@genation/sdk 0.2.10 → 0.2.11

package/dist/genation.es.js

@@ -1,67 +1,67 @@
 class N extends Error {
   code;
   cause;
-  constructor(e, r, n) {
-    super(e), this.name = "GenationError", this.code = r, this.cause = n;
+  constructor(t, r, n) {
+    super(t), this.name = "GenationError", this.code = r, this.cause = n;
   }
 }
 class g extends N {
-  constructor(e, r, n) {
-    super(e, r, n), this.name = "AuthError";
+  constructor(t, r, n) {
+    super(t, r, n), this.name = "AuthError";
   }
-  static invalidGrant(e = "Invalid authorization code or refresh token") {
-    return new g(e, "invalid_grant");
+  static invalidGrant(t = "Invalid authorization code or refresh token") {
+    return new g(t, "invalid_grant");
   }
-  static accessDenied(e = "User denied access") {
-    return new g(e, "access_denied");
+  static accessDenied(t = "User denied access") {
+    return new g(t, "access_denied");
   }
-  static expiredToken(e = "Token has expired") {
-    return new g(e, "expired_token");
+  static expiredToken(t = "Token has expired") {
+    return new g(t, "expired_token");
   }
-  static invalidState(e = "State mismatch, possible CSRF attack") {
-    return new g(e, "invalid_state");
+  static invalidState(t = "State mismatch, possible CSRF attack") {
+    return new g(t, "invalid_state");
   }
-  static pkceVerificationFailed(e = "PKCE verification failed") {
-    return new g(e, "pkce_verification_failed");
+  static pkceVerificationFailed(t = "PKCE verification failed") {
+    return new g(t, "pkce_verification_failed");
   }
 }
 class S extends N {
   status;
-  constructor(e, r, n) {
-    super(e, "network_error", n), this.name = "NetworkError", this.status = r;
+  constructor(t, r, n) {
+    super(t, "network_error", n), this.name = "NetworkError", this.status = r;
   }
-  static fromResponse(e) {
+  static fromResponse(t) {
     return new S(
-      `HTTP ${e.status}: ${e.statusText}`,
-      e.status
+      `HTTP ${t.status}: ${t.statusText}`,
+      t.status
     );
   }
 }
 class v extends N {
-  constructor(e) {
-    super(e, "config_error"), this.name = "ConfigError";
+  constructor(t) {
+    super(t, "config_error"), this.name = "ConfigError";
   }
-  static missingField(e) {
-    return new v(`Missing required config field: ${e}`);
+  static missingField(t) {
+    return new v(`Missing required config field: ${t}`);
   }
 }
 class D {
   baseUrl;
   timeout;
-  constructor(e) {
-    this.baseUrl = e.baseUrl.replace(/\/$/, ""), this.timeout = e.timeout ?? 3e4;
+  constructor(t) {
+    this.baseUrl = t.baseUrl.replace(/\/$/, ""), this.timeout = t.timeout ?? 3e4;
   }
   /**
    * Make an HTTP request
    */
-  async request(e, r = {}) {
+  async request(t, r = {}) {
     const { method: n = "GET", headers: s = {}, body: a, params: i } = r;
-    let c = `${this.baseUrl}${e}`;
+    let c = `${this.baseUrl}${t}`;
     if (i) {
       const o = new URLSearchParams(i);
       c += `?${o.toString()}`;
     }
-    const u = new AbortController(), h = setTimeout(() => u.abort(), this.timeout);
+    const h = new AbortController(), u = setTimeout(() => h.abort(), this.timeout);
     try {
       const o = await fetch(c, {
         method: n,
@@ -70,20 +70,20 @@ class D {
           ...s
         },
         body: a ? JSON.stringify(a) : void 0,
-        signal: u.signal
+        signal: h.signal
       });
-      if (clearTimeout(h), !o.ok)
+      if (clearTimeout(u), !o.ok)
         throw S.fromResponse(o);
       return await o.json();
     } catch (o) {
-      throw clearTimeout(h), o instanceof S ? o : o instanceof Error && o.name === "AbortError" ? new S("Request timeout", void 0, o) : new S("Network request failed", void 0, o);
+      throw clearTimeout(u), o instanceof S ? o : o instanceof Error && o.name === "AbortError" ? new S("Request timeout", void 0, o) : new S("Network request failed", void 0, o);
     }
   }
   /**
    * POST request with form data (for OAuth token exchange)
    */
-  async postForm(e, r, n = {}) {
-    const s = `${this.baseUrl}${e}`, a = new AbortController(), i = setTimeout(() => a.abort(), this.timeout);
+  async postForm(t, r, n = {}) {
+    const s = `${this.baseUrl}${t}`, a = new AbortController(), i = setTimeout(() => a.abort(), this.timeout);
     try {
       const c = await fetch(s, {
         method: "POST",
@@ -102,49 +102,49 @@ class D {
     }
   }
 }
-function $(t) {
-  return btoa(String.fromCharCode(...t)).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
+function $(e) {
+  return btoa(String.fromCharCode(...e)).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
 }
-function he() {
-  const t = new Uint8Array(32);
-  return crypto.getRandomValues(t), $(t);
+function fe() {
+  const e = new Uint8Array(32);
+  return crypto.getRandomValues(e), $(e);
 }
-async function ue(t) {
-  const r = new TextEncoder().encode(t), n = await crypto.subtle.digest("SHA-256", r);
+async function de(e) {
+  const r = new TextEncoder().encode(e), n = await crypto.subtle.digest("SHA-256", r);
   return $(new Uint8Array(n));
 }
-async function fe() {
-  const t = he(), e = await ue(t);
+async function le() {
+  const e = fe(), t = await de(e);
   return {
-    codeVerifier: t,
-    codeChallenge: e,
+    codeVerifier: e,
+    codeChallenge: t,
     codeChallengeMethod: "S256"
   };
 }
-function de() {
-  const t = new Uint8Array(16);
-  return crypto.getRandomValues(t), $(t);
+function pe() {
+  const e = new Uint8Array(16);
+  return crypto.getRandomValues(e), $(e);
 }
 const W = "tokens", k = "pkce", I = "state";
-class le {
+class ye {
   storage;
-  constructor(e) {
-    this.storage = e;
+  constructor(t) {
+    this.storage = t;
   }
   /**
    * Store token set
    */
-  async setTokens(e) {
-    await this.storage.set(W, JSON.stringify(e));
+  async setTokens(t) {
+    await this.storage.set(W, JSON.stringify(t));
   }
   /**
    * Get stored tokens
    */
   async getTokens() {
-    const e = await this.storage.get(W);
-    if (!e) return null;
+    const t = await this.storage.get(W);
+    if (!t) return null;
     try {
-      return JSON.parse(e);
+      return JSON.parse(t);
     } catch {
       return null;
     }
@@ -159,36 +159,36 @@ class le {
    * Check if access token is expired
    */
   async isTokenExpired() {
-    const e = await this.getTokens();
-    if (!e) return !0;
-    const r = e.issuedAt + e.expiresIn * 1e3;
+    const t = await this.getTokens();
+    if (!t) return !0;
+    const r = t.issuedAt + t.expiresIn * 1e3;
     return Date.now() > r - 6e4;
   }
   /**
    * Store PKCE verifier for later validation
    */
-  async setPKCE(e) {
-    await this.storage.set(k, e);
+  async setPKCE(t) {
+    await this.storage.set(k, t);
   }
   /**
    * Get and clear stored PKCE verifier
    */
   async consumePKCE() {
-    const e = await this.storage.get(k);
-    return e && await this.storage.remove(k), e;
+    const t = await this.storage.get(k);
+    return t && await this.storage.remove(k), t;
   }
   /**
    * Store state for CSRF validation
    */
-  async setState(e) {
-    await this.storage.set(I, e);
+  async setState(t) {
+    await this.storage.set(I, t);
   }
   /**
    * Get and clear stored state
    */
   async consumeState() {
-    const e = await this.storage.get(I);
-    return e && await this.storage.remove(I), e;
+    const t = await this.storage.get(I);
+    return t && await this.storage.remove(I), t;
   }
   /**
    * Clear all auth-related data
@@ -197,18 +197,18 @@ class le {
     await this.storage.clear();
   }
 }
-const pe = "https://mnnoheowoowbtpuoguul.supabase.co/auth/v1";
-class ye {
+const ee = "https://mnnoheowoowbtpuoguul.supabase.co/auth/v1";
+class me {
   config;
   http;
   tokenManager;
-  constructor(e, r) {
+  constructor(t, r) {
     this.config = {
-      clientId: e.clientId,
-      clientSecret: e.clientSecret,
-      redirectUri: e.redirectUri,
-      scopes: e.scopes,
-      authUrl: e.authUrl ?? pe
+      clientId: t.clientId,
+      clientSecret: t.clientSecret,
+      redirectUri: t.redirectUri,
+      scopes: t.scopes,
+      authUrl: t.authUrl ?? ee
     }, this.http = new D({ baseUrl: this.config.authUrl }), this.tokenManager = r;
   }
   /**
@@ -216,22 +216,22 @@ class ye {
    * Stores PKCE verifier and state for later validation
    */
   async getAuthorizationUrl() {
-    const e = await fe(), r = de();
-    await this.tokenManager.setPKCE(e.codeVerifier), await this.tokenManager.setState(r);
+    const t = await le(), r = pe();
+    await this.tokenManager.setPKCE(t.codeVerifier), await this.tokenManager.setState(r);
     const n = new URLSearchParams({
       response_type: "code",
       client_id: this.config.clientId,
       redirect_uri: this.config.redirectUri,
       state: r,
-      code_challenge: e.codeChallenge,
-      code_challenge_method: e.codeChallengeMethod
+      code_challenge: t.codeChallenge,
+      code_challenge_method: t.codeChallengeMethod
     });
     return this.config.scopes && this.config.scopes.length > 0 && n.append("scope", this.config.scopes.join(" ")), `${this.config.authUrl}/oauth/authorize?${n.toString()}`;
   }
   /**
    * Exchange authorization code for tokens
    */
-  async exchangeCode(e, r) {
+  async exchangeCode(t, r) {
     const n = await this.tokenManager.consumeState();
     if (!n || n !== r)
       throw g.invalidState();
@@ -242,7 +242,7 @@ class ye {
       "/oauth/token",
       {
         grant_type: "authorization_code",
-        code: e,
+        code: t,
         redirect_uri: this.config.redirectUri,
         client_id: this.config.clientId,
         client_secret: this.config.clientSecret,
@@ -255,14 +255,14 @@ class ye {
    * Refresh access token using refresh token
    */
   async refreshToken() {
-    const e = await this.tokenManager.getTokens();
-    if (!e?.refreshToken)
+    const t = await this.tokenManager.getTokens();
+    if (!t?.refreshToken)
       throw g.invalidGrant("No refresh token available");
     const r = await this.http.postForm(
       "/oauth/token",
       {
         grant_type: "refresh_token",
-        refresh_token: e.refreshToken,
+        refresh_token: t.refreshToken,
         client_id: this.config.clientId,
         client_secret: this.config.clientSecret
       }
@@ -273,11 +273,11 @@ class ye {
    * Revoke current tokens
    */
   async revokeToken() {
-    const e = await this.tokenManager.getTokens();
-    if (e)
+    const t = await this.tokenManager.getTokens();
+    if (t)
       try {
         await this.http.postForm("/oauth/revoke", {
-          token: e.accessToken,
+          token: t.accessToken,
           client_id: this.config.clientId,
           client_secret: this.config.clientSecret
         });
@@ -288,52 +288,52 @@ class ye {
   /**
    * Map OAuth token response to TokenSet
    */
-  mapTokenResponse(e) {
+  mapTokenResponse(t) {
     return {
-      accessToken: e.access_token,
-      refreshToken: e.refresh_token,
-      tokenType: e.token_type,
-      expiresIn: e.expires_in,
+      accessToken: t.access_token,
+      refreshToken: t.refresh_token,
+      tokenType: t.token_type,
+      expiresIn: t.expires_in,
       issuedAt: Date.now(),
-      scope: e.scope
+      scope: t.scope
     };
   }
 }
 const G = new TextEncoder(), _ = new TextDecoder();
-function me(...t) {
-  const e = t.reduce((s, { length: a }) => s + a, 0), r = new Uint8Array(e);
+function we(...e) {
+  const t = e.reduce((s, { length: a }) => s + a, 0), r = new Uint8Array(t);
   let n = 0;
-  for (const s of t)
+  for (const s of e)
     r.set(s, n), n += s.length;
   return r;
 }
-function J(t) {
-  const e = new Uint8Array(t.length);
-  for (let r = 0; r < t.length; r++) {
-    const n = t.charCodeAt(r);
+function J(e) {
+  const t = new Uint8Array(e.length);
+  for (let r = 0; r < e.length; r++) {
+    const n = e.charCodeAt(r);
     if (n > 127)
       throw new TypeError("non-ASCII string encountered in encode()");
-    e[r] = n;
+    t[r] = n;
   }
-  return e;
+  return t;
 }
-function we(t) {
+function Se(e) {
   if (Uint8Array.fromBase64)
-    return Uint8Array.fromBase64(t);
-  const e = atob(t), r = new Uint8Array(e.length);
-  for (let n = 0; n < e.length; n++)
-    r[n] = e.charCodeAt(n);
+    return Uint8Array.fromBase64(e);
+  const t = atob(e), r = new Uint8Array(t.length);
+  for (let n = 0; n < t.length; n++)
+    r[n] = t.charCodeAt(n);
   return r;
 }
-function C(t) {
+function C(e) {
   if (Uint8Array.fromBase64)
-    return Uint8Array.fromBase64(typeof t == "string" ? t : _.decode(t), {
+    return Uint8Array.fromBase64(typeof e == "string" ? e : _.decode(e), {
       alphabet: "base64url"
     });
-  let e = t;
-  e instanceof Uint8Array && (e = _.decode(e)), e = e.replace(/-/g, "+").replace(/_/g, "/");
+  let t = e;
+  t instanceof Uint8Array && (t = _.decode(t)), t = t.replace(/-/g, "+").replace(/_/g, "/");
   try {
-    return we(e);
+    return Se(t);
   } catch {
     throw new TypeError("The input to be decoded is not correctly encoded.");
   }
@@ -341,8 +341,8 @@ function C(t) {
 class l extends Error {
   static code = "ERR_JOSE_GENERIC";
   code = "ERR_JOSE_GENERIC";
-  constructor(e, r) {
-    super(e, r), this.name = this.constructor.name, Error.captureStackTrace?.(this, this.constructor);
+  constructor(t, r) {
+    super(t, r), this.name = this.constructor.name, Error.captureStackTrace?.(this, this.constructor);
   }
 }
 class y extends l {
@@ -351,8 +351,8 @@ class y extends l {
   claim;
   reason;
   payload;
-  constructor(e, r, n = "unspecified", s = "unspecified") {
-    super(e, { cause: { claim: n, reason: s, payload: r } }), this.claim = n, this.reason = s, this.payload = r;
+  constructor(t, r, n = "unspecified", s = "unspecified") {
+    super(t, { cause: { claim: n, reason: s, payload: r } }), this.claim = n, this.reason = s, this.payload = r;
   }
 }
 class z extends l {
@@ -361,8 +361,8 @@ class z extends l {
   claim;
   reason;
   payload;
-  constructor(e, r, n = "unspecified", s = "unspecified") {
-    super(e, { cause: { claim: n, reason: s, payload: r } }), this.claim = n, this.reason = s, this.payload = r;
+  constructor(t, r, n = "unspecified", s = "unspecified") {
+    super(t, { cause: { claim: n, reason: s, payload: r } }), this.claim = n, this.reason = s, this.payload = r;
   }
 }
 class w extends l {
@@ -373,49 +373,49 @@ class f extends l {
   static code = "ERR_JWS_INVALID";
   code = "ERR_JWS_INVALID";
 }
-class j extends l {
+class te extends l {
   static code = "ERR_JWT_INVALID";
   code = "ERR_JWT_INVALID";
 }
-class ee extends l {
+class re extends l {
   static code = "ERR_JWKS_INVALID";
   code = "ERR_JWKS_INVALID";
 }
-class te extends l {
+class ne extends l {
   static code = "ERR_JWKS_NO_MATCHING_KEY";
   code = "ERR_JWKS_NO_MATCHING_KEY";
-  constructor(e = "no applicable key found in the JSON Web Key Set", r) {
-    super(e, r);
+  constructor(t = "no applicable key found in the JSON Web Key Set", r) {
+    super(t, r);
   }
 }
-class Se extends l {
+class ge extends l {
   [Symbol.asyncIterator];
   static code = "ERR_JWKS_MULTIPLE_MATCHING_KEYS";
   code = "ERR_JWKS_MULTIPLE_MATCHING_KEYS";
-  constructor(e = "multiple matching keys found in the JSON Web Key Set", r) {
-    super(e, r);
+  constructor(t = "multiple matching keys found in the JSON Web Key Set", r) {
+    super(t, r);
   }
 }
-class ge extends l {
+class be extends l {
   static code = "ERR_JWKS_TIMEOUT";
   code = "ERR_JWKS_TIMEOUT";
-  constructor(e = "request timed out", r) {
-    super(e, r);
+  constructor(t = "request timed out", r) {
+    super(t, r);
   }
 }
-class be extends l {
+class Ee extends l {
   static code = "ERR_JWS_SIGNATURE_VERIFICATION_FAILED";
   code = "ERR_JWS_SIGNATURE_VERIFICATION_FAILED";
-  constructor(e = "signature verification failed", r) {
-    super(e, r);
+  constructor(t = "signature verification failed", r) {
+    super(t, r);
   }
 }
-const m = (t, e = "algorithm.name") => new TypeError(`CryptoKey does not support this operation, its ${e} must be ${t}`), A = (t, e) => t.name === e;
-function U(t) {
-  return parseInt(t.name.slice(4), 10);
+const m = (e, t = "algorithm.name") => new TypeError(`CryptoKey does not support this operation, its ${t} must be ${e}`), A = (e, t) => e.name === t;
+function x(e) {
+  return parseInt(e.name.slice(4), 10);
 }
-function Ee(t) {
-  switch (t) {
+function Ae(e) {
+  switch (e) {
     case "ES256":
       return "P-256";
     case "ES384":
@@ -426,92 +426,92 @@ function Ee(t) {
       throw new Error("unreachable");
   }
 }
-function Ae(t, e) {
-  if (!t.usages.includes(e))
-    throw new TypeError(`CryptoKey does not support this operation, its usages must include ${e}.`);
+function Ke(e, t) {
+  if (!e.usages.includes(t))
+    throw new TypeError(`CryptoKey does not support this operation, its usages must include ${t}.`);
 }
-function Ke(t, e, r) {
-  switch (e) {
+function Te(e, t, r) {
+  switch (t) {
     case "HS256":
     case "HS384":
     case "HS512": {
-      if (!A(t.algorithm, "HMAC"))
+      if (!A(e.algorithm, "HMAC"))
         throw m("HMAC");
-      const n = parseInt(e.slice(2), 10);
-      if (U(t.algorithm.hash) !== n)
+      const n = parseInt(t.slice(2), 10);
+      if (x(e.algorithm.hash) !== n)
         throw m(`SHA-${n}`, "algorithm.hash");
       break;
     }
     case "RS256":
     case "RS384":
     case "RS512": {
-      if (!A(t.algorithm, "RSASSA-PKCS1-v1_5"))
+      if (!A(e.algorithm, "RSASSA-PKCS1-v1_5"))
         throw m("RSASSA-PKCS1-v1_5");
-      const n = parseInt(e.slice(2), 10);
-      if (U(t.algorithm.hash) !== n)
+      const n = parseInt(t.slice(2), 10);
+      if (x(e.algorithm.hash) !== n)
         throw m(`SHA-${n}`, "algorithm.hash");
       break;
     }
     case "PS256":
     case "PS384":
     case "PS512": {
-      if (!A(t.algorithm, "RSA-PSS"))
+      if (!A(e.algorithm, "RSA-PSS"))
         throw m("RSA-PSS");
-      const n = parseInt(e.slice(2), 10);
-      if (U(t.algorithm.hash) !== n)
+      const n = parseInt(t.slice(2), 10);
+      if (x(e.algorithm.hash) !== n)
         throw m(`SHA-${n}`, "algorithm.hash");
       break;
     }
     case "Ed25519":
     case "EdDSA": {
-      if (!A(t.algorithm, "Ed25519"))
+      if (!A(e.algorithm, "Ed25519"))
         throw m("Ed25519");
       break;
     }
     case "ML-DSA-44":
     case "ML-DSA-65":
     case "ML-DSA-87": {
-      if (!A(t.algorithm, e))
-        throw m(e);
+      if (!A(e.algorithm, t))
+        throw m(t);
       break;
     }
     case "ES256":
     case "ES384":
     case "ES512": {
-      if (!A(t.algorithm, "ECDSA"))
+      if (!A(e.algorithm, "ECDSA"))
         throw m("ECDSA");
-      const n = Ee(e);
-      if (t.algorithm.namedCurve !== n)
+      const n = Ae(t);
+      if (e.algorithm.namedCurve !== n)
         throw m(n, "algorithm.namedCurve");
       break;
     }
     default:
       throw new TypeError("CryptoKey does not support this operation");
   }
-  Ae(t, r);
+  Ke(e, r);
 }
-function re(t, e, ...r) {
+function se(e, t, ...r) {
   if (r = r.filter(Boolean), r.length > 2) {
     const n = r.pop();
-    t += `one of type ${r.join(", ")}, or ${n}.`;
-  } else r.length === 2 ? t += `one of type ${r[0]} or ${r[1]}.` : t += `of type ${r[0]}.`;
-  return e == null ? t += ` Received ${e}` : typeof e == "function" && e.name ? t += ` Received function ${e.name}` : typeof e == "object" && e != null && e.constructor?.name && (t += ` Received an instance of ${e.constructor.name}`), t;
+    e += `one of type ${r.join(", ")}, or ${n}.`;
+  } else r.length === 2 ? e += `one of type ${r[0]} or ${r[1]}.` : e += `of type ${r[0]}.`;
+  return t == null ? e += ` Received ${t}` : typeof t == "function" && t.name ? e += ` Received function ${t.name}` : typeof t == "object" && t != null && t.constructor?.name && (e += ` Received an instance of ${t.constructor.name}`), e;
 }
-const Te = (t, ...e) => re("Key must be ", t, ...e), ne = (t, e, ...r) => re(`Key for the ${t} algorithm must be `, e, ...r), se = (t) => {
-  if (t?.[Symbol.toStringTag] === "CryptoKey")
+const ve = (e, ...t) => se("Key must be ", e, ...t), ae = (e, t, ...r) => se(`Key for the ${e} algorithm must be `, t, ...r), ie = (e) => {
+  if (e?.[Symbol.toStringTag] === "CryptoKey")
     return !0;
   try {
-    return t instanceof CryptoKey;
+    return e instanceof CryptoKey;
   } catch {
     return !1;
   }
-}, ae = (t) => t?.[Symbol.toStringTag] === "KeyObject", ie = (t) => se(t) || ae(t);
-function ve(...t) {
-  const e = t.filter(Boolean);
-  if (e.length === 0 || e.length === 1)
+}, oe = (e) => e?.[Symbol.toStringTag] === "KeyObject", ce = (e) => ie(e) || oe(e);
+function Ce(...e) {
+  const t = e.filter(Boolean);
+  if (t.length === 0 || t.length === 1)
     return !0;
   let r;
-  for (const n of e) {
+  for (const n of t) {
     const s = Object.keys(n);
     if (!r || r.size === 0) {
       r = new Set(s);
@@ -525,33 +525,33 @@ function ve(...t) {
   }
   return !0;
 }
-const Ce = (t) => typeof t == "object" && t !== null;
-function E(t) {
-  if (!Ce(t) || Object.prototype.toString.call(t) !== "[object Object]")
+const _e = (e) => typeof e == "object" && e !== null;
+function E(e) {
+  if (!_e(e) || Object.prototype.toString.call(e) !== "[object Object]")
     return !1;
-  if (Object.getPrototypeOf(t) === null)
+  if (Object.getPrototypeOf(e) === null)
     return !0;
-  let e = t;
-  for (; Object.getPrototypeOf(e) !== null; )
-    e = Object.getPrototypeOf(e);
-  return Object.getPrototypeOf(t) === e;
-}
-function _e(t, e) {
-  if (t.startsWith("RS") || t.startsWith("PS")) {
-    const { modulusLength: r } = e.algorithm;
+  let t = e;
+  for (; Object.getPrototypeOf(t) !== null; )
+    t = Object.getPrototypeOf(t);
+  return Object.getPrototypeOf(e) === t;
+}
+function Re(e, t) {
+  if (e.startsWith("RS") || e.startsWith("PS")) {
+    const { modulusLength: r } = t.algorithm;
     if (typeof r != "number" || r < 2048)
-      throw new TypeError(`${t} requires key modulusLength to be 2048 bits or larger`);
+      throw new TypeError(`${e} requires key modulusLength to be 2048 bits or larger`);
   }
 }
-function Re(t) {
-  let e, r;
-  switch (t.kty) {
+function Pe(e) {
+  let t, r;
+  switch (e.kty) {
     case "AKP": {
-      switch (t.alg) {
+      switch (e.alg) {
         case "ML-DSA-44":
         case "ML-DSA-65":
         case "ML-DSA-87":
-          e = { name: t.alg }, r = t.priv ? ["sign"] : ["verify"];
+          t = { name: e.alg }, r = e.priv ? ["sign"] : ["verify"];
           break;
         default:
           throw new w('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
@@ -559,25 +559,25 @@ function Re(t) {
       break;
     }
     case "RSA": {
-      switch (t.alg) {
+      switch (e.alg) {
         case "PS256":
         case "PS384":
         case "PS512":
-          e = { name: "RSA-PSS", hash: `SHA-${t.alg.slice(-3)}` }, r = t.d ? ["sign"] : ["verify"];
+          t = { name: "RSA-PSS", hash: `SHA-${e.alg.slice(-3)}` }, r = e.d ? ["sign"] : ["verify"];
           break;
         case "RS256":
         case "RS384":
         case "RS512":
-          e = { name: "RSASSA-PKCS1-v1_5", hash: `SHA-${t.alg.slice(-3)}` }, r = t.d ? ["sign"] : ["verify"];
+          t = { name: "RSASSA-PKCS1-v1_5", hash: `SHA-${e.alg.slice(-3)}` }, r = e.d ? ["sign"] : ["verify"];
           break;
         case "RSA-OAEP":
         case "RSA-OAEP-256":
         case "RSA-OAEP-384":
         case "RSA-OAEP-512":
-          e = {
+          t = {
             name: "RSA-OAEP",
-            hash: `SHA-${parseInt(t.alg.slice(-3), 10) || 1}`
-          }, r = t.d ? ["decrypt", "unwrapKey"] : ["encrypt", "wrapKey"];
+            hash: `SHA-${parseInt(e.alg.slice(-3), 10) || 1}`
+          }, r = e.d ? ["decrypt", "unwrapKey"] : ["encrypt", "wrapKey"];
           break;
         default:
           throw new w('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
@@ -585,21 +585,21 @@ function Re(t) {
       break;
     }
     case "EC": {
-      switch (t.alg) {
+      switch (e.alg) {
         case "ES256":
-          e = { name: "ECDSA", namedCurve: "P-256" }, r = t.d ? ["sign"] : ["verify"];
+          t = { name: "ECDSA", namedCurve: "P-256" }, r = e.d ? ["sign"] : ["verify"];
           break;
         case "ES384":
-          e = { name: "ECDSA", namedCurve: "P-384" }, r = t.d ? ["sign"] : ["verify"];
+          t = { name: "ECDSA", namedCurve: "P-384" }, r = e.d ? ["sign"] : ["verify"];
           break;
         case "ES512":
-          e = { name: "ECDSA", namedCurve: "P-521" }, r = t.d ? ["sign"] : ["verify"];
+          t = { name: "ECDSA", namedCurve: "P-521" }, r = e.d ? ["sign"] : ["verify"];
           break;
         case "ECDH-ES":
         case "ECDH-ES+A128KW":
         case "ECDH-ES+A192KW":
         case "ECDH-ES+A256KW":
-          e = { name: "ECDH", namedCurve: t.crv }, r = t.d ? ["deriveBits"] : [];
+          t = { name: "ECDH", namedCurve: e.crv }, r = e.d ? ["deriveBits"] : [];
           break;
         default:
           throw new w('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
@@ -607,16 +607,16 @@ function Re(t) {
       break;
     }
     case "OKP": {
-      switch (t.alg) {
+      switch (e.alg) {
         case "Ed25519":
         case "EdDSA":
-          e = { name: "Ed25519" }, r = t.d ? ["sign"] : ["verify"];
+          t = { name: "Ed25519" }, r = e.d ? ["sign"] : ["verify"];
           break;
         case "ECDH-ES":
         case "ECDH-ES+A128KW":
         case "ECDH-ES+A192KW":
         case "ECDH-ES+A256KW":
-          e = { name: t.crv }, r = t.d ? ["deriveBits"] : [];
+          t = { name: e.crv }, r = e.d ? ["deriveBits"] : [];
           break;
         default:
           throw new w('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
@@ -626,78 +626,78 @@ function Re(t) {
     default:
       throw new w('Invalid or unsupported JWK "kty" (Key Type) Parameter value');
   }
-  return { algorithm: e, keyUsages: r };
+  return { algorithm: t, keyUsages: r };
 }
-async function R(t) {
-  if (!t.alg)
+async function R(e) {
+  if (!e.alg)
     throw new TypeError('"alg" argument is required when "jwk.alg" is not present');
-  const { algorithm: e, keyUsages: r } = Re(t), n = { ...t };
-  return n.kty !== "AKP" && delete n.alg, delete n.use, crypto.subtle.importKey("jwk", n, e, t.ext ?? !(t.d || t.priv), t.key_ops ?? r);
+  const { algorithm: t, keyUsages: r } = Pe(e), n = { ...e };
+  return n.kty !== "AKP" && delete n.alg, delete n.use, crypto.subtle.importKey("jwk", n, t, e.ext ?? !(e.d || e.priv), e.key_ops ?? r);
 }
-async function Pe(t, e, r) {
-  if (!E(t))
+async function We(e, t, r) {
+  if (!E(e))
     throw new TypeError("JWK must be an object");
   let n;
-  switch (e ??= t.alg, n ??= t.ext, t.kty) {
+  switch (t ??= e.alg, n ??= e.ext, e.kty) {
     case "oct":
-      if (typeof t.k != "string" || !t.k)
+      if (typeof e.k != "string" || !e.k)
         throw new TypeError('missing "k" (Key Value) Parameter value');
-      return C(t.k);
+      return C(e.k);
     case "RSA":
-      if ("oth" in t && t.oth !== void 0)
+      if ("oth" in e && e.oth !== void 0)
         throw new w('RSA JWK "oth" (Other Primes Info) Parameter value is not supported');
-      return R({ ...t, alg: e, ext: n });
+      return R({ ...e, alg: t, ext: n });
     case "AKP": {
-      if (typeof t.alg != "string" || !t.alg)
+      if (typeof e.alg != "string" || !e.alg)
         throw new TypeError('missing "alg" (Algorithm) Parameter value');
-      if (e !== void 0 && e !== t.alg)
+      if (t !== void 0 && t !== e.alg)
         throw new TypeError("JWK alg and alg option value mismatch");
-      return R({ ...t, ext: n });
+      return R({ ...e, ext: n });
     }
     case "EC":
     case "OKP":
-      return R({ ...t, alg: e, ext: n });
+      return R({ ...e, alg: t, ext: n });
     default:
       throw new w('Unsupported "kty" (Key Type) Parameter value');
   }
 }
-function We(t, e, r, n, s) {
+function ke(e, t, r, n, s) {
   if (s.crit !== void 0 && n?.crit === void 0)
-    throw new t('"crit" (Critical) Header Parameter MUST be integrity protected');
+    throw new e('"crit" (Critical) Header Parameter MUST be integrity protected');
   if (!n || n.crit === void 0)
     return /* @__PURE__ */ new Set();
   if (!Array.isArray(n.crit) || n.crit.length === 0 || n.crit.some((i) => typeof i != "string" || i.length === 0))
-    throw new t('"crit" (Critical) Header Parameter MUST be an array of non-empty strings when present');
+    throw new e('"crit" (Critical) Header Parameter MUST be an array of non-empty strings when present');
   let a;
-  a = e;
+  a = t;
   for (const i of n.crit) {
     if (!a.has(i))
       throw new w(`Extension Header Parameter "${i}" is not recognized`);
     if (s[i] === void 0)
-      throw new t(`Extension Header Parameter "${i}" is missing`);
+      throw new e(`Extension Header Parameter "${i}" is missing`);
     if (a.get(i) && n[i] === void 0)
-      throw new t(`Extension Header Parameter "${i}" MUST be integrity protected`);
+      throw new e(`Extension Header Parameter "${i}" MUST be integrity protected`);
   }
   return new Set(n.crit);
 }
-const L = (t) => E(t) && typeof t.kty == "string", ke = (t) => t.kty !== "oct" && (t.kty === "AKP" && typeof t.priv == "string" || typeof t.d == "string"), Ie = (t) => t.kty !== "oct" && t.d === void 0 && t.priv === void 0, Je = (t) => t.kty === "oct" && typeof t.k == "string";
+const L = (e) => E(e) && typeof e.kty == "string", Ie = (e) => e.kty !== "oct" && (e.kty === "AKP" && typeof e.priv == "string" || typeof e.d == "string"), Je = (e) => e.kty !== "oct" && e.d === void 0 && e.priv === void 0, xe = (e) => e.kty === "oct" && typeof e.k == "string";
 let T;
-const B = async (t, e, r, n = !1) => {
+const B = async (e, t, r, n = !1) => {
   T ||= /* @__PURE__ */ new WeakMap();
-  let s = T.get(t);
+  let s = T.get(e);
   if (s?.[r])
     return s[r];
-  const a = await R({ ...e, alg: r });
-  return n && Object.freeze(t), s ? s[r] = a : T.set(t, { [r]: a }), a;
-}, Ue = (t, e) => {
+  const a = await R({ ...t, alg: r });
+  return n && Object.freeze(e), s ? s[r] = a : T.set(e, { [r]: a }), a;
+}, Ue = (e, t) => {
   T ||= /* @__PURE__ */ new WeakMap();
-  let r = T.get(t);
-  if (r?.[e])
-    return r[e];
-  const n = t.type === "public", s = !!n;
+  let r = T.get(e);
+  if (r?.[t])
+    return r[t];
+  const n = e.type === "public", s = !!n;
   let a;
-  if (t.asymmetricKeyType === "x25519") {
-    switch (e) {
+  if (e.asymmetricKeyType === "x25519") {
+    switch (t) {
       case "ECDH-ES":
       case "ECDH-ES+A128KW":
       case "ECDH-ES+A192KW":
@@ -706,29 +706,29 @@ const B = async (t, e, r, n = !1) => {
       default:
         throw new TypeError("given KeyObject instance cannot be used for this algorithm");
     }
-    a = t.toCryptoKey(t.asymmetricKeyType, s, n ? [] : ["deriveBits"]);
+    a = e.toCryptoKey(e.asymmetricKeyType, s, n ? [] : ["deriveBits"]);
   }
-  if (t.asymmetricKeyType === "ed25519") {
-    if (e !== "EdDSA" && e !== "Ed25519")
+  if (e.asymmetricKeyType === "ed25519") {
+    if (t !== "EdDSA" && t !== "Ed25519")
       throw new TypeError("given KeyObject instance cannot be used for this algorithm");
-    a = t.toCryptoKey(t.asymmetricKeyType, s, [
+    a = e.toCryptoKey(e.asymmetricKeyType, s, [
       n ? "verify" : "sign"
     ]);
   }
-  switch (t.asymmetricKeyType) {
+  switch (e.asymmetricKeyType) {
     case "ml-dsa-44":
     case "ml-dsa-65":
     case "ml-dsa-87": {
-      if (e !== t.asymmetricKeyType.toUpperCase())
+      if (t !== e.asymmetricKeyType.toUpperCase())
         throw new TypeError("given KeyObject instance cannot be used for this algorithm");
-      a = t.toCryptoKey(t.asymmetricKeyType, s, [
+      a = e.toCryptoKey(e.asymmetricKeyType, s, [
         n ? "verify" : "sign"
       ]);
     }
   }
-  if (t.asymmetricKeyType === "rsa") {
+  if (e.asymmetricKeyType === "rsa") {
     let i;
-    switch (e) {
+    switch (t) {
       case "RSA-OAEP":
         i = "SHA-1";
         break;
@@ -750,64 +750,64 @@ const B = async (t, e, r, n = !1) => {
       default:
         throw new TypeError("given KeyObject instance cannot be used for this algorithm");
     }
-    if (e.startsWith("RSA-OAEP"))
-      return t.toCryptoKey({
+    if (t.startsWith("RSA-OAEP"))
+      return e.toCryptoKey({
         name: "RSA-OAEP",
         hash: i
       }, s, n ? ["encrypt"] : ["decrypt"]);
-    a = t.toCryptoKey({
-      name: e.startsWith("PS") ? "RSA-PSS" : "RSASSA-PKCS1-v1_5",
+    a = e.toCryptoKey({
+      name: t.startsWith("PS") ? "RSA-PSS" : "RSASSA-PKCS1-v1_5",
       hash: i
     }, s, [n ? "verify" : "sign"]);
   }
-  if (t.asymmetricKeyType === "ec") {
+  if (e.asymmetricKeyType === "ec") {
     const c = (/* @__PURE__ */ new Map([
       ["prime256v1", "P-256"],
       ["secp384r1", "P-384"],
       ["secp521r1", "P-521"]
-    ])).get(t.asymmetricKeyDetails?.namedCurve);
+    ])).get(e.asymmetricKeyDetails?.namedCurve);
     if (!c)
       throw new TypeError("given KeyObject instance cannot be used for this algorithm");
-    e === "ES256" && c === "P-256" && (a = t.toCryptoKey({
+    t === "ES256" && c === "P-256" && (a = e.toCryptoKey({
       name: "ECDSA",
       namedCurve: c
-    }, s, [n ? "verify" : "sign"])), e === "ES384" && c === "P-384" && (a = t.toCryptoKey({
+    }, s, [n ? "verify" : "sign"])), t === "ES384" && c === "P-384" && (a = e.toCryptoKey({
       name: "ECDSA",
       namedCurve: c
-    }, s, [n ? "verify" : "sign"])), e === "ES512" && c === "P-521" && (a = t.toCryptoKey({
+    }, s, [n ? "verify" : "sign"])), t === "ES512" && c === "P-521" && (a = e.toCryptoKey({
       name: "ECDSA",
       namedCurve: c
-    }, s, [n ? "verify" : "sign"])), e.startsWith("ECDH-ES") && (a = t.toCryptoKey({
+    }, s, [n ? "verify" : "sign"])), t.startsWith("ECDH-ES") && (a = e.toCryptoKey({
       name: "ECDH",
       namedCurve: c
     }, s, n ? [] : ["deriveBits"]));
   }
   if (!a)
     throw new TypeError("given KeyObject instance cannot be used for this algorithm");
-  return r ? r[e] = a : T.set(t, { [e]: a }), a;
+  return r ? r[t] = a : T.set(e, { [t]: a }), a;
 };
-async function xe(t, e) {
-  if (t instanceof Uint8Array || se(t))
-    return t;
-  if (ae(t)) {
-    if (t.type === "secret")
-      return t.export();
-    if ("toCryptoKey" in t && typeof t.toCryptoKey == "function")
+async function De(e, t) {
+  if (e instanceof Uint8Array || ie(e))
+    return e;
+  if (oe(e)) {
+    if (e.type === "secret")
+      return e.export();
+    if ("toCryptoKey" in e && typeof e.toCryptoKey == "function")
       try {
-        return Ue(t, e);
+        return Ue(e, t);
       } catch (n) {
         if (n instanceof TypeError)
           throw n;
       }
-    let r = t.export({ format: "jwk" });
-    return B(t, r, e);
+    let r = e.export({ format: "jwk" });
+    return B(e, r, t);
   }
-  if (L(t))
-    return t.k ? C(t.k) : B(t, t, e, !0);
+  if (L(e))
+    return e.k ? C(e.k) : B(e, e, t, !0);
   throw new Error("unreachable");
 }
-const K = (t) => t?.[Symbol.toStringTag], O = (t, e, r) => {
-  if (e.use !== void 0) {
+const K = (e) => e?.[Symbol.toStringTag], M = (e, t, r) => {
+  if (t.use !== void 0) {
     let n;
     switch (r) {
       case "sign":
@@ -819,97 +819,97 @@ const K = (t) => t?.[Symbol.toStringTag], O = (t, e, r) => {
         n = "enc";
         break;
     }
-    if (e.use !== n)
+    if (t.use !== n)
       throw new TypeError(`Invalid key for this operation, its "use" must be "${n}" when present`);
   }
-  if (e.alg !== void 0 && e.alg !== t)
-    throw new TypeError(`Invalid key for this operation, its "alg" must be "${t}" when present`);
-  if (Array.isArray(e.key_ops)) {
+  if (t.alg !== void 0 && t.alg !== e)
+    throw new TypeError(`Invalid key for this operation, its "alg" must be "${e}" when present`);
+  if (Array.isArray(t.key_ops)) {
     let n;
     switch (!0) {
       case r === "verify":
-      case t === "dir":
-      case t.includes("CBC-HS"):
+      case e === "dir":
+      case e.includes("CBC-HS"):
         n = r;
         break;
-      case t.startsWith("PBES2"):
+      case e.startsWith("PBES2"):
         n = "deriveBits";
         break;
-      case /^A\d{3}(?:GCM)?(?:KW)?$/.test(t):
-        !t.includes("GCM") && t.endsWith("KW") ? n = "unwrapKey" : n = r;
+      case /^A\d{3}(?:GCM)?(?:KW)?$/.test(e):
+        !e.includes("GCM") && e.endsWith("KW") ? n = "unwrapKey" : n = r;
         break;
       case r === "encrypt":
         n = "wrapKey";
         break;
       case r === "decrypt":
-        n = t.startsWith("RSA") ? "unwrapKey" : "deriveBits";
+        n = e.startsWith("RSA") ? "unwrapKey" : "deriveBits";
         break;
     }
-    if (n && e.key_ops?.includes?.(n) === !1)
+    if (n && t.key_ops?.includes?.(n) === !1)
       throw new TypeError(`Invalid key for this operation, its "key_ops" must include "${n}" when present`);
   }
   return !0;
-}, De = (t, e, r) => {
-  if (!(e instanceof Uint8Array)) {
-    if (L(e)) {
-      if (Je(e) && O(t, e, r))
+}, Me = (e, t, r) => {
+  if (!(t instanceof Uint8Array)) {
+    if (L(t)) {
+      if (xe(t) && M(e, t, r))
         return;
       throw new TypeError('JSON Web Key for symmetric algorithms must have JWK "kty" (Key Type) equal to "oct" and the JWK "k" (Key Value) present');
     }
-    if (!ie(e))
-      throw new TypeError(ne(t, e, "CryptoKey", "KeyObject", "JSON Web Key", "Uint8Array"));
-    if (e.type !== "secret")
-      throw new TypeError(`${K(e)} instances for symmetric algorithms must be of type "secret"`);
+    if (!ce(t))
+      throw new TypeError(ae(e, t, "CryptoKey", "KeyObject", "JSON Web Key", "Uint8Array"));
+    if (t.type !== "secret")
+      throw new TypeError(`${K(t)} instances for symmetric algorithms must be of type "secret"`);
   }
-}, Oe = (t, e, r) => {
-  if (L(e))
+}, Oe = (e, t, r) => {
+  if (L(t))
     switch (r) {
       case "decrypt":
       case "sign":
-        if (ke(e) && O(t, e, r))
+        if (Ie(t) && M(e, t, r))
           return;
         throw new TypeError("JSON Web Key for this operation must be a private JWK");
       case "encrypt":
       case "verify":
-        if (Ie(e) && O(t, e, r))
+        if (Je(t) && M(e, t, r))
           return;
         throw new TypeError("JSON Web Key for this operation must be a public JWK");
     }
-  if (!ie(e))
-    throw new TypeError(ne(t, e, "CryptoKey", "KeyObject", "JSON Web Key"));
-  if (e.type === "secret")
-    throw new TypeError(`${K(e)} instances for asymmetric algorithms must not be of type "secret"`);
-  if (e.type === "public")
+  if (!ce(t))
+    throw new TypeError(ae(e, t, "CryptoKey", "KeyObject", "JSON Web Key"));
+  if (t.type === "secret")
+    throw new TypeError(`${K(t)} instances for asymmetric algorithms must not be of type "secret"`);
+  if (t.type === "public")
     switch (r) {
       case "sign":
-        throw new TypeError(`${K(e)} instances for asymmetric algorithm signing must be of type "private"`);
+        throw new TypeError(`${K(t)} instances for asymmetric algorithm signing must be of type "private"`);
       case "decrypt":
-        throw new TypeError(`${K(e)} instances for asymmetric algorithm decryption must be of type "private"`);
+        throw new TypeError(`${K(t)} instances for asymmetric algorithm decryption must be of type "private"`);
     }
-  if (e.type === "private")
+  if (t.type === "private")
     switch (r) {
       case "verify":
-        throw new TypeError(`${K(e)} instances for asymmetric algorithm verifying must be of type "public"`);
+        throw new TypeError(`${K(t)} instances for asymmetric algorithm verifying must be of type "public"`);
       case "encrypt":
-        throw new TypeError(`${K(e)} instances for asymmetric algorithm encryption must be of type "public"`);
+        throw new TypeError(`${K(t)} instances for asymmetric algorithm encryption must be of type "public"`);
     }
 };
-function Me(t, e, r) {
-  switch (t.substring(0, 2)) {
+function He(e, t, r) {
+  switch (e.substring(0, 2)) {
     case "A1":
     case "A2":
     case "di":
     case "HS":
     case "PB":
-      De(t, e, r);
+      Me(e, t, r);
       break;
     default:
-      Oe(t, e, r);
+      Oe(e, t, r);
   }
 }
-function He(t, e) {
-  const r = `SHA-${t.slice(-3)}`;
-  switch (t) {
+function Ne(e, t) {
+  const r = `SHA-${e.slice(-3)}`;
+  switch (e) {
     case "HS256":
     case "HS384":
     case "HS512":
@@ -917,7 +917,7 @@ function He(t, e) {
     case "PS256":
     case "PS384":
     case "PS512":
-      return { hash: r, name: "RSA-PSS", saltLength: parseInt(t.slice(-3), 10) >> 3 };
+      return { hash: r, name: "RSA-PSS", saltLength: parseInt(e.slice(-3), 10) >> 3 };
     case "RS256":
     case "RS384":
     case "RS512":
@@ -925,63 +925,63 @@ function He(t, e) {
     case "ES256":
     case "ES384":
     case "ES512":
-      return { hash: r, name: "ECDSA", namedCurve: e.namedCurve };
+      return { hash: r, name: "ECDSA", namedCurve: t.namedCurve };
     case "Ed25519":
     case "EdDSA":
       return { name: "Ed25519" };
     case "ML-DSA-44":
     case "ML-DSA-65":
     case "ML-DSA-87":
-      return { name: t };
+      return { name: e };
     default:
-      throw new w(`alg ${t} is not supported either by JOSE or your javascript runtime`);
+      throw new w(`alg ${e} is not supported either by JOSE or your javascript runtime`);
   }
 }
-async function Ne(t, e, r) {
-  if (e instanceof Uint8Array) {
-    if (!t.startsWith("HS"))
-      throw new TypeError(Te(e, "CryptoKey", "KeyObject", "JSON Web Key"));
-    return crypto.subtle.importKey("raw", e, { hash: `SHA-${t.slice(-3)}`, name: "HMAC" }, !1, [r]);
+async function $e(e, t, r) {
+  if (t instanceof Uint8Array) {
+    if (!e.startsWith("HS"))
+      throw new TypeError(ve(t, "CryptoKey", "KeyObject", "JSON Web Key"));
+    return crypto.subtle.importKey("raw", t, { hash: `SHA-${e.slice(-3)}`, name: "HMAC" }, !1, [r]);
   }
-  return Ke(e, t, r), e;
+  return Te(t, e, r), t;
 }
-async function $e(t, e, r, n) {
-  const s = await Ne(t, e, "verify");
-  _e(t, s);
-  const a = He(t, s.algorithm);
+async function Le(e, t, r, n) {
+  const s = await $e(e, t, "verify");
+  Re(e, s);
+  const a = Ne(e, s.algorithm);
   try {
     return await crypto.subtle.verify(a, s, r, n);
   } catch {
     return !1;
   }
 }
-async function Le(t, e, r) {
-  if (!E(t))
+async function Fe(e, t, r) {
+  if (!E(e))
     throw new f("Flattened JWS must be an object");
-  if (t.protected === void 0 && t.header === void 0)
+  if (e.protected === void 0 && e.header === void 0)
     throw new f('Flattened JWS must have either of the "protected" or "header" members');
-  if (t.protected !== void 0 && typeof t.protected != "string")
+  if (e.protected !== void 0 && typeof e.protected != "string")
     throw new f("JWS Protected Header incorrect type");
-  if (t.payload === void 0)
+  if (e.payload === void 0)
     throw new f("JWS Payload missing");
-  if (typeof t.signature != "string")
+  if (typeof e.signature != "string")
     throw new f("JWS Signature missing or incorrect type");
-  if (t.header !== void 0 && !E(t.header))
+  if (e.header !== void 0 && !E(e.header))
     throw new f("JWS Unprotected Header incorrect type");
   let n = {};
-  if (t.protected)
+  if (e.protected)
     try {
-      const P = C(t.protected);
+      const P = C(e.protected);
       n = JSON.parse(_.decode(P));
     } catch {
       throw new f("JWS Protected Header is invalid");
     }
-  if (!ve(n, t.header))
+  if (!Ce(n, e.header))
     throw new f("JWS Protected and JWS Unprotected Header Parameter names must be disjoint");
   const s = {
     ...n,
-    ...t.header
-  }, a = We(f, /* @__PURE__ */ new Map([["b64", !0]]), r?.crit, n, s);
+    ...e.header
+  }, a = ke(f, /* @__PURE__ */ new Map([["b64", !0]]), r?.crit, n, s);
   let i = !0;
   if (a.has("b64") && (i = n.b64, typeof i != "boolean"))
     throw new f('The "b64" (base64url-encode payload) Header Parameter must be a boolean');
@@ -989,48 +989,48 @@ async function Le(t, e, r) {
   if (typeof c != "string" || !c)
     throw new f('JWS "alg" (Algorithm) Header Parameter missing or invalid');
   if (i) {
-    if (typeof t.payload != "string")
+    if (typeof e.payload != "string")
       throw new f("JWS Payload must be a string");
-  } else if (typeof t.payload != "string" && !(t.payload instanceof Uint8Array))
+  } else if (typeof e.payload != "string" && !(e.payload instanceof Uint8Array))
     throw new f("JWS Payload must be a string or an Uint8Array instance");
-  let u = !1;
-  typeof e == "function" && (e = await e(n, t), u = !0), Me(c, e, "verify");
-  const h = me(t.protected !== void 0 ? J(t.protected) : new Uint8Array(), J("."), typeof t.payload == "string" ? i ? J(t.payload) : G.encode(t.payload) : t.payload);
+  let h = !1;
+  typeof t == "function" && (t = await t(n, e), h = !0), He(c, t, "verify");
+  const u = we(e.protected !== void 0 ? J(e.protected) : new Uint8Array(), J("."), typeof e.payload == "string" ? i ? J(e.payload) : G.encode(e.payload) : e.payload);
   let o;
   try {
-    o = C(t.signature);
+    o = C(e.signature);
   } catch {
     throw new f("Failed to base64url decode the signature");
   }
-  const d = await xe(e, c);
-  if (!await $e(c, d, o, h))
-    throw new be();
+  const d = await De(t, c);
+  if (!await Le(c, d, o, u))
+    throw new Ee();
   let b;
   if (i)
     try {
-      b = C(t.payload);
+      b = C(e.payload);
     } catch {
       throw new f("Failed to base64url decode the payload");
     }
-  else typeof t.payload == "string" ? b = G.encode(t.payload) : b = t.payload;
+  else typeof e.payload == "string" ? b = G.encode(e.payload) : b = e.payload;
   const p = { payload: b };
-  return t.protected !== void 0 && (p.protectedHeader = n), t.header !== void 0 && (p.unprotectedHeader = t.header), u ? { ...p, key: d } : p;
+  return e.protected !== void 0 && (p.protectedHeader = n), e.header !== void 0 && (p.unprotectedHeader = e.header), h ? { ...p, key: d } : p;
 }
-async function Fe(t, e, r) {
-  if (t instanceof Uint8Array && (t = _.decode(t)), typeof t != "string")
+async function Ve(e, t, r) {
+  if (e instanceof Uint8Array && (e = _.decode(e)), typeof e != "string")
     throw new f("Compact JWS must be a string or Uint8Array");
-  const { 0: n, 1: s, 2: a, length: i } = t.split(".");
+  const { 0: n, 1: s, 2: a, length: i } = e.split(".");
   if (i !== 3)
     throw new f("Invalid Compact JWS");
-  const c = await Le({ payload: s, protected: n, signature: a }, e, r), u = { payload: c.payload, protectedHeader: c.protectedHeader };
-  return typeof e == "function" ? { ...u, key: c.key } : u;
+  const c = await Fe({ payload: s, protected: n, signature: a }, t, r), h = { payload: c.payload, protectedHeader: c.protectedHeader };
+  return typeof t == "function" ? { ...h, key: c.key } : h;
 }
-const Ve = (t) => Math.floor(t.getTime() / 1e3), oe = 60, ce = oe * 60, F = ce * 24, Ge = F * 7, ze = F * 365.25, Be = /^(\+|\-)? ?(\d+|\d+\.\d+) ?(seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|weeks?|w|years?|yrs?|y)(?: (ago|from now))?$/i;
-function q(t) {
-  const e = Be.exec(t);
-  if (!e || e[4] && e[1])
+const Ge = (e) => Math.floor(e.getTime() / 1e3), ue = 60, he = ue * 60, F = he * 24, ze = F * 7, Be = F * 365.25, qe = /^(\+|\-)? ?(\d+|\d+\.\d+) ?(seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|weeks?|w|years?|yrs?|y)(?: (ago|from now))?$/i;
+function q(e) {
+  const t = qe.exec(e);
+  if (!t || t[4] && t[1])
     throw new TypeError("Invalid time period format");
-  const r = parseFloat(e[2]), n = e[3].toLowerCase();
+  const r = parseFloat(t[2]), n = t[3].toLowerCase();
   let s;
   switch (n) {
     case "sec":
@@ -1045,14 +1045,14 @@ function q(t) {
     case "min":
     case "mins":
     case "m":
-      s = Math.round(r * oe);
+      s = Math.round(r * ue);
       break;
     case "hour":
     case "hours":
     case "hr":
     case "hrs":
     case "h":
-      s = Math.round(r * ce);
+      s = Math.round(r * he);
       break;
     case "day":
     case "days":
@@ -1062,28 +1062,28 @@ function q(t) {
     case "week":
     case "weeks":
     case "w":
-      s = Math.round(r * Ge);
+      s = Math.round(r * ze);
       break;
     default:
-      s = Math.round(r * ze);
+      s = Math.round(r * Be);
       break;
   }
-  return e[1] === "-" || e[4] === "ago" ? -s : s;
+  return t[1] === "-" || t[4] === "ago" ? -s : s;
 }
-const Y = (t) => t.includes("/") ? t.toLowerCase() : `application/${t.toLowerCase()}`, qe = (t, e) => typeof t == "string" ? e.includes(t) : Array.isArray(t) ? e.some(Set.prototype.has.bind(new Set(t))) : !1;
-function Ye(t, e, r = {}) {
+const Y = (e) => e.includes("/") ? e.toLowerCase() : `application/${e.toLowerCase()}`, Ye = (e, t) => typeof e == "string" ? t.includes(e) : Array.isArray(e) ? t.some(Set.prototype.has.bind(new Set(e))) : !1;
+function Xe(e, t, r = {}) {
   let n;
   try {
-    n = JSON.parse(_.decode(e));
+    n = JSON.parse(_.decode(t));
   } catch {
   }
   if (!E(n))
-    throw new j("JWT Claims Set must be a top-level JSON object");
+    throw new te("JWT Claims Set must be a top-level JSON object");
   const { typ: s } = r;
-  if (s && (typeof t.typ != "string" || Y(t.typ) !== Y(s)))
+  if (s && (typeof e.typ != "string" || Y(e.typ) !== Y(s)))
     throw new y('unexpected "typ" JWT header value', n, "typ", "check_failed");
-  const { requiredClaims: a = [], issuer: i, subject: c, audience: u, maxTokenAge: h } = r, o = [...a];
-  h !== void 0 && o.push("iat"), u !== void 0 && o.push("aud"), c !== void 0 && o.push("sub"), i !== void 0 && o.push("iss");
+  const { requiredClaims: a = [], issuer: i, subject: c, audience: h, maxTokenAge: u } = r, o = [...a];
+  u !== void 0 && o.push("iat"), h !== void 0 && o.push("aud"), c !== void 0 && o.push("sub"), i !== void 0 && o.push("iss");
   for (const p of new Set(o.reverse()))
     if (!(p in n))
       throw new y(`missing required "${p}" claim`, n, p, "missing");
@@ -1091,7 +1091,7 @@ function Ye(t, e, r = {}) {
     throw new y('unexpected "iss" claim value', n, "iss", "check_failed");
   if (c && n.sub !== c)
     throw new y('unexpected "sub" claim value', n, "sub", "check_failed");
-  if (u && !qe(n.aud, typeof u == "string" ? [u] : u))
+  if (h && !Ye(n.aud, typeof h == "string" ? [h] : h))
     throw new y('unexpected "aud" claim value', n, "aud", "check_failed");
   let d;
   switch (typeof r.clockTolerance) {
@@ -1107,8 +1107,8 @@ function Ye(t, e, r = {}) {
     default:
       throw new TypeError("Invalid clockTolerance option type");
   }
-  const { currentDate: V } = r, b = Ve(V || /* @__PURE__ */ new Date());
-  if ((n.iat !== void 0 || h) && typeof n.iat != "number")
+  const { currentDate: V } = r, b = Ge(V || /* @__PURE__ */ new Date());
+  if ((n.iat !== void 0 || u) && typeof n.iat != "number")
     throw new y('"iat" claim must be a number', n, "iat", "invalid");
   if (n.nbf !== void 0) {
     if (typeof n.nbf != "number")
@@ -1122,8 +1122,8 @@ function Ye(t, e, r = {}) {
     if (n.exp <= b - d)
       throw new z('"exp" claim timestamp check failed', n, "exp", "check_failed");
   }
-  if (h) {
-    const p = b - n.iat, P = typeof h == "number" ? h : q(h);
+  if (u) {
+    const p = b - n.iat, P = typeof u == "number" ? u : q(u);
     if (p - d > P)
       throw new z('"iat" claim timestamp check failed (too far in the past)', n, "iat", "check_failed");
     if (p < 0 - d)
@@ -1131,15 +1131,15 @@ function Ye(t, e, r = {}) {
   }
   return n;
 }
-async function Xe(t, e, r) {
-  const n = await Fe(t, e, r);
+async function Qe(e, t, r) {
+  const n = await Ve(e, t, r);
   if (n.protectedHeader.crit?.includes("b64") && n.protectedHeader.b64 === !1)
-    throw new j("JWTs MUST NOT use unencoded payload");
-  const a = { payload: Ye(n.protectedHeader, n.payload, r), protectedHeader: n.protectedHeader };
-  return typeof e == "function" ? { ...a, key: n.key } : a;
+    throw new te("JWTs MUST NOT use unencoded payload");
+  const a = { payload: Xe(n.protectedHeader, n.payload, r), protectedHeader: n.protectedHeader };
+  return typeof t == "function" ? { ...a, key: n.key } : a;
 }
-function Qe(t) {
-  switch (typeof t == "string" && t.slice(0, 2)) {
+function Ze(e) {
+  switch (typeof e == "string" && e.slice(0, 2)) {
     case "RS":
     case "PS":
       return "RSA";
@@ -1153,94 +1153,94 @@ function Qe(t) {
       throw new w('Unsupported "alg" value for a JSON Web Key Set');
   }
 }
-function Ze(t) {
-  return t && typeof t == "object" && Array.isArray(t.keys) && t.keys.every(je);
+function je(e) {
+  return e && typeof e == "object" && Array.isArray(e.keys) && e.keys.every(et);
 }
-function je(t) {
-  return E(t);
+function et(e) {
+  return E(e);
 }
-class et {
+class tt {
   #r;
   #i = /* @__PURE__ */ new WeakMap();
-  constructor(e) {
-    if (!Ze(e))
-      throw new ee("JSON Web Key Set malformed");
-    this.#r = structuredClone(e);
+  constructor(t) {
+    if (!je(t))
+      throw new re("JSON Web Key Set malformed");
+    this.#r = structuredClone(t);
   }
   jwks() {
     return this.#r;
   }
-  async getKey(e, r) {
-    const { alg: n, kid: s } = { ...e, ...r?.header }, a = Qe(n), i = this.#r.keys.filter((h) => {
-      let o = a === h.kty;
-      if (o && typeof s == "string" && (o = s === h.kid), o && (typeof h.alg == "string" || a === "AKP") && (o = n === h.alg), o && typeof h.use == "string" && (o = h.use === "sig"), o && Array.isArray(h.key_ops) && (o = h.key_ops.includes("verify")), o)
+  async getKey(t, r) {
+    const { alg: n, kid: s } = { ...t, ...r?.header }, a = Ze(n), i = this.#r.keys.filter((u) => {
+      let o = a === u.kty;
+      if (o && typeof s == "string" && (o = s === u.kid), o && (typeof u.alg == "string" || a === "AKP") && (o = n === u.alg), o && typeof u.use == "string" && (o = u.use === "sig"), o && Array.isArray(u.key_ops) && (o = u.key_ops.includes("verify")), o)
         switch (n) {
           case "ES256":
-            o = h.crv === "P-256";
+            o = u.crv === "P-256";
             break;
           case "ES384":
-            o = h.crv === "P-384";
+            o = u.crv === "P-384";
             break;
           case "ES512":
-            o = h.crv === "P-521";
+            o = u.crv === "P-521";
             break;
           case "Ed25519":
           case "EdDSA":
-            o = h.crv === "Ed25519";
+            o = u.crv === "Ed25519";
             break;
         }
       return o;
-    }), { 0: c, length: u } = i;
-    if (u === 0)
-      throw new te();
-    if (u !== 1) {
-      const h = new Se(), o = this.#i;
-      throw h[Symbol.asyncIterator] = async function* () {
+    }), { 0: c, length: h } = i;
+    if (h === 0)
+      throw new ne();
+    if (h !== 1) {
+      const u = new ge(), o = this.#i;
+      throw u[Symbol.asyncIterator] = async function* () {
         for (const d of i)
           try {
             yield await X(o, d, n);
           } catch {
           }
-      }, h;
+      }, u;
     }
     return X(this.#i, c, n);
   }
 }
-async function X(t, e, r) {
-  const n = t.get(e) || t.set(e, {}).get(e);
+async function X(e, t, r) {
+  const n = e.get(t) || e.set(t, {}).get(t);
   if (n[r] === void 0) {
-    const s = await Pe({ ...e, ext: !0 }, r);
+    const s = await We({ ...t, ext: !0 }, r);
     if (s instanceof Uint8Array || s.type !== "public")
-      throw new ee("JSON Web Key Set members must be public keys");
+      throw new re("JSON Web Key Set members must be public keys");
     n[r] = s;
   }
   return n[r];
 }
-function Q(t) {
-  const e = new et(t), r = async (n, s) => e.getKey(n, s);
+function Q(e) {
+  const t = new tt(e), r = async (n, s) => t.getKey(n, s);
   return Object.defineProperties(r, {
     jwks: {
-      value: () => structuredClone(e.jwks()),
+      value: () => structuredClone(t.jwks()),
       enumerable: !1,
       configurable: !1,
       writable: !1
     }
   }), r;
 }
-function tt() {
+function rt() {
   return typeof WebSocketPair < "u" || typeof navigator < "u" && navigator.userAgent === "Cloudflare-Workers" || typeof EdgeRuntime < "u" && EdgeRuntime === "vercel";
 }
-let M;
-(typeof navigator > "u" || !navigator.userAgent?.startsWith?.("Mozilla/5.0 ")) && (M = "jose/v6.1.3");
-const rt = /* @__PURE__ */ Symbol();
-async function nt(t, e, r, n = fetch) {
-  const s = await n(t, {
+let O;
+(typeof navigator > "u" || !navigator.userAgent?.startsWith?.("Mozilla/5.0 ")) && (O = "jose/v6.1.3");
+const nt = /* @__PURE__ */ Symbol();
+async function st(e, t, r, n = fetch) {
+  const s = await n(e, {
     method: "GET",
     signal: r,
     redirect: "manual",
-    headers: e
+    headers: t
   }).catch((a) => {
-    throw a.name === "TimeoutError" ? new ge() : a;
+    throw a.name === "TimeoutError" ? new be() : a;
   });
   if (s.status !== 200)
     throw new l("Expected 200 OK from the JSON Web Key Set HTTP response");
@@ -1250,11 +1250,11 @@ async function nt(t, e, r, n = fetch) {
     throw new l("Failed to parse the JSON Web Key Set HTTP response as JSON");
   }
 }
-const x = /* @__PURE__ */ Symbol();
-function st(t, e) {
-  return !(typeof t != "object" || t === null || !("uat" in t) || typeof t.uat != "number" || Date.now() - t.uat >= e || !("jwks" in t) || !E(t.jwks) || !Array.isArray(t.jwks.keys) || !Array.prototype.every.call(t.jwks.keys, E));
+const U = /* @__PURE__ */ Symbol();
+function at(e, t) {
+  return !(typeof e != "object" || e === null || !("uat" in e) || typeof e.uat != "number" || Date.now() - e.uat >= t || !("jwks" in e) || !E(e.jwks) || !Array.isArray(e.jwks.keys) || !Array.prototype.every.call(e.jwks.keys, E));
 }
-class at {
+class it {
   #r;
   #i;
   #c;
@@ -1262,13 +1262,13 @@ class at {
   #n;
   #e;
   #t;
-  #h;
+  #u;
   #s;
   #a;
-  constructor(e, r) {
-    if (!(e instanceof URL))
+  constructor(t, r) {
+    if (!(t instanceof URL))
       throw new TypeError("url must be an instance of URL");
-    this.#r = new URL(e.href), this.#i = typeof r?.timeoutDuration == "number" ? r?.timeoutDuration : 5e3, this.#c = typeof r?.cooldownDuration == "number" ? r?.cooldownDuration : 3e4, this.#o = typeof r?.cacheMaxAge == "number" ? r?.cacheMaxAge : 6e5, this.#t = new Headers(r?.headers), M && !this.#t.has("User-Agent") && this.#t.set("User-Agent", M), this.#t.has("accept") || (this.#t.set("accept", "application/json"), this.#t.append("accept", "application/jwk-set+json")), this.#h = r?.[rt], r?.[x] !== void 0 && (this.#a = r?.[x], st(r?.[x], this.#o) && (this.#n = this.#a.uat, this.#s = Q(this.#a.jwks)));
+    this.#r = new URL(t.href), this.#i = typeof r?.timeoutDuration == "number" ? r?.timeoutDuration : 5e3, this.#c = typeof r?.cooldownDuration == "number" ? r?.cooldownDuration : 3e4, this.#o = typeof r?.cacheMaxAge == "number" ? r?.cacheMaxAge : 6e5, this.#t = new Headers(r?.headers), O && !this.#t.has("User-Agent") && this.#t.set("User-Agent", O), this.#t.has("accept") || (this.#t.set("accept", "application/json"), this.#t.append("accept", "application/jwk-set+json")), this.#u = r?.[nt], r?.[U] !== void 0 && (this.#a = r?.[U], at(r?.[U], this.#o) && (this.#n = this.#a.uat, this.#s = Q(this.#a.jwks)));
   }
   pendingFetch() {
     return !!this.#e;
@@ -1282,26 +1282,26 @@ class at {
   jwks() {
     return this.#s?.jwks();
   }
-  async getKey(e, r) {
+  async getKey(t, r) {
     (!this.#s || !this.fresh()) && await this.reload();
     try {
-      return await this.#s(e, r);
+      return await this.#s(t, r);
     } catch (n) {
-      if (n instanceof te && this.coolingDown() === !1)
-        return await this.reload(), this.#s(e, r);
+      if (n instanceof ne && this.coolingDown() === !1)
+        return await this.reload(), this.#s(t, r);
       throw n;
     }
   }
   async reload() {
-    this.#e && tt() && (this.#e = void 0), this.#e ||= nt(this.#r.href, this.#t, AbortSignal.timeout(this.#i), this.#h).then((e) => {
-      this.#s = Q(e), this.#a && (this.#a.uat = Date.now(), this.#a.jwks = e), this.#n = Date.now(), this.#e = void 0;
-    }).catch((e) => {
-      throw this.#e = void 0, e;
+    this.#e && rt() && (this.#e = void 0), this.#e ||= st(this.#r.href, this.#t, AbortSignal.timeout(this.#i), this.#u).then((t) => {
+      this.#s = Q(t), this.#a && (this.#a.uat = Date.now(), this.#a.jwks = t), this.#n = Date.now(), this.#e = void 0;
+    }).catch((t) => {
+      throw this.#e = void 0, t;
     }), await this.#e;
   }
 }
-function it(t, e) {
-  const r = new at(t, e), n = async (s, a) => r.getKey(s, a);
+function ot(e, t) {
+  const r = new it(e, t), n = async (s, a) => r.getKey(s, a);
   return Object.defineProperties(n, {
     coolingDown: {
       get: () => r.coolingDown(),
@@ -1332,50 +1332,42 @@ function it(t, e) {
     }
   }), n;
 }
-class ot {
-  jwksUrl;
-  JWKS;
-  constructor(e) {
-    this.jwksUrl = e, this.JWKS = it(new URL(this.jwksUrl));
-  }
-  /**
-   * Verify a JWT against the JWKS
-   */
-  async verify(e) {
-    return Xe(e, this.JWKS);
-  }
+const Z = /* @__PURE__ */ new Map();
+async function ct(e, t = `${ee}/.well-known/jwks.json`) {
+  let r = Z.get(t);
+  return r || (r = ot(new URL(t)), Z.set(t, r)), Qe(e, r);
 }
-class ct {
+class ut {
   store = /* @__PURE__ */ new Map();
-  async get(e) {
-    return this.store.get(e) ?? null;
+  async get(t) {
+    return this.store.get(t) ?? null;
   }
-  async set(e, r) {
-    this.store.set(e, r);
+  async set(t, r) {
+    this.store.set(t, r);
   }
-  async remove(e) {
-    this.store.delete(e);
+  async remove(t) {
+    this.store.delete(t);
   }
   async clear() {
     this.store.clear();
   }
 }
-class Z {
+class j {
   prefix;
-  constructor(e = "genation") {
-    this.prefix = e;
+  constructor(t = "genation") {
+    this.prefix = t;
   }
-  getKey(e) {
-    return `${this.prefix}:${e}`;
+  getKey(t) {
+    return `${this.prefix}:${t}`;
   }
-  async get(e) {
-    return typeof window > "u" ? null : localStorage.getItem(this.getKey(e));
+  async get(t) {
+    return typeof window > "u" ? null : localStorage.getItem(this.getKey(t));
   }
-  async set(e, r) {
-    typeof window > "u" || localStorage.setItem(this.getKey(e), r);
+  async set(t, r) {
+    typeof window > "u" || localStorage.setItem(this.getKey(t), r);
   }
-  async remove(e) {
-    typeof window > "u" || localStorage.removeItem(this.getKey(e));
+  async remove(t) {
+    typeof window > "u" || localStorage.removeItem(this.getKey(t));
   }
   async clear() {
     if (typeof window > "u") return;
@@ -1386,20 +1378,20 @@ class Z {
 }
 class ht {
   prefix;
-  constructor(e = "genation") {
-    this.prefix = e;
+  constructor(t = "genation") {
+    this.prefix = t;
   }
-  getKey(e) {
-    return `${this.prefix}:${e}`;
+  getKey(t) {
+    return `${this.prefix}:${t}`;
   }
-  async get(e) {
-    return typeof window > "u" ? null : sessionStorage.getItem(this.getKey(e));
+  async get(t) {
+    return typeof window > "u" ? null : sessionStorage.getItem(this.getKey(t));
   }
-  async set(e, r) {
-    typeof window > "u" || sessionStorage.setItem(this.getKey(e), r);
+  async set(t, r) {
+    typeof window > "u" || sessionStorage.setItem(this.getKey(t), r);
   }
-  async remove(e) {
-    typeof window > "u" || sessionStorage.removeItem(this.getKey(e));
+  async remove(t) {
+    typeof window > "u" || sessionStorage.removeItem(this.getKey(t));
   }
   async clear() {
     if (typeof window > "u") return;
@@ -1408,59 +1400,57 @@ class ht {
     ).forEach((r) => sessionStorage.removeItem(r));
   }
 }
-function ut(t = "localStorage") {
-  switch (t) {
+function ft(e = "localStorage") {
+  switch (e) {
     case "memory":
-      return new ct();
+      return new ut();
     case "localStorage":
-      return new Z();
+      return new j();
     case "sessionStorage":
       return new ht();
     default:
-      return new Z();
+      return new j();
   }
 }
-function H(t) {
-  return Array.isArray(t) ? t.map(H) : typeof t == "object" && t !== null ? Object.fromEntries(
-    Object.entries(t).map(([e, r]) => [
-      e.replace(/_([a-z])/g, (n, s) => s.toUpperCase()),
+function H(e) {
+  return Array.isArray(e) ? e.map(H) : typeof e == "object" && e !== null ? Object.fromEntries(
+    Object.entries(e).map(([t, r]) => [
+      t.replace(/_([a-z])/g, (n, s) => s.toUpperCase()),
       H(r)
     ])
-  ) : t;
+  ) : e;
 }
-class ft {
+class dt {
   oauth;
   tokenManager;
-  tokenVerifier;
+  jwksUrl;
   http;
   httpServer;
   listeners = /* @__PURE__ */ new Set();
   initialized = !1;
-  constructor(e) {
-    this.validateConfig(e);
-    const r = typeof e.storage == "object" ? e.storage : ut(e.storage), n = e.authUrl ?? "https://mnnoheowoowbtpuoguul.supabase.co/auth/v1";
-    this.tokenManager = new le(r), this.oauth = new ye(e, this.tokenManager), this.tokenVerifier = new ot(
-      `${n}/.well-known/jwks.json`
-    ), this.http = new D({
+  constructor(t) {
+    this.validateConfig(t);
+    const r = typeof t.storage == "object" ? t.storage : ft(t.storage), n = t.authUrl ?? "https://mnnoheowoowbtpuoguul.supabase.co/auth/v1";
+    this.tokenManager = new ye(r), this.oauth = new me(t, this.tokenManager), this.jwksUrl = `${n}/.well-known/jwks.json`, this.http = new D({
       baseUrl: n
     }), this.httpServer = new D({
       baseUrl: "https://ff-api.genation.ai/api/v2/client"
     });
   }
-  validateConfig(e) {
-    if (!e.clientId) throw v.missingField("clientId");
-    if (!e.clientSecret)
+  validateConfig(t) {
+    if (!t.clientId) throw v.missingField("clientId");
+    if (!t.clientSecret)
       throw v.missingField("clientSecret");
-    if (!e.redirectUri) throw v.missingField("redirectUri");
+    if (!t.redirectUri) throw v.missingField("redirectUri");
   }
   /**
    * Emit auth state change event to all listeners
    */
-  async emitAuthStateChange(e) {
+  async emitAuthStateChange(t) {
     const r = await this.getSession();
     this.listeners.forEach((n) => {
       try {
-        n(e, r);
+        n(t, r);
       } catch (s) {
         console.error("Error in auth state change callback:", s);
       }
@@ -1501,15 +1491,15 @@ class ft {
    * subscription.unsubscribe();
    * ```
    */
-  onAuthStateChange(e) {
-    return this.listeners.add(e), this.initialized ? setTimeout(() => {
+  onAuthStateChange(t) {
+    return this.listeners.add(t), this.initialized ? setTimeout(() => {
       this.emitAuthStateChange("INITIAL_SESSION");
     }, 0) : (this.initialized = !0, setTimeout(() => {
       this.emitAuthStateChange("INITIAL_SESSION");
     }, 0)), {
       subscription: {
         unsubscribe: () => {
-          this.listeners.delete(e);
+          this.listeners.delete(t);
         }
       }
     };
@@ -1555,8 +1545,8 @@ class ft {
    * }
    * ```
    */
-  async handleCallback(e) {
-    const r = new URL(e), n = r.searchParams.get("code"), s = r.searchParams.get("state");
+  async handleCallback(t) {
+    const r = new URL(t), n = r.searchParams.get("code"), s = r.searchParams.get("state");
     if (!n || !s)
       throw new Error("Missing code or state");
     const a = await this.oauth.exchangeCode(n, s);
@@ -1627,8 +1617,8 @@ class ft {
    * @returns Decoded token payload if valid
    * @throws Error if token is invalid
    */
-  async verifyToken(e) {
-    const { payload: r } = await this.tokenVerifier.verify(e);
+  async verifyToken(t) {
+    const { payload: r } = await ct(t, this.jwksUrl);
     return r;
   }
   /**
@@ -1638,11 +1628,11 @@ class ft {
    * @param options.expiresAfter - Query licenses that are expired after the given date, default set to today to get all valid licenses (unexpired licenses)
    * @returns The licenses
    */
-  async getLicenses(e = {}) {
+  async getLicenses(t = {}) {
     const r = await this.getSession();
     if (!r)
       return null;
-    const n = r.accessToken, { expiresAfter: s = /* @__PURE__ */ new Date() } = e, a = await this.httpServer.request("/licenses", {
+    const n = r.accessToken, { expiresAfter: s = /* @__PURE__ */ new Date() } = t, a = await this.httpServer.request("/licenses", {
       headers: { Authorization: `Bearer ${n}` },
       params: { expiresAfter: s.toISOString() }
     });
@@ -1651,10 +1641,10 @@ class ft {
   /**
    * Fetch user info from auth server
    */
-  async fetchUser(e) {
+  async fetchUser(t) {
     try {
       const r = await this.http.request("/oauth/userinfo", {
-        headers: { Authorization: `Bearer ${e}` }
+        headers: { Authorization: `Bearer ${t}` }
       });
       return {
         sub: r.sub,
@@ -1670,19 +1660,20 @@ class ft {
     }
   }
 }
-function dt(t) {
-  return new ft(t);
+function lt(e) {
+  return new dt(e);
 }
 export {
   g as AuthError,
   v as ConfigError,
-  ft as GenationClient,
+  dt as GenationClient,
   N as GenationError,
-  Z as LocalStorage,
-  ct as MemoryStorage,
+  j as LocalStorage,
+  ut as MemoryStorage,
   S as NetworkError,
   ht as SessionStorage,
-  dt as createClient,
-  ut as createStorage
+  lt as createClient,
+  ft as createStorage,
+  ct as verifyToken
 };
 //# sourceMappingURL=genation.es.js.map