@strands.gg/accui 2.17.60 → 2.17.62

package/dist/{useStrandsAuth-wzl2F9DE.es.js → useStrandsAuth-DSLFMDTj.es.js}

@@ -1,5 +1,5 @@
-import { computed as u, getCurrentInstance as he, onUnmounted as ge, ref as h } from "vue";
-import { u as ve } from "./useStrandsConfig-B2UXxIbT.es.js";
+import { computed as c, getCurrentInstance as ge, onUnmounted as ve, ref as h } from "vue";
+import { u as me } from "./useStrandsConfig-B2UXxIbT.es.js";
 class we {
   cache = /* @__PURE__ */ new Map();
   DEFAULT_TTL = 300 * 1e3;
@@ -7,20 +7,20 @@ class we {
   /**
    * Memoized fetch - prevents duplicate requests and caches results
    */
-  async fetch(d, m, w = this.DEFAULT_TTL) {
+  async fetch(d, w, m = this.DEFAULT_TTL) {
     const E = Date.now(), s = this.cache.get(d);
     if (s && E - s.timestamp < s.ttl)
       return s.promise;
     this.cleanExpired();
-    const f = m().finally(() => {
+    const f = w().finally(() => {
       setTimeout(() => {
         this.cache.delete(d);
-      }, w);
+      }, m);
     });
     return this.cache.set(d, {
       promise: f,
       timestamp: E,
-      ttl: w
+      ttl: m
     }), f;
   }
   /**
@@ -40,8 +40,8 @@ class we {
    */
   cleanExpired() {
     const d = Date.now();
-    for (const [m, w] of this.cache.entries())
-      d - w.timestamp > w.ttl && this.cache.delete(m);
+    for (const [w, m] of this.cache.entries())
+      d - m.timestamp > m.ttl && this.cache.delete(w);
   }
   /**
    * Get cache statistics (for debugging)
@@ -54,7 +54,7 @@ class we {
   }
 }
 const y = new we();
-function me() {
+function ye() {
   return {
     fetch: y.fetch.bind(y),
     clear: y.clear.bind(y),
@@ -62,34 +62,34 @@ function me() {
     getStats: y.getStats.bind(y)
   };
 }
-function ye(a, d) {
-  let m = null;
-  return (...w) => {
-    m && clearTimeout(m), m = setTimeout(() => {
-      a(...w);
+function pe(n, d) {
+  let w = null;
+  return (...m) => {
+    w && clearTimeout(w), w = setTimeout(() => {
+      n(...m);
     }, d);
   };
 }
-const C = ye((a, d) => {
-  typeof window < "u" && localStorage.setItem(a, d);
-}, 300), k = (a) => ({
-  id: a.id,
-  email: a.email,
-  firstName: a.first_name || a.firstName || "",
-  lastName: a.last_name || a.lastName || "",
-  avatar: a.avatar_url || a.avatar,
-  mfaEnabled: a.mfa_enabled ?? a.mfaEnabled ?? !1,
-  emailVerified: a.email_verified ?? a.emailVerified ?? !1,
-  passwordUpdatedAt: a.password_updated_at || a.passwordUpdatedAt,
-  settings: a.settings || {},
-  xp: a.xp || 0,
-  level: a.level || 1,
-  next_level_xp: a.next_level_xp || a.next_level_xp || 4,
-  username: a.username,
-  usernameLastChangedAt: a.username_last_changed_at || a.usernameLastChangedAt,
-  createdAt: a.created_at || a.createdAt,
-  updatedAt: a.updated_at || a.updatedAt || (/* @__PURE__ */ new Date()).toISOString()
-}), pe = () => {
+const N = pe((n, d) => {
+  typeof window < "u" && localStorage.setItem(n, d);
+}, 300), k = (n) => ({
+  id: n.id,
+  email: n.email,
+  firstName: n.first_name || n.firstName || "",
+  lastName: n.last_name || n.lastName || "",
+  avatar: n.avatar_url || n.avatar,
+  mfaEnabled: n.mfa_enabled ?? n.mfaEnabled ?? !1,
+  emailVerified: n.email_verified ?? n.emailVerified ?? !1,
+  passwordUpdatedAt: n.password_updated_at || n.passwordUpdatedAt,
+  settings: n.settings || {},
+  xp: n.xp || 0,
+  level: n.level || 1,
+  next_level_xp: n.next_level_xp || n.next_level_xp || 4,
+  username: n.username,
+  usernameLastChangedAt: n.username_last_changed_at || n.usernameLastChangedAt,
+  createdAt: n.created_at || n.createdAt,
+  updatedAt: n.updated_at || n.updatedAt || (/* @__PURE__ */ new Date()).toISOString()
+}), $ = () => {
   if (typeof window > "u")
     return {
       currentUser: h(null),
@@ -110,10 +110,13 @@ const C = ye((a, d) => {
       availableMfaMethods: h([]),
       promise: null,
       refreshTimer: null,
-      refreshPromise: null
+      refreshPromise: null,
+      refreshTokenFn: null,
+      startTimerFn: null,
+      stopTimerFn: null
     };
-  const a = window;
-  return a.__STRANDS_AUTH_STATE__ || (a.__STRANDS_AUTH_STATE__ = {
+  const n = window;
+  return n.__STRANDS_AUTH_STATE__ || (n.__STRANDS_AUTH_STATE__ = {
     currentUser: h(null),
     currentSession: h(null),
     loadingStates: h({
@@ -132,27 +135,30 @@ const C = ye((a, d) => {
     availableMfaMethods: h([]),
     promise: null,
     refreshTimer: null,
-    refreshPromise: null
-  }), a.__STRANDS_AUTH_STATE__;
-}, c = pe();
+    refreshPromise: null,
+    refreshTokenFn: null,
+    startTimerFn: null,
+    stopTimerFn: null
+  }), n.__STRANDS_AUTH_STATE__;
+}, l = $();
 function _e() {
-  const { getUrl: a, config: d } = ve(), { fetch: m, clear: w, invalidate: E } = me(), { currentUser: s, currentSession: f, loadingStates: i, isInitialized: p, mfaRequired: T, mfaSessionId: g, availableMfaMethods: S } = c, I = () => {
-    if (s.value = null, f.value = null, T.value = !1, g.value = null, S.value = [], A(), c.refreshPromise = null, w(), typeof window < "u" && d.value?.onSignOutUrl) {
+  const { getUrl: n, config: d } = me(), { fetch: w, clear: m, invalidate: E } = ye(), { currentUser: s, currentSession: f, loadingStates: i, isInitialized: p, mfaRequired: T, mfaSessionId: g, availableMfaMethods: S } = l, M = () => {
+    if (s.value = null, f.value = null, T.value = !1, g.value = null, S.value = [], A(), l.refreshPromise = null, m(), typeof window < "u" && d.value?.onSignOutUrl) {
       const t = window.location.pathname + window.location.search, e = d.value.onSignOutUrl;
       t !== e && (window.location.href = e);
     }
-  }, j = u(() => i.value.initializing), N = u(() => i.value.signingIn), F = u(() => i.value.signingUp), R = u(() => i.value.signingOut), z = u(() => i.value.refreshingToken), J = u(() => i.value.sendingMfaEmail), U = u(() => i.value.verifyingMfa);
-  u(() => i.value.loadingProfile);
-  const D = u(
+  }, C = c(() => i.value.initializing), j = c(() => i.value.signingIn), R = c(() => i.value.signingUp), z = c(() => i.value.signingOut), J = c(() => i.value.refreshingToken), U = c(() => i.value.sendingMfaEmail), L = c(() => i.value.verifyingMfa);
+  c(() => i.value.loadingProfile);
+  const D = c(
     () => i.value.signingIn || i.value.signingUp || i.value.signingOut || i.value.refreshingToken || i.value.sendingMfaEmail || i.value.verifyingMfa || i.value.loadingProfile
-  ), L = u(() => i.value.initializing || D.value), q = u(() => {
+  ), V = c(() => i.value.initializing || D.value), q = c(() => {
     const t = i.value;
     return t.initializing ? "Checking authentication..." : t.signingIn ? "Signing you in..." : t.signingUp ? "Creating your account..." : t.signingOut ? "Signing you out..." : t.refreshingToken ? "Refreshing session..." : t.sendingMfaEmail ? "Sending verification code..." : t.verifyingMfa ? "Verifying code..." : t.loadingProfile ? "Loading profile..." : "Loading...";
   }), H = () => ({
     "Content-Type": "application/json"
-  }), V = async () => {
+  }), G = async () => {
     try {
-      const t = await fetch(a("authStatus"), {
+      const t = await fetch(n("authStatus"), {
         method: "GET",
         credentials: "include"
       });
@@ -161,13 +167,13 @@ function _e() {
       const e = await t.json();
       if (e.authenticated && e.user) {
         s.value = k(e.user);
-        const n = e.expires_at ? new Date(e.expires_at * 1e3) : new Date(Date.now() + 300 * 1e3);
+        const a = e.expires_at ? new Date(e.expires_at * 1e3) : new Date(Date.now() + 300 * 1e3);
         return f.value = {
           accessToken: "",
           // Token is in HttpOnly cookie
           refreshToken: "",
           // Token is in HttpOnly cookie
-          expiresAt: n,
+          expiresAt: a,
           userId: e.user.id
         }, !0;
       }
@@ -175,8 +181,8 @@ function _e() {
     } catch {
       return !1;
     }
-  }, G = async (t, e, n) => {
-    const r = await fetch(a("mfaHardwareCompleteRegistration"), {
+  }, B = async (t, e, a) => {
+    const r = await fetch(n("mfaHardwareCompleteRegistration"), {
       method: "POST",
       headers: {
         "Content-Type": "application/json"
@@ -188,19 +194,19 @@ function _e() {
       })
     });
     if (!r.ok) {
-      const l = await r.text();
+      const u = await r.text();
       let o = "Failed to complete hardware key registration";
       try {
-        const v = JSON.parse(l);
-        o = v.message || v.error || l;
+        const v = JSON.parse(u);
+        o = v.message || v.error || u;
       } catch {
-        o = l || "Failed to complete hardware key registration";
+        o = u || "Failed to complete hardware key registration";
       }
       throw new Error(o);
     }
     return r.json();
-  }, K = async (t, e, n = "hardware") => {
-    const r = await fetch(a("mfaHardwareStartRegistration"), {
+  }, K = async (t, e, a = "hardware") => {
+    const r = await fetch(n("mfaHardwareStartRegistration"), {
       method: "POST",
       headers: {
         "Content-Type": "application/json"
@@ -208,22 +214,22 @@ function _e() {
       credentials: "include",
       body: JSON.stringify({
         device_name: t,
-        device_type: n
+        device_type: a
       })
     });
     if (!r.ok) {
-      const l = await r.text();
+      const u = await r.text();
       let o = "Failed to start hardware key registration";
       try {
-        const v = JSON.parse(l);
-        o = v.message || v.error || l;
+        const v = JSON.parse(u);
+        o = v.message || v.error || u;
       } catch {
-        o = l || "Failed to start hardware key registration";
+        o = u || "Failed to start hardware key registration";
       }
       throw new Error(o);
     }
     return r.json();
-  }, W = u(() => s.value !== null), B = async (t) => {
+  }, W = c(() => s.value !== null), Y = async (t) => {
     i.value.signingIn = !0;
     try {
       T.value = !1, g.value = null, S.value = [];
@@ -231,19 +237,19 @@ function _e() {
         "Content-Type": "application/json"
       };
       typeof window < "u" && window.location && (e.Origin = window.location.origin);
-      const n = await fetch(a("signIn"), {
+      const a = await fetch(n("signIn"), {
         method: "POST",
         headers: e,
         credentials: "include",
         // Include cookies for auth
         body: JSON.stringify(t)
       });
-      if (!n.ok)
-        throw n.status === 401 ? new Error("Invalid email or password") : n.status === 403 ? new Error("Please verify your email address before signing in") : new Error(`Sign in failed: ${n.status} ${n.statusText}`);
-      const r = await n.json();
+      if (!a.ok)
+        throw a.status === 401 ? new Error("Invalid email or password") : a.status === 403 ? new Error("Please verify your email address before signing in") : new Error(`Sign in failed: ${a.status} ${a.statusText}`);
+      const r = await a.json();
       if (r.mfa_required) {
         T.value = !0, g.value = r.mfa_session_id || null;
-        const l = (r.available_mfa_methods || []).map((o) => {
+        const u = (r.available_mfa_methods || []).map((o) => {
           let v = `${o.device_type.charAt(0).toUpperCase() + o.device_type.slice(1)} Authentication`;
           return o.device_type === "hardware" ? v = o.device_name || "Security Key" : o.device_type === "totp" ? v = o.device_name || "Authenticator App" : o.device_type === "email" && (v = o.device_name || "Email Verification"), {
             id: o.device_id,
@@ -257,39 +263,39 @@ function _e() {
             device_info: o.device_info
           };
         });
-        return S.value = l, i.value.signingIn = !1, r;
+        return S.value = u, i.value.signingIn = !1, r;
       }
-      return await P(r), r;
+      return await x(r), r;
     } catch (e) {
       throw e;
     } finally {
       i.value.signingIn = !1;
     }
-  }, Y = async (t) => {
+  }, Q = async (t) => {
     i.value.signingUp = !0;
     try {
       throw new Error("Sign up not implemented - please integrate with auth SDK");
     } finally {
       i.value.signingUp = !1;
     }
-  }, Q = async () => {
+  }, X = async () => {
     i.value.signingOut = !0;
     try {
-      await fetch(a("signOut"), {
+      await (await fetch(n("signOut"), {
         method: "POST",
         credentials: "include"
         // Cookies will be cleared by server response
-      }), A(), c.refreshPromise = null, w(), s.value = null, f.value = null, T.value = !1, g.value = null, S.value = [], typeof window < "u" && d.value?.onSignOutUrl && (window.location.href = d.value.onSignOutUrl);
+      })).text(), A(), l.refreshPromise = null, m(), s.value = null, f.value = null, T.value = !1, g.value = null, S.value = [], p.value = !1, typeof window < "u" && d.value?.onSignOutUrl && (window.location.href = d.value.onSignOutUrl);
     } finally {
       i.value.signingOut = !1;
     }
   }, O = async () => {
-    if (c.refreshPromise)
-      return await c.refreshPromise;
-    c.refreshPromise = (async () => {
+    if (l.refreshPromise)
+      return await l.refreshPromise;
+    l.refreshPromise = (async () => {
       i.value.refreshingToken = !0;
       try {
-        const e = await fetch(a("refresh"), {
+        const e = await fetch(n("refresh"), {
           method: "POST",
           headers: {
             "Content-Type": "application/json"
@@ -299,11 +305,11 @@ function _e() {
         });
         if (!e.ok) {
           if (e.status === 401)
-            return I(), !1;
+            return M(), !1;
           throw new Error(`Token refresh failed: ${e.status} ${e.statusText}`);
         }
-        const n = await e.json();
-        n.user && (s.value = k(n.user));
+        const a = await e.json();
+        a.user && (s.value = k(a.user));
         const r = {
           accessToken: "",
           // Token is in HttpOnly cookie
@@ -311,23 +317,23 @@ function _e() {
           // Token is in HttpOnly cookie
           expiresAt: new Date(Date.now() + 300 * 1e3),
           // 5 minutes from now
-          userId: n.user?.id || s.value?.id
+          userId: a.user?.id || s.value?.id
         };
         return f.value = r, _(), E(`sessions:${s.value?.id || "unknown"}`), !0;
       } catch {
-        return I(), !1;
+        return M(), !1;
       } finally {
         i.value.refreshingToken = !1;
       }
     })();
-    const t = await c.refreshPromise;
-    return c.refreshPromise = null, t;
-  }, X = async () => {
+    const t = await l.refreshPromise;
+    return l.refreshPromise = null, t;
+  }, Z = async () => {
     const t = `profile:${f.value.accessToken.slice(0, 20)}`;
     i.value.loadingProfile = !0;
     try {
-      return await m(t, async () => {
-        const e = await fetch(a("profile"), {
+      return await w(t, async () => {
+        const e = await fetch(n("profile"), {
           method: "GET",
           headers: {
             "Content-Type": "application/json",
@@ -336,16 +342,16 @@ function _e() {
         });
         if (!e.ok)
           throw e.status === 401 ? new Error("Authentication expired. Please sign in again.") : new Error(`Failed to fetch profile: ${e.status} ${e.statusText}`);
-        const n = await e.json();
-        return s.value = k(n), s.value && typeof window < "u" && localStorage.setItem("strands_auth_user", JSON.stringify(s.value)), s.value;
+        const a = await e.json();
+        return s.value = k(a), s.value && typeof window < "u" && localStorage.setItem("strands_auth_user", JSON.stringify(s.value)), s.value;
       });
     } finally {
       i.value.loadingProfile = !1;
     }
-  }, Z = async (t) => {
+  }, ee = async (t) => {
     i.value.loadingProfile = !0;
     try {
-      const e = await fetch(a("profile"), {
+      const e = await fetch(n("profile"), {
         method: "POST",
         headers: {
           "Content-Type": "application/json",
@@ -358,15 +364,15 @@ function _e() {
       });
       if (!e.ok)
         throw e.status === 401 ? new Error("Authentication expired. Please sign in again.") : new Error(`Profile update failed: ${e.status} ${e.statusText}`);
-      const n = await e.json();
-      return s.value = k(n), s.value && C("strands_auth_user", JSON.stringify(s.value)), s.value;
+      const a = await e.json();
+      return s.value = k(a), s.value && N("strands_auth_user", JSON.stringify(s.value)), s.value;
     } finally {
       i.value.loadingProfile = !1;
     }
-  }, ee = async (t) => {
+  }, te = async (t) => {
     i.value.loadingProfile = !0;
     try {
-      const e = await fetch(a("settings"), {
+      const e = await fetch(n("settings"), {
         method: "POST",
         headers: {
           "Content-Type": "application/json",
@@ -378,15 +384,15 @@ function _e() {
       });
       if (!e.ok)
         throw e.status === 401 ? new Error("Authentication expired. Please sign in again.") : new Error(`Settings update failed: ${e.status} ${e.statusText}`);
-      const n = await e.json();
-      return s.value = k(n), s.value && C("strands_auth_user", JSON.stringify(s.value)), s.value;
+      const a = await e.json();
+      return s.value = k(a), s.value && N("strands_auth_user", JSON.stringify(s.value)), s.value;
     } finally {
       i.value.loadingProfile = !1;
     }
-  }, te = async (t, e) => {
+  }, ne = async (t, e) => {
     i.value.loadingProfile = !0;
     try {
-      const n = await fetch(a("changeEmail"), {
+      const a = await fetch(n("changeEmail"), {
         method: "POST",
         headers: {
           "Content-Type": "application/json",
@@ -397,15 +403,15 @@ function _e() {
           password: e
         })
       });
-      if (!n.ok) {
-        if (n.status === 401)
+      if (!a.ok) {
+        if (a.status === 401)
           throw new Error("Authentication expired. Please sign in again.");
         {
-          const l = await n.json().catch(() => ({}));
-          throw new Error(l.message || `Email change failed: ${n.status} ${n.statusText}`);
+          const u = await a.json().catch(() => ({}));
+          throw new Error(u.message || `Email change failed: ${a.status} ${a.statusText}`);
         }
       }
-      const r = await n.json();
+      const r = await a.json();
       return s.value && (s.value = {
         ...s.value,
         email: t,
@@ -416,39 +422,39 @@ function _e() {
     } finally {
       i.value.loadingProfile = !1;
     }
-  }, ae = async (t, e, n = !1) => {
+  }, ae = async (t, e, a = !1) => {
     if (!g.value)
       throw new Error("No MFA session available");
     i.value.verifyingMfa = !0;
     try {
-      const r = a(n ? "mfaBackupCodeVerify" : "mfaSigninVerify"), l = n ? { mfa_session_id: g.value, backup_code: e } : { mfa_session_id: g.value, device_id: t, code: e }, o = await fetch(r, {
+      const r = n(a ? "mfaBackupCodeVerify" : "mfaSigninVerify"), u = a ? { mfa_session_id: g.value, backup_code: e } : { mfa_session_id: g.value, device_id: t, code: e }, o = await fetch(r, {
         method: "POST",
         headers: { "Content-Type": "application/json" },
         credentials: "include",
-        body: JSON.stringify(l)
+        body: JSON.stringify(u)
       });
       if (!o.ok) {
-        const b = await o.text();
-        let M = "MFA verification failed";
+        const P = await o.text();
+        let b = "MFA verification failed";
         try {
-          const $ = JSON.parse(b);
-          M = $.message || $.error || b;
+          const F = JSON.parse(P);
+          b = F.message || F.error || P;
         } catch {
-          M = b || "MFA verification failed";
+          b = P || "MFA verification failed";
         }
-        throw new Error(M);
+        throw new Error(b);
       }
       const v = await o.json();
-      return T.value = !1, g.value = null, S.value = [], await P(v), v;
+      return T.value = !1, g.value = null, S.value = [], await x(v), v;
     } finally {
       i.value.verifyingMfa = !1;
     }
-  }, ne = async (t) => {
+  }, ie = async (t) => {
     if (!g.value)
       throw new Error("No MFA session available");
     i.value.sendingMfaEmail = !0;
     try {
-      const e = await fetch(a("mfaSigninSendEmail"), {
+      const e = await fetch(n("mfaSigninSendEmail"), {
         method: "POST",
         headers: { "Content-Type": "application/json" },
         credentials: "include",
@@ -459,23 +465,23 @@ function _e() {
       });
       if (!e.ok) {
         const r = await e.text();
-        let l = "Failed to send MFA email code";
+        let u = "Failed to send MFA email code";
         try {
           const o = JSON.parse(r);
-          l = o.message || o.error || r;
+          u = o.message || o.error || r;
         } catch {
-          l = r || "Failed to send MFA email code";
+          u = r || "Failed to send MFA email code";
         }
-        throw new Error(l);
+        throw new Error(u);
       }
       return await e.json();
     } finally {
       i.value.sendingMfaEmail = !1;
     }
-  }, ie = async (t) => {
+  }, se = async (t) => {
     if (!g.value)
       throw new Error("No MFA session available");
-    const e = await fetch(a("mfaWebAuthnChallenge"), {
+    const e = await fetch(n("mfaWebAuthnChallenge"), {
       method: "POST",
       headers: { "Content-Type": "application/json" },
       credentials: "include",
@@ -485,18 +491,18 @@ function _e() {
       })
     });
     if (!e.ok) {
-      const n = await e.text();
+      const a = await e.text();
       let r = "Failed to get WebAuthn challenge";
       try {
-        const l = JSON.parse(n);
-        r = l.message || l.error || n;
+        const u = JSON.parse(a);
+        r = u.message || u.error || a;
       } catch {
-        r = n || r;
+        r = a || r;
       }
       throw new Error(r);
     }
     return e.json();
-  }, P = async (t) => {
+  }, x = async (t) => {
     try {
       t.user && (s.value = k(t.user));
       const e = {
@@ -512,44 +518,46 @@ function _e() {
     } catch {
     }
   }, _ = () => {
-    if (c.refreshTimer && clearTimeout(c.refreshTimer), !f.value || typeof document < "u" && document.visibilityState === "hidden")
+    if (l.refreshTimer && clearTimeout(l.refreshTimer), !f.value || typeof document < "u" && document.visibilityState === "hidden")
       return;
-    const t = /* @__PURE__ */ new Date(), n = f.value.expiresAt.getTime() - t.getTime() - 60 * 1e3;
-    if (n <= 0) {
+    const t = /* @__PURE__ */ new Date(), a = f.value.expiresAt.getTime() - t.getTime() - 60 * 1e3;
+    if (a <= 0) {
       O();
       return;
     }
-    c.refreshTimer = setTimeout(async () => {
+    l.refreshTimer = setTimeout(async () => {
       (typeof document > "u" || document.visibilityState === "visible") && await O() && _();
-    }, n);
+    }, a);
   }, A = () => {
-    c.refreshTimer && (clearTimeout(c.refreshTimer), c.refreshTimer = null);
-  }, x = async () => {
+    l.refreshTimer && (clearTimeout(l.refreshTimer), l.refreshTimer = null);
+  };
+  l.refreshTokenFn = O, l.startTimerFn = _, l.stopTimerFn = A;
+  const I = async () => {
     if (p.value) {
       i.value.initializing = !1;
       return;
     }
-    if (c.promise) {
-      await c.promise;
+    if (l.promise) {
+      await l.promise;
       return;
     }
     i.value.initializing = !0;
     const t = async () => {
       try {
         typeof window < "u" && (await Promise.race([
-          V(),
+          G(),
           new Promise((r) => setTimeout(() => r(!1), 5e3))
         ]) ? _() : (s.value = null, f.value = null)), p.value = !0, await new Promise((e) => setTimeout(e, 50));
       } catch {
       } finally {
-        i.value.initializing = !1, c.promise = null;
+        i.value.initializing = !1, l.promise = null;
       }
     };
-    return c.promise = t(), c.promise;
-  }, se = async (t) => {
+    return l.promise = t(), l.promise;
+  }, re = async (t) => {
     i.value.loadingProfile = !0;
     try {
-      const e = await fetch(a("changeUsername"), {
+      const e = await fetch(n("changeUsername"), {
         method: "POST",
         headers: {
           "Content-Type": "application/json"
@@ -563,39 +571,39 @@ function _e() {
         const r = await e.json().catch(() => ({}));
         throw e.status === 409 ? new Error("Username is already taken") : r.cooldown_end ? new Error(`You can only change your username once every 30 days. You can change it again on ${new Date(r.cooldown_end).toLocaleDateString()}`) : new Error(r.message || `Username change failed: ${e.status} ${e.statusText}`);
       }
-      const n = await e.json();
+      const a = await e.json();
       return s.value && (s.value = {
         ...s.value,
         username: t,
         usernameLastChangedAt: (/* @__PURE__ */ new Date()).toISOString(),
         updatedAt: (/* @__PURE__ */ new Date()).toISOString()
-      }), n;
+      }), a;
     } finally {
       i.value.loadingProfile = !1;
     }
-  }, re = async () => {
-    const t = await fetch(a("usernameCooldown"), {
+  }, oe = async () => {
+    const t = await fetch(n("usernameCooldown"), {
       method: "GET",
       credentials: "include"
     });
     if (!t.ok)
       throw new Error(`Failed to get username cooldown: ${t.status} ${t.statusText}`);
     return t.json();
-  }, oe = async (t) => {
-    const e = a("checkUsernameAvailability").replace("{username}", encodeURIComponent(t)), n = await fetch(e, {
+  }, le = async (t) => {
+    const e = n("checkUsernameAvailability").replace("{username}", encodeURIComponent(t)), a = await fetch(e, {
       method: "GET",
       headers: {
         "Content-Type": "application/json"
       }
     });
-    if (!n.ok)
-      throw new Error(`Failed to check username availability: ${n.status} ${n.statusText}`);
-    return n.json();
-  }, le = async () => {
+    if (!a.ok)
+      throw new Error(`Failed to check username availability: ${a.status} ${a.statusText}`);
+    return a.json();
+  }, ue = async () => {
     const t = `sessions:${s.value?.id || "no-user"}`;
     try {
-      return await m(t, async () => {
-        const e = await fetch(a("sessions"), {
+      return await w(t, async () => {
+        const e = await fetch(n("sessions"), {
           method: "GET",
           credentials: "include"
         });
@@ -606,24 +614,24 @@ function _e() {
     } catch (e) {
       throw e;
     }
-  }, ue = async () => {
-    const t = await fetch(a("sessionsStats"), {
+  }, ce = async () => {
+    const t = await fetch(n("sessionsStats"), {
       method: "GET",
       credentials: "include"
     });
     if (!t.ok)
       throw new Error(`Failed to get session stats: ${t.status} ${t.statusText}`);
     return t.json();
-  }, ce = async (t) => {
-    const e = a("sessionRevoke").replace("{session_id}", encodeURIComponent(t)), n = await fetch(e, {
+  }, fe = async (t) => {
+    const e = n("sessionRevoke").replace("{session_id}", encodeURIComponent(t)), a = await fetch(e, {
       method: "POST",
       credentials: "include"
     });
-    if (!n.ok)
-      throw new Error(`Failed to revoke session: ${n.status} ${n.statusText}`);
-    return n.status === 200;
-  }, fe = async () => {
-    const t = await fetch(a("sessionsRevokeAll"), {
+    if (!a.ok)
+      throw new Error(`Failed to revoke session: ${a.status} ${a.statusText}`);
+    return a.status === 200;
+  }, de = async () => {
+    const t = await fetch(n("sessionsRevokeAll"), {
       method: "POST",
       credentials: "include"
     });
@@ -631,69 +639,76 @@ function _e() {
       throw new Error(`Failed to revoke all other sessions: ${t.status} ${t.statusText}`);
     return t.status === 200;
   };
-  typeof document < "u" && document.addEventListener("visibilitychange", () => {
-    document.visibilityState === "visible" && f.value ? _() : document.visibilityState === "hidden" && A();
-  });
-  const de = () => {
-    A(), w();
+  if (typeof document < "u" && typeof window < "u") {
+    const t = window;
+    t.__STRANDS_VISIBILITY_LISTENER__ || (t.__STRANDS_VISIBILITY_LISTENER__ = !0, document.addEventListener("visibilitychange", async () => {
+      const e = $();
+      if (document.visibilityState === "visible" && e.currentSession.value) {
+        const a = /* @__PURE__ */ new Date();
+        e.currentSession.value.expiresAt.getTime() - a.getTime() <= 120 * 1e3 ? e.refreshTokenFn && await e.refreshTokenFn() : e.startTimerFn && e.startTimerFn();
+      } else document.visibilityState === "hidden" && e.stopTimerFn && e.stopTimerFn();
+    }));
+  }
+  const he = () => {
+    A(), m();
   };
   try {
-    he() && ge(de);
+    ge() && ve(he);
   } catch {
   }
-  return p.value || x(), {
+  return p.value || I(), {
     // State
-    user: u(() => s.value),
-    currentUser: u(() => s.value),
-    currentSession: u(() => f.value),
+    user: c(() => s.value),
+    currentUser: c(() => s.value),
+    currentSession: c(() => f.value),
     isAuthenticated: W,
-    isLoading: u(() => L.value || !p.value),
+    isLoading: c(() => V.value || !p.value),
     loading: D,
     loadingMessage: q,
     // Specific loading states
-    isInitializing: j,
-    isInitialized: u(() => p.value),
-    isSigningIn: N,
-    isSigningUp: F,
-    isSigningOut: R,
-    isRefreshingToken: z,
-    isSendingMfaEmail: J,
-    isVerifyingMfa: U,
+    isInitializing: C,
+    isInitialized: c(() => p.value),
+    isSigningIn: j,
+    isSigningUp: R,
+    isSigningOut: z,
+    isRefreshingToken: J,
+    isSendingMfaEmail: U,
+    isVerifyingMfa: L,
     // MFA State
-    mfaRequired: u(() => T.value),
-    mfaSessionId: u(() => g.value),
-    availableMfaMethods: u(() => S.value),
+    mfaRequired: c(() => T.value),
+    mfaSessionId: c(() => g.value),
+    availableMfaMethods: c(() => S.value),
     // Methods
-    signIn: B,
-    signUp: Y,
-    signOut: Q,
+    signIn: Y,
+    signUp: Q,
+    signOut: X,
     refreshToken: O,
-    fetchProfile: X,
-    updateProfile: Z,
-    updateUserSettings: ee,
-    changeEmail: te,
-    changeUsername: se,
-    getUsernameCooldown: re,
-    checkUsernameAvailability: oe,
+    fetchProfile: Z,
+    updateProfile: ee,
+    updateUserSettings: te,
+    changeEmail: ne,
+    changeUsername: re,
+    getUsernameCooldown: oe,
+    checkUsernameAvailability: le,
     // Session management
-    getUserSessions: le,
-    getSessionStats: ue,
-    revokeSession: ce,
-    revokeAllOtherSessions: fe,
-    initialize: x,
-    setAuthData: P,
+    getUserSessions: ue,
+    getSessionStats: ce,
+    revokeSession: fe,
+    revokeAllOtherSessions: de,
+    initialize: I,
+    setAuthData: x,
     verifyMfa: ae,
-    sendMfaEmailCode: ne,
-    getMfaWebAuthnChallenge: ie,
+    sendMfaEmailCode: ie,
+    getMfaWebAuthnChallenge: se,
     registerHardwareKey: K,
-    completeHardwareKeyRegistration: G,
+    completeHardwareKeyRegistration: B,
     // Token management
     startTokenRefreshTimer: _,
     stopTokenRefreshTimer: A,
     getAuthHeaders: H,
     // Force re-initialization (useful for testing or navigation)
     forceReInit: () => {
-      p.value = !1, i.value.initializing = !0, x();
+      p.value = !1, i.value.initializing = !0, I();
     }
   };
 }