }
-                const result = fn(...parsedArgs.data);
-                const parsedReturns = this._def.returns.safeParse(result, params);
+                const result = Reflect.apply(fn, this, parsedArgs.data);
+                const parsedReturns = me._def.returns.safeParse(result, params);
                 if (!parsedReturns.success) {
                     throw new ZodError([makeReturnsIssue(result, parsedReturns.error)]);
                 }
@@ -8293,7 +8322,7 @@ ZodLiteral.create = (value, params) => {
 };
 function createZodEnum(values, params) {
     return new ZodEnum({
-        values: values,
+        values,
         typeName: ZodFirstPartyTypeKind.ZodEnum,
         ...processCreateParams(params),
     });
@@ -8435,8 +8464,29 @@ class ZodEffects extends ZodType {
     _parse(input) {
         const { status, ctx } = this._processInputParams(input);
         const effect = this._def.effect || null;
+        const checkCtx = {
+            addIssue: (arg) => {
+                addIssueToContext(ctx, arg);
+                if (arg.fatal) {
+                    status.abort();
+                }
+                else {
+                    status.dirty();
+                }
+            },
+            get path() {
+                return ctx.path;
+            },
+        };
+        checkCtx.addIssue = checkCtx.addIssue.bind(checkCtx);
         if (effect.type === "preprocess") {
-            const processed = effect.transform(ctx.data);
+            const processed = effect.transform(ctx.data, checkCtx);
+            if (ctx.common.issues.length) {
+                return {
+                    status: "dirty",
+                    value: ctx.data,
+                };
+            }
             if (ctx.common.async) {
                 return Promise.resolve(processed).then((processed) => {
                     return this._def.schema._parseAsync({
@@ -8454,21 +8504,6 @@ class ZodEffects extends ZodType {
                 });
             }
         }
-        const checkCtx = {
-            addIssue: (arg) => {
-                addIssueToContext(ctx, arg);
-                if (arg.fatal) {
-                    status.abort();
-                }
-                else {
-                    status.dirty();
-                }
-            },
-            get path() {
-                return ctx.path;
-            },
-        };
-        checkCtx.addIssue = checkCtx.addIssue.bind(checkCtx);
         if (effect.type === "refinement") {
             const executeRefinement = (acc
             // effect: RefinementEffect<any>
@@ -8772,6 +8807,22 @@ class ZodPipeline extends ZodType {
         });
     }
 }
+class ZodReadonly extends ZodType {
+    _parse(input) {
+        const result = this._def.innerType._parse(input);
+        if (isValid(result)) {
+            result.value = Object.freeze(result.value);
+        }
+        return result;
+    }
+}
+ZodReadonly.create = (type, params) => {
+    return new ZodReadonly({
+        innerType: type,
+        typeName: ZodFirstPartyTypeKind.ZodReadonly,
+        ...processCreateParams(params),
+    });
+};
 const custom = (check, params = {}, 
 /*
  * @deprecated
@@ -8840,6 +8891,7 @@ var ZodFirstPartyTypeKind;
     ZodFirstPartyTypeKind["ZodPromise"] = "ZodPromise";
     ZodFirstPartyTypeKind["ZodBranded"] = "ZodBranded";
     ZodFirstPartyTypeKind["ZodPipeline"] = "ZodPipeline";
+    ZodFirstPartyTypeKind["ZodReadonly"] = "ZodReadonly";
 })(ZodFirstPartyTypeKind || (ZodFirstPartyTypeKind = {}));
 const instanceOfType = (
 // const instanceOfType = <T extends new (...args: any[]) => any>(
@@ -8953,6 +9005,7 @@ var z = /*#__PURE__*/Object.freeze({
     BRAND: BRAND,
     ZodBranded: ZodBranded,
     ZodPipeline: ZodPipeline,
+    ZodReadonly: ZodReadonly,
     custom: custom,
     Schema: ZodType,
     ZodSchema: ZodType,
@@ -9032,7 +9085,8 @@ const configSchema = z
     realmPath: z.string(),
     redirectUri: z.string().optional(),
     scope: z.string().optional(),
-    serverConfig: z.object({
+    serverConfig: z
+        .object({
         baseUrl: z
             .string({
             invalid_type_error: '`serverConfig.baseUrl` is a required URL string (this is generated by the Zod library).',
@@ -9043,25 +9097,28 @@ const configSchema = z
         }),
         paths: z
             .object({
-            authenticate: z.string(),
-            authorize: z.string(),
-            accessToken: z.string(),
-            endSession: z.string(),
-            userInfo: z.string(),
-            revoke: z.string(),
-            sessions: z.string(),
+            authenticate: z.string().optional(),
+            authorize: z.string().optional(),
+            accessToken: z.string().optional(),
+            endSession: z.string().optional(),
+            userInfo: z.string().optional(),
+            revoke: z.string().optional(),
+            sessions: z.string().optional(),
         })
+            .strict()
             .optional(),
-        // TODO: timeout should be optional; fix in SDK
-        timeout: z.number({
+        timeout: z
+            .number({
             invalid_type_error: '`serverConfig.timeout` is a required number and in milliseconds (this is generated by the Zod library).',
-            required_error: 'Setting the `serverConfig.timeout` is required (this is generated by the Zod library).',
-        }),
-    }),
+        })
+            .optional(),
+    })
+        .strict(),
     support: z.union([z.literal('legacy'), z.literal('modern')]).optional(),
     tokenStore: z
         .union([
-        z.object({
+        z
+            .object({
             get: z
                 .function()
                 .args(z.string())
@@ -9073,7 +9130,8 @@ const configSchema = z
             }))),
             set: z.function().args(z.string()).returns(z.promise(z.void())),
             remove: z.function().args(z.string()).returns(z.promise(z.void())),
-        }),
+        })
+            .strict(),
         z.literal('sessionStorage'),
         z.literal('localStorage'),
     ])
@@ -12015,7 +12073,9 @@ function initialize$3(customLinks) {
     return linksStore;
 }
 
+const authorizationTimedOut = 'Authorization timed out';
 const interactionNeeded = 'The request requires some interaction that is not allowed.';
+const timeoutErrorMessage = 'Timeouts are likely an issue with OAuth client misconfiguration. If you are getting a 4xx error in the network tab, copy the full `/authorize` URL and paste it directly into your browsers URL field to directly visit the page. The error should be displayed on the page.';
 const sessionCookieConsentMessage = `The user either doesn't have a valid session, the cookie is not being sent due to third-party cookies being disabled, or the user is needing to provide consent as the OAuth client setting does not have "implied consent" enabled.`;
 const oauthStore = writable({
     completed: false,
@@ -12024,6 +12084,16 @@ const oauthStore = writable({
     successful: false,
     response: null,
 });
+function getTroubleshootingMessage(message) {
+    switch (message) {
+        case interactionNeeded:
+            return sessionCookieConsentMessage;
+        case authorizationTimedOut:
+            return timeoutErrorMessage;
+        default:
+            return '';
+    }
+}
 /**
  * @function initialize - Initializes the OAuth store with a get function and a reset function
  * @param {object} initOptions - The options to pass to the TokenManager.getTokens function
@@ -12064,7 +12134,7 @@ function initialize$2(initOptions) {
                     completed: true,
                     error: {
                         message: err.message,
-                        troubleshoot: err.message === interactionNeeded ? sessionCookieConsentMessage : '',
+                        troubleshoot: getTroubleshootingMessage(err.message),
                     },
                     loading: false,
                     successful: false,
@@ -12190,11 +12260,13 @@ const styleSchema = z
         .object({
         header: z.boolean().optional(),
     })
+        .strict()
         .optional(),
     stage: z
         .object({
         icon: z.boolean().optional(),
     })
+        .strict()
         .optional(),
 })
     .strict();
@@ -12327,8 +12399,8 @@ function widgetApiFactory(componentApi) {
         if (!journeyStore || !oauthStore || !userStore) {
             logErrorAndThrow('missingStores');
         }
-        const requestsOauth = options?.oauth || true;
-        const requestsUser = options?.user || true;
+        const requestsOauth = options?.oauth ?? true;
+        const requestsUser = options?.user ?? true;
         const { subscribe, } = derived([journeyStore, oauthStore, userStore], ([$journeyStore, $oauthStore, $userStore], set) => {
             set({
                 journey: $journeyStore,