@strands.gg/accui 1.7.2 → 1.8.0

package/dist/{useStrandsAuth-CO9JEdxM.js → useStrandsAuth-Beee__9G.js}

@@ -1,5 +1,5 @@
 import { ref, computed } from "vue";
-import { u as useStrandsConfig } from "./useStrandsConfig-Bdk-g0jS.js";
+import { u as useStrandsConfig } from "./useStrandsConfig-Cxb360Os.js";
 const { getUrl } = useStrandsConfig();
 const currentUser = ref(null);
 const currentSession = ref(null);
@@ -29,6 +29,18 @@ const mfaSessionId = ref(null);
 const availableMfaMethods = ref([]);
 let refreshTimer = null;
 function useStrandsAuth() {
+  const getAuthHeaders = () => {
+    if (!currentSession.value?.accessToken) {
+      throw new Error("No access token available");
+    }
+    const headers = {
+      "Authorization": `Bearer ${currentSession.value.accessToken}`
+    };
+    if (currentSession.value?.refreshToken) {
+      headers["x-refresh-token"] = currentSession.value.refreshToken;
+    }
+    return headers;
+  };
   const completeHardwareKeyRegistration = async (deviceId, credential, accessToken) => {
     if (!currentSession.value?.accessToken) {
       throw new Error("No access token available");
@@ -192,8 +204,19 @@ function useStrandsAuth() {
         }
         throw new Error(`Token refresh failed: ${response.status} ${response.statusText}`);
       }
-      const authData = await response.json();
-      setAuthData(authData, true);
+      const tokenData = await response.json();
+      const newSession = {
+        accessToken: tokenData.access_token,
+        refreshToken: tokenData.refresh_token,
+        expiresAt: new Date(Date.now() + 5 * 60 * 1e3),
+        // 5 minutes from now
+        userId: currentUser.value?.id
+      };
+      currentSession.value = newSession;
+      if (typeof window !== "undefined") {
+        localStorage.setItem("strands_auth_session", JSON.stringify(newSession));
+      }
+      startTokenRefreshTimer();
       return true;
     } catch (error) {
       await signOut();
@@ -275,17 +298,24 @@ function useStrandsAuth() {
       if (currentUser.value) {
         currentUser.value = {
           ...currentUser.value,
+          // Update with API response data, preserving the API field names
           id: updatedUserData.id,
+          email: updatedUserData.email,
           firstName: updatedUserData.first_name,
           lastName: updatedUserData.last_name,
-          // Keep existing properties not returned by API
-          avatar: updatedUserData.avatar_url || currentUser.value.avatar,
-          mfaEnabled: currentUser.value.mfaEnabled,
-          email: currentUser.value.email,
-          // Keep existing email since we don't update it here
-          emailVerified: currentUser.value.emailVerified,
-          createdAt: updatedUserData.created_at || currentUser.value.createdAt,
-          updatedAt: updatedUserData.updated_at || (/* @__PURE__ */ new Date()).toISOString()
+          emailVerified: updatedUserData.email_verified,
+          avatar: updatedUserData.avatar_url,
+          mfaEnabled: updatedUserData.mfa_enabled,
+          xp: updatedUserData.xp,
+          level: updatedUserData.level,
+          next_level_xp: updatedUserData.next_level_xp,
+          username: updatedUserData.username,
+          // This was missing and causing the bug!
+          usernameLastChangedAt: updatedUserData.username_last_changed_at,
+          createdAt: updatedUserData.created_at,
+          updatedAt: updatedUserData.updated_at,
+          settings: updatedUserData.settings,
+          passwordUpdatedAt: updatedUserData.password_updated_at
         };
         if (typeof window !== "undefined") {
           localStorage.setItem("strands_auth_user", JSON.stringify(currentUser.value));
@@ -468,23 +498,10 @@ function useStrandsAuth() {
     }
     return response.json();
   };
-  const setAuthData = (authResponse, isTokenRefresh = false) => {
+  const setAuthData = (authResponse) => {
     try {
       if (authResponse.user) {
-        if (isTokenRefresh && currentUser.value) {
-          currentUser.value = {
-            ...currentUser.value,
-            ...authResponse.user,
-            // Preserve certain fields that might be missing in refresh response
-            avatar: authResponse.user.avatar || currentUser.value.avatar,
-            firstName: authResponse.user.firstName || currentUser.value.firstName,
-            lastName: authResponse.user.lastName || currentUser.value.lastName
-          };
-        } else {
-          currentUser.value = authResponse.user;
-        }
-      } else if (!isTokenRefresh) {
-        currentUser.value = null;
+        currentUser.value = authResponse.user;
       }
       const session = {
         accessToken: authResponse.access_token,
@@ -633,6 +650,47 @@ function useStrandsAuth() {
     }
     return response.json();
   };
+  const getUserSessions = async () => {
+    const response = await fetch(getUrl("sessions"), {
+      method: "GET",
+      headers: getAuthHeaders()
+    });
+    if (!response.ok) {
+      throw new Error(`Failed to get user sessions: ${response.status} ${response.statusText}`);
+    }
+    return response.json();
+  };
+  const getSessionStats = async () => {
+    const response = await fetch(getUrl("sessionsStats"), {
+      method: "GET",
+      headers: getAuthHeaders()
+    });
+    if (!response.ok) {
+      throw new Error(`Failed to get session stats: ${response.status} ${response.statusText}`);
+    }
+    return response.json();
+  };
+  const revokeSession = async (sessionId) => {
+    const url = getUrl("sessionRevoke").replace("{session_id}", encodeURIComponent(sessionId));
+    const response = await fetch(url, {
+      method: "POST",
+      headers: getAuthHeaders()
+    });
+    if (!response.ok) {
+      throw new Error(`Failed to revoke session: ${response.status} ${response.statusText}`);
+    }
+    return response.status === 200;
+  };
+  const revokeAllOtherSessions = async () => {
+    const response = await fetch(getUrl("sessionsRevokeAll"), {
+      method: "POST",
+      headers: getAuthHeaders()
+    });
+    if (!response.ok) {
+      throw new Error(`Failed to revoke all other sessions: ${response.status} ${response.statusText}`);
+    }
+    return response.status === 200;
+  };
   if (!isInitialized.value) {
     initialize();
   }
@@ -669,6 +727,11 @@ function useStrandsAuth() {
     changeUsername,
     getUsernameCooldown,
     checkUsernameAvailability,
+    // Session management
+    getUserSessions,
+    getSessionStats,
+    revokeSession,
+    revokeAllOtherSessions,
     initialize,
     setAuthData,
     verifyMfa,
@@ -690,4 +753,4 @@ function useStrandsAuth() {
 export {
   useStrandsAuth as u
 };
-//# sourceMappingURL=useStrandsAuth-CO9JEdxM.js.map
+//# sourceMappingURL=useStrandsAuth-Beee__9G.js.map

package/dist/useStrandsAuth-Beee__9G.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"useStrandsAuth-Beee__9G.js","sources":["../../../apps/accounts-ui/src/vue/composables/useStrandsAuth.ts"],"sourcesContent":["import { ref, computed } from 'vue'\nimport type { User, Session, SessionInfo, SessionStats, SignInCredentials, SignUpData, AuthResponse, MfaDevice, MfaErrorResponse } from '../../types'\nimport { useStrandsConfig } from './useStrandsConfig'\n\nconst { getUrl } = useStrandsConfig()\n\nconst currentUser = ref<User | null>(null)\nconst currentSession = ref<Session | null>(null)\n\n// Specific loading states\nconst isInitializing = ref(true)\nconst isSigningIn = ref(false)\nconst isSigningUp = ref(false)\nconst isSigningOut = ref(false)\nconst isRefreshingToken = ref(false)\nconst isSendingMfaEmail = ref(false)\nconst isVerifyingMfa = ref(false)\nconst isLoadingProfile = ref(false)\n\n// Legacy loading states for backward compatibility\nconst loading = computed(() => isSigningIn.value || isSigningUp.value || isSigningOut.value || isRefreshingToken.value || isSendingMfaEmail.value || isVerifyingMfa.value || isLoadingProfile.value)\nconst isLoading = computed(() => isInitializing.value || loading.value)\n\n// Loading messages for better UX\nconst loadingMessage = computed(() => {\n  if (isInitializing.value) return 'Checking authentication...'\n  if (isSigningIn.value) return 'Signing you in...'\n  if (isSigningUp.value) return 'Creating your account...'\n  if (isSigningOut.value) return 'Signing you out...'\n  if (isRefreshingToken.value) return 'Refreshing session...'\n  if (isSendingMfaEmail.value) return 'Sending verification code...'\n  if (isVerifyingMfa.value) return 'Verifying code...'\n  return 'Loading...' // Fallback\n})\n\nconst isInitialized = ref(false)\n\n// MFA state\nconst mfaRequired = ref(false)\nconst mfaSessionId = ref<string | null>(null)\nconst availableMfaMethods = ref<MfaDevice[]>([])\n\n// Token refresh timer\nlet refreshTimer: NodeJS.Timeout | null = null\n\nexport function useStrandsAuth() {\n  // Helper function to get authenticated headers with refresh token\n  const getAuthHeaders = () => {\n    if (!currentSession.value?.accessToken) {\n      throw new Error('No access token available')\n    }\n    \n    const headers: Record<string, string> = {\n      'Authorization': `Bearer ${currentSession.value.accessToken}`,\n    }\n    \n    // Include refresh token for session management\n    if (currentSession.value?.refreshToken) {\n      headers['x-refresh-token'] = currentSession.value.refreshToken\n    }\n    \n    return headers\n  }\n  /**\n   * Complete hardware key (WebAuthn) registration for MFA\n   * Returns result with backup codes on success\n   */\n  const completeHardwareKeyRegistration = async (deviceId: string, credential: any, accessToken: string) => {\n    if (!currentSession.value?.accessToken) {\n      throw new Error('No access token available')\n    }\n\n    const response = await fetch(getUrl('mfaHardwareCompleteRegistration'), {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/json',\n        'Authorization': `Bearer ${currentSession.value.accessToken}`\n      },\n      body: JSON.stringify({\n        device_id: deviceId,\n        credential: credential\n      })\n    })\n    if (!response.ok) {\n      const errorText = await response.text()\n      let errorMessage = 'Failed to complete hardware key registration'\n      \n      try {\n        const errorData = JSON.parse(errorText)\n        errorMessage = errorData.message || errorData.error || errorText\n      } catch {\n        errorMessage = errorText || 'Failed to complete hardware key registration'\n      }\n      \n      throw new Error(errorMessage)\n    }\n    return response.json()\n  }\n  /**\n   * Register a hardware key (WebAuthn) for MFA\n   * Returns { device_id, challenge } on success\n   */\n  const registerHardwareKey = async (deviceName: string, accessToken: string, deviceType: 'hardware' | 'passkey' = 'hardware') => {\n    if (!currentSession.value?.accessToken) {\n      throw new Error('No access token available')\n    }\n    \n    const response = await fetch(getUrl('mfaHardwareStartRegistration'), {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/json',\n        'Authorization': `Bearer ${currentSession.value.accessToken}`,\n      },\n      body: JSON.stringify({ \n        device_name: deviceName,\n        device_type: deviceType \n      })\n    })\n    if (!response.ok) {\n      const errorText = await response.text()\n      let errorMessage = 'Failed to start hardware key registration'\n      \n      try {\n        const errorData = JSON.parse(errorText)\n        errorMessage = errorData.message || errorData.error || errorText\n      } catch {\n        errorMessage = errorText || 'Failed to start hardware key registration'\n      }\n      \n      throw new Error(errorMessage)\n    }\n    return response.json()\n  }\n\n  const isAuthenticated = computed(() => currentUser.value !== null)\n\n    const signIn = async (credentials: SignInCredentials) => {\n    isSigningIn.value = true\n    try {\n      // Reset MFA state at start of new sign-in attempt\n      mfaRequired.value = false\n      mfaSessionId.value = null\n      availableMfaMethods.value = []\n      \n      // Make API call to sign-in endpoint\n      const response = await fetch(getUrl('signIn'), {\n        method: 'POST',\n        headers: {\n          'Content-Type': 'application/json',\n        },\n        body: JSON.stringify(credentials),\n      })\n\n      if (!response.ok) {\n        if (response.status === 401) {\n          throw new Error('Invalid email or password')\n        } else if (response.status === 403) {\n          throw new Error('Please verify your email address before signing in')\n        } else {\n          throw new Error(`Sign in failed: ${response.status} ${response.statusText}`)\n        }\n      }\n\n      const authData: AuthResponse = await response.json()\n      \n      // Check if MFA is required\n      if (authData.mfa_required) {\n        mfaRequired.value = true\n        mfaSessionId.value = authData.mfa_session_id || null\n        \n        // Convert API MFA methods to the expected format\n        const methods = (authData.available_mfa_methods || []).map((method: any) => {\n          // Create better fallback names for different device types\n          let fallbackName = `${method.device_type.charAt(0).toUpperCase() + method.device_type.slice(1)} Authentication`\n          \n          if (method.device_type === 'hardware') {\n            // Better names for hardware keys\n            fallbackName = method.device_name || 'Security Key' // Could be YubiKey, FIDO2 Key, etc.\n          } else if (method.device_type === 'totp') {\n            fallbackName = method.device_name || 'Authenticator App'\n          } else if (method.device_type === 'email') {\n            fallbackName = method.device_name || 'Email Verification'\n          }\n          \n          return {\n            id: method.device_id,\n            device_type: method.device_type,\n            device_name: method.device_name || fallbackName,\n            is_active: true,\n            created_at: new Date().toISOString(),\n            last_used_at: method.last_used_at,\n            // Pass through additional metadata if available\n            credential_id: method.credential_id,\n            device_info: method.device_info\n          }\n        })\n        availableMfaMethods.value = methods\n        \n        // Set signIn loading to false immediately so MFA modal can show\n        isSigningIn.value = false\n        \n        return authData // Return without storing full auth data\n      }\n      \n      // Store the authentication data if MFA not required\n      setAuthData(authData)\n      \n      return authData\n    } catch (error) {\n      throw error\n    } finally {\n      isSigningIn.value = false\n    }\n  }\n\n  const signUp = async (userData: SignUpData) => {\n    isSigningUp.value = true\n    try {\n      // Integration point: Replace with actual auth SDK call\n      // Example: const result = await authSDK.signUp(userData)\n      \n      throw new Error('Sign up not implemented - please integrate with auth SDK')\n    } finally {\n      isSigningUp.value = false\n    }\n  }\n\n  const signOut = async () => {\n    isSigningOut.value = true\n    try {\n      // Stop token refresh timer\n      stopTokenRefreshTimer()\n      \n      // Clear user and session state\n      currentUser.value = null\n      currentSession.value = null\n      \n      // Clear MFA state\n      mfaRequired.value = false\n      mfaSessionId.value = null\n      availableMfaMethods.value = []\n      \n      // Clear stored tokens\n      if (typeof window !== 'undefined') {\n        localStorage.removeItem('strands_auth_session')\n        localStorage.removeItem('strands_auth_user')\n      }\n    } finally {\n      isSigningOut.value = false\n    }\n  }\n\n  const refreshToken = async () => {\n    if (!currentSession.value?.refreshToken) {\n      return false\n    }\n    \n    \n    isRefreshingToken.value = true\n    try {\n      const response = await fetch(getUrl('refresh'), {\n        method: 'POST',\n        headers: {\n          'Content-Type': 'application/json',\n        },\n        body: JSON.stringify({\n          refresh_token: currentSession.value.refreshToken,\n        }),\n      })\n\n      if (!response.ok) {        \n        if (response.status === 401) {\n          // Refresh token is invalid/expired, sign out user\n          await signOut()\n          return false\n        }\n        throw new Error(`Token refresh failed: ${response.status} ${response.statusText}`)\n      }\n\n      const tokenData = await response.json()\n      \n      // For token refresh, only update tokens - don't change user data\n      const newSession: Session = {\n        accessToken: tokenData.access_token,\n        refreshToken: tokenData.refresh_token,\n        expiresAt: new Date(Date.now() + 5 * 60 * 1000), // 5 minutes from now\n        userId: currentUser.value?.id,\n      }\n      \n      currentSession.value = newSession\n      \n      // Update localStorage with new session\n      if (typeof window !== 'undefined') {\n        localStorage.setItem('strands_auth_session', JSON.stringify(newSession))\n      }\n      \n      // Restart token refresh timer\n      startTokenRefreshTimer()\n      \n      return true\n    } catch (error) {\n      // On refresh failure, sign out the user\n      await signOut()\n      return false\n    }\n  }\n\n  const fetchProfile = async (): Promise<User | null> => {\n    if (!currentSession.value?.accessToken) {\n      throw new Error('No access token available')\n    }\n    \n    isLoadingProfile.value = true\n    try {\n      const response = await fetch(getUrl('profile'), {\n        method: 'GET',\n        headers: {\n          'Content-Type': 'application/json',\n          'Authorization': `Bearer ${currentSession.value.accessToken}`,\n        },\n      })\n\n      if (!response.ok) {\n        if (response.status === 401) {\n          throw new Error('Authentication expired. Please sign in again.')\n        } else {\n          throw new Error(`Failed to fetch profile: ${response.status} ${response.statusText}`)\n        }\n      }\n\n      const userData = await response.json()\n      \n      // Update the current user state\n      currentUser.value = {\n        id: userData.id,\n        email: userData.email,\n        firstName: userData.first_name,\n        lastName: userData.last_name,\n        avatar: userData.avatar_url,\n        mfaEnabled: userData.mfaEnabled || false,\n        emailVerified: userData.email_verified,\n        passwordUpdatedAt: userData.password_updated_at,\n        settings: userData.settings || {},\n        xp: userData.xp || 0,\n        level: userData.level || 1,\n        next_level_xp: userData.next_level_xp || 4,\n        username: userData.username,\n        usernameLastChangedAt: userData.username_last_changed_at,\n        createdAt: userData.created_at,\n        updatedAt: userData.updated_at || new Date().toISOString(),\n      }\n      \n      // Update localStorage\n      if (typeof window !== 'undefined') {\n        localStorage.setItem('strands_auth_user', JSON.stringify(currentUser.value))\n      }\n      \n      return currentUser.value\n    } finally {\n      isLoadingProfile.value = false\n    }\n  }\n\n  const updateProfile = async (profileData: Partial<User>) => {\n    if (!currentSession.value?.accessToken) {\n      throw new Error('No access token available')\n    }\n    \n    isLoadingProfile.value = true\n    try {\n      const response = await fetch(getUrl('profile'), {\n        method: 'POST',\n        headers: {\n          'Content-Type': 'application/json',\n          'Authorization': `Bearer ${currentSession.value.accessToken}`,\n        },\n        body: JSON.stringify({\n          first_name: profileData.firstName,\n          last_name: profileData.lastName,\n        }),\n      })\n\n      if (!response.ok) {\n        if (response.status === 401) {\n          throw new Error('Authentication expired. Please sign in again.')\n        } else {\n          throw new Error(`Profile update failed: ${response.status} ${response.statusText}`)\n        }\n      }\n\n      const updatedUserData = await response.json()\n      \n      // Update the current user state with API response data\n      if (currentUser.value) {\n        currentUser.value = {\n          ...currentUser.value,\n          // Update with API response data, preserving the API field names\n          id: updatedUserData.id,\n          email: updatedUserData.email,\n          firstName: updatedUserData.first_name,\n          lastName: updatedUserData.last_name,\n          emailVerified: updatedUserData.email_verified,\n          avatar: updatedUserData.avatar_url,\n          mfaEnabled: updatedUserData.mfa_enabled,\n          xp: updatedUserData.xp,\n          level: updatedUserData.level,\n          next_level_xp: updatedUserData.next_level_xp,\n          username: updatedUserData.username, // This was missing and causing the bug!\n          usernameLastChangedAt: updatedUserData.username_last_changed_at,\n          createdAt: updatedUserData.created_at,\n          updatedAt: updatedUserData.updated_at,\n          settings: updatedUserData.settings,\n          passwordUpdatedAt: updatedUserData.password_updated_at,\n        }\n        \n        // Update localStorage\n        if (typeof window !== 'undefined') {\n          localStorage.setItem('strands_auth_user', JSON.stringify(currentUser.value))\n        }\n      }\n      \n      return currentUser.value\n    } finally {\n      isLoadingProfile.value = false\n    }\n  }\n\n  const updateUserSettings = async (settings: any) => {\n    if (!currentSession.value?.accessToken) {\n      throw new Error('No access token available')\n    }\n    \n    isLoadingProfile.value = true\n    try {\n      const response = await fetch(getUrl('settings'), {\n        method: 'POST',\n        headers: {\n          'Content-Type': 'application/json',\n          'Authorization': `Bearer ${currentSession.value.accessToken}`,\n        },\n        body: JSON.stringify({\n          settings: settings,\n        }),\n      })\n\n      if (!response.ok) {\n        if (response.status === 401) {\n          throw new Error('Authentication expired. Please sign in again.')\n        } else {\n          throw new Error(`Settings update failed: ${response.status} ${response.statusText}`)\n        }\n      }\n\n      const updatedUserData = await response.json()\n      \n      // Update the current user state\n      if (currentUser.value) {\n        currentUser.value = {\n          ...currentUser.value,\n          settings: updatedUserData.settings,\n          updatedAt: updatedUserData.updated_at || new Date().toISOString(),\n        }\n        \n        // Update localStorage\n        if (typeof window !== 'undefined') {\n          localStorage.setItem('strands_auth_user', JSON.stringify(currentUser.value))\n        }\n      }\n      \n      return currentUser.value\n    } finally {\n      isLoadingProfile.value = false\n    }\n  }\n\n  const changeEmail = async (newEmail: string, password: string) => {\n    if (!currentSession.value?.accessToken) {\n      throw new Error('No access token available')\n    }\n    \n    isLoadingProfile.value = true\n    try {\n      const response = await fetch(getUrl('changeEmail'), {\n        method: 'POST',\n        headers: {\n          'Content-Type': 'application/json',\n          'Authorization': `Bearer ${currentSession.value.accessToken}`,\n        },\n        body: JSON.stringify({\n          new_email: newEmail,\n          password: password,\n        }),\n      })\n\n      if (!response.ok) {\n        if (response.status === 401) {\n          throw new Error('Authentication expired. Please sign in again.')\n        } else {\n          const errorData = await response.json().catch(() => ({}))\n          throw new Error(errorData.message || `Email change failed: ${response.status} ${response.statusText}`)\n        }\n      }\n\n      const result = await response.json()\n      \n      // Update the current user state with new email\n      if (currentUser.value) {\n        currentUser.value = {\n          ...currentUser.value,\n          email: newEmail,\n          emailVerified: false, // Email needs to be verified again\n          updatedAt: new Date().toISOString(),\n        }\n        \n        // Update localStorage\n        if (typeof window !== 'undefined') {\n          localStorage.setItem('strands_auth_user', JSON.stringify(currentUser.value))\n        }\n      }\n      \n      return result\n    } finally {\n      isLoadingProfile.value = false\n    }\n  }\n\n  const verifyMfa = async (deviceId: string, code: string, isBackupCode = false) => {\n    if (!mfaSessionId.value) {\n      throw new Error('No MFA session available')\n    }\n\n    isVerifyingMfa.value = true\n    try {\n      const endpoint = isBackupCode ? getUrl('mfaBackupCodeVerify') : getUrl('mfaSigninVerify')\n      const body = isBackupCode \n        ? { mfa_session_id: mfaSessionId.value, backup_code: code }\n        : { mfa_session_id: mfaSessionId.value, device_id: deviceId, code }\n\n      const response = await fetch(endpoint, {\n        method: 'POST',\n        headers: { 'Content-Type': 'application/json' },\n        body: JSON.stringify(body),\n      })\n\n      if (!response.ok) {\n        const errorText = await response.text()\n        let errorMessage = 'MFA verification failed'\n        \n        try {\n          const errorData = JSON.parse(errorText)\n          errorMessage = errorData.message || errorData.error || errorText\n        } catch {\n          // If parsing fails, use the raw text but clean it up\n          errorMessage = errorText || 'MFA verification failed'\n        }\n        \n        throw new Error(errorMessage)\n      }\n\n      const authData: AuthResponse = await response.json()\n      \n      // Clear MFA state\n      mfaRequired.value = false\n      mfaSessionId.value = null\n      availableMfaMethods.value = []\n      \n      // Store the authentication data\n      setAuthData(authData)\n      \n      return authData\n    } finally {\n      isVerifyingMfa.value = false\n    }\n  }\n\n  const sendMfaEmailCode = async (deviceId: string) => {\n    if (!mfaSessionId.value) {\n      throw new Error('No MFA session available')\n    }\n\n    isSendingMfaEmail.value = true\n    try {\n      const response = await fetch(getUrl('mfaSigninSendEmail'), {\n        method: 'POST',\n        headers: { 'Content-Type': 'application/json' },\n        body: JSON.stringify({\n          mfa_session_id: mfaSessionId.value,\n          device_id: deviceId,\n        }),\n      })\n\n      if (!response.ok) {\n        const errorText = await response.text()\n        let errorMessage = 'Failed to send MFA email code'\n        \n        try {\n          const errorData = JSON.parse(errorText)\n          errorMessage = errorData.message || errorData.error || errorText\n        } catch {\n          // If parsing fails, use the raw text but clean it up\n          errorMessage = errorText || 'Failed to send MFA email code'\n        }\n        \n        throw new Error(errorMessage)\n      }\n\n      const result = await response.json()\n      return result\n    } finally {\n      isSendingMfaEmail.value = false\n    }\n  }\n\n  const getMfaWebAuthnChallenge = async (deviceId: string) => {\n    if (!mfaSessionId.value) {\n      throw new Error('No MFA session available')\n    }\n    \n    const response = await fetch(getUrl('mfaWebAuthnChallenge'), {\n      method: 'POST',\n      headers: { 'Content-Type': 'application/json' },\n      body: JSON.stringify({\n        mfa_session_id: mfaSessionId.value,\n        device_id: deviceId\n      }),\n    })\n\n    if (!response.ok) {\n      const errorText = await response.text()\n      let errorMessage = 'Failed to get WebAuthn challenge'\n      \n      try {\n        const errorData = JSON.parse(errorText)\n        errorMessage = errorData.message || errorData.error || errorText\n      } catch {\n        errorMessage = errorText || errorMessage\n      }\n      \n      throw new Error(errorMessage)\n    }\n\n    return response.json()\n  }\n\n  const setAuthData = (authResponse: AuthResponse) => {\n    try {\n      // Handle user data (only for sign-in/sign-up, not token refresh)\n      if (authResponse.user) {\n        currentUser.value = authResponse.user\n      }\n      \n      // Create session object\n      const session: Session = {\n        accessToken: authResponse.access_token,\n        refreshToken: authResponse.refresh_token,\n        expiresAt: new Date(Date.now() + 5 * 60 * 1000), // 5 minutes from now (matching API token expiry)\n        userId: currentUser.value?.id || authResponse.user?.id,\n      }\n      \n      currentSession.value = session\n      \n      // Store in localStorage for persistence\n      if (typeof window !== 'undefined') {\n        localStorage.setItem('strands_auth_session', JSON.stringify(session))\n        if (currentUser.value) {\n          localStorage.setItem('strands_auth_user', JSON.stringify(currentUser.value))\n        }\n      }\n      \n      // Start automatic token refresh\n      startTokenRefreshTimer()\n    } catch (error) {\n      console.error('Error setting auth data:', error)\n      // Silently handle auth data storage errors\n    }\n  }\n\n  // Token refresh timer management\n  const startTokenRefreshTimer = () => {\n    // Clear existing timer\n    if (refreshTimer) {\n      clearTimeout(refreshTimer)\n    }\n    \n    if (!currentSession.value) return\n    \n    // Calculate time until token expires (refresh 1 minute before expiry)\n    const now = new Date()\n    const expiresAt = currentSession.value.expiresAt\n    const timeUntilRefresh = expiresAt.getTime() - now.getTime() - (1 * 60 * 1000) // 1 minute before expiry\n    \n    // If token is already expired or expires very soon, refresh immediately\n    if (timeUntilRefresh <= 0) {\n      refreshToken()\n      return\n    }\n    \n    // Set timer to refresh token\n    refreshTimer = setTimeout(async () => {\n      const success = await refreshToken()\n      \n      if (success) {\n        // Schedule next refresh\n        startTokenRefreshTimer()\n      }\n    }, timeUntilRefresh)\n  }\n\n  const stopTokenRefreshTimer = () => {\n    if (refreshTimer) {\n      clearTimeout(refreshTimer)\n      refreshTimer = null\n    }\n  }\n\n  const initialize = async () => {\n    if (isInitialized.value) return\n    \n    isInitializing.value = true\n    try {\n      // Check for existing session/token in localStorage\n      if (typeof window !== 'undefined') {\n        const storedSession = localStorage.getItem('strands_auth_session')\n        const storedUser = localStorage.getItem('strands_auth_user')\n        \n        if (storedSession && storedUser) {\n          try {\n            const session = JSON.parse(storedSession) as Session\n            const user = JSON.parse(storedUser) as User\n            \n            // Convert expiresAt back to Date object\n            session.expiresAt = new Date(session.expiresAt)\n            \n            // Check if session is still valid\n            if (session.expiresAt > new Date()) {\n              currentSession.value = session\n              currentUser.value = user\n              \n              // Start token refresh timer for restored session\n              startTokenRefreshTimer()\n            } else {\n              // Session expired, clear storage\n              localStorage.removeItem('strands_auth_session')\n              localStorage.removeItem('strands_auth_user')\n            }\n          } catch (error) {\n            // Clear corrupted data\n            localStorage.removeItem('strands_auth_session')\n            localStorage.removeItem('strands_auth_user')\n          }\n        }\n      }\n      \n      isInitialized.value = true\n      \n      // Add a small delay to ensure state is fully settled before hiding loading\n      await new Promise(resolve => setTimeout(resolve, 50))\n    } catch (error) {\n      // Silently handle initialization errors\n    } finally {\n      isInitializing.value = false\n    }\n  }\n\n  const changeUsername = async (newUsername: string) => {\n    if (!currentSession.value?.accessToken) {\n      throw new Error('No access token available')\n    }\n    \n    isLoadingProfile.value = true\n    try {\n      const response = await fetch(getUrl('changeUsername'), {\n        method: 'POST',\n        headers: {\n          'Content-Type': 'application/json',\n          'Authorization': `Bearer ${currentSession.value.accessToken}`,\n        },\n        body: JSON.stringify({\n          username: newUsername,\n        }),\n      })\n\n      if (!response.ok) {\n        const errorData = await response.json().catch(() => ({}))\n        if (response.status === 409) {\n          throw new Error('Username is already taken')\n        } else if (errorData.cooldown_end) {\n          throw new Error(`You can only change your username once every 30 days. You can change it again on ${new Date(errorData.cooldown_end).toLocaleDateString()}`)\n        }\n        throw new Error(errorData.message || `Username change failed: ${response.status} ${response.statusText}`)\n      }\n\n      const result = await response.json()\n      \n      // Update the current user state with new username\n      if (currentUser.value) {\n        currentUser.value = {\n          ...currentUser.value,\n          username: newUsername,\n          usernameLastChangedAt: new Date().toISOString(),\n          updatedAt: new Date().toISOString(),\n        }\n        \n        // Update localStorage\n        if (typeof window !== 'undefined') {\n          localStorage.setItem('strands_auth_user', JSON.stringify(currentUser.value))\n        }\n      }\n      \n      return result\n    } finally {\n      isLoadingProfile.value = false\n    }\n  }\n\n  const getUsernameCooldown = async () => {\n    if (!currentSession.value?.accessToken) {\n      throw new Error('No access token available')\n    }\n    \n    const response = await fetch(getUrl('usernameCooldown'), {\n      method: 'GET',\n      headers: {\n        'Authorization': `Bearer ${currentSession.value.accessToken}`,\n      },\n    })\n\n    if (!response.ok) {\n      throw new Error(`Failed to get username cooldown: ${response.status} ${response.statusText}`)\n    }\n\n    return response.json()\n  }\n\n  const checkUsernameAvailability = async (username: string) => {\n    // Replace {username} in the URL\n    const url = getUrl('checkUsernameAvailability').replace('{username}', encodeURIComponent(username))\n    \n    const response = await fetch(url, {\n      method: 'GET',\n      headers: {\n        'Content-Type': 'application/json',\n      },\n    })\n\n    if (!response.ok) {\n      throw new Error(`Failed to check username availability: ${response.status} ${response.statusText}`)\n    }\n\n    return response.json()\n  }\n\n  // Session management functions\n  const getUserSessions = async () => {\n    const response = await fetch(getUrl('sessions'), {\n      method: 'GET',\n      headers: getAuthHeaders(),\n    })\n\n    if (!response.ok) {\n      throw new Error(`Failed to get user sessions: ${response.status} ${response.statusText}`)\n    }\n\n    return response.json()\n  }\n\n  const getSessionStats = async () => {\n    const response = await fetch(getUrl('sessionsStats'), {\n      method: 'GET',\n      headers: getAuthHeaders(),\n    })\n\n    if (!response.ok) {\n      throw new Error(`Failed to get session stats: ${response.status} ${response.statusText}`)\n    }\n\n    return response.json()\n  }\n\n  const revokeSession = async (sessionId: string) => {\n    const url = getUrl('sessionRevoke').replace('{session_id}', encodeURIComponent(sessionId))\n    \n    const response = await fetch(url, {\n      method: 'POST',\n      headers: getAuthHeaders(),\n    })\n\n    if (!response.ok) {\n      throw new Error(`Failed to revoke session: ${response.status} ${response.statusText}`)\n    }\n\n    return response.status === 200\n  }\n\n  const revokeAllOtherSessions = async () => {\n    const response = await fetch(getUrl('sessionsRevokeAll'), {\n      method: 'POST',\n      headers: getAuthHeaders(),\n    })\n\n    if (!response.ok) {\n      throw new Error(`Failed to revoke all other sessions: ${response.status} ${response.statusText}`)\n    }\n\n    return response.status === 200\n  }\n\n  // Auto-initialize on first use\n  if (!isInitialized.value) {\n    initialize()\n  }\n\n  return {\n    // State\n    user: computed(() => currentUser.value),\n    currentUser: computed(() => currentUser.value),\n    currentSession: computed(() => currentSession.value),\n    isAuthenticated,\n    isLoading: computed(() => isLoading.value || !isInitialized.value),\n    loading: computed(() => loading.value),\n    loadingMessage,\n    \n    // Specific loading states\n    isInitializing,\n    isSigningIn,\n    isSigningUp,\n    isSigningOut,\n    isRefreshingToken,\n    isSendingMfaEmail,\n    isVerifyingMfa,\n    \n    // MFA State\n    mfaRequired: computed(() => mfaRequired.value),\n    mfaSessionId: computed(() => mfaSessionId.value),\n    availableMfaMethods: computed(() => availableMfaMethods.value),\n\n  // Methods\n  signIn,\n  signUp,\n  signOut,\n  refreshToken,\n  fetchProfile,\n  updateProfile,\n  updateUserSettings,\n  changeEmail,\n  changeUsername,\n  getUsernameCooldown,\n  checkUsernameAvailability,\n  // Session management\n  getUserSessions,\n  getSessionStats,\n  revokeSession,\n  revokeAllOtherSessions,\n  initialize,\n  setAuthData,\n  verifyMfa,\n  sendMfaEmailCode,\n  getMfaWebAuthnChallenge,\n  registerHardwareKey,\n  completeHardwareKeyRegistration,\n    \n    // Token management\n    startTokenRefreshTimer,\n    stopTokenRefreshTimer,\n    \n    // Force re-initialization (useful for testing or navigation)\n    forceReInit: () => {\n      isInitialized.value = false\n      isInitializing.value = true\n      initialize()\n    },\n  }\n}"],"names":[],"mappings":";;AAIA,MAAM,EAAE,OAAA,IAAW,iBAAA;AAEnB,MAAM,cAAc,IAAiB,IAAI;AACzC,MAAM,iBAAiB,IAAoB,IAAI;AAG/C,MAAM,iBAAiB,IAAI,IAAI;AAC/B,MAAM,cAAc,IAAI,KAAK;AAC7B,MAAM,cAAc,IAAI,KAAK;AAC7B,MAAM,eAAe,IAAI,KAAK;AAC9B,MAAM,oBAAoB,IAAI,KAAK;AACnC,MAAM,oBAAoB,IAAI,KAAK;AACnC,MAAM,iBAAiB,IAAI,KAAK;AAChC,MAAM,mBAAmB,IAAI,KAAK;AAGlC,MAAM,UAAU,SAAS,MAAM,YAAY,SAAS,YAAY,SAAS,aAAa,SAAS,kBAAkB,SAAS,kBAAkB,SAAS,eAAe,SAAS,iBAAiB,KAAK;AACnM,MAAM,YAAY,SAAS,MAAM,eAAe,SAAS,QAAQ,KAAK;AAGtE,MAAM,iBAAiB,SAAS,MAAM;AACpC,MAAI,eAAe,MAAO,QAAO;AACjC,MAAI,YAAY,MAAO,QAAO;AAC9B,MAAI,YAAY,MAAO,QAAO;AAC9B,MAAI,aAAa,MAAO,QAAO;AAC/B,MAAI,kBAAkB,MAAO,QAAO;AACpC,MAAI,kBAAkB,MAAO,QAAO;AACpC,MAAI,eAAe,MAAO,QAAO;AACjC,SAAO;AACT,CAAC;AAED,MAAM,gBAAgB,IAAI,KAAK;AAG/B,MAAM,cAAc,IAAI,KAAK;AAC7B,MAAM,eAAe,IAAmB,IAAI;AAC5C,MAAM,sBAAsB,IAAiB,EAAE;AAG/C,IAAI,eAAsC;AAEnC,SAAS,iBAAiB;AAE/B,QAAM,iBAAiB,MAAM;AAC3B,QAAI,CAAC,eAAe,OAAO,aAAa;AACtC,YAAM,IAAI,MAAM,2BAA2B;AAAA,IAC7C;AAEA,UAAM,UAAkC;AAAA,MACtC,iBAAiB,UAAU,eAAe,MAAM,WAAW;AAAA,IAAA;AAI7D,QAAI,eAAe,OAAO,cAAc;AACtC,cAAQ,iBAAiB,IAAI,eAAe,MAAM;AAAA,IACpD;AAEA,WAAO;AAAA,EACT;AAKA,QAAM,kCAAkC,OAAO,UAAkB,YAAiB,gBAAwB;AACxG,QAAI,CAAC,eAAe,OAAO,aAAa;AACtC,YAAM,IAAI,MAAM,2BAA2B;AAAA,IAC7C;AAEA,UAAM,WAAW,MAAM,MAAM,OAAO,iCAAiC,GAAG;AAAA,MACtE,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,iBAAiB,UAAU,eAAe,MAAM,WAAW;AAAA,MAAA;AAAA,MAE7D,MAAM,KAAK,UAAU;AAAA,QACnB,WAAW;AAAA,QACX;AAAA,MAAA,CACD;AAAA,IAAA,CACF;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,YAAY,MAAM,SAAS,KAAA;AACjC,UAAI,eAAe;AAEnB,UAAI;AACF,cAAM,YAAY,KAAK,MAAM,SAAS;AACtC,uBAAe,UAAU,WAAW,UAAU,SAAS;AAAA,MACzD,QAAQ;AACN,uBAAe,aAAa;AAAA,MAC9B;AAEA,YAAM,IAAI,MAAM,YAAY;AAAA,IAC9B;AACA,WAAO,SAAS,KAAA;AAAA,EAClB;AAKA,QAAM,sBAAsB,OAAO,YAAoB,aAAqB,aAAqC,eAAe;AAC9H,QAAI,CAAC,eAAe,OAAO,aAAa;AACtC,YAAM,IAAI,MAAM,2BAA2B;AAAA,IAC7C;AAEA,UAAM,WAAW,MAAM,MAAM,OAAO,8BAA8B,GAAG;AAAA,MACnE,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,iBAAiB,UAAU,eAAe,MAAM,WAAW;AAAA,MAAA;AAAA,MAE7D,MAAM,KAAK,UAAU;AAAA,QACnB,aAAa;AAAA,QACb,aAAa;AAAA,MAAA,CACd;AAAA,IAAA,CACF;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,YAAY,MAAM,SAAS,KAAA;AACjC,UAAI,eAAe;AAEnB,UAAI;AACF,cAAM,YAAY,KAAK,MAAM,SAAS;AACtC,uBAAe,UAAU,WAAW,UAAU,SAAS;AAAA,MACzD,QAAQ;AACN,uBAAe,aAAa;AAAA,MAC9B;AAEA,YAAM,IAAI,MAAM,YAAY;AAAA,IAC9B;AACA,WAAO,SAAS,KAAA;AAAA,EAClB;AAEA,QAAM,kBAAkB,SAAS,MAAM,YAAY,UAAU,IAAI;AAE/D,QAAM,SAAS,OAAO,gBAAmC;AACzD,gBAAY,QAAQ;AACpB,QAAI;AAEF,kBAAY,QAAQ;AACpB,mBAAa,QAAQ;AACrB,0BAAoB,QAAQ,CAAA;AAG5B,YAAM,WAAW,MAAM,MAAM,OAAO,QAAQ,GAAG;AAAA,QAC7C,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,gBAAgB;AAAA,QAAA;AAAA,QAElB,MAAM,KAAK,UAAU,WAAW;AAAA,MAAA,CACjC;AAED,UAAI,CAAC,SAAS,IAAI;AAChB,YAAI,SAAS,WAAW,KAAK;AAC3B,gBAAM,IAAI,MAAM,2BAA2B;AAAA,QAC7C,WAAW,SAAS,WAAW,KAAK;AAClC,gBAAM,IAAI,MAAM,oDAAoD;AAAA,QACtE,OAAO;AACL,gBAAM,IAAI,MAAM,mBAAmB,SAAS,MAAM,IAAI,SAAS,UAAU,EAAE;AAAA,QAC7E;AAAA,MACF;AAEA,YAAM,WAAyB,MAAM,SAAS,KAAA;AAG9C,UAAI,SAAS,cAAc;AACzB,oBAAY,QAAQ;AACpB,qBAAa,QAAQ,SAAS,kBAAkB;AAGhD,cAAM,WAAW,SAAS,yBAAyB,CAAA,GAAI,IAAI,CAAC,WAAgB;AAE1E,cAAI,eAAe,GAAG,OAAO,YAAY,OAAO,CAAC,EAAE,YAAA,IAAgB,OAAO,YAAY,MAAM,CAAC,CAAC;AAE9F,cAAI,OAAO,gBAAgB,YAAY;AAErC,2BAAe,OAAO,eAAe;AAAA,UACvC,WAAW,OAAO,gBAAgB,QAAQ;AACxC,2BAAe,OAAO,eAAe;AAAA,UACvC,WAAW,OAAO,gBAAgB,SAAS;AACzC,2BAAe,OAAO,eAAe;AAAA,UACvC;AAEA,iBAAO;AAAA,YACL,IAAI,OAAO;AAAA,YACX,aAAa,OAAO;AAAA,YACpB,aAAa,OAAO,eAAe;AAAA,YACnC,WAAW;AAAA,YACX,aAAY,oBAAI,KAAA,GAAO,YAAA;AAAA,YACvB,cAAc,OAAO;AAAA;AAAA,YAErB,eAAe,OAAO;AAAA,YACtB,aAAa,OAAO;AAAA,UAAA;AAAA,QAExB,CAAC;AACD,4BAAoB,QAAQ;AAG5B,oBAAY,QAAQ;AAEpB,eAAO;AAAA,MACT;AAGA,kBAAY,QAAQ;AAEpB,aAAO;AAAA,IACT,SAAS,OAAO;AACd,YAAM;AAAA,IACR,UAAA;AACE,kBAAY,QAAQ;AAAA,IACtB;AAAA,EACF;AAEA,QAAM,SAAS,OAAO,aAAyB;AAC7C,gBAAY,QAAQ;AACpB,QAAI;AAIF,YAAM,IAAI,MAAM,0DAA0D;AAAA,IAC5E,UAAA;AACE,kBAAY,QAAQ;AAAA,IACtB;AAAA,EACF;AAEA,QAAM,UAAU,YAAY;AAC1B,iBAAa,QAAQ;AACrB,QAAI;AAEF,4BAAA;AAGA,kBAAY,QAAQ;AACpB,qBAAe,QAAQ;AAGvB,kBAAY,QAAQ;AACpB,mBAAa,QAAQ;AACrB,0BAAoB,QAAQ,CAAA;AAG5B,UAAI,OAAO,WAAW,aAAa;AACjC,qBAAa,WAAW,sBAAsB;AAC9C,qBAAa,WAAW,mBAAmB;AAAA,MAC7C;AAAA,IACF,UAAA;AACE,mBAAa,QAAQ;AAAA,IACvB;AAAA,EACF;AAEA,QAAM,eAAe,YAAY;AAC/B,QAAI,CAAC,eAAe,OAAO,cAAc;AACvC,aAAO;AAAA,IACT;AAGA,sBAAkB,QAAQ;AAC1B,QAAI;AACF,YAAM,WAAW,MAAM,MAAM,OAAO,SAAS,GAAG;AAAA,QAC9C,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,gBAAgB;AAAA,QAAA;AAAA,QAElB,MAAM,KAAK,UAAU;AAAA,UACnB,eAAe,eAAe,MAAM;AAAA,QAAA,CACrC;AAAA,MAAA,CACF;AAED,UAAI,CAAC,SAAS,IAAI;AAChB,YAAI,SAAS,WAAW,KAAK;AAE3B,gBAAM,QAAA;AACN,iBAAO;AAAA,QACT;AACA,cAAM,IAAI,MAAM,yBAAyB,SAAS,MAAM,IAAI,SAAS,UAAU,EAAE;AAAA,MACnF;AAEA,YAAM,YAAY,MAAM,SAAS,KAAA;AAGjC,YAAM,aAAsB;AAAA,QAC1B,aAAa,UAAU;AAAA,QACvB,cAAc,UAAU;AAAA,QACxB,WAAW,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,GAAI;AAAA;AAAA,QAC9C,QAAQ,YAAY,OAAO;AAAA,MAAA;AAG7B,qBAAe,QAAQ;AAGvB,UAAI,OAAO,WAAW,aAAa;AACjC,qBAAa,QAAQ,wBAAwB,KAAK,UAAU,UAAU,CAAC;AAAA,MACzE;AAGA,6BAAA;AAEA,aAAO;AAAA,IACT,SAAS,OAAO;AAEd,YAAM,QAAA;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAEA,QAAM,eAAe,YAAkC;AACrD,QAAI,CAAC,eAAe,OAAO,aAAa;AACtC,YAAM,IAAI,MAAM,2BAA2B;AAAA,IAC7C;AAEA,qBAAiB,QAAQ;AACzB,QAAI;AACF,YAAM,WAAW,MAAM,MAAM,OAAO,SAAS,GAAG;AAAA,QAC9C,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,gBAAgB;AAAA,UAChB,iBAAiB,UAAU,eAAe,MAAM,WAAW;AAAA,QAAA;AAAA,MAC7D,CACD;AAED,UAAI,CAAC,SAAS,IAAI;AAChB,YAAI,SAAS,WAAW,KAAK;AAC3B,gBAAM,IAAI,MAAM,+CAA+C;AAAA,QACjE,OAAO;AACL,gBAAM,IAAI,MAAM,4BAA4B,SAAS,MAAM,IAAI,SAAS,UAAU,EAAE;AAAA,QACtF;AAAA,MACF;AAEA,YAAM,WAAW,MAAM,SAAS,KAAA;AAGhC,kBAAY,QAAQ;AAAA,QAClB,IAAI,SAAS;AAAA,QACb,OAAO,SAAS;AAAA,QAChB,WAAW,SAAS;AAAA,QACpB,UAAU,SAAS;AAAA,QACnB,QAAQ,SAAS;AAAA,QACjB,YAAY,SAAS,cAAc;AAAA,QACnC,eAAe,SAAS;AAAA,QACxB,mBAAmB,SAAS;AAAA,QAC5B,UAAU,SAAS,YAAY,CAAA;AAAA,QAC/B,IAAI,SAAS,MAAM;AAAA,QACnB,OAAO,SAAS,SAAS;AAAA,QACzB,eAAe,SAAS,iBAAiB;AAAA,QACzC,UAAU,SAAS;AAAA,QACnB,uBAAuB,SAAS;AAAA,QAChC,WAAW,SAAS;AAAA,QACpB,WAAW,SAAS,eAAc,oBAAI,KAAA,GAAO,YAAA;AAAA,MAAY;AAI3D,UAAI,OAAO,WAAW,aAAa;AACjC,qBAAa,QAAQ,qBAAqB,KAAK,UAAU,YAAY,KAAK,CAAC;AAAA,MAC7E;AAEA,aAAO,YAAY;AAAA,IACrB,UAAA;AACE,uBAAiB,QAAQ;AAAA,IAC3B;AAAA,EACF;AAEA,QAAM,gBAAgB,OAAO,gBAA+B;AAC1D,QAAI,CAAC,eAAe,OAAO,aAAa;AACtC,YAAM,IAAI,MAAM,2BAA2B;AAAA,IAC7C;AAEA,qBAAiB,QAAQ;AACzB,QAAI;AACF,YAAM,WAAW,MAAM,MAAM,OAAO,SAAS,GAAG;AAAA,QAC9C,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,gBAAgB;AAAA,UAChB,iBAAiB,UAAU,eAAe,MAAM,WAAW;AAAA,QAAA;AAAA,QAE7D,MAAM,KAAK,UAAU;AAAA,UACnB,YAAY,YAAY;AAAA,UACxB,WAAW,YAAY;AAAA,QAAA,CACxB;AAAA,MAAA,CACF;AAED,UAAI,CAAC,SAAS,IAAI;AAChB,YAAI,SAAS,WAAW,KAAK;AAC3B,gBAAM,IAAI,MAAM,+CAA+C;AAAA,QACjE,OAAO;AACL,gBAAM,IAAI,MAAM,0BAA0B,SAAS,MAAM,IAAI,SAAS,UAAU,EAAE;AAAA,QACpF;AAAA,MACF;AAEA,YAAM,kBAAkB,MAAM,SAAS,KAAA;AAGvC,UAAI,YAAY,OAAO;AACrB,oBAAY,QAAQ;AAAA,UAClB,GAAG,YAAY;AAAA;AAAA,UAEf,IAAI,gBAAgB;AAAA,UACpB,OAAO,gBAAgB;AAAA,UACvB,WAAW,gBAAgB;AAAA,UAC3B,UAAU,gBAAgB;AAAA,UAC1B,eAAe,gBAAgB;AAAA,UAC/B,QAAQ,gBAAgB;AAAA,UACxB,YAAY,gBAAgB;AAAA,UAC5B,IAAI,gBAAgB;AAAA,UACpB,OAAO,gBAAgB;AAAA,UACvB,eAAe,gBAAgB;AAAA,UAC/B,UAAU,gBAAgB;AAAA;AAAA,UAC1B,uBAAuB,gBAAgB;AAAA,UACvC,WAAW,gBAAgB;AAAA,UAC3B,WAAW,gBAAgB;AAAA,UAC3B,UAAU,gBAAgB;AAAA,UAC1B,mBAAmB,gBAAgB;AAAA,QAAA;AAIrC,YAAI,OAAO,WAAW,aAAa;AACjC,uBAAa,QAAQ,qBAAqB,KAAK,UAAU,YAAY,KAAK,CAAC;AAAA,QAC7E;AAAA,MACF;AAEA,aAAO,YAAY;AAAA,IACrB,UAAA;AACE,uBAAiB,QAAQ;AAAA,IAC3B;AAAA,EACF;AAEA,QAAM,qBAAqB,OAAO,aAAkB;AAClD,QAAI,CAAC,eAAe,OAAO,aAAa;AACtC,YAAM,IAAI,MAAM,2BAA2B;AAAA,IAC7C;AAEA,qBAAiB,QAAQ;AACzB,QAAI;AACF,YAAM,WAAW,MAAM,MAAM,OAAO,UAAU,GAAG;AAAA,QAC/C,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,gBAAgB;AAAA,UAChB,iBAAiB,UAAU,eAAe,MAAM,WAAW;AAAA,QAAA;AAAA,QAE7D,MAAM,KAAK,UAAU;AAAA,UACnB;AAAA,QAAA,CACD;AAAA,MAAA,CACF;AAED,UAAI,CAAC,SAAS,IAAI;AAChB,YAAI,SAAS,WAAW,KAAK;AAC3B,gBAAM,IAAI,MAAM,+CAA+C;AAAA,QACjE,OAAO;AACL,gBAAM,IAAI,MAAM,2BAA2B,SAAS,MAAM,IAAI,SAAS,UAAU,EAAE;AAAA,QACrF;AAAA,MACF;AAEA,YAAM,kBAAkB,MAAM,SAAS,KAAA;AAGvC,UAAI,YAAY,OAAO;AACrB,oBAAY,QAAQ;AAAA,UAClB,GAAG,YAAY;AAAA,UACf,UAAU,gBAAgB;AAAA,UAC1B,WAAW,gBAAgB,eAAc,oBAAI,KAAA,GAAO,YAAA;AAAA,QAAY;AAIlE,YAAI,OAAO,WAAW,aAAa;AACjC,uBAAa,QAAQ,qBAAqB,KAAK,UAAU,YAAY,KAAK,CAAC;AAAA,QAC7E;AAAA,MACF;AAEA,aAAO,YAAY;AAAA,IACrB,UAAA;AACE,uBAAiB,QAAQ;AAAA,IAC3B;AAAA,EACF;AAEA,QAAM,cAAc,OAAO,UAAkB,aAAqB;AAChE,QAAI,CAAC,eAAe,OAAO,aAAa;AACtC,YAAM,IAAI,MAAM,2BAA2B;AAAA,IAC7C;AAEA,qBAAiB,QAAQ;AACzB,QAAI;AACF,YAAM,WAAW,MAAM,MAAM,OAAO,aAAa,GAAG;AAAA,QAClD,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,gBAAgB;AAAA,UAChB,iBAAiB,UAAU,eAAe,MAAM,WAAW;AAAA,QAAA;AAAA,QAE7D,MAAM,KAAK,UAAU;AAAA,UACnB,WAAW;AAAA,UACX;AAAA,QAAA,CACD;AAAA,MAAA,CACF;AAED,UAAI,CAAC,SAAS,IAAI;AAChB,YAAI,SAAS,WAAW,KAAK;AAC3B,gBAAM,IAAI,MAAM,+CAA+C;AAAA,QACjE,OAAO;AACL,gBAAM,YAAY,MAAM,SAAS,KAAA,EAAO,MAAM,OAAO,CAAA,EAAG;AACxD,gBAAM,IAAI,MAAM,UAAU,WAAW,wBAAwB,SAAS,MAAM,IAAI,SAAS,UAAU,EAAE;AAAA,QACvG;AAAA,MACF;AAEA,YAAM,SAAS,MAAM,SAAS,KAAA;AAG9B,UAAI,YAAY,OAAO;AACrB,oBAAY,QAAQ;AAAA,UAClB,GAAG,YAAY;AAAA,UACf,OAAO;AAAA,UACP,eAAe;AAAA;AAAA,UACf,YAAW,oBAAI,KAAA,GAAO,YAAA;AAAA,QAAY;AAIpC,YAAI,OAAO,WAAW,aAAa;AACjC,uBAAa,QAAQ,qBAAqB,KAAK,UAAU,YAAY,KAAK,CAAC;AAAA,QAC7E;AAAA,MACF;AAEA,aAAO;AAAA,IACT,UAAA;AACE,uBAAiB,QAAQ;AAAA,IAC3B;AAAA,EACF;AAEA,QAAM,YAAY,OAAO,UAAkB,MAAc,eAAe,UAAU;AAChF,QAAI,CAAC,aAAa,OAAO;AACvB,YAAM,IAAI,MAAM,0BAA0B;AAAA,IAC5C;AAEA,mBAAe,QAAQ;AACvB,QAAI;AACF,YAAM,WAAW,eAAe,OAAO,qBAAqB,IAAI,OAAO,iBAAiB;AACxF,YAAM,OAAO,eACT,EAAE,gBAAgB,aAAa,OAAO,aAAa,KAAA,IACnD,EAAE,gBAAgB,aAAa,OAAO,WAAW,UAAU,KAAA;AAE/D,YAAM,WAAW,MAAM,MAAM,UAAU;AAAA,QACrC,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAA;AAAA,QAC3B,MAAM,KAAK,UAAU,IAAI;AAAA,MAAA,CAC1B;AAED,UAAI,CAAC,SAAS,IAAI;AAChB,cAAM,YAAY,MAAM,SAAS,KAAA;AACjC,YAAI,eAAe;AAEnB,YAAI;AACF,gBAAM,YAAY,KAAK,MAAM,SAAS;AACtC,yBAAe,UAAU,WAAW,UAAU,SAAS;AAAA,QACzD,QAAQ;AAEN,yBAAe,aAAa;AAAA,QAC9B;AAEA,cAAM,IAAI,MAAM,YAAY;AAAA,MAC9B;AAEA,YAAM,WAAyB,MAAM,SAAS,KAAA;AAG9C,kBAAY,QAAQ;AACpB,mBAAa,QAAQ;AACrB,0BAAoB,QAAQ,CAAA;AAG5B,kBAAY,QAAQ;AAEpB,aAAO;AAAA,IACT,UAAA;AACE,qBAAe,QAAQ;AAAA,IACzB;AAAA,EACF;AAEA,QAAM,mBAAmB,OAAO,aAAqB;AACnD,QAAI,CAAC,aAAa,OAAO;AACvB,YAAM,IAAI,MAAM,0BAA0B;AAAA,IAC5C;AAEA,sBAAkB,QAAQ;AAC1B,QAAI;AACF,YAAM,WAAW,MAAM,MAAM,OAAO,oBAAoB,GAAG;AAAA,QACzD,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAA;AAAA,QAC3B,MAAM,KAAK,UAAU;AAAA,UACnB,gBAAgB,aAAa;AAAA,UAC7B,WAAW;AAAA,QAAA,CACZ;AAAA,MAAA,CACF;AAED,UAAI,CAAC,SAAS,IAAI;AAChB,cAAM,YAAY,MAAM,SAAS,KAAA;AACjC,YAAI,eAAe;AAEnB,YAAI;AACF,gBAAM,YAAY,KAAK,MAAM,SAAS;AACtC,yBAAe,UAAU,WAAW,UAAU,SAAS;AAAA,QACzD,QAAQ;AAEN,yBAAe,aAAa;AAAA,QAC9B;AAEA,cAAM,IAAI,MAAM,YAAY;AAAA,MAC9B;AAEA,YAAM,SAAS,MAAM,SAAS,KAAA;AAC9B,aAAO;AAAA,IACT,UAAA;AACE,wBAAkB,QAAQ;AAAA,IAC5B;AAAA,EACF;AAEA,QAAM,0BAA0B,OAAO,aAAqB;AAC1D,QAAI,CAAC,aAAa,OAAO;AACvB,YAAM,IAAI,MAAM,0BAA0B;AAAA,IAC5C;AAEA,UAAM,WAAW,MAAM,MAAM,OAAO,sBAAsB,GAAG;AAAA,MAC3D,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,mBAAA;AAAA,MAC3B,MAAM,KAAK,UAAU;AAAA,QACnB,gBAAgB,aAAa;AAAA,QAC7B,WAAW;AAAA,MAAA,CACZ;AAAA,IAAA,CACF;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,YAAY,MAAM,SAAS,KAAA;AACjC,UAAI,eAAe;AAEnB,UAAI;AACF,cAAM,YAAY,KAAK,MAAM,SAAS;AACtC,uBAAe,UAAU,WAAW,UAAU,SAAS;AAAA,MACzD,QAAQ;AACN,uBAAe,aAAa;AAAA,MAC9B;AAEA,YAAM,IAAI,MAAM,YAAY;AAAA,IAC9B;AAEA,WAAO,SAAS,KAAA;AAAA,EAClB;AAEA,QAAM,cAAc,CAAC,iBAA+B;AAClD,QAAI;AAEF,UAAI,aAAa,MAAM;AACrB,oBAAY,QAAQ,aAAa;AAAA,MACnC;AAGA,YAAM,UAAmB;AAAA,QACvB,aAAa,aAAa;AAAA,QAC1B,cAAc,aAAa;AAAA,QAC3B,WAAW,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,GAAI;AAAA;AAAA,QAC9C,QAAQ,YAAY,OAAO,MAAM,aAAa,MAAM;AAAA,MAAA;AAGtD,qBAAe,QAAQ;AAGvB,UAAI,OAAO,WAAW,aAAa;AACjC,qBAAa,QAAQ,wBAAwB,KAAK,UAAU,OAAO,CAAC;AACpE,YAAI,YAAY,OAAO;AACrB,uBAAa,QAAQ,qBAAqB,KAAK,UAAU,YAAY,KAAK,CAAC;AAAA,QAC7E;AAAA,MACF;AAGA,6BAAA;AAAA,IACF,SAAS,OAAO;AACd,cAAQ,MAAM,4BAA4B,KAAK;AAAA,IAEjD;AAAA,EACF;AAGA,QAAM,yBAAyB,MAAM;AAEnC,QAAI,cAAc;AAChB,mBAAa,YAAY;AAAA,IAC3B;AAEA,QAAI,CAAC,eAAe,MAAO;AAG3B,UAAM,0BAAU,KAAA;AAChB,UAAM,YAAY,eAAe,MAAM;AACvC,UAAM,mBAAmB,UAAU,QAAA,IAAY,IAAI,QAAA,IAAa,IAAI,KAAK;AAGzE,QAAI,oBAAoB,GAAG;AACzB,mBAAA;AACA;AAAA,IACF;AAGA,mBAAe,WAAW,YAAY;AACpC,YAAM,UAAU,MAAM,aAAA;AAEtB,UAAI,SAAS;AAEX,+BAAA;AAAA,MACF;AAAA,IACF,GAAG,gBAAgB;AAAA,EACrB;AAEA,QAAM,wBAAwB,MAAM;AAClC,QAAI,cAAc;AAChB,mBAAa,YAAY;AACzB,qBAAe;AAAA,IACjB;AAAA,EACF;AAEA,QAAM,aAAa,YAAY;AAC7B,QAAI,cAAc,MAAO;AAEzB,mBAAe,QAAQ;AACvB,QAAI;AAEF,UAAI,OAAO,WAAW,aAAa;AACjC,cAAM,gBAAgB,aAAa,QAAQ,sBAAsB;AACjE,cAAM,aAAa,aAAa,QAAQ,mBAAmB;AAE3D,YAAI,iBAAiB,YAAY;AAC/B,cAAI;AACF,kBAAM,UAAU,KAAK,MAAM,aAAa;AACxC,kBAAM,OAAO,KAAK,MAAM,UAAU;AAGlC,oBAAQ,YAAY,IAAI,KAAK,QAAQ,SAAS;AAG9C,gBAAI,QAAQ,YAAY,oBAAI,QAAQ;AAClC,6BAAe,QAAQ;AACvB,0BAAY,QAAQ;AAGpB,qCAAA;AAAA,YACF,OAAO;AAEL,2BAAa,WAAW,sBAAsB;AAC9C,2BAAa,WAAW,mBAAmB;AAAA,YAC7C;AAAA,UACF,SAAS,OAAO;AAEd,yBAAa,WAAW,sBAAsB;AAC9C,yBAAa,WAAW,mBAAmB;AAAA,UAC7C;AAAA,QACF;AAAA,MACF;AAEA,oBAAc,QAAQ;AAGtB,YAAM,IAAI,QAAQ,CAAA,YAAW,WAAW,SAAS,EAAE,CAAC;AAAA,IACtD,SAAS,OAAO;AAAA,IAEhB,UAAA;AACE,qBAAe,QAAQ;AAAA,IACzB;AAAA,EACF;AAEA,QAAM,iBAAiB,OAAO,gBAAwB;AACpD,QAAI,CAAC,eAAe,OAAO,aAAa;AACtC,YAAM,IAAI,MAAM,2BAA2B;AAAA,IAC7C;AAEA,qBAAiB,QAAQ;AACzB,QAAI;AACF,YAAM,WAAW,MAAM,MAAM,OAAO,gBAAgB,GAAG;AAAA,QACrD,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,gBAAgB;AAAA,UAChB,iBAAiB,UAAU,eAAe,MAAM,WAAW;AAAA,QAAA;AAAA,QAE7D,MAAM,KAAK,UAAU;AAAA,UACnB,UAAU;AAAA,QAAA,CACX;AAAA,MAAA,CACF;AAED,UAAI,CAAC,SAAS,IAAI;AAChB,cAAM,YAAY,MAAM,SAAS,KAAA,EAAO,MAAM,OAAO,CAAA,EAAG;AACxD,YAAI,SAAS,WAAW,KAAK;AAC3B,gBAAM,IAAI,MAAM,2BAA2B;AAAA,QAC7C,WAAW,UAAU,cAAc;AACjC,gBAAM,IAAI,MAAM,oFAAoF,IAAI,KAAK,UAAU,YAAY,EAAE,mBAAA,CAAoB,EAAE;AAAA,QAC7J;AACA,cAAM,IAAI,MAAM,UAAU,WAAW,2BAA2B,SAAS,MAAM,IAAI,SAAS,UAAU,EAAE;AAAA,MAC1G;AAEA,YAAM,SAAS,MAAM,SAAS,KAAA;AAG9B,UAAI,YAAY,OAAO;AACrB,oBAAY,QAAQ;AAAA,UAClB,GAAG,YAAY;AAAA,UACf,UAAU;AAAA,UACV,wBAAuB,oBAAI,KAAA,GAAO,YAAA;AAAA,UAClC,YAAW,oBAAI,KAAA,GAAO,YAAA;AAAA,QAAY;AAIpC,YAAI,OAAO,WAAW,aAAa;AACjC,uBAAa,QAAQ,qBAAqB,KAAK,UAAU,YAAY,KAAK,CAAC;AAAA,QAC7E;AAAA,MACF;AAEA,aAAO;AAAA,IACT,UAAA;AACE,uBAAiB,QAAQ;AAAA,IAC3B;AAAA,EACF;AAEA,QAAM,sBAAsB,YAAY;AACtC,QAAI,CAAC,eAAe,OAAO,aAAa;AACtC,YAAM,IAAI,MAAM,2BAA2B;AAAA,IAC7C;AAEA,UAAM,WAAW,MAAM,MAAM,OAAO,kBAAkB,GAAG;AAAA,MACvD,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,iBAAiB,UAAU,eAAe,MAAM,WAAW;AAAA,MAAA;AAAA,IAC7D,CACD;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI,MAAM,oCAAoC,SAAS,MAAM,IAAI,SAAS,UAAU,EAAE;AAAA,IAC9F;AAEA,WAAO,SAAS,KAAA;AAAA,EAClB;AAEA,QAAM,4BAA4B,OAAO,aAAqB;AAE5D,UAAM,MAAM,OAAO,2BAA2B,EAAE,QAAQ,cAAc,mBAAmB,QAAQ,CAAC;AAElG,UAAM,WAAW,MAAM,MAAM,KAAK;AAAA,MAChC,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,MAAA;AAAA,IAClB,CACD;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI,MAAM,0CAA0C,SAAS,MAAM,IAAI,SAAS,UAAU,EAAE;AAAA,IACpG;AAEA,WAAO,SAAS,KAAA;AAAA,EAClB;AAGA,QAAM,kBAAkB,YAAY;AAClC,UAAM,WAAW,MAAM,MAAM,OAAO,UAAU,GAAG;AAAA,MAC/C,QAAQ;AAAA,MACR,SAAS,eAAA;AAAA,IAAe,CACzB;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI,MAAM,gCAAgC,SAAS,MAAM,IAAI,SAAS,UAAU,EAAE;AAAA,IAC1F;AAEA,WAAO,SAAS,KAAA;AAAA,EAClB;AAEA,QAAM,kBAAkB,YAAY;AAClC,UAAM,WAAW,MAAM,MAAM,OAAO,eAAe,GAAG;AAAA,MACpD,QAAQ;AAAA,MACR,SAAS,eAAA;AAAA,IAAe,CACzB;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI,MAAM,gCAAgC,SAAS,MAAM,IAAI,SAAS,UAAU,EAAE;AAAA,IAC1F;AAEA,WAAO,SAAS,KAAA;AAAA,EAClB;AAEA,QAAM,gBAAgB,OAAO,cAAsB;AACjD,UAAM,MAAM,OAAO,eAAe,EAAE,QAAQ,gBAAgB,mBAAmB,SAAS,CAAC;AAEzF,UAAM,WAAW,MAAM,MAAM,KAAK;AAAA,MAChC,QAAQ;AAAA,MACR,SAAS,eAAA;AAAA,IAAe,CACzB;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI,MAAM,6BAA6B,SAAS,MAAM,IAAI,SAAS,UAAU,EAAE;AAAA,IACvF;AAEA,WAAO,SAAS,WAAW;AAAA,EAC7B;AAEA,QAAM,yBAAyB,YAAY;AACzC,UAAM,WAAW,MAAM,MAAM,OAAO,mBAAmB,GAAG;AAAA,MACxD,QAAQ;AAAA,MACR,SAAS,eAAA;AAAA,IAAe,CACzB;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI,MAAM,wCAAwC,SAAS,MAAM,IAAI,SAAS,UAAU,EAAE;AAAA,IAClG;AAEA,WAAO,SAAS,WAAW;AAAA,EAC7B;AAGA,MAAI,CAAC,cAAc,OAAO;AACxB,eAAA;AAAA,EACF;AAEA,SAAO;AAAA;AAAA,IAEL,MAAM,SAAS,MAAM,YAAY,KAAK;AAAA,IACtC,aAAa,SAAS,MAAM,YAAY,KAAK;AAAA,IAC7C,gBAAgB,SAAS,MAAM,eAAe,KAAK;AAAA,IACnD;AAAA,IACA,WAAW,SAAS,MAAM,UAAU,SAAS,CAAC,cAAc,KAAK;AAAA,IACjE,SAAS,SAAS,MAAM,QAAQ,KAAK;AAAA,IACrC;AAAA;AAAA,IAGA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA;AAAA,IAGA,aAAa,SAAS,MAAM,YAAY,KAAK;AAAA,IAC7C,cAAc,SAAS,MAAM,aAAa,KAAK;AAAA,IAC/C,qBAAqB,SAAS,MAAM,oBAAoB,KAAK;AAAA;AAAA,IAG/D;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA;AAAA,IAEA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA;AAAA,IAGE;AAAA,IACA;AAAA;AAAA,IAGA,aAAa,MAAM;AACjB,oBAAc,QAAQ;AACtB,qBAAe,QAAQ;AACvB,iBAAA;AAAA,IACF;AAAA,EAAA;AAEJ;"}

package/dist/{useStrandsAuth-z4jAu9Uv.cjs → useStrandsAuth-JfbGH2c-.cjs}

@@ -1,6 +1,6 @@
 "use strict";
 const vue = require("vue");
-const useStrandsConfig = require("./useStrandsConfig-CtmQtE7Y.cjs");
+const useStrandsConfig = require("./useStrandsConfig-Dms13Zd0.cjs");
 const { getUrl } = useStrandsConfig.useStrandsConfig();
 const currentUser = vue.ref(null);
 const currentSession = vue.ref(null);
@@ -30,6 +30,18 @@ const mfaSessionId = vue.ref(null);
 const availableMfaMethods = vue.ref([]);
 let refreshTimer = null;
 function useStrandsAuth() {
+  const getAuthHeaders = () => {
+    if (!currentSession.value?.accessToken) {
+      throw new Error("No access token available");
+    }
+    const headers = {
+      "Authorization": `Bearer ${currentSession.value.accessToken}`
+    };
+    if (currentSession.value?.refreshToken) {
+      headers["x-refresh-token"] = currentSession.value.refreshToken;
+    }
+    return headers;
+  };
   const completeHardwareKeyRegistration = async (deviceId, credential, accessToken) => {
     if (!currentSession.value?.accessToken) {
       throw new Error("No access token available");
@@ -193,8 +205,19 @@ function useStrandsAuth() {
         }
         throw new Error(`Token refresh failed: ${response.status} ${response.statusText}`);
       }
-      const authData = await response.json();
-      setAuthData(authData, true);
+      const tokenData = await response.json();
+      const newSession = {
+        accessToken: tokenData.access_token,
+        refreshToken: tokenData.refresh_token,
+        expiresAt: new Date(Date.now() + 5 * 60 * 1e3),
+        // 5 minutes from now
+        userId: currentUser.value?.id
+      };
+      currentSession.value = newSession;
+      if (typeof window !== "undefined") {
+        localStorage.setItem("strands_auth_session", JSON.stringify(newSession));
+      }
+      startTokenRefreshTimer();
       return true;
     } catch (error) {
       await signOut();
@@ -276,17 +299,24 @@ function useStrandsAuth() {
       if (currentUser.value) {
         currentUser.value = {
           ...currentUser.value,
+          // Update with API response data, preserving the API field names
           id: updatedUserData.id,
+          email: updatedUserData.email,
           firstName: updatedUserData.first_name,
           lastName: updatedUserData.last_name,
-          // Keep existing properties not returned by API
-          avatar: updatedUserData.avatar_url || currentUser.value.avatar,
-          mfaEnabled: currentUser.value.mfaEnabled,
-          email: currentUser.value.email,
-          // Keep existing email since we don't update it here
-          emailVerified: currentUser.value.emailVerified,
-          createdAt: updatedUserData.created_at || currentUser.value.createdAt,
-          updatedAt: updatedUserData.updated_at || (/* @__PURE__ */ new Date()).toISOString()
+          emailVerified: updatedUserData.email_verified,
+          avatar: updatedUserData.avatar_url,
+          mfaEnabled: updatedUserData.mfa_enabled,
+          xp: updatedUserData.xp,
+          level: updatedUserData.level,
+          next_level_xp: updatedUserData.next_level_xp,
+          username: updatedUserData.username,
+          // This was missing and causing the bug!
+          usernameLastChangedAt: updatedUserData.username_last_changed_at,
+          createdAt: updatedUserData.created_at,
+          updatedAt: updatedUserData.updated_at,
+          settings: updatedUserData.settings,
+          passwordUpdatedAt: updatedUserData.password_updated_at
         };
         if (typeof window !== "undefined") {
           localStorage.setItem("strands_auth_user", JSON.stringify(currentUser.value));
@@ -469,23 +499,10 @@ function useStrandsAuth() {
     }
     return response.json();
   };
-  const setAuthData = (authResponse, isTokenRefresh = false) => {
+  const setAuthData = (authResponse) => {
     try {
       if (authResponse.user) {
-        if (isTokenRefresh && currentUser.value) {
-          currentUser.value = {
-            ...currentUser.value,
-            ...authResponse.user,
-            // Preserve certain fields that might be missing in refresh response
-            avatar: authResponse.user.avatar || currentUser.value.avatar,
-            firstName: authResponse.user.firstName || currentUser.value.firstName,
-            lastName: authResponse.user.lastName || currentUser.value.lastName
-          };
-        } else {
-          currentUser.value = authResponse.user;
-        }
-      } else if (!isTokenRefresh) {
-        currentUser.value = null;
+        currentUser.value = authResponse.user;
       }
       const session = {
         accessToken: authResponse.access_token,
@@ -634,6 +651,47 @@ function useStrandsAuth() {
     }
     return response.json();
   };
+  const getUserSessions = async () => {
+    const response = await fetch(getUrl("sessions"), {
+      method: "GET",
+      headers: getAuthHeaders()
+    });
+    if (!response.ok) {
+      throw new Error(`Failed to get user sessions: ${response.status} ${response.statusText}`);
+    }
+    return response.json();
+  };
+  const getSessionStats = async () => {
+    const response = await fetch(getUrl("sessionsStats"), {
+      method: "GET",
+      headers: getAuthHeaders()
+    });
+    if (!response.ok) {
+      throw new Error(`Failed to get session stats: ${response.status} ${response.statusText}`);
+    }
+    return response.json();
+  };
+  const revokeSession = async (sessionId) => {
+    const url = getUrl("sessionRevoke").replace("{session_id}", encodeURIComponent(sessionId));
+    const response = await fetch(url, {
+      method: "POST",
+      headers: getAuthHeaders()
+    });
+    if (!response.ok) {
+      throw new Error(`Failed to revoke session: ${response.status} ${response.statusText}`);
+    }
+    return response.status === 200;
+  };
+  const revokeAllOtherSessions = async () => {
+    const response = await fetch(getUrl("sessionsRevokeAll"), {
+      method: "POST",
+      headers: getAuthHeaders()
+    });
+    if (!response.ok) {
+      throw new Error(`Failed to revoke all other sessions: ${response.status} ${response.statusText}`);
+    }
+    return response.status === 200;
+  };
   if (!isInitialized.value) {
     initialize();
   }
@@ -670,6 +728,11 @@ function useStrandsAuth() {
     changeUsername,
     getUsernameCooldown,
     checkUsernameAvailability,
+    // Session management
+    getUserSessions,
+    getSessionStats,
+    revokeSession,
+    revokeAllOtherSessions,
     initialize,
     setAuthData,
     verifyMfa,
@@ -689,4 +752,4 @@ function useStrandsAuth() {
   };
 }
 exports.useStrandsAuth = useStrandsAuth;
-//# sourceMappingURL=useStrandsAuth-z4jAu9Uv.cjs.map
+//# sourceMappingURL=useStrandsAuth-JfbGH2c-.cjs.map

package/dist/useStrandsAuth-JfbGH2c-.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"useStrandsAuth-JfbGH2c-.cjs","sources":["../../../apps/accounts-ui/src/vue/composables/useStrandsAuth.ts"],"sourcesContent":["import { ref, computed } from 'vue'\nimport type { User, Session, SessionInfo, SessionStats, SignInCredentials, SignUpData, AuthResponse, MfaDevice, MfaErrorResponse } from '../../types'\nimport { useStrandsConfig } from './useStrandsConfig'\n\nconst { getUrl } = useStrandsConfig()\n\nconst currentUser = ref<User | null>(null)\nconst currentSession = ref<Session | null>(null)\n\n// Specific loading states\nconst isInitializing = ref(true)\nconst isSigningIn = ref(false)\nconst isSigningUp = ref(false)\nconst isSigningOut = ref(false)\nconst isRefreshingToken = ref(false)\nconst isSendingMfaEmail = ref(false)\nconst isVerifyingMfa = ref(false)\nconst isLoadingProfile = ref(false)\n\n// Legacy loading states for backward compatibility\nconst loading = computed(() => isSigningIn.value || isSigningUp.value || isSigningOut.value || isRefreshingToken.value || isSendingMfaEmail.value || isVerifyingMfa.value || isLoadingProfile.value)\nconst isLoading = computed(() => isInitializing.value || loading.value)\n\n// Loading messages for better UX\nconst loadingMessage = computed(() => {\n  if (isInitializing.value) return 'Checking authentication...'\n  if (isSigningIn.value) return 'Signing you in...'\n  if (isSigningUp.value) return 'Creating your account...'\n  if (isSigningOut.value) return 'Signing you out...'\n  if (isRefreshingToken.value) return 'Refreshing session...'\n  if (isSendingMfaEmail.value) return 'Sending verification code...'\n  if (isVerifyingMfa.value) return 'Verifying code...'\n  return 'Loading...' // Fallback\n})\n\nconst isInitialized = ref(false)\n\n// MFA state\nconst mfaRequired = ref(false)\nconst mfaSessionId = ref<string | null>(null)\nconst availableMfaMethods = ref<MfaDevice[]>([])\n\n// Token refresh timer\nlet refreshTimer: NodeJS.Timeout | null = null\n\nexport function useStrandsAuth() {\n  // Helper function to get authenticated headers with refresh token\n  const getAuthHeaders = () => {\n    if (!currentSession.value?.accessToken) {\n      throw new Error('No access token available')\n    }\n    \n    const headers: Record<string, string> = {\n      'Authorization': `Bearer ${currentSession.value.accessToken}`,\n    }\n    \n    // Include refresh token for session management\n    if (currentSession.value?.refreshToken) {\n      headers['x-refresh-token'] = currentSession.value.refreshToken\n    }\n    \n    return headers\n  }\n  /**\n   * Complete hardware key (WebAuthn) registration for MFA\n   * Returns result with backup codes on success\n   */\n  const completeHardwareKeyRegistration = async (deviceId: string, credential: any, accessToken: string) => {\n    if (!currentSession.value?.accessToken) {\n      throw new Error('No access token available')\n    }\n\n    const response = await fetch(getUrl('mfaHardwareCompleteRegistration'), {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/json',\n        'Authorization': `Bearer ${currentSession.value.accessToken}`\n      },\n      body: JSON.stringify({\n        device_id: deviceId,\n        credential: credential\n      })\n    })\n    if (!response.ok) {\n      const errorText = await response.text()\n      let errorMessage = 'Failed to complete hardware key registration'\n      \n      try {\n        const errorData = JSON.parse(errorText)\n        errorMessage = errorData.message || errorData.error || errorText\n      } catch {\n        errorMessage = errorText || 'Failed to complete hardware key registration'\n      }\n      \n      throw new Error(errorMessage)\n    }\n    return response.json()\n  }\n  /**\n   * Register a hardware key (WebAuthn) for MFA\n   * Returns { device_id, challenge } on success\n   */\n  const registerHardwareKey = async (deviceName: string, accessToken: string, deviceType: 'hardware' | 'passkey' = 'hardware') => {\n    if (!currentSession.value?.accessToken) {\n      throw new Error('No access token available')\n    }\n    \n    const response = await fetch(getUrl('mfaHardwareStartRegistration'), {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/json',\n        'Authorization': `Bearer ${currentSession.value.accessToken}`,\n      },\n      body: JSON.stringify({ \n        device_name: deviceName,\n        device_type: deviceType \n      })\n    })\n    if (!response.ok) {\n      const errorText = await response.text()\n      let errorMessage = 'Failed to start hardware key registration'\n      \n      try {\n        const errorData = JSON.parse(errorText)\n        errorMessage = errorData.message || errorData.error || errorText\n      } catch {\n        errorMessage = errorText || 'Failed to start hardware key registration'\n      }\n      \n      throw new Error(errorMessage)\n    }\n    return response.json()\n  }\n\n  const isAuthenticated = computed(() => currentUser.value !== null)\n\n    const signIn = async (credentials: SignInCredentials) => {\n    isSigningIn.value = true\n    try {\n      // Reset MFA state at start of new sign-in attempt\n      mfaRequired.value = false\n      mfaSessionId.value = null\n      availableMfaMethods.value = []\n      \n      // Make API call to sign-in endpoint\n      const response = await fetch(getUrl('signIn'), {\n        method: 'POST',\n        headers: {\n          'Content-Type': 'application/json',\n        },\n        body: JSON.stringify(credentials),\n      })\n\n      if (!response.ok) {\n        if (response.status === 401) {\n          throw new Error('Invalid email or password')\n        } else if (response.status === 403) {\n          throw new Error('Please verify your email address before signing in')\n        } else {\n          throw new Error(`Sign in failed: ${response.status} ${response.statusText}`)\n        }\n      }\n\n      const authData: AuthResponse = await response.json()\n      \n      // Check if MFA is required\n      if (authData.mfa_required) {\n        mfaRequired.value = true\n        mfaSessionId.value = authData.mfa_session_id || null\n        \n        // Convert API MFA methods to the expected format\n        const methods = (authData.available_mfa_methods || []).map((method: any) => {\n          // Create better fallback names for different device types\n          let fallbackName = `${method.device_type.charAt(0).toUpperCase() + method.device_type.slice(1)} Authentication`\n          \n          if (method.device_type === 'hardware') {\n            // Better names for hardware keys\n            fallbackName = method.device_name || 'Security Key' // Could be YubiKey, FIDO2 Key, etc.\n          } else if (method.device_type === 'totp') {\n            fallbackName = method.device_name || 'Authenticator App'\n          } else if (method.device_type === 'email') {\n            fallbackName = method.device_name || 'Email Verification'\n          }\n          \n          return {\n            id: method.device_id,\n            device_type: method.device_type,\n            device_name: method.device_name || fallbackName,\n            is_active: true,\n            created_at: new Date().toISOString(),\n            last_used_at: method.last_used_at,\n            // Pass through additional metadata if available\n            credential_id: method.credential_id,\n            device_info: method.device_info\n          }\n        })\n        availableMfaMethods.value = methods\n        \n        // Set signIn loading to false immediately so MFA modal can show\n        isSigningIn.value = false\n        \n        return authData // Return without storing full auth data\n      }\n      \n      // Store the authentication data if MFA not required\n      setAuthData(authData)\n      \n      return authData\n    } catch (error) {\n      throw error\n    } finally {\n      isSigningIn.value = false\n    }\n  }\n\n  const signUp = async (userData: SignUpData) => {\n    isSigningUp.value = true\n    try {\n      // Integration point: Replace with actual auth SDK call\n      // Example: const result = await authSDK.signUp(userData)\n      \n      throw new Error('Sign up not implemented - please integrate with auth SDK')\n    } finally {\n      isSigningUp.value = false\n    }\n  }\n\n  const signOut = async () => {\n    isSigningOut.value = true\n    try {\n      // Stop token refresh timer\n      stopTokenRefreshTimer()\n      \n      // Clear user and session state\n      currentUser.value = null\n      currentSession.value = null\n      \n      // Clear MFA state\n      mfaRequired.value = false\n      mfaSessionId.value = null\n      availableMfaMethods.value = []\n      \n      // Clear stored tokens\n      if (typeof window !== 'undefined') {\n        localStorage.removeItem('strands_auth_session')\n        localStorage.removeItem('strands_auth_user')\n      }\n    } finally {\n      isSigningOut.value = false\n    }\n  }\n\n  const refreshToken = async () => {\n    if (!currentSession.value?.refreshToken) {\n      return false\n    }\n    \n    \n    isRefreshingToken.value = true\n    try {\n      const response = await fetch(getUrl('refresh'), {\n        method: 'POST',\n        headers: {\n          'Content-Type': 'application/json',\n        },\n        body: JSON.stringify({\n          refresh_token: currentSession.value.refreshToken,\n        }),\n      })\n\n      if (!response.ok) {        \n        if (response.status === 401) {\n          // Refresh token is invalid/expired, sign out user\n          await signOut()\n          return false\n        }\n        throw new Error(`Token refresh failed: ${response.status} ${response.statusText}`)\n      }\n\n      const tokenData = await response.json()\n      \n      // For token refresh, only update tokens - don't change user data\n      const newSession: Session = {\n        accessToken: tokenData.access_token,\n        refreshToken: tokenData.refresh_token,\n        expiresAt: new Date(Date.now() + 5 * 60 * 1000), // 5 minutes from now\n        userId: currentUser.value?.id,\n      }\n      \n      currentSession.value = newSession\n      \n      // Update localStorage with new session\n      if (typeof window !== 'undefined') {\n        localStorage.setItem('strands_auth_session', JSON.stringify(newSession))\n      }\n      \n      // Restart token refresh timer\n      startTokenRefreshTimer()\n      \n      return true\n    } catch (error) {\n      // On refresh failure, sign out the user\n      await signOut()\n      return false\n    }\n  }\n\n  const fetchProfile = async (): Promise<User | null> => {\n    if (!currentSession.value?.accessToken) {\n      throw new Error('No access token available')\n    }\n    \n    isLoadingProfile.value = true\n    try {\n      const response = await fetch(getUrl('profile'), {\n        method: 'GET',\n        headers: {\n          'Content-Type': 'application/json',\n          'Authorization': `Bearer ${currentSession.value.accessToken}`,\n        },\n      })\n\n      if (!response.ok) {\n        if (response.status === 401) {\n          throw new Error('Authentication expired. Please sign in again.')\n        } else {\n          throw new Error(`Failed to fetch profile: ${response.status} ${response.statusText}`)\n        }\n      }\n\n      const userData = await response.json()\n      \n      // Update the current user state\n      currentUser.value = {\n        id: userData.id,\n        email: userData.email,\n        firstName: userData.first_name,\n        lastName: userData.last_name,\n        avatar: userData.avatar_url,\n        mfaEnabled: userData.mfaEnabled || false,\n        emailVerified: userData.email_verified,\n        passwordUpdatedAt: userData.password_updated_at,\n        settings: userData.settings || {},\n        xp: userData.xp || 0,\n        level: userData.level || 1,\n        next_level_xp: userData.next_level_xp || 4,\n        username: userData.username,\n        usernameLastChangedAt: userData.username_last_changed_at,\n        createdAt: userData.created_at,\n        updatedAt: userData.updated_at || new Date().toISOString(),\n      }\n      \n      // Update localStorage\n      if (typeof window !== 'undefined') {\n        localStorage.setItem('strands_auth_user', JSON.stringify(currentUser.value))\n      }\n      \n      return currentUser.value\n    } finally {\n      isLoadingProfile.value = false\n    }\n  }\n\n  const updateProfile = async (profileData: Partial<User>) => {\n    if (!currentSession.value?.accessToken) {\n      throw new Error('No access token available')\n    }\n    \n    isLoadingProfile.value = true\n    try {\n      const response = await fetch(getUrl('profile'), {\n        method: 'POST',\n        headers: {\n          'Content-Type': 'application/json',\n          'Authorization': `Bearer ${currentSession.value.accessToken}`,\n        },\n        body: JSON.stringify({\n          first_name: profileData.firstName,\n          last_name: profileData.lastName,\n        }),\n      })\n\n      if (!response.ok) {\n        if (response.status === 401) {\n          throw new Error('Authentication expired. Please sign in again.')\n        } else {\n          throw new Error(`Profile update failed: ${response.status} ${response.statusText}`)\n        }\n      }\n\n      const updatedUserData = await response.json()\n      \n      // Update the current user state with API response data\n      if (currentUser.value) {\n        currentUser.value = {\n          ...currentUser.value,\n          // Update with API response data, preserving the API field names\n          id: updatedUserData.id,\n          email: updatedUserData.email,\n          firstName: updatedUserData.first_name,\n          lastName: updatedUserData.last_name,\n          emailVerified: updatedUserData.email_verified,\n          avatar: updatedUserData.avatar_url,\n          mfaEnabled: updatedUserData.mfa_enabled,\n          xp: updatedUserData.xp,\n          level: updatedUserData.level,\n          next_level_xp: updatedUserData.next_level_xp,\n          username: updatedUserData.username, // This was missing and causing the bug!\n          usernameLastChangedAt: updatedUserData.username_last_changed_at,\n          createdAt: updatedUserData.created_at,\n          updatedAt: updatedUserData.updated_at,\n          settings: updatedUserData.settings,\n          passwordUpdatedAt: updatedUserData.password_updated_at,\n        }\n        \n        // Update localStorage\n        if (typeof window !== 'undefined') {\n          localStorage.setItem('strands_auth_user', JSON.stringify(currentUser.value))\n        }\n      }\n      \n      return currentUser.value\n    } finally {\n      isLoadingProfile.value = false\n    }\n  }\n\n  const updateUserSettings = async (settings: any) => {\n    if (!currentSession.value?.accessToken) {\n      throw new Error('No access token available')\n    }\n    \n    isLoadingProfile.value = true\n    try {\n      const response = await fetch(getUrl('settings'), {\n        method: 'POST',\n        headers: {\n          'Content-Type': 'application/json',\n          'Authorization': `Bearer ${currentSession.value.accessToken}`,\n        },\n        body: JSON.stringify({\n          settings: settings,\n        }),\n      })\n\n      if (!response.ok) {\n        if (response.status === 401) {\n          throw new Error('Authentication expired. Please sign in again.')\n        } else {\n          throw new Error(`Settings update failed: ${response.status} ${response.statusText}`)\n        }\n      }\n\n      const updatedUserData = await response.json()\n      \n      // Update the current user state\n      if (currentUser.value) {\n        currentUser.value = {\n          ...currentUser.value,\n          settings: updatedUserData.settings,\n          updatedAt: updatedUserData.updated_at || new Date().toISOString(),\n        }\n        \n        // Update localStorage\n        if (typeof window !== 'undefined') {\n          localStorage.setItem('strands_auth_user', JSON.stringify(currentUser.value))\n        }\n      }\n      \n      return currentUser.value\n    } finally {\n      isLoadingProfile.value = false\n    }\n  }\n\n  const changeEmail = async (newEmail: string, password: string) => {\n    if (!currentSession.value?.accessToken) {\n      throw new Error('No access token available')\n    }\n    \n    isLoadingProfile.value = true\n    try {\n      const response = await fetch(getUrl('changeEmail'), {\n        method: 'POST',\n        headers: {\n          'Content-Type': 'application/json',\n          'Authorization': `Bearer ${currentSession.value.accessToken}`,\n        },\n        body: JSON.stringify({\n          new_email: newEmail,\n          password: password,\n        }),\n      })\n\n      if (!response.ok) {\n        if (response.status === 401) {\n          throw new Error('Authentication expired. Please sign in again.')\n        } else {\n          const errorData = await response.json().catch(() => ({}))\n          throw new Error(errorData.message || `Email change failed: ${response.status} ${response.statusText}`)\n        }\n      }\n\n      const result = await response.json()\n      \n      // Update the current user state with new email\n      if (currentUser.value) {\n        currentUser.value = {\n          ...currentUser.value,\n          email: newEmail,\n          emailVerified: false, // Email needs to be verified again\n          updatedAt: new Date().toISOString(),\n        }\n        \n        // Update localStorage\n        if (typeof window !== 'undefined') {\n          localStorage.setItem('strands_auth_user', JSON.stringify(currentUser.value))\n        }\n      }\n      \n      return result\n    } finally {\n      isLoadingProfile.value = false\n    }\n  }\n\n  const verifyMfa = async (deviceId: string, code: string, isBackupCode = false) => {\n    if (!mfaSessionId.value) {\n      throw new Error('No MFA session available')\n    }\n\n    isVerifyingMfa.value = true\n    try {\n      const endpoint = isBackupCode ? getUrl('mfaBackupCodeVerify') : getUrl('mfaSigninVerify')\n      const body = isBackupCode \n        ? { mfa_session_id: mfaSessionId.value, backup_code: code }\n        : { mfa_session_id: mfaSessionId.value, device_id: deviceId, code }\n\n      const response = await fetch(endpoint, {\n        method: 'POST',\n        headers: { 'Content-Type': 'application/json' },\n        body: JSON.stringify(body),\n      })\n\n      if (!response.ok) {\n        const errorText = await response.text()\n        let errorMessage = 'MFA verification failed'\n        \n        try {\n          const errorData = JSON.parse(errorText)\n          errorMessage = errorData.message || errorData.error || errorText\n        } catch {\n          // If parsing fails, use the raw text but clean it up\n          errorMessage = errorText || 'MFA verification failed'\n        }\n        \n        throw new Error(errorMessage)\n      }\n\n      const authData: AuthResponse = await response.json()\n      \n      // Clear MFA state\n      mfaRequired.value = false\n      mfaSessionId.value = null\n      availableMfaMethods.value = []\n      \n      // Store the authentication data\n      setAuthData(authData)\n      \n      return authData\n    } finally {\n      isVerifyingMfa.value = false\n    }\n  }\n\n  const sendMfaEmailCode = async (deviceId: string) => {\n    if (!mfaSessionId.value) {\n      throw new Error('No MFA session available')\n    }\n\n    isSendingMfaEmail.value = true\n    try {\n      const response = await fetch(getUrl('mfaSigninSendEmail'), {\n        method: 'POST',\n        headers: { 'Content-Type': 'application/json' },\n        body: JSON.stringify({\n          mfa_session_id: mfaSessionId.value,\n          device_id: deviceId,\n        }),\n      })\n\n      if (!response.ok) {\n        const errorText = await response.text()\n        let errorMessage = 'Failed to send MFA email code'\n        \n        try {\n          const errorData = JSON.parse(errorText)\n          errorMessage = errorData.message || errorData.error || errorText\n        } catch {\n          // If parsing fails, use the raw text but clean it up\n          errorMessage = errorText || 'Failed to send MFA email code'\n        }\n        \n        throw new Error(errorMessage)\n      }\n\n      const result = await response.json()\n      return result\n    } finally {\n      isSendingMfaEmail.value = false\n    }\n  }\n\n  const getMfaWebAuthnChallenge = async (deviceId: string) => {\n    if (!mfaSessionId.value) {\n      throw new Error('No MFA session available')\n    }\n    \n    const response = await fetch(getUrl('mfaWebAuthnChallenge'), {\n      method: 'POST',\n      headers: { 'Content-Type': 'application/json' },\n      body: JSON.stringify({\n        mfa_session_id: mfaSessionId.value,\n        device_id: deviceId\n      }),\n    })\n\n    if (!response.ok) {\n      const errorText = await response.text()\n      let errorMessage = 'Failed to get WebAuthn challenge'\n      \n      try {\n        const errorData = JSON.parse(errorText)\n        errorMessage = errorData.message || errorData.error || errorText\n      } catch {\n        errorMessage = errorText || errorMessage\n      }\n      \n      throw new Error(errorMessage)\n    }\n\n    return response.json()\n  }\n\n  const setAuthData = (authResponse: AuthResponse) => {\n    try {\n      // Handle user data (only for sign-in/sign-up, not token refresh)\n      if (authResponse.user) {\n        currentUser.value = authResponse.user\n      }\n      \n      // Create session object\n      const session: Session = {\n        accessToken: authResponse.access_token,\n        refreshToken: authResponse.refresh_token,\n        expiresAt: new Date(Date.now() + 5 * 60 * 1000), // 5 minutes from now (matching API token expiry)\n        userId: currentUser.value?.id || authResponse.user?.id,\n      }\n      \n      currentSession.value = session\n      \n      // Store in localStorage for persistence\n      if (typeof window !== 'undefined') {\n        localStorage.setItem('strands_auth_session', JSON.stringify(session))\n        if (currentUser.value) {\n          localStorage.setItem('strands_auth_user', JSON.stringify(currentUser.value))\n        }\n      }\n      \n      // Start automatic token refresh\n      startTokenRefreshTimer()\n    } catch (error) {\n      console.error('Error setting auth data:', error)\n      // Silently handle auth data storage errors\n    }\n  }\n\n  // Token refresh timer management\n  const startTokenRefreshTimer = () => {\n    // Clear existing timer\n    if (refreshTimer) {\n      clearTimeout(refreshTimer)\n    }\n    \n    if (!currentSession.value) return\n    \n    // Calculate time until token expires (refresh 1 minute before expiry)\n    const now = new Date()\n    const expiresAt = currentSession.value.expiresAt\n    const timeUntilRefresh = expiresAt.getTime() - now.getTime() - (1 * 60 * 1000) // 1 minute before expiry\n    \n    // If token is already expired or expires very soon, refresh immediately\n    if (timeUntilRefresh <= 0) {\n      refreshToken()\n      return\n    }\n    \n    // Set timer to refresh token\n    refreshTimer = setTimeout(async () => {\n      const success = await refreshToken()\n      \n      if (success) {\n        // Schedule next refresh\n        startTokenRefreshTimer()\n      }\n    }, timeUntilRefresh)\n  }\n\n  const stopTokenRefreshTimer = () => {\n    if (refreshTimer) {\n      clearTimeout(refreshTimer)\n      refreshTimer = null\n    }\n  }\n\n  const initialize = async () => {\n    if (isInitialized.value) return\n    \n    isInitializing.value = true\n    try {\n      // Check for existing session/token in localStorage\n      if (typeof window !== 'undefined') {\n        const storedSession = localStorage.getItem('strands_auth_session')\n        const storedUser = localStorage.getItem('strands_auth_user')\n        \n        if (storedSession && storedUser) {\n          try {\n            const session = JSON.parse(storedSession) as Session\n            const user = JSON.parse(storedUser) as User\n            \n            // Convert expiresAt back to Date object\n            session.expiresAt = new Date(session.expiresAt)\n            \n            // Check if session is still valid\n            if (session.expiresAt > new Date()) {\n              currentSession.value = session\n              currentUser.value = user\n              \n              // Start token refresh timer for restored session\n              startTokenRefreshTimer()\n            } else {\n              // Session expired, clear storage\n              localStorage.removeItem('strands_auth_session')\n              localStorage.removeItem('strands_auth_user')\n            }\n          } catch (error) {\n            // Clear corrupted data\n            localStorage.removeItem('strands_auth_session')\n            localStorage.removeItem('strands_auth_user')\n          }\n        }\n      }\n      \n      isInitialized.value = true\n      \n      // Add a small delay to ensure state is fully settled before hiding loading\n      await new Promise(resolve => setTimeout(resolve, 50))\n    } catch (error) {\n      // Silently handle initialization errors\n    } finally {\n      isInitializing.value = false\n    }\n  }\n\n  const changeUsername = async (newUsername: string) => {\n    if (!currentSession.value?.accessToken) {\n      throw new Error('No access token available')\n    }\n    \n    isLoadingProfile.value = true\n    try {\n      const response = await fetch(getUrl('changeUsername'), {\n        method: 'POST',\n        headers: {\n          'Content-Type': 'application/json',\n          'Authorization': `Bearer ${currentSession.value.accessToken}`,\n        },\n        body: JSON.stringify({\n          username: newUsername,\n        }),\n      })\n\n      if (!response.ok) {\n        const errorData = await response.json().catch(() => ({}))\n        if (response.status === 409) {\n          throw new Error('Username is already taken')\n        } else if (errorData.cooldown_end) {\n          throw new Error(`You can only change your username once every 30 days. You can change it again on ${new Date(errorData.cooldown_end).toLocaleDateString()}`)\n        }\n        throw new Error(errorData.message || `Username change failed: ${response.status} ${response.statusText}`)\n      }\n\n      const result = await response.json()\n      \n      // Update the current user state with new username\n      if (currentUser.value) {\n        currentUser.value = {\n          ...currentUser.value,\n          username: newUsername,\n          usernameLastChangedAt: new Date().toISOString(),\n          updatedAt: new Date().toISOString(),\n        }\n        \n        // Update localStorage\n        if (typeof window !== 'undefined') {\n          localStorage.setItem('strands_auth_user', JSON.stringify(currentUser.value))\n        }\n      }\n      \n      return result\n    } finally {\n      isLoadingProfile.value = false\n    }\n  }\n\n  const getUsernameCooldown = async () => {\n    if (!currentSession.value?.accessToken) {\n      throw new Error('No access token available')\n    }\n    \n    const response = await fetch(getUrl('usernameCooldown'), {\n      method: 'GET',\n      headers: {\n        'Authorization': `Bearer ${currentSession.value.accessToken}`,\n      },\n    })\n\n    if (!response.ok) {\n      throw new Error(`Failed to get username cooldown: ${response.status} ${response.statusText}`)\n    }\n\n    return response.json()\n  }\n\n  const checkUsernameAvailability = async (username: string) => {\n    // Replace {username} in the URL\n    const url = getUrl('checkUsernameAvailability').replace('{username}', encodeURIComponent(username))\n    \n    const response = await fetch(url, {\n      method: 'GET',\n      headers: {\n        'Content-Type': 'application/json',\n      },\n    })\n\n    if (!response.ok) {\n      throw new Error(`Failed to check username availability: ${response.status} ${response.statusText}`)\n    }\n\n    return response.json()\n  }\n\n  // Session management functions\n  const getUserSessions = async () => {\n    const response = await fetch(getUrl('sessions'), {\n      method: 'GET',\n      headers: getAuthHeaders(),\n    })\n\n    if (!response.ok) {\n      throw new Error(`Failed to get user sessions: ${response.status} ${response.statusText}`)\n    }\n\n    return response.json()\n  }\n\n  const getSessionStats = async () => {\n    const response = await fetch(getUrl('sessionsStats'), {\n      method: 'GET',\n      headers: getAuthHeaders(),\n    })\n\n    if (!response.ok) {\n      throw new Error(`Failed to get session stats: ${response.status} ${response.statusText}`)\n    }\n\n    return response.json()\n  }\n\n  const revokeSession = async (sessionId: string) => {\n    const url = getUrl('sessionRevoke').replace('{session_id}', encodeURIComponent(sessionId))\n    \n    const response = await fetch(url, {\n      method: 'POST',\n      headers: getAuthHeaders(),\n    })\n\n    if (!response.ok) {\n      throw new Error(`Failed to revoke session: ${response.status} ${response.statusText}`)\n    }\n\n    return response.status === 200\n  }\n\n  const revokeAllOtherSessions = async () => {\n    const response = await fetch(getUrl('sessionsRevokeAll'), {\n      method: 'POST',\n      headers: getAuthHeaders(),\n    })\n\n    if (!response.ok) {\n      throw new Error(`Failed to revoke all other sessions: ${response.status} ${response.statusText}`)\n    }\n\n    return response.status === 200\n  }\n\n  // Auto-initialize on first use\n  if (!isInitialized.value) {\n    initialize()\n  }\n\n  return {\n    // State\n    user: computed(() => currentUser.value),\n    currentUser: computed(() => currentUser.value),\n    currentSession: computed(() => currentSession.value),\n    isAuthenticated,\n    isLoading: computed(() => isLoading.value || !isInitialized.value),\n    loading: computed(() => loading.value),\n    loadingMessage,\n    \n    // Specific loading states\n    isInitializing,\n    isSigningIn,\n    isSigningUp,\n    isSigningOut,\n    isRefreshingToken,\n    isSendingMfaEmail,\n    isVerifyingMfa,\n    \n    // MFA State\n    mfaRequired: computed(() => mfaRequired.value),\n    mfaSessionId: computed(() => mfaSessionId.value),\n    availableMfaMethods: computed(() => availableMfaMethods.value),\n\n  // Methods\n  signIn,\n  signUp,\n  signOut,\n  refreshToken,\n  fetchProfile,\n  updateProfile,\n  updateUserSettings,\n  changeEmail,\n  changeUsername,\n  getUsernameCooldown,\n  checkUsernameAvailability,\n  // Session management\n  getUserSessions,\n  getSessionStats,\n  revokeSession,\n  revokeAllOtherSessions,\n  initialize,\n  setAuthData,\n  verifyMfa,\n  sendMfaEmailCode,\n  getMfaWebAuthnChallenge,\n  registerHardwareKey,\n  completeHardwareKeyRegistration,\n    \n    // Token management\n    startTokenRefreshTimer,\n    stopTokenRefreshTimer,\n    \n    // Force re-initialization (useful for testing or navigation)\n    forceReInit: () => {\n      isInitialized.value = false\n      isInitializing.value = true\n      initialize()\n    },\n  }\n}"],"names":["useStrandsConfig","ref","computed"],"mappings":";;;AAIA,MAAM,EAAE,OAAA,IAAWA,kCAAA;AAEnB,MAAM,cAAcC,IAAAA,IAAiB,IAAI;AACzC,MAAM,iBAAiBA,IAAAA,IAAoB,IAAI;AAG/C,MAAM,iBAAiBA,IAAAA,IAAI,IAAI;AAC/B,MAAM,cAAcA,IAAAA,IAAI,KAAK;AAC7B,MAAM,cAAcA,IAAAA,IAAI,KAAK;AAC7B,MAAM,eAAeA,IAAAA,IAAI,KAAK;AAC9B,MAAM,oBAAoBA,IAAAA,IAAI,KAAK;AACnC,MAAM,oBAAoBA,IAAAA,IAAI,KAAK;AACnC,MAAM,iBAAiBA,IAAAA,IAAI,KAAK;AAChC,MAAM,mBAAmBA,IAAAA,IAAI,KAAK;AAGlC,MAAM,UAAUC,IAAAA,SAAS,MAAM,YAAY,SAAS,YAAY,SAAS,aAAa,SAAS,kBAAkB,SAAS,kBAAkB,SAAS,eAAe,SAAS,iBAAiB,KAAK;AACnM,MAAM,YAAYA,IAAAA,SAAS,MAAM,eAAe,SAAS,QAAQ,KAAK;AAGtE,MAAM,iBAAiBA,IAAAA,SAAS,MAAM;AACpC,MAAI,eAAe,MAAO,QAAO;AACjC,MAAI,YAAY,MAAO,QAAO;AAC9B,MAAI,YAAY,MAAO,QAAO;AAC9B,MAAI,aAAa,MAAO,QAAO;AAC/B,MAAI,kBAAkB,MAAO,QAAO;AACpC,MAAI,kBAAkB,MAAO,QAAO;AACpC,MAAI,eAAe,MAAO,QAAO;AACjC,SAAO;AACT,CAAC;AAED,MAAM,gBAAgBD,IAAAA,IAAI,KAAK;AAG/B,MAAM,cAAcA,IAAAA,IAAI,KAAK;AAC7B,MAAM,eAAeA,IAAAA,IAAmB,IAAI;AAC5C,MAAM,sBAAsBA,IAAAA,IAAiB,EAAE;AAG/C,IAAI,eAAsC;AAEnC,SAAS,iBAAiB;AAE/B,QAAM,iBAAiB,MAAM;AAC3B,QAAI,CAAC,eAAe,OAAO,aAAa;AACtC,YAAM,IAAI,MAAM,2BAA2B;AAAA,IAC7C;AAEA,UAAM,UAAkC;AAAA,MACtC,iBAAiB,UAAU,eAAe,MAAM,WAAW;AAAA,IAAA;AAI7D,QAAI,eAAe,OAAO,cAAc;AACtC,cAAQ,iBAAiB,IAAI,eAAe,MAAM;AAAA,IACpD;AAEA,WAAO;AAAA,EACT;AAKA,QAAM,kCAAkC,OAAO,UAAkB,YAAiB,gBAAwB;AACxG,QAAI,CAAC,eAAe,OAAO,aAAa;AACtC,YAAM,IAAI,MAAM,2BAA2B;AAAA,IAC7C;AAEA,UAAM,WAAW,MAAM,MAAM,OAAO,iCAAiC,GAAG;AAAA,MACtE,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,iBAAiB,UAAU,eAAe,MAAM,WAAW;AAAA,MAAA;AAAA,MAE7D,MAAM,KAAK,UAAU;AAAA,QACnB,WAAW;AAAA,QACX;AAAA,MAAA,CACD;AAAA,IAAA,CACF;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,YAAY,MAAM,SAAS,KAAA;AACjC,UAAI,eAAe;AAEnB,UAAI;AACF,cAAM,YAAY,KAAK,MAAM,SAAS;AACtC,uBAAe,UAAU,WAAW,UAAU,SAAS;AAAA,MACzD,QAAQ;AACN,uBAAe,aAAa;AAAA,MAC9B;AAEA,YAAM,IAAI,MAAM,YAAY;AAAA,IAC9B;AACA,WAAO,SAAS,KAAA;AAAA,EAClB;AAKA,QAAM,sBAAsB,OAAO,YAAoB,aAAqB,aAAqC,eAAe;AAC9H,QAAI,CAAC,eAAe,OAAO,aAAa;AACtC,YAAM,IAAI,MAAM,2BAA2B;AAAA,IAC7C;AAEA,UAAM,WAAW,MAAM,MAAM,OAAO,8BAA8B,GAAG;AAAA,MACnE,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,iBAAiB,UAAU,eAAe,MAAM,WAAW;AAAA,MAAA;AAAA,MAE7D,MAAM,KAAK,UAAU;AAAA,QACnB,aAAa;AAAA,QACb,aAAa;AAAA,MAAA,CACd;AAAA,IAAA,CACF;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,YAAY,MAAM,SAAS,KAAA;AACjC,UAAI,eAAe;AAEnB,UAAI;AACF,cAAM,YAAY,KAAK,MAAM,SAAS;AACtC,uBAAe,UAAU,WAAW,UAAU,SAAS;AAAA,MACzD,QAAQ;AACN,uBAAe,aAAa;AAAA,MAC9B;AAEA,YAAM,IAAI,MAAM,YAAY;AAAA,IAC9B;AACA,WAAO,SAAS,KAAA;AAAA,EAClB;AAEA,QAAM,kBAAkBC,IAAAA,SAAS,MAAM,YAAY,UAAU,IAAI;AAE/D,QAAM,SAAS,OAAO,gBAAmC;AACzD,gBAAY,QAAQ;AACpB,QAAI;AAEF,kBAAY,QAAQ;AACpB,mBAAa,QAAQ;AACrB,0BAAoB,QAAQ,CAAA;AAG5B,YAAM,WAAW,MAAM,MAAM,OAAO,QAAQ,GAAG;AAAA,QAC7C,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,gBAAgB;AAAA,QAAA;AAAA,QAElB,MAAM,KAAK,UAAU,WAAW;AAAA,MAAA,CACjC;AAED,UAAI,CAAC,SAAS,IAAI;AAChB,YAAI,SAAS,WAAW,KAAK;AAC3B,gBAAM,IAAI,MAAM,2BAA2B;AAAA,QAC7C,WAAW,SAAS,WAAW,KAAK;AAClC,gBAAM,IAAI,MAAM,oDAAoD;AAAA,QACtE,OAAO;AACL,gBAAM,IAAI,MAAM,mBAAmB,SAAS,MAAM,IAAI,SAAS,UAAU,EAAE;AAAA,QAC7E;AAAA,MACF;AAEA,YAAM,WAAyB,MAAM,SAAS,KAAA;AAG9C,UAAI,SAAS,cAAc;AACzB,oBAAY,QAAQ;AACpB,qBAAa,QAAQ,SAAS,kBAAkB;AAGhD,cAAM,WAAW,SAAS,yBAAyB,CAAA,GAAI,IAAI,CAAC,WAAgB;AAE1E,cAAI,eAAe,GAAG,OAAO,YAAY,OAAO,CAAC,EAAE,YAAA,IAAgB,OAAO,YAAY,MAAM,CAAC,CAAC;AAE9F,cAAI,OAAO,gBAAgB,YAAY;AAErC,2BAAe,OAAO,eAAe;AAAA,UACvC,WAAW,OAAO,gBAAgB,QAAQ;AACxC,2BAAe,OAAO,eAAe;AAAA,UACvC,WAAW,OAAO,gBAAgB,SAAS;AACzC,2BAAe,OAAO,eAAe;AAAA,UACvC;AAEA,iBAAO;AAAA,YACL,IAAI,OAAO;AAAA,YACX,aAAa,OAAO;AAAA,YACpB,aAAa,OAAO,eAAe;AAAA,YACnC,WAAW;AAAA,YACX,aAAY,oBAAI,KAAA,GAAO,YAAA;AAAA,YACvB,cAAc,OAAO;AAAA;AAAA,YAErB,eAAe,OAAO;AAAA,YACtB,aAAa,OAAO;AAAA,UAAA;AAAA,QAExB,CAAC;AACD,4BAAoB,QAAQ;AAG5B,oBAAY,QAAQ;AAEpB,eAAO;AAAA,MACT;AAGA,kBAAY,QAAQ;AAEpB,aAAO;AAAA,IACT,SAAS,OAAO;AACd,YAAM;AAAA,IACR,UAAA;AACE,kBAAY,QAAQ;AAAA,IACtB;AAAA,EACF;AAEA,QAAM,SAAS,OAAO,aAAyB;AAC7C,gBAAY,QAAQ;AACpB,QAAI;AAIF,YAAM,IAAI,MAAM,0DAA0D;AAAA,IAC5E,UAAA;AACE,kBAAY,QAAQ;AAAA,IACtB;AAAA,EACF;AAEA,QAAM,UAAU,YAAY;AAC1B,iBAAa,QAAQ;AACrB,QAAI;AAEF,4BAAA;AAGA,kBAAY,QAAQ;AACpB,qBAAe,QAAQ;AAGvB,kBAAY,QAAQ;AACpB,mBAAa,QAAQ;AACrB,0BAAoB,QAAQ,CAAA;AAG5B,UAAI,OAAO,WAAW,aAAa;AACjC,qBAAa,WAAW,sBAAsB;AAC9C,qBAAa,WAAW,mBAAmB;AAAA,MAC7C;AAAA,IACF,UAAA;AACE,mBAAa,QAAQ;AAAA,IACvB;AAAA,EACF;AAEA,QAAM,eAAe,YAAY;AAC/B,QAAI,CAAC,eAAe,OAAO,cAAc;AACvC,aAAO;AAAA,IACT;AAGA,sBAAkB,QAAQ;AAC1B,QAAI;AACF,YAAM,WAAW,MAAM,MAAM,OAAO,SAAS,GAAG;AAAA,QAC9C,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,gBAAgB;AAAA,QAAA;AAAA,QAElB,MAAM,KAAK,UAAU;AAAA,UACnB,eAAe,eAAe,MAAM;AAAA,QAAA,CACrC;AAAA,MAAA,CACF;AAED,UAAI,CAAC,SAAS,IAAI;AAChB,YAAI,SAAS,WAAW,KAAK;AAE3B,gBAAM,QAAA;AACN,iBAAO;AAAA,QACT;AACA,cAAM,IAAI,MAAM,yBAAyB,SAAS,MAAM,IAAI,SAAS,UAAU,EAAE;AAAA,MACnF;AAEA,YAAM,YAAY,MAAM,SAAS,KAAA;AAGjC,YAAM,aAAsB;AAAA,QAC1B,aAAa,UAAU;AAAA,QACvB,cAAc,UAAU;AAAA,QACxB,WAAW,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,GAAI;AAAA;AAAA,QAC9C,QAAQ,YAAY,OAAO;AAAA,MAAA;AAG7B,qBAAe,QAAQ;AAGvB,UAAI,OAAO,WAAW,aAAa;AACjC,qBAAa,QAAQ,wBAAwB,KAAK,UAAU,UAAU,CAAC;AAAA,MACzE;AAGA,6BAAA;AAEA,aAAO;AAAA,IACT,SAAS,OAAO;AAEd,YAAM,QAAA;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAEA,QAAM,eAAe,YAAkC;AACrD,QAAI,CAAC,eAAe,OAAO,aAAa;AACtC,YAAM,IAAI,MAAM,2BAA2B;AAAA,IAC7C;AAEA,qBAAiB,QAAQ;AACzB,QAAI;AACF,YAAM,WAAW,MAAM,MAAM,OAAO,SAAS,GAAG;AAAA,QAC9C,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,gBAAgB;AAAA,UAChB,iBAAiB,UAAU,eAAe,MAAM,WAAW;AAAA,QAAA;AAAA,MAC7D,CACD;AAED,UAAI,CAAC,SAAS,IAAI;AAChB,YAAI,SAAS,WAAW,KAAK;AAC3B,gBAAM,IAAI,MAAM,+CAA+C;AAAA,QACjE,OAAO;AACL,gBAAM,IAAI,MAAM,4BAA4B,SAAS,MAAM,IAAI,SAAS,UAAU,EAAE;AAAA,QACtF;AAAA,MACF;AAEA,YAAM,WAAW,MAAM,SAAS,KAAA;AAGhC,kBAAY,QAAQ;AAAA,QAClB,IAAI,SAAS;AAAA,QACb,OAAO,SAAS;AAAA,QAChB,WAAW,SAAS;AAAA,QACpB,UAAU,SAAS;AAAA,QACnB,QAAQ,SAAS;AAAA,QACjB,YAAY,SAAS,cAAc;AAAA,QACnC,eAAe,SAAS;AAAA,QACxB,mBAAmB,SAAS;AAAA,QAC5B,UAAU,SAAS,YAAY,CAAA;AAAA,QAC/B,IAAI,SAAS,MAAM;AAAA,QACnB,OAAO,SAAS,SAAS;AAAA,QACzB,eAAe,SAAS,iBAAiB;AAAA,QACzC,UAAU,SAAS;AAAA,QACnB,uBAAuB,SAAS;AAAA,QAChC,WAAW,SAAS;AAAA,QACpB,WAAW,SAAS,eAAc,oBAAI,KAAA,GAAO,YAAA;AAAA,MAAY;AAI3D,UAAI,OAAO,WAAW,aAAa;AACjC,qBAAa,QAAQ,qBAAqB,KAAK,UAAU,YAAY,KAAK,CAAC;AAAA,MAC7E;AAEA,aAAO,YAAY;AAAA,IACrB,UAAA;AACE,uBAAiB,QAAQ;AAAA,IAC3B;AAAA,EACF;AAEA,QAAM,gBAAgB,OAAO,gBAA+B;AAC1D,QAAI,CAAC,eAAe,OAAO,aAAa;AACtC,YAAM,IAAI,MAAM,2BAA2B;AAAA,IAC7C;AAEA,qBAAiB,QAAQ;AACzB,QAAI;AACF,YAAM,WAAW,MAAM,MAAM,OAAO,SAAS,GAAG;AAAA,QAC9C,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,gBAAgB;AAAA,UAChB,iBAAiB,UAAU,eAAe,MAAM,WAAW;AAAA,QAAA;AAAA,QAE7D,MAAM,KAAK,UAAU;AAAA,UACnB,YAAY,YAAY;AAAA,UACxB,WAAW,YAAY;AAAA,QAAA,CACxB;AAAA,MAAA,CACF;AAED,UAAI,CAAC,SAAS,IAAI;AAChB,YAAI,SAAS,WAAW,KAAK;AAC3B,gBAAM,IAAI,MAAM,+CAA+C;AAAA,QACjE,OAAO;AACL,gBAAM,IAAI,MAAM,0BAA0B,SAAS,MAAM,IAAI,SAAS,UAAU,EAAE;AAAA,QACpF;AAAA,MACF;AAEA,YAAM,kBAAkB,MAAM,SAAS,KAAA;AAGvC,UAAI,YAAY,OAAO;AACrB,oBAAY,QAAQ;AAAA,UAClB,GAAG,YAAY;AAAA;AAAA,UAEf,IAAI,gBAAgB;AAAA,UACpB,OAAO,gBAAgB;AAAA,UACvB,WAAW,gBAAgB;AAAA,UAC3B,UAAU,gBAAgB;AAAA,UAC1B,eAAe,gBAAgB;AAAA,UAC/B,QAAQ,gBAAgB;AAAA,UACxB,YAAY,gBAAgB;AAAA,UAC5B,IAAI,gBAAgB;AAAA,UACpB,OAAO,gBAAgB;AAAA,UACvB,eAAe,gBAAgB;AAAA,UAC/B,UAAU,gBAAgB;AAAA;AAAA,UAC1B,uBAAuB,gBAAgB;AAAA,UACvC,WAAW,gBAAgB;AAAA,UAC3B,WAAW,gBAAgB;AAAA,UAC3B,UAAU,gBAAgB;AAAA,UAC1B,mBAAmB,gBAAgB;AAAA,QAAA;AAIrC,YAAI,OAAO,WAAW,aAAa;AACjC,uBAAa,QAAQ,qBAAqB,KAAK,UAAU,YAAY,KAAK,CAAC;AAAA,QAC7E;AAAA,MACF;AAEA,aAAO,YAAY;AAAA,IACrB,UAAA;AACE,uBAAiB,QAAQ;AAAA,IAC3B;AAAA,EACF;AAEA,QAAM,qBAAqB,OAAO,aAAkB;AAClD,QAAI,CAAC,eAAe,OAAO,aAAa;AACtC,YAAM,IAAI,MAAM,2BAA2B;AAAA,IAC7C;AAEA,qBAAiB,QAAQ;AACzB,QAAI;AACF,YAAM,WAAW,MAAM,MAAM,OAAO,UAAU,GAAG;AAAA,QAC/C,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,gBAAgB;AAAA,UAChB,iBAAiB,UAAU,eAAe,MAAM,WAAW;AAAA,QAAA;AAAA,QAE7D,MAAM,KAAK,UAAU;AAAA,UACnB;AAAA,QAAA,CACD;AAAA,MAAA,CACF;AAED,UAAI,CAAC,SAAS,IAAI;AAChB,YAAI,SAAS,WAAW,KAAK;AAC3B,gBAAM,IAAI,MAAM,+CAA+C;AAAA,QACjE,OAAO;AACL,gBAAM,IAAI,MAAM,2BAA2B,SAAS,MAAM,IAAI,SAAS,UAAU,EAAE;AAAA,QACrF;AAAA,MACF;AAEA,YAAM,kBAAkB,MAAM,SAAS,KAAA;AAGvC,UAAI,YAAY,OAAO;AACrB,oBAAY,QAAQ;AAAA,UAClB,GAAG,YAAY;AAAA,UACf,UAAU,gBAAgB;AAAA,UAC1B,WAAW,gBAAgB,eAAc,oBAAI,KAAA,GAAO,YAAA;AAAA,QAAY;AAIlE,YAAI,OAAO,WAAW,aAAa;AACjC,uBAAa,QAAQ,qBAAqB,KAAK,UAAU,YAAY,KAAK,CAAC;AAAA,QAC7E;AAAA,MACF;AAEA,aAAO,YAAY;AAAA,IACrB,UAAA;AACE,uBAAiB,QAAQ;AAAA,IAC3B;AAAA,EACF;AAEA,QAAM,cAAc,OAAO,UAAkB,aAAqB;AAChE,QAAI,CAAC,eAAe,OAAO,aAAa;AACtC,YAAM,IAAI,MAAM,2BAA2B;AAAA,IAC7C;AAEA,qBAAiB,QAAQ;AACzB,QAAI;AACF,YAAM,WAAW,MAAM,MAAM,OAAO,aAAa,GAAG;AAAA,QAClD,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,gBAAgB;AAAA,UAChB,iBAAiB,UAAU,eAAe,MAAM,WAAW;AAAA,QAAA;AAAA,QAE7D,MAAM,KAAK,UAAU;AAAA,UACnB,WAAW;AAAA,UACX;AAAA,QAAA,CACD;AAAA,MAAA,CACF;AAED,UAAI,CAAC,SAAS,IAAI;AAChB,YAAI,SAAS,WAAW,KAAK;AAC3B,gBAAM,IAAI,MAAM,+CAA+C;AAAA,QACjE,OAAO;AACL,gBAAM,YAAY,MAAM,SAAS,KAAA,EAAO,MAAM,OAAO,CAAA,EAAG;AACxD,gBAAM,IAAI,MAAM,UAAU,WAAW,wBAAwB,SAAS,MAAM,IAAI,SAAS,UAAU,EAAE;AAAA,QACvG;AAAA,MACF;AAEA,YAAM,SAAS,MAAM,SAAS,KAAA;AAG9B,UAAI,YAAY,OAAO;AACrB,oBAAY,QAAQ;AAAA,UAClB,GAAG,YAAY;AAAA,UACf,OAAO;AAAA,UACP,eAAe;AAAA;AAAA,UACf,YAAW,oBAAI,KAAA,GAAO,YAAA;AAAA,QAAY;AAIpC,YAAI,OAAO,WAAW,aAAa;AACjC,uBAAa,QAAQ,qBAAqB,KAAK,UAAU,YAAY,KAAK,CAAC;AAAA,QAC7E;AAAA,MACF;AAEA,aAAO;AAAA,IACT,UAAA;AACE,uBAAiB,QAAQ;AAAA,IAC3B;AAAA,EACF;AAEA,QAAM,YAAY,OAAO,UAAkB,MAAc,eAAe,UAAU;AAChF,QAAI,CAAC,aAAa,OAAO;AACvB,YAAM,IAAI,MAAM,0BAA0B;AAAA,IAC5C;AAEA,mBAAe,QAAQ;AACvB,QAAI;AACF,YAAM,WAAW,eAAe,OAAO,qBAAqB,IAAI,OAAO,iBAAiB;AACxF,YAAM,OAAO,eACT,EAAE,gBAAgB,aAAa,OAAO,aAAa,KAAA,IACnD,EAAE,gBAAgB,aAAa,OAAO,WAAW,UAAU,KAAA;AAE/D,YAAM,WAAW,MAAM,MAAM,UAAU;AAAA,QACrC,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAA;AAAA,QAC3B,MAAM,KAAK,UAAU,IAAI;AAAA,MAAA,CAC1B;AAED,UAAI,CAAC,SAAS,IAAI;AAChB,cAAM,YAAY,MAAM,SAAS,KAAA;AACjC,YAAI,eAAe;AAEnB,YAAI;AACF,gBAAM,YAAY,KAAK,MAAM,SAAS;AACtC,yBAAe,UAAU,WAAW,UAAU,SAAS;AAAA,QACzD,QAAQ;AAEN,yBAAe,aAAa;AAAA,QAC9B;AAEA,cAAM,IAAI,MAAM,YAAY;AAAA,MAC9B;AAEA,YAAM,WAAyB,MAAM,SAAS,KAAA;AAG9C,kBAAY,QAAQ;AACpB,mBAAa,QAAQ;AACrB,0BAAoB,QAAQ,CAAA;AAG5B,kBAAY,QAAQ;AAEpB,aAAO;AAAA,IACT,UAAA;AACE,qBAAe,QAAQ;AAAA,IACzB;AAAA,EACF;AAEA,QAAM,mBAAmB,OAAO,aAAqB;AACnD,QAAI,CAAC,aAAa,OAAO;AACvB,YAAM,IAAI,MAAM,0BAA0B;AAAA,IAC5C;AAEA,sBAAkB,QAAQ;AAC1B,QAAI;AACF,YAAM,WAAW,MAAM,MAAM,OAAO,oBAAoB,GAAG;AAAA,QACzD,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAA;AAAA,QAC3B,MAAM,KAAK,UAAU;AAAA,UACnB,gBAAgB,aAAa;AAAA,UAC7B,WAAW;AAAA,QAAA,CACZ;AAAA,MAAA,CACF;AAED,UAAI,CAAC,SAAS,IAAI;AAChB,cAAM,YAAY,MAAM,SAAS,KAAA;AACjC,YAAI,eAAe;AAEnB,YAAI;AACF,gBAAM,YAAY,KAAK,MAAM,SAAS;AACtC,yBAAe,UAAU,WAAW,UAAU,SAAS;AAAA,QACzD,QAAQ;AAEN,yBAAe,aAAa;AAAA,QAC9B;AAEA,cAAM,IAAI,MAAM,YAAY;AAAA,MAC9B;AAEA,YAAM,SAAS,MAAM,SAAS,KAAA;AAC9B,aAAO;AAAA,IACT,UAAA;AACE,wBAAkB,QAAQ;AAAA,IAC5B;AAAA,EACF;AAEA,QAAM,0BAA0B,OAAO,aAAqB;AAC1D,QAAI,CAAC,aAAa,OAAO;AACvB,YAAM,IAAI,MAAM,0BAA0B;AAAA,IAC5C;AAEA,UAAM,WAAW,MAAM,MAAM,OAAO,sBAAsB,GAAG;AAAA,MAC3D,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,mBAAA;AAAA,MAC3B,MAAM,KAAK,UAAU;AAAA,QACnB,gBAAgB,aAAa;AAAA,QAC7B,WAAW;AAAA,MAAA,CACZ;AAAA,IAAA,CACF;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,YAAY,MAAM,SAAS,KAAA;AACjC,UAAI,eAAe;AAEnB,UAAI;AACF,cAAM,YAAY,KAAK,MAAM,SAAS;AACtC,uBAAe,UAAU,WAAW,UAAU,SAAS;AAAA,MACzD,QAAQ;AACN,uBAAe,aAAa;AAAA,MAC9B;AAEA,YAAM,IAAI,MAAM,YAAY;AAAA,IAC9B;AAEA,WAAO,SAAS,KAAA;AAAA,EAClB;AAEA,QAAM,cAAc,CAAC,iBAA+B;AAClD,QAAI;AAEF,UAAI,aAAa,MAAM;AACrB,oBAAY,QAAQ,aAAa;AAAA,MACnC;AAGA,YAAM,UAAmB;AAAA,QACvB,aAAa,aAAa;AAAA,QAC1B,cAAc,aAAa;AAAA,QAC3B,WAAW,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,GAAI;AAAA;AAAA,QAC9C,QAAQ,YAAY,OAAO,MAAM,aAAa,MAAM;AAAA,MAAA;AAGtD,qBAAe,QAAQ;AAGvB,UAAI,OAAO,WAAW,aAAa;AACjC,qBAAa,QAAQ,wBAAwB,KAAK,UAAU,OAAO,CAAC;AACpE,YAAI,YAAY,OAAO;AACrB,uBAAa,QAAQ,qBAAqB,KAAK,UAAU,YAAY,KAAK,CAAC;AAAA,QAC7E;AAAA,MACF;AAGA,6BAAA;AAAA,IACF,SAAS,OAAO;AACd,cAAQ,MAAM,4BAA4B,KAAK;AAAA,IAEjD;AAAA,EACF;AAGA,QAAM,yBAAyB,MAAM;AAEnC,QAAI,cAAc;AAChB,mBAAa,YAAY;AAAA,IAC3B;AAEA,QAAI,CAAC,eAAe,MAAO;AAG3B,UAAM,0BAAU,KAAA;AAChB,UAAM,YAAY,eAAe,MAAM;AACvC,UAAM,mBAAmB,UAAU,QAAA,IAAY,IAAI,QAAA,IAAa,IAAI,KAAK;AAGzE,QAAI,oBAAoB,GAAG;AACzB,mBAAA;AACA;AAAA,IACF;AAGA,mBAAe,WAAW,YAAY;AACpC,YAAM,UAAU,MAAM,aAAA;AAEtB,UAAI,SAAS;AAEX,+BAAA;AAAA,MACF;AAAA,IACF,GAAG,gBAAgB;AAAA,EACrB;AAEA,QAAM,wBAAwB,MAAM;AAClC,QAAI,cAAc;AAChB,mBAAa,YAAY;AACzB,qBAAe;AAAA,IACjB;AAAA,EACF;AAEA,QAAM,aAAa,YAAY;AAC7B,QAAI,cAAc,MAAO;AAEzB,mBAAe,QAAQ;AACvB,QAAI;AAEF,UAAI,OAAO,WAAW,aAAa;AACjC,cAAM,gBAAgB,aAAa,QAAQ,sBAAsB;AACjE,cAAM,aAAa,aAAa,QAAQ,mBAAmB;AAE3D,YAAI,iBAAiB,YAAY;AAC/B,cAAI;AACF,kBAAM,UAAU,KAAK,MAAM,aAAa;AACxC,kBAAM,OAAO,KAAK,MAAM,UAAU;AAGlC,oBAAQ,YAAY,IAAI,KAAK,QAAQ,SAAS;AAG9C,gBAAI,QAAQ,YAAY,oBAAI,QAAQ;AAClC,6BAAe,QAAQ;AACvB,0BAAY,QAAQ;AAGpB,qCAAA;AAAA,YACF,OAAO;AAEL,2BAAa,WAAW,sBAAsB;AAC9C,2BAAa,WAAW,mBAAmB;AAAA,YAC7C;AAAA,UACF,SAAS,OAAO;AAEd,yBAAa,WAAW,sBAAsB;AAC9C,yBAAa,WAAW,mBAAmB;AAAA,UAC7C;AAAA,QACF;AAAA,MACF;AAEA,oBAAc,QAAQ;AAGtB,YAAM,IAAI,QAAQ,CAAA,YAAW,WAAW,SAAS,EAAE,CAAC;AAAA,IACtD,SAAS,OAAO;AAAA,IAEhB,UAAA;AACE,qBAAe,QAAQ;AAAA,IACzB;AAAA,EACF;AAEA,QAAM,iBAAiB,OAAO,gBAAwB;AACpD,QAAI,CAAC,eAAe,OAAO,aAAa;AACtC,YAAM,IAAI,MAAM,2BAA2B;AAAA,IAC7C;AAEA,qBAAiB,QAAQ;AACzB,QAAI;AACF,YAAM,WAAW,MAAM,MAAM,OAAO,gBAAgB,GAAG;AAAA,QACrD,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,gBAAgB;AAAA,UAChB,iBAAiB,UAAU,eAAe,MAAM,WAAW;AAAA,QAAA;AAAA,QAE7D,MAAM,KAAK,UAAU;AAAA,UACnB,UAAU;AAAA,QAAA,CACX;AAAA,MAAA,CACF;AAED,UAAI,CAAC,SAAS,IAAI;AAChB,cAAM,YAAY,MAAM,SAAS,KAAA,EAAO,MAAM,OAAO,CAAA,EAAG;AACxD,YAAI,SAAS,WAAW,KAAK;AAC3B,gBAAM,IAAI,MAAM,2BAA2B;AAAA,QAC7C,WAAW,UAAU,cAAc;AACjC,gBAAM,IAAI,MAAM,oFAAoF,IAAI,KAAK,UAAU,YAAY,EAAE,mBAAA,CAAoB,EAAE;AAAA,QAC7J;AACA,cAAM,IAAI,MAAM,UAAU,WAAW,2BAA2B,SAAS,MAAM,IAAI,SAAS,UAAU,EAAE;AAAA,MAC1G;AAEA,YAAM,SAAS,MAAM,SAAS,KAAA;AAG9B,UAAI,YAAY,OAAO;AACrB,oBAAY,QAAQ;AAAA,UAClB,GAAG,YAAY;AAAA,UACf,UAAU;AAAA,UACV,wBAAuB,oBAAI,KAAA,GAAO,YAAA;AAAA,UAClC,YAAW,oBAAI,KAAA,GAAO,YAAA;AAAA,QAAY;AAIpC,YAAI,OAAO,WAAW,aAAa;AACjC,uBAAa,QAAQ,qBAAqB,KAAK,UAAU,YAAY,KAAK,CAAC;AAAA,QAC7E;AAAA,MACF;AAEA,aAAO;AAAA,IACT,UAAA;AACE,uBAAiB,QAAQ;AAAA,IAC3B;AAAA,EACF;AAEA,QAAM,sBAAsB,YAAY;AACtC,QAAI,CAAC,eAAe,OAAO,aAAa;AACtC,YAAM,IAAI,MAAM,2BAA2B;AAAA,IAC7C;AAEA,UAAM,WAAW,MAAM,MAAM,OAAO,kBAAkB,GAAG;AAAA,MACvD,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,iBAAiB,UAAU,eAAe,MAAM,WAAW;AAAA,MAAA;AAAA,IAC7D,CACD;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI,MAAM,oCAAoC,SAAS,MAAM,IAAI,SAAS,UAAU,EAAE;AAAA,IAC9F;AAEA,WAAO,SAAS,KAAA;AAAA,EAClB;AAEA,QAAM,4BAA4B,OAAO,aAAqB;AAE5D,UAAM,MAAM,OAAO,2BAA2B,EAAE,QAAQ,cAAc,mBAAmB,QAAQ,CAAC;AAElG,UAAM,WAAW,MAAM,MAAM,KAAK;AAAA,MAChC,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,MAAA;AAAA,IAClB,CACD;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI,MAAM,0CAA0C,SAAS,MAAM,IAAI,SAAS,UAAU,EAAE;AAAA,IACpG;AAEA,WAAO,SAAS,KAAA;AAAA,EAClB;AAGA,QAAM,kBAAkB,YAAY;AAClC,UAAM,WAAW,MAAM,MAAM,OAAO,UAAU,GAAG;AAAA,MAC/C,QAAQ;AAAA,MACR,SAAS,eAAA;AAAA,IAAe,CACzB;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI,MAAM,gCAAgC,SAAS,MAAM,IAAI,SAAS,UAAU,EAAE;AAAA,IAC1F;AAEA,WAAO,SAAS,KAAA;AAAA,EAClB;AAEA,QAAM,kBAAkB,YAAY;AAClC,UAAM,WAAW,MAAM,MAAM,OAAO,eAAe,GAAG;AAAA,MACpD,QAAQ;AAAA,MACR,SAAS,eAAA;AAAA,IAAe,CACzB;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI,MAAM,gCAAgC,SAAS,MAAM,IAAI,SAAS,UAAU,EAAE;AAAA,IAC1F;AAEA,WAAO,SAAS,KAAA;AAAA,EAClB;AAEA,QAAM,gBAAgB,OAAO,cAAsB;AACjD,UAAM,MAAM,OAAO,eAAe,EAAE,QAAQ,gBAAgB,mBAAmB,SAAS,CAAC;AAEzF,UAAM,WAAW,MAAM,MAAM,KAAK;AAAA,MAChC,QAAQ;AAAA,MACR,SAAS,eAAA;AAAA,IAAe,CACzB;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI,MAAM,6BAA6B,SAAS,MAAM,IAAI,SAAS,UAAU,EAAE;AAAA,IACvF;AAEA,WAAO,SAAS,WAAW;AAAA,EAC7B;AAEA,QAAM,yBAAyB,YAAY;AACzC,UAAM,WAAW,MAAM,MAAM,OAAO,mBAAmB,GAAG;AAAA,MACxD,QAAQ;AAAA,MACR,SAAS,eAAA;AAAA,IAAe,CACzB;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI,MAAM,wCAAwC,SAAS,MAAM,IAAI,SAAS,UAAU,EAAE;AAAA,IAClG;AAEA,WAAO,SAAS,WAAW;AAAA,EAC7B;AAGA,MAAI,CAAC,cAAc,OAAO;AACxB,eAAA;AAAA,EACF;AAEA,SAAO;AAAA;AAAA,IAEL,MAAMA,IAAAA,SAAS,MAAM,YAAY,KAAK;AAAA,IACtC,aAAaA,IAAAA,SAAS,MAAM,YAAY,KAAK;AAAA,IAC7C,gBAAgBA,IAAAA,SAAS,MAAM,eAAe,KAAK;AAAA,IACnD;AAAA,IACA,WAAWA,IAAAA,SAAS,MAAM,UAAU,SAAS,CAAC,cAAc,KAAK;AAAA,IACjE,SAASA,IAAAA,SAAS,MAAM,QAAQ,KAAK;AAAA,IACrC;AAAA;AAAA,IAGA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA;AAAA,IAGA,aAAaA,IAAAA,SAAS,MAAM,YAAY,KAAK;AAAA,IAC7C,cAAcA,IAAAA,SAAS,MAAM,aAAa,KAAK;AAAA,IAC/C,qBAAqBA,IAAAA,SAAS,MAAM,oBAAoB,KAAK;AAAA;AAAA,IAG/D;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA;AAAA,IAEA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA;AAAA,IAGE;AAAA,IACA;AAAA;AAAA,IAGA,aAAa,MAAM;AACjB,oBAAc,QAAQ;AACtB,qBAAe,QAAQ;AACvB,iBAAA;AAAA,IACF;AAAA,EAAA;AAEJ;;"}

package/dist/{useStrandsConfig-Bdk-g0jS.js → useStrandsConfig-Cxb360Os.js}

@@ -48,7 +48,12 @@ const DEFAULT_ENDPOINTS = {
   mfaSigninSendEmail: "/api/v1/auth/mfa/email/send",
   mfaSigninVerify: "/api/v1/auth/mfa/verify",
   mfaBackupCodeVerify: "/api/v1/auth/mfa/backup-code/verify",
-  mfaWebAuthnChallenge: "/api/v1/auth/mfa/webauthn/challenge"
+  mfaWebAuthnChallenge: "/api/v1/auth/mfa/webauthn/challenge",
+  // Session management endpoints
+  sessions: "/api/v1/sessions",
+  sessionsStats: "/api/v1/sessions/stats",
+  sessionRevoke: "/api/v1/sessions/{session_id}/revoke",
+  sessionsRevokeAll: "/api/v1/sessions/revoke-all"
 };
 const STRANDS_CONFIG_KEY = Symbol("strands-config");
 const globalConfig = ref(null);
@@ -126,7 +131,12 @@ function useStrandsConfig(fallbackConfig) {
       mfaSigninSendEmail: customEndpoints.mfaSigninSendEmail || DEFAULT_ENDPOINTS.mfaSigninSendEmail,
       mfaSigninVerify: customEndpoints.mfaSigninVerify || DEFAULT_ENDPOINTS.mfaSigninVerify,
       mfaBackupCodeVerify: customEndpoints.mfaBackupCodeVerify || DEFAULT_ENDPOINTS.mfaBackupCodeVerify,
-      mfaWebAuthnChallenge: customEndpoints.mfaWebAuthnChallenge || DEFAULT_ENDPOINTS.mfaWebAuthnChallenge
+      mfaWebAuthnChallenge: customEndpoints.mfaWebAuthnChallenge || DEFAULT_ENDPOINTS.mfaWebAuthnChallenge,
+      // Session management endpoints
+      sessions: customEndpoints.sessions || DEFAULT_ENDPOINTS.sessions,
+      sessionsStats: customEndpoints.sessionsStats || DEFAULT_ENDPOINTS.sessionsStats,
+      sessionRevoke: customEndpoints.sessionRevoke || DEFAULT_ENDPOINTS.sessionRevoke,
+      sessionsRevokeAll: customEndpoints.sessionsRevokeAll || DEFAULT_ENDPOINTS.sessionsRevokeAll
     };
   });
   const getUrl = (endpoint) => {
@@ -167,4 +177,4 @@ export {
   setStrandsConfig as s,
   useStrandsConfig as u
 };
-//# sourceMappingURL=useStrandsConfig-Bdk-g0jS.js.map
+//# sourceMappingURL=useStrandsConfig-Cxb360Os.js.map