@stytch/vanilla-js 4.8.0 → 4.9.1

package/dist/b2b/index.headless.esm.js

@@ -159,14 +159,14 @@ var g,
     }
     return a(t, c(Error)), r(t);
   }(),
-  P = function (e) {
+  C = function (e) {
     function t(e, r) {
       var n;
       return i(this, t), (n = o(this, t)).name = "StytchSDKUsageError", n.message = "Invalid call to ".concat(e, "\n") + r, n;
     }
     return a(t, c(Error)), r(t);
   }(),
-  C = function (e) {
+  P = function (e) {
     function t(e) {
       var r, n;
       i(this, t), (r = o(this, t)).name = "StytchSDKSchemaError";
@@ -242,13 +242,13 @@ var g,
     }
     return a(t, I), r(t);
   }(),
-  j = function (e) {
+  F = function (e) {
     function t(e) {
       return i(this, t), o(this, t, ["InternalError", e || "An internal error has occurred. Please contact Stytch if this occurs."]);
     }
     return a(t, I), r(t);
   }(),
-  F = function (e) {
+  j = function (e) {
     function t() {
       return i(this, t), o(this, t, ["NoBiometricsRegistrationError", "There is no biometric registration available. Authenticate with another method and add a new biometric registration first."]);
     }
@@ -322,114 +322,120 @@ var g,
   }(),
   V = function (e) {
     function t() {
-      return i(this, t), o(this, t, ["MissingPublicKeyError", "Failed to retrieve the public key. Add a new biometric registration."]);
+      return i(this, t), o(this, t, ["NoCredentialsPresentError", "The user did not provide credentials for a Google OneTap attempt"]);
     }
     return a(t, I), r(t);
   }(),
   Y = function (e) {
     function t() {
-      return i(this, t), o(this, t, ["ChallengeSigningFailedError", "Failed to sign the challenge with the key."]);
+      return i(this, t), o(this, t, ["MissingPublicKeyError", "Failed to retrieve the public key. Add a new biometric registration."]);
     }
     return a(t, I), r(t);
   }(),
   J = function (e) {
     function t() {
-      return i(this, t), o(this, t, ["SDKNotConfiguredError", "Stytch client is not confiured. You must call the configure method before using the SDK"]);
+      return i(this, t), o(this, t, ["ChallengeSigningFailedError", "Failed to sign the challenge with the key."]);
     }
     return a(t, I), r(t);
   }(),
   $ = function (e) {
     function t() {
-      return i(this, t), o(this, t, ["FailedCodeChallengeError", "Failed to create a code challenge"]);
+      return i(this, t), o(this, t, ["SDKNotConfiguredError", "Stytch client is not confiured. You must call the configure method before using the SDK"]);
     }
     return a(t, I), r(t);
   }(),
   X = function (e) {
     function t() {
-      return i(this, t), o(this, t, ["PasskeysUnsupportedError", "Passkeys are not supported on this device"]);
+      return i(this, t), o(this, t, ["FailedCodeChallengeError", "Failed to create a code challenge"]);
     }
     return a(t, I), r(t);
   }(),
   Z = function (e) {
     function t() {
-      return i(this, t), o(this, t, ["FailedToDecryptDataError", "Failed to decrypt user data"]);
+      return i(this, t), o(this, t, ["PasskeysUnsupportedError", "Passkeys are not supported on this device"]);
     }
     return a(t, I), r(t);
   }(),
   Q = function (e) {
     function t() {
-      return i(this, t), o(this, t, ["BiometricsFailedError", "Biometric authentication failed"]);
+      return i(this, t), o(this, t, ["FailedToDecryptDataError", "Failed to decrypt user data"]);
     }
     return a(t, I), r(t);
   }(),
   ee = function (e) {
     function t() {
-      return i(this, t), o(this, t, ["InvalidStartUrlError", "The start URL was invalid or improperly formatted."]);
+      return i(this, t), o(this, t, ["BiometricsFailedError", "Biometric authentication failed"]);
     }
     return a(t, I), r(t);
   }(),
   te = function (e) {
     function t() {
-      return i(this, t), o(this, t, ["InvalidRedirectSchemeError", "The scheme from the given redirect urls was invalid. Possible reasons include: nil scheme, non-custom scheme (using http or https), or differing schemes for login/signup urls."]);
+      return i(this, t), o(this, t, ["InvalidStartUrlError", "The start URL was invalid or improperly formatted."]);
     }
     return a(t, I), r(t);
   }(),
   re = function (e) {
     function t() {
-      return i(this, t), o(this, t, ["MissingUrlError", "The underlying web authentication service failed to return a URL."]);
+      return i(this, t), o(this, t, ["InvalidRedirectSchemeError", "The scheme from the given redirect urls was invalid. Possible reasons include: nil scheme, non-custom scheme (using http or https), or differing schemes for login/signup urls."]);
     }
     return a(t, I), r(t);
   }(),
   ne = function (e) {
     function t() {
-      return i(this, t), o(this, t, ["InvalidCredentialTypeError", "The public key credential type was not of the expected type."]);
+      return i(this, t), o(this, t, ["MissingUrlError", "The underlying web authentication service failed to return a URL."]);
     }
     return a(t, I), r(t);
   }(),
   ie = function (e) {
     function t() {
-      return i(this, t), o(this, t, ["MissingAttestationObjectError", "The public key credential is missing the attestation object."]);
+      return i(this, t), o(this, t, ["InvalidCredentialTypeError", "The public key credential type was not of the expected type."]);
     }
     return a(t, I), r(t);
   }(),
   oe = function (e) {
     function t() {
-      return i(this, t), o(this, t, ["JSONDataNotConvertibleToStringError", "JSON data unable to be converted to String type."]);
+      return i(this, t), o(this, t, ["MissingAttestationObjectError", "The public key credential is missing the attestation object."]);
     }
     return a(t, I), r(t);
   }(),
   se = function (e) {
     function t() {
-      return i(this, t), o(this, t, ["RandomNumberGenerationFailed", "Random number generation failed"]);
+      return i(this, t), o(this, t, ["JSONDataNotConvertibleToStringError", "JSON data unable to be converted to String type."]);
     }
     return a(t, I), r(t);
   }(),
   ae = function (e) {
     function t() {
-      return i(this, t), o(this, t, ["PasskeysInvalidEncoding", "Invalid passkey encoding"]);
+      return i(this, t), o(this, t, ["RandomNumberGenerationFailed", "Random number generation failed"]);
     }
     return a(t, I), r(t);
   }(),
   ce = function (e) {
     function t() {
-      return i(this, t), o(this, t, ["PasskeysMisconfigured", "Passkeys are misconfigured. Verify that you have added the correct associated domain for your application, and that the signing information is correct."]);
+      return i(this, t), o(this, t, ["PasskeysInvalidEncoding", "Invalid passkey encoding"]);
     }
     return a(t, I), r(t);
   }(),
   ue = function (e) {
+    function t() {
+      return i(this, t), o(this, t, ["PasskeysMisconfigured", "Passkeys are misconfigured. Verify that you have added the correct associated domain for your application, and that the signing information is correct."]);
+    }
+    return a(t, I), r(t);
+  }(),
+  le = function (e) {
     function t() {
       return i(this, t), o(this, t, ["SignInWithAppleMisconfigured", "Sign In With Apple is misconfigured. Verify that you have correctly configured Apple OAuth in the Stytch Dashboard and added the Sign In With Apple capability to your project."]);
     }
     return a(t, I), r(t);
   }();
-function le(e) {
+function de(e) {
   switch (e.message) {
     case "internal_error":
-      return new j(e.message);
+      return new F(e.message);
     case "no_current_session":
       return new R();
     case "no_biometrics_registration":
-      return new F();
+      return new j();
     case "biometrics_unavailable":
     case "device_hardware_error":
     case "biometrics_not_available":
@@ -456,82 +462,99 @@ function le(e) {
     case "invalid_authorization_credential":
       return new G();
     case "missing_public_key":
-      return new V();
-    case "challenge_signing_failed":
       return new Y();
-    case "sdk_not_configured":
+    case "challenge_signing_failed":
       return new J();
-    case "failed_code_challenge":
+    case "no_credentials_present":
+      return new V();
+    case "sdk_not_configured":
       return new $();
-    case "passkeys_unsupported":
+    case "failed_code_challenge":
       return new X();
-    case "failed_to_decrypt_data":
+    case "passkeys_unsupported":
       return new Z();
-    case "biometrics_failed":
+    case "failed_to_decrypt_data":
       return new Q();
-    case "invalid_start_url":
+    case "biometrics_failed":
       return new ee();
-    case "invalid_redirect_scheme":
+    case "invalid_start_url":
       return new te();
-    case "missing_url":
+    case "invalid_redirect_scheme":
       return new re();
-    case "invalid_credential_type":
+    case "missing_url":
       return new ne();
-    case "missing_attestation_object":
+    case "invalid_credential_type":
       return new ie();
-    case "json_data_not_convertible_to_string":
+    case "missing_attestation_object":
       return new oe();
-    case "random_number_generation_failed":
+    case "json_data_not_convertible_to_string":
       return new se();
-    case "passkeys_invalid_encoding":
+    case "random_number_generation_failed":
       return new ae();
-    case "passkeys_misconfigured":
+    case "passkeys_invalid_encoding":
       return new ce();
-    case "signinwithapple_misconfigured":
+    case "passkeys_misconfigured":
       return new ue();
+    case "signinwithapple_misconfigured":
+      return new le();
     default:
       return new I(e.name, e.message);
   }
 }
-function de(e, t) {
-  return function (e) {
-    if (Array.isArray(e)) return e;
-  }(e) || function (e, t) {
-    var r = null == e ? null : "undefined" != typeof Symbol && e[Symbol.iterator] || e["@@iterator"];
-    if (null != r) {
-      var n,
-        i,
-        o,
-        s,
-        a = [],
-        c = !0,
-        u = !1;
+function he(e, t) {
+  var r = "undefined" != typeof Symbol && e[Symbol.iterator] || e["@@iterator"];
+  if (!r) {
+    if (Array.isArray(e) || (r = function (e, t) {
+      if (!e) return;
+      if ("string" == typeof e) return pe(e, t);
+      var r = Object.prototype.toString.call(e).slice(8, -1);
+      "Object" === r && e.constructor && (r = e.constructor.name);
+      if ("Map" === r || "Set" === r) return Array.from(e);
+      if ("Arguments" === r || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(r)) return pe(e, t);
+    }(e)) || t && e && "number" == typeof e.length) {
+      r && (e = r);
+      var _n = 0,
+        i = function i() {};
+      return {
+        s: i,
+        n: function n() {
+          return _n >= e.length ? {
+            done: !0
+          } : {
+            done: !1,
+            value: e[_n++]
+          };
+        },
+        e: function e(_e2) {
+          throw _e2;
+        },
+        f: i
+      };
+    }
+    throw new TypeError("Invalid attempt to iterate non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
+  }
+  var o,
+    s = !0,
+    a = !1;
+  return {
+    s: function s() {
+      r = r.call(e);
+    },
+    n: function n() {
+      var e = r.next();
+      return s = e.done, e;
+    },
+    e: function e(_e3) {
+      a = !0, o = _e3;
+    },
+    f: function f() {
       try {
-        if (o = (r = r.call(e)).next, 0 === t) {
-          if (Object(r) !== r) return;
-          c = !1;
-        } else for (; !(c = (n = o.call(r)).done) && (a.push(n.value), a.length !== t); c = !0);
-      } catch (e) {
-        u = !0, i = e;
+        s || null == r["return"] || r["return"]();
       } finally {
-        try {
-          if (!c && null != r["return"] && (s = r["return"](), Object(s) !== s)) return;
-        } finally {
-          if (u) throw i;
-        }
+        if (a) throw o;
       }
-      return a;
     }
-  }(e, t) || he(e, t) || function () {
-    throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
-  }();
-}
-function he(e, t) {
-  if (e) {
-    if ("string" == typeof e) return pe(e, t);
-    var r = Object.prototype.toString.call(e).slice(8, -1);
-    return "Object" === r && e.constructor && (r = e.constructor.name), "Map" === r || "Set" === r ? Array.from(e) : "Arguments" === r || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(r) ? pe(e, t) : void 0;
-  }
+  };
 }
 function pe(e, t) {
   (null == t || t > e.length) && (t = e.length);
@@ -614,14 +637,14 @@ function _e() {
     w = y && y(y(D([])));
   w && w !== r && n.call(w, s) && (k = w);
   var S = g.prototype = v.prototype = Object.create(k);
-  function P(e) {
+  function C(e) {
     ["next", "throw", "return"].forEach(function (t) {
       u(e, t, function (e) {
         return this._invoke(t, e);
       });
     });
   }
-  function C(e, t) {
+  function P(e, t) {
     function r(i, o, s, a) {
       var c = d(e[i], e, o);
       if ("throw" !== c.type) {
@@ -743,15 +766,15 @@ function _e() {
     return {
       __await: e
     };
-  }, P(C.prototype), u(C.prototype, a, function () {
+  }, C(P.prototype), u(P.prototype, a, function () {
     return this;
-  }), t.AsyncIterator = C, t.async = function (e, r, n, i, o) {
+  }), t.AsyncIterator = P, t.async = function (e, r, n, i, o) {
     void 0 === o && (o = Promise);
-    var s = new C(l(e, r, n, i), o);
+    var s = new P(l(e, r, n, i), o);
     return t.isGeneratorFunction(r) ? s : s.next().then(function (e) {
       return e.done ? e.value : s.next();
     });
-  }, P(S), u(S, c, "Generator"), u(S, s, function () {
+  }, C(S), u(S, c, "Generator"), u(S, s, function () {
     return this;
   }), u(S, "toString", function () {
     return "[object Generator]";
@@ -875,14 +898,14 @@ function ge(e, t) {
   if (!(e instanceof t)) throw new TypeError("Cannot call a class as a function");
 }
 function ke(e, t, r) {
-  return t = Pe(t), function (e, t) {
+  return t = Ce(t), function (e, t) {
     if (t && ("object" === fe(t) || "function" == typeof t)) return t;
     if (void 0 !== t) throw new TypeError("Derived constructors may only return object or undefined");
     return function (e) {
       if (void 0 === e) throw new ReferenceError("this hasn't been initialised - super() hasn't been called");
       return e;
     }(e);
-  }(e, we() ? Reflect.construct(t, r || [], Pe(e).constructor) : t.apply(e, r));
+  }(e, we() ? Reflect.construct(t, r || [], Ce(e).constructor) : t.apply(e, r));
 }
 function ye(e) {
   var t = "function" == typeof Map ? new Map() : void 0;
@@ -906,7 +929,7 @@ function ye(e) {
         n.push.apply(n, t);
         var i = new (e.bind.apply(e, n))();
         return r && Se(i, r.prototype), i;
-      }(e, arguments, Pe(this).constructor);
+      }(e, arguments, Ce(this).constructor);
     }
     return r.prototype = Object.create(e.prototype, {
       constructor: {
@@ -931,10 +954,10 @@ function Se(e, t) {
     return e.__proto__ = t, e;
   }, Se(e, t);
 }
-function Pe(e) {
-  return Pe = Object.setPrototypeOf ? Object.getPrototypeOf.bind() : function (e) {
+function Ce(e) {
+  return Ce = Object.setPrototypeOf ? Object.getPrototypeOf.bind() : function (e) {
     return e.__proto__ || Object.getPrototypeOf(e);
-  }, Pe(e);
+  }, Ce(e);
 }
 !function (e) {
   e.emailMagicLinks = "emailMagicLinks", e.sso = "sso", e.passwords = "passwords", e.oauth = "oauth";
@@ -945,7 +968,7 @@ function Pe(e) {
 }(y || (y = {})), function (e) {
   e.Google = "google", e.Microsoft = "microsoft";
 }(w || (w = {}));
-var Ce;
+var Pe;
 function Te(e, t, r, n) {
   return new (r || (r = Promise))(function (i, o) {
     function s(e) {
@@ -973,7 +996,7 @@ function Te(e, t, r, n) {
 }
 "function" == typeof SuppressedError && SuppressedError, function (e) {
   e.RequiredCatcha = "Catcha Required";
-}(Ce || (Ce = {}));
+}(Pe || (Pe = {}));
 var Oe,
   xe = function (e) {
     function t(e) {
@@ -1067,7 +1090,7 @@ function Ae(e) {
             e.next = 49;
             break;
           }
-          throw new xe(Ce.RequiredCatcha);
+          throw new xe(Pe.RequiredCatcha);
         case 49:
           throw new A("Invalid response from the Stytch servers.");
         case 50:
@@ -1083,8 +1106,8 @@ function De() {
   return Oe(Ee);
 }
 var Ie = /^(?:[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}|00000000-0000-0000-0000-000000000000)$/i;
-for (var Re = [], je = 0; je < 256; ++je) Re.push((je + 256).toString(16).substr(1));
-function Fe(e) {
+for (var Re = [], Fe = 0; Fe < 256; ++Fe) Re.push((Fe + 256).toString(16).substr(1));
+function je(e) {
   var t = arguments.length > 1 && void 0 !== arguments[1] ? arguments[1] : 0,
     r = (Re[e[t + 0]] + Re[e[t + 1]] + Re[e[t + 2]] + Re[e[t + 3]] + "-" + Re[e[t + 4]] + Re[e[t + 5]] + "-" + Re[e[t + 6]] + Re[e[t + 7]] + "-" + Re[e[t + 8]] + Re[e[t + 9]] + "-" + Re[e[t + 10]] + Re[e[t + 11]] + Re[e[t + 12]] + Re[e[t + 13]] + Re[e[t + 14]] + Re[e[t + 15]]).toLowerCase();
   if (!function (e) {
@@ -1099,7 +1122,7 @@ function Le(e, t, r) {
     for (var i = 0; i < 16; ++i) t[r + i] = n[i];
     return t;
   }
-  return Fe(n);
+  return je(n);
 }
 var Me = {};
 function Be(e, t) {
@@ -1169,73 +1192,26 @@ var Ne,
     var t = {
       isObject: function isObject(r, n) {
         var i = "object" === fe(n) && !Array.isArray(n) && null !== n;
-        if (!i) throw new P(e, r + " must be an object.");
+        if (!i) throw new C(e, r + " must be an object.");
         return t;
       },
       isOptionalObject: function isOptionalObject(e, r) {
         return void 0 === r ? t : t.isObject(e, r);
       },
       isString: function isString(r, n) {
-        if ("string" != typeof n) throw new P(e, r + " must be a string.");
+        if ("string" != typeof n) throw new C(e, r + " must be a string.");
         return t;
       },
       isOptionalString: function isOptionalString(e, r) {
         return void 0 === r ? t : t.isString(e, r);
       },
       isStringArray: function isStringArray(r, n) {
-        if (!Array.isArray(n)) throw new P(e, r + " must be an array of strings.");
+        if (!Array.isArray(n)) throw new C(e, r + " must be an array of strings.");
         var i,
-          o = function (e, t) {
-            var r = "undefined" != typeof Symbol && e[Symbol.iterator] || e["@@iterator"];
-            if (!r) {
-              if (Array.isArray(e) || (r = he(e)) || t && e && "number" == typeof e.length) {
-                r && (e = r);
-                var _n = 0,
-                  i = function i() {};
-                return {
-                  s: i,
-                  n: function n() {
-                    return _n >= e.length ? {
-                      done: !0
-                    } : {
-                      done: !1,
-                      value: e[_n++]
-                    };
-                  },
-                  e: function e(_e2) {
-                    throw _e2;
-                  },
-                  f: i
-                };
-              }
-              throw new TypeError("Invalid attempt to iterate non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
-            }
-            var o,
-              s = !0,
-              a = !1;
-            return {
-              s: function s() {
-                r = r.call(e);
-              },
-              n: function n() {
-                var e = r.next();
-                return s = e.done, e;
-              },
-              e: function e(_e3) {
-                a = !0, o = _e3;
-              },
-              f: function f() {
-                try {
-                  s || null == r["return"] || r["return"]();
-                } finally {
-                  if (a) throw o;
-                }
-              }
-            };
-          }(n);
+          o = he(n);
         try {
           for (o.s(); !(i = o.n()).done;) {
-            if ("string" != typeof i.value) throw new P(e, r + " must be an array of strings.");
+            if ("string" != typeof i.value) throw new C(e, r + " must be an array of strings.");
           }
         } catch (e) {
           o.e(e);
@@ -1248,14 +1224,14 @@ var Ne,
         return void 0 === r ? t : t.isStringArray(e, r);
       },
       isNumber: function isNumber(r, n) {
-        if ("number" != typeof n) throw new P(e, r + " must be a number.");
+        if ("number" != typeof n) throw new C(e, r + " must be a number.");
         return t;
       },
       isOptionalNumber: function isOptionalNumber(e, r) {
         return void 0 === r ? t : t.isNumber(e, r);
       },
       isBoolean: function isBoolean(r, n) {
-        if ("boolean" != typeof n) throw new P(e, r + " must be a boolean.");
+        if ("boolean" != typeof n) throw new C(e, r + " must be a boolean.");
         return t;
       },
       isOptionalBoolean: function isOptionalBoolean(e, r) {
@@ -1359,7 +1335,7 @@ var Ne,
             case 0:
               return r.next = 2, this.state;
             case 2:
-              if (n = r.sent, i = n.enabled, o = n.executeRecaptcha, e.type !== Ce.RequiredCatcha || !i) {
+              if (n = r.sent, i = n.enabled, o = n.executeRecaptcha, e.type !== Pe.RequiredCatcha || !i) {
                 r.next = 14;
                 break;
               }
@@ -1504,7 +1480,7 @@ var Ne,
           case "SDKAPIUnreachableError":
             return e.inflate(S, t);
           case "StytchSDKSchemaError":
-            return e.inflate(C, t);
+            return e.inflate(P, t);
           case "StytchAPIUnreachableError":
             return e.inflate(A, t);
           case "StytchAPISchemaError":
@@ -1852,6 +1828,11 @@ var Ze = Promise.resolve({
       }));
     }, this.getSync = function () {
       return n._subscriptionService.getMember();
+    }, this.getInfo = function () {
+      return {
+        member: n.getSync(),
+        fromCache: n._subscriptionService.getFromCache()
+      };
     }, this.onChange = function (e) {
       return n._subscriptionService.subscribeToState(function (t) {
         var r;
@@ -2239,6 +2220,11 @@ var Ze = Promise.resolve({
       }));
     }, this.getSync = function () {
       return n._subscriptionService.getOrganization();
+    }, this.getInfo = function () {
+      return {
+        organization: n.getSync(),
+        fromCache: n._subscriptionService.getFromCache()
+      };
     }, this.onChange = function (e) {
       return n._subscriptionService.subscribeToState(function (t) {
         var r;
@@ -2648,6 +2634,11 @@ var Ze = Promise.resolve({
       var n = this;
       ge(this, e), this._networkClient = t, this._subscriptionService = r, this.getSync = function () {
         return n._subscriptionService.getSession();
+      }, this.getInfo = function () {
+        return {
+          session: n.getSync(),
+          fromCache: n._subscriptionService.getFromCache()
+        };
       }, this.onChange = function (e) {
         return n._subscriptionService.subscribeToState(function (t) {
           var r;
@@ -3496,8 +3487,8 @@ var Ze = Promise.resolve({
         return i.policyPromise.then(function (r) {
           return r.callerIsAuthorized(i.roleIds(), e, t);
         });
-      }, this.cachedPolicy = t.rbacPolicy ? _t.fromJSON(t.rbacPolicy) : null, this.policyPromise = r.then(function (e) {
-        return e.rbacPolicy ? (i.cachedPolicy = _t.fromJSON(e.rbacPolicy), i.cachedPolicy) : (We("Unable to retrieve RBAC policy from servers. Assuming caller has no permissions."), new _t([], []));
+      }, this.cachedPolicy = t.rbacPolicy ? mt.fromJSON(t.rbacPolicy) : null, this.policyPromise = r.then(function (e) {
+        return e.rbacPolicy ? (i.cachedPolicy = mt.fromJSON(e.rbacPolicy), i.cachedPolicy) : (We("Unable to retrieve RBAC policy from servers. Assuming caller has no permissions."), new mt([], []));
       });
     }
     return ve(e, [{
@@ -3620,7 +3611,9 @@ var Ze = Promise.resolve({
     function e(t, r) {
       var n = this;
       ge(this, e), this._subscriptionService = t, this._headlessSessionClient = r, this._onDataChange = function (e) {
-        (null == e ? void 0 : e.session) ? n.scheduleBackgroundRefresh() : n.cancelBackgroundRefresh();
+        !function (e) {
+          return !!(null == e ? void 0 : e.session);
+        }(e) ? n.cancelBackgroundRefresh() : n.scheduleBackgroundRefresh();
       }, this._reauthenticateWithBackoff = function () {
         return Te(n, void 0, void 0, _e().mark(function t() {
           var r;
@@ -3691,58 +3684,66 @@ var Ze = Promise.resolve({
     }]), e;
   }();
 ft.REFRESH_INTERVAL_MS = 18e4;
-var _t = function () {
-  function e(t, r) {
+var _t = ve(function e(t, r) {
     var n = this;
-    ge(this, e), this.roles = t, this.resources = r, this.rolesByID = {}, t.forEach(function (e) {
-      return n.rolesByID[e.role_id] = e;
-    });
-  }
-  return ve(e, [{
-    key: "callerIsAuthorized",
-    value: function value(e, t, r) {
+    ge(this, e), this._subscriptionService = t, this.emptyState = r, this.onStateChange = function (e) {
+      return n._subscriptionService.subscribeToState(function (t) {
+        e(null != t ? t : n.emptyState);
+      });
+    };
+  }),
+  mt = function () {
+    function e(t, r) {
       var n = this;
-      return !!e.map(function (e) {
-        return n.rolesByID[e];
-      }).filter(function (e) {
-        return e;
-      }).flatMap(function (e) {
-        return e.permissions;
-      }).filter(function (e) {
-        return e.resource_id === t;
-      }).find(function (e) {
-        return e.actions.includes(r) || e.actions.includes("*");
+      ge(this, e), this.roles = t, this.resources = r, this.rolesByID = {}, t.forEach(function (e) {
+        return n.rolesByID[e.role_id] = e;
       });
     }
-  }, {
-    key: "allPermissionsForCaller",
-    value: function value(e) {
-      var t = this,
-        r = {};
-      return this.resources.forEach(function (n) {
-        r[n.resource_id] = {}, n.actions.forEach(function (i) {
-          r[n.resource_id][i] = t.callerIsAuthorized(e, n.resource_id, i);
+    return ve(e, [{
+      key: "callerIsAuthorized",
+      value: function value(e, t, r) {
+        var n = this;
+        return !!e.map(function (e) {
+          return n.rolesByID[e];
+        }).filter(function (e) {
+          return e;
+        }).flatMap(function (e) {
+          return e.permissions;
+        }).filter(function (e) {
+          return e.resource_id === t;
+        }).find(function (e) {
+          return e.actions.includes(r) || e.actions.includes("*");
         });
-      }), r;
-    }
-  }], [{
-    key: "fromJSON",
-    value: function value(t) {
-      return new e(t.roles, t.resources);
-    }
-  }]), e;
-}();
-var mt = "bootstrap";
-var vt = /*#__PURE__*/function () {
-  function vt(e, t, r) {
+      }
+    }, {
+      key: "allPermissionsForCaller",
+      value: function value(e) {
+        var t = this,
+          r = {};
+        return this.resources.forEach(function (n) {
+          r[n.resource_id] = {}, n.actions.forEach(function (i) {
+            r[n.resource_id][i] = t.callerIsAuthorized(e, n.resource_id, i);
+          });
+        }), r;
+      }
+    }], [{
+      key: "fromJSON",
+      value: function value(t) {
+        return new e(t.roles, t.resources);
+      }
+    }]), e;
+  }();
+var vt = "bootstrap";
+var bt = /*#__PURE__*/function () {
+  function bt(e, t, r) {
     var _this = this;
-    _classCallCheck(this, vt);
+    _classCallCheck(this, bt);
     this._publicToken = e, this._networkClient = t, this._dataLayer = r, this._bootstrapDataPromise = this._networkClient.fetchSDK({
       url: "/projects/bootstrap/".concat(this._publicToken),
       method: "GET",
       errorMessage: "Error fetching bootstrap data for SDK for ".concat(this._publicToken)
-    }).then(vt.mapBootstrapData).then(function (e) {
-      return _this._dataLayer.setItem(mt, JSON.stringify(e)), e;
+    }).then(bt.mapBootstrapData).then(function (e) {
+      return _this._dataLayer.setItem(vt, JSON.stringify(e)), e;
     })["catch"](function (e) {
       return We(e), {
         displayWatermark: !1,
@@ -3763,10 +3764,10 @@ var vt = /*#__PURE__*/function () {
       };
     });
   }
-  _createClass(vt, [{
+  _createClass(bt, [{
     key: "getSync",
     value: function getSync() {
-      var e = this._dataLayer.getItem(mt);
+      var e = this._dataLayer.getItem(vt);
       if (null === e) return {
         displayWatermark: !1,
         cnameDomain: null,
@@ -3837,9 +3838,9 @@ var vt = /*#__PURE__*/function () {
       };
     }
   }]);
-  return vt;
+  return bt;
 }();
-function bt(e, t, r, n) {
+function gt(e, t, r, n) {
   return new (r || (r = Promise))(function (i, o) {
     function s(e) {
       try {
@@ -3865,11 +3866,11 @@ function bt(e, t, r, n) {
   });
 }
 "function" == typeof SuppressedError && SuppressedError;
-var gt = /*#__PURE__*/_createClass(function gt(e) {
+var kt = /*#__PURE__*/_createClass(function kt(e) {
   var _this2 = this;
-  _classCallCheck(this, gt);
+  _classCallCheck(this, kt);
   this.bootstrapPromise = e, this.executeRecaptcha = function () {
-    return bt(_this2, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee() {
+    return gt(_this2, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee() {
       var _yield$this$state, e, t, r;
       return _regeneratorRuntime().wrap(function _callee$(_context) {
         while (1) switch (_context.prev = _context.next) {
@@ -3900,7 +3901,7 @@ var gt = /*#__PURE__*/_createClass(function gt(e) {
       }, _callee, this);
     }));
   }, this.state = e.then(function (e) {
-    return bt(_this2, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee2() {
+    return gt(_this2, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee2() {
       var t;
       return _regeneratorRuntime().wrap(function _callee2$(_context2) {
         while (1) switch (_context2.prev = _context2.next) {
@@ -3938,10 +3939,10 @@ var gt = /*#__PURE__*/_createClass(function gt(e) {
     }));
   });
 });
-var kt = /*#__PURE__*/function () {
-  function kt(e) {
+var yt = /*#__PURE__*/function () {
+  function yt(e) {
     var _this3 = this;
-    _classCallCheck(this, kt);
+    _classCallCheck(this, yt);
     this.iframeURL = e, this.oneTapStart = function (e) {
       return _this3.call("oneTapStart", e);
     }, this.oneTapSubmit = function (e) {
@@ -3950,7 +3951,7 @@ var kt = /*#__PURE__*/function () {
       return _this3.call("parsedPhoneNumber", e);
     };
   }
-  _createClass(kt, [{
+  _createClass(yt, [{
     key: "frameClient",
     get: function get() {
       var e;
@@ -3962,11 +3963,11 @@ var kt = /*#__PURE__*/function () {
       return this.frameClient.call(e, [t]);
     }
   }]);
-  return kt;
+  return yt;
 }();
-var yt = /*#__PURE__*/function () {
-  function yt(e, t, r, n) {
-    _classCallCheck(this, yt);
+var wt = /*#__PURE__*/function () {
+  function wt(e, t, r, n) {
+    _classCallCheck(this, wt);
     this._publicToken = e, this._subscriptionDataLayer = t, this.baseURL = r, this.additionalTelemetryDataFn = n, this.updateSessionToken = function () {
       return null;
     }, this.eventLogger = new Xe({
@@ -3975,7 +3976,7 @@ var yt = /*#__PURE__*/function () {
       logEventURL: this.buildSDKUrl("/events")
     });
   }
-  _createClass(yt, [{
+  _createClass(wt, [{
     key: "logEvent",
     value: function logEvent(_ref) {
       var e = _ref.name,
@@ -4006,7 +4007,7 @@ var yt = /*#__PURE__*/function () {
         },
         sdk: {
           identifier: "Stytch.js Javascript SDK",
-          version: "4.8.0"
+          version: "4.9.1"
         }
       });
     }
@@ -4017,7 +4018,7 @@ var yt = /*#__PURE__*/function () {
         t = _ref2.body,
         r = _ref2.errorMessage,
         n = _ref2.method;
-      return bt(this, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee3() {
+      return gt(this, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee3() {
         var i, o, s, a;
         return _regeneratorRuntime().wrap(function _callee3$(_context3) {
           while (1) switch (_context3.prev = _context3.next) {
@@ -4047,7 +4048,7 @@ var yt = /*#__PURE__*/function () {
         r = _ref3.errorMessage,
         n = _ref3.method,
         i = _ref3.retryCallback;
-      return bt(this, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee4() {
+      return gt(this, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee4() {
         var o, s, a, c;
         return _regeneratorRuntime().wrap(function _callee4$(_context4) {
           while (1) switch (_context4.prev = _context4.next) {
@@ -4118,18 +4119,18 @@ var yt = /*#__PURE__*/function () {
       return "".concat(this.baseURL, "/sdk/v1").concat(e);
     }
   }]);
-  return yt;
+  return wt;
 }();
-function wt(e) {
+function St(e) {
   var t = e.toString(16);
   return 1 === t.length && (t = "0" + t), t;
 }
-var St = /*#__PURE__*/function () {
-  function St(e, t) {
-    _classCallCheck(this, St);
+var Ct = /*#__PURE__*/function () {
+  function Ct(e, t) {
+    _classCallCheck(this, Ct);
     this._dataLayer = e, this.namespace = t;
   }
-  _createClass(St, [{
+  _createClass(Ct, [{
     key: "key",
     value: function key() {
       return "PKCE_VERIFIER:" + this.namespace;
@@ -4137,13 +4138,13 @@ var St = /*#__PURE__*/function () {
   }, {
     key: "startPKCETransaction",
     value: function startPKCETransaction() {
-      return bt(this, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee5() {
+      return gt(this, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee5() {
         var e;
         return _regeneratorRuntime().wrap(function _callee5$(_context5) {
           while (1) switch (_context5.prev = _context5.next) {
             case 0:
               _context5.next = 2;
-              return St.createProofkeyPair();
+              return Ct.createProofkeyPair();
             case 2:
               e = _context5.sent;
               return _context5.abrupt("return", (this._dataLayer.setItem(this.key(), JSON.stringify(e)), e));
@@ -4172,7 +4173,7 @@ var St = /*#__PURE__*/function () {
   }], [{
     key: "createProofkeyPair",
     value: function createProofkeyPair() {
-      return bt(this, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee6() {
+      return gt(this, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee6() {
         var _String$fromCharCode;
         var e, t, r, n;
         return _regeneratorRuntime().wrap(function _callee6$(_context6) {
@@ -4180,7 +4181,7 @@ var St = /*#__PURE__*/function () {
             case 0:
               e = new Uint32Array(16);
               window.crypto.getRandomValues(e);
-              t = Array.from(e).map(wt).join("");
+              t = Array.from(e).map(St).join("");
               _context6.next = 5;
               return window.crypto.subtle.digest("SHA-256", new TextEncoder().encode(t));
             case 5:
@@ -4197,7 +4198,7 @@ var St = /*#__PURE__*/function () {
       }));
     }
   }]);
-  return St;
+  return Ct;
 }();
 var Pt = function Pt(e) {
   return (document.cookie ? document.cookie.split("; ") : []).filter(function (t) {
@@ -4208,17 +4209,17 @@ var Pt = function Pt(e) {
   }).length > 1;
 };
 /*! js-cookie v3.0.1 | MIT */
-function Ct(e) {
+function Tt(e) {
   for (var t = 1; t < arguments.length; t++) {
     var r = arguments[t];
     for (var n in r) e[n] = r[n];
   }
   return e;
 }
-var Tt = function e(t, r) {
+var Ot = function e(t, r) {
   function n(e, n, i) {
     if ("undefined" != typeof document) {
-      "number" == typeof (i = Ct({}, r, i)).expires && (i.expires = new Date(Date.now() + 864e5 * i.expires)), i.expires && (i.expires = i.expires.toUTCString()), e = encodeURIComponent(e).replace(/%(2[346B]|5E|60|7C)/g, decodeURIComponent).replace(/[()]/g, escape);
+      "number" == typeof (i = Tt({}, r, i)).expires && (i.expires = new Date(Date.now() + 864e5 * i.expires)), i.expires && (i.expires = i.expires.toUTCString()), e = encodeURIComponent(e).replace(/%(2[346B]|5E|60|7C)/g, decodeURIComponent).replace(/[()]/g, escape);
       var o = "";
       for (var s in i) i[s] && (o += "; " + s, !0 !== i[s] && (o += "=" + i[s].split(";")[0]));
       return document.cookie = e + "=" + t.write(n, e) + o;
@@ -4240,15 +4241,15 @@ var Tt = function e(t, r) {
       }
     },
     remove: function remove(e, t) {
-      n(e, "", Ct({}, t, {
+      n(e, "", Tt({}, t, {
         expires: -1
       }));
     },
     withAttributes: function withAttributes(t) {
-      return e(this.converter, Ct({}, this.attributes, t));
+      return e(this.converter, Tt({}, this.attributes, t));
     },
     withConverter: function withConverter(t) {
-      return e(Ct({}, this.converter, t), this.attributes);
+      return e(Tt({}, this.converter, t), this.attributes);
     }
   }, {
     attributes: {
@@ -4268,37 +4269,37 @@ var Tt = function e(t, r) {
 }, {
   path: "/"
 });
-var Ot = function Ot(e) {
+var xt = function xt(e) {
     var t = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : "";
     return "stytch_sdk_state_".concat(e).concat(t ? "::".concat(t) : "");
   },
-  xt = new Map(),
-  At = function At(e) {
-    clearTimeout(xt.get(e));
+  At = new Map(),
+  Et = function Et(e) {
+    clearTimeout(At.get(e));
   },
-  Et = function Et(e, t, r) {
-    At(e);
+  Dt = function Dt(e, t, r) {
+    Et(e);
     var n = setTimeout(function () {
-      void 0 === Tt.get(e) && Tt.set(e, t, r);
+      void 0 === Ot.get(e) && Ot.set(e, t, r);
     }, 10);
-    return xt.set(e, n), Tt.set(e, t, r);
+    return At.set(e, n), Ot.set(e, t, r);
   };
-var Dt = /*#__PURE__*/function () {
-  function Dt(e, t) {
+var It = /*#__PURE__*/function () {
+  function It(e, t) {
     var _this4 = this;
-    _classCallCheck(this, Dt);
+    _classCallCheck(this, It);
     this.browserSessionStorage = {
       getItem: function getItem(e) {
-        return sessionStorage.getItem(Ot(_this4.publicToken, e));
+        return sessionStorage.getItem(xt(_this4.publicToken, e));
       },
       setItem: function setItem(e, t) {
-        return sessionStorage.setItem(Ot(_this4.publicToken, e), t);
+        return sessionStorage.setItem(xt(_this4.publicToken, e), t);
       },
       removeItem: function removeItem(e) {
-        return sessionStorage.removeItem(Ot(_this4.publicToken, e));
+        return sessionStorage.removeItem(xt(_this4.publicToken, e));
       }
     }, this.publicToken = e, this.state = null, this.stateKeysUpdated = new Set(), this.subscriptions = {}, (null == t ? void 0 : t.cookieOptions) ? (Ve("SubscriptionDataLayer").isOptionalString("cookieOptions.opaqueTokenCookieName", t.cookieOptions.opaqueTokenCookieName).isOptionalString("cookieOptions.jwtCookieName", t.cookieOptions.jwtCookieName).isOptionalString("cookieOptions.istCookieName", t.cookieOptions.istCookieName).isOptionalString("cookieOptions.path", t.cookieOptions.path).isOptionalString("cookieOptions.domain", t.cookieOptions.domain), this._jwtCookieName = t.cookieOptions.jwtCookieName || null, this._opaqueTokenCookieName = t.cookieOptions.opaqueTokenCookieName || null, this._cookiePath = t.cookieOptions.path || null, this._domain = t.cookieOptions.domain || null, this._cookieAvailableToSubdomains = t.cookieOptions.availableToSubdomains || !1, this._istCookieName = t.cookieOptions.istCookieName || null) : (this._opaqueTokenCookieName = null, this._jwtCookieName = null, this._cookiePath = null, this._domain = null, this._cookieAvailableToSubdomains = !1, this._istCookieName = null);
-    var r = localStorage.getItem(Ot(this.publicToken));
+    var r = localStorage.getItem(xt(this.publicToken));
     if (!r) return;
     var n;
     try {
@@ -4308,7 +4309,7 @@ var Dt = /*#__PURE__*/function () {
     }
     this.state = n;
   }
-  _createClass(Dt, [{
+  _createClass(It, [{
     key: "opaqueTokenCookieName",
     get: function get() {
       var e;
@@ -4330,14 +4331,14 @@ var Dt = /*#__PURE__*/function () {
     key: "readSessionCookie",
     value: function readSessionCookie() {
       return {
-        session_token: Tt.get(this.opaqueTokenCookieName),
-        session_jwt: Tt.get(this.jwtCookieName)
+        session_token: Ot.get(this.opaqueTokenCookieName),
+        session_jwt: Ot.get(this.jwtCookieName)
       };
     }
   }, {
     key: "readIntermediateSessionTokenCookie",
     value: function readIntermediateSessionTokenCookie() {
-      return Tt.get(this.istCookieName);
+      return Ot.get(this.istCookieName);
     }
   }, {
     key: "writeSessionCookie",
@@ -4346,32 +4347,32 @@ var Dt = /*#__PURE__*/function () {
       var o = e.state,
         s = e.session_token,
         a = e.session_jwt,
-        c = Dt.generateCookieOpts({
+        c = It.generateCookieOpts({
           expiresAt: null !== (r = null === (t = null == o ? void 0 : o.session) || void 0 === t ? void 0 : t.expires_at) && void 0 !== r ? r : "",
           availableToSubdomains: this._cookieAvailableToSubdomains,
           path: this._cookiePath,
           domain: this._domain
         });
-      Et(this.opaqueTokenCookieName, s, c), Et(this.jwtCookieName, a, c);
-      var u = Dt.generateCookieOpts({
+      Dt(this.opaqueTokenCookieName, s, c), Dt(this.jwtCookieName, a, c);
+      var u = It.generateCookieOpts({
         expiresAt: null !== (i = null === (n = null == o ? void 0 : o.session) || void 0 === n ? void 0 : n.expires_at) && void 0 !== i ? i : "",
         availableToSubdomains: !this._cookieAvailableToSubdomains,
         path: this._cookiePath,
         domain: this._domain
       });
-      Pt(this.jwtCookieName) && Tt.remove(this.jwtCookieName, u), Pt(this.opaqueTokenCookieName) && Tt.remove(this.opaqueTokenCookieName, u), Pt(this.jwtCookieName) && qe("Could not remove extraneous JWT cookie. This might happen if the cookie has been set using multiple `path` settings, and may produce unwanted behavior."), Pt(this.opaqueTokenCookieName) && qe("Could not remove extraneous opaque token cookie.");
+      Pt(this.jwtCookieName) && Ot.remove(this.jwtCookieName, u), Pt(this.opaqueTokenCookieName) && Ot.remove(this.opaqueTokenCookieName, u), Pt(this.jwtCookieName) && qe("Could not remove extraneous JWT cookie. This might happen if the cookie has been set using multiple `path` settings, and may produce unwanted behavior."), Pt(this.opaqueTokenCookieName) && qe("Could not remove extraneous opaque token cookie.");
     }
   }, {
     key: "writeIntermediateSessionTokenCookie",
     value: function writeIntermediateSessionTokenCookie(e) {
       var t = new Date(Date.now() + 6e5),
-        r = Dt.generateCookieOpts({
+        r = It.generateCookieOpts({
           expiresAt: t.toString(),
           availableToSubdomains: this._cookieAvailableToSubdomains,
           path: this._cookiePath,
           domain: this._domain
         });
-      Et(this.istCookieName, e, r);
+      Dt(this.istCookieName, e, r);
     }
   }, {
     key: "removeSessionCookie",
@@ -4390,47 +4391,38 @@ var Dt = /*#__PURE__*/function () {
       [!0, !1].forEach(function (t) {
         [_this5._cookiePath, null].forEach(function (r) {
           [_this5._domain, null].forEach(function (n) {
-            var i = Dt.generateCookieOpts({
+            var i = It.generateCookieOpts({
               expiresAt: new Date(0).toString(),
               availableToSubdomains: t,
               path: r,
               domain: n
             });
             e.forEach(function (e) {
-              Tt.remove(e, i);
+              Ot.remove(e, i);
             });
           });
         });
-      }), e.forEach(At);
+      }), e.forEach(Et);
     }
   }, {
     key: "syncToLocalStorage",
     value: function syncToLocalStorage() {
-      localStorage.setItem(Ot(this.publicToken), JSON.stringify(this.state));
+      localStorage.setItem(xt(this.publicToken), JSON.stringify(this.state));
     }
   }, {
     key: "getItem",
     value: function getItem(e) {
-      return localStorage.getItem(Ot(this.publicToken, e));
+      return localStorage.getItem(xt(this.publicToken, e));
     }
   }, {
     key: "setItem",
     value: function setItem(e, t) {
-      return localStorage.setItem(Ot(this.publicToken, e), t);
+      return localStorage.setItem(xt(this.publicToken, e), t);
     }
   }, {
     key: "removeItem",
     value: function removeItem(e) {
-      return localStorage.removeItem(Ot(this.publicToken, e));
-    }
-  }, {
-    key: "markStateKeysUpdated",
-    value: function markStateKeysUpdated(e) {
-      var _this6 = this;
-      var t = this.stateKeysUpdated.size;
-      return e.forEach(function (e) {
-        return _this6.stateKeysUpdated.add(e);
-      }), t !== this.stateKeysUpdated.size;
+      return localStorage.removeItem(xt(this.publicToken, e));
     }
   }], [{
     key: "generateCookieOpts",
@@ -4446,62 +4438,65 @@ var Dt = /*#__PURE__*/function () {
       return e && (i.path = e), Boolean("localhost" === window.location.hostname || "[::1]" === window.location.hostname || window.location.hostname.match(/^127(?:\.(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)){3}$/)) ? i.secure = !1 : (r && (i.domain = t || window.location.host), i.secure = !0), i;
     }
   }]);
-  return Dt;
+  return It;
 }();
-var It = /*#__PURE__*/function (_Dt) {
-  _inherits(It, _Dt);
-  function It() {
-    _classCallCheck(this, It);
-    return _callSuper(this, It, arguments);
+var Rt = /*#__PURE__*/function (_It) {
+  _inherits(Rt, _It);
+  function Rt() {
+    _classCallCheck(this, Rt);
+    return _callSuper(this, Rt, arguments);
   }
-  return _createClass(It);
-}(Dt);
-var Rt = Symbol["for"]("__stytch_b2b_DataLayer"),
+  return _createClass(Rt);
+}(It);
+var Ft = Symbol["for"]("__stytch_b2b_DataLayer"),
   jt = function jt(e, t) {
     var r = function () {
       var e = window;
-      return e[Rt] || (e[Rt] = {}), e[Rt];
+      return e[Ft] || (e[Ft] = {}), e[Ft];
     }();
-    return r[e] || (r[e] = new It(e, t)), r[e];
+    return r[e] || (r[e] = new Rt(e, t)), r[e];
   },
-  Ft = function Ft(e, t) {
+  Lt = function Lt(e, t) {
     Object.values(e).forEach(function (e) {
       return e(t);
     });
   },
-  Lt = function () {
-    var e = (arguments.length > 0 && void 0 !== arguments[0] ? arguments[0] : {}).KEYS_TO_EXCLUDE,
-      t = void 0 === e ? [] : e;
-    return function e(r, n) {
-      return fe(r) === fe(n) && (null === r || null === n ? r === n : "object" === fe(r) ? Object.keys(r).length === Object.keys(n).length && !Object.keys(r).some(function (e) {
+  Mt = function () {
+    var _ref5 = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : {},
+      _ref5$KEYS_TO_EXCLUDE = _ref5.KEYS_TO_EXCLUDE,
+      e = _ref5$KEYS_TO_EXCLUDE === void 0 ? [] : _ref5$KEYS_TO_EXCLUDE;
+    var t = function t(r, n) {
+      return _typeof(r) == _typeof(n) && (null === r || null === n ? r === n : "object" == _typeof(r) ? Object.keys(r).length === Object.keys(n).length && !Object.keys(r).some(function (e) {
         return !(e in n);
-      }) && Object.entries(r).filter(function (e) {
-        var r = de(e, 1)[0];
-        return !t.includes(r);
-      }).every(function (t) {
-        var r = de(t, 2),
-          i = r[0],
-          o = r[1];
-        return e(o, n[i]);
+      }) && Object.entries(r).filter(function (_ref6) {
+        var _ref7 = _slicedToArray(_ref6, 1),
+          t = _ref7[0];
+        return !e.includes(t);
+      }).every(function (_ref8) {
+        var _ref9 = _slicedToArray(_ref8, 2),
+          e = _ref9[0],
+          r = _ref9[1];
+        return t(r, n[e]);
       }) : r === n);
     };
+    return t;
   }({
     KEYS_TO_EXCLUDE: ["last_accessed_at"]
   });
-var Mt = /*#__PURE__*/function () {
-  function Mt(e, t) {
-    var _this7 = this;
-    _classCallCheck(this, Mt);
-    this._publicToken = e, this._datalayer = t, this._listen = function (e) {
-      if (e.key !== Ot(_this7._publicToken)) return;
+var Bt = /*#__PURE__*/function () {
+  function Bt(e, t) {
+    var _this6 = this;
+    _classCallCheck(this, Bt);
+    this._publicToken = e, this._datalayer = t, this.fromCache = !0, this._listen = function (e) {
+      if (e.key !== xt(_this6._publicToken)) return;
       var t = null === e.newValue || "null" === e.newValue ? null : JSON.parse(e.newValue);
-      _this7.updateState(t, !0);
+      _this6.updateState(t, !0);
     }, window.addEventListener("storage", this._listen);
     var _this$_datalayer$read = this._datalayer.readSessionCookie(),
       r = _this$_datalayer$read.session_token;
     r || this.destroySession();
   }
-  _createClass(Mt, [{
+  _createClass(Bt, [{
     key: "getTokens",
     value: function getTokens() {
       var _this$_datalayer$read2 = this._datalayer.readSessionCookie(),
@@ -4538,8 +4533,8 @@ var Mt = /*#__PURE__*/function () {
       var t = this._datalayer.state,
         r = null === e.state ? null : Object.assign(Object.assign({}, this._datalayer.state), e.state);
       this._datalayer.state = r;
-      var n = e.state ? Object.keys(e.state) : [];
-      !this._datalayer.markStateKeysUpdated(n) && Lt(t, r) || Ft(this._datalayer.subscriptions, r);
+      var n = this.getFromCache();
+      this.setCacheRefreshed(), !n && Mt(t, r) || Lt(this._datalayer.subscriptions, r);
     }
   }, {
     key: "updateStateAndTokens",
@@ -4553,10 +4548,10 @@ var Mt = /*#__PURE__*/function () {
       var r = this._datalayer.state,
         n = null === e ? null : Object.assign(Object.assign({}, this._datalayer.state), e);
       this._datalayer.state = n;
-      var i = e ? Object.keys(e) : [],
-        o = this._datalayer.markStateKeysUpdated(i),
-        s = !Lt(r, n);
-      (o || s) && (Ft(this._datalayer.subscriptions, n), s && !t && this._datalayer.syncToLocalStorage());
+      var i = this.getFromCache();
+      this.setCacheRefreshed();
+      var o = !Mt(r, n);
+      (i || o) && (Lt(this._datalayer.subscriptions, n), o && !t && this._datalayer.syncToLocalStorage());
     }
   }, {
     key: "updateTokens",
@@ -4595,40 +4590,50 @@ var Mt = /*#__PURE__*/function () {
     value: function syncFromDeviceStorage() {
       return null;
     }
+  }, {
+    key: "getFromCache",
+    value: function getFromCache() {
+      return this.fromCache;
+    }
+  }, {
+    key: "setCacheRefreshed",
+    value: function setCacheRefreshed() {
+      this.fromCache = !1;
+    }
   }]);
-  return Mt;
+  return Bt;
 }();
-var Bt = /*#__PURE__*/function (_Mt) {
-  _inherits(Bt, _Mt);
-  function Bt() {
-    var _this8;
-    _classCallCheck(this, Bt);
-    _this8 = _callSuper(this, Bt, arguments), _this8.updateMember = function (e) {
-      return _this8.updateState({
+var Kt = /*#__PURE__*/function (_Bt) {
+  _inherits(Kt, _Bt);
+  function Kt() {
+    var _this7;
+    _classCallCheck(this, Kt);
+    _this7 = _callSuper(this, Kt, arguments), _this7.updateMember = function (e) {
+      return _this7.updateState({
         member: e
       });
-    }, _this8.getMember = function () {
+    }, _this7.getMember = function () {
       var e, t;
-      return null !== (t = null === (e = _this8.getState()) || void 0 === e ? void 0 : e.member) && void 0 !== t ? t : null;
-    }, _this8.updateOrganization = function (e) {
-      return _this8.updateState({
+      return null !== (t = null === (e = _this7.getState()) || void 0 === e ? void 0 : e.member) && void 0 !== t ? t : null;
+    }, _this7.updateOrganization = function (e) {
+      return _this7.updateState({
         organization: e
       });
-    }, _this8.getOrganization = function () {
+    }, _this7.getOrganization = function () {
       var e, t;
-      return null !== (t = null === (e = _this8.getState()) || void 0 === e ? void 0 : e.organization) && void 0 !== t ? t : null;
-    }, _this8.getSession = function () {
+      return null !== (t = null === (e = _this7.getState()) || void 0 === e ? void 0 : e.organization) && void 0 !== t ? t : null;
+    }, _this7.getSession = function () {
       var e, t;
-      return null !== (t = null === (e = _this8.getState()) || void 0 === e ? void 0 : e.session) && void 0 !== t ? t : null;
+      return null !== (t = null === (e = _this7.getState()) || void 0 === e ? void 0 : e.session) && void 0 !== t ? t : null;
     };
-    return _this8;
+    return _this7;
   }
-  return _createClass(Bt);
-}(Mt);
-var Kt = Symbol["for"]("stytch__internal_b2b");
-var zt = /*#__PURE__*/_createClass(function zt(e, t) {
-  var _this9 = this;
-  _classCallCheck(this, zt);
+  return _createClass(Kt);
+}(Bt);
+var zt = Symbol["for"]("stytch__internal_b2b");
+var Nt = /*#__PURE__*/_createClass(function Nt(e, t) {
+  var _this8 = this;
+  _classCallCheck(this, Nt);
   var r;
   !function (e) {
     if ("undefined" == typeof window) throw new Error("The ".concat(e, " is not compatible with server-side environments.\nIf using nextjs, use the create").concat(e, " method instead.\n```\n").concat("import { createStytchB2BHeadlessClient } from '@stytch/nextjs/b2b';\n    \n  const stytch = createStytchB2BHeadlessClient('public-token-...');\n  ", "\n```\n"));
@@ -4645,24 +4650,27 @@ var zt = /*#__PURE__*/_createClass(function zt(e, t) {
       }
     };
   var o, s, a, c, u, l, d, h, p, f, _;
-  this._dataLayer = jt(e, n), this._subscriptionService = new Bt(e, this._dataLayer);
-  var m = new St(this._dataLayer, "passwords");
-  this._networkClient = new yt(e, this._dataLayer, i.endpoints.sdkBackendURL, function () {
+  this._dataLayer = jt(e, n), this._subscriptionService = new Kt(e, this._dataLayer), this._stateChangeClient = new _t(this._subscriptionService, {}), this.onStateChange = function () {
+    var _this8$_stateChangeCl;
+    return (_this8$_stateChangeCl = _this8._stateChangeClient).onStateChange.apply(_this8$_stateChangeCl, arguments);
+  };
+  var m = new Ct(this._dataLayer, "passwords");
+  this._networkClient = new wt(e, this._dataLayer, i.endpoints.sdkBackendURL, function () {
     var e, t, r, n;
     return {
-      stytch_member_id: null === (t = null === (e = _this9._dataLayer.state) || void 0 === e ? void 0 : e.member) || void 0 === t ? void 0 : t.member_id,
-      stytch_member_session_id: null === (n = null === (r = _this9._dataLayer.state) || void 0 === r ? void 0 : r.session) || void 0 === n ? void 0 : n.member_session_id
+      stytch_member_id: null === (t = null === (e = _this8._dataLayer.state) || void 0 === e ? void 0 : e.member) || void 0 === t ? void 0 : t.member_id,
+      stytch_member_session_id: null === (n = null === (r = _this8._dataLayer.state) || void 0 === r ? void 0 : r.session) || void 0 === n ? void 0 : n.member_session_id
     };
   });
-  var v = new vt(e, this._networkClient, this._dataLayer),
-    b = new gt(v.getAsync()),
+  var v = new bt(e, this._networkClient, this._dataLayer),
+    b = new kt(v.getAsync()),
     g = new Ye(e, i.endpoints.dfpBackendURL, v.getAsync(), b.executeRecaptcha),
-    k = new kt(i.endpoints.clientsideServicesIframeURL);
-  this.organization = new rt(this._networkClient, this._subscriptionService), this.member = new et(this._networkClient, this._subscriptionService), this.self = new et(this._networkClient, this._subscriptionService), this.session = new it(this._networkClient, this._subscriptionService), this.magicLinks = new Qe(this._networkClient, this._subscriptionService, new St(this._dataLayer, "magic_links"), m, v.getAsync(), g), this.oauth = new nt(this._networkClient, this._subscriptionService, new St(this._dataLayer, "oauth"), v.getAsync(), {
+    k = new yt(i.endpoints.clientsideServicesIframeURL);
+  this.organization = new rt(this._networkClient, this._subscriptionService), this.member = new et(this._networkClient, this._subscriptionService), this.self = new et(this._networkClient, this._subscriptionService), this.session = new it(this._networkClient, this._subscriptionService), this.magicLinks = new Qe(this._networkClient, this._subscriptionService, new Ct(this._dataLayer, "magic_links"), m, v.getAsync(), g), this.oauth = new nt(this._networkClient, this._subscriptionService, new Ct(this._dataLayer, "oauth"), v.getAsync(), {
     publicToken: e,
     testAPIURL: i.endpoints.testAPIURL,
     liveAPIURL: i.endpoints.liveAPIURL
-  }, g), this.sso = new tt(this._networkClient, this._subscriptionService, new St(this._dataLayer, "sso"), v.getAsync(), {
+  }, g), this.sso = new tt(this._networkClient, this._subscriptionService, new Ct(this._dataLayer, "sso"), v.getAsync(), {
     publicToken: e,
     testAPIURL: i.endpoints.testAPIURL,
     liveAPIURL: i.endpoints.liveAPIURL
@@ -4677,7 +4685,7 @@ var zt = /*#__PURE__*/_createClass(function zt(e, t) {
     }
   });
   (function (e, t) {
-    Object.assign(e, _defineProperty({}, Kt, t));
+    Object.assign(e, _defineProperty({}, zt, t));
   })(this, {
     bootstrap: v,
     clientsideServices: k,
@@ -4687,4 +4695,4 @@ var zt = /*#__PURE__*/_createClass(function zt(e, t) {
     networkClient: this._networkClient
   });
 });
-export { k as AuthFlowType, y as B2BMFAProducts, w as B2BOAuthProviders, g as B2BProducts, Q as BiometricsFailedError, L as BiometricsUnavailableError, Y as ChallengeSigningFailedError, U as DeviceCredentialsNotAllowedError, $ as FailedCodeChallengeError, Z as FailedToDecryptDataError, j as InternalError, G as InvalidAuthorizationCredentialError, ne as InvalidCredentialTypeError, te as InvalidRedirectSchemeError, ee as InvalidStartUrlError, oe as JSONDataNotConvertibleToStringError, M as KeyInvalidatedError, B as KeystoreUnavailableError, ie as MissingAttestationObjectError, H as MissingAuthorizationCredentialIDTokenError, q as MissingGoogleClientIDError, W as MissingPKCEError, V as MissingPublicKeyError, re as MissingUrlError, K as NoBiometricsEnrolledError, F as NoBiometricsRegistrationError, R as NoCurrentSessionError, p as OAuthProviders, m as OTPMethods, _ as OneTapPositions, ae as PasskeysInvalidEncoding, ce as PasskeysMisconfigured, X as PasskeysUnsupportedError, h as Products, b as RNUIProducts, se as RandomNumberGenerationFailed, S as SDKAPIUnreachableError, J as SDKNotConfiguredError, ue as SignInWithAppleMisconfigured, D as StytchAPIError, E as StytchAPISchemaError, A as StytchAPIUnreachableError, zt as StytchB2BHeadlessClient, x as StytchError, v as StytchEventType, T as StytchSDKAPIError, I as StytchSDKError, C as StytchSDKSchemaError, P as StytchSDKUsageError, O as UNRECOVERABLE_ERROR_TYPES, z as UserCancellationError, N as UserLockedOutError, f as Wallets, le as errorToStytchError };
+export { k as AuthFlowType, y as B2BMFAProducts, w as B2BOAuthProviders, g as B2BProducts, ee as BiometricsFailedError, L as BiometricsUnavailableError, J as ChallengeSigningFailedError, U as DeviceCredentialsNotAllowedError, X as FailedCodeChallengeError, Q as FailedToDecryptDataError, F as InternalError, G as InvalidAuthorizationCredentialError, ie as InvalidCredentialTypeError, re as InvalidRedirectSchemeError, te as InvalidStartUrlError, se as JSONDataNotConvertibleToStringError, M as KeyInvalidatedError, B as KeystoreUnavailableError, oe as MissingAttestationObjectError, H as MissingAuthorizationCredentialIDTokenError, q as MissingGoogleClientIDError, W as MissingPKCEError, Y as MissingPublicKeyError, ne as MissingUrlError, K as NoBiometricsEnrolledError, j as NoBiometricsRegistrationError, V as NoCredentialsPresentError, R as NoCurrentSessionError, p as OAuthProviders, m as OTPMethods, _ as OneTapPositions, ce as PasskeysInvalidEncoding, ue as PasskeysMisconfigured, Z as PasskeysUnsupportedError, h as Products, b as RNUIProducts, ae as RandomNumberGenerationFailed, S as SDKAPIUnreachableError, $ as SDKNotConfiguredError, le as SignInWithAppleMisconfigured, D as StytchAPIError, E as StytchAPISchemaError, A as StytchAPIUnreachableError, Nt as StytchB2BHeadlessClient, x as StytchError, v as StytchEventType, T as StytchSDKAPIError, I as StytchSDKError, P as StytchSDKSchemaError, C as StytchSDKUsageError, O as UNRECOVERABLE_ERROR_TYPES, z as UserCancellationError, N as UserLockedOutError, f as Wallets, de as errorToStytchError };