@strands.gg/accui 2.17.16 → 2.17.17

package/dist/index.es.js

@@ -3,7 +3,7 @@ import { m as Hu } from "./StrandsUIPlugin-RTFzvRED.es.js";
 import { defineComponent as Ve, computed as H, provide as Yt, onMounted as Ye, onUnmounted as Mt, createElementBlock as o, openBlock as a, normalizeClass as Me, createElementVNode as e, createBlock as ye, renderSlot as Pe, Teleport as Wt, createCommentVNode as I, toDisplayString as R, ref as M, watch as Le, createTextVNode as J, reactive as Ge, withModifiers as qe, createStaticVNode as Qt, createVNode as d, withDirectives as Qe, withCtx as _, unref as i, vModelText as Xe, nextTick as yt, Fragment as De, Transition as rt, createSlots as Ft, normalizeStyle as je, renderList as Ze, mergeProps as xa, useSlots as ha, inject as fa, resolveDynamicComponent as ot, onBeforeUnmount as Ra, withKeys as st, h as oe, isMemoSame as as, getCurrentInstance as ss } from "vue";
 import { u as vt, p as La } from "./useStrandsConfig-CMKVW1p3.es.js";
 import { s as Du } from "./useStrandsConfig-CMKVW1p3.es.js";
-import { u as ft } from "./useStrandsAuth-D0lFZGwG.es.js";
+import { u as ft } from "./useStrandsAuth-DzMk9Hla.es.js";
 const os = { class: "app-content" }, ls = {
   key: 0,
   class: "ui-app-loading-overlay"

package/dist/nuxt/runtime/composables/useStrandsAuth.cjs.js

@@ -1 +1 @@
-"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const e=require("nuxt/app"),a=require("../../../useStrandsAuth-CA_pJ6rc.cjs.js"),u=()=>{const t=e.useRuntimeConfig().public.strandsAuth,n=a.useStrandsAuth();return{...n,initialize:async()=>{await n.initialize()},signIn:async s=>{const i=await n.signIn(s);return i&&t.onSignInUrl&&await e.navigateTo(t.onSignInUrl),i},signUp:async s=>await n.signUp({email:s.email,password:"",firstName:"",lastName:""}),signOut:async()=>{await n.signOut(),t.onSignOutUrl&&await e.navigateTo(t.onSignOutUrl)}}},r=()=>{const{user:t}=u();return{user:t}},o=()=>{const{isAuthenticated:t,isLoading:n}=u();return{isAuthenticated:t,isLoading:n}};exports.useAuthState=o;exports.useAuthUser=r;exports.useStrandsAuth=u;
+"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const e=require("nuxt/app"),a=require("../../../useStrandsAuth-BCnZXu1A.cjs.js"),u=()=>{const t=e.useRuntimeConfig().public.strandsAuth,n=a.useStrandsAuth();return{...n,initialize:async()=>{await n.initialize()},signIn:async s=>{const i=await n.signIn(s);return i&&t.onSignInUrl&&await e.navigateTo(t.onSignInUrl),i},signUp:async s=>await n.signUp({email:s.email,password:"",firstName:"",lastName:""}),signOut:async()=>{await n.signOut(),t.onSignOutUrl&&await e.navigateTo(t.onSignOutUrl)}}},r=()=>{const{user:t}=u();return{user:t}},o=()=>{const{isAuthenticated:t,isLoading:n}=u();return{isAuthenticated:t,isLoading:n}};exports.useAuthState=o;exports.useAuthUser=r;exports.useStrandsAuth=u;

package/dist/nuxt/runtime/composables/useStrandsAuth.es.js

@@ -1,5 +1,5 @@
 import { useRuntimeConfig as e, navigateTo as a } from "nuxt/app";
-import { u as r } from "../../../useStrandsAuth-D0lFZGwG.es.js";
+import { u as r } from "../../../useStrandsAuth-DzMk9Hla.es.js";
 const u = () => {
   const n = e().public.strandsAuth, t = r();
   return {

package/dist/useStrandsAuth-BCnZXu1A.cjs.js

@@ -0,0 +1 @@
+"use strict";const u=require("vue"),we=require("./useStrandsConfig-B5kp4aF9.cjs.js");class ye{cache=new Map;DEFAULT_TTL=300*1e3;async fetch(d,v,g=this.DEFAULT_TTL){const b=Date.now(),i=this.cache.get(d);if(i&&b-i.timestamp<i.ttl)return i.promise;this.cleanExpired();const o=v().finally(()=>{setTimeout(()=>{this.cache.delete(d)},g)});return this.cache.set(d,{promise:o,timestamp:b,ttl:g}),o}clear(){this.cache.clear()}invalidate(d){this.cache.delete(d)}cleanExpired(){const d=Date.now();for(const[v,g]of this.cache.entries())d-g.timestamp>g.ttl&&this.cache.delete(v)}getStats(){return{size:this.cache.size,entries:Array.from(this.cache.keys())}}}const m=new ye;function pe(){return{fetch:m.fetch.bind(m),clear:m.clear.bind(m),invalidate:m.invalidate.bind(m),getStats:m.getStats.bind(m)}}function Se(n,d){let v=null;return(...g)=>{v&&clearTimeout(v),v=setTimeout(()=>{n(...g)},d)}}const F=Se((n,d)=>{typeof window<"u"&&localStorage.setItem(n,d)},300),E=n=>({id:n.id,email:n.email,firstName:n.first_name||n.firstName||"",lastName:n.last_name||n.lastName||"",avatar:n.avatar_url||n.avatar,mfaEnabled:n.mfa_enabled??n.mfaEnabled??!1,emailVerified:n.email_verified??n.emailVerified??!1,passwordUpdatedAt:n.password_updated_at||n.passwordUpdatedAt,settings:n.settings||{},xp:n.xp||0,level:n.level||1,next_level_xp:n.next_level_xp||n.next_level_xp||4,username:n.username,usernameLastChangedAt:n.username_last_changed_at||n.usernameLastChangedAt,createdAt:n.created_at||n.createdAt,updatedAt:n.updated_at||n.updatedAt||new Date().toISOString()}),_e={currentUser:u.ref(null),currentSession:u.ref(null),loadingStates:u.ref({initializing:!0,signingIn:!1,signingUp:!1,signingOut:!1,refreshingToken:!1,sendingMfaEmail:!1,verifyingMfa:!1,loadingProfile:!1}),isInitialized:u.ref(!1),mfaRequired:u.ref(!1),mfaSessionId:u.ref(null),availableMfaMethods:u.ref([])};let T=null,w=null,I=null,x=null;function Te(){const{getUrl:n,config:d}=we.useStrandsConfig(),{fetch:v,clear:g,invalidate:b}=pe(),{currentUser:i,currentSession:o,loadingStates:s,isInitialized:k,mfaRequired:y,mfaSessionId:h,availableMfaMethods:p}=_e,S=()=>{if(i.value=null,o.value=null,y.value=!1,h.value=null,p.value=[],typeof window<"u"&&(localStorage.removeItem("strands_auth_session"),localStorage.removeItem("strands_auth_user")),O(),$(),w=null,g(),typeof window<"u"&&d.value?.onSignOutUrl){const e=window.location.pathname+window.location.search,t=d.value.onSignOutUrl;e!==t&&(window.location.href=t)}},L=u.computed(()=>s.value.initializing),R=u.computed(()=>s.value.signingIn),U=u.computed(()=>s.value.signingUp),q=u.computed(()=>s.value.signingOut),B=u.computed(()=>s.value.refreshingToken),V=u.computed(()=>s.value.sendingMfaEmail),K=u.computed(()=>s.value.verifyingMfa);u.computed(()=>s.value.loadingProfile);const J=u.computed(()=>s.value.signingIn||s.value.signingUp||s.value.signingOut||s.value.refreshingToken||s.value.sendingMfaEmail||s.value.verifyingMfa||s.value.loadingProfile),G=u.computed(()=>s.value.initializing||J.value),H=u.computed(()=>{const e=s.value;return e.initializing?"Checking authentication...":e.signingIn?"Signing you in...":e.signingUp?"Creating your account...":e.signingOut?"Signing you out...":e.refreshingToken?"Refreshing session...":e.sendingMfaEmail?"Sending verification code...":e.verifyingMfa?"Verifying code...":e.loadingProfile?"Loading profile...":"Loading..."}),A=()=>{const e={};return o.value?.accessToken&&(e.Authorization=`Bearer ${o.value.accessToken}`),o.value?.refreshToken&&(e["x-refresh-token"]=o.value.refreshToken),e},W=async(e,t,a)=>{const r=await fetch(n("mfaHardwareCompleteRegistration"),{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${o.value.accessToken}`},body:JSON.stringify({device_id:e,credential:t})});if(!r.ok){const c=await r.text();let l="Failed to complete hardware key registration";try{const f=JSON.parse(c);l=f.message||f.error||c}catch{l=c||"Failed to complete hardware key registration"}throw new Error(l)}return r.json()},Y=async(e,t,a="hardware")=>{const r=await fetch(n("mfaHardwareStartRegistration"),{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${o.value.accessToken}`},body:JSON.stringify({device_name:e,device_type:a})});if(!r.ok){const c=await r.text();let l="Failed to start hardware key registration";try{const f=JSON.parse(c);l=f.message||f.error||c}catch{l=c||"Failed to start hardware key registration"}throw new Error(l)}return r.json()},Q=u.computed(()=>i.value!==null),X=async e=>{s.value.signingIn=!0;try{y.value=!1,h.value=null,p.value=[];const t={"Content-Type":"application/json"};typeof window<"u"&&window.location&&(t.Origin=window.location.origin);const a=await fetch(n("signIn"),{method:"POST",headers:t,body:JSON.stringify(e)});if(!a.ok)throw a.status===401?new Error("Invalid email or password"):a.status===403?new Error("Please verify your email address before signing in"):new Error(`Sign in failed: ${a.status} ${a.statusText}`);const r=await a.json();if(r.mfa_required){y.value=!0,h.value=r.mfa_session_id||null;const c=(r.available_mfa_methods||[]).map(l=>{let f=`${l.device_type.charAt(0).toUpperCase()+l.device_type.slice(1)} Authentication`;return l.device_type==="hardware"?f=l.device_name||"Security Key":l.device_type==="totp"?f=l.device_name||"Authenticator App":l.device_type==="email"&&(f=l.device_name||"Email Verification"),{id:l.device_id,device_type:l.device_type,device_name:l.device_name||f,is_active:!0,created_at:new Date().toISOString(),last_used_at:l.last_used_at,credential_id:l.credential_id,device_info:l.device_info}});return p.value=c,s.value.signingIn=!1,r}return await C(r),r}catch(t){throw t}finally{s.value.signingIn=!1}},Z=async e=>{s.value.signingUp=!0;try{throw new Error("Sign up not implemented - please integrate with auth SDK")}finally{s.value.signingUp=!1}},ee=async()=>{s.value.signingOut=!0;try{O(),$(),w=null,g(),i.value=null,o.value=null,y.value=!1,h.value=null,p.value=[],typeof window<"u"&&(localStorage.removeItem("strands_auth_session"),localStorage.removeItem("strands_auth_user")),typeof window<"u"&&d.value?.onSignOutUrl&&(window.location.href=d.value.onSignOutUrl)}finally{s.value.signingOut=!1}},P=async()=>{if(!o.value?.refreshToken)return!1;if(w)return await w;w=(async()=>{s.value.refreshingToken=!0;try{const t=await fetch(n("refresh"),{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({refresh_token:o.value.refreshToken})});if(!t.ok){if(t.status===401)return S(),!1;throw new Error(`Token refresh failed: ${t.status} ${t.statusText}`)}const a=await t.json();a.user&&(i.value=E(a.user),i.value&&typeof window<"u"&&localStorage.setItem("strands_auth_user",JSON.stringify(i.value)));const r={accessToken:a.access_token,refreshToken:a.refresh_token,expiresAt:new Date(Date.now()+300*1e3),userId:a.user?.id||i.value?.id};return o.value=r,typeof window<"u"&&localStorage.setItem("strands_auth_session",JSON.stringify(r)),_(),M(),b(`sessions:${o.value.accessToken.slice(0,20)}`),!0}catch{return S(),!1}finally{s.value.refreshingToken=!1}})();const e=await w;return w=null,e},te=async()=>{const e=`profile:${o.value.accessToken.slice(0,20)}`;s.value.loadingProfile=!0;try{return await v(e,async()=>{const t=await fetch(n("profile"),{method:"GET",headers:{"Content-Type":"application/json",Authorization:`Bearer ${o.value?.accessToken}`}});if(!t.ok)throw t.status===401?new Error("Authentication expired. Please sign in again."):new Error(`Failed to fetch profile: ${t.status} ${t.statusText}`);const a=await t.json();return i.value=E(a),i.value&&typeof window<"u"&&localStorage.setItem("strands_auth_user",JSON.stringify(i.value)),i.value})}finally{s.value.loadingProfile=!1}},ae=async e=>{s.value.loadingProfile=!0;try{const t=await fetch(n("profile"),{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${o.value.accessToken}`},body:JSON.stringify({first_name:e.firstName,last_name:e.lastName})});if(!t.ok)throw t.status===401?new Error("Authentication expired. Please sign in again."):new Error(`Profile update failed: ${t.status} ${t.statusText}`);const a=await t.json();return i.value=E(a),i.value&&F("strands_auth_user",JSON.stringify(i.value)),i.value}finally{s.value.loadingProfile=!1}},ne=async e=>{s.value.loadingProfile=!0;try{const t=await fetch(n("settings"),{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${o.value.accessToken}`},body:JSON.stringify({settings:e})});if(!t.ok)throw t.status===401?new Error("Authentication expired. Please sign in again."):new Error(`Settings update failed: ${t.status} ${t.statusText}`);const a=await t.json();return i.value=E(a),i.value&&F("strands_auth_user",JSON.stringify(i.value)),i.value}finally{s.value.loadingProfile=!1}},se=async(e,t)=>{s.value.loadingProfile=!0;try{const a=await fetch(n("changeEmail"),{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${o.value.accessToken}`},body:JSON.stringify({new_email:e,password:t})});if(!a.ok){if(a.status===401)throw new Error("Authentication expired. Please sign in again.");{const c=await a.json().catch(()=>({}));throw new Error(c.message||`Email change failed: ${a.status} ${a.statusText}`)}}const r=await a.json();return i.value&&(i.value={...i.value,email:e,emailVerified:!1,updatedAt:new Date().toISOString()},typeof window<"u"&&localStorage.setItem("strands_auth_user",JSON.stringify(i.value))),r}finally{s.value.loadingProfile=!1}},ie=async(e,t,a=!1)=>{if(!h.value)throw new Error("No MFA session available");s.value.verifyingMfa=!0;try{const r=n(a?"mfaBackupCodeVerify":"mfaSigninVerify"),c=a?{mfa_session_id:h.value,backup_code:t}:{mfa_session_id:h.value,device_id:e,code:t},l=await fetch(r,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(c)});if(!l.ok){const D=await l.text();let j="MFA verification failed";try{const z=JSON.parse(D);j=z.message||z.error||D}catch{j=D||"MFA verification failed"}throw new Error(j)}const f=await l.json();return y.value=!1,h.value=null,p.value=[],await C(f),f}finally{s.value.verifyingMfa=!1}},re=async e=>{if(!h.value)throw new Error("No MFA session available");s.value.sendingMfaEmail=!0;try{const t=await fetch(n("mfaSigninSendEmail"),{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({mfa_session_id:h.value,device_id:e})});if(!t.ok){const r=await t.text();let c="Failed to send MFA email code";try{const l=JSON.parse(r);c=l.message||l.error||r}catch{c=r||"Failed to send MFA email code"}throw new Error(c)}return await t.json()}finally{s.value.sendingMfaEmail=!1}},oe=async e=>{if(!h.value)throw new Error("No MFA session available");const t=await fetch(n("mfaWebAuthnChallenge"),{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({mfa_session_id:h.value,device_id:e})});if(!t.ok){const a=await t.text();let r="Failed to get WebAuthn challenge";try{const c=JSON.parse(a);r=c.message||c.error||a}catch{r=a||r}throw new Error(r)}return t.json()},C=async e=>{try{e.user&&(i.value=E(e.user));const t={accessToken:e.access_token,refreshToken:e.refresh_token,expiresAt:new Date(Date.now()+300*1e3),userId:i.value?.id||e.user?.id};o.value=t,typeof window<"u"&&(localStorage.setItem("strands_auth_session",JSON.stringify(t)),i.value&&localStorage.setItem("strands_auth_user",JSON.stringify(i.value))),_(),M()}catch{}},_=()=>{if(T&&clearTimeout(T),!o.value||typeof document<"u"&&document.visibilityState==="hidden")return;const e=new Date,a=o.value.expiresAt.getTime()-e.getTime()-60*1e3;if(a<=0){P();return}T=setTimeout(async()=>{(typeof document>"u"||document.visibilityState==="visible")&&await P()&&_()},a)},O=()=>{T&&(clearTimeout(T),T=null)},M=()=>{I||typeof window>"u"||(I=setInterval(()=>{i.value&&o.value&&(localStorage.getItem("strands_auth_session")||($(),S()))},2e3))},$=()=>{I&&(clearInterval(I),I=null)},N=async()=>{if(k.value){s.value.initializing=!1;return}return x||(x=(async()=>{s.value.initializing=!0;try{if(typeof window<"u"){const e=localStorage.getItem("strands_auth_session"),t=localStorage.getItem("strands_auth_user");if(e&&t)try{const a=JSON.parse(e),r=JSON.parse(t);a.expiresAt=new Date(a.expiresAt),a.expiresAt<=new Date&&a.refreshToken?(o.value=a,i.value=r,await Promise.race([P(),new Promise(f=>setTimeout(()=>f(!1),5e3))])||S()):a.expiresAt>new Date?(o.value=a,i.value=r,_(),M()):(localStorage.removeItem("strands_auth_session"),localStorage.removeItem("strands_auth_user"))}catch{localStorage.removeItem("strands_auth_session"),localStorage.removeItem("strands_auth_user")}}k.value=!0,await new Promise(e=>setTimeout(e,50))}catch(e){console.error("[useStrandsAuth] initialization error:",e)}finally{s.value.initializing=!1,x=null}})(),x)},le=async e=>{s.value.loadingProfile=!0;try{const t=await fetch(n("changeUsername"),{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${o.value.accessToken}`},body:JSON.stringify({username:e})});if(!t.ok){const r=await t.json().catch(()=>({}));throw t.status===409?new Error("Username is already taken"):r.cooldown_end?new Error(`You can only change your username once every 30 days. You can change it again on ${new Date(r.cooldown_end).toLocaleDateString()}`):new Error(r.message||`Username change failed: ${t.status} ${t.statusText}`)}const a=await t.json();return i.value&&(i.value={...i.value,username:e,usernameLastChangedAt:new Date().toISOString(),updatedAt:new Date().toISOString()},typeof window<"u"&&localStorage.setItem("strands_auth_user",JSON.stringify(i.value))),a}finally{s.value.loadingProfile=!1}},ue=async()=>{const e=await fetch(n("usernameCooldown"),{method:"GET",headers:{Authorization:`Bearer ${o.value.accessToken}`}});if(!e.ok)throw new Error(`Failed to get username cooldown: ${e.status} ${e.statusText}`);return e.json()},ce=async e=>{const t=n("checkUsernameAvailability").replace("{username}",encodeURIComponent(e)),a=await fetch(t,{method:"GET",headers:{"Content-Type":"application/json"}});if(!a.ok)throw new Error(`Failed to check username availability: ${a.status} ${a.statusText}`);return a.json()},de=async()=>{const e=`sessions:${o.value?.accessToken?.slice(0,20)||"no-token"}`;try{return await v(e,async()=>{const t=A(),a=await fetch(n("sessions"),{method:"GET",headers:t});if(!a.ok)throw await a.text(),new Error(`Failed to get user sessions: ${a.status} ${a.statusText}`);return a.json()},120*1e3)}catch(t){throw t}},fe=async()=>{const e=await fetch(n("sessionsStats"),{method:"GET",headers:A()});if(!e.ok)throw new Error(`Failed to get session stats: ${e.status} ${e.statusText}`);return e.json()},he=async e=>{const t=n("sessionRevoke").replace("{session_id}",encodeURIComponent(e)),a=await fetch(t,{method:"POST",headers:A()});if(!a.ok)throw new Error(`Failed to revoke session: ${a.status} ${a.statusText}`);return a.status===200},ge=async()=>{const e=await fetch(n("sessionsRevokeAll"),{method:"POST",headers:A()});if(!e.ok)throw new Error(`Failed to revoke all other sessions: ${e.status} ${e.statusText}`);return e.status===200};typeof document<"u"&&document.addEventListener("visibilitychange",()=>{document.visibilityState==="visible"&&o.value?(_(),ve()):document.visibilityState==="hidden"&&O()}),typeof window<"u"&&window.addEventListener("storage",e=>{(e.key==="strands_auth_session"||e.key==="strands_auth_user")&&!e.newValue&&i.value&&S()});const ve=()=>{if(!(typeof window>"u")&&i.value&&o.value){const e=localStorage.getItem("strands_auth_session"),t=localStorage.getItem("strands_auth_user");(!e||!t)&&S()}},me=()=>{O(),$(),g()};try{u.getCurrentInstance()&&u.onUnmounted(me)}catch{}return k.value||N(),{user:u.computed(()=>i.value),currentUser:u.computed(()=>i.value),currentSession:u.computed(()=>o.value),isAuthenticated:Q,isLoading:u.computed(()=>G.value||!k.value),loading:J,loadingMessage:H,isInitializing:L,isSigningIn:R,isSigningUp:U,isSigningOut:q,isRefreshingToken:B,isSendingMfaEmail:V,isVerifyingMfa:K,mfaRequired:u.computed(()=>y.value),mfaSessionId:u.computed(()=>h.value),availableMfaMethods:u.computed(()=>p.value),signIn:X,signUp:Z,signOut:ee,refreshToken:P,fetchProfile:te,updateProfile:ae,updateUserSettings:ne,changeEmail:se,changeUsername:le,getUsernameCooldown:ue,checkUsernameAvailability:ce,getUserSessions:de,getSessionStats:fe,revokeSession:he,revokeAllOtherSessions:ge,initialize:N,setAuthData:C,verifyMfa:ie,sendMfaEmailCode:re,getMfaWebAuthnChallenge:oe,registerHardwareKey:Y,completeHardwareKeyRegistration:W,startTokenRefreshTimer:_,stopTokenRefreshTimer:O,getAuthHeaders:A,forceReInit:()=>{k.value=!1,s.value.initializing=!0,N()}}}exports.useStrandsAuth=Te;

package/dist/{useStrandsAuth-D0lFZGwG.es.js → useStrandsAuth-DzMk9Hla.es.js}

@@ -1,6 +1,6 @@
-import { computed as c, ref as m, getCurrentInstance as me, onUnmounted as ye } from "vue";
-import { u as pe } from "./useStrandsConfig-CMKVW1p3.es.js";
-class Se {
+import { computed as c, ref as m, getCurrentInstance as ye, onUnmounted as pe } from "vue";
+import { u as Se } from "./useStrandsConfig-CMKVW1p3.es.js";
+class _e {
   cache = /* @__PURE__ */ new Map();
   DEFAULT_TTL = 300 * 1e3;
   // 5 minutes
@@ -8,8 +8,8 @@ class Se {
    * Memoized fetch - prevents duplicate requests and caches results
    */
   async fetch(f, v, g = this.DEFAULT_TTL) {
-    const b = Date.now(), i = this.cache.get(f);
-    if (i && b - i.timestamp < i.ttl)
+    const P = Date.now(), i = this.cache.get(f);
+    if (i && P - i.timestamp < i.ttl)
       return i.promise;
     this.cleanExpired();
     const o = v().finally(() => {
@@ -19,7 +19,7 @@ class Se {
     });
     return this.cache.set(f, {
       promise: o,
-      timestamp: b,
+      timestamp: P,
       ttl: g
     }), o;
   }
@@ -53,8 +53,8 @@ class Se {
     };
   }
 }
-const w = new Se();
-function _e() {
+const w = new _e();
+function Te() {
   return {
     fetch: w.fetch.bind(w),
     clear: w.clear.bind(w),
@@ -62,7 +62,7 @@ function _e() {
     getStats: w.getStats.bind(w)
   };
 }
-function Te(n, f) {
+function ke(n, f) {
   let v = null;
   return (...g) => {
     v && clearTimeout(v), v = setTimeout(() => {
@@ -70,9 +70,9 @@ function Te(n, f) {
     }, f);
   };
 }
-const F = Te((n, f) => {
+const L = ke((n, f) => {
   typeof window < "u" && localStorage.setItem(n, f);
-}, 300), E = (n) => ({
+}, 300), I = (n) => ({
   id: n.id,
   email: n.email,
   firstName: n.first_name || n.firstName || "",
@@ -89,7 +89,7 @@ const F = Te((n, f) => {
   usernameLastChangedAt: n.username_last_changed_at || n.usernameLastChangedAt,
   createdAt: n.created_at || n.createdAt,
   updatedAt: n.updated_at || n.updatedAt || (/* @__PURE__ */ new Date()).toISOString()
-}), ke = {
+}), Ae = {
   currentUser: m(null),
   currentSession: m(null),
   loadingStates: m({
@@ -107,24 +107,24 @@ const F = Te((n, f) => {
   mfaSessionId: m(null),
   availableMfaMethods: m([])
 };
-let A = null, y = null, x = null;
+let k = null, y = null, x = null, b = null;
 function Ie() {
-  const { getUrl: n, config: f } = pe(), { fetch: v, clear: g, invalidate: b } = _e(), { currentUser: i, currentSession: o, loadingStates: s, isInitialized: p, mfaRequired: S, mfaSessionId: h, availableMfaMethods: _ } = ke, T = () => {
-    if (i.value = null, o.value = null, S.value = !1, h.value = null, _.value = [], typeof window < "u" && (localStorage.removeItem("strands_auth_session"), localStorage.removeItem("strands_auth_user")), I(), $(), y = null, g(), typeof window < "u" && f.value?.onSignOutUrl) {
+  const { getUrl: n, config: f } = Se(), { fetch: v, clear: g, invalidate: P } = Te(), { currentUser: i, currentSession: o, loadingStates: s, isInitialized: A, mfaRequired: p, mfaSessionId: h, availableMfaMethods: S } = Ae, _ = () => {
+    if (i.value = null, o.value = null, p.value = !1, h.value = null, S.value = [], typeof window < "u" && (localStorage.removeItem("strands_auth_session"), localStorage.removeItem("strands_auth_user")), E(), M(), y = null, g(), typeof window < "u" && f.value?.onSignOutUrl) {
       const e = window.location.pathname + window.location.search, t = f.value.onSignOutUrl;
       e !== t && (window.location.href = t);
     }
-  }, L = c(() => s.value.initializing), R = c(() => s.value.signingIn), U = c(() => s.value.signingUp), B = c(() => s.value.signingOut), V = c(() => s.value.refreshingToken), q = c(() => s.value.sendingMfaEmail), K = c(() => s.value.verifyingMfa);
+  }, R = c(() => s.value.initializing), U = c(() => s.value.signingIn), B = c(() => s.value.signingUp), V = c(() => s.value.signingOut), q = c(() => s.value.refreshingToken), K = c(() => s.value.sendingMfaEmail), G = c(() => s.value.verifyingMfa);
   c(() => s.value.loadingProfile);
   const z = c(
     () => s.value.signingIn || s.value.signingUp || s.value.signingOut || s.value.refreshingToken || s.value.sendingMfaEmail || s.value.verifyingMfa || s.value.loadingProfile
-  ), G = c(() => s.value.initializing || z.value), H = c(() => {
+  ), H = c(() => s.value.initializing || z.value), W = c(() => {
     const e = s.value;
     return e.initializing ? "Checking authentication..." : e.signingIn ? "Signing you in..." : e.signingUp ? "Creating your account..." : e.signingOut ? "Signing you out..." : e.refreshingToken ? "Refreshing session..." : e.sendingMfaEmail ? "Sending verification code..." : e.verifyingMfa ? "Verifying code..." : e.loadingProfile ? "Loading profile..." : "Loading...";
   }), O = () => {
     const e = {};
     return o.value?.accessToken && (e.Authorization = `Bearer ${o.value.accessToken}`), o.value?.refreshToken && (e["x-refresh-token"] = o.value.refreshToken), e;
-  }, W = async (e, t, a) => {
+  }, Y = async (e, t, a) => {
     const r = await fetch(n("mfaHardwareCompleteRegistration"), {
       method: "POST",
       headers: {
@@ -148,7 +148,7 @@ function Ie() {
       throw new Error(l);
     }
     return r.json();
-  }, Y = async (e, t, a = "hardware") => {
+  }, Q = async (e, t, a = "hardware") => {
     const r = await fetch(n("mfaHardwareStartRegistration"), {
       method: "POST",
       headers: {
@@ -172,10 +172,10 @@ function Ie() {
       throw new Error(l);
     }
     return r.json();
-  }, Q = c(() => i.value !== null), X = async (e) => {
+  }, X = c(() => i.value !== null), Z = async (e) => {
     s.value.signingIn = !0;
     try {
-      S.value = !1, h.value = null, _.value = [];
+      p.value = !1, h.value = null, S.value = [];
       const t = {
         "Content-Type": "application/json"
       };
@@ -189,7 +189,7 @@ function Ie() {
         throw a.status === 401 ? new Error("Invalid email or password") : a.status === 403 ? new Error("Please verify your email address before signing in") : new Error(`Sign in failed: ${a.status} ${a.statusText}`);
       const r = await a.json();
       if (r.mfa_required) {
-        S.value = !0, h.value = r.mfa_session_id || null;
+        p.value = !0, h.value = r.mfa_session_id || null;
         const u = (r.available_mfa_methods || []).map((l) => {
           let d = `${l.device_type.charAt(0).toUpperCase() + l.device_type.slice(1)} Authentication`;
           return l.device_type === "hardware" ? d = l.device_name || "Security Key" : l.device_type === "totp" ? d = l.device_name || "Authenticator App" : l.device_type === "email" && (d = l.device_name || "Email Verification"), {
@@ -204,29 +204,29 @@ function Ie() {
             device_info: l.device_info
           };
         });
-        return _.value = u, s.value.signingIn = !1, r;
+        return S.value = u, s.value.signingIn = !1, r;
       }
-      return await M(r), r;
+      return await N(r), r;
     } catch (t) {
       throw t;
     } finally {
       s.value.signingIn = !1;
     }
-  }, Z = async (e) => {
+  }, ee = async (e) => {
     s.value.signingUp = !0;
     try {
       throw new Error("Sign up not implemented - please integrate with auth SDK");
     } finally {
       s.value.signingUp = !1;
     }
-  }, ee = async () => {
+  }, te = async () => {
     s.value.signingOut = !0;
     try {
-      I(), $(), y = null, g(), i.value = null, o.value = null, S.value = !1, h.value = null, _.value = [], typeof window < "u" && (localStorage.removeItem("strands_auth_session"), localStorage.removeItem("strands_auth_user")), typeof window < "u" && f.value?.onSignOutUrl && (window.location.href = f.value.onSignOutUrl);
+      E(), M(), y = null, g(), i.value = null, o.value = null, p.value = !1, h.value = null, S.value = [], typeof window < "u" && (localStorage.removeItem("strands_auth_session"), localStorage.removeItem("strands_auth_user")), typeof window < "u" && f.value?.onSignOutUrl && (window.location.href = f.value.onSignOutUrl);
     } finally {
       s.value.signingOut = !1;
     }
-  }, P = async () => {
+  }, $ = async () => {
     if (!o.value?.refreshToken)
       return !1;
     if (y)
@@ -245,11 +245,11 @@ function Ie() {
         });
         if (!t.ok) {
           if (t.status === 401)
-            return T(), !1;
+            return _(), !1;
           throw new Error(`Token refresh failed: ${t.status} ${t.statusText}`);
         }
         const a = await t.json();
-        a.user && (i.value = E(a.user), i.value && typeof window < "u" && localStorage.setItem("strands_auth_user", JSON.stringify(i.value)));
+        a.user && (i.value = I(a.user), i.value && typeof window < "u" && localStorage.setItem("strands_auth_user", JSON.stringify(i.value)));
         const r = {
           accessToken: a.access_token,
           refreshToken: a.refresh_token,
@@ -257,16 +257,16 @@ function Ie() {
           // 5 minutes from now
           userId: a.user?.id || i.value?.id
         };
-        return o.value = r, typeof window < "u" && localStorage.setItem("strands_auth_session", JSON.stringify(r)), k(), N(), b(`sessions:${o.value.accessToken.slice(0, 20)}`), !0;
+        return o.value = r, typeof window < "u" && localStorage.setItem("strands_auth_session", JSON.stringify(r)), T(), C(), P(`sessions:${o.value.accessToken.slice(0, 20)}`), !0;
       } catch {
-        return T(), !1;
+        return _(), !1;
       } finally {
         s.value.refreshingToken = !1;
       }
     })();
     const e = await y;
     return y = null, e;
-  }, te = async () => {
+  }, ae = async () => {
     const e = `profile:${o.value.accessToken.slice(0, 20)}`;
     s.value.loadingProfile = !0;
     try {
@@ -281,12 +281,12 @@ function Ie() {
         if (!t.ok)
           throw t.status === 401 ? new Error("Authentication expired. Please sign in again.") : new Error(`Failed to fetch profile: ${t.status} ${t.statusText}`);
         const a = await t.json();
-        return i.value = E(a), i.value && typeof window < "u" && localStorage.setItem("strands_auth_user", JSON.stringify(i.value)), i.value;
+        return i.value = I(a), i.value && typeof window < "u" && localStorage.setItem("strands_auth_user", JSON.stringify(i.value)), i.value;
       });
     } finally {
       s.value.loadingProfile = !1;
     }
-  }, ae = async (e) => {
+  }, ne = async (e) => {
     s.value.loadingProfile = !0;
     try {
       const t = await fetch(n("profile"), {
@@ -303,11 +303,11 @@ function Ie() {
       if (!t.ok)
         throw t.status === 401 ? new Error("Authentication expired. Please sign in again.") : new Error(`Profile update failed: ${t.status} ${t.statusText}`);
       const a = await t.json();
-      return i.value = E(a), i.value && F("strands_auth_user", JSON.stringify(i.value)), i.value;
+      return i.value = I(a), i.value && L("strands_auth_user", JSON.stringify(i.value)), i.value;
     } finally {
       s.value.loadingProfile = !1;
     }
-  }, ne = async (e) => {
+  }, se = async (e) => {
     s.value.loadingProfile = !0;
     try {
       const t = await fetch(n("settings"), {
@@ -323,11 +323,11 @@ function Ie() {
       if (!t.ok)
         throw t.status === 401 ? new Error("Authentication expired. Please sign in again.") : new Error(`Settings update failed: ${t.status} ${t.statusText}`);
       const a = await t.json();
-      return i.value = E(a), i.value && F("strands_auth_user", JSON.stringify(i.value)), i.value;
+      return i.value = I(a), i.value && L("strands_auth_user", JSON.stringify(i.value)), i.value;
     } finally {
       s.value.loadingProfile = !1;
     }
-  }, se = async (e, t) => {
+  }, ie = async (e, t) => {
     s.value.loadingProfile = !0;
     try {
       const a = await fetch(n("changeEmail"), {
@@ -360,7 +360,7 @@ function Ie() {
     } finally {
       s.value.loadingProfile = !1;
     }
-  }, ie = async (e, t, a = !1) => {
+  }, re = async (e, t, a = !1) => {
     if (!h.value)
       throw new Error("No MFA session available");
     s.value.verifyingMfa = !0;
@@ -371,22 +371,22 @@ function Ie() {
         body: JSON.stringify(u)
       });
       if (!l.ok) {
-        const D = await l.text();
-        let j = "MFA verification failed";
+        const j = await l.text();
+        let J = "MFA verification failed";
         try {
-          const J = JSON.parse(D);
-          j = J.message || J.error || D;
+          const F = JSON.parse(j);
+          J = F.message || F.error || j;
         } catch {
-          j = D || "MFA verification failed";
+          J = j || "MFA verification failed";
         }
-        throw new Error(j);
+        throw new Error(J);
       }
       const d = await l.json();
-      return S.value = !1, h.value = null, _.value = [], await M(d), d;
+      return p.value = !1, h.value = null, S.value = [], await N(d), d;
     } finally {
       s.value.verifyingMfa = !1;
     }
-  }, re = async (e) => {
+  }, oe = async (e) => {
     if (!h.value)
       throw new Error("No MFA session available");
     s.value.sendingMfaEmail = !0;
@@ -414,7 +414,7 @@ function Ie() {
     } finally {
       s.value.sendingMfaEmail = !1;
     }
-  }, oe = async (e) => {
+  }, le = async (e) => {
     if (!h.value)
       throw new Error("No MFA session available");
     const t = await fetch(n("mfaWebAuthnChallenge"), {
@@ -437,9 +437,9 @@ function Ie() {
       throw new Error(r);
     }
     return t.json();
-  }, M = async (e) => {
+  }, N = async (e) => {
     try {
-      e.user && (i.value = E(e.user));
+      e.user && (i.value = I(e.user));
       const t = {
         accessToken: e.access_token,
         refreshToken: e.refresh_token,
@@ -447,55 +447,57 @@ function Ie() {
         // 5 minutes from now (matching API token expiry)
         userId: i.value?.id || e.user?.id
       };
-      o.value = t, typeof window < "u" && (localStorage.setItem("strands_auth_session", JSON.stringify(t)), i.value && localStorage.setItem("strands_auth_user", JSON.stringify(i.value))), k(), N();
+      o.value = t, typeof window < "u" && (localStorage.setItem("strands_auth_session", JSON.stringify(t)), i.value && localStorage.setItem("strands_auth_user", JSON.stringify(i.value))), T(), C();
     } catch {
     }
-  }, k = () => {
-    if (A && clearTimeout(A), !o.value || typeof document < "u" && document.visibilityState === "hidden")
+  }, T = () => {
+    if (k && clearTimeout(k), !o.value || typeof document < "u" && document.visibilityState === "hidden")
       return;
     const e = /* @__PURE__ */ new Date(), a = o.value.expiresAt.getTime() - e.getTime() - 60 * 1e3;
     if (a <= 0) {
-      P();
+      $();
       return;
     }
-    A = setTimeout(async () => {
-      (typeof document > "u" || document.visibilityState === "visible") && await P() && k();
+    k = setTimeout(async () => {
+      (typeof document > "u" || document.visibilityState === "visible") && await $() && T();
     }, a);
-  }, I = () => {
-    A && (clearTimeout(A), A = null);
-  }, N = () => {
+  }, E = () => {
+    k && (clearTimeout(k), k = null);
+  }, C = () => {
     x || typeof window > "u" || (x = setInterval(() => {
-      i.value && o.value && (localStorage.getItem("strands_auth_session") || ($(), T()));
+      i.value && o.value && (localStorage.getItem("strands_auth_session") || (M(), _()));
     }, 2e3));
-  }, $ = () => {
+  }, M = () => {
     x && (clearInterval(x), x = null);
-  }, C = async () => {
-    if (console.log("[useStrandsAuth] initialize() called, isInitialized:", p.value), p.value) {
-      console.log("[useStrandsAuth] Already initialized, setting initializing=false"), s.value.initializing = !1;
+  }, D = async () => {
+    if (A.value) {
+      s.value.initializing = !1;
       return;
     }
-    s.value.initializing = !0, console.log("[useStrandsAuth] Starting initialization...");
-    try {
-      if (typeof window < "u") {
-        const e = localStorage.getItem("strands_auth_session"), t = localStorage.getItem("strands_auth_user");
-        if (e && t)
-          try {
-            const a = JSON.parse(e), r = JSON.parse(t);
-            a.expiresAt = new Date(a.expiresAt), a.expiresAt <= /* @__PURE__ */ new Date() && a.refreshToken ? (o.value = a, i.value = r, await Promise.race([
-              P(),
-              new Promise((d) => setTimeout(() => d(!1), 5e3))
-            ]) || T()) : a.expiresAt > /* @__PURE__ */ new Date() ? (o.value = a, i.value = r, k(), N()) : (localStorage.removeItem("strands_auth_session"), localStorage.removeItem("strands_auth_user"));
-          } catch {
-            localStorage.removeItem("strands_auth_session"), localStorage.removeItem("strands_auth_user");
-          }
+    return b || (b = (async () => {
+      s.value.initializing = !0;
+      try {
+        if (typeof window < "u") {
+          const e = localStorage.getItem("strands_auth_session"), t = localStorage.getItem("strands_auth_user");
+          if (e && t)
+            try {
+              const a = JSON.parse(e), r = JSON.parse(t);
+              a.expiresAt = new Date(a.expiresAt), a.expiresAt <= /* @__PURE__ */ new Date() && a.refreshToken ? (o.value = a, i.value = r, await Promise.race([
+                $(),
+                new Promise((d) => setTimeout(() => d(!1), 5e3))
+              ]) || _()) : a.expiresAt > /* @__PURE__ */ new Date() ? (o.value = a, i.value = r, T(), C()) : (localStorage.removeItem("strands_auth_session"), localStorage.removeItem("strands_auth_user"));
+            } catch {
+              localStorage.removeItem("strands_auth_session"), localStorage.removeItem("strands_auth_user");
+            }
+        }
+        A.value = !0, await new Promise((e) => setTimeout(e, 50));
+      } catch (e) {
+        console.error("[useStrandsAuth] initialization error:", e);
+      } finally {
+        s.value.initializing = !1, b = null;
       }
-      p.value = !0, console.log("[useStrandsAuth] isInitialized set to true"), await new Promise((e) => setTimeout(e, 50));
-    } catch (e) {
-      console.error("[useStrandsAuth] initialization error:", e);
-    } finally {
-      console.log("[useStrandsAuth] finally block - setting initializing=false"), s.value.initializing = !1;
-    }
-  }, le = async (e) => {
+    })(), b);
+  }, ue = async (e) => {
     s.value.loadingProfile = !0;
     try {
       const t = await fetch(n("changeUsername"), {
@@ -522,7 +524,7 @@ function Ie() {
     } finally {
       s.value.loadingProfile = !1;
     }
-  }, ue = async () => {
+  }, ce = async () => {
     const e = await fetch(n("usernameCooldown"), {
       method: "GET",
       headers: {
@@ -532,7 +534,7 @@ function Ie() {
     if (!e.ok)
       throw new Error(`Failed to get username cooldown: ${e.status} ${e.statusText}`);
     return e.json();
-  }, ce = async (e) => {
+  }, fe = async (e) => {
     const t = n("checkUsernameAvailability").replace("{username}", encodeURIComponent(e)), a = await fetch(t, {
       method: "GET",
       headers: {
@@ -542,7 +544,7 @@ function Ie() {
     if (!a.ok)
       throw new Error(`Failed to check username availability: ${a.status} ${a.statusText}`);
     return a.json();
-  }, fe = async () => {
+  }, de = async () => {
     const e = `sessions:${o.value?.accessToken?.slice(0, 20) || "no-token"}`;
     try {
       return await v(e, async () => {
@@ -557,7 +559,7 @@ function Ie() {
     } catch (t) {
       throw t;
     }
-  }, de = async () => {
+  }, he = async () => {
     const e = await fetch(n("sessionsStats"), {
       method: "GET",
       headers: O()
@@ -565,7 +567,7 @@ function Ie() {
     if (!e.ok)
       throw new Error(`Failed to get session stats: ${e.status} ${e.statusText}`);
     return e.json();
-  }, he = async (e) => {
+  }, ge = async (e) => {
     const t = n("sessionRevoke").replace("{session_id}", encodeURIComponent(e)), a = await fetch(t, {
       method: "POST",
       headers: O()
@@ -573,7 +575,7 @@ function Ie() {
     if (!a.ok)
       throw new Error(`Failed to revoke session: ${a.status} ${a.statusText}`);
     return a.status === 200;
-  }, ge = async () => {
+  }, ve = async () => {
     const e = await fetch(n("sessionsRevokeAll"), {
       method: "POST",
       headers: O()
@@ -583,74 +585,74 @@ function Ie() {
     return e.status === 200;
   };
   typeof document < "u" && document.addEventListener("visibilitychange", () => {
-    document.visibilityState === "visible" && o.value ? (k(), ve()) : document.visibilityState === "hidden" && I();
+    document.visibilityState === "visible" && o.value ? (T(), we()) : document.visibilityState === "hidden" && E();
   }), typeof window < "u" && window.addEventListener("storage", (e) => {
-    (e.key === "strands_auth_session" || e.key === "strands_auth_user") && !e.newValue && i.value && T();
+    (e.key === "strands_auth_session" || e.key === "strands_auth_user") && !e.newValue && i.value && _();
   });
-  const ve = () => {
+  const we = () => {
     if (!(typeof window > "u") && i.value && o.value) {
       const e = localStorage.getItem("strands_auth_session"), t = localStorage.getItem("strands_auth_user");
-      (!e || !t) && T();
+      (!e || !t) && _();
     }
-  }, we = () => {
-    I(), $(), g();
+  }, me = () => {
+    E(), M(), g();
   };
   try {
-    me() && ye(we);
+    ye() && pe(me);
   } catch {
   }
-  return p.value || C(), {
+  return A.value || D(), {
     // State
     user: c(() => i.value),
     currentUser: c(() => i.value),
     currentSession: c(() => o.value),
-    isAuthenticated: Q,
-    isLoading: c(() => G.value || !p.value),
+    isAuthenticated: X,
+    isLoading: c(() => H.value || !A.value),
     loading: z,
-    loadingMessage: H,
+    loadingMessage: W,
     // Specific loading states
-    isInitializing: L,
-    isSigningIn: R,
-    isSigningUp: U,
-    isSigningOut: B,
-    isRefreshingToken: V,
-    isSendingMfaEmail: q,
-    isVerifyingMfa: K,
+    isInitializing: R,
+    isSigningIn: U,
+    isSigningUp: B,
+    isSigningOut: V,
+    isRefreshingToken: q,
+    isSendingMfaEmail: K,
+    isVerifyingMfa: G,
     // MFA State
-    mfaRequired: c(() => S.value),
+    mfaRequired: c(() => p.value),
     mfaSessionId: c(() => h.value),
-    availableMfaMethods: c(() => _.value),
+    availableMfaMethods: c(() => S.value),
     // Methods
-    signIn: X,
-    signUp: Z,
-    signOut: ee,
-    refreshToken: P,
-    fetchProfile: te,
-    updateProfile: ae,
-    updateUserSettings: ne,
-    changeEmail: se,
-    changeUsername: le,
-    getUsernameCooldown: ue,
-    checkUsernameAvailability: ce,
+    signIn: Z,
+    signUp: ee,
+    signOut: te,
+    refreshToken: $,
+    fetchProfile: ae,
+    updateProfile: ne,
+    updateUserSettings: se,
+    changeEmail: ie,
+    changeUsername: ue,
+    getUsernameCooldown: ce,
+    checkUsernameAvailability: fe,
     // Session management
-    getUserSessions: fe,
-    getSessionStats: de,
-    revokeSession: he,
-    revokeAllOtherSessions: ge,
-    initialize: C,
-    setAuthData: M,
-    verifyMfa: ie,
-    sendMfaEmailCode: re,
-    getMfaWebAuthnChallenge: oe,
-    registerHardwareKey: Y,
-    completeHardwareKeyRegistration: W,
+    getUserSessions: de,
+    getSessionStats: he,
+    revokeSession: ge,
+    revokeAllOtherSessions: ve,
+    initialize: D,
+    setAuthData: N,
+    verifyMfa: re,
+    sendMfaEmailCode: oe,
+    getMfaWebAuthnChallenge: le,
+    registerHardwareKey: Q,
+    completeHardwareKeyRegistration: Y,
     // Token management
-    startTokenRefreshTimer: k,
-    stopTokenRefreshTimer: I,
+    startTokenRefreshTimer: T,
+    stopTokenRefreshTimer: E,
     getAuthHeaders: O,
     // Force re-initialization (useful for testing or navigation)
     forceReInit: () => {
-      p.value = !1, s.value.initializing = !0, C();
+      A.value = !1, s.value.initializing = !0, D();
     }
   };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@strands.gg/accui",
-  "version": "2.17.16",
+  "version": "2.17.17",
   "description": "Strands Authentication UI Components",
   "type": "module",
   "main": "./dist/index.cjs.js",