@sendoracloud/sdk-web 3.23.0 → 3.24.0

package/README.md

@@ -62,6 +62,74 @@ sendora.messages.startPolling();
 sendora.destroy();
 ```
 
+## Auth: status, held guests and the project guard (3.24.0+)
+
+```ts
+const auth = sendora.auth;
+
+// Boot: hydrate is synchronous; this never waits on the network.
+const status = await auth.authStateReady();
+switch (status) {
+  case "anonymous":
+  case "identified":
+    break; // a session is installed — auth.getCurrentUser()
+  case "signed_out":
+    await auth.ensureSession(); // restores a held guest, or mints one
+    break;
+  case "unknown":
+    break; // a stored session the next token refresh will settle; verbs wait for it
+  case "withheld":
+    break; // see expectedProjectId below — auth.getWithheld()
+  default:
+    break; // ⚠ REQUIRED: later values are additive
+}
+```
+
+⚠ **`status()` is the only way to tell `withheld` (and `unknown`) from `signed_out`** —
+`getCurrentUser()` is `null` and `isReady()` is `true` in all three. Always keep a `default` branch on
+`AuthStatus` and on `onAuthStateChanged`'s `event`: new values are added without a MAJOR.
+
+**Sign-in never deletes the guest.** Signing in from a guest session (password, social, magic link,
+email OTP, passkey, SSO, MFA) moves the guest into one of five on-device slots and installs the account:
+`onAuthStateChanged` emits `guest_held` then one `signed_in{cause:'sign_in'}`. What happens to the held
+guest is your call:
+
+```ts
+for (const g of auth.getHeldGuests()) {          // newest first; never exposes tokens
+  // no progress worth keeping → a real server delete, requested by your app
+  await auth.discardHeldGuest(g.userId);
+  // ...or sign back in as the guest:       await auth.restoreHeldGuest(g.userId);
+  // ...or fold it into the current account (OPTIONAL, irreversible — only if your
+  //    backend acts on the auth.user_merged webhook): await auth.claimHeldGuest(g.userId);
+}
+```
+
+The `id` may be omitted only when exactly one guest is held (`AMBIGUOUS_HELD_GUEST` otherwise). Nothing
+expires a held guest. `signOut()` keeps them (`sendora.reset()` is not an auth call on web — it resets
+analytics, flags and chat only); `deleteAccount()` keeps them with auto-restore off
+(`deleteAccount({ alsoDiscardHeldGuests: true })` discards them server-side). With `autoRestoreHeldGuest`
+on (the default) `ensureSession()` in `signed_out` restores the newest held guest instead of minting.
+
+**Link is the only upgrade.** `signUp()` from a guest, `link(credential)`, `link*()` and
+`loginSocial({ link: true })` attach the credential to the CURRENT account (same user id) or return a typed
+refusal — they never switch accounts:
+
+```ts
+const r = await auth.link({ kind: "password", email, password });
+if (r.status === "credential_in_use") {
+  // owned by another account: switch to it explicitly (the current guest is HELD), or stay
+  const ok = await confirm("That email has an account. Sign in to it?");
+  if (ok) await r.switchAccount(); else r.keepCurrent();
+} else if (r.status === "recent_auth_required") {
+  // re-authenticate with a credential already on this account, then retry
+}
+```
+
+**Project guard (opt-in).** `init({ expectedProjectId })` refuses a stored session whose token belongs to
+another project: `status()` is `"withheld"`, nothing is written to storage, every auth verb rejects
+`AuthError{kind:'config', code:'SESSION_WITHHELD'}`. Record `auth.getWithheld().userId` if your backend
+keys data on it, then `await auth.discardWithheld()` (local only; held guests and analytics ids are kept).
+
 ## Security model
 
 The SDK is designed for hostile browser environments:
@@ -94,6 +162,9 @@ The SDK is designed for hostile browser environments:
 | `flushInterval` | number | `5000` | Event flush interval in ms. |
 | `maxQueueSize` | number | `20` | Flush when queue reaches this size. |
 | `debug` | boolean | `false` | Log method/path/status (never keys or bodies). |
+| `tokenStore` | `"local"` \| `"memory"` | `"local"` | `"memory"` keeps every auth key (session + held guests) in memory for the life of the tab. |
+| `expectedProjectId` | string (UUID) | — | Opt-in project guard (3.24.0); must equal `projectId` when both are set. A mismatching stored session is `withheld`. |
+| `autoRestoreHeldGuest` | boolean | `true` | `ensureSession()` in `signed_out` restores the newest held guest before minting (3.24.0). |
 
 ## License
 

package/dist/index.cjs

@@ -1 +1 @@
-"use strict";var ae=Object.defineProperty;var Oe=Object.getOwnPropertyDescriptor;var Me=Object.getOwnPropertyNames;var Fe=Object.prototype.hasOwnProperty;var He=(n,e)=>{for(var t in e)ae(n,t,{get:e[t],enumerable:!0})},Ke=(n,e,t,r)=>{if(e&&typeof e=="object"||typeof e=="function")for(let s of Me(e))!Fe.call(n,s)&&s!==t&&ae(n,s,{get:()=>e[s],enumerable:!(r=Oe(e,s))||r.enumerable});return n};var Ve=n=>Ke(ae({},"__esModule",{value:!0}),n);var It={};He(It,{AlreadyIdentifiedError:()=>K,Analytics:()=>N,Audiences:()=>W,Auth:()=>V,AuthError:()=>c,Chatbot:()=>F,Consent:()=>H,CredentialInUseError:()=>D,EmailAlreadyTakenError:()=>C,FeatureFlags:()=>x,InAppMessaging:()=>M,LinkError:()=>p,Links:()=>B,SendoraCloud:()=>te,Surveys:()=>O,ValidationError:()=>f,WebPush:()=>$,default:()=>St,extractShortcodeFromUrl:()=>Ue,safeUrl:()=>I,sanitizeHtml:()=>Q});module.exports=Ve(It);var ge=/^[a-zA-Z][a-zA-Z0-9._:-]{0,127}$/;var $e=new Set(["__proto__","constructor","prototype"]),f=class extends Error{constructor(e){super(`[SendoraCloud] ${e}`),this.name="SendoraValidationError"}};function fe(n){if(typeof n!="string"||!ge.test(n))throw new f(`Invalid event name: must match ${ge}, got "${String(n)}".`)}function me(n){if(n==null)return;if(typeof n!="object"||Array.isArray(n))throw new f("Properties must be a plain object, not an array or primitive.");let e=ye(n);if(e>5)throw new f(`Properties nested too deeply (${e} levels, max 5).`);ve(n);let t;try{t=JSON.stringify(n).length}catch{throw new f("Properties contain a circular reference or unserializable value.")}if(t>32768)throw new f(`Properties too large (${t} bytes, max 32768).`)}function ye(n,e=0){if(e>6||n==null||typeof n!="object")return e;let t=e;for(let r of Object.keys(n)){let s=ye(n[r],e+1);s>t&&(t=s)}return t}function ve(n){if(!(n==null||typeof n!="object"))for(let e of Object.keys(n)){if($e.has(e))throw new f(`Forbidden property key "${e}" (prototype pollution guard).`);ve(n[e])}}var We=/^pk_[A-Za-z0-9_-]{16,}$/;function we(n){if(!n||typeof n!="string")throw new f("apiKey is required.");if(n.startsWith("sk_")||n.startsWith("sendora_secret_"))throw new f("Secret keys must NEVER be used in browser SDK. Use a publishable key (pk_...).");if(!We.test(n))throw new f("Invalid publishable key format. Expected pk_... (17+ chars).")}function ke(n){let e=n.replace(/\/$/,"");if(!(e.startsWith("http://localhost")||e.startsWith("http://127.0.0.1"))&&!e.startsWith("https://"))throw new f("apiUrl must be https:// (only http://localhost is allowed for dev).")}var Ae={name:"@sendoracloud/sdk-web",version:"3.23.0",description:"Sendora Cloud Web SDK \u2014 analytics, feature flags, surveys, in-app messaging, chatbot, auth, deep links (Branch / Firebase parity). Zero dependencies, TypeScript, SSR-safe.",type:"module",main:"./dist/index.cjs",module:"./dist/index.js",types:"./dist/index.d.ts",exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js",require:"./dist/index.cjs"}},files:["dist","README.md","LICENSE"],keywords:["sendora","analytics","feature-flags","surveys","in-app-messaging","chatbot","tracking","customer-engagement"],homepage:"https://sendoracloud.com/sdks",bugs:{url:"https://github.com/sendoracloud/sdk-web/issues"},author:"Sendora Cloud <hello@sendoracloud.com>",license:"Apache-2.0",publishConfig:{access:"public"},sideEffects:!1,scripts:{build:"tsup src/index.ts --format cjs,esm --dts --clean --minify",typecheck:"tsc --noEmit",prepublishOnly:"npm run build"},devDependencies:{typescript:"^5.4.0",tsup:"^8.0.0"}};var E=Ae.version;var qe="https://api.sendoracloud.com",ze=1e4,je="@sendoracloud/sdk-web",Y=class{constructor(e){let t=(e.apiUrl??qe).replace(/\/$/,"");ke(t),this.apiKey=e.apiKey,this.baseUrl=t,this.debug=!!e.debug}get(e,t){return this.request("GET",e,void 0,t)}post(e,t,r){return this.request("POST",e,t,r)}patch(e,t,r){return this.request("PATCH",e,t,r)}delete(e,t){return this.request("DELETE",e,void 0,t)}async request(e,t,r,s){let i=`${this.baseUrl}/api/v1${t}`,o=typeof AbortController<"u"?new AbortController:null,a=o?setTimeout(()=>o.abort(),ze):null;try{let u=await fetch(i,{method:e,headers:{"Content-Type":"application/json","X-API-Key":this.apiKey,"X-Sendora-SDK-Name":je,"X-Sendora-SDK-Version":E,...s??{}},body:r?JSON.stringify(r):void 0,signal:o?o.signal:void 0});a&&clearTimeout(a);let l;try{l=await u.json()}catch{l={success:!1,error:{code:"PARSE_ERROR",message:`HTTP ${u.status}`}}}if(this.debug&&console.debug(`[SendoraCloud] ${e} ${t} \u2192 ${u.status}`),!u.ok){if(t.startsWith("/auth-service/")&&!this.debug)console.warn(`[SendoraCloud] ${e} ${t} \u2192 HTTP ${u.status}`);else{let v=l?.error?.code??"HTTP_ERROR",w=l?.error?.message??`HTTP ${u.status}`,k=l?.error?.details?.fieldErrors,L=k?` (${Object.entries(k).map(([A,ne])=>`${A}: ${(ne??[]).join(", ")}`).join("; ")})`:"";console.warn(`[SendoraCloud] ${e} ${t} \u2192 HTTP ${u.status} \u2014 ${v}: ${w}${L}`)}l&&l.error&&(l.error={...l.error,status:u.status})}return l}catch(u){a&&clearTimeout(a);let l=u instanceof Error&&u.name==="AbortError"?"timeout":"error";return console.warn(`[SendoraCloud] ${e} ${t} network ${l}`),{success:!1,error:{code:"NETWORK_ERROR",message:l}}}}};var Ge="sendora_",X=class{constructor(e,t=!1){this.memoryStore=new Map;this.useLocalStorage=t?!1:this.checkLocalStorage(),this.prefix=e??Ge}get(e){let t=this.prefix+e;if(this.useLocalStorage)try{return localStorage.getItem(t)}catch{return this.memoryStore.get(t)??null}return this.memoryStore.get(t)??null}set(e,t){let r=this.prefix+e;if(this.useLocalStorage)try{localStorage.setItem(r,t);return}catch{}this.memoryStore.set(r,t)}remove(e){let t=this.prefix+e;if(this.useLocalStorage)try{localStorage.removeItem(t)}catch{}this.memoryStore.delete(t)}clearPrefix(e){let t=this.prefix+e;if(this.useLocalStorage)try{for(let r=localStorage.length-1;r>=0;r--){let s=localStorage.key(r);s&&s.startsWith(t)&&localStorage.removeItem(s)}}catch{}for(let r of Array.from(this.memoryStore.keys()))r.startsWith(t)&&this.memoryStore.delete(r)}checkLocalStorage(){try{if(typeof localStorage>"u")return!1;let e="__sendora_test__";return localStorage.setItem(e,"1"),localStorage.removeItem(e),!0}catch{return!1}}};function U(n=""){let e=new Uint8Array(16),t=typeof globalThis<"u"&&"crypto"in globalThis?globalThis.crypto:void 0;if(!t||typeof t.getRandomValues!="function")throw new Error("[SendoraCloud] crypto.getRandomValues unavailable \u2014 refusing to mint IDs without a CSPRNG");t.getRandomValues(e);let r="";for(let s of e)r+=s.toString(16).padStart(2,"0");return n+r}var Se=500,ce=10,ue=6e4,N=class{constructor(e,t,r,s){this.queue=[];this.timer=null;this.userId=null;this.identityToken=null;this.consecutiveFailures=0;this.nextFlushAfter=0;this.breakerOpenAt=0;this.breakerWarned=!1;this.http=t,this.storage=r,this.consent=s,this.projectId=e.projectId,this.flushInterval=e.flushInterval??5e3,this.maxQueueSize=e.maxQueueSize??20,this.persistUserId=!!e.persistUserId,this.stripQueryParams=e.stripQueryParams!==!1,this.appVersion=e.appVersion,this.storage.get("schema_version")===null&&this.storage.set("schema_version","1");let i=this.storage.get("anonymous_id");if(i?this.anonymousId=i:(this.anonymousId=U("anon_"),this.storage.set("anonymous_id",this.anonymousId)),this.persistUserId){let o=this.storage.get("user_id");o&&(this.userId=o)}this.timer=setInterval(()=>this.flush(),this.flushInterval),typeof window<"u"&&window.addEventListener("beforeunload",()=>this.flush()),this.consent.subscribe(o=>{o&&this.flush()})}track(e,t){fe(e),t&&me(t),this.queue.length>=Se&&this.queue.shift(),this.queue.push({eventType:e,properties:t??{},userId:this.userId??void 0,anonymousId:this.anonymousId,timestamp:new Date().toISOString(),identityToken:this.identityToken??void 0}),this.queue.length>=this.maxQueueSize&&this.flush()}page(e){if(typeof window>"u")return;let t=this.stripQueryParams?window.location.origin+window.location.pathname:window.location.href;this.track("page.viewed",{url:t,path:window.location.pathname,title:document.title,referrer:document.referrer||void 0,...e})}identify(e,t,r){if(typeof e!="string"||e.length===0||e.length>256)throw new Error("[SendoraCloud] userId must be a 1-256 char string.");this.userId=e,this.identityToken=r?.identityToken??null,this.persistUserId&&this.storage.set("user_id",e),this.track("user.identified",{...t})}reset(e=!0){this.userId=null,this.identityToken=null,this.storage.remove("user_id"),e&&(this.anonymousId=U("anon_"),this.storage.set("anonymous_id",this.anonymousId)),this.storage.clearPrefix("iam_shown_"),this.storage.clearPrefix("survey_shown_")}dropQueue(){this.queue=[]}async flush(){if(this.queue.length===0||!this.consent.isGranted()||Date.now()<this.nextFlushAfter)return;this.consecutiveFailures>ce&&Date.now()-this.breakerOpenAt>=ue&&(this.consecutiveFailures=0,this.breakerOpenAt=0,this.breakerWarned=!1);let e=this.queue.splice(0,100),t=this.getSessionId(),r=e.map(a=>({projectId:this.projectId,module:"custom",eventType:a.eventType,userId:a.userId,anonymousId:a.anonymousId,identityToken:a.identityToken,timestamp:a.timestamp??new Date().toISOString(),properties:a.properties??{},context:this.getContext(),...t?{sessionId:t}:{},consent:["analytics"]}));if((await this.http.post("/events/batch",{events:r})).success){this.consecutiveFailures=0,this.breakerOpenAt=0,this.breakerWarned=!1;return}if(this.consecutiveFailures++,this.consecutiveFailures>ce){this.breakerWarned||(this.breakerOpenAt=Date.now(),this.breakerWarned=!0,console.warn(`[SendoraCloud] Analytics circuit breaker open after ${ce} consecutive failed flushes \u2014 events will be dropped until a flush succeeds or ${ue}ms elapse.`));return}let i=Math.min(ue,1e3*2**this.consecutiveFailures);this.nextFlushAfter=Date.now()+i;let o=Math.max(0,Se-this.queue.length);o>0&&this.queue.unshift(...e.slice(0,o))}destroy(){this.timer&&clearInterval(this.timer),this.timer=null,this.flush()}getSessionId(){try{return typeof sessionStorage>"u"?void 0:sessionStorage.getItem("sendora_session_id")||void 0}catch{return}}getContext(){return typeof window>"u"?{sdk:{name:"@sendoracloud/sdk-web",version:E}}:{page:{url:this.stripQueryParams?window.location.origin+window.location.pathname:window.location.href,path:window.location.pathname,title:document.title},referrer:document.referrer||void 0,locale:typeof navigator<"u"?navigator.language:void 0,device:this.buildDevice(),sdk:{name:"@sendoracloud/sdk-web",version:E}}}buildDevice(){if(typeof navigator>"u")return;let e=navigator.userAgent||"",r=navigator.userAgentData?.mobile??/Mobi|Android|iPhone|iPod/i.test(e);return{type:/iPad|Tablet|(?:Android(?!.*Mobile))/i.test(e)?"tablet":r?"mobile":"desktop",os:"Web",osVersion:"",model:"",appVersion:this.resolveAppVersion(),browser:Ye(e)}}resolveAppVersion(){if(this.appVersion)return this.appVersion;if(typeof document<"u"){let r=document.querySelector('meta[name="sendora:app-version"]')?.getAttribute("content");if(r)return r}let e=globalThis.__SENDORA_APP_VERSION__;return typeof e=="string"?e:""}};function Ye(n){let e=[["Edge",/Edg\/(\d+)/],["Opera",/OPR\/(\d+)/],["Firefox",/Firefox\/(\d+)/],["Samsung Internet",/SamsungBrowser\/(\d+)/],["Chrome",/Chrome\/(\d+)/],["Safari",/Version\/(\d+)[^ ]* Safari/]];for(let[t,r]of e){let s=r.exec(n);if(s)return`${t} ${s[1]}`}return"Unknown"}var x=class{constructor(e,t,r){this.cache=new Map;this.refreshInterval=null;this.http=t,this.storage=r;let s=this.storage.get("flags");if(s)try{let i=JSON.parse(s);if(Array.isArray(i))for(let o of i)le(o)&&this.cache.set(o.key,o)}catch{}}setContext(e){this.userId=e.userId,this.entityId=e.entityId,this.environment=e.environment}async getFlag(e){if(typeof e!="string"||e.length===0||e.length>128)return null;let t=this.cache.get(e);if(t)return t.value;let r=await this.http.post("/feature-flags/evaluate",{key:e,userId:this.userId,entityId:this.entityId,environment:this.environment});return r.success&&r.data&&le(r.data)?(this.cache.set(e,r.data),this.persistCache(),r.data.value):null}async isEnabled(e,t=!1){let r=await this.getFlag(e);return typeof r=="boolean"?r:t}async refreshAll(){let e=await this.http.post("/feature-flags/evaluate-all",{userId:this.userId,entityId:this.entityId,environment:this.environment});if(e.success&&Array.isArray(e.data)){this.cache.clear();for(let t of e.data)le(t)&&this.cache.set(t.key,t);this.persistCache()}}startAutoRefresh(e=6e4){this.stopAutoRefresh(),this.refreshAll(),this.refreshInterval=setInterval(()=>this.refreshAll(),e)}stopAutoRefresh(){this.refreshInterval&&clearInterval(this.refreshInterval),this.refreshInterval=null}getAllFlags(){let e={};for(let[t,r]of this.cache)e[t]=r.value;return e}reset(){this.cache.clear(),this.storage.remove("flags"),this.userId=void 0,this.entityId=void 0,this.environment=void 0}destroy(){this.stopAutoRefresh()}persistCache(){this.storage.set("flags",JSON.stringify(Array.from(this.cache.values())))}};function le(n){if(n==null||typeof n!="object")return!1;let e=n;return Object.prototype.hasOwnProperty.call(e,"__proto__")||Object.prototype.hasOwnProperty.call(e,"constructor")?!1:typeof e.key=="string"&&"value"in e}var Xe=32*1024,O=class{constructor(e,t,r){this.activeSurvey=null;this.http=t,this.storage=r}onDisplay(e){this.onSurveyDisplay=e}async showSurvey(e){if(typeof e!="string"||!/^[A-Za-z0-9_-]{6,64}$/.test(e))return null;let t=`survey_shown_${e}`;if(this.storage.get(t))return null;let r=await this.http.get(`/surveys/${encodeURIComponent(e)}/config`);return!r.success||!r.data||!Qe(r.data)?null:(this.activeSurvey=r.data,this.storage.set(t,"1"),this.onSurveyDisplay&&this.onSurveyDisplay(r.data),r.data)}async submitResponse(e,t,r=!0){let s=0;try{s=JSON.stringify(t).length}catch{return!1}if(s>Xe)return!1;let i=await this.http.post("/surveys/responses",{surveyId:e,answers:t,completed:r});return i.success&&(this.activeSurvey=null),i.success}dismiss(){this.activeSurvey=null}getActiveSurvey(){return this.activeSurvey}};function Qe(n){if(n==null||typeof n!="object")return!1;let e=n;return typeof e.id!="string"||typeof e.name!="string"||!Array.isArray(e.questions)?!1:e.questions.every(Je)}function Je(n){if(n==null||typeof n!="object")return!1;let e=n;return typeof e.id=="string"&&typeof e.text=="string"}function I(n){if(!(!n||typeof n!="string"))try{let e=typeof window<"u"?window.location.href:"https://local/",t=new URL(n,e);return t.protocol==="http:"||t.protocol==="https:"?t.href:void 0}catch{return}}var Ze=new Set(["b","i","u","em","strong","a","p","br","span","ul","ol","li","h1","h2","h3","h4"]),et={a:new Set(["href","target","rel"])};function Q(n){if(typeof DOMParser>"u")return"";let t=new DOMParser().parseFromString(`<div>${n}</div>`,"text/html").body.firstElementChild;return t?(Ie(t),t.innerHTML):""}function Ie(n){let e=Array.from(n.children);for(let t of e){let r=t.tagName.toLowerCase();if(!Ze.has(r)){let i=document.createTextNode(t.textContent??"");t.replaceWith(i);continue}let s=et[r]??new Set;for(let i of Array.from(t.attributes)){if(!s.has(i.name.toLowerCase())){t.removeAttribute(i.name);continue}if(i.name.toLowerCase()==="href"){let o=I(i.value);o?t.setAttribute("href",o):t.removeAttribute(i.name)}}r==="a"&&(t.setAttribute("rel","noopener noreferrer"),t.setAttribute("target","_blank")),Ie(t)}}var M=class{constructor(e,t,r){this.messages=[];this.pollInterval=null;this.http=t,this.storage=r}onDisplay(e){this.onMessageDisplay=e}async checkMessages(){let e=await this.http.get("/in-app-messages/active");if(!e.success||!Array.isArray(e.data))return null;this.messages=e.data.map(tt);for(let t of this.messages){let r=`iam_shown_${t.id}`;if(!this.storage.get(r))return this.storage.set(r,"1"),this.onMessageDisplay&&this.onMessageDisplay(t),t}return null}async recordAction(e,t){await this.http.post("/in-app-messages/impressions",{messageId:e,action:t})}startPolling(e=3e5){this.stopPolling(),this.checkMessages(),this.pollInterval=setInterval(()=>this.checkMessages(),e)}stopPolling(){this.pollInterval&&clearInterval(this.pollInterval),this.pollInterval=null}getMessages(){return this.messages}destroy(){this.stopPolling()}};function tt(n){return{...n,content:{...n.content,ctaUrl:I(n.content.ctaUrl),imageUrl:I(n.content.imageUrl)}}}var rt=4e3,F=class{constructor(e,t,r){this.chatbotId=null;this.messages=[];this.http=t,this.storage=r;let s=this.storage.get("chat_session_id");this.sessionId=s??U("chat_"),s||this.storage.set("chat_session_id",this.sessionId)}init(e){if(typeof e!="string"||!/^[A-Za-z0-9_-]{6,64}$/.test(e))throw new Error("[SendoraCloud] Invalid chatbotId.");this.chatbotId=e}onNewMessage(e){this.onMessage=e}async sendMessage(e,t){if(!this.chatbotId||typeof e!="string"||e.length===0||e.length>rt)return null;let r={role:"user",content:e,timestamp:new Date().toISOString()};this.messages.push(r);let s=await this.http.post("/chatbot/message",{chatbotId:this.chatbotId,sessionId:this.sessionId,message:e,userId:t});if(s.success&&s.data&&typeof s.data.reply=="string"){let i={role:"assistant",content:s.data.reply,timestamp:new Date().toISOString()};return this.messages.push(i),this.onMessage&&this.onMessage(i),i}return null}getMessages(){return[...this.messages]}newSession(){this.messages=[],this.sessionId=U("chat_"),this.storage.set("chat_session_id",this.sessionId)}getSessionId(){return this.sessionId}};var H=class{constructor(e,t){this.listeners=new Set;this.granted=e,this.http=t}isGranted(){return this.granted}grant(){this.granted||(this.granted=!0,this.emit())}revoke(){this.granted&&(this.granted=!1,this.emit())}subscribe(e){return this.listeners.add(e),()=>this.listeners.delete(e)}async record(e){if(!this.http)throw new Error("consent.record requires SDK init (HttpClient unavailable)");let t=await this.http.post("/consent/record",e);if(!t.success||!t.data)throw new Error(t.error?.message??"consent.record failed");return t.data}async requestDeletion(e){if(!this.http)throw new Error("consent.requestDeletion requires SDK init (HttpClient unavailable)");let t=await this.http.post("/consent/deletion-request",e);if(!t.success||!t.data)throw new Error(t.error?.message??"consent.requestDeletion failed");return t.data}emit(){for(let e of this.listeners)try{e(this.granted)}catch{}}};var T="auth_access_token",R="auth_access_expires",m="auth_refresh_token",_="auth_user",be=3e4,nt=/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;function y(n){if(!n||typeof n!="object")return!1;let e=n,t=e.user,r=e.tokens;return!(!t||typeof t.id!="string"||t.id.length===0||!r||typeof r.accessToken!="string"||r.accessToken.length===0||typeof r.refreshToken!="string"||r.refreshToken.length===0||typeof r.expiresIn!="number"||r.expiresIn<=0||t.isAnonymous!==void 0&&typeof t.isAnonymous!="boolean"||t.email!==void 0&&t.email!==null&&typeof t.email!="string"||t.emailVerified!==void 0&&typeof t.emailVerified!="boolean"||t.name!==void 0&&t.name!==null&&typeof t.name!="string"||t.signupMethod!==void 0&&t.signupMethod!==null&&typeof t.signupMethod!="string"||t.lastLoginMethod!==void 0&&t.lastLoginMethod!==null&&typeof t.lastLoginMethod!="string"||e.retiredAnonUserId!==void 0&&typeof e.retiredAnonUserId!="string")}var C=class extends Error{constructor(e="An account with this email already exists"){super(e),this.name="EmailAlreadyTakenError"}},K=class extends Error{constructor(e="Already signed in with an identity; use link*() to add a credential, or sign out first"){super(e),this.name="AlreadyIdentifiedError"}},D=class extends Error{constructor(t="This credential is already linked to a different account",r){super(t);this.code="CREDENTIAL_IN_USE";this.kind="credential_in_use";this.retryable=!1;this.name="CredentialInUseError",this.provider=r?.provider,this.collision=r?.collision,this.status=r?.status}};function Ee(n){let e=n?.error?.details;if(!e||typeof e!="object")return{};let t=e;return{provider:typeof t.provider=="string"?t.provider:void 0,collision:t.collision==="identity"||t.collision==="email"?t.collision:void 0}}var st=new Set(["network","server","rate_limited","account_locked"]);function it(n,e){switch(n){case"NETWORK_ERROR":case"NETWORK_TIMEOUT":return"network";case"PARSE_ERROR":return"server";case"RATE_LIMITED":case"RATE_LIMIT":case"RATE_LIMIT_EXCEEDED":case"QUOTA_EXCEEDED":return"rate_limited";case"ACCOUNT_LOCKED":return"account_locked";case"CREDENTIAL_IN_USE":return"credential_in_use";case"LAST_CREDENTIAL":return"last_credential";case"RECENT_AUTH_REQUIRED":return"recent_auth_required";case"NOT_ANONYMOUS":case"FORBIDDEN_NON_ANONYMOUS":return"already_identified";case"PASSKEY_USER_CANCELLED":case"GAME_CENTER_CANCELLED":case"PLAY_GAMES_CANCELLED":case"SSO_CANCELLED":return"cancelled";case"GAME_CENTER_UNAVAILABLE":case"PLAY_GAMES_UNAVAILABLE":case"ENTITLEMENT_ERROR":case"tier_required":return"config";case"UNAUTHORIZED":case"INVALID_CREDENTIALS":case"INVALID_REFRESH_TOKEN":case"EMAIL_OTP_INVALID":case"MAGIC_LINK_INVALID":case"PASSKEY_RP_MISMATCH":case"NOT_SIGNED_IN":return"invalid_credential";default:break}if(typeof e=="number"){if(e===429)return"rate_limited";if(e>=500)return"server";if(e>=400)return"invalid_credential"}return"unknown"}var c=class extends Error{constructor(e,t,r){super(t),this.name="AuthError",this.code=e,this.kind=r?.kind??it(e,r?.status),this.retryable=st.has(this.kind),this.retryAfterSeconds=r?.retryAfterSeconds,this.status=r?.status}};function ot(n){if(n instanceof c||n instanceof C||n instanceof K||n instanceof D)return n;let e=n?.name;return e==="AbortError"||e==="TimeoutError"||e==="NetworkTimeoutError"?new c("NETWORK_TIMEOUT",n instanceof Error?n.message:"timeout",{kind:"network"}):new c("UNKNOWN_ERROR",n instanceof Error?n.message:String(n),{kind:"unknown"})}function h(n){let e=n.error?.status,t=n.error?.details?.retryAfterSeconds;return{status:typeof e=="number"?e:void 0,retryAfterSeconds:typeof t=="number"&&Number.isFinite(t)&&t>0?t:void 0}}var V=class{constructor(e,t,r,s,i,o){this.user=null;this.accessToken=null;this.accessExpiresAt=0;this.clockSkewConfirmed=!1;this.inflight=Promise.resolve();this.refreshInflight=null;this.refreshFailureCount=0;this.refreshCooldownUntil=0;this.visibilityResetUnsub=null;this.proactiveRefreshTimer=null;this.proactiveRefreshCleanup=null;this.takeoverListeners=new Set;this.lastTakeover=null;this.deletionCancelledListeners=new Set;this.lastDeletionCancelled=null;this.lastAnonRetirement=null;this.authStateListeners=new Set;this.pendingAnonTakeover=null;this.hydrated=!1;this.http=t,this.storage=r,this.analytics=s,this.flags=i,this.chatbot=o;let a=this.storage.get(_),u=this.storage.get(T),l=this.storage.get(m),g=this.storage.get(R);if(a&&(u||l))try{let v=JSON.parse(a);if(typeof v.id!="string"||v.id.length===0)throw new Error("invalid cache");this.user=v,u?(this.accessToken=u,this.accessExpiresAt=g?Number(g):0):(this.accessToken=null,this.accessExpiresAt=0),this.analytics.identify(this.user.id)}catch{this.storage.remove(_),this.storage.remove(T),this.storage.remove(R)}this.hydrated=!0}getCurrentUser(){return this.user}onDeviceTakeover(e){return this.takeoverListeners.add(e),()=>{this.takeoverListeners.delete(e)}}getLastDeviceTakeover(){return this.lastTakeover}onAuthStateChanged(e){if(this.authStateListeners.add(e),this.hydrated&&this.user){let t=this.user;try{e({event:"signed_in",user:t})}catch{}}return()=>{this.authStateListeners.delete(e)}}emitAuthState(e){for(let t of this.authStateListeners)try{t(e)}catch{}}fireDeviceTakeover(e,t){if(!e||!nt.test(e))return;let r={retiredAnonUserId:e,identifiedUserId:t,at:new Date};this.lastTakeover=r;for(let s of this.takeoverListeners)try{s(r)}catch{}this.emitAuthState({event:"device_takeover",user:this.user,retiredAnonUserId:e})}onDeletionCancelled(e){return this.deletionCancelledListeners.add(e),()=>{this.deletionCancelledListeners.delete(e)}}getLastDeletionCancelled(){return this.lastDeletionCancelled}getLastAnonRetirement(){return this.lastAnonRetirement}fireDeletionCancelled(e){let t={userId:e,at:new Date};this.lastDeletionCancelled=t;for(let r of this.deletionCancelledListeners)try{r(t)}catch{}this.emitAuthState({event:"deletion_cancelled",user:this.user})}takeoverHint(){if(this.user?.isAnonymous)return this.storage.get(m)??void 0}canServeToken(e,t,r){return!e||!t||r>=t-be?!1:this.clockSkewConfirmed?!0:Re(e,r)}canServeCachedToken(e){return this.canServeToken(this.accessToken,this.accessExpiresAt,e)}trackedDeadlineAlive(e){return!!this.accessToken&&!!this.accessExpiresAt&&e<this.accessExpiresAt-be}deadlinesDisagree(e){return this.trackedDeadlineAlive(e)&&!this.canServeCachedToken(e)}learnClockSkewFrom(e,t){Re(e,t)||(this.clockSkewConfirmed=!0)}async refreshAndReconcile(e){let t=this.deadlinesDisagree(e),r=await this.refreshAccessToken();return t&&r&&this.learnClockSkewFrom(r,Date.now()),r}async getAccessToken(e){return!e?.forceRefresh&&this.canServeCachedToken(Date.now())?this.accessToken:this.storage.get(m)?this.refreshInflight?this.refreshInflight:Date.now()<this.refreshCooldownUntil?null:this.refreshAndReconcile(Date.now()):null}getAccessTokenSync(){return this.accessToken}signInAnonymously(e){return this.serialize(async()=>{let t=this.user;if(!e?.forceNew&&t&&this.storage.get(m))return t;let r=await this.http.post("/auth-service/anonymous",{name:e?.name,metadata:e?.metadata});if(!r.success||!y(r.data))throw new c(r.error?.code??"AUTH_ERROR",r.error?.message??"Anonymous signup failed",h(r));return this.persist(r.data),r.data.user})}signUp(e,t,r){return this.serialize(async()=>{let s=this.storage.get(m);if(s){let o=await this.http.post("/auth-service/upgrade",{refreshToken:s,email:e,password:t,name:r?.name});if(o.success&&y(o.data))return this.persist(o.data),o.data.user;let a=o.error?.code??"",u=h(o),l=u.status;if(a==="NOT_ANONYMOUS"||a==="FORBIDDEN_NON_ANONYMOUS")throw new K(o.error?.message);if(a==="CONFLICT"||a==="EMAIL_ALREADY_TAKEN"||l===409)throw new C(o.error?.message);if(a==="INVALID_REFRESH"||a==="UNAUTHORIZED"||a==="REFRESH_EXPIRED")await this.analytics.flush(),this.wipeLocalIdentity("session_expired");else throw new c(a||"AUTH_ERROR",o.error?.message??"Upgrade failed",u)}let i=await this.http.post("/auth-service/signup",{email:e,password:t,name:r?.name,metadata:r?.metadata});if(!i.success||!y(i.data)){let o=i.error?.code??"";throw o==="CONFLICT"?new C(i.error?.message):new c(o||"AUTH_ERROR",i.error?.message??"Signup failed",h(i))}return this.persist(i.data),i.data.user})}signIn(e,t){return this.serialize(async()=>{let r=this.takeoverHint(),s=await this.http.post("/auth-service/login",{email:e,password:t,...r?{prevAnonRefreshToken:r}:{}});if(!s.success||!s.data)throw new c(s.error?.code??"AUTH_ERROR",s.error?.message??"Login failed",h(s));let i=s.data;if(i.mfaRequired===!0&&typeof i.mfaChallengeToken=="string"){r&&(this.pendingAnonTakeover={challengeToken:i.mfaChallengeToken,prevAnonRefreshToken:r});let o=i.user;return{mfaRequired:!0,mfaChallengeToken:i.mfaChallengeToken,userId:o?.id??""}}if(!y(s.data))throw new c(s.error?.code??"AUTH_ERROR",s.error?.message??"Login failed",h(s));return await this.replaceLocalIdentity(),this.persist(s.data),s.data.user})}loginSocial(e){return this.serialize(async()=>{let t=this.takeoverHint(),{link:r,onCredentialInUse:s,...i}=e,o=await this.http.post("/auth-service/login/social",{...i,...t?{prevAnonRefreshToken:t}:{},...r?{linkAnonymous:!0}:{},...s?{onCredentialInUse:s}:{}});if(!o.success||!y(o.data))throw o.error?.code==="CREDENTIAL_IN_USE"?new D(o.error.message,{...Ee(o),status:h(o).status}):new c(o.error?.code??"SOCIAL_LOGIN_FAILED",o.error?.message??"Social login failed",h(o));return await this.replaceLocalIdentity(),this.persist(o.data),o.data.user})}signInWithGoogle(e,t,r){return this.loginSocial({provider:"google",code:e,redirectUri:t,link:r})}signInWithGitHub(e,t){return this.loginSocial({provider:"github",code:e,redirectUri:t})}signInWithApple(e){return this.loginSocial({provider:"apple",...e})}signInWithMicrosoft(e,t){return this.loginSocial({provider:"microsoft",code:e,redirectUri:t})}signInWithLinkedIn(e,t){return this.loginSocial({provider:"linkedin",code:e,redirectUri:t})}signInWithFacebook(e,t){return this.loginSocial({provider:"facebook",code:e,redirectUri:t})}linkEmailPassword(e,t){return this.linkCredential("/auth-service/me/link/email",{email:e,password:t})}linkSocial(e){return this.linkCredential("/auth-service/me/link/social",e)}linkGoogle(e){return this.linkSocial({provider:"google",...e})}linkApple(e){return this.linkSocial({provider:"apple",...e})}async linkCredential(e,t){let r=await this.getAccessToken();if(!r)throw new c("NOT_SIGNED_IN","Sign in before linking a credential");let s=await this.http.post(e,t,{Authorization:`Bearer ${r}`});if(!s.success||!s.data?.user){let i=s.error?.code??"LINK_FAILED";throw i==="CREDENTIAL_IN_USE"?new D(s.error?.message,{...Ee(s),status:h(s).status}):new c(i,s.error?.message??"Failed to link credential",h(s))}return s.data.upgraded&&y(s.data)?(this.persist(s.data),s.data.user):(this.updateLocalUser(s.data.user),s.data.user)}updateLocalUser(e){this.user=e,this.storage.set(_,JSON.stringify(e))}async listLinkedIdentities(){let e=await this.getAccessToken();if(!e)throw new c("NOT_SIGNED_IN","Sign in before listing linked identities");let t=await this.http.get("/auth-service/me/identities",{Authorization:`Bearer ${e}`});if(!t.success||!t.data)throw new c(t.error?.code??"IDENTITIES_FAILED",t.error?.message??"Failed to list linked identities",h(t));return{identities:t.data.identities??[],hasPassword:!!t.data.hasPassword}}async unlink(e){let t=await this.getAccessToken();if(!t)throw new c("NOT_SIGNED_IN","Sign in before unlinking an identity");let r=await this.http.delete(`/auth-service/me/identities/${encodeURIComponent(e)}`,{Authorization:`Bearer ${t}`});if(!r.success||!r.data)throw new c(r.error?.code??"UNLINK_FAILED",r.error?.message??"Failed to unlink identity",h(r));return{provider:r.data.provider??e,removed:Number(r.data.removed??0),remaining:Number(r.data.remaining??0)}}signInWithDiscord(e,t){return this.loginSocial({provider:"discord",code:e,redirectUri:t})}challengeMfa(e,t){return this.serialize(async()=>{let s=(this.pendingAnonTakeover?.challengeToken===e?this.pendingAnonTakeover.prevAnonRefreshToken:void 0)??this.takeoverHint(),i=await this.http.post("/auth-service/mfa/challenge",{challengeToken:e,code:t,...s?{prevAnonRefreshToken:s}:{}});if(!i.success||!y(i.data))throw new c(i.error?.code??"MFA_CHALLENGE_FAILED",i.error?.message??"Invalid MFA code",h(i));return await this.replaceLocalIdentity(),this.persist(i.data),i.data.user})}async sendMagicLink(e){let t=await this.http.post("/auth-service/magic-link/request",{email:e});if(!t.success)throw new c(t.error?.code??"MAGIC_LINK_REQUEST_FAILED",t.error?.message??"Failed to send link")}async sendEmailOtp(e){let t=await this.http.post("/auth-service/email-otp/request",{email:e});if(!t.success)throw new c(t.error?.code??"EMAIL_OTP_REQUEST_FAILED",t.error?.message??"Failed to send code")}verifyEmailOtp(e,t){return this.serialize(async()=>{let r=this.takeoverHint(),s=await this.http.post("/auth-service/email-otp/verify",{email:e,code:t,...r?{prevAnonRefreshToken:r}:{}});if(!s.success||!y(s.data))throw new c(s.error?.code??"EMAIL_OTP_INVALID",s.error?.message??"Wrong or expired code",h(s));return await this.replaceLocalIdentity(),this.persist(s.data),s.data.user})}async requestPasswordReset(e){let t=await this.http.post("/auth-service/password/forgot",{email:e});if(!t.success)throw new c(t.error?.code??"PASSWORD_RESET_REQUEST_FAILED",t.error?.message??"Failed to send reset email")}async resetPassword(e,t){let r=await this.http.post("/auth-service/password/reset",{token:e,newPassword:t});if(!r.success)throw new c(r.error?.code??"PASSWORD_RESET_FAILED",r.error?.message??"Reset failed")}async verifyEmail(e){let t=await this.http.post("/auth-service/email/verify",{token:e});if(!t.success)throw new c(t.error?.code??"EMAIL_VERIFICATION_FAILED",t.error?.message??"Verification failed")}async sendVerificationEmail(){let e=await this.getAccessToken();if(!e)throw new c("UNAUTHORIZED","Sign in before requesting a verification email");let t=await this.http.post("/auth-service/email/verify/resend",{},{Authorization:`Bearer ${e}`});if(!t.success)throw new c(t.error?.code??"VERIFICATION_RESEND_FAILED",t.error?.message??"Failed to send verification email")}verifyMagicLink(e){return this.serialize(async()=>{let t=this.takeoverHint(),r=await this.http.post("/auth-service/magic-link/verify",{token:e,...t?{prevAnonRefreshToken:t}:{}});if(!r.success||!y(r.data))throw new c(r.error?.code??"MAGIC_LINK_INVALID",r.error?.message??"Invalid or expired magic link",h(r));return await this.replaceLocalIdentity(),this.persist(r.data),r.data.user})}async enrollMfa(){let e=await this.http.post("/auth-service/mfa/enroll/start",{},await this.bearerHeaders());if(!e.success||!e.data)throw new c(e.error?.code??"MFA_ENROLL_FAILED",e.error?.message??"MFA enrollment failed");return e.data}async confirmMfa(e){let t=await this.http.post("/auth-service/mfa/enroll/confirm",{code:e},await this.bearerHeaders());return!!(t.success&&t.data?.confirmed)}async disableMfa(){let e=await this.http.post("/auth-service/mfa/disable",{},await this.bearerHeaders());if(!e.success)throw new c(e.error?.code??"MFA_DISABLE_FAILED",e.error?.message??"Failed to disable MFA",h(e))}async registerPasskey(e){if(typeof navigator>"u"||!navigator.credentials)throw new c("PASSKEY_UNSUPPORTED","WebAuthn not supported in this environment");let t=await this.http.post("/auth-service/passkeys/register/start",{},await this.bearerHeaders());if(!t.success||!t.data)throw new c(t.error?.code??"PASSKEY_START_FAILED",t.error?.message??"Passkey start failed");let r=ct(t.data),s;try{let a=await navigator.credentials.create({publicKey:r});if(!a)throw new Error("create returned null");s=a}catch(a){throw new c("PASSKEY_USER_CANCELLED",a instanceof Error?a.message:"User cancelled passkey registration")}let i=lt(s),o=await this.http.post("/auth-service/passkeys/register/finish",{response:i,name:e},await this.bearerHeaders());if(!o.success||!o.data)throw new c(o.error?.code??"PASSKEY_FINISH_FAILED",o.error?.message??"Passkey verification failed");return o.data}signInWithPasskey(e){return this.serialize(async()=>{if(typeof navigator>"u"||!navigator.credentials)throw new c("PASSKEY_UNSUPPORTED","WebAuthn not supported in this environment");let t=this.takeoverHint(),r=await this.http.post("/auth-service/passkeys/authenticate/start",{userId:e??null});if(!r.success||!r.data)throw new c(r.error?.code??"PASSKEY_START_FAILED",r.error?.message??"Passkey start failed",h(r));let s=ut(r.data),i;try{let u=await navigator.credentials.get({publicKey:s});if(!u)throw new Error("get returned null");i=u}catch(u){throw new c("PASSKEY_USER_CANCELLED",u instanceof Error?u.message:"User cancelled passkey signin")}let o=ht(i),a=await this.http.post("/auth-service/passkeys/authenticate/finish",{response:o,userId:e??null,...t?{prevAnonRefreshToken:t}:{}});if(!a.success||!y(a.data))throw new c(a.error?.code??"PASSKEY_AUTH_FAILED",a.error?.message??"Passkey signin failed",h(a));return await this.replaceLocalIdentity(),this.persist(a.data),a.data.user})}async listPasskeys(){let e=await this.http.get("/auth-service/passkeys",await this.bearerHeaders());return!e.success||!Array.isArray(e.data)?[]:e.data}async deletePasskey(e){let t=await this.http.delete(`/auth-service/passkeys/${encodeURIComponent(e)}`,await this.bearerHeaders());if(!t.success)throw new c(t.error?.code??"PASSKEY_DELETE_FAILED",t.error?.message??"Failed to delete passkey",h(t))}async listMySessions(){let e=await this.http.get("/auth-service/sessions/me",await this.bearerHeaders());return!e.success||!Array.isArray(e.data)?[]:e.data}async revokeSession(e){let t=await this.http.delete(`/auth-service/sessions/me/${encodeURIComponent(e)}`,await this.bearerHeaders());if(!t.success)throw new c(t.error?.code??"SESSION_REVOKE_FAILED",t.error?.message??"Failed to revoke session",h(t))}async revokeAllSessions(){let e=await this.http.delete("/auth-service/sessions/me",await this.bearerHeaders());if(!e.success)throw new c(e.error?.code??"SESSION_REVOKE_ALL_FAILED",e.error?.message??"Failed to sign out other devices",h(e))}async startSso(e){let t=this.takeoverHint(),r=await this.http.post("/auth-service/sso/oidc/start",{returnTo:e,...t?{prevAnonRefreshToken:t}:{}});if(!r.success||!r.data)throw new c(r.error?.code??"SSO_START_FAILED",r.error?.message??"SSO start failed");return r.data}async signInWithSso(e){let t=e??(typeof window<"u"?window.location.origin:"");if(!t)throw new c("SSO_NO_RETURN_TO","returnTo required outside browser context");let r=await this.startSso(t);typeof window<"u"&&(window.location.href=r.authorizationUrl)}async startSaml(e){let t=this.takeoverHint(),r=await this.http.post("/auth-service/sso/saml/start",{returnTo:e,...t?{prevAnonRefreshToken:t}:{}});if(!r.success||!r.data)throw new c(r.error?.code??"SAML_START_FAILED",r.error?.message??"SAML start failed");return r.data}async signInWithSaml(e){let t=e??(typeof window<"u"?window.location.origin:"");if(!t)throw new c("SAML_NO_RETURN_TO","returnTo required outside browser context");let r=await this.startSaml(t);typeof window<"u"&&(window.location.href=r.authorizationUrl)}consumeSsoTokenFromUrl(){return this.serialize(async()=>{if(typeof window>"u")return null;let e=window.location.hash.replace(/^#/,"");if(!e)return null;let t=new URLSearchParams(e),r=t.get("sendora_oidc_error")??t.get("sendora_saml_error");if(r)throw window.history.replaceState(null,"",window.location.pathname+window.location.search),new c("SSO_FAILED",decodeURIComponent(r));let s=t.get("sendora_oidc_token")??t.get("sendora_saml_token");if(!s)return null;let i=t.get("sendora_retired_anon");window.history.replaceState(null,"",window.location.pathname+window.location.search);let o=await this.http.post("/auth-service/token/refresh",{refreshToken:s}),a=o.success?Te(o.data):null;if(!a)throw new c(o.error?.code??"SSO_EXCHANGE_FAILED",o.error?.message??"Could not exchange SSO token",h(o));let u={...a,tokenType:"Bearer"};await this.replaceLocalIdentity(),this.accessToken=u.accessToken,this.accessExpiresAt=Date.now()+u.expiresIn*1e3,this.storage.set(T,u.accessToken),this.storage.set(R,String(this.accessExpiresAt)),this.storage.set(m,u.refreshToken);let l=_e(u.accessToken),g={id:l?.sub??"",email:l?.email??null,emailVerified:l?.email_verified??!0,name:l?.name??null,isAnonymous:!1};return this.user=g,this.storage.set(_,JSON.stringify(g)),this.analytics.identify(g.id),this.flags.setContext({userId:g.id}),this.emitAuthState({event:"signed_in",user:g}),i&&this.fireDeviceTakeover(i,g.id),g})}async bearerHeaders(){let e=await this.getAccessToken();if(!e)throw new c("NOT_SIGNED_IN","Not signed in");return{Authorization:`Bearer ${e}`}}signOut(){return this.serialize(async()=>{let e=this.storage.get(m);this.wipeLocalIdentity("user"),e&&this.http.post("/auth-service/token/revoke",{refreshToken:e}).catch(()=>{})})}serialize(e){let t=async()=>{try{return await e()}catch(s){throw ot(s)}},r=this.inflight.then(t,t);return this.inflight=r.catch(()=>{}),r}async refreshAccessToken(){if(this.refreshInflight)return this.refreshInflight;let e=this.storage.get(m);if(!e)return null;let t=typeof navigator<"u"&&"locks"in navigator,r=async()=>{let s=this.storage.get(m);if(s&&s!==e){let i=this.storage.get(T),o=this.storage.get(R);if(i&&o){let a=Number(o);if(Number.isFinite(a)&&this.canServeToken(i,a,Date.now()))return this.accessToken=i,this.accessExpiresAt=a,i}}try{let i=s??e,o=await this.http.post("/auth-service/token/refresh",{refreshToken:i});if(!o.success)return at(o.error?.code)&&this.tokenStillCurrent(i)?(this.wipeLocalIdentity("session_expired"),this.refreshFailureCount=0,this.refreshCooldownUntil=0,null):(this.armBackoff(),null);let a=Te(o.data);if(!a)return this.armBackoff(),null;if(!this.tokenStillCurrent(i))return null;if(this.accessToken=a.accessToken,this.accessExpiresAt=Date.now()+a.expiresIn*1e3,this.storage.set(T,a.accessToken),this.storage.set(R,String(this.accessExpiresAt)),this.storage.set(m,a.refreshToken),this.user===null){let u=dt(o.data);u&&(this.user=u,this.storage.set(_,JSON.stringify(u)),this.analytics.identify(u.id),this.emitAuthState({event:"signed_in",user:u}))}return this.refreshFailureCount=0,this.refreshCooldownUntil=0,a.accessToken}catch{return this.armBackoff(),null}};return this.refreshInflight=(async()=>{try{return t?await navigator.locks.request("sendora-authservice-refresh",{mode:"exclusive"},r):await r()}finally{this.refreshInflight=null}})(),this.refreshInflight}armBackoff(){this.refreshFailureCount+=1;let e=Math.min(3e4,1e3*Math.pow(2,this.refreshFailureCount-1));this.refreshCooldownUntil=Date.now()+e}resetRefreshState(){this.refreshFailureCount=0,this.refreshCooldownUntil=0}startVisibilityRefreshReset(){if(this.visibilityResetUnsub||typeof document>"u")return;let e=()=>{document.visibilityState==="visible"&&this.resetRefreshState()};document.addEventListener("visibilitychange",e),this.visibilityResetUnsub=()=>document.removeEventListener("visibilitychange",e)}stopVisibilityRefreshReset(){this.visibilityResetUnsub&&(this.visibilityResetUnsub(),this.visibilityResetUnsub=null)}startProactiveRefreshCron(){if(typeof window>"u"||this.proactiveRefreshTimer)return;let e=.8,t=6e4,r=3e4,s=async()=>{if(!this.accessToken||!this.accessExpiresAt)return;let o=Date.now();if(!this.canServeCachedToken(o)){await this.refreshAndReconcile(o);return}let a=this.accessExpiresAt-o;if(a<=0)return;let l=Math.max(a,5*6e4)*(1-e)+(Math.random()*r*2-r);a<=l&&await this.refreshAccessToken()};this.proactiveRefreshTimer=window.setInterval(()=>{s()},t);let i=()=>{document.visibilityState==="visible"&&s()};document.addEventListener("visibilitychange",i),this.proactiveRefreshCleanup=()=>{this.proactiveRefreshTimer&&(window.clearInterval(this.proactiveRefreshTimer),this.proactiveRefreshTimer=null),document.removeEventListener("visibilitychange",i)}}stopProactiveRefreshCron(){this.proactiveRefreshCleanup&&(this.proactiveRefreshCleanup(),this.proactiveRefreshCleanup=null)}persist(e){this.user=e.user,this.accessToken=e.tokens.accessToken,this.accessExpiresAt=Date.now()+e.tokens.expiresIn*1e3,this.storage.set(_,JSON.stringify(e.user)),this.storage.set(T,e.tokens.accessToken),this.storage.set(R,String(this.accessExpiresAt)),this.storage.set(m,e.tokens.refreshToken),this.analytics.identify(e.user.id),this.flags.setContext({userId:e.user.id}),this.startProactiveRefreshCron(),this.startVisibilityRefreshReset(),this.emitAuthState({event:"signed_in",user:e.user}),e.retiredAnonUserId&&this.fireDeviceTakeover(e.retiredAnonUserId,e.user.id),e.anonRetirement&&(this.lastAnonRetirement=e.anonRetirement),e.reactivatedFromDeletion&&this.fireDeletionCancelled(e.user.id)}async replaceLocalIdentity(){this.user!==null&&(await this.analytics.flush(),this.wipeLocalIdentity("replaced"))}tokenStillCurrent(e){return this.storage.get(m)===e}wipeLocalIdentity(e="replaced"){this.user=null,this.accessToken=null,this.accessExpiresAt=0,this.clockSkewConfirmed=!1,this.lastTakeover=null,this.lastDeletionCancelled=null,this.lastAnonRetirement=null,this.pendingAnonTakeover=null,this.storage.remove(_),this.storage.remove(T),this.storage.remove(R),this.storage.remove(m),this.analytics.reset(e==="user"||e==="account_deleted"),this.analytics.dropQueue(),this.flags.reset(),this.chatbot.newSession(),this.stopProactiveRefreshCron(),this.stopVisibilityRefreshReset(),this.refreshFailureCount=0,this.refreshCooldownUntil=0,e!=="replaced"&&this.emitAuthState({event:"signed_out",user:null,reason:e})}};function at(n){return n?n==="INVALID_REFRESH_TOKEN":!1}function z(n){let e=(4-n.length%4)%4,t=(n+"===".slice(0,e)).replace(/-/g,"+").replace(/_/g,"/"),r=atob(t),s=new ArrayBuffer(r.length),i=new Uint8Array(s);for(let o=0;o<r.length;o++)i[o]=r.charCodeAt(o);return s}function b(n){let e=n instanceof Uint8Array?n:new Uint8Array(n),t="";for(let r=0;r<e.length;r++)t+=String.fromCharCode(e[r]);return btoa(t).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}function ct(n){return{challenge:z(n.challenge),rp:n.rp,user:{id:z(n.user.id),name:n.user.name,displayName:n.user.displayName},pubKeyCredParams:n.pubKeyCredParams,timeout:n.timeout,attestation:n.attestation,excludeCredentials:n.excludeCredentials?.map(e=>({id:z(e.id),type:"public-key",transports:e.transports})),authenticatorSelection:n.authenticatorSelection}}function ut(n){return{challenge:z(n.challenge),timeout:n.timeout,rpId:n.rpId,allowCredentials:n.allowCredentials?.map(e=>({id:z(e.id),type:"public-key",transports:e.transports})),userVerification:n.userVerification}}function lt(n){let e=n.response;return{id:n.id,rawId:b(n.rawId),type:n.type,response:{clientDataJSON:b(e.clientDataJSON),attestationObject:b(e.attestationObject),transports:typeof e.getTransports=="function"?e.getTransports():void 0},clientExtensionResults:n.getClientExtensionResults()}}function Te(n){if(!n||typeof n!="object")return null;let e=n.tokens,t=e&&typeof e=="object"?e:n;return typeof t.accessToken!="string"||!t.accessToken||typeof t.refreshToken!="string"||!t.refreshToken||typeof t.expiresIn!="number"||t.expiresIn<=0?null:{accessToken:t.accessToken,refreshToken:t.refreshToken,expiresIn:t.expiresIn}}function dt(n){if(!n||typeof n!="object")return null;let e=n.user;if(!e||typeof e!="object")return null;let t=e.id;return typeof t!="string"||t.length===0?null:e}function Re(n,e){let t=_e(n);if(!t)return!0;let r=t.exp;return typeof r!="number"||!Number.isFinite(r)?!0:e<r*1e3}function _e(n){try{let e=n.split(".");if(e.length!==3)return null;let t=e[1].replace(/-/g,"+").replace(/_/g,"/"),r=atob(t+"===".slice(0,(4-t.length%4)%4));return JSON.parse(r)}catch{return null}}function ht(n){let e=n.response;return{id:n.id,rawId:b(n.rawId),type:n.type,response:{clientDataJSON:b(e.clientDataJSON),authenticatorData:b(e.authenticatorData),signature:b(e.signature),userHandle:e.userHandle?b(e.userHandle):null},clientExtensionResults:n.getClientExtensionResults()}}function pt(n){return n===!1?{pageViews:!1,sessionStart:!1,appOpen:!1,appBackground:!1,engagement:!1}:n===!0||n===void 0?{pageViews:!0,sessionStart:!0,appOpen:!0,appBackground:!0,engagement:!0}:{pageViews:n.pageViews??!0,sessionStart:n.sessionStart??!0,appOpen:n.appOpen??!0,appBackground:n.appBackground??!0,engagement:n.engagement??!0}}var gt=250,Ce=360*60*1e3;function Pe(n,e){if(typeof window>"u")return()=>{};let t=pt(e.autoTrack),r=e.sessionIdleMs??18e5,s=[],i="sendora_session_id",o="sendora_session_last_activity";function a(){return De(i)??""}function u(d){Le(i,d)}function l(){let d=De(o);return d&&Number(d)||0}function g(d){Le(o,String(d))}function v(){return`sess_${Date.now().toString(36)}_${Math.random().toString(36).slice(2,10)}`}function w(d){let S=Date.now(),q=l();if(!a()||q&&S-q>r){let G=v();u(G),d&&t.sessionStart&&n.track("session.start",{sessionId:G})}g(S)}w(t.sessionStart),t.appOpen&&n.track("app.opened",{sessionId:a()||void 0,url:window.location.origin+window.location.pathname,referrer:document.referrer||void 0});let k=window.location.pathname,L=0,A=document.visibilityState==="visible"?Date.now():0;function ne(){A>0&&(L+=Date.now()-A,A=0)}function j(){if(!t.engagement)return;ne();let d=L;if(L=0,!(d<gt)){d>Ce&&(d=Ce);try{n.track("app.engagement",{durationMs:Math.round(d),screen:k,sessionId:a()||void 0})}catch{}}}function Ne(d){k=d,L=0,A=document.visibilityState==="visible"?Date.now():0}if(t.pageViews||t.engagement){t.pageViews&&n.page();let d=()=>{j(),w(!0),t.pageViews&&n.page(),Ne(window.location.pathname)},S=()=>d();window.addEventListener("popstate",S),s.push(()=>window.removeEventListener("popstate",S));let q=window;if(!q.__sendoraHistoryPatched){q.__sendoraHistoryPatched=!0;let G=history.pushState,xe=history.replaceState;history.pushState=function(...ie){let oe=G.apply(this,ie);return window.dispatchEvent(new Event("sendora:locationchange")),oe},history.replaceState=function(...ie){let oe=xe.apply(this,ie);return window.dispatchEvent(new Event("sendora:locationchange")),oe}}let se=()=>d();window.addEventListener("sendora:locationchange",se),s.push(()=>window.removeEventListener("sendora:locationchange",se))}if(t.appBackground||t.engagement){let d=()=>{if(document.visibilityState==="hidden"){j(),t.appBackground&&(w(!0),n.track("app.backgrounded",{sessionId:a()||void 0}));try{n.flush()}catch{}}else document.visibilityState==="visible"&&(t.appBackground&&(w(!0),n.track("app.foregrounded",{sessionId:a()||void 0})),t.engagement&&A===0&&(A=Date.now()))};if(document.addEventListener("visibilitychange",d),s.push(()=>document.removeEventListener("visibilitychange",d)),t.engagement){let S=()=>{j();try{n.flush()}catch{}};window.addEventListener("pagehide",S),s.push(()=>window.removeEventListener("pagehide",S))}}let pe=0,P=()=>{let d=Date.now();d-pe<5e3||(pe=d,w(!0))};return window.addEventListener("click",P,{passive:!0}),window.addEventListener("keydown",P,{passive:!0}),window.addEventListener("scroll",P,{passive:!0}),s.push(()=>{window.removeEventListener("click",P),window.removeEventListener("keydown",P),window.removeEventListener("scroll",P)}),()=>{j();for(let d of s)try{d()}catch{}}}function De(n){try{return window.sessionStorage?.getItem(n)??null}catch{return null}}function Le(n,e){try{window.sessionStorage?.setItem(n,e)}catch{}}var $=class n{constructor(e){this.http=e}static isSupported(){return typeof window>"u"?!1:"serviceWorker"in navigator&&"PushManager"in window&&"Notification"in window}static permission(){return typeof Notification>"u"?"denied":Notification.permission}async subscribe(e){if(!n.isSupported())throw new Error("[sendoracloud] Web Push not supported in this browser.");let t=Notification.permission;if(t==="default"&&(t=await Notification.requestPermission()),t!=="granted")throw new Error(`[sendoracloud] Notification permission ${t}.`);let r=await navigator.serviceWorker.getRegistration(e.scope??"/");r||(r=await navigator.serviceWorker.register(e.serviceWorkerPath,{scope:e.scope??"/"})),await navigator.serviceWorker.ready;let i=(await this.http.get("/push/vapid"))?.data?.publicKey;if(!i)throw new Error("[sendoracloud] backend returned no VAPID public key.");let a=await r.pushManager.getSubscription()??await r.pushManager.subscribe({userVisibleOnly:!0,applicationServerKey:ft(i)}),u=a.toJSON(),l=u.endpoint,g=u.keys?.p256dh??"",v=u.keys?.auth??"",w=await mt(l),k=await this.http.post("/push/tokens",{platform:"web",token:w,webEndpoint:l,webP256dh:g,webAuth:v,userAgent:typeof navigator<"u"?navigator.userAgent:void 0,locale:typeof navigator<"u"?navigator.language:void 0,timezone:Intl?.DateTimeFormat?.().resolvedOptions?.().timeZone,...e.userId?{userId:e.userId}:{}});if(!k?.data?.tokenId)throw new Error("[sendoracloud] backend returned no tokenId on subscribe.");return{tokenId:k.data.tokenId,subscription:a}}async unsubscribe(e="/"){if(!n.isSupported())return!1;let t=await navigator.serviceWorker.getRegistration(e);if(!t)return!1;let r=await t.pushManager.getSubscription();return r?await r.unsubscribe():!1}async trackOpen(e,t){let r={sendId:e};t!==void 0&&(r.clickAction=t);let s=await this.http.post("/push/track-open",r);if(!s.success)throw new Error(s.error?.message??"push.trackOpen failed")}};function ft(n){let e="=".repeat((4-n.length%4)%4),t=(n+e).replace(/-/g,"+").replace(/_/g,"/"),r=atob(t),s=new Uint8Array(r.length);for(let i=0;i<r.length;i++)s[i]=r.charCodeAt(i);return s}async function mt(n){let e=new TextEncoder().encode(n),t=await crypto.subtle.digest("SHA-256",e);return Array.from(new Uint8Array(t)).map(s=>s.toString(16).padStart(2,"0")).join("")}var W=class{constructor(e){}unsupported(){throw new Error("[SendoraCloud] sendora.audiences is not available in the browser SDK. Audiences require a secret (sk_*) key with the audiences:read/write scopes and must be managed from a trusted server, not the browser.")}list(){return this.unsupported()}get(e){return this.unsupported()}create(e){return this.unsupported()}update(e,t){return this.unsupported()}delete(e){return this.unsupported()}};var p=class extends Error{constructor(e,t,r){super(t),this.name="LinkError",this.code=e,this.statusCode=r}};function de(n,e){let t=(n??"").toUpperCase();return t==="NOT_FOUND"?new p("NOT_FOUND",e):t==="FORBIDDEN"||t==="UNAUTHORIZED"?new p("UNAUTHORIZED",e):t==="RATE_LIMITED"?new p("RATE_LIMITED",e):t==="ENTITLEMENT_ERROR"||/plan limit/i.test(e)?new p("PLAN_LIMIT",e):t==="VALIDATION_ERROR"?/iOS bundle|Android package/i.test(e)?new p("BUNDLE_MISMATCH",e):/2KB|10KB|linkData/i.test(e)?new p("DATA_TOO_LARGE",e):/fallbackUrl/i.test(e)&&/apps/i.test(e)?new p("FALLBACK_REQUIRED",e):new p("INVALID_INPUT",e):t==="PARSE_ERROR"||t==="HTTP_ERROR"||/HTTP \d{3}/.test(e)?new p("NETWORK",e):new p("UNKNOWN",e||`Unknown LinkError (code=${n??"none"})`)}var he=/^[a-z0-9-]{3,20}$/;function Ue(n){try{let t=new URL(n).pathname.split("/").filter(Boolean);if(t.length===0)return null;let r=t[t.length-1];return he.test(r)?r:null}catch{return null}}var yt=5*6e4,vt=50,wt=5,B=class{constructor(e){this.http=e;this.prewarmCache=new Map;this.prewarmInflight=0}cacheKey(e,t){if(t)return`k:${t}`;let r={},s=e;for(let i of Object.keys(s).sort())r[i]=s[i];return`s:${JSON.stringify(r)}`}evictExpired(){let e=Date.now();for(let[t,r]of this.prewarmCache)e-r.ts>yt&&this.prewarmCache.delete(t);for(;this.prewarmCache.size>vt;){let t=this.prewarmCache.keys().next().value;if(t===void 0)break;this.prewarmCache.delete(t)}}prewarm(e,t){this.evictExpired();let r=this.cacheKey(e,t?.key);if(this.prewarmCache.has(r)||this.prewarmInflight>=wt)return;this.prewarmInflight++;let s=this.doCreate(e).catch(i=>{throw this.prewarmCache.delete(r),i}).finally(()=>{this.prewarmInflight--});this.prewarmCache.set(r,{promise:s,ts:Date.now()})}async create(e,t){if(!e.title)throw new p("INVALID_INPUT","links.create: title is required");this.evictExpired();let r=this.cacheKey(e,t?.key),s=this.prewarmCache.get(r);return s?(this.prewarmCache.delete(r),s.promise):this.doCreate(e)}async doCreate(e){let t={title:e.title};e.fallbackUrl&&(t.fallbackUrl=e.fallbackUrl),e.iosDeepLinkPath&&(t.iosDeepLinkPath=e.iosDeepLinkPath),e.androidDeepLinkPath&&(t.androidDeepLinkPath=e.androidDeepLinkPath),e.linkData&&(t.linkData=e.linkData),e.ogTitle&&(t.ogTitle=e.ogTitle),e.ogDescription&&(t.ogDescription=e.ogDescription),e.ogImageUrl&&(t.ogImageUrl=e.ogImageUrl),e.campaign&&(t.campaign=e.campaign),e.source&&(t.source=e.source),e.medium&&(t.medium=e.medium),e.channel&&(t.channel=e.channel),e.tags&&(t.tags=e.tags),e.expiresAt&&(t.expiresAt=e.expiresAt),e.iosBundleId&&(t.iosBundleId=e.iosBundleId),e.androidPackageName&&(t.androidPackageName=e.androidPackageName);let r=await this.http.post("/sdk/links",t);if(!r.success||!r.data)throw de(r.error?.code,r.error?.message??"links.create failed");return r.data}async revoke(e){if(!he.test(e))throw new p("INVALID_INPUT",`links.revoke: '${e}' is not a valid shortcode`);let t=await this.http.post(`/sdk/links/${encodeURIComponent(e)}/revoke`,{});if(!t.success||!t.data)throw de(t.error?.code,t.error?.message??"links.revoke failed");return{shortcode:t.data.shortcode,revoked:!0}}async getStats(e){if(!he.test(e))throw new p("INVALID_INPUT",`links.getStats: '${e}' is not a valid shortcode`);let t=await this.http.get(`/sdk/links/${encodeURIComponent(e)}/stats`);if(!t.success||!t.data)throw de(t.error?.code,t.error?.message??"links.getStats failed");return t.data}};var J=class{constructor(e){this.http=e}async reportInstall(e={}){let t=await this.http.post("/attribution/install",e);if(!t.success||!t.data)throw new Error(t.error?.message??"attribution.reportInstall failed");return t.data}async checkDeferred(e={}){let t=await this.http.post("/attribution/deferred",e);if(!t.success)throw new Error(t.error?.message??"attribution.checkDeferred failed");return t.data??null}};var Z=class{constructor(e){this.http=e}async createTicket(e){let t=await this.http.post("/support/tickets",e);if(!t.success||!t.data)throw new Error(t.error?.message??"support.createTicket failed");return t.data}async submitCsat(e){let t=await this.http.post("/support/csat",e);if(!t.success||!t.data)throw new Error(t.error?.message??"support.submitCsat failed");return t.data}};var ee=class{constructor(e){this.http=e}async search(e){if(!e.query||e.query.trim().length===0)return[];let t=new URLSearchParams({query:e.query});e.limit&&t.set("limit",String(e.limit));let r=await this.http.get(`/kb/search?${t.toString()}`);if(!r.success||!Array.isArray(r.data))throw new Error(r.error?.message??"kb.search failed");return r.data}};var kt=/^[A-Za-z0-9_.-]{1,64}$/;function At(n){if(n!==void 0){if(typeof n!="string"||!kt.test(n))throw new Error(`[sendora] init: storagePrefix must be 1-64 chars of A-Z a-z 0-9 _ . - (got ${JSON.stringify(n)}). Changing it signs the browser out, so it is validated rather than ignored.`);return n}}var re=class re{constructor(e){this.autoTrackCleanup=null;this.http=new Y(e),this.storage=new X(At(e.storagePrefix),e.tokenStore==="memory"),this.consent=new H(e.defaultConsent===!0,this.http),this.analytics=new N(e,this.http,this.storage,this.consent),this.flags=new x(e,this.http,this.storage),this.surveys=new O(e,this.http,this.storage),this.messages=new M(e,this.http,this.storage),this.chatbot=new F(e,this.http,this.storage),this.auth=new V(e,this.http,this.storage,this.analytics,this.flags,this.chatbot),this.webPush=new $(this.http),this.audiences=new W(this.http),this.links=new B(this.http),this.attribution=new J(this.http),this.support=new Z(this.http),this.kb=new ee(this.http),e.autoTrack!==!1&&(this.autoTrackCleanup=Pe(this.analytics,e))}static init(e){return we(e.apiKey),new re(e)}static sanitizeHtml(e){return Q(e)}static safeUrl(e){return I(e)}track(e,t){this.analytics.track(e,t)}page(e){this.analytics.page(e)}identify(e,t,r){this.analytics.identify(e,t,r),this.flags.setContext({userId:e})}reset(){this.analytics.reset(),this.flags.reset(),this.chatbot.newSession()}async flush(){await this.analytics.flush()}destroy(){this.autoTrackCleanup&&(this.autoTrackCleanup(),this.autoTrackCleanup=null),this.analytics.destroy(),this.flags.destroy(),this.messages.destroy()}};re.version=E;var te=re,St=te;0&&(module.exports={AlreadyIdentifiedError,Analytics,Audiences,Auth,AuthError,Chatbot,Consent,CredentialInUseError,EmailAlreadyTakenError,FeatureFlags,InAppMessaging,LinkError,Links,SendoraCloud,Surveys,ValidationError,WebPush,extractShortcodeFromUrl,safeUrl,sanitizeHtml});
+"use strict";var Se=Object.defineProperty;var dt=Object.getOwnPropertyDescriptor;var ct=Object.getOwnPropertyNames;var ht=Object.prototype.hasOwnProperty;var pt=(s,e)=>{for(var t in e)Se(s,t,{get:e[t],enumerable:!0})},ft=(s,e,t,r)=>{if(e&&typeof e=="object"||typeof e=="function")for(let n of ct(e))!ht.call(s,n)&&n!==t&&Se(s,n,{get:()=>e[n],enumerable:!(r=dt(e,n))||r.enumerable});return s};var gt=s=>ft(Se({},"__esModule",{value:!0}),s);var ar={};pt(ar,{AMBIGUOUS_HELD_GUEST:()=>ce,AUTH_HELD_SLOT_KEYS:()=>rt,AUTH_STATES:()=>Ve,AUTH_WITHHELD_CODES:()=>G,AlreadyIdentifiedError:()=>K,Analytics:()=>L,Audiences:()=>q,Auth:()=>V,AuthError:()=>u,Chatbot:()=>O,Consent:()=>H,CredentialInUseError:()=>C,DEAD_CODES:()=>le,EmailAlreadyTakenError:()=>b,FeatureFlags:()=>U,HELD_GUEST_SLOTS:()=>R,HeldGuestLimitError:()=>W,HeldGuestProjectMismatch:()=>_,InAppMessaging:()=>N,LinkError:()=>f,Links:()=>B,REFRESH_END_REASONS:()=>ue,REJECTED_IN_WITHHELD:()=>$e,RELEASE_HELD_ON_END_REASONS:()=>de,SendoraCloud:()=>ye,Surveys:()=>x,ValidationError:()=>m,WebPush:()=>$,default:()=>or,extractShortcodeFromUrl:()=>at,projectVerdict:()=>he,safeUrl:()=>S,sanitizeHtml:()=>ne});module.exports=gt(ar);var Pe=/^[a-zA-Z][a-zA-Z0-9._:-]{0,127}$/;var mt=new Set(["__proto__","constructor","prototype"]),m=class extends Error{constructor(e){super(`[SendoraCloud] ${e}`),this.name="SendoraValidationError"}};function Le(s){if(typeof s!="string"||!Pe.test(s))throw new m(`Invalid event name: must match ${Pe}, got "${String(s)}".`)}function Ue(s){if(s==null)return;if(typeof s!="object"||Array.isArray(s))throw new m("Properties must be a plain object, not an array or primitive.");let e=xe(s);if(e>5)throw new m(`Properties nested too deeply (${e} levels, max 5).`);Ne(s);let t;try{t=JSON.stringify(s).length}catch{throw new m("Properties contain a circular reference or unserializable value.")}if(t>32768)throw new m(`Properties too large (${t} bytes, max 32768).`)}function xe(s,e=0){if(e>6||s==null||typeof s!="object")return e;let t=e;for(let r of Object.keys(s)){let n=xe(s[r],e+1);n>t&&(t=n)}return t}function Ne(s){if(!(s==null||typeof s!="object"))for(let e of Object.keys(s)){if(mt.has(e))throw new m(`Forbidden property key "${e}" (prototype pollution guard).`);Ne(s[e])}}var yt=/^pk_[A-Za-z0-9_-]{16,}$/;function Oe(s){if(!s||typeof s!="string")throw new m("apiKey is required.");if(s.startsWith("sk_")||s.startsWith("sendora_secret_"))throw new m("Secret keys must NEVER be used in browser SDK. Use a publishable key (pk_...).");if(!yt.test(s))throw new m("Invalid publishable key format. Expected pk_... (17+ chars).")}function He(s){let e=s.replace(/\/$/,"");if(!(e.startsWith("http://localhost")||e.startsWith("http://127.0.0.1"))&&!e.startsWith("https://"))throw new m("apiUrl must be https:// (only http://localhost is allowed for dev).")}var Me={name:"@sendoracloud/sdk-web",version:"3.24.0",description:"Sendora Cloud Web SDK \u2014 analytics, feature flags, surveys, in-app messaging, chatbot, auth, deep links (Branch / Firebase parity). Zero dependencies, TypeScript, SSR-safe.",type:"module",main:"./dist/index.cjs",module:"./dist/index.js",types:"./dist/index.d.ts",exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js",require:"./dist/index.cjs"}},files:["dist","README.md","LICENSE"],keywords:["sendora","analytics","feature-flags","surveys","in-app-messaging","chatbot","tracking","customer-engagement"],homepage:"https://sendoracloud.com/sdks",bugs:{url:"https://github.com/sendoracloud/sdk-web/issues"},author:"Sendora Cloud <hello@sendoracloud.com>",license:"Apache-2.0",publishConfig:{access:"public"},sideEffects:!1,scripts:{build:"tsup src/index.ts --format cjs,esm --dts --clean --minify",typecheck:"tsc --noEmit && tsc --noEmit -p tsconfig.test.json",test:"vitest run",prepublishOnly:"npm run build"},devDependencies:{typescript:"^5.4.0",tsup:"^8.0.0"}};var T=Me.version;var kt="https://api.sendoracloud.com",vt=1e4,At="@sendoracloud/sdk-web",re=class{constructor(e){let t=(e.apiUrl??kt).replace(/\/$/,"");He(t),this.apiKey=e.apiKey,this.baseUrl=t,this.debug=!!e.debug}get(e,t){return this.request("GET",e,void 0,t)}post(e,t,r){return this.request("POST",e,t,r)}patch(e,t,r){return this.request("PATCH",e,t,r)}delete(e,t){return this.request("DELETE",e,void 0,t)}async request(e,t,r,n){let i=`${this.baseUrl}/api/v1${t}`,o=typeof AbortController<"u"?new AbortController:null,a=o?setTimeout(()=>o.abort(),vt):null;try{let l=await fetch(i,{method:e,headers:{"Content-Type":"application/json","X-API-Key":this.apiKey,"X-Sendora-SDK-Name":At,"X-Sendora-SDK-Version":T,...n??{}},body:r?JSON.stringify(r):void 0,signal:o?o.signal:void 0});a&&clearTimeout(a);let d;try{d=await l.json()}catch{d={success:!1,error:{code:"PARSE_ERROR",message:`HTTP ${l.status}`}}}if(this.debug&&console.debug(`[SendoraCloud] ${e} ${t} \u2192 ${l.status}`),!l.ok){if(t.startsWith("/auth-service/")&&!this.debug)console.warn(`[SendoraCloud] ${e} ${t} \u2192 HTTP ${l.status}`);else{let g=d?.error?.code??"HTTP_ERROR",k=d?.error?.message??`HTTP ${l.status}`,v=d?.error?.details?.fieldErrors,y=v?` (${Object.entries(v).map(([w,z])=>`${w}: ${(z??[]).join(", ")}`).join("; ")})`:"";console.warn(`[SendoraCloud] ${e} ${t} \u2192 HTTP ${l.status} \u2014 ${g}: ${k}${y}`)}d&&d.error&&(d.error={...d.error,status:l.status})}return d}catch(l){a&&clearTimeout(a);let d=l instanceof Error&&l.name==="AbortError"?"timeout":"error";return console.warn(`[SendoraCloud] ${e} ${t} network ${d}`),{success:!1,error:{code:"NETWORK_ERROR",message:d}}}}};var St="sendora_",se=class{constructor(e,t=!1){this.memoryStore=new Map;this.useLocalStorage=t?!1:this.checkLocalStorage(),this.prefix=e??St}get(e){let t=this.prefix+e;if(this.useLocalStorage)try{return localStorage.getItem(t)}catch{return this.memoryStore.get(t)??null}return this.memoryStore.get(t)??null}set(e,t){let r=this.prefix+e;if(this.useLocalStorage)try{localStorage.setItem(r,t);return}catch{}this.memoryStore.set(r,t)}remove(e){let t=this.prefix+e;if(this.useLocalStorage)try{localStorage.removeItem(t)}catch{}this.memoryStore.delete(t)}isPersistent(){return this.useLocalStorage}relativeKey(e){return e.startsWith(this.prefix)?e.slice(this.prefix.length):null}clearPrefix(e){let t=this.prefix+e;if(this.useLocalStorage)try{for(let r=localStorage.length-1;r>=0;r--){let n=localStorage.key(r);n&&n.startsWith(t)&&localStorage.removeItem(n)}}catch{}for(let r of Array.from(this.memoryStore.keys()))r.startsWith(t)&&this.memoryStore.delete(r)}checkLocalStorage(){try{if(typeof localStorage>"u")return!1;let e="__sendora_test__";return localStorage.setItem(e,"1"),localStorage.removeItem(e),!0}catch{return!1}}};function P(s=""){let e=new Uint8Array(16),t=typeof globalThis<"u"&&"crypto"in globalThis?globalThis.crypto:void 0;if(!t||typeof t.getRandomValues!="function")throw new Error("[SendoraCloud] crypto.getRandomValues unavailable \u2014 refusing to mint IDs without a CSPRNG");t.getRandomValues(e);let r="";for(let n of e)r+=n.toString(16).padStart(2,"0");return s+r}var Fe=500,Ee=10,Ie=6e4,L=class{constructor(e,t,r,n){this.queue=[];this.timer=null;this.userId=null;this.identityToken=null;this.consecutiveFailures=0;this.nextFlushAfter=0;this.breakerOpenAt=0;this.breakerWarned=!1;this.http=t,this.storage=r,this.consent=n,this.projectId=e.projectId,this.flushInterval=e.flushInterval??5e3,this.maxQueueSize=e.maxQueueSize??20,this.persistUserId=!!e.persistUserId,this.stripQueryParams=e.stripQueryParams!==!1,this.appVersion=e.appVersion,this.storage.get("schema_version")===null&&this.storage.set("schema_version","1");let i=this.storage.get("anonymous_id");if(i?this.anonymousId=i:(this.anonymousId=P("anon_"),this.storage.set("anonymous_id",this.anonymousId)),this.persistUserId){let o=this.storage.get("user_id");o&&(this.userId=o)}this.timer=setInterval(()=>this.flush(),this.flushInterval),typeof window<"u"&&window.addEventListener("beforeunload",()=>this.flush()),this.consent.subscribe(o=>{o&&this.flush()})}track(e,t){Le(e),t&&Ue(t),this.queue.length>=Fe&&this.queue.shift(),this.queue.push({eventType:e,properties:t??{},userId:this.userId??void 0,anonymousId:this.anonymousId,timestamp:new Date().toISOString(),identityToken:this.identityToken??void 0}),this.queue.length>=this.maxQueueSize&&this.flush()}page(e){if(typeof window>"u")return;let t=this.stripQueryParams?window.location.origin+window.location.pathname:window.location.href;this.track("page.viewed",{url:t,path:window.location.pathname,title:document.title,referrer:document.referrer||void 0,...e})}identify(e,t,r){if(typeof e!="string"||e.length===0||e.length>256)throw new Error("[SendoraCloud] userId must be a 1-256 char string.");this.userId=e,this.identityToken=r?.identityToken??null,this.persistUserId&&this.storage.set("user_id",e),this.track("user.identified",{...t})}reset(e=!0){this.userId=null,this.identityToken=null,this.storage.remove("user_id"),e&&(this.anonymousId=P("anon_"),this.storage.set("anonymous_id",this.anonymousId)),this.storage.clearPrefix("iam_shown_"),this.storage.clearPrefix("survey_shown_")}withholdIdentity(){this.userId=null,this.identityToken=null}dropQueue(){this.queue=[]}async flush(){if(this.queue.length===0||!this.consent.isGranted()||Date.now()<this.nextFlushAfter)return;this.consecutiveFailures>Ee&&Date.now()-this.breakerOpenAt>=Ie&&(this.consecutiveFailures=0,this.breakerOpenAt=0,this.breakerWarned=!1);let e=this.queue.splice(0,100),t=this.getSessionId(),r=e.map(a=>({projectId:this.projectId,module:"custom",eventType:a.eventType,userId:a.userId,anonymousId:a.anonymousId,identityToken:a.identityToken,timestamp:a.timestamp??new Date().toISOString(),properties:a.properties??{},context:this.getContext(),...t?{sessionId:t}:{},consent:["analytics"]}));if((await this.http.post("/events/batch",{events:r})).success){this.consecutiveFailures=0,this.breakerOpenAt=0,this.breakerWarned=!1;return}if(this.consecutiveFailures++,this.consecutiveFailures>Ee){this.breakerWarned||(this.breakerOpenAt=Date.now(),this.breakerWarned=!0,console.warn(`[SendoraCloud] Analytics circuit breaker open after ${Ee} consecutive failed flushes \u2014 events will be dropped until a flush succeeds or ${Ie}ms elapse.`));return}let i=Math.min(Ie,1e3*2**this.consecutiveFailures);this.nextFlushAfter=Date.now()+i;let o=Math.max(0,Fe-this.queue.length);o>0&&this.queue.unshift(...e.slice(0,o))}destroy(){this.timer&&clearInterval(this.timer),this.timer=null,this.flush()}getSessionId(){try{return typeof sessionStorage>"u"?void 0:sessionStorage.getItem("sendora_session_id")||void 0}catch{return}}getContext(){return typeof window>"u"?{sdk:{name:"@sendoracloud/sdk-web",version:T}}:{page:{url:this.stripQueryParams?window.location.origin+window.location.pathname:window.location.href,path:window.location.pathname,title:document.title},referrer:document.referrer||void 0,locale:typeof navigator<"u"?navigator.language:void 0,device:this.buildDevice(),sdk:{name:"@sendoracloud/sdk-web",version:T}}}buildDevice(){if(typeof navigator>"u")return;let e=navigator.userAgent||"",r=navigator.userAgentData?.mobile??/Mobi|Android|iPhone|iPod/i.test(e);return{type:/iPad|Tablet|(?:Android(?!.*Mobile))/i.test(e)?"tablet":r?"mobile":"desktop",os:"Web",osVersion:"",model:"",appVersion:this.resolveAppVersion(),browser:Et(e)}}resolveAppVersion(){if(this.appVersion)return this.appVersion;if(typeof document<"u"){let r=document.querySelector('meta[name="sendora:app-version"]')?.getAttribute("content");if(r)return r}let e=globalThis.__SENDORA_APP_VERSION__;return typeof e=="string"?e:""}};function Et(s){let e=[["Edge",/Edg\/(\d+)/],["Opera",/OPR\/(\d+)/],["Firefox",/Firefox\/(\d+)/],["Samsung Internet",/SamsungBrowser\/(\d+)/],["Chrome",/Chrome\/(\d+)/],["Safari",/Version\/(\d+)[^ ]* Safari/]];for(let[t,r]of e){let n=r.exec(s);if(n)return`${t} ${n[1]}`}return"Unknown"}var U=class{constructor(e,t,r){this.cache=new Map;this.refreshInterval=null;this.http=t,this.storage=r;let n=this.storage.get("flags");if(n)try{let i=JSON.parse(n);if(Array.isArray(i))for(let o of i)Te(o)&&this.cache.set(o.key,o)}catch{}}setContext(e){this.userId=e.userId,this.entityId=e.entityId,this.environment=e.environment}async getFlag(e){if(typeof e!="string"||e.length===0||e.length>128)return null;let t=this.cache.get(e);if(t)return t.value;let r=await this.http.post("/feature-flags/evaluate",{key:e,userId:this.userId,entityId:this.entityId,environment:this.environment});return r.success&&r.data&&Te(r.data)?(this.cache.set(e,r.data),this.persistCache(),r.data.value):null}async isEnabled(e,t=!1){let r=await this.getFlag(e);return typeof r=="boolean"?r:t}async refreshAll(){let e=await this.http.post("/feature-flags/evaluate-all",{userId:this.userId,entityId:this.entityId,environment:this.environment});if(e.success&&Array.isArray(e.data)){this.cache.clear();for(let t of e.data)Te(t)&&this.cache.set(t.key,t);this.persistCache()}}startAutoRefresh(e=6e4){this.stopAutoRefresh(),this.refreshAll(),this.refreshInterval=setInterval(()=>this.refreshAll(),e)}stopAutoRefresh(){this.refreshInterval&&clearInterval(this.refreshInterval),this.refreshInterval=null}getAllFlags(){let e={};for(let[t,r]of this.cache)e[t]=r.value;return e}reset(){this.cache.clear(),this.storage.remove("flags"),this.userId=void 0,this.entityId=void 0,this.environment=void 0}destroy(){this.stopAutoRefresh()}persistCache(){this.storage.set("flags",JSON.stringify(Array.from(this.cache.values())))}};function Te(s){if(s==null||typeof s!="object")return!1;let e=s;return Object.prototype.hasOwnProperty.call(e,"__proto__")||Object.prototype.hasOwnProperty.call(e,"constructor")?!1:typeof e.key=="string"&&"value"in e}var It=32*1024,x=class{constructor(e,t,r){this.activeSurvey=null;this.http=t,this.storage=r}onDisplay(e){this.onSurveyDisplay=e}async showSurvey(e){if(typeof e!="string"||!/^[A-Za-z0-9_-]{6,64}$/.test(e))return null;let t=`survey_shown_${e}`;if(this.storage.get(t))return null;let r=await this.http.get(`/surveys/${encodeURIComponent(e)}/config`);return!r.success||!r.data||!Tt(r.data)?null:(this.activeSurvey=r.data,this.storage.set(t,"1"),this.onSurveyDisplay&&this.onSurveyDisplay(r.data),r.data)}async submitResponse(e,t,r=!0){let n=0;try{n=JSON.stringify(t).length}catch{return!1}if(n>It)return!1;let i=await this.http.post("/surveys/responses",{surveyId:e,answers:t,completed:r});return i.success&&(this.activeSurvey=null),i.success}dismiss(){this.activeSurvey=null}getActiveSurvey(){return this.activeSurvey}};function Tt(s){if(s==null||typeof s!="object")return!1;let e=s;return typeof e.id!="string"||typeof e.name!="string"||!Array.isArray(e.questions)?!1:e.questions.every(Rt)}function Rt(s){if(s==null||typeof s!="object")return!1;let e=s;return typeof e.id=="string"&&typeof e.text=="string"}function S(s){if(!(!s||typeof s!="string"))try{let e=typeof window<"u"?window.location.href:"https://local/",t=new URL(s,e);return t.protocol==="http:"||t.protocol==="https:"?t.href:void 0}catch{return}}var _t=new Set(["b","i","u","em","strong","a","p","br","span","ul","ol","li","h1","h2","h3","h4"]),bt={a:new Set(["href","target","rel"])};function ne(s){if(typeof DOMParser>"u")return"";let t=new DOMParser().parseFromString(`<div>${s}</div>`,"text/html").body.firstElementChild;return t?(je(t),t.innerHTML):""}function je(s){let e=Array.from(s.children);for(let t of e){let r=t.tagName.toLowerCase();if(!_t.has(r)){let i=document.createTextNode(t.textContent??"");t.replaceWith(i);continue}let n=bt[r]??new Set;for(let i of Array.from(t.attributes)){if(!n.has(i.name.toLowerCase())){t.removeAttribute(i.name);continue}if(i.name.toLowerCase()==="href"){let o=S(i.value);o?t.setAttribute("href",o):t.removeAttribute(i.name)}}r==="a"&&(t.setAttribute("rel","noopener noreferrer"),t.setAttribute("target","_blank")),je(t)}}var N=class{constructor(e,t,r){this.messages=[];this.pollInterval=null;this.http=t,this.storage=r}onDisplay(e){this.onMessageDisplay=e}async checkMessages(){let e=await this.http.get("/in-app-messages/active");if(!e.success||!Array.isArray(e.data))return null;this.messages=e.data.map(Ct);for(let t of this.messages){let r=`iam_shown_${t.id}`;if(!this.storage.get(r))return this.storage.set(r,"1"),this.onMessageDisplay&&this.onMessageDisplay(t),t}return null}async recordAction(e,t){await this.http.post("/in-app-messages/impressions",{messageId:e,action:t})}startPolling(e=3e5){this.stopPolling(),this.checkMessages(),this.pollInterval=setInterval(()=>this.checkMessages(),e)}stopPolling(){this.pollInterval&&clearInterval(this.pollInterval),this.pollInterval=null}getMessages(){return this.messages}destroy(){this.stopPolling()}};function Ct(s){return{...s,content:{...s.content,ctaUrl:S(s.content.ctaUrl),imageUrl:S(s.content.imageUrl)}}}var Dt=4e3,O=class{constructor(e,t,r){this.chatbotId=null;this.messages=[];this.http=t,this.storage=r;let n=this.storage.get("chat_session_id");this.sessionId=n??P("chat_"),n||this.storage.set("chat_session_id",this.sessionId)}init(e){if(typeof e!="string"||!/^[A-Za-z0-9_-]{6,64}$/.test(e))throw new Error("[SendoraCloud] Invalid chatbotId.");this.chatbotId=e}onNewMessage(e){this.onMessage=e}async sendMessage(e,t){if(!this.chatbotId||typeof e!="string"||e.length===0||e.length>Dt)return null;let r={role:"user",content:e,timestamp:new Date().toISOString()};this.messages.push(r);let n=await this.http.post("/chatbot/message",{chatbotId:this.chatbotId,sessionId:this.sessionId,message:e,userId:t});if(n.success&&n.data&&typeof n.data.reply=="string"){let i={role:"assistant",content:n.data.reply,timestamp:new Date().toISOString()};return this.messages.push(i),this.onMessage&&this.onMessage(i),i}return null}getMessages(){return[...this.messages]}newSession(){this.messages=[],this.sessionId=P("chat_"),this.storage.set("chat_session_id",this.sessionId)}getSessionId(){return this.sessionId}};var H=class{constructor(e,t){this.listeners=new Set;this.granted=e,this.http=t}isGranted(){return this.granted}grant(){this.granted||(this.granted=!0,this.emit())}revoke(){this.granted&&(this.granted=!1,this.emit())}subscribe(e){return this.listeners.add(e),()=>this.listeners.delete(e)}async record(e){if(!this.http)throw new Error("consent.record requires SDK init (HttpClient unavailable)");let t=await this.http.post("/consent/record",e);if(!t.success||!t.data)throw new Error(t.error?.message??"consent.record failed");return t.data}async requestDeletion(e){if(!this.http)throw new Error("consent.requestDeletion requires SDK init (HttpClient unavailable)");let t=await this.http.post("/consent/deletion-request",e);if(!t.success||!t.data)throw new Error(t.error?.message??"consent.requestDeletion failed");return t.data}emit(){for(let e of this.listeners)try{e(this.granted)}catch{}}};var M="auth_access_token",F="auth_access_expires",ie="auth_refresh_token",oe="auth_user",Y="auth_session",j=["auth_held_0","auth_held_1","auth_held_2","auth_held_3","auth_held_4"],ae="auth_mint_key",Ge="schema_version";var We=[M,F,ie,oe,Y],Pt=[...We,...j],Dr=[...Pt,ae];function Lt(s){if(s===null)return{user:null,unreadable:!1};try{let e=JSON.parse(s);return!e||typeof e!="object"||typeof e.id!="string"||e.id.length===0?{user:null,unreadable:!0}:{user:e,unreadable:!1}}catch{return{user:null,unreadable:!0}}}function Ut(s){if(s===null)return{record:null,unreadable:!1};try{let e=JSON.parse(s);if(!e||typeof e!="object"||e.v!==1)return{record:null,unreadable:!0};if(!e.user||typeof e.user!="object"||typeof e.user.id!="string"||e.user.id.length===0)return{record:null,unreadable:!0};if(typeof e.refreshToken!="string"||e.refreshToken.length===0)return{record:null,unreadable:!0};let t=typeof e.accessToken=="string"&&e.accessToken.length>0?e.accessToken:null,r=typeof e.accessExpiresAt=="number"&&Number.isFinite(e.accessExpiresAt)?e.accessExpiresAt:0,n=Array.isArray(e.heldReportPending)?e.heldReportPending.filter(i=>typeof i=="string"):void 0;return{record:{v:1,user:e.user,accessToken:t,accessExpiresAt:r,refreshToken:e.refreshToken,...n&&n.length>0?{heldReportPending:n}:{}},unreadable:!1}}catch{return{record:null,unreadable:!0}}}function Ke(s){if(s===null)return{slot:null,unreadable:!1};try{let e=JSON.parse(s);return!e||typeof e!="object"||e.v!==1||typeof e.userId!="string"||e.userId.length===0||typeof e.refreshToken!="string"||e.refreshToken.length===0?{slot:null,unreadable:!0}:{slot:{v:1,userId:e.userId,sid:typeof e.sid=="string"?e.sid:"",refreshToken:e.refreshToken,tokenAtHold:typeof e.tokenAtHold=="string"?e.tokenAtHold:e.refreshToken,heldAt:typeof e.heldAt=="number"&&Number.isFinite(e.heldAt)?e.heldAt:0,project:typeof e.project=="string"?e.project:null,autoRestore:e.autoRestore!==!1},unreadable:!1}}catch{return{slot:null,unreadable:!0}}}var J=class{constructor(e){this.storage=e}readDisk(){let{record:e,unreadable:t}=Ut(this.storage.get(Y)),{user:r,unreadable:n}=Lt(this.storage.get(oe)),i=this.storage.get(F),o=i?Number(i):0;return{record:e,recordUnreadable:t,legacy:{user:r,userUnreadable:n,accessToken:this.storage.get(M),accessExpiresAt:Number.isFinite(o)?o:0,refreshToken:this.storage.get(ie)}}}currentRefresh(){return this.readDisk().legacy.refreshToken}static recordTrusted(e){return!!e.record&&!!e.legacy.refreshToken&&e.record.refreshToken===e.legacy.refreshToken}writeSession(e){this.storage.set(oe,JSON.stringify(e.user)),e.accessToken?(this.storage.set(M,e.accessToken),this.storage.set(F,String(e.accessExpiresAt))):(this.storage.remove(M),this.storage.remove(F)),this.storage.set(ie,e.refreshToken),this.storage.set(Y,JSON.stringify(e)),this.storage.get(Ge)!=="2"&&this.storage.set(Ge,"2")}clearRecord(){this.storage.remove(Y)}writeLimboTokens(e){this.storage.set(M,e.accessToken),this.storage.set(F,String(e.accessExpiresAt)),this.storage.set(ie,e.refreshToken)}clearSession(){for(let e of We)this.storage.remove(e)}clearStaleBlob(){this.storage.remove(oe),this.storage.remove(M),this.storage.remove(F),this.storage.remove(Y)}readSlots(){let e=[],t=[];return j.forEach((r,n)=>{let{slot:i,unreadable:o}=Ke(this.storage.get(r));e.push(i),o&&t.push(n)}),{slots:e,unreadable:t}}readSlot(e){return Ke(this.storage.get(j[e])).slot}writeSlot(e,t){let r=j[e];t===null?this.storage.remove(r):this.storage.set(r,JSON.stringify(t))}freeSlot(){let{slots:e,unreadable:t}=this.readSlots();for(let r=0;r<e.length;r++)if(e[r]===null&&!t.includes(r))return r;return null}readMintKey(){return this.storage.get(ae)}writeMintKey(e){this.storage.set(ae,e)}clearMintKey(){this.storage.remove(ae)}};var Ve=["unknown","signed_out","anonymous","identified","withheld"],R=5,le=["INVALID_REFRESH_TOKEN"],ue=["expired","revoked","evicted","deleted","reuse","unknown"],de=["deleted","revoked","expired"],ce="AMBIGUOUS_HELD_GUEST",$e=["MINT","SIGN_IN","LINK","CLAIM","RESTORE","DISCARD","DELETE","SESSION_VERB"],G={SESSION_WITHHELD:"SESSION_WITHHELD",PROJECT_MISMATCH:"PROJECT_MISMATCH"};var qe="project";function he(s,e){if(s===void 0)return"match";let t=E(e);if(t===null||!Object.prototype.hasOwnProperty.call(t,qe))return"unknown";let r=t[qe];return r===null?"mismatch":typeof r=="string"&&r===s?"match":"mismatch"}function E(s){if(typeof s!="string"||s.length===0)return null;let e=s.split(".");if(e.length!==3)return null;let t=Nt(e[1]);if(t===null)return null;let r=Ot(t);if(r===null)return null;let n;try{n=JSON.parse(r)}catch{return null}return n===null||typeof n!="object"||Array.isArray(n)?null:n}var xt=(()=>{let s=new Int16Array(128).fill(-1),e="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789";for(let t=0;t<e.length;t++)s[e.charCodeAt(t)]=t;return s[45]=62,s[95]=63,s[43]=62,s[47]=63,s})();function Nt(s){let e=s.length;for(;e>0&&s.charCodeAt(e-1)===61;)e--;if(e%4===1)return null;let t=new Uint8Array(Math.floor(e*3/4)),r=0,n=0,i=0;for(let o=0;o<e;o++){let a=s.charCodeAt(o),l=a<128?xt[a]:-1;if(l<0)return null;r=r<<6|l,n+=6,n>=8&&(n-=8,t[i++]=r>>n&255)}return i===t.length?t:t.subarray(0,i)}function Ot(s){let e="",t=0,r=s.length;for(;t<r;){let n=s[t],i,o;if(n<128)i=n,o=0;else if(n>=194&&n<=223)i=n&31,o=1;else if(n>=224&&n<=239)i=n&15,o=2;else if(n>=240&&n<=244)i=n&7,o=3;else return null;if(t+o>=r)return null;for(let a=1;a<=o;a++){let l=s[t+a];if((l&192)!==128)return null;i=i<<6|l&63}if(o===2&&i<2048||o===3&&(i<65536||i>1114111)||i>=55296&&i<=57343)return null;if(i>65535){let a=i-65536;e+=String.fromCharCode(55296+(a>>10),56320+(a&1023))}else e+=String.fromCharCode(i);t+=o+1}return e}var Be=3e4,Ht=5*6e4,Mt=/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;function Re(s){if(!s||typeof s!="object")return!1;let e=s,t=e.user,r=e.tokens;return!(!t||typeof t.id!="string"||t.id.length===0||!r||typeof r.accessToken!="string"||r.accessToken.length===0||typeof r.refreshToken!="string"||r.refreshToken.length===0||typeof r.expiresIn!="number"||r.expiresIn<=0||t.isAnonymous!==void 0&&typeof t.isAnonymous!="boolean"||t.email!==void 0&&t.email!==null&&typeof t.email!="string"||t.emailVerified!==void 0&&typeof t.emailVerified!="boolean"||t.name!==void 0&&t.name!==null&&typeof t.name!="string"||t.signupMethod!==void 0&&t.signupMethod!==null&&typeof t.signupMethod!="string"||t.lastLoginMethod!==void 0&&t.lastLoginMethod!==null&&typeof t.lastLoginMethod!="string"||t.project!==void 0&&t.project!==null&&typeof t.project!="string"||e.retiredAnonUserId!==void 0&&typeof e.retiredAnonUserId!="string")}var b=class extends Error{constructor(e="An account with this email already exists"){super(e),this.name="EmailAlreadyTakenError"}},K=class extends Error{constructor(e="Already signed in with an identity; use link*() to add a credential, or sign out first"){super(e),this.name="AlreadyIdentifiedError"}},C=class extends Error{constructor(t="This credential is already linked to a different account",r){super(t);this.code="CREDENTIAL_IN_USE";this.kind="credential_in_use";this.retryable=!1;this.name="CredentialInUseError",this.provider=r?.provider,this.collision=r?.collision,this.status=r?.status}};function Ft(s){let e=s?.error?.details;if(!e||typeof e!="object")return{};let t=e;return{provider:typeof t.provider=="string"?t.provider:void 0,collision:t.collision==="identity"||t.collision==="email"?t.collision:void 0}}function ze(s){let e=s?.error?.details;if(!e||typeof e!="object")return;let t=e.endReason;return typeof t=="string"&&ue.includes(t)?t:void 0}var jt=new Set(["network","server","rate_limited","account_locked"]);function Gt(s,e){switch(s){case"NETWORK_ERROR":case"NETWORK_TIMEOUT":return"network";case"PARSE_ERROR":case"RESTORE_FAILED":return"server";case"RATE_LIMITED":case"RATE_LIMIT":case"RATE_LIMIT_EXCEEDED":case"QUOTA_EXCEEDED":return"rate_limited";case"ACCOUNT_LOCKED":return"account_locked";case"CREDENTIAL_IN_USE":return"credential_in_use";case"LAST_CREDENTIAL":return"last_credential";case"RECENT_AUTH_REQUIRED":return"recent_auth_required";case"NOT_ANONYMOUS":case"FORBIDDEN_NON_ANONYMOUS":return"already_identified";case"PASSKEY_USER_CANCELLED":case"GAME_CENTER_CANCELLED":case"PLAY_GAMES_CANCELLED":case"SSO_CANCELLED":case"SIGN_IN_SUPERSEDED":case"LINK_SUPERSEDED":case"CLAIM_SUPERSEDED":case"HELD_GUEST_CHANGED":return"cancelled";case"GAME_CENTER_UNAVAILABLE":case"PLAY_GAMES_UNAVAILABLE":case"ENTITLEMENT_ERROR":case"tier_required":case"SESSION_WITHHELD":case"PROJECT_MISMATCH":case"HELD_GUEST_LIMIT":case"HELD_GUEST_PROJECT_MISMATCH":case"UNSUPPORTED_LINK_CREDENTIAL":return"config";case"UNAUTHORIZED":case"INVALID_CREDENTIALS":case"INVALID_REFRESH_TOKEN":case"EMAIL_OTP_INVALID":case"MAGIC_LINK_INVALID":case"PASSKEY_RP_MISMATCH":case"NOT_SIGNED_IN":case"AMBIGUOUS_HELD_GUEST":case"HELD_GUEST_NOT_FOUND":case"HELD_GUEST_GONE":case"NOT_IDENTIFIED":case"CREDENTIAL_STALE":case"MFA_REQUIRED":return"invalid_credential";default:break}if(typeof e=="number"){if(e===429)return"rate_limited";if(e>=500)return"server";if(e>=400)return"invalid_credential"}return"unknown"}var u=class extends Error{constructor(e,t,r){super(t),this.name="AuthError",this.code=e,this.kind=r?.kind??Gt(e,r?.status),this.retryable=jt.has(this.kind),this.retryAfterSeconds=r?.retryAfterSeconds,this.status=r?.status}},W=class extends u{constructor(e,t=`Every held-guest slot is occupied (${5}); restore or discard one first`){super("HELD_GUEST_LIMIT",t,{kind:"config"}),this.name="HeldGuestLimitError",this.heldGuests=e}},_=class extends u{constructor(e,t,r){super("HELD_GUEST_PROJECT_MISMATCH",`Held guest ${e} belongs to project ${r??"null"}, not ${t}`,{kind:"config"}),this.name="HeldGuestProjectMismatch",this.userId=e,this.expectedProjectId=t,this.actualProjectId=r}};function Kt(s){if(s instanceof u||s instanceof b||s instanceof K||s instanceof C)return s;let e=s?.name;return e==="AbortError"||e==="TimeoutError"||e==="NetworkTimeoutError"?new u("NETWORK_TIMEOUT",s instanceof Error?s.message:"timeout",{kind:"network"}):new u("UNKNOWN_ERROR",s instanceof Error?s.message:String(s),{kind:"unknown"})}function p(s){let e=s.error?.status,t=s.error?.details?.retryAfterSeconds;return{status:typeof e=="number"?e:void 0,retryAfterSeconds:typeof t=="number"&&Number.isFinite(t)&&t>0?t:void 0}}var V=class{constructor(e,t,r,n,i,o,a={}){this.state="unknown";this.record=null;this.user=null;this.accessToken=null;this.accessExpiresAt=0;this.withheld=null;this.clockSkewConfirmed=!1;this.inflight=Promise.resolve();this.refreshInflight=null;this.attemptInFlight=!1;this.refreshFailureCount=0;this.refreshCooldownUntil=0;this.visibilityResetUnsub=null;this.proactiveRefreshTimer=null;this.proactiveRefreshCleanup=null;this.storageEventUnsub=null;this.rehydrateScheduled=!1;this.takeoverListeners=new Set;this.lastTakeover=null;this.deletionCancelledListeners=new Set;this.lastDeletionCancelled=null;this.lastAnonRetirement=null;this.authStateListeners=new Set;this.identityWithheldListeners=new Set;this.hydrated=!1;this.http=t,this.storage=r,this.store=new J(r),this.analytics=n,this.flags=i,this.chatbot=o,this.hooks=a,this.expectedProjectId=e.expectedProjectId,this.slotProjectAnchor=e.expectedProjectId??e.projectId,this.autoRestoreHeldGuest=e.autoRestoreHeldGuest!==!1,this.hydrateFromDisk("boot"),this.hydrated=!0,this.startStorageEventRehydrate()}status(){return this.state}authStateReady(){return Promise.resolve(this.state)}getCurrentUser(){return this.user}getUserSync(){return this.user}isReady(){return this.hydrated}onDeviceTakeover(e){return this.takeoverListeners.add(e),()=>{this.takeoverListeners.delete(e)}}getLastDeviceTakeover(){return this.lastTakeover}onAuthStateChanged(e){if(this.authStateListeners.add(e),this.hydrated){let t=this.user,r={event:"initial",status:this.state,user:t,...this.withheld?{withheld:this.withheld.info}:{}};try{e(r)}catch{}if(t)try{e({event:"signed_in",user:t})}catch{}}return()=>{this.authStateListeners.delete(e)}}onIdentityWithheld(e){return this.identityWithheldListeners.add(e),()=>{this.identityWithheldListeners.delete(e)}}emitAuthState(e){for(let t of this.authStateListeners)try{t(e)}catch{}}fireDeviceTakeover(e,t){if(!e||!Mt.test(e))return;let r={retiredAnonUserId:e,identifiedUserId:t,at:new Date};this.lastTakeover=r;for(let n of this.takeoverListeners)try{n(r)}catch{}this.emitAuthState({event:"device_takeover",user:this.user,retiredAnonUserId:e})}onDeletionCancelled(e){return this.deletionCancelledListeners.add(e),()=>{this.deletionCancelledListeners.delete(e)}}getLastDeletionCancelled(){return this.lastDeletionCancelled}getLastAnonRetirement(){return this.lastAnonRetirement}fireDeletionCancelled(e){let t={userId:e,at:new Date};this.lastDeletionCancelled=t;for(let r of this.deletionCancelledListeners)try{r(t)}catch{}this.emitAuthState({event:"deletion_cancelled",user:this.user})}recordServerSignals(e){e.anonRetirement&&(this.lastAnonRetirement=e.anonRetirement),e.retiredAnonUserId&&this.fireDeviceTakeover(e.retiredAnonUserId,e.user.id),e.reactivatedFromDeletion&&this.fireDeletionCancelled(e.user.id)}commit(e){switch(e.type){case"install":return this.commitInstall(e);case"clear":return this.commitClear(e);case"user":{if(this.currentSid()!==e.expectSid||!this.record)return!1;let t={...this.record,user:e.user};return this.record=t,this.user=e.user,this.store.writeSession(t),this.analytics.identify(e.user.id),this.flags.setContext({userId:e.user.id}),this.emitAuthState({event:"user_updated",user:e.user,cause:e.cause}),!0}case"release":{let t=this.store.readSlot(e.index);return t?(this.store.writeSlot(e.index,null),this.emitAuthState({event:"guest_released",userId:t.userId,reason:e.reason,...e.endReason?{endReason:e.endReason}:{}}),!0):!1}case"slot_tokens":{let t=this.store.readSlot(e.index);return!t||t.refreshToken!==e.sent?!1:(this.store.writeSlot(e.index,{...t,refreshToken:e.refreshToken,...e.project!==void 0&&t.project===null?{project:e.project}:{}}),!0)}case"withhold":return this.commitWithhold(e);case"unknown":return this.state="unknown",this.record=null,this.user=null,this.withheld=null,this.accessToken=e.accessToken,this.accessExpiresAt=e.accessExpiresAt,this.startProactiveRefreshCron(),this.startVisibilityRefreshReset(),!0;case"held_reported":{if(!this.record?.heldReportPending?.includes(e.userId))return!1;let t=this.record.heldReportPending.filter(n=>n!==e.userId),r={...this.record};return t.length>0?r.heldReportPending=t:delete r.heldReportPending,this.record=r,this.store.writeSession(r),!0}default:return!1}}commitInstall(e){if(e.expectSid!==void 0&&this.currentSid()!==e.expectSid||e.expectRefresh!==void 0&&this.store.currentRefresh()!==e.expectRefresh)return!1;let t=this.record,r=t?.user??null,n=r?.id!==e.record.user.id,i=null,o={...e.record};if(e.hold){let a=this.store.freeSlot();if(a===null)return!1;this.store.writeSlot(a,e.hold),i=this.heldCount();let l=new Set(t?.heldReportPending??[]);l.add(e.hold.userId),o.heldReportPending=[...l]}else t?.heldReportPending&&!o.heldReportPending&&!n&&(o.heldReportPending=t.heldReportPending);switch(r&&n&&(this.analytics.reset(!1),this.flags.reset(),this.chatbot.newSession(),e.revokePrevious&&t&&!r.isAnonymous&&this.revokeFireAndForget(t.refreshToken)),this.state=o.user.isAnonymous===!1?"identified":"anonymous",this.record=o,this.user=o.user,this.accessToken=o.accessToken,this.accessExpiresAt=o.accessExpiresAt,this.withheld=null,n&&(this.clockSkewConfirmed=!1,this.lastTakeover=null,this.lastDeletionCancelled=null,this.lastAnonRetirement=null),(e.reason!=="hydrate"||e.persist!==!1)&&this.store.writeSession(o),this.analytics.identify(o.user.id),this.flags.setContext({userId:o.user.id}),this.startProactiveRefreshCron(),this.startVisibilityRefreshReset(),this.refreshFailureCount=0,this.refreshCooldownUntil=0,e.hold&&i!==null&&this.emitAuthState({event:"guest_held",userId:e.hold.userId,count:i}),e.reason){case"mint":this.emitAuthState({event:"signed_in",user:o.user,cause:"mint"});break;case"sign_in":this.emitAuthState({event:"signed_in",user:o.user,cause:"sign_in"});break;case"upgrade":this.emitAuthState({event:"signed_in",user:o.user,cause:"link"});break;case"link":this.emitAuthState({event:"user_updated",user:o.user,cause:"link"});break;case"restore":this.emitAuthState({event:"signed_in",user:o.user,cause:"restore"});break;case"claim":this.emitAuthState({event:"user_updated",user:o.user,cause:"merge"});break;case"recover":this.emitAuthState({event:"signed_in",user:o.user});break;case"rehydrate":n&&this.emitAuthState({event:"signed_in",user:o.user});break;case"refresh":r&&JSON.stringify(r)!==JSON.stringify(o.user)&&this.emitAuthState({event:"user_updated",user:o.user,cause:"refresh"});break;case"hydrate":break;default:break}return e.release&&this.commit({type:"release",index:e.release.index,reason:e.release.reason}),e.hold&&this.reportHeld(e.hold.userId,e.hold.refreshToken),!0}commitClear(e){let t=this.record?.refreshToken??this.withheld?.refreshToken??this.store.currentRefresh();if(e.expectRefresh!==void 0&&this.store.currentRefresh()!==e.expectRefresh)return!1;let r=this.state!=="signed_out";if(this.state="signed_out",this.record=null,this.user=null,this.accessToken=null,this.accessExpiresAt=0,this.withheld=null,this.clockSkewConfirmed=!1,this.lastTakeover=null,this.lastDeletionCancelled=null,this.lastAnonRetirement=null,this.store.clearSession(),e.stampNoAutoRestore){let{slots:n}=this.store.readSlots();n.forEach((i,o)=>{i&&i.autoRestore&&this.store.writeSlot(o,{...i,autoRestore:!1})})}return e.keepAnalyticsIdentity||this.analytics.reset(e.reason==="user"||e.reason==="account_deleted"),e.dropQueue&&this.analytics.dropQueue(),this.flags.reset(),this.chatbot.newSession(),this.stopProactiveRefreshCron(),this.stopVisibilityRefreshReset(),this.refreshFailureCount=0,this.refreshCooldownUntil=0,e.revoke&&t&&this.revokeFireAndForget(t),r&&this.emitAuthState({event:"signed_out",user:null,reason:e.reason}),!0}commitWithhold(e){if(e.from==="refresh"){if(!e.rotation||this.store.currentRefresh()!==e.rotation.sent)return!1;this.record?this.store.writeSession({...this.record,accessToken:e.rotation.accessToken,accessExpiresAt:e.rotation.accessExpiresAt,refreshToken:e.rotation.refreshToken}):this.store.writeLimboTokens(e.rotation)}this.state="withheld",this.record=null,this.user=null,this.accessToken=null,this.accessExpiresAt=0,this.withheld={info:e.info,refreshToken:e.rotation?.refreshToken??e.refreshToken},this.stopProactiveRefreshCron(),this.stopVisibilityRefreshReset();try{this.hooks.onIdentityWithheld?.()}catch{}for(let t of this.identityWithheldListeners)try{t()}catch{}return e.from==="refresh"&&this.emitAuthState({event:"session_withheld",reason:"project_mismatch",expectedProjectId:e.info.expectedProjectId,actualProjectId:e.info.actualProjectId,userId:e.info.userId}),!0}hydrateFromDisk(e){let t=this.store.readDisk(),r=t.legacy.refreshToken,n=J.recordTrusted(t),i=t.record!==null&&!n,o=t.legacy.user,a=n?o&&o.id===t.record.user.id?o:t.record.user:o,l=t.legacy.accessToken??(n?t.record.accessToken:null),d=t.legacy.accessToken?t.legacy.accessExpiresAt:n?t.record.accessExpiresAt:0;if(!r){if((a||i||t.legacy.userUnreadable||t.recordUnreadable)&&this.store.clearStaleBlob(),e==="boot"){this.state="signed_out";return}this.state!=="signed_out"&&this.commit({type:"clear",reason:"user",revoke:!1,dropQueue:!1,stampNoAutoRestore:!1});return}if(!a){if(e==="storage_event"&&this.record&&this.record.refreshToken===r)return;i&&this.store.clearRecord(),this.commit({type:"unknown",accessToken:l,accessExpiresAt:d});return}let h=this.judge(l);if(h==="mismatch"){this.commit({type:"withhold",from:"hydrate",info:this.withheldInfo(a,l),refreshToken:r});return}if(h==="unknown"){this.commit({type:"unknown",accessToken:l,accessExpiresAt:d});return}let g={v:1,user:a,accessToken:l,accessExpiresAt:d,refreshToken:r,...t.record?.heldReportPending?{heldReportPending:t.record.heldReportPending}:{}};if(e==="storage_event"&&this.record&&this.record.refreshToken===r&&this.record.user.id===a.id)return;let k=!n||JSON.stringify(t.record.user)!==JSON.stringify(a)||t.record.accessToken!==l;if(this.commit({type:"install",reason:e==="boot"?"hydrate":"rehydrate",record:g,persist:k}),e==="boot"){let{slots:v}=this.store.readSlots();v.forEach((y,w)=>{y&&y.userId===a.id&&this.store.writeSlot(w,null)});for(let y of g.heldReportPending??[]){let w=this.store.readSlots().slots.find(z=>z?.userId===y);w?this.reportHeld(y,w.refreshToken):this.commit({type:"held_reported",userId:y})}}}startStorageEventRehydrate(){if(typeof window>"u"||typeof window.addEventListener!="function"||!this.storage.isPersistent())return;let e=t=>{let r=t.key===null?null:this.storage.relativeKey(t.key);t.key!==null&&(r===null||!r.startsWith("auth_"))||this.rehydrateScheduled||(this.rehydrateScheduled=!0,setTimeout(()=>{this.rehydrateScheduled=!1,this.hydrateFromDisk("storage_event")},0))};window.addEventListener("storage",e),this.storageEventUnsub=()=>window.removeEventListener("storage",e)}stopStorageEventRehydrate(){this.storageEventUnsub&&(this.storageEventUnsub(),this.storageEventUnsub=null)}currentSid(){let e=this.record?.accessToken;if(!e)return null;let t=E(e)?.sid;return typeof t=="string"?t:null}judge(e){return he(this.expectedProjectId,e)}projectClaim(e){let t=E(e)?.project;return typeof t=="string"?t:null}withheldInfo(e,t){return{reason:"project_mismatch",expectedProjectId:this.expectedProjectId??"",actualProjectId:this.projectClaim(t),userId:e.id,isAnonymous:e.isAnonymous!==!1}}heldCount(){return this.store.readSlots().slots.filter(e=>e!==null).length}buildHeld(e){let t=E(e.accessToken)?.sid;return{v:1,userId:e.user.id,sid:typeof t=="string"?t:"",refreshToken:e.refreshToken,tokenAtHold:e.refreshToken,heldAt:Math.max(Date.now(),...this.store.readSlots().slots.map(r=>r?r.heldAt+1:0)),project:this.projectClaim(e.accessToken),autoRestore:!0}}revokeFireAndForget(e){this.http.post("/auth-service/token/revoke",{refreshToken:e}).catch(()=>{})}reportHeld(e,t){this.http.post("/auth-service/guest/held",{refreshToken:t}).then(r=>{r.success&&this.commit({type:"held_reported",userId:e})}).catch(()=>{})}withheldError(){return new u(G.SESSION_WITHHELD,"The stored session belongs to a different project and is withheld; call discardWithheld() or re-init with the matching expectedProjectId",{kind:"config"})}canServeToken(e,t,r){return!e||!t||r>=t-Be?!1:this.clockSkewConfirmed?!0:tt(e,r)}canServeCachedToken(e){return this.canServeToken(this.accessToken,this.accessExpiresAt,e)}trackedDeadlineAlive(e){return!!this.accessToken&&!!this.accessExpiresAt&&e<this.accessExpiresAt-Be}deadlinesDisagree(e){return this.trackedDeadlineAlive(e)&&!this.canServeCachedToken(e)}learnClockSkewFrom(e,t){tt(e,t)||(this.clockSkewConfirmed=!0)}async refreshAndReconcile(e){let t=this.deadlinesDisagree(e),r=await this.refreshAccessToken();return t&&r&&this.learnClockSkewFrom(r,Date.now()),r}async getAccessToken(e){return this.state==="withheld"?null:!e?.forceRefresh&&this.state!=="unknown"&&this.canServeCachedToken(Date.now())?this.accessToken:this.store.currentRefresh()?this.refreshInflight?this.refreshInflight:Date.now()<this.refreshCooldownUntil?null:this.refreshAndReconcile(Date.now()):null}getAccessTokenSync(){return this.accessToken}getRefreshToken(){return this.state==="withheld"?null:this.store.currentRefresh()}async refreshAccessToken(){if(this.refreshInflight)return this.refreshInflight;let e=this.store.currentRefresh();return e?(this.refreshInflight=(async()=>{try{return await this.performRefresh(e)}finally{this.refreshInflight=null}})(),this.refreshInflight):null}async performRefresh(e){try{let t=await this.http.post("/auth-service/token/refresh",{refreshToken:e});if(!t.success)return Qe(t.error?.code)?(this.store.currentRefresh()===e&&this.commit({type:"clear",reason:Wt(ze(t)),expectRefresh:e,revoke:!1,dropQueue:!1,stampNoAutoRestore:!1}),this.refreshFailureCount=0,this.refreshCooldownUntil=0,null):(this.armBackoff(),null);let r=X(t.data);if(!r)return this.armBackoff(),null;if(this.store.currentRefresh()!==e)return null;let n=Date.now()+r.expiresIn*1e3,i=this.judge(r.accessToken);if(i==="mismatch"){let a=this.record?.user??pe(t.data);return this.commit({type:"withhold",from:"refresh",info:this.withheldInfo(a??{id:Ze(r.accessToken)??"",email:null,emailVerified:!1,name:null,isAnonymous:!0},r.accessToken),refreshToken:r.refreshToken,rotation:{sent:e,accessToken:r.accessToken,refreshToken:r.refreshToken,accessExpiresAt:n}}),null}let o=pe(t.data);return this.record?this.commit({type:"install",reason:"refresh",record:{...this.record,user:o??this.record.user,accessToken:r.accessToken,accessExpiresAt:n,refreshToken:r.refreshToken},expectRefresh:e}):i==="match"&&o?this.commit({type:"install",reason:"recover",record:{v:1,user:o,accessToken:r.accessToken,accessExpiresAt:n,refreshToken:r.refreshToken},expectRefresh:e}):(this.store.writeLimboTokens({accessToken:r.accessToken,refreshToken:r.refreshToken,accessExpiresAt:n}),this.accessToken=r.accessToken,this.accessExpiresAt=n),this.refreshFailureCount=0,this.refreshCooldownUntil=0,r.accessToken}catch{return this.armBackoff(),null}}async refreshHeld(e,t){let r=t.refreshToken,n=await this.http.post("/auth-service/token/refresh",{refreshToken:r});if(!n.success){if(Qe(n.error?.code)){let a=ze(n);if(a&&de.includes(a))return this.commit({type:"release",index:e,reason:"dead",endReason:a}),{kind:"dead",endReason:a};throw new u("RESTORE_FAILED",`The held guest's token was refused${a?` (${a})`:" with no end reason"}; the slot is kept \u2014 retry later`,{status:p(n).status,kind:"server"})}throw new u(n.error?.code??"RESTORE_FAILED",n.error?.message??"Could not refresh the held guest",p(n))}let i=X(n.data);if(!i)throw new u("RESTORE_FAILED","Malformed refresh response for the held guest; the slot is kept",{kind:"server"});if(!this.commit({type:"slot_tokens",index:e,sent:r,refreshToken:i.refreshToken,...t.project===null?{project:this.projectClaim(i.accessToken)}:{}}))throw new u("HELD_GUEST_CHANGED","The held slot changed while its token was in flight",{kind:"cancelled"});return{kind:"ok",tokens:i,user:pe(n.data)}}async settle(){for(;this.state==="unknown";){if(!this.store.currentRefresh()){this.commit({type:"clear",reason:"user",revoke:!1,dropQueue:!1,stampNoAutoRestore:!1});return}if(await this.refreshAccessToken(),this.state!=="unknown")return;let e=Math.min(3e4,Math.max(250,this.refreshCooldownUntil-Date.now()));await new Promise(t=>setTimeout(t,e))}}armBackoff(){this.refreshFailureCount+=1;let e=Math.min(3e4,1e3*Math.pow(2,this.refreshFailureCount-1));this.refreshCooldownUntil=Date.now()+e}resetRefreshState(){this.refreshFailureCount=0,this.refreshCooldownUntil=0}startVisibilityRefreshReset(){if(this.visibilityResetUnsub||typeof document>"u")return;let e=()=>{document.visibilityState==="visible"&&this.resetRefreshState()};document.addEventListener("visibilitychange",e),this.visibilityResetUnsub=()=>document.removeEventListener("visibilitychange",e)}stopVisibilityRefreshReset(){this.visibilityResetUnsub&&(this.visibilityResetUnsub(),this.visibilityResetUnsub=null)}startProactiveRefreshCron(){if(typeof window>"u"||this.proactiveRefreshTimer)return;let e=.8,t=6e4,r=3e4,n=async()=>{if(this.attemptInFlight||this.state==="withheld")return;if(this.state==="unknown"){Date.now()>=this.refreshCooldownUntil&&await this.refreshAccessToken();return}if(!this.accessToken||!this.accessExpiresAt)return;let o=Date.now();if(!this.canServeCachedToken(o)){await this.refreshAndReconcile(o);return}let a=this.accessExpiresAt-o;if(a<=0)return;let d=Math.max(a,5*6e4)*(1-e)+(Math.random()*r*2-r);a<=d&&await this.refreshAccessToken()};this.proactiveRefreshTimer=window.setInterval(()=>{n()},t);let i=()=>{typeof document<"u"&&document.visibilityState==="visible"&&n()};typeof document<"u"&&document.addEventListener("visibilitychange",i),this.proactiveRefreshCleanup=()=>{this.proactiveRefreshTimer&&(window.clearInterval(this.proactiveRefreshTimer),this.proactiveRefreshTimer=null),typeof document<"u"&&document.removeEventListener("visibilitychange",i)}}stopProactiveRefreshCron(){this.proactiveRefreshCleanup&&(this.proactiveRefreshCleanup(),this.proactiveRefreshCleanup=null)}serialize(e){let t=async()=>{try{return await e()}catch(n){throw Kt(n)}},r=this.inflight.then(t,t);return this.inflight=r.catch(()=>{}),r}async bearerHeaders(){if(this.state==="withheld")throw this.withheldError();let e=await this.getAccessToken();if(!e)throw new u("NOT_SIGNED_IN","Not signed in");return{Authorization:`Bearer ${e}`}}signInAnonymously(e){return this.serialize(async()=>{if(this.state==="withheld")throw this.withheldError();if(this.state==="unknown"&&await this.settle(),this.status()==="withheld")throw this.withheldError();let{slots:t}=this.store.readSlots(),r=t.filter(l=>l!==null),n=this.record;if(n&&!e?.forceNew)return n.user;let i=r.length+(n&&n.user.isAnonymous?1:0);if(e?.forceNew){if(i>=5)throw new W(r.length);return this.mintFresh(e,n)}let o=r.map(l=>({slot:l,index:t.indexOf(l)})).filter(({slot:l})=>l.autoRestore&&!this.slotProjectMismatches(l)).sort((l,d)=>d.slot.heldAt-l.slot.heldAt);if(o.length>0&&(this.autoRestoreHeldGuest||i>=5))for(let{slot:l,index:d}of o)try{let h=await this.restoreSlot(d,l,"mint");if(h)return h}catch(h){if(h instanceof _)continue;throw h}let a=this.heldCount();if(a>=5)throw new W(a);return this.mintFresh(e,null)})}ensureSession(){return this.signInAnonymously()}slotProjectMismatches(e){let t=this.slotProjectAnchor;return t!==void 0&&e.project!==null&&e.project!==t}async mintFresh(e,t){let r=this.currentSid(),n=this.store.readMintKey()??Vt();this.store.writeMintKey(n),this.attemptInFlight=!0;try{await this.refreshInflight;let i=await this.http.post("/auth-service/anonymous",{name:e?.name,metadata:e?.metadata,mintKey:n});if(!i.success||!Re(i.data))throw new u(i.error?.code??"AUTH_ERROR",i.error?.message??"Anonymous signup failed",p(i));let o=i.data;this.guardMinted(o),await this.refreshInflight;let a=this.record,l=a&&a.user.isAnonymous&&t?this.buildHeld(a):void 0;if(!this.commit({type:"install",reason:"mint",record:_e(o),expectSid:r,hold:l,revokePrevious:!!a&&!a.user.isAnonymous}))throw this.revokeFireAndForget(o.tokens.refreshToken),new u("SIGN_IN_SUPERSEDED","The session changed while the mint was in flight; nothing was installed",{kind:"cancelled"});return this.store.clearMintKey(),this.recordServerSignals(o),o.user}finally{this.attemptInFlight=!1}}guardMinted(e){if(this.judge(e.tokens.accessToken)!=="match")throw this.revokeFireAndForget(e.tokens.refreshToken),new u(G.PROJECT_MISMATCH,`The server answered for project ${this.projectClaim(e.tokens.accessToken)??"null"}, not expectedProjectId ${this.expectedProjectId??""}; nothing was installed`,{kind:"config"})}async performSwitch(e,t,r){if(this.state==="withheld")throw this.withheldError();if(this.state==="unknown"&&await this.settle(),this.status()==="withheld")throw this.withheldError();let n=this.currentSid();this.attemptInFlight=!0;try{await this.refreshInflight;let i=await e();if(!i.success||!i.data)throw new u(i.error?.code??t,i.error?.message??r,p(i));let o=i.data;if(o.mfaRequired===!0&&typeof o.mfaChallengeToken=="string"){let g=o.user;return{kind:"mfa",challengeToken:o.mfaChallengeToken,userId:g?.id??""}}if(!Re(i.data))throw new u(i.error?.code??t,i.error?.message??r,p(i));let a=i.data;this.guardMinted(a),this.record&&await this.analytics.flush().catch(()=>{}),await this.refreshInflight;let l=this.record,d=l&&l.user.isAnonymous&&l.user.id!==a.user.id?this.buildHeld(l):void 0;if(!this.commit({type:"install",reason:"sign_in",record:_e(a),expectSid:n,hold:d,revokePrevious:!!l&&!l.user.isAnonymous&&l.user.id!==a.user.id}))throw this.revokeFireAndForget(a.tokens.refreshToken),new u("SIGN_IN_SUPERSEDED","The session changed while the sign-in was in flight; nothing was installed",{kind:"cancelled"});return this.recordServerSignals(a),{kind:"done",user:a.user,previous:l?{userId:l.user.id,isAnonymous:l.user.isAnonymous!==!1,held:!!d}:null,reactivated:a.reactivatedFromDeletion===!0}}finally{this.attemptInFlight=!1}}signIn(e,t){return this.serialize(async()=>{let r=await this.performSwitch(()=>this.http.post("/auth-service/login",{email:e,password:t}),"AUTH_ERROR","Login failed");return r.kind==="mfa"?{mfaRequired:!0,mfaChallengeToken:r.challengeToken,userId:r.userId}:r.user})}challengeMfa(e,t){return this.serialize(async()=>{let r=await this.performSwitch(()=>this.http.post("/auth-service/mfa/challenge",{challengeToken:e,code:t}),"MFA_CHALLENGE_FAILED","Invalid MFA code");if(r.kind==="mfa")throw new u("MFA_CHALLENGE_FAILED","MFA challenge returned another challenge");return r.user})}loginSocial(e){return this.serialize(async()=>{let{link:t,onCredentialInUse:r,...n}=e,i=n,o=()=>this.performSwitch(()=>this.http.post("/auth-service/login/social",i),"SOCIAL_LOGIN_FAILED","Social login failed");if(t){if(this.state==="withheld")throw this.withheldError();if(this.state==="unknown"&&await this.settle(),this.state==="anonymous"||this.state==="identified"){let l=await this.performLink("/auth-service/me/link/social",i,"upgrade");if(l.kind==="done")return l.user;if(l.kind==="recent_auth_required")throw new u("RECENT_AUTH_REQUIRED",l.message??"Re-authenticate to link this credential",{status:l.status??403});if(r==="adopt"){let d=await o();if(d.kind==="mfa")throw new u("MFA_REQUIRED","This account requires MFA; use signIn()/challengeMfa()");return d.user}throw new C(l.message,{provider:l.provider,collision:l.collision,status:l.status})}}let a=await o();if(a.kind==="mfa")throw new u("MFA_REQUIRED","This account requires MFA; use signIn()/challengeMfa()");return a.user})}signInWithGoogle(e,t,r){return this.loginSocial({provider:"google",code:e,redirectUri:t,link:r})}signInWithGitHub(e,t){return this.loginSocial({provider:"github",code:e,redirectUri:t})}signInWithApple(e){return this.loginSocial({provider:"apple",...e})}signInWithMicrosoft(e,t){return this.loginSocial({provider:"microsoft",code:e,redirectUri:t})}signInWithLinkedIn(e,t){return this.loginSocial({provider:"linkedin",code:e,redirectUri:t})}signInWithFacebook(e,t){return this.loginSocial({provider:"facebook",code:e,redirectUri:t})}signInWithDiscord(e,t){return this.loginSocial({provider:"discord",code:e,redirectUri:t})}signInWith(e){return this.serialize(async()=>{let{path:t,body:r}=Ye(e),n=await this.performSwitch(()=>this.http.post(t,r),"AUTH_ERROR","Sign-in failed");if(n.kind==="mfa"){let i=n.challengeToken;return{status:"mfa_required",challengeToken:i,verify:o=>this.signInWith({kind:"mfa",challengeToken:i,code:o})}}return{status:"done",user:n.user,previous:n.previous,reactivated:n.reactivated}})}async performLink(e,t,r){if(this.state==="withheld")throw this.withheldError();let n=this.currentSid();this.attemptInFlight=!0;try{await this.refreshInflight;let i=await this.bearerHeaders(),o=await this.http.post(e,t,i);if(!o.success||!o.data?.user){let d=o.error?.code??"LINK_FAILED",h=p(o);if(d==="CREDENTIAL_IN_USE"){let g=Ft(o);return{kind:"credential_in_use",provider:g.provider??"",collision:g.collision??"identity",status:h.status,message:o.error?.message}}if(d==="RECENT_AUTH_REQUIRED")return{kind:"recent_auth_required",status:h.status,message:o.error?.message};throw new u(d,o.error?.message??"Failed to link credential",h)}let a=o.data,l=o.data.user;if(a.upgraded&&Re(a)){if(this.guardMinted(a),await this.refreshInflight,!this.commit({type:"install",reason:r,record:_e(a),expectSid:n}))throw this.revokeFireAndForget(a.tokens.refreshToken),new u("LINK_SUPERSEDED","The session changed while the link was in flight; nothing was installed",{kind:"cancelled"});return{kind:"done",user:a.user,upgraded:!0,alreadyLinked:!1}}return a.alreadyLinked?{kind:"done",user:l,upgraded:!1,alreadyLinked:!0}:(this.commit({type:"user",user:l,cause:"link",expectSid:n}),{kind:"done",user:l,upgraded:!1,alreadyLinked:!1})}finally{this.attemptInFlight=!1}}link(e){return this.serialize(async()=>{if(this.state==="withheld")throw this.withheldError();if(this.state==="unknown"&&await this.settle(),this.status()==="withheld")throw this.withheldError();if(this.state==="signed_out"){let i=await this.signInWithUnserialized(e);if(i.status!=="done")throw new u("MFA_REQUIRED","This account requires MFA; use signInWith() and complete the challenge");return{status:"done",user:i.user,upgraded:!1,alreadyLinked:!1}}let t=Je(e),r=await this.performLink(t.path,t.body,"link");if(r.kind==="done")return{status:"done",user:r.user,upgraded:r.upgraded,alreadyLinked:r.alreadyLinked};if(r.kind==="recent_auth_required")return{status:"recent_auth_required"};let n=Date.now();return{status:"credential_in_use",provider:r.provider,collision:r.collision,switchAccount:()=>Date.now()-n>Ht?Promise.reject(new u("CREDENTIAL_STALE","The refused credential is older than 5 minutes; obtain it again and call signInWith()")):this.signInWith(e),keepCurrent:()=>{}}})}async signInWithUnserialized(e){let{path:t,body:r}=Ye(e),n=await this.performSwitch(()=>this.http.post(t,r),"AUTH_ERROR","Sign-in failed");if(n.kind==="mfa"){let i=n.challengeToken;return{status:"mfa_required",challengeToken:i,verify:o=>this.signInWith({kind:"mfa",challengeToken:i,code:o})}}return{status:"done",user:n.user,previous:n.previous,reactivated:n.reactivated}}signUp(e,t,r){return this.serialize(async()=>{if(this.state==="withheld")throw this.withheldError();if(this.state==="unknown"&&await this.settle(),this.status()==="withheld")throw this.withheldError();if(this.state==="identified")throw new K;if(this.state==="anonymous"){let i=await this.performLink("/auth-service/me/link/email",{email:e,password:t},"upgrade");if(i.kind==="done")return i.user;throw i.kind==="credential_in_use"?new b(i.message):new u("RECENT_AUTH_REQUIRED",i.message??"Re-authenticate first",{status:i.status??403})}let n=await this.performSwitch(async()=>{let i=await this.http.post("/auth-service/signup",{email:e,password:t,name:r?.name,metadata:r?.metadata});if(!i.success&&i.error?.code==="CONFLICT")throw new b(i.error.message);return i},"AUTH_ERROR","Signup failed");if(n.kind==="mfa")throw new u("MFA_REQUIRED","Unexpected MFA challenge on signup");return n.user})}linkEmailPassword(e,t){return this.linkLegacy({kind:"password",email:e,password:t})}linkSocial(e){let{provider:t,...r}=e;return this.linkLegacy({kind:t,...r})}linkGoogle(e){return this.linkSocial({provider:"google",...e})}linkApple(e){return this.linkSocial({provider:"apple",...e})}linkLegacy(e){return this.serialize(async()=>{if(this.state==="withheld")throw this.withheldError();if(this.state==="unknown"&&await this.settle(),this.status()==="withheld")throw this.withheldError();if(this.state==="signed_out")throw new u("NOT_SIGNED_IN","Sign in before linking a credential");let t=Je(e),r=await this.performLink(t.path,t.body,"link");if(r.kind==="done")return r.user;throw r.kind==="recent_auth_required"?new u("RECENT_AUTH_REQUIRED",r.message??"Re-authenticate to link this credential",{status:r.status??403}):new C(r.message,{provider:r.provider,collision:r.collision,status:r.status})})}getHeldGuests(){return this.store.readSlots().slots.filter(e=>e!==null).sort((e,t)=>t.heldAt-e.heldAt).map(({userId:e,heldAt:t,autoRestore:r,project:n})=>({userId:e,heldAt:t,autoRestore:r,project:n}))}getHeldGuest(){return this.getHeldGuests()[0]??null}resolveSlot(e){let{slots:t}=this.store.readSlots(),r=t.map((n,i)=>n?{slot:n,index:i}:null).filter(n=>n!==null);if(r.length===0)throw new u("HELD_GUEST_NOT_FOUND","No guest is held on this device");if(e!==void 0){let n=r.find(i=>i.slot.userId===e);if(!n)throw new u("HELD_GUEST_NOT_FOUND",`No held guest with id ${e}`);return n}if(r.length>1)throw new u(ce,`${r.length} guests are held; pass the userId of the one you mean`);return r[0]}claimHeldGuest(e){return this.serialize(async()=>{if(this.state==="withheld")throw this.withheldError();if(this.state!=="identified"||!this.record)throw new u("NOT_IDENTIFIED","claimHeldGuest() needs a signed-in identified account as the merge target");let{index:t,slot:r}=this.resolveSlot(e),n=this.currentSid();this.attemptInFlight=!0;try{await this.refreshInflight;let i=await this.refreshHeld(t,r);if(i.kind==="dead")throw new u("HELD_GUEST_GONE",`Held guest ${r.userId} is no longer available (${i.endReason})`);let o=this.store.currentRefresh();if(!o)throw new u("NOT_SIGNED_IN","Not signed in");let a=await this.http.post("/auth-service/merge",{anonymousRefreshToken:i.tokens.refreshToken,targetRefreshToken:o});if(!a.success||!a.data)throw new u(a.error?.code??"MERGE_FAILED",a.error?.message??"Merge failed",p(a));let l=X(a.data),d=Xe(a.data,this.record.user.id,r.userId);await this.refreshInflight;let h=this.record;if(!l||!h)throw this.commit({type:"release",index:t,reason:"claimed"}),new u("MERGE_FAILED","Merge succeeded but returned no rotated session; sign in again",{kind:"server"});if(!this.commit({type:"install",reason:"claim",record:{...h,accessToken:l.accessToken,accessExpiresAt:Date.now()+l.expiresIn*1e3,refreshToken:l.refreshToken},expectSid:n,expectRefresh:o,release:{index:t,reason:"claimed"}}))throw this.commit({type:"release",index:t,reason:"claimed"}),new u("CLAIM_SUPERSEDED","The session changed while the claim was in flight",{kind:"cancelled"});return{user:this.record.user,stats:d}}finally{this.attemptInFlight=!1}})}restoreHeldGuest(e){return this.serialize(async()=>{if(this.state==="withheld")throw this.withheldError();if(this.state==="unknown"&&await this.settle(),this.status()==="withheld")throw this.withheldError();let{index:t,slot:r}=this.resolveSlot(e),n=await this.restoreSlot(t,r,"verb");if(!n)throw new u("HELD_GUEST_GONE",`Held guest ${r.userId} is no longer available`);return n})}async restoreSlot(e,t,r){let n=this.slotProjectAnchor;if(n!==void 0&&t.project!==null&&t.project!==n)throw new _(t.userId,n,t.project);let i=this.currentSid();this.attemptInFlight=!0;try{await this.refreshInflight;let o=await this.refreshHeld(e,t);if(o.kind==="dead")return null;if(this.judge(o.tokens.accessToken)!=="match")throw new _(t.userId,this.expectedProjectId??n??"",this.projectClaim(o.tokens.accessToken));let l=o.user??et(o.tokens.accessToken,t.userId);await this.refreshInflight;let d=this.record,h=d&&d.user.isAnonymous&&d.user.id!==l.id?this.buildHeld(d):void 0;if(!this.commit({type:"install",reason:"restore",record:{v:1,user:l,accessToken:o.tokens.accessToken,accessExpiresAt:Date.now()+o.tokens.expiresIn*1e3,refreshToken:o.tokens.refreshToken},expectSid:i,hold:h,release:{index:e,reason:"restored"},revokePrevious:!!d&&!d.user.isAnonymous}))throw new u("SIGN_IN_SUPERSEDED",`The session changed while restoring${r==="mint"?" (auto-restore)":""}; nothing was installed`,{kind:"cancelled"});return l}finally{this.attemptInFlight=!1}}discardHeldGuest(e){return this.serialize(async()=>{if(this.state==="withheld")throw this.withheldError();let{index:t,slot:r}=this.resolveSlot(e);await this.discardSlot(t,r)})}async discardSlot(e,t){let r=await this.http.post("/auth-service/guest/discard",{refreshToken:t.refreshToken}),n=r.error?.status;if(r.success||n===404||r.error?.code==="NOT_FOUND"){this.commit({type:"release",index:e,reason:"discarded"});return}throw new u(r.error?.code??"GUEST_DISCARD_FAILED",r.error?.message??"Could not discard the held guest",p(r))}merge(e){let{slots:t}=this.store.readSlots(),r=t.find(n=>n!==null&&(n.refreshToken===e||n.tokenAtHold===e));return r?this.claimHeldGuest(r.userId).then(n=>n.stats):this.serialize(async()=>{if(this.state==="withheld")throw this.withheldError();if(this.state!=="identified"||!this.record)throw new u("NOT_IDENTIFIED","merge() needs a signed-in identified account as the target");let n=this.currentSid(),i=this.store.currentRefresh();if(!i)throw new u("NOT_SIGNED_IN","Not signed in");let o=await this.http.post("/auth-service/merge",{anonymousRefreshToken:e,targetRefreshToken:i});if(!o.success||!o.data)throw new u(o.error?.code??"MERGE_FAILED",o.error?.message??"Merge failed",p(o));let a=X(o.data),l=Xe(o.data,this.record.user.id,"");await this.refreshInflight;let d=this.record;return a&&d&&this.commit({type:"install",reason:"claim",record:{...d,accessToken:a.accessToken,accessExpiresAt:Date.now()+a.expiresIn*1e3,refreshToken:a.refreshToken},expectSid:n,expectRefresh:i}),l})}getWithheld(){return this.withheld?.info??null}discardWithheld(){return this.serialize(async()=>this.discardWithheldNow())}discardWithheldNow(){return this.state!=="withheld"||!this.withheld?!1:this.commit({type:"clear",reason:"user",expectRefresh:this.withheld.refreshToken,revoke:!0,dropQueue:!1,stampNoAutoRestore:!1,keepAnalyticsIdentity:!0})?!0:(this.hydrateFromDisk("storage_event"),!1)}signOut(){return this.serialize(async()=>{if(this.state==="withheld"){this.discardWithheldNow();return}if(this.state==="signed_out"){this.analytics.reset(!0),this.flags.reset(),this.chatbot.newSession();return}this.commit({type:"clear",reason:"user",revoke:!0,dropQueue:!1,stampNoAutoRestore:!1})})}deleteAccount(e){return this.serialize(async()=>{if(this.state==="withheld")throw this.withheldError();if(this.state==="unknown"&&await this.settle(),this.status()==="withheld")throw this.withheldError();if(this.state==="signed_out")throw new u("NOT_SIGNED_IN","Sign in before deleting your account");let t=await this.bearerHeaders(),r=await this.http.delete("/auth-service/me",t);if(!r.success)throw new u(r.error?.code??"DELETE_ACCOUNT_FAILED",r.error?.message??"Account deletion failed",p(r));let n=r.data??{};this.commit({type:"clear",reason:"account_deleted",revoke:!1,dropQueue:!0,stampNoAutoRestore:!0});let i={status:n.status==="purged"?"purged":"pending",scheduledPurgeAt:n.scheduledPurgeAt??null,graceDays:typeof n.graceDays=="number"?n.graceDays:0,heldGuests:this.heldCount()};if(e?.alsoDiscardHeldGuests){let o=[],{slots:a}=this.store.readSlots();for(let l=0;l<a.length;l++){let d=a[l];if(d)try{await this.discardSlot(l,d)}catch{o.push(d.userId)}}i.heldGuests=this.heldCount(),i.discardFailed=o}return i})}async listLinkedIdentities(){let e=await this.bearerHeaders().catch(()=>{throw new u("NOT_SIGNED_IN","Sign in before listing linked identities")}),t=await this.http.get("/auth-service/me/identities",e);if(!t.success||!t.data)throw new u(t.error?.code??"IDENTITIES_FAILED",t.error?.message??"Failed to list linked identities",p(t));return{identities:t.data.identities??[],hasPassword:!!t.data.hasPassword}}async unlink(e){let t=await this.bearerHeaders().catch(()=>{throw new u("NOT_SIGNED_IN","Sign in before unlinking an identity")}),r=await this.http.delete(`/auth-service/me/identities/${encodeURIComponent(e)}`,t);if(!r.success||!r.data)throw new u(r.error?.code??"UNLINK_FAILED",r.error?.message??"Failed to unlink identity",p(r));return{provider:r.data.provider??e,removed:Number(r.data.removed??0),remaining:Number(r.data.remaining??0)}}async sendMagicLink(e){let t=await this.http.post("/auth-service/magic-link/request",{email:e});if(!t.success)throw new u(t.error?.code??"MAGIC_LINK_REQUEST_FAILED",t.error?.message??"Failed to send link")}async sendEmailOtp(e){let t=await this.http.post("/auth-service/email-otp/request",{email:e});if(!t.success)throw new u(t.error?.code??"EMAIL_OTP_REQUEST_FAILED",t.error?.message??"Failed to send code")}verifyEmailOtp(e,t){return this.serialize(async()=>{let r=await this.performSwitch(()=>this.http.post("/auth-service/email-otp/verify",{email:e,code:t}),"EMAIL_OTP_INVALID","Wrong or expired code");if(r.kind==="mfa")throw new u("MFA_REQUIRED","This account requires MFA; use signIn()/challengeMfa()");return r.user})}verifyMagicLink(e){return this.serialize(async()=>{let t=await this.performSwitch(()=>this.http.post("/auth-service/magic-link/verify",{token:e}),"MAGIC_LINK_INVALID","Invalid or expired magic link");if(t.kind==="mfa")throw new u("MFA_REQUIRED","This account requires MFA; use signIn()/challengeMfa()");return t.user})}async requestPasswordReset(e){let t=await this.http.post("/auth-service/password/forgot",{email:e});if(!t.success)throw new u(t.error?.code??"PASSWORD_RESET_REQUEST_FAILED",t.error?.message??"Failed to send reset email")}async resetPassword(e,t){let r=await this.http.post("/auth-service/password/reset",{token:e,newPassword:t});if(!r.success)throw new u(r.error?.code??"PASSWORD_RESET_FAILED",r.error?.message??"Reset failed")}async verifyEmail(e){let t=await this.http.post("/auth-service/email/verify",{token:e});if(!t.success)throw new u(t.error?.code??"EMAIL_VERIFICATION_FAILED",t.error?.message??"Verification failed")}async sendVerificationEmail(){let e=await this.bearerHeaders().catch(r=>{throw r instanceof u&&r.code===G.SESSION_WITHHELD?r:new u("UNAUTHORIZED","Sign in before requesting a verification email")}),t=await this.http.post("/auth-service/email/verify/resend",{},e);if(!t.success)throw new u(t.error?.code??"VERIFICATION_RESEND_FAILED",t.error?.message??"Failed to send verification email")}async enrollMfa(){let e=await this.http.post("/auth-service/mfa/enroll/start",{},await this.bearerHeaders());if(!e.success||!e.data)throw new u(e.error?.code??"MFA_ENROLL_FAILED",e.error?.message??"MFA enrollment failed");return e.data}async confirmMfa(e){let t=await this.http.post("/auth-service/mfa/enroll/confirm",{code:e},await this.bearerHeaders());return!!(t.success&&t.data?.confirmed)}async disableMfa(){let e=await this.http.post("/auth-service/mfa/disable",{},await this.bearerHeaders());if(!e.success)throw new u(e.error?.code??"MFA_DISABLE_FAILED",e.error?.message??"Failed to disable MFA",p(e))}async registerPasskey(e){if(typeof navigator>"u"||!navigator.credentials)throw new u("PASSKEY_UNSUPPORTED","WebAuthn not supported in this environment");let t=await this.http.post("/auth-service/passkeys/register/start",{},await this.bearerHeaders());if(!t.success||!t.data)throw new u(t.error?.code??"PASSKEY_START_FAILED",t.error?.message??"Passkey start failed");let r=$t(t.data),n;try{let a=await navigator.credentials.create({publicKey:r});if(!a)throw new Error("create returned null");n=a}catch(a){throw new u("PASSKEY_USER_CANCELLED",a instanceof Error?a.message:"User cancelled passkey registration")}let i=Bt(n),o=await this.http.post("/auth-service/passkeys/register/finish",{response:i,name:e},await this.bearerHeaders());if(!o.success||!o.data)throw new u(o.error?.code??"PASSKEY_FINISH_FAILED",o.error?.message??"Passkey verification failed");return o.data}signInWithPasskey(e){return this.serialize(async()=>{if(typeof navigator>"u"||!navigator.credentials)throw new u("PASSKEY_UNSUPPORTED","WebAuthn not supported in this environment");if(this.state==="withheld")throw this.withheldError();let t=await this.http.post("/auth-service/passkeys/authenticate/start",{userId:e??null});if(!t.success||!t.data)throw new u(t.error?.code??"PASSKEY_START_FAILED",t.error?.message??"Passkey start failed",p(t));let r=qt(t.data),n;try{let a=await navigator.credentials.get({publicKey:r});if(!a)throw new Error("get returned null");n=a}catch(a){throw new u("PASSKEY_USER_CANCELLED",a instanceof Error?a.message:"User cancelled passkey signin")}let i=zt(n),o=await this.performSwitch(()=>this.http.post("/auth-service/passkeys/authenticate/finish",{response:i,userId:e??null}),"PASSKEY_AUTH_FAILED","Passkey signin failed");if(o.kind==="mfa")throw new u("MFA_REQUIRED","This account requires MFA; use signIn()/challengeMfa()");return o.user})}async listPasskeys(){let e=await this.http.get("/auth-service/passkeys",await this.bearerHeaders());return!e.success||!Array.isArray(e.data)?[]:e.data}async deletePasskey(e){let t=await this.http.delete(`/auth-service/passkeys/${encodeURIComponent(e)}`,await this.bearerHeaders());if(!t.success)throw new u(t.error?.code??"PASSKEY_DELETE_FAILED",t.error?.message??"Failed to delete passkey",p(t))}async listMySessions(){let e=await this.http.get("/auth-service/sessions/me",await this.bearerHeaders());return!e.success||!Array.isArray(e.data)?[]:e.data}async revokeSession(e){let t=await this.http.delete(`/auth-service/sessions/me/${encodeURIComponent(e)}`,await this.bearerHeaders());if(!t.success)throw new u(t.error?.code??"SESSION_REVOKE_FAILED",t.error?.message??"Failed to revoke session",p(t))}async revokeAllSessions(){let e=await this.http.delete("/auth-service/sessions/me",await this.bearerHeaders());if(!e.success)throw new u(e.error?.code??"SESSION_REVOKE_ALL_FAILED",e.error?.message??"Failed to sign out other devices",p(e))}async startSso(e){let t=await this.http.post("/auth-service/sso/oidc/start",{returnTo:e});if(!t.success||!t.data)throw new u(t.error?.code??"SSO_START_FAILED",t.error?.message??"SSO start failed");return t.data}async signInWithSso(e){let t=e??(typeof window<"u"?window.location.origin:"");if(!t)throw new u("SSO_NO_RETURN_TO","returnTo required outside browser context");let r=await this.startSso(t);typeof window<"u"&&(window.location.href=r.authorizationUrl)}async startSaml(e){let t=await this.http.post("/auth-service/sso/saml/start",{returnTo:e});if(!t.success||!t.data)throw new u(t.error?.code??"SAML_START_FAILED",t.error?.message??"SAML start failed");return t.data}async signInWithSaml(e){let t=e??(typeof window<"u"?window.location.origin:"");if(!t)throw new u("SAML_NO_RETURN_TO","returnTo required outside browser context");let r=await this.startSaml(t);typeof window<"u"&&(window.location.href=r.authorizationUrl)}consumeSsoTokenFromUrl(){return this.serialize(async()=>{if(typeof window>"u")return null;let e=window.location.hash.replace(/^#/,"");if(!e)return null;let t=new URLSearchParams(e),r=t.get("sendora_oidc_error")??t.get("sendora_saml_error");if(r)throw window.history.replaceState(null,"",window.location.pathname+window.location.search),new u("SSO_FAILED",decodeURIComponent(r));let n=t.get("sendora_oidc_token")??t.get("sendora_saml_token");if(!n)return null;let i=t.get("sendora_retired_anon");window.history.replaceState(null,"",window.location.pathname+window.location.search);let o=await this.performSwitch(async()=>{let a=await this.http.post("/auth-service/token/refresh",{refreshToken:n}),l=a.success?X(a.data):null;return l?{success:!0,data:{user:pe(a.data)??et(l.accessToken,Ze(l.accessToken)??"",!1),tokens:{...l,tokenType:"Bearer"}}}:{success:!1,error:a.error??{code:"SSO_EXCHANGE_FAILED",message:"Could not exchange SSO token"}}},"SSO_EXCHANGE_FAILED","Could not exchange SSO token");if(o.kind==="mfa")throw new u("MFA_REQUIRED","Unexpected MFA challenge on SSO exchange");return i&&this.fireDeviceTakeover(i,o.user.id),o.user})}};function Qe(s){return s?le.includes(s):!1}function Wt(s){switch(s){case"revoked":case"evicted":case"deleted":return s;default:return"session_expired"}}function _e(s){return{v:1,user:s.user,accessToken:s.tokens.accessToken,accessExpiresAt:Date.now()+s.tokens.expiresIn*1e3,refreshToken:s.tokens.refreshToken}}function Vt(){let s="abcdefghijklmnopqrstuvwxyz0123456789",e=new Uint8Array(32),t=globalThis.crypto;if(t?.getRandomValues)t.getRandomValues(e);else for(let n=0;n<e.length;n++)e[n]=Math.floor(Math.random()*256);let r="mk_";for(let n=0;n<e.length;n++)r+=s[e[n]%s.length];return r}function Ye(s){switch(s.kind){case"password":return{path:"/auth-service/login",body:{email:s.email,password:s.password}};case"gameCenter":{let{kind:e,...t}=s;return{path:"/auth-service/login/game-center",body:t}}case"playGames":return{path:"/auth-service/login/play-games",body:{serverAuthCode:s.serverAuthCode}};case"magicLink":return{path:"/auth-service/magic-link/verify",body:{token:s.token}};case"emailOtp":return{path:"/auth-service/email-otp/verify",body:{email:s.email,code:s.code}};case"passkey":return{path:"/auth-service/passkeys/authenticate/finish",body:{response:s.assertion,userId:s.userId??null}};case"mfa":return{path:"/auth-service/mfa/challenge",body:{challengeToken:s.challengeToken,code:s.code}};default:{let{kind:e,...t}=s;return{path:"/auth-service/login/social",body:{provider:e,...t}}}}}function Je(s){switch(s.kind){case"password":return{path:"/auth-service/me/link/email",body:{email:s.email,password:s.password}};case"gameCenter":{let{kind:e,...t}=s;return{path:"/auth-service/me/link/game-center",body:t}}case"playGames":return{path:"/auth-service/me/link/play-games",body:{serverAuthCode:s.serverAuthCode}};case"magicLink":case"emailOtp":case"passkey":case"mfa":throw new u("UNSUPPORTED_LINK_CREDENTIAL",`A ${s.kind} credential cannot be linked; sign in with it instead`);default:{let{kind:e,...t}=s;return{path:"/auth-service/me/link/social",body:{provider:e,...t}}}}}function Xe(s,e,t){let r=s&&typeof s=="object"?s:{},n=i=>typeof r[i]=="number"?r[i]:0;return{mergedUserId:typeof r.mergedUserId=="string"?r.mergedUserId:e,deletedAnonymousId:typeof r.deletedAnonymousId=="string"?r.deletedAnonymousId:t,eventsReassigned:n("eventsReassigned"),profilesReassigned:n("profilesReassigned"),entitiesReassigned:n("entitiesReassigned"),pushTokensReassigned:n("pushTokensReassigned")}}function Ze(s){let e=E(s)?.sub;return typeof e=="string"&&e.length>0?e:null}function et(s,e,t=!0){let r=E(s)??{},n=typeof r.sub=="string"&&r.sub.length>0?r.sub:e,i=typeof r.is_anonymous=="boolean"?r.is_anonymous:t,o={id:n,email:typeof r.email=="string"?r.email:null,emailVerified:typeof r.email_verified=="boolean"?r.email_verified:!i,name:typeof r.name=="string"?r.name:null,isAnonymous:i};if(Object.prototype.hasOwnProperty.call(r,"project")){let a=r.project;o.project=typeof a=="string"?a:null}return o}function Z(s){let e=(4-s.length%4)%4,t=(s+"===".slice(0,e)).replace(/-/g,"+").replace(/_/g,"/"),r=atob(t),n=new ArrayBuffer(r.length),i=new Uint8Array(n);for(let o=0;o<r.length;o++)i[o]=r.charCodeAt(o);return n}function I(s){let e=s instanceof Uint8Array?s:new Uint8Array(s),t="";for(let r=0;r<e.length;r++)t+=String.fromCharCode(e[r]);return btoa(t).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}function $t(s){return{challenge:Z(s.challenge),rp:s.rp,user:{id:Z(s.user.id),name:s.user.name,displayName:s.user.displayName},pubKeyCredParams:s.pubKeyCredParams,timeout:s.timeout,attestation:s.attestation,excludeCredentials:s.excludeCredentials?.map(e=>({id:Z(e.id),type:"public-key",transports:e.transports})),authenticatorSelection:s.authenticatorSelection}}function qt(s){return{challenge:Z(s.challenge),timeout:s.timeout,rpId:s.rpId,allowCredentials:s.allowCredentials?.map(e=>({id:Z(e.id),type:"public-key",transports:e.transports})),userVerification:s.userVerification}}function Bt(s){let e=s.response;return{id:s.id,rawId:I(s.rawId),type:s.type,response:{clientDataJSON:I(e.clientDataJSON),attestationObject:I(e.attestationObject),transports:typeof e.getTransports=="function"?e.getTransports():void 0},clientExtensionResults:s.getClientExtensionResults()}}function X(s){if(!s||typeof s!="object")return null;let e=s.tokens,t=e&&typeof e=="object"?e:s;return typeof t.accessToken!="string"||!t.accessToken||typeof t.refreshToken!="string"||!t.refreshToken||typeof t.expiresIn!="number"||t.expiresIn<=0?null:{accessToken:t.accessToken,refreshToken:t.refreshToken,expiresIn:t.expiresIn}}function pe(s){if(!s||typeof s!="object")return null;let e=s.user;if(!e||typeof e!="object")return null;let t=e.id;return typeof t!="string"||t.length===0?null:e}function tt(s,e){let t=E(s);if(!t)return!0;let r=t.exp;return typeof r!="number"||!Number.isFinite(r)?!0:e<r*1e3}function zt(s){let e=s.response;return{id:s.id,rawId:I(s.rawId),type:s.type,response:{clientDataJSON:I(e.clientDataJSON),authenticatorData:I(e.authenticatorData),signature:I(e.signature),userHandle:e.userHandle?I(e.userHandle):null},clientExtensionResults:s.getClientExtensionResults()}}var rt=j;function Qt(s){return s===!1?{pageViews:!1,sessionStart:!1,appOpen:!1,appBackground:!1,engagement:!1}:s===!0||s===void 0?{pageViews:!0,sessionStart:!0,appOpen:!0,appBackground:!0,engagement:!0}:{pageViews:s.pageViews??!0,sessionStart:s.sessionStart??!0,appOpen:s.appOpen??!0,appBackground:s.appBackground??!0,engagement:s.engagement??!0}}var Yt=250,st=360*60*1e3;function ot(s,e){if(typeof window>"u")return()=>{};let t=Qt(e.autoTrack),r=e.sessionIdleMs??18e5,n=[],i="sendora_session_id",o="sendora_session_last_activity";function a(){return nt(i)??""}function l(c){it(i,c)}function d(){let c=nt(o);return c&&Number(c)||0}function h(c){it(o,String(c))}function g(){return`sess_${Date.now().toString(36)}_${Math.random().toString(36).slice(2,10)}`}function k(c){let A=Date.now(),Q=d();if(!a()||Q&&A-Q>r){let te=g();l(te),c&&t.sessionStart&&s.track("session.start",{sessionId:te})}h(A)}k(t.sessionStart),t.appOpen&&s.track("app.opened",{sessionId:a()||void 0,url:window.location.origin+window.location.pathname,referrer:document.referrer||void 0});let v=window.location.pathname,y=0,w=document.visibilityState==="visible"?Date.now():0;function z(){w>0&&(y+=Date.now()-w,w=0)}function ee(){if(!t.engagement)return;z();let c=y;if(y=0,!(c<Yt)){c>st&&(c=st);try{s.track("app.engagement",{durationMs:Math.round(c),screen:v,sessionId:a()||void 0})}catch{}}}function lt(c){v=c,y=0,w=document.visibilityState==="visible"?Date.now():0}if(t.pageViews||t.engagement){t.pageViews&&s.page();let c=()=>{ee(),k(!0),t.pageViews&&s.page(),lt(window.location.pathname)},A=()=>c();window.addEventListener("popstate",A),n.push(()=>window.removeEventListener("popstate",A));let Q=window;if(!Q.__sendoraHistoryPatched){Q.__sendoraHistoryPatched=!0;let te=history.pushState,ut=history.replaceState;history.pushState=function(...ve){let Ae=te.apply(this,ve);return window.dispatchEvent(new Event("sendora:locationchange")),Ae},history.replaceState=function(...ve){let Ae=ut.apply(this,ve);return window.dispatchEvent(new Event("sendora:locationchange")),Ae}}let ke=()=>c();window.addEventListener("sendora:locationchange",ke),n.push(()=>window.removeEventListener("sendora:locationchange",ke))}if(t.appBackground||t.engagement){let c=()=>{if(document.visibilityState==="hidden"){ee(),t.appBackground&&(k(!0),s.track("app.backgrounded",{sessionId:a()||void 0}));try{s.flush()}catch{}}else document.visibilityState==="visible"&&(t.appBackground&&(k(!0),s.track("app.foregrounded",{sessionId:a()||void 0})),t.engagement&&w===0&&(w=Date.now()))};if(document.addEventListener("visibilitychange",c),n.push(()=>document.removeEventListener("visibilitychange",c)),t.engagement){let A=()=>{ee();try{s.flush()}catch{}};window.addEventListener("pagehide",A),n.push(()=>window.removeEventListener("pagehide",A))}}let De=0,D=()=>{let c=Date.now();c-De<5e3||(De=c,k(!0))};return window.addEventListener("click",D,{passive:!0}),window.addEventListener("keydown",D,{passive:!0}),window.addEventListener("scroll",D,{passive:!0}),n.push(()=>{window.removeEventListener("click",D),window.removeEventListener("keydown",D),window.removeEventListener("scroll",D)}),()=>{ee();for(let c of n)try{c()}catch{}}}function nt(s){try{return window.sessionStorage?.getItem(s)??null}catch{return null}}function it(s,e){try{window.sessionStorage?.setItem(s,e)}catch{}}var $=class s{constructor(e){this.http=e}static isSupported(){return typeof window>"u"?!1:"serviceWorker"in navigator&&"PushManager"in window&&"Notification"in window}static permission(){return typeof Notification>"u"?"denied":Notification.permission}async subscribe(e){if(!s.isSupported())throw new Error("[sendoracloud] Web Push not supported in this browser.");let t=Notification.permission;if(t==="default"&&(t=await Notification.requestPermission()),t!=="granted")throw new Error(`[sendoracloud] Notification permission ${t}.`);let r=await navigator.serviceWorker.getRegistration(e.scope??"/");r||(r=await navigator.serviceWorker.register(e.serviceWorkerPath,{scope:e.scope??"/"})),await navigator.serviceWorker.ready;let i=(await this.http.get("/push/vapid"))?.data?.publicKey;if(!i)throw new Error("[sendoracloud] backend returned no VAPID public key.");let a=await r.pushManager.getSubscription()??await r.pushManager.subscribe({userVisibleOnly:!0,applicationServerKey:Jt(i)}),l=a.toJSON(),d=l.endpoint,h=l.keys?.p256dh??"",g=l.keys?.auth??"",k=await Xt(d),v=await this.http.post("/push/tokens",{platform:"web",token:k,webEndpoint:d,webP256dh:h,webAuth:g,userAgent:typeof navigator<"u"?navigator.userAgent:void 0,locale:typeof navigator<"u"?navigator.language:void 0,timezone:Intl?.DateTimeFormat?.().resolvedOptions?.().timeZone,...e.userId?{userId:e.userId}:{}});if(!v?.data?.tokenId)throw new Error("[sendoracloud] backend returned no tokenId on subscribe.");return{tokenId:v.data.tokenId,subscription:a}}async unsubscribe(e="/"){if(!s.isSupported())return!1;let t=await navigator.serviceWorker.getRegistration(e);if(!t)return!1;let r=await t.pushManager.getSubscription();return r?await r.unsubscribe():!1}async trackOpen(e,t){let r={sendId:e};t!==void 0&&(r.clickAction=t);let n=await this.http.post("/push/track-open",r);if(!n.success)throw new Error(n.error?.message??"push.trackOpen failed")}};function Jt(s){let e="=".repeat((4-s.length%4)%4),t=(s+e).replace(/-/g,"+").replace(/_/g,"/"),r=atob(t),n=new Uint8Array(r.length);for(let i=0;i<r.length;i++)n[i]=r.charCodeAt(i);return n}async function Xt(s){let e=new TextEncoder().encode(s),t=await crypto.subtle.digest("SHA-256",e);return Array.from(new Uint8Array(t)).map(n=>n.toString(16).padStart(2,"0")).join("")}var q=class{constructor(e){}unsupported(){throw new Error("[SendoraCloud] sendora.audiences is not available in the browser SDK. Audiences require a secret (sk_*) key with the audiences:read/write scopes and must be managed from a trusted server, not the browser.")}list(){return this.unsupported()}get(e){return this.unsupported()}create(e){return this.unsupported()}update(e,t){return this.unsupported()}delete(e){return this.unsupported()}};var f=class extends Error{constructor(e,t,r){super(t),this.name="LinkError",this.code=e,this.statusCode=r}};function be(s,e){let t=(s??"").toUpperCase();return t==="NOT_FOUND"?new f("NOT_FOUND",e):t==="FORBIDDEN"||t==="UNAUTHORIZED"?new f("UNAUTHORIZED",e):t==="RATE_LIMITED"?new f("RATE_LIMITED",e):t==="ENTITLEMENT_ERROR"||/plan limit/i.test(e)?new f("PLAN_LIMIT",e):t==="VALIDATION_ERROR"?/iOS bundle|Android package/i.test(e)?new f("BUNDLE_MISMATCH",e):/2KB|10KB|linkData/i.test(e)?new f("DATA_TOO_LARGE",e):/fallbackUrl/i.test(e)&&/apps/i.test(e)?new f("FALLBACK_REQUIRED",e):new f("INVALID_INPUT",e):t==="PARSE_ERROR"||t==="HTTP_ERROR"||/HTTP \d{3}/.test(e)?new f("NETWORK",e):new f("UNKNOWN",e||`Unknown LinkError (code=${s??"none"})`)}var Ce=/^[a-z0-9-]{3,20}$/;function at(s){try{let t=new URL(s).pathname.split("/").filter(Boolean);if(t.length===0)return null;let r=t[t.length-1];return Ce.test(r)?r:null}catch{return null}}var Zt=5*6e4,er=50,tr=5,B=class{constructor(e){this.http=e;this.prewarmCache=new Map;this.prewarmInflight=0}cacheKey(e,t){if(t)return`k:${t}`;let r={},n=e;for(let i of Object.keys(n).sort())r[i]=n[i];return`s:${JSON.stringify(r)}`}evictExpired(){let e=Date.now();for(let[t,r]of this.prewarmCache)e-r.ts>Zt&&this.prewarmCache.delete(t);for(;this.prewarmCache.size>er;){let t=this.prewarmCache.keys().next().value;if(t===void 0)break;this.prewarmCache.delete(t)}}prewarm(e,t){this.evictExpired();let r=this.cacheKey(e,t?.key);if(this.prewarmCache.has(r)||this.prewarmInflight>=tr)return;this.prewarmInflight++;let n=this.doCreate(e).catch(i=>{throw this.prewarmCache.delete(r),i}).finally(()=>{this.prewarmInflight--});this.prewarmCache.set(r,{promise:n,ts:Date.now()})}async create(e,t){if(!e.title)throw new f("INVALID_INPUT","links.create: title is required");this.evictExpired();let r=this.cacheKey(e,t?.key),n=this.prewarmCache.get(r);return n?(this.prewarmCache.delete(r),n.promise):this.doCreate(e)}async doCreate(e){let t={title:e.title};e.fallbackUrl&&(t.fallbackUrl=e.fallbackUrl),e.iosDeepLinkPath&&(t.iosDeepLinkPath=e.iosDeepLinkPath),e.androidDeepLinkPath&&(t.androidDeepLinkPath=e.androidDeepLinkPath),e.linkData&&(t.linkData=e.linkData),e.ogTitle&&(t.ogTitle=e.ogTitle),e.ogDescription&&(t.ogDescription=e.ogDescription),e.ogImageUrl&&(t.ogImageUrl=e.ogImageUrl),e.campaign&&(t.campaign=e.campaign),e.source&&(t.source=e.source),e.medium&&(t.medium=e.medium),e.channel&&(t.channel=e.channel),e.tags&&(t.tags=e.tags),e.expiresAt&&(t.expiresAt=e.expiresAt),e.iosBundleId&&(t.iosBundleId=e.iosBundleId),e.androidPackageName&&(t.androidPackageName=e.androidPackageName);let r=await this.http.post("/sdk/links",t);if(!r.success||!r.data)throw be(r.error?.code,r.error?.message??"links.create failed");return r.data}async revoke(e){if(!Ce.test(e))throw new f("INVALID_INPUT",`links.revoke: '${e}' is not a valid shortcode`);let t=await this.http.post(`/sdk/links/${encodeURIComponent(e)}/revoke`,{});if(!t.success||!t.data)throw be(t.error?.code,t.error?.message??"links.revoke failed");return{shortcode:t.data.shortcode,revoked:!0}}async getStats(e){if(!Ce.test(e))throw new f("INVALID_INPUT",`links.getStats: '${e}' is not a valid shortcode`);let t=await this.http.get(`/sdk/links/${encodeURIComponent(e)}/stats`);if(!t.success||!t.data)throw be(t.error?.code,t.error?.message??"links.getStats failed");return t.data}};var fe=class{constructor(e){this.http=e}async reportInstall(e={}){let t=await this.http.post("/attribution/install",e);if(!t.success||!t.data)throw new Error(t.error?.message??"attribution.reportInstall failed");return t.data}async checkDeferred(e={}){let t=await this.http.post("/attribution/deferred",e);if(!t.success)throw new Error(t.error?.message??"attribution.checkDeferred failed");return t.data??null}};var ge=class{constructor(e){this.http=e}async createTicket(e){let t=await this.http.post("/support/tickets",e);if(!t.success||!t.data)throw new Error(t.error?.message??"support.createTicket failed");return t.data}async submitCsat(e){let t=await this.http.post("/support/csat",e);if(!t.success||!t.data)throw new Error(t.error?.message??"support.submitCsat failed");return t.data}};var me=class{constructor(e){this.http=e}async search(e){if(!e.query||e.query.trim().length===0)return[];let t=new URLSearchParams({query:e.query});e.limit&&t.set("limit",String(e.limit));let r=await this.http.get(`/kb/search?${t.toString()}`);if(!r.success||!Array.isArray(r.data))throw new Error(r.error?.message??"kb.search failed");return r.data}};var rr=/^[A-Za-z0-9_.-]{1,64}$/;function sr(s){if(s!==void 0){if(typeof s!="string"||!rr.test(s))throw new Error(`[sendora] init: storagePrefix must be 1-64 chars of A-Z a-z 0-9 _ . - (got ${JSON.stringify(s)}). Changing it signs the browser out, so it is validated rather than ignored.`);return s}}var nr=/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;function ir(s){let e=s.expectedProjectId;if(e!==void 0){if(typeof e!="string"||!nr.test(e))throw new Error(`[sendora] init: expectedProjectId must be a UUID (got ${JSON.stringify(e)}).`);if(s.projectId!==void 0&&s.projectId!==e)throw new Error(`[sendora] init: expectedProjectId (${e}) must equal projectId (${s.projectId}) when both are set \u2014 they name the same project.`)}}var we=class we{constructor(e){this.autoTrackCleanup=null;this.http=new re(e),this.storage=new se(sr(e.storagePrefix),e.tokenStore==="memory"),this.consent=new H(e.defaultConsent===!0,this.http),this.analytics=new L(e,this.http,this.storage,this.consent),this.flags=new U(e,this.http,this.storage),this.surveys=new x(e,this.http,this.storage),this.messages=new N(e,this.http,this.storage),this.chatbot=new O(e,this.http,this.storage),this.auth=new V(e,this.http,this.storage,this.analytics,this.flags,this.chatbot,{onIdentityWithheld:()=>{this.analytics.withholdIdentity(),this.flags.setContext({})}}),this.webPush=new $(this.http),this.audiences=new q(this.http),this.links=new B(this.http),this.attribution=new fe(this.http),this.support=new ge(this.http),this.kb=new me(this.http),e.autoTrack!==!1&&(this.autoTrackCleanup=ot(this.analytics,e))}static init(e){return Oe(e.apiKey),ir(e),new we(e)}static sanitizeHtml(e){return ne(e)}static safeUrl(e){return S(e)}track(e,t){this.analytics.track(e,t)}page(e){this.analytics.page(e)}identify(e,t,r){this.analytics.identify(e,t,r),this.flags.setContext({userId:e})}reset(e){this.analytics.reset(),this.flags.reset(),this.chatbot.newSession()}onIdentityWithheld(e){return this.auth.onIdentityWithheld(e)}async flush(){await this.analytics.flush()}destroy(){this.autoTrackCleanup&&(this.autoTrackCleanup(),this.autoTrackCleanup=null),this.analytics.destroy(),this.flags.destroy(),this.messages.destroy()}};we.version=T;var ye=we,or=ye;0&&(module.exports={AMBIGUOUS_HELD_GUEST,AUTH_HELD_SLOT_KEYS,AUTH_STATES,AUTH_WITHHELD_CODES,AlreadyIdentifiedError,Analytics,Audiences,Auth,AuthError,Chatbot,Consent,CredentialInUseError,DEAD_CODES,EmailAlreadyTakenError,FeatureFlags,HELD_GUEST_SLOTS,HeldGuestLimitError,HeldGuestProjectMismatch,InAppMessaging,LinkError,Links,REFRESH_END_REASONS,REJECTED_IN_WITHHELD,RELEASE_HELD_ON_END_REASONS,SendoraCloud,Surveys,ValidationError,WebPush,extractShortcodeFromUrl,projectVerdict,safeUrl,sanitizeHtml});