@thunderid/javascript 0.11.2 → 0.11.3

package/dist/cjs/index.cjs

@@ -34,23 +34,6 @@ jose = __toESM(jose);
 
 //#region src/constants/TokenConstants.ts
 /**
-* Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
-*/
-/**
 * Constants related to OIDC token management and storage.
 * This object contains configuration values and storage keys
 * used in token validation and management processes.
@@ -87,23 +70,6 @@ var TokenConstants_default = TokenConstants;
 //#endregion
 //#region src/errors/exception.ts
 /**
-* Copyright (c) 2020, WSO2 LLC. (https://www.wso2.com). All Rights Reserved.
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
-*/
-/**
 * @deprecated Use `ThunderIDRuntimeError` for runtime errors and `ThunderIDAPIError` for API errors.
 */
 var ThunderIDAuthException = class extends Error {
@@ -191,23 +157,6 @@ var IsomorphicCrypto = class {
 //#endregion
 //#region src/errors/ThunderIDError.ts
 /**
-* Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
-*/
-/**
 * Base class for all ThunderID errors. This class extends the native Error class
 * and adds support for error codes and proper stack traces. Each error is prefixed
 * with a lightning emoji and the SDK name for easy identification.
@@ -256,23 +205,6 @@ var ThunderIDError = class ThunderIDError extends Error {
 //#endregion
 //#region src/utils/parseApiErrorMessage.ts
 /**
-* Copyright (c) 2026, WSO2 LLC. (https://www.wso2.com).
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
-*/
-/**
 * Attempts to extract a human-readable message from a structured API error response body.
 *
 * The backend returns errors in the following form:
@@ -435,23 +367,6 @@ let EmbeddedSignInFlowType = /* @__PURE__ */ function(EmbeddedSignInFlowType$1)
 //#endregion
 //#region src/utils/injectRequestedPermissions.ts
 /**
-* Copyright (c) 2026, WSO2 LLC. (https://www.wso2.com).
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
-*/
-/**
 * Strips the top-level `scopes` field from a payload and injects it as
 * `inputs.requested_permissions` (space-separated string).
 *
@@ -473,1758 +388,1601 @@ const injectRequestedPermissions = (payload) => {
 var injectRequestedPermissions_default = injectRequestedPermissions;
 
 //#endregion
-//#region src/api/executeEmbeddedSignInFlow.ts
-const executeEmbeddedSignInFlow = async ({ url, baseUrl, payload, authId, flowSecret,...requestConfig }) => {
-	if (!payload) throw new ThunderIDAPIError("Authorization payload is required", "executeEmbeddedSignInFlow-ValidationError-002", "javascript", 400, "If an authorization payload is not provided, the request cannot be constructed correctly.");
-	const endpoint = url ?? `${baseUrl}/flow/execute`;
-	const cleanPayload = typeof payload === "object" && payload !== null ? Object.fromEntries(Object.entries(payload).filter(([key]) => key !== "verbose")) : payload;
-	const isNewFlowStart = typeof cleanPayload === "object" && cleanPayload !== null && "applicationId" in cleanPayload && "flowType" in cleanPayload;
-	const hasOnlyFlowId = typeof cleanPayload === "object" && cleanPayload !== null && "executionId" in cleanPayload && Object.keys(cleanPayload).length === 1;
-	const basePayload = isNewFlowStart ? injectRequestedPermissions_default(cleanPayload) : cleanPayload;
-	const requestPayload = isNewFlowStart || hasOnlyFlowId ? {
-		...basePayload,
-		verbose: true
-	} : basePayload;
-	const response = await fetch(endpoint, {
-		...requestConfig,
-		body: JSON.stringify(requestPayload),
-		headers: {
-			Accept: "application/json",
-			"Content-Type": "application/json",
-			...isNewFlowStart && flowSecret ? { "Flow-Secret": flowSecret } : {},
-			...requestConfig.headers
-		},
-		method: requestConfig.method || "POST"
-	});
-	if (!response.ok) throw new ThunderIDAPIError(await response.text(), "executeEmbeddedSignInFlow-ResponseError-001", "javascript", response.status, response.statusText, "Authorization request failed");
-	const flowResponse = await response.json();
-	if (flowResponse.flowStatus === EmbeddedSignInFlowStatus.Complete && flowResponse.assertion && authId) try {
-		const oauth2Response = await fetch(`${baseUrl}/oauth2/auth/callback`, {
-			body: JSON.stringify({
-				assertion: flowResponse.assertion,
-				authId
-			}),
-			credentials: "include",
-			headers: {
-				Accept: "application/json",
-				"Content-Type": "application/json",
-				...requestConfig.headers
-			},
-			method: "POST"
-		});
-		if (!oauth2Response.ok) throw new ThunderIDAPIError(await oauth2Response.text(), "executeEmbeddedSignInFlow-OAuth2Error-002", "javascript", oauth2Response.status, oauth2Response.statusText, "OAuth2 authorization failed");
-		const oauth2Result = await oauth2Response.json();
-		return {
-			flowStatus: flowResponse.flowStatus,
-			redirectUrl: oauth2Result["redirect_uri"]
-		};
-	} catch (authError) {
-		if (authError instanceof ThunderIDAPIError) throw authError;
-		throw new ThunderIDAPIError(authError instanceof Error ? authError.message : "Unknown error", "executeEmbeddedSignInFlow-OAuth2Error-001", "javascript", 500, "Failed to complete OAuth2 authorization after successful embedded sign-in flow.", "OAuth2 authorization failed");
-	}
-	return flowResponse;
+//#region src/utils/logger.ts
+const PREFIX = "⚡ ThunderID";
+/**
+* Default logger configuration
+*/
+const DEFAULT_CONFIG$1 = {
+	level: "info",
+	prefix: `${PREFIX}`,
+	showLevel: true,
+	timestamps: true
 };
-var executeEmbeddedSignInFlow_default = executeEmbeddedSignInFlow;
-
-//#endregion
-//#region src/models/embedded-signup-flow.ts
 /**
-* Status enumeration for ThunderID embedded sign-up flow operations.
-*
-* These statuses indicate the current state of the registration flow and determine
-* the next action required by the client application. Each status provides specific
-* guidance on how to proceed with the user registration process.
-*
-* @example
-* ```typescript
-* switch (response.flowStatus) {
-*   case EmbeddedSignUpFlowStatus.Incomplete:
-*     // More user input needed - render registration form components
-*     break;
-*   case EmbeddedSignUpFlowStatus.Complete:
-*     // Registration successful - handle completion
-*     break;
-*   case EmbeddedSignUpFlowStatus.Error:
-*     // Registration failed - show error details
-*     const errorResponse = response as EmbeddedSignUpFlowErrorResponse;
-*     showError(errorResponse.error.description.defaultValue);
-*     break;
-* }
-* ```
-*
-* @experimental Part of the new ThunderID API
+* Environment detection utilities
 */
-let EmbeddedSignUpFlowStatus = /* @__PURE__ */ function(EmbeddedSignUpFlowStatus$1) {
+const isBrowser = () => typeof window !== "undefined" && typeof window.document !== "undefined";
+const isNode = () => typeof process !== "undefined" && process.versions && process.versions.node;
+/**
+* Color codes for terminal output (Node.js)
+*/
+const COLORS = {
+	blue: "\x1B[34m",
+	bright: "\x1B[1m",
+	cyan: "\x1B[36m",
+	dim: "\x1B[2m",
+	gray: "\x1B[90m",
+	green: "\x1B[32m",
+	magenta: "\x1B[35m",
+	red: "\x1B[31m",
+	reset: "\x1B[0m",
+	white: "\x1B[37m",
+	yellow: "\x1B[33m"
+};
+/**
+* Browser console styling
+*/
+const BROWSER_STYLES = {
+	debug: "color: #6b7280; font-weight: normal;",
+	error: "color: #dc2626; font-weight: bold;",
+	info: "color: #2563eb; font-weight: bold;",
+	prefix: "color: #7c3aed; font-weight: bold;",
+	timestamp: "color: #6b7280; font-size: 0.9em;",
+	warn: "color: #d97706; font-weight: bold;"
+};
+const LOG_LEVEL_ORDER = {
+	debug: 0,
+	error: 3,
+	info: 1,
+	warn: 2
+};
+/**
+* Universal logger class that works in both browser and Node.js environments
+*/
+var Logger = class Logger {
+	config;
+	constructor(config = {}) {
+		this.config = {
+			...DEFAULT_CONFIG$1,
+			...config
+		};
+	}
 	/**
-	* Sign-up flow completed successfully.
-	*
-	* The user has successfully registered and the flow can proceed to
-	* OAuth2 completion or redirection. Check for redirectUrl or assertion
-	* data in the response for next steps.
+	* Update logger configuration
 	*/
-	EmbeddedSignUpFlowStatus$1["Complete"] = "COMPLETE";
+	configure(config) {
+		this.config = {
+			...this.config,
+			...config
+		};
+	}
 	/**
-	* Sign-up flow encountered an error and cannot proceed.
-	*
-	* Registration failed due to validation errors, duplicate user,
-	* system errors, or other issues. The response will be of type
-	* `EmbeddedSignUpFlowErrorResponse` containing detailed failure
-	* information that can be displayed to the user.
-	*
-	* @see {@link EmbeddedSignUpFlowErrorResponse} for error response structure
+	* Get current configuration
 	*/
-	EmbeddedSignUpFlowStatus$1["Error"] = "ERROR";
+	getConfig() {
+		return { ...this.config };
+	}
 	/**
-	* Sign-up flow requires additional user input.
-	*
-	* More registration steps are needed. The response will contain
-	* components in data.meta.components that should be rendered to
-	* collect additional user information (e.g., profile data, verification).
+	* Check if a log level should be output
 	*/
-	EmbeddedSignUpFlowStatus$1["Incomplete"] = "INCOMPLETE";
-	return EmbeddedSignUpFlowStatus$1;
-}({});
-/**
-* Type enumeration for ThunderID embedded sign-up flow responses.
-*
-* Determines the nature of the registration flow response and how the client
-* should handle the returned data. This affects both UI rendering and flow
-* continuation logic during the user registration process.
-*
-* @experimental Part of the new ThunderID API
-*/
-let EmbeddedSignUpFlowType = /* @__PURE__ */ function(EmbeddedSignUpFlowType$1) {
+	shouldLog(level) {
+		return LOG_LEVEL_ORDER[level] >= LOG_LEVEL_ORDER[this.config.level];
+	}
 	/**
-	* Response requires external redirection.
-	*
-	* Used for social registration providers, external identity providers,
-	* or other flows that require navigating to an external URL during
-	* the registration process. The response will contain redirection information.
+	* Get timestamp string
 	*/
-	EmbeddedSignUpFlowType$1["Redirection"] = "REDIRECTION";
+	static getTimestamp() {
+		return (/* @__PURE__ */ new Date()).toISOString();
+	}
 	/**
-	* Response contains view components for rendering.
-	*
-	* Standard embedded registration flow response containing UI components
-	* that should be rendered within the current application context.
-	* Most common type for embedded user registration.
+	* Get log level string
 	*/
-	EmbeddedSignUpFlowType$1["View"] = "VIEW";
-	return EmbeddedSignUpFlowType$1;
-}({});
-
-//#endregion
-//#region src/api/executeEmbeddedSignUpFlow.ts
-const executeEmbeddedSignUpFlow = async ({ url, baseUrl, payload, authId,...requestConfig }) => {
-	if (!payload) throw new ThunderIDAPIError("Registration payload is required", "executeEmbeddedSignUpFlow-ValidationError-002", "javascript", 400, "If a registration payload is not provided, the request cannot be constructed correctly.");
-	const endpoint = url ?? `${baseUrl}/flow/execute`;
-	const cleanPayload = typeof payload === "object" && payload !== null ? Object.fromEntries(Object.entries(payload).filter(([key]) => key !== "verbose")) : payload;
-	const isNewFlowStart = typeof cleanPayload === "object" && cleanPayload !== null && "applicationId" in cleanPayload && "flowType" in cleanPayload;
-	const hasOnlyFlowId = typeof cleanPayload === "object" && cleanPayload !== null && "executionId" in cleanPayload && Object.keys(cleanPayload).length === 1;
-	const basePayload = isNewFlowStart ? injectRequestedPermissions_default(cleanPayload) : cleanPayload;
-	const requestPayload = isNewFlowStart || hasOnlyFlowId ? {
-		...basePayload,
-		verbose: true
-	} : basePayload;
-	const response = await fetch(endpoint, {
-		...requestConfig,
-		body: JSON.stringify(requestPayload),
-		headers: {
-			Accept: "application/json",
-			"Content-Type": "application/json",
-			...requestConfig.headers
-		},
-		method: requestConfig.method || "POST"
-	});
-	if (!response.ok) throw new ThunderIDAPIError(await response.text(), "executeEmbeddedSignUpFlow-ResponseError-001", "javascript", response.status, response.statusText, "Registration request failed");
-	const flowResponse = await response.json();
-	if (flowResponse.flowStatus === EmbeddedSignUpFlowStatus.Complete && flowResponse.assertion && authId) try {
-		const oauth2Response = await fetch(`${baseUrl}/oauth2/auth/callback`, {
-			body: JSON.stringify({
-				assertion: flowResponse.assertion,
-				authId
-			}),
-			credentials: "include",
-			headers: {
-				Accept: "application/json",
-				"Content-Type": "application/json",
-				...requestConfig.headers
-			},
-			method: "POST"
+	static getLevelString(level) {
+		switch (level) {
+			case "debug": return "DEBUG";
+			case "info": return "INFO";
+			case "warn": return "WARN";
+			case "error": return "ERROR";
+			default: return "UNKNOWN";
+		}
+	}
+	/**
+	* Format message for Node.js terminal
+	*/
+	formatForNode(level, message) {
+		const parts = [];
+		if (this.config.timestamps) parts.push(`${COLORS.gray}[${Logger.getTimestamp()}]${COLORS.reset}`);
+		if (this.config.prefix) parts.push(`${COLORS.magenta}${this.config.prefix}${COLORS.reset}`);
+		if (this.config.showLevel) {
+			const levelStr = Logger.getLevelString(level);
+			let coloredLevel;
+			switch (level) {
+				case "debug":
+					coloredLevel = `${COLORS.gray}[${levelStr}]${COLORS.reset}`;
+					break;
+				case "info":
+					coloredLevel = `${COLORS.blue}[${levelStr}]${COLORS.reset}`;
+					break;
+				case "warn":
+					coloredLevel = `${COLORS.yellow}[${levelStr}]${COLORS.reset}`;
+					break;
+				case "error":
+					coloredLevel = `${COLORS.red}[${levelStr}]${COLORS.reset}`;
+					break;
+				default: coloredLevel = `[${levelStr}]`;
+			}
+			parts.push(coloredLevel);
+		}
+		parts.push(message);
+		return parts.join(" ");
+	}
+	/**
+	* Log message using appropriate method
+	*/
+	logMessage(level, message, ...args) {
+		if (!this.shouldLog(level)) return;
+		if (this.config.formatter) {
+			this.config.formatter(level, message, ...args);
+			return;
+		}
+		if (isBrowser()) this.logToBrowser(level, message, ...args);
+		else if (isNode()) this.logToNode(level, message, ...args);
+		else console.log(message, ...args);
+	}
+	/**
+	* Log to browser console with styling
+	*/
+	logToBrowser(level, message, ...args) {
+		const parts = [];
+		const styles = [];
+		if (this.config.timestamps) {
+			parts.push(`%c[${Logger.getTimestamp()}]`);
+			styles.push(BROWSER_STYLES.timestamp);
+		}
+		if (this.config.prefix) {
+			parts.push(`%c${this.config.prefix}`);
+			styles.push(BROWSER_STYLES.prefix);
+		}
+		if (this.config.showLevel) {
+			const levelStr = Logger.getLevelString(level);
+			parts.push(`%c[${levelStr}]`);
+			switch (level) {
+				case "debug":
+					styles.push(BROWSER_STYLES.debug);
+					break;
+				case "info":
+					styles.push(BROWSER_STYLES.info);
+					break;
+				case "warn":
+					styles.push(BROWSER_STYLES.warn);
+					break;
+				case "error":
+					styles.push(BROWSER_STYLES.error);
+					break;
+				default: styles.push("");
+			}
+		}
+		parts.push(`%c${message}`);
+		styles.push("color: inherit; font-weight: normal;");
+		const formattedMessage = parts.join(" ");
+		switch (level) {
+			case "debug":
+				console.debug(formattedMessage, ...styles, ...args);
+				break;
+			case "info":
+				console.info(formattedMessage, ...styles, ...args);
+				break;
+			case "warn":
+				console.warn(formattedMessage, ...styles, ...args);
+				break;
+			case "error":
+				console.error(formattedMessage, ...styles, ...args);
+				break;
+			default: console.log(formattedMessage, ...styles, ...args);
+		}
+	}
+	/**
+	* Log to Node.js console
+	*/
+	logToNode(level, message, ...args) {
+		const formattedMessage = this.formatForNode(level, message);
+		switch (level) {
+			case "debug":
+				console.debug(formattedMessage, ...args);
+				break;
+			case "info":
+				console.info(formattedMessage, ...args);
+				break;
+			case "warn":
+				console.warn(formattedMessage, ...args);
+				break;
+			case "error":
+				console.error(formattedMessage, ...args);
+				break;
+			default: console.log(formattedMessage, ...args);
+		}
+	}
+	/**
+	* Log debug message
+	*/
+	debug(message, ...args) {
+		this.logMessage("debug", message, ...args);
+	}
+	/**
+	* Log info message
+	*/
+	info(message, ...args) {
+		this.logMessage("info", message, ...args);
+	}
+	/**
+	* Log warning message
+	*/
+	warn(message, ...args) {
+		this.logMessage("warn", message, ...args);
+	}
+	/**
+	* Log error message
+	*/
+	error(message, ...args) {
+		this.logMessage("error", message, ...args);
+	}
+	/**
+	* Create a child logger with additional prefix
+	*/
+	child(prefix) {
+		const childPrefix = this.config.prefix ? `${this.config.prefix} - ${prefix}` : prefix;
+		return new Logger({
+			...this.config,
+			prefix: childPrefix
 		});
-		if (!oauth2Response.ok) throw new ThunderIDAPIError(await oauth2Response.text(), "executeEmbeddedSignUpFlow-OAuth2Error-002", "javascript", oauth2Response.status, oauth2Response.statusText, "OAuth2 authorization failed");
-		const oauth2Result = await oauth2Response.json();
-		return {
-			flowStatus: flowResponse.flowStatus,
-			redirectUrl: oauth2Result["redirect_uri"]
-		};
-	} catch (authError) {
-		if (authError instanceof ThunderIDAPIError) throw authError;
-		throw new ThunderIDAPIError(authError instanceof Error ? authError.message : "Unknown error", "executeEmbeddedSignUpFlow-OAuth2Error-001", "javascript", 500, "Failed to complete OAuth2 authorization after successful embedded sign-up flow.", "OAuth2 authorization failed");
 	}
-	return flowResponse;
+	/**
+	* Set log level
+	*/
+	setLevel(level) {
+		this.config.level = level;
+	}
+	/**
+	* Get current log level
+	*/
+	getLevel() {
+		return this.config.level;
+	}
 };
-var executeEmbeddedSignUpFlow_default = executeEmbeddedSignUpFlow;
-
-//#endregion
-//#region src/api/executeEmbeddedRecoveryFlow.ts
 /**
-* Executes an embedded recovery flow by sending a request to the flow execution endpoint.
-*
-* This function handles password-recovery and account-recovery flows driven by the
-* ThunderID server. The server returns UI components for each step (e.g. username
-* collection, OTP verification, password reset) and this function forwards the
-* user's responses back to the server.
-*
-* @param requestConfig - Request configuration containing URL, payload, and optional headers.
-* @returns A promise that resolves with the flow execution response.
-* @throws ThunderIDAPIError when the request fails or a payload is missing.
-*
-* @example
-* ```typescript
-* // Initiate recovery flow
-* const response = await executeEmbeddedRecoveryFlow({
-*   baseUrl: 'https://localhost:8090',
-*   payload: {
-*     flowType: 'RECOVERY',
-*     applicationId: 'my-app-id',
-*   },
-* });
-*
-* // Continue recovery flow with user input
-* const nextResponse = await executeEmbeddedRecoveryFlow({
-*   baseUrl: 'https://localhost:8090',
-*   payload: {
-*     executionId: response.executionId,
-*     action: 'submit',
-*     inputs: { username: 'user@example.com' },
-*     challengeToken: response.challengeToken,
-*   },
-* });
-* ```
+* Default logger instance
 */
-const executeEmbeddedRecoveryFlow = async ({ url, baseUrl, payload,...requestConfig }) => {
-	if (!payload) throw new ThunderIDAPIError("Recovery payload is required", "executeEmbeddedRecoveryFlow-ValidationError-002", "javascript", 400, "If a recovery payload is not provided, the request cannot be constructed correctly.");
-	const endpoint = url ?? `${baseUrl}/flow/execute`;
-	const cleanPayload = typeof payload === "object" && payload !== null ? Object.fromEntries(Object.entries(payload).filter(([key]) => key !== "verbose")) : payload;
-	const hasOnlyAppIdAndFlowType = typeof cleanPayload === "object" && cleanPayload !== null && "applicationId" in cleanPayload && "flowType" in cleanPayload && Object.keys(cleanPayload).length === 2;
-	const hasOnlyFlowId = typeof cleanPayload === "object" && cleanPayload !== null && "executionId" in cleanPayload && Object.keys(cleanPayload).length === 1;
-	const requestPayload = hasOnlyAppIdAndFlowType || hasOnlyFlowId ? {
-		...cleanPayload,
-		verbose: true
-	} : cleanPayload;
-	const response = await fetch(endpoint, {
-		...requestConfig,
-		body: JSON.stringify(requestPayload),
-		headers: {
-			Accept: "application/json",
-			"Content-Type": "application/json",
-			...requestConfig.headers
-		},
-		method: requestConfig.method || "POST"
-	});
-	if (!response.ok) throw new ThunderIDAPIError(await response.text(), "executeEmbeddedRecoveryFlow-ResponseError-001", "javascript", response.status, response.statusText, "Recovery request failed");
-	return await response.json();
-};
-var executeEmbeddedRecoveryFlow_default = executeEmbeddedRecoveryFlow;
-
-//#endregion
-//#region src/models/embedded-flow.ts
+const logger = new Logger();
 /**
-* Copyright (c) 2025-2026, WSO2 LLC. (https://www.wso2.com).
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
+* Create a new logger instance with custom configuration
 */
-let EmbeddedFlowType = /* @__PURE__ */ function(EmbeddedFlowType$1) {
-	EmbeddedFlowType$1["Authentication"] = "AUTHENTICATION";
-	EmbeddedFlowType$1["Recovery"] = "RECOVERY";
-	EmbeddedFlowType$1["Registration"] = "REGISTRATION";
-	EmbeddedFlowType$1["UserOnboarding"] = "USER_ONBOARDING";
-	return EmbeddedFlowType$1;
-}({});
-let EmbeddedFlowResponseType = /* @__PURE__ */ function(EmbeddedFlowResponseType$1) {
-	EmbeddedFlowResponseType$1["Redirection"] = "REDIRECTION";
-	EmbeddedFlowResponseType$1["View"] = "VIEW";
-	return EmbeddedFlowResponseType$1;
-}({});
+const createLogger = (config) => new Logger(config);
+/**
+* Default export - global logger instance
+*/
+var logger_default = logger;
+/**
+* Named exports for convenience
+*/
+const debug = (message, ...args) => logger.debug(message, ...args);
+const info = (message, ...args) => logger.info(message, ...args);
+const warn = (message, ...args) => logger.warn(message, ...args);
+const error = (message, ...args) => logger.error(message, ...args);
 /**
-* Component types supported by the ThunderID embedded flow API.
-*
-* These types define the different UI components that can be rendered
-* as part of the embedded authentication flows. Each type corresponds
-* to a specific UI element with its own behavior and properties.
-*
-* @example
-* ```typescript
-* // Check component type to render appropriate UI
-* if (component.type === EmbeddedFlowComponentType.TextInput) {
-*   // Render text input field
-* } else if (component.type === EmbeddedFlowComponentType.Action) {
-*   // Render button/action
-* }
-* ```
-*
-* @experimental This API may change in future versions
+* Configure the default logger
 */
-let EmbeddedFlowComponentType = /* @__PURE__ */ function(EmbeddedFlowComponentType$1) {
-	/** Interactive action component (buttons, links) for user interactions */
-	EmbeddedFlowComponentType$1["Action"] = "ACTION";
-	/** Container block component that groups other components */
-	EmbeddedFlowComponentType$1["Block"] = "BLOCK";
-	/** Consent component for displaying consent purposes and attributes */
-	EmbeddedFlowComponentType$1["Consent"] = "CONSENT";
-	/** Copyable text display component that shows text with a copy-to-clipboard action */
-	EmbeddedFlowComponentType$1["CopyableText"] = "COPYABLE_TEXT";
-	/** Date input field for selecting a calendar date */
-	EmbeddedFlowComponentType$1["DateInput"] = "DATE_INPUT";
-	/** Divider component for visual separation of content */
-	EmbeddedFlowComponentType$1["Divider"] = "DIVIDER";
-	/** Email input field with validation for email addresses. */
-	EmbeddedFlowComponentType$1["EmailInput"] = "EMAIL_INPUT";
-	/** Icon display component for rendering named vector icons */
-	EmbeddedFlowComponentType$1["Icon"] = "ICON";
-	/** Image display component for logos and illustrations */
-	EmbeddedFlowComponentType$1["Image"] = "IMAGE";
-	/** One-time password input field for multi-factor authentication */
-	EmbeddedFlowComponentType$1["OtpInput"] = "OTP_INPUT";
-	/** Organization unit tree picker for selecting an OU */
-	EmbeddedFlowComponentType$1["OuSelect"] = "OU_SELECT";
-	/** Password input field with masking for sensitive data */
-	EmbeddedFlowComponentType$1["PasswordInput"] = "PASSWORD_INPUT";
-	/** Phone number input field with country code support */
-	EmbeddedFlowComponentType$1["PhoneInput"] = "PHONE_INPUT";
-	/** Rich text display component that renders formatted HTML content */
-	EmbeddedFlowComponentType$1["RichText"] = "RICH_TEXT";
-	/** Select/dropdown input component for single choice selection */
-	EmbeddedFlowComponentType$1["Select"] = "SELECT";
-	/** Stack layout component for arranging children in a row or column */
-	EmbeddedFlowComponentType$1["Stack"] = "STACK";
-	/** Text display component for labels, headings, and messages */
-	EmbeddedFlowComponentType$1["Text"] = "TEXT";
-	/** Standard text input field for user data entry */
-	EmbeddedFlowComponentType$1["TextInput"] = "TEXT_INPUT";
-	/** Timer component for displaying a countdown */
-	EmbeddedFlowComponentType$1["Timer"] = "TIMER";
-	/** QR code display component for wallet-based flows (e.g. OpenID4VP) */
-	EmbeddedFlowComponentType$1["QrCode"] = "QR_CODE";
-	return EmbeddedFlowComponentType$1;
-}({});
+const configure = (config) => logger.configure(config);
 /**
-* Action variant types for buttons and interactive elements.
-*
-* @experimental This API may change in future versions
+* Create component-specific loggers
 */
-let EmbeddedFlowActionVariant = /* @__PURE__ */ function(EmbeddedFlowActionVariant$1) {
-	/** Danger action button for destructive operations */
-	EmbeddedFlowActionVariant$1["Danger"] = "DANGER";
-	/** Info action button for informational purposes */
-	EmbeddedFlowActionVariant$1["Info"] = "INFO";
-	/** Link-styled action button */
-	EmbeddedFlowActionVariant$1["Link"] = "LINK";
-	/** Outlined action button for secondary emphasis */
-	EmbeddedFlowActionVariant$1["Outlined"] = "OUTLINED";
-	/** Primary action button with highest visual emphasis */
-	EmbeddedFlowActionVariant$1["Primary"] = "PRIMARY";
-	/** Secondary action button with moderate visual emphasis */
-	EmbeddedFlowActionVariant$1["Secondary"] = "SECONDARY";
-	/** Success action button for positive confirmations */
-	EmbeddedFlowActionVariant$1["Success"] = "SUCCESS";
-	/** Tertiary action button with minimal visual emphasis */
-	EmbeddedFlowActionVariant$1["Tertiary"] = "TERTIARY";
-	/** Warning action button for cautionary actions */
-	EmbeddedFlowActionVariant$1["Warning"] = "WARNING";
-	return EmbeddedFlowActionVariant$1;
-}({});
+const createComponentLogger = (component) => logger.child(component);
 /**
-* Text variant types for typography components.
-*
-* @experimental This API may change in future versions
+* Create package-specific logger
 */
-let EmbeddedFlowTextVariant = /* @__PURE__ */ function(EmbeddedFlowTextVariant$1) {
-	/** Primary body text for main content */
-	EmbeddedFlowTextVariant$1["Body1"] = "BODY_1";
-	/** Secondary body text for supplementary content */
-	EmbeddedFlowTextVariant$1["Body2"] = "BODY_2";
-	/** Text styled for button labels */
-	EmbeddedFlowTextVariant$1["ButtonText"] = "BUTTON_TEXT";
-	/** Small caption text for annotations and descriptions */
-	EmbeddedFlowTextVariant$1["Caption"] = "CAPTION";
-	/** Largest heading level for main titles */
-	EmbeddedFlowTextVariant$1["Heading1"] = "HEADING_1";
-	/** Second level heading for major sections */
-	EmbeddedFlowTextVariant$1["Heading2"] = "HEADING_2";
-	/** Third level heading for subsections */
-	EmbeddedFlowTextVariant$1["Heading3"] = "HEADING_3";
-	/** Fourth level heading for minor sections */
-	EmbeddedFlowTextVariant$1["Heading4"] = "HEADING_4";
-	/** Fifth level heading for detailed sections */
-	EmbeddedFlowTextVariant$1["Heading5"] = "HEADING_5";
-	/** Smallest heading level for fine-grained sections */
-	EmbeddedFlowTextVariant$1["Heading6"] = "HEADING_6";
-	/** Overline text for labels and categories */
-	EmbeddedFlowTextVariant$1["Overline"] = "OVERLINE";
-	/** Primary subtitle text with larger emphasis */
-	EmbeddedFlowTextVariant$1["Subtitle1"] = "SUBTITLE_1";
-	/** Secondary subtitle text with moderate emphasis */
-	EmbeddedFlowTextVariant$1["Subtitle2"] = "SUBTITLE_2";
-	return EmbeddedFlowTextVariant$1;
-}({});
+const createPackageLogger = (packageName) => createLogger({
+	level: "info",
+	prefix: `${PREFIX} - ${packageName}`,
+	showLevel: true,
+	timestamps: true
+});
 /**
-* Event types for action components.
-*
-* @experimental This API may change in future versions
+* Create package component logger (package + component)
 */
-let EmbeddedFlowEventType = /* @__PURE__ */ function(EmbeddedFlowEventType$1) {
-	/** Navigate back to the previous step */
-	EmbeddedFlowEventType$1["Back"] = "BACK";
-	/** Cancel the current operation */
-	EmbeddedFlowEventType$1["Cancel"] = "CANCEL";
-	/** Navigate to a different flow step or page */
-	EmbeddedFlowEventType$1["Navigate"] = "NAVIGATE";
-	/** Reset form fields to initial state */
-	EmbeddedFlowEventType$1["Reset"] = "RESET";
-	/** Submit form data to the server */
-	EmbeddedFlowEventType$1["Submit"] = "SUBMIT";
-	/** Trigger an action or event */
-	EmbeddedFlowEventType$1["Trigger"] = "TRIGGER";
-	return EmbeddedFlowEventType$1;
-}({});
+const createPackageComponentLogger = (packageName, component) => {
+	return createPackageLogger(packageName).child(component);
+};
 
 //#endregion
-//#region src/api/executeEmbeddedUserOnboardingFlow.ts
-/**
-* Executes an embedded user onboarding flow by sending a request to the flow execution endpoint.
-*
-* This function handles both:
-* - Admin flow: Initiates onboarding, collects user details, generates invite link
-* - End-user flow: Validates invite token and allows password setting
-*
-* @param requestConfig - Request configuration object containing URL, payload, and optional auth token.
-* @returns A promise that resolves with the flow execution response.
-* @throws ThunderIDAPIError when the request fails or URL is invalid.
-*
-* @example
-* ```typescript
-* // Admin initiating user onboarding (requires auth token)
-* const response = await executeEmbeddedUserOnboardingFlow({
-*   baseUrl: "https://api.thunder.io",
-*   payload: {
-*     flowType: "USER_ONBOARDING"
-*   },
-*   headers: {
-*     Authorization: `Bearer ${accessToken}`
-*   }
-* });
-*
-* // End-user accepting invite (no auth required)
-* const response = await executeEmbeddedUserOnboardingFlow({
-*   baseUrl: "https://api.thunder.io",
-*   payload: {
-*     executionId: "flow-id-from-url",
-*     inputs: { inviteToken: "token-from-url" }
-*   }
-* });
-* ```
-*/
-const executeEmbeddedUserOnboardingFlow = async ({ url, baseUrl, payload,...requestConfig }) => {
-	if (!payload) throw new ThunderIDAPIError("User onboarding payload is required", "executeEmbeddedUserOnboardingFlow-ValidationError-002", "javascript", 400, "If a user onboarding payload is not provided, the request cannot be constructed correctly.");
-	const endpoint = url ?? `${baseUrl}/flow/execute`;
-	const cleanPayload = typeof payload === "object" && payload !== null ? Object.fromEntries(Object.entries(payload).filter(([key]) => key !== "verbose")) : payload;
-	const hasOnlyFlowType = typeof cleanPayload === "object" && cleanPayload !== null && "flowType" in cleanPayload && Object.keys(cleanPayload).length === 1;
-	const hasOnlyFlowId = typeof cleanPayload === "object" && cleanPayload !== null && "executionId" in cleanPayload && Object.keys(cleanPayload).length === 1;
-	const hasFlowIdWithInputs = typeof cleanPayload === "object" && cleanPayload !== null && "executionId" in cleanPayload && "inputs" in cleanPayload;
-	const requestPayload = hasOnlyFlowType || hasOnlyFlowId || hasFlowIdWithInputs ? {
-		...cleanPayload,
-		verbose: true
-	} : cleanPayload;
-	if ("flowType" in requestPayload && requestPayload["flowType"] !== EmbeddedFlowType.UserOnboarding) requestPayload["flowType"] = EmbeddedFlowType.UserOnboarding;
-	const response = await fetch(endpoint, {
-		...requestConfig,
-		body: JSON.stringify(requestPayload),
+//#region src/api/executeEmbeddedSignInFlow.ts
+const readErrorAssertion = (body) => {
+	try {
+		return JSON.parse(body).errorAssertion;
+	} catch {
+		return;
+	}
+};
+const postAuthCallback = async (baseUrl, body, headers) => {
+	const oauth2Response = await fetch(`${baseUrl}/oauth2/auth/callback`, {
+		body: JSON.stringify(body),
+		credentials: "include",
 		headers: {
 			Accept: "application/json",
 			"Content-Type": "application/json",
-			...requestConfig.headers
+			...headers
 		},
-		method: requestConfig.method || "POST"
+		method: "POST"
 	});
-	if (!response.ok) throw new ThunderIDAPIError(await response.text(), "executeEmbeddedUserOnboardingFlow-ResponseError-001", "javascript", response.status, response.statusText, "User onboarding request failed");
-	return await response.json();
+	if (!oauth2Response.ok) {
+		const oauth2ErrorText = await oauth2Response.text();
+		logger_default.error(`OAuth2 authorization failed. The callback responded ${oauth2Response.status} ${oauth2Response.statusText}:`, oauth2ErrorText);
+		throw new ThunderIDAPIError("OAuth2 authorization failed", "executeEmbeddedSignInFlow-OAuth2Error-002", "javascript", oauth2Response.status, oauth2Response.statusText);
+	}
+	return oauth2Response.json();
 };
-var executeEmbeddedUserOnboardingFlow_default = executeEmbeddedUserOnboardingFlow;
-
-//#endregion
-//#region src/api/getFlowMeta.ts
-/**
-* Fetches aggregated flow metadata from the `GET /flow/meta` endpoint.
-*
-* The response includes:
-* - Application or OU details depending on the `type` parameter
-* - Resolved design configuration (theme and layout)
-* - i18n translations filtered by `language` and `namespace`
-* - Registration flow enablement status
-*
-* @param config - Request configuration including `baseUrl`/`url`, and optional
-*                 `type`, `id`, `language`, and `namespace` filters. When `type`
-*                 and `id` are omitted the server returns i18n-only metadata.
-* @returns A promise that resolves to the {@link FlowMetadataResponse}.
-*
-* @throws {ThunderIDAPIError} When the server returns a non-OK response.
-*
-* @example
-* ```typescript
-* import getFlowMeta from './api/getFlowMeta';
-* import { FlowMetaType } from './models/flow-meta';
-*
-* const meta = await getFlowMeta({
-*   baseUrl: 'https://localhost:8090',
-*   type: FlowMetaType.App,
-*   id: '60a9b38b-6eba-9f9e-55f9-267067de4680',
-*   language: 'en',
-*   namespace: 'auth',
-* });
-*
-* console.log(meta.application?.name);
-* console.log(meta.i18n.translations);
-* ```
-*
-* @experimental This function targets the ThunderID V2 platform API
-*/
-const getFlowMeta = async ({ url, baseUrl, type, id, language, namespace,...requestConfig }) => {
-	const queryParams = new URLSearchParams({
-		...id ? { id } : {},
-		...type ? { type } : {},
-		...language ? { language } : {},
-		...namespace ? { namespace } : {}
-	});
-	const endpoint = `${url ?? `${baseUrl}/flow/meta`}?${queryParams.toString()}`;
+const relayFailure = async (baseUrl, authId, errorAssertion, headers, flowResponse) => {
+	const oauth2Result = await postAuthCallback(baseUrl, {
+		assertion: errorAssertion,
+		authId
+	}, headers);
+	return {
+		...flowResponse,
+		flowStatus: EmbeddedSignInFlowStatus.Error,
+		redirectUrl: oauth2Result["redirect_uri"]
+	};
+};
+const executeEmbeddedSignInFlow = async ({ url, baseUrl, payload, authId, flowSecret,...requestConfig }) => {
+	if (!payload) throw new ThunderIDAPIError("Authorization payload is required", "executeEmbeddedSignInFlow-ValidationError-002", "javascript", 400, "If an authorization payload is not provided, the request cannot be constructed correctly.");
+	const endpoint = url ?? `${baseUrl}/flow/execute`;
+	const cleanPayload = typeof payload === "object" && payload !== null ? Object.fromEntries(Object.entries(payload).filter(([key]) => key !== "verbose")) : payload;
+	const isNewFlowStart = typeof cleanPayload === "object" && cleanPayload !== null && "applicationId" in cleanPayload && "flowType" in cleanPayload;
+	const hasOnlyFlowId = typeof cleanPayload === "object" && cleanPayload !== null && "executionId" in cleanPayload && Object.keys(cleanPayload).length === 1;
+	const basePayload = isNewFlowStart ? injectRequestedPermissions_default(cleanPayload) : cleanPayload;
+	const requestPayload = isNewFlowStart || hasOnlyFlowId ? {
+		...basePayload,
+		verbose: true
+	} : basePayload;
 	const response = await fetch(endpoint, {
 		...requestConfig,
+		body: JSON.stringify(requestPayload),
 		headers: {
 			Accept: "application/json",
+			"Content-Type": "application/json",
+			...isNewFlowStart && flowSecret ? { "Flow-Secret": flowSecret } : {},
 			...requestConfig.headers
 		},
-		method: "GET"
+		method: requestConfig.method || "POST"
 	});
-	if (!response.ok) throw new ThunderIDAPIError(await response.text(), "getFlowMeta-ResponseError-001", "javascript", response.status, response.statusText, "Flow metadata request failed");
-	return await response.json();
+	if (!response.ok) {
+		const errorText = await response.text();
+		const errorAssertion = readErrorAssertion(errorText);
+		if (authId && errorAssertion) return await relayFailure(baseUrl, authId, errorAssertion, requestConfig.headers);
+		throw new ThunderIDAPIError(errorText, "executeEmbeddedSignInFlow-ResponseError-001", "javascript", response.status, response.statusText, "Authorization request failed");
+	}
+	const flowResponse = await response.json();
+	if (flowResponse.flowStatus === EmbeddedSignInFlowStatus.Complete && flowResponse.assertion && authId) try {
+		const oauth2Result = await postAuthCallback(baseUrl, {
+			assertion: flowResponse.assertion,
+			authId
+		}, requestConfig.headers);
+		return {
+			flowStatus: flowResponse.flowStatus,
+			redirectUrl: oauth2Result["redirect_uri"]
+		};
+	} catch (authError) {
+		if (authError instanceof ThunderIDAPIError) throw authError;
+		throw new ThunderIDAPIError(authError instanceof Error ? authError.message : "Unknown error", "executeEmbeddedSignInFlow-OAuth2Error-001", "javascript", 500, "Failed to complete OAuth2 authorization after successful embedded sign-in flow.", "OAuth2 authorization failed");
+	}
+	if (flowResponse.flowStatus === EmbeddedSignInFlowStatus.Error && flowResponse.errorAssertion && authId) return relayFailure(baseUrl, authId, flowResponse.errorAssertion, requestConfig.headers, flowResponse);
+	return flowResponse;
 };
-var getFlowMeta_default = getFlowMeta;
+var executeEmbeddedSignInFlow_default = executeEmbeddedSignInFlow;
 
 //#endregion
-//#region src/api/getOrganizationUnitChildren.ts
+//#region src/models/embedded-signup-flow.ts
 /**
-* Retrieves the child organization units of a given organization unit.
+* Status enumeration for ThunderID embedded sign-up flow operations.
 *
-* @param config - Request configuration object.
-* @returns A promise that resolves with the list of child organization units.
+* These statuses indicate the current state of the registration flow and determine
+* the next action required by the client application. Each status provides specific
+* guidance on how to proceed with the user registration process.
+*
+* @example
+* ```typescript
+* switch (response.flowStatus) {
+*   case EmbeddedSignUpFlowStatus.Incomplete:
+*     // More user input needed - render registration form components
+*     break;
+*   case EmbeddedSignUpFlowStatus.Complete:
+*     // Registration successful - handle completion
+*     break;
+*   case EmbeddedSignUpFlowStatus.Error:
+*     // Registration failed - show error details
+*     const errorResponse = response as EmbeddedSignUpFlowErrorResponse;
+*     showError(errorResponse.error.description.defaultValue);
+*     break;
+* }
+* ```
+*
+* @experimental Part of the new ThunderID API
 */
-const getOrganizationUnitChildren = async ({ url, baseUrl, organizationUnitId, limit, offset, fetcher,...requestConfig }) => {
-	try {
-		new URL(url ?? baseUrl);
-	} catch (error$1) {
-		throw new ThunderIDAPIError(`Invalid URL provided. ${error$1?.toString()}`, "getOrganizationUnitChildren-ValidationError-001", "javascript", 400, "The provided `url` or `baseUrl` path does not adhere to the URL schema.");
-	}
-	const fetchFn = fetcher || fetch;
-	const queryParams = new URLSearchParams();
-	if (limit !== void 0) queryParams.set("limit", String(limit));
-	if (offset !== void 0) queryParams.set("offset", String(offset));
-	const query = queryParams.toString();
-	const resolvedBase = url ?? `${baseUrl}/api/server/v1/organization-units/${organizationUnitId}/children`;
-	const resolvedUrl = query ? `${resolvedBase}?${query}` : resolvedBase;
-	const requestInit = {
+let EmbeddedSignUpFlowStatus = /* @__PURE__ */ function(EmbeddedSignUpFlowStatus$1) {
+	/**
+	* Sign-up flow completed successfully.
+	*
+	* The user has successfully registered and the flow can proceed to
+	* OAuth2 completion or redirection. Check for redirectUrl or assertion
+	* data in the response for next steps.
+	*/
+	EmbeddedSignUpFlowStatus$1["Complete"] = "COMPLETE";
+	/**
+	* Sign-up flow encountered an error and cannot proceed.
+	*
+	* Registration failed due to validation errors, duplicate user,
+	* system errors, or other issues. The response will be of type
+	* `EmbeddedSignUpFlowErrorResponse` containing detailed failure
+	* information that can be displayed to the user.
+	*
+	* @see {@link EmbeddedSignUpFlowErrorResponse} for error response structure
+	*/
+	EmbeddedSignUpFlowStatus$1["Error"] = "ERROR";
+	/**
+	* Sign-up flow requires additional user input.
+	*
+	* More registration steps are needed. The response will contain
+	* components in data.meta.components that should be rendered to
+	* collect additional user information (e.g., profile data, verification).
+	*/
+	EmbeddedSignUpFlowStatus$1["Incomplete"] = "INCOMPLETE";
+	return EmbeddedSignUpFlowStatus$1;
+}({});
+/**
+* Type enumeration for ThunderID embedded sign-up flow responses.
+*
+* Determines the nature of the registration flow response and how the client
+* should handle the returned data. This affects both UI rendering and flow
+* continuation logic during the user registration process.
+*
+* @experimental Part of the new ThunderID API
+*/
+let EmbeddedSignUpFlowType = /* @__PURE__ */ function(EmbeddedSignUpFlowType$1) {
+	/**
+	* Response requires external redirection.
+	*
+	* Used for social registration providers, external identity providers,
+	* or other flows that require navigating to an external URL during
+	* the registration process. The response will contain redirection information.
+	*/
+	EmbeddedSignUpFlowType$1["Redirection"] = "REDIRECTION";
+	/**
+	* Response contains view components for rendering.
+	*
+	* Standard embedded registration flow response containing UI components
+	* that should be rendered within the current application context.
+	* Most common type for embedded user registration.
+	*/
+	EmbeddedSignUpFlowType$1["View"] = "VIEW";
+	return EmbeddedSignUpFlowType$1;
+}({});
+
+//#endregion
+//#region src/api/executeEmbeddedSignUpFlow.ts
+const executeEmbeddedSignUpFlow = async ({ url, baseUrl, payload, authId,...requestConfig }) => {
+	if (!payload) throw new ThunderIDAPIError("Registration payload is required", "executeEmbeddedSignUpFlow-ValidationError-002", "javascript", 400, "If a registration payload is not provided, the request cannot be constructed correctly.");
+	const endpoint = url ?? `${baseUrl}/flow/execute`;
+	const cleanPayload = typeof payload === "object" && payload !== null ? Object.fromEntries(Object.entries(payload).filter(([key]) => key !== "verbose")) : payload;
+	const isNewFlowStart = typeof cleanPayload === "object" && cleanPayload !== null && "applicationId" in cleanPayload && "flowType" in cleanPayload;
+	const hasOnlyFlowId = typeof cleanPayload === "object" && cleanPayload !== null && "executionId" in cleanPayload && Object.keys(cleanPayload).length === 1;
+	const basePayload = isNewFlowStart ? injectRequestedPermissions_default(cleanPayload) : cleanPayload;
+	const requestPayload = isNewFlowStart || hasOnlyFlowId ? {
+		...basePayload,
+		verbose: true
+	} : basePayload;
+	const response = await fetch(endpoint, {
 		...requestConfig,
+		body: JSON.stringify(requestPayload),
 		headers: {
 			Accept: "application/json",
 			"Content-Type": "application/json",
 			...requestConfig.headers
 		},
-		method: "GET"
-	};
-	try {
-		const response = await fetchFn(resolvedUrl, requestInit);
-		if (!response?.ok) throw new ThunderIDAPIError(await response.text(), "getOrganizationUnitChildren-ResponseError-001", "javascript", response.status, response.statusText, "Failed to fetch organization unit children");
-		return await response.json();
-	} catch (error$1) {
-		if (error$1 instanceof ThunderIDAPIError) throw error$1;
-		throw new ThunderIDAPIError(`Network or parsing error: ${error$1 instanceof Error ? error$1.message : "Unknown error"}`, "getOrganizationUnitChildren-NetworkError-001", "javascript", 0, "Network Error");
-	}
-};
-var getOrganizationUnitChildren_default = getOrganizationUnitChildren;
-
-//#endregion
-//#region src/api/getUserInfo.ts
-/**
-* Retrieves the user information from the specified OIDC userinfo endpoint.
-*
-* @param requestConfig - Request configuration object.
-* @returns A promise that resolves with the user information.
-* @throw
-*   const userInfo = await getUserInfo({
-*     url: "https://localhost:8090/oauth2/userinfo",
-*   });
-*   console.log(userInfo);
-* } catch (error) {
-*   if (error instanceof ThunderIDAPIError) {
-*     console.error('Failed to get user info:', error.message);
-*   }
-* }
-* ```
-*/
-const getUserInfo = async ({ url,...requestConfig }) => {
-	try {
-		new URL(url);
-	} catch (error$1) {
-		throw new ThunderIDAPIError("Invalid endpoint URL provided", "getUserInfo-ValidationError-001", "javascript", 400, "Invalid Request");
-	}
-	try {
-		const response = await fetch(url, {
-			...requestConfig,
+		method: requestConfig.method || "POST"
+	});
+	if (!response.ok) throw new ThunderIDAPIError(await response.text(), "executeEmbeddedSignUpFlow-ResponseError-001", "javascript", response.status, response.statusText, "Registration request failed");
+	const flowResponse = await response.json();
+	if (flowResponse.flowStatus === EmbeddedSignUpFlowStatus.Complete && flowResponse.assertion && authId) try {
+		const oauth2Response = await fetch(`${baseUrl}/oauth2/auth/callback`, {
+			body: JSON.stringify({
+				assertion: flowResponse.assertion,
+				authId
+			}),
+			credentials: "include",
 			headers: {
 				Accept: "application/json",
 				"Content-Type": "application/json",
 				...requestConfig.headers
 			},
-			method: "GET"
+			method: "POST"
 		});
-		if (!response.ok) throw new ThunderIDAPIError(await response.text(), "getUserInfo-ResponseError-001", "javascript", response.status, response.statusText, "Failed to fetch user info");
-		return await response.json();
-	} catch (error$1) {
-		if (error$1 instanceof ThunderIDAPIError) throw error$1;
-		throw new ThunderIDAPIError(`Network or parsing error: ${error$1 instanceof Error ? error$1.message : "Unknown error"}`, "getUserInfo-NetworkError-001", "javascript", 0, "Network Error");
-	}
-};
-var getUserInfo_default = getUserInfo;
-
-//#endregion
-//#region src/utils/processUsername.ts
-/**
-* Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
-*/
-/**
-* Regular expression to match userstore prefixes in usernames.
-* Matches patterns like "DEFAULT/", "ASGARDEO_USER/", "PRIMARY/", etc.
-* The pattern matches any uppercase letters, numbers, and underscores followed by a forward slash.
-*/
-const USERSTORE_PREFIX_REGEX = /^[A-Z_][A-Z0-9_]*\//;
-/**
-* Removes userstore prefixes from a username if they exist.
-* This is commonly used to clean usernames returned from profile endpoints
-* that include userstore prefixes like "DEFAULT/", "ASGARDEO_USER/", "PRIMARY/", etc.
-*
-* @param username - The username string to process
-* @returns The username without the userstore prefix, or the original username if no prefix exists
-*
-* @example
-* ```typescript
-* const cleanUsername = removeUserstorePrefix("DEFAULT/john.doe");
-* console.log(cleanUsername); // "john.doe"
-*
-* const thunderidUser = removeUserstorePrefix("ASGARDEO_USER/jane.doe");
-* console.log(thunderidUser); // "jane.doe"
-*
-* const primaryUser = removeUserstorePrefix("PRIMARY/admin");
-* console.log(primaryUser); // "admin"
-*
-* const alreadyClean = removeUserstorePrefix("user.name");
-* console.log(alreadyClean); // "user.name"
-*
-* const emptyInput = removeUserstorePrefix("");
-* console.log(emptyInput); // ""
-* ```
-*/
-const removeUserstorePrefix = (username) => {
-	if (!username) return "";
-	return username.replace(USERSTORE_PREFIX_REGEX, "");
+		if (!oauth2Response.ok) throw new ThunderIDAPIError(await oauth2Response.text(), "executeEmbeddedSignUpFlow-OAuth2Error-002", "javascript", oauth2Response.status, oauth2Response.statusText, "OAuth2 authorization failed");
+		const oauth2Result = await oauth2Response.json();
+		return {
+			flowStatus: flowResponse.flowStatus,
+			redirectUrl: oauth2Result["redirect_uri"]
+		};
+	} catch (authError) {
+		if (authError instanceof ThunderIDAPIError) throw authError;
+		throw new ThunderIDAPIError(authError instanceof Error ? authError.message : "Unknown error", "executeEmbeddedSignUpFlow-OAuth2Error-001", "javascript", 500, "Failed to complete OAuth2 authorization after successful embedded sign-up flow.", "OAuth2 authorization failed");
+	}
+	return flowResponse;
 };
+var executeEmbeddedSignUpFlow_default = executeEmbeddedSignUpFlow;
+
+//#endregion
+//#region src/api/executeEmbeddedRecoveryFlow.ts
 /**
-* Processes a user object to remove userstore prefixes from username fields.
-* This is a helper function for processing user objects returned from profile endpoints.
-* Handles various username field variations: username, userName, and user_name.
+* Executes an embedded recovery flow by sending a request to the flow execution endpoint.
 *
-* @param user - The user object to process
-* @returns The user object with processed username fields
+* This function handles password-recovery and account-recovery flows driven by the
+* ThunderID server. The server returns UI components for each step (e.g. username
+* collection, OTP verification, password reset) and this function forwards the
+* user's responses back to the server.
+*
+* @param requestConfig - Request configuration containing URL, payload, and optional headers.
+* @returns A promise that resolves with the flow execution response.
+* @throws ThunderIDAPIError when the request fails or a payload is missing.
 *
 * @example
 * ```typescript
-* const user = { username: "DEFAULT/john.doe", email: "john@example.com" };
-* const processedUser = processUserUsername(user);
-* console.log(processedUser.username); // "john.doe"
-*
-* const camelCaseUser = { userName: "ASGARDEO_USER/jane.doe", email: "jane@example.com" };
-* const processedCamelCaseUser = processUserUsername(camelCaseUser);
-* console.log(processedCamelCaseUser.userName); // "jane.doe"
+* // Initiate recovery flow
+* const response = await executeEmbeddedRecoveryFlow({
+*   baseUrl: 'https://localhost:8090',
+*   payload: {
+*     flowType: 'RECOVERY',
+*     applicationId: 'my-app-id',
+*   },
+* });
 *
-* const snakeCaseUser = { user_name: "PRIMARY/admin", email: "admin@example.com" };
-* const processedSnakeCaseUser = processUserUsername(snakeCaseUser);
-* console.log(processedSnakeCaseUser.user_name); // "admin"
+* // Continue recovery flow with user input
+* const nextResponse = await executeEmbeddedRecoveryFlow({
+*   baseUrl: 'https://localhost:8090',
+*   payload: {
+*     executionId: response.executionId,
+*     action: 'submit',
+*     inputs: { username: 'user@example.com' },
+*     challengeToken: response.challengeToken,
+*   },
+* });
 * ```
 */
-const processUsername = (user) => {
-	if (!user) return user;
-	const processedUser = { ...user };
-	if (processedUser.username) processedUser.username = removeUserstorePrefix(processedUser.username);
-	if (processedUser.userName) processedUser.userName = removeUserstorePrefix(processedUser.userName);
-	if (processedUser.user_name) processedUser.user_name = removeUserstorePrefix(processedUser.user_name);
-	return processedUser;
+const executeEmbeddedRecoveryFlow = async ({ url, baseUrl, payload,...requestConfig }) => {
+	if (!payload) throw new ThunderIDAPIError("Recovery payload is required", "executeEmbeddedRecoveryFlow-ValidationError-002", "javascript", 400, "If a recovery payload is not provided, the request cannot be constructed correctly.");
+	const endpoint = url ?? `${baseUrl}/flow/execute`;
+	const cleanPayload = typeof payload === "object" && payload !== null ? Object.fromEntries(Object.entries(payload).filter(([key]) => key !== "verbose")) : payload;
+	const hasOnlyAppIdAndFlowType = typeof cleanPayload === "object" && cleanPayload !== null && "applicationId" in cleanPayload && "flowType" in cleanPayload && Object.keys(cleanPayload).length === 2;
+	const hasOnlyFlowId = typeof cleanPayload === "object" && cleanPayload !== null && "executionId" in cleanPayload && Object.keys(cleanPayload).length === 1;
+	const requestPayload = hasOnlyAppIdAndFlowType || hasOnlyFlowId ? {
+		...cleanPayload,
+		verbose: true
+	} : cleanPayload;
+	const response = await fetch(endpoint, {
+		...requestConfig,
+		body: JSON.stringify(requestPayload),
+		headers: {
+			Accept: "application/json",
+			"Content-Type": "application/json",
+			...requestConfig.headers
+		},
+		method: requestConfig.method || "POST"
+	});
+	if (!response.ok) throw new ThunderIDAPIError(await response.text(), "executeEmbeddedRecoveryFlow-ResponseError-001", "javascript", response.status, response.statusText, "Recovery request failed");
+	return await response.json();
 };
-var processUsername_default = processUsername;
+var executeEmbeddedRecoveryFlow_default = executeEmbeddedRecoveryFlow;
 
 //#endregion
-//#region src/api/getUsersMe.ts
+//#region src/models/embedded-flow.ts
+let EmbeddedFlowType = /* @__PURE__ */ function(EmbeddedFlowType$1) {
+	EmbeddedFlowType$1["Authentication"] = "AUTHENTICATION";
+	EmbeddedFlowType$1["Recovery"] = "RECOVERY";
+	EmbeddedFlowType$1["Registration"] = "REGISTRATION";
+	EmbeddedFlowType$1["UserOnboarding"] = "USER_ONBOARDING";
+	return EmbeddedFlowType$1;
+}({});
+let EmbeddedFlowResponseType = /* @__PURE__ */ function(EmbeddedFlowResponseType$1) {
+	EmbeddedFlowResponseType$1["Redirection"] = "REDIRECTION";
+	EmbeddedFlowResponseType$1["View"] = "VIEW";
+	return EmbeddedFlowResponseType$1;
+}({});
 /**
-* Retrieves the user profile information from the specified /users/me endpoint.
+* Component types supported by the ThunderID embedded flow API.
 *
-* @param config - Request configuration object.
-* @returns A promise that resolves with the user profile information.
-* @example
-* ```typescript
-* // Using default fetch
-* try {
-*   const userProfile = await getUsersMe({
-*     url: "https://localhost:8090/users/me",
-*   });
-*   console.log(userProfile);
-* } catch (error) {
-*   if (error instanceof ThunderIDAPIError) {
-*     console.error('Failed to get user profile:', error.message);
-*   }
-* }
-* ```
+* These types define the different UI components that can be rendered
+* as part of the embedded authentication flows. Each type corresponds
+* to a specific UI element with its own behavior and properties.
 *
 * @example
 * ```typescript
-* // Using custom fetcher (e.g., axios-based httpClient)
-* try {
-*   const userProfile = await getUsersMe({
-*     url: "https://localhost:8090/users/me",
-*     fetcher: async (url, config) => {
-*       const response = await httpClient({
-*         url,
-*         method: config.method,
-*         headers: config.headers,
-*         ...config
-*       });
-*       // Convert axios-like response to fetch-like Response
-*       return {
-*         ok: response.status >= 200 && response.status < 300,
-*         status: response.status,
-*         statusText: response.statusText,
-*         json: () => Promise.resolve(response.data),
-*         text: () => Promise.resolve(typeof response.data === 'string' ? response.data : JSON.stringify(response.data))
-*       } as Response;
-*     }
-*   });
-*   console.log(userProfile);
-* } catch (error) {
-*   if (error instanceof ThunderIDAPIError) {
-*     console.error('Failed to get user profile:', error.message);
-*   }
+* // Check component type to render appropriate UI
+* if (component.type === EmbeddedFlowComponentType.TextInput) {
+*   // Render text input field
+* } else if (component.type === EmbeddedFlowComponentType.Action) {
+*   // Render button/action
 * }
 * ```
+*
+* @experimental This API may change in future versions
+*/
+let EmbeddedFlowComponentType = /* @__PURE__ */ function(EmbeddedFlowComponentType$1) {
+	/** Interactive action component (buttons, links) for user interactions */
+	EmbeddedFlowComponentType$1["Action"] = "ACTION";
+	/** Container block component that groups other components */
+	EmbeddedFlowComponentType$1["Block"] = "BLOCK";
+	/** Consent component for displaying consent purposes and attributes */
+	EmbeddedFlowComponentType$1["Consent"] = "CONSENT";
+	/** Copyable text display component that shows text with a copy-to-clipboard action */
+	EmbeddedFlowComponentType$1["CopyableText"] = "COPYABLE_TEXT";
+	/** Date input field for selecting a calendar date */
+	EmbeddedFlowComponentType$1["DateInput"] = "DATE_INPUT";
+	/** Divider component for visual separation of content */
+	EmbeddedFlowComponentType$1["Divider"] = "DIVIDER";
+	/** Email input field with validation for email addresses. */
+	EmbeddedFlowComponentType$1["EmailInput"] = "EMAIL_INPUT";
+	/** Icon display component for rendering named vector icons */
+	EmbeddedFlowComponentType$1["Icon"] = "ICON";
+	/** Image display component for logos and illustrations */
+	EmbeddedFlowComponentType$1["Image"] = "IMAGE";
+	/** One-time password input field for multi-factor authentication */
+	EmbeddedFlowComponentType$1["OtpInput"] = "OTP_INPUT";
+	/** Organization unit tree picker for selecting an OU */
+	EmbeddedFlowComponentType$1["OuSelect"] = "OU_SELECT";
+	/** Password input field with masking for sensitive data */
+	EmbeddedFlowComponentType$1["PasswordInput"] = "PASSWORD_INPUT";
+	/** Phone number input field with country code support */
+	EmbeddedFlowComponentType$1["PhoneInput"] = "PHONE_INPUT";
+	/** Rich text display component that renders formatted HTML content */
+	EmbeddedFlowComponentType$1["RichText"] = "RICH_TEXT";
+	/** Select/dropdown input component for single choice selection */
+	EmbeddedFlowComponentType$1["Select"] = "SELECT";
+	/** Stack layout component for arranging children in a row or column */
+	EmbeddedFlowComponentType$1["Stack"] = "STACK";
+	/** Text display component for labels, headings, and messages */
+	EmbeddedFlowComponentType$1["Text"] = "TEXT";
+	/** Standard text input field for user data entry */
+	EmbeddedFlowComponentType$1["TextInput"] = "TEXT_INPUT";
+	/** Timer component for displaying a countdown */
+	EmbeddedFlowComponentType$1["Timer"] = "TIMER";
+	/** QR code display component for wallet-based flows (e.g. OpenID4VP) */
+	EmbeddedFlowComponentType$1["QrCode"] = "QR_CODE";
+	return EmbeddedFlowComponentType$1;
+}({});
+/**
+* Action variant types for buttons and interactive elements.
+*
+* @experimental This API may change in future versions
+*/
+let EmbeddedFlowActionVariant = /* @__PURE__ */ function(EmbeddedFlowActionVariant$1) {
+	/** Danger action button for destructive operations */
+	EmbeddedFlowActionVariant$1["Danger"] = "DANGER";
+	/** Info action button for informational purposes */
+	EmbeddedFlowActionVariant$1["Info"] = "INFO";
+	/** Link-styled action button */
+	EmbeddedFlowActionVariant$1["Link"] = "LINK";
+	/** Outlined action button for secondary emphasis */
+	EmbeddedFlowActionVariant$1["Outlined"] = "OUTLINED";
+	/** Primary action button with highest visual emphasis */
+	EmbeddedFlowActionVariant$1["Primary"] = "PRIMARY";
+	/** Secondary action button with moderate visual emphasis */
+	EmbeddedFlowActionVariant$1["Secondary"] = "SECONDARY";
+	/** Success action button for positive confirmations */
+	EmbeddedFlowActionVariant$1["Success"] = "SUCCESS";
+	/** Tertiary action button with minimal visual emphasis */
+	EmbeddedFlowActionVariant$1["Tertiary"] = "TERTIARY";
+	/** Warning action button for cautionary actions */
+	EmbeddedFlowActionVariant$1["Warning"] = "WARNING";
+	return EmbeddedFlowActionVariant$1;
+}({});
+/**
+* Text variant types for typography components.
+*
+* @experimental This API may change in future versions
+*/
+let EmbeddedFlowTextVariant = /* @__PURE__ */ function(EmbeddedFlowTextVariant$1) {
+	/** Primary body text for main content */
+	EmbeddedFlowTextVariant$1["Body1"] = "BODY_1";
+	/** Secondary body text for supplementary content */
+	EmbeddedFlowTextVariant$1["Body2"] = "BODY_2";
+	/** Text styled for button labels */
+	EmbeddedFlowTextVariant$1["ButtonText"] = "BUTTON_TEXT";
+	/** Small caption text for annotations and descriptions */
+	EmbeddedFlowTextVariant$1["Caption"] = "CAPTION";
+	/** Largest heading level for main titles */
+	EmbeddedFlowTextVariant$1["Heading1"] = "HEADING_1";
+	/** Second level heading for major sections */
+	EmbeddedFlowTextVariant$1["Heading2"] = "HEADING_2";
+	/** Third level heading for subsections */
+	EmbeddedFlowTextVariant$1["Heading3"] = "HEADING_3";
+	/** Fourth level heading for minor sections */
+	EmbeddedFlowTextVariant$1["Heading4"] = "HEADING_4";
+	/** Fifth level heading for detailed sections */
+	EmbeddedFlowTextVariant$1["Heading5"] = "HEADING_5";
+	/** Smallest heading level for fine-grained sections */
+	EmbeddedFlowTextVariant$1["Heading6"] = "HEADING_6";
+	/** Overline text for labels and categories */
+	EmbeddedFlowTextVariant$1["Overline"] = "OVERLINE";
+	/** Primary subtitle text with larger emphasis */
+	EmbeddedFlowTextVariant$1["Subtitle1"] = "SUBTITLE_1";
+	/** Secondary subtitle text with moderate emphasis */
+	EmbeddedFlowTextVariant$1["Subtitle2"] = "SUBTITLE_2";
+	return EmbeddedFlowTextVariant$1;
+}({});
+/**
+* Event types for action components.
+*
+* @experimental This API may change in future versions
 */
-const getUsersMe = async ({ url, baseUrl, fetcher,...requestConfig }) => {
-	try {
-		new URL(url ?? baseUrl);
-	} catch (error$1) {
-		throw new ThunderIDAPIError(`Invalid URL provided. ${error$1?.toString()}`, "getUsersMe-ValidationError-001", "javascript", 400, "The provided `url` or `baseUrl` path does not adhere to the URL schema.");
-	}
-	const fetchFn = fetcher || fetch;
-	const resolvedUrl = url ?? `${baseUrl}/users/me`;
-	const requestInit = {
-		...requestConfig,
-		headers: {
-			Accept: "application/json",
-			"Content-Type": "application/json",
-			...requestConfig.headers
-		},
-		method: "GET"
-	};
-	try {
-		const response = await fetchFn(resolvedUrl, requestInit);
-		if (!response?.ok) throw new ThunderIDAPIError(await response.text(), "getUsersMe-ResponseError-001", "javascript", response.status, response.statusText, "Failed to fetch user profile");
-		const user = await response.json();
-		const attributes = user["attributes"] ?? {};
-		return processUsername_default({
-			...user,
-			...attributes
-		});
-	} catch (error$1) {
-		if (error$1 instanceof ThunderIDAPIError) throw error$1;
-		throw new ThunderIDAPIError(`Network or parsing error: ${error$1 instanceof Error ? error$1.message : "Unknown error"}`, "getUsersMe-NetworkError-001", "javascript", 0, "Network Error");
-	}
-};
-var getUsersMe_default = getUsersMe;
+let EmbeddedFlowEventType = /* @__PURE__ */ function(EmbeddedFlowEventType$1) {
+	/** Navigate back to the previous step */
+	EmbeddedFlowEventType$1["Back"] = "BACK";
+	/** Cancel the current operation */
+	EmbeddedFlowEventType$1["Cancel"] = "CANCEL";
+	/** Navigate to a different flow step or page */
+	EmbeddedFlowEventType$1["Navigate"] = "NAVIGATE";
+	/** Reset form fields to initial state */
+	EmbeddedFlowEventType$1["Reset"] = "RESET";
+	/** Submit form data to the server */
+	EmbeddedFlowEventType$1["Submit"] = "SUBMIT";
+	/** Trigger an action or event */
+	EmbeddedFlowEventType$1["Trigger"] = "TRIGGER";
+	return EmbeddedFlowEventType$1;
+}({});
 
 //#endregion
-//#region src/api/updateMeProfile.ts
+//#region src/api/executeEmbeddedUserOnboardingFlow.ts
 /**
-* Updates the user profile information at the specified /users/me endpoint.
+* Executes an embedded user onboarding flow by sending a request to the flow execution endpoint.
+*
+* This function handles both:
+* - Admin flow: Initiates onboarding, collects user details, generates invite link
+* - End-user flow: Validates invite token and allows password setting
+*
+* @param requestConfig - Request configuration object containing URL, payload, and optional auth token.
+* @returns A promise that resolves with the flow execution response.
+* @throws ThunderIDAPIError when the request fails or URL is invalid.
 *
-* @param config - Configuration object with URL, payload and optional request config.
-* @returns A promise that resolves with the updated user profile information.
 * @example
 * ```typescript
-* // Using default fetch
-* await updateMeProfile({
-*   url: "https://localhost:8090/users/me",
-*   payload: { mobileNumbers: ["0777933830"] }
+* // Admin initiating user onboarding (requires auth token)
+* const response = await executeEmbeddedUserOnboardingFlow({
+*   baseUrl: "https://api.thunder.io",
+*   payload: {
+*     flowType: "USER_ONBOARDING"
+*   },
+*   headers: {
+*     Authorization: `Bearer ${accessToken}`
+*   }
 * });
-* ```
 *
-* @example
-* ```typescript
-* // Using custom fetcher (e.g., axios-based httpClient)
-* await updateMeProfile({
-*   url: "https://localhost:8090/users/me",
-*   payload: { mobileNumbers: ["0777933830"] },
-*   fetcher: async (url, config) => {
-*     const response = await httpClient({
-*       url,
-*       method: config.method,
-*       headers: config.headers,
-*       data: config.body,
-*       ...config
-*     });
-*     // Convert axios-like response to fetch-like Response
-*     return {
-*       ok: response.status >= 200 && response.status < 300,
-*       status: response.status,
-*       statusText: response.statusText,
-*       json: () => Promise.resolve(response.data),
-*       text: () => Promise.resolve(typeof response.data === 'string' ? response.data : JSON.stringify(response.data))
-*     } as Response;
+* // End-user accepting invite (no auth required)
+* const response = await executeEmbeddedUserOnboardingFlow({
+*   baseUrl: "https://api.thunder.io",
+*   payload: {
+*     executionId: "flow-id-from-url",
+*     inputs: { inviteToken: "token-from-url" }
 *   }
 * });
 * ```
 */
-const updateMeProfile = async ({ url, baseUrl, payload, fetcher,...requestConfig }) => {
-	try {
-		new URL(url ?? baseUrl);
-	} catch (error$1) {
-		throw new ThunderIDAPIError(`Invalid URL provided. ${error$1?.toString()}`, "updateMeProfile-ValidationError-001", "javascript", 400, "The provided `url` or `baseUrl` path does not adhere to the URL schema.");
-	}
-	const data = { attributes: payload };
-	const fetchFn = fetcher || fetch;
-	const resolvedUrl = url ?? `${baseUrl}/users/me`;
-	const requestInit = {
+const executeEmbeddedUserOnboardingFlow = async ({ url, baseUrl, payload,...requestConfig }) => {
+	if (!payload) throw new ThunderIDAPIError("User onboarding payload is required", "executeEmbeddedUserOnboardingFlow-ValidationError-002", "javascript", 400, "If a user onboarding payload is not provided, the request cannot be constructed correctly.");
+	const endpoint = url ?? `${baseUrl}/flow/execute`;
+	const cleanPayload = typeof payload === "object" && payload !== null ? Object.fromEntries(Object.entries(payload).filter(([key]) => key !== "verbose")) : payload;
+	const hasOnlyFlowType = typeof cleanPayload === "object" && cleanPayload !== null && "flowType" in cleanPayload && Object.keys(cleanPayload).length === 1;
+	const hasOnlyFlowId = typeof cleanPayload === "object" && cleanPayload !== null && "executionId" in cleanPayload && Object.keys(cleanPayload).length === 1;
+	const hasFlowIdWithInputs = typeof cleanPayload === "object" && cleanPayload !== null && "executionId" in cleanPayload && "inputs" in cleanPayload;
+	const requestPayload = hasOnlyFlowType || hasOnlyFlowId || hasFlowIdWithInputs ? {
+		...cleanPayload,
+		verbose: true
+	} : cleanPayload;
+	if ("flowType" in requestPayload && requestPayload["flowType"] !== EmbeddedFlowType.UserOnboarding) requestPayload["flowType"] = EmbeddedFlowType.UserOnboarding;
+	const response = await fetch(endpoint, {
 		...requestConfig,
-		method: "PUT",
-		body: JSON.stringify(data),
+		body: JSON.stringify(requestPayload),
 		headers: {
-			...requestConfig.headers,
 			Accept: "application/json",
-			"Content-Type": "application/json"
-		}
-	};
-	try {
-		const response = await fetchFn(resolvedUrl, requestInit);
-		if (!response?.ok) throw new ThunderIDAPIError(await response.text(), "updateMeProfile-ResponseError-001", "javascript", response.status, response.statusText, "Failed to update user profile");
-		const user = await response.json();
-		const attributes = user["attributes"] ?? {};
-		return processUsername_default({
-			...user,
-			...attributes
-		});
-	} catch (error$1) {
-		if (error$1 instanceof ThunderIDAPIError) throw error$1;
-		throw new ThunderIDAPIError(error$1?.response?.data?.detail || "An error occurred while updating the user profile. Please try again.", "updateMeProfile-NetworkError-001", "javascript", error$1?.data?.status, "Network Error");
-	}
+			"Content-Type": "application/json",
+			...requestConfig.headers
+		},
+		method: requestConfig.method || "POST"
+	});
+	if (!response.ok) throw new ThunderIDAPIError(await response.text(), "executeEmbeddedUserOnboardingFlow-ResponseError-001", "javascript", response.status, response.statusText, "User onboarding request failed");
+	return await response.json();
 };
-var updateMeProfile_default = updateMeProfile;
-
-//#endregion
-//#region src/constants/ApplicationNativeAuthenticationConstants.ts
-/**
-* Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
-*/
-/**
-* Constants representing Application Native Authentication related configurations and constants.
-*/
-const ApplicationNativeAuthenticationConstants = { SupportedAuthenticators: {
-	EmailOtp: "ZW1haWwtb3RwLWF1dGhlbnRpY2F0b3I6TE9DQUw",
-	Facebook: "RmFjZWJvb2tBdXRoZW50aWNhdG9yOkZhY2Vib29r",
-	GitHub: "R2l0aHViQXV0aGVudGljYXRvcjpHaXRIdWI",
-	Google: "R29vZ2xlT0lEQ0F1dGhlbnRpY2F0b3I6R29vZ2xl",
-	IdentifierFirst: "SWRlbnRpZmllckV4ZWN1dG9yOkxPQ0FM",
-	LinkedIn: "TGlua2VkSW5PSURDOkxpbmtlZElu",
-	MagicLink: "TWFnaWNMaW5rQXV0aGVudGljYXRvcjpMT0NBTA",
-	Microsoft: "T3BlbklEQ29ubmVjdEF1dGhlbnRpY2F0b3I6TWljcm9zb2Z0",
-	Passkey: "RklET0F1dGhlbnRpY2F0b3I6TE9DQUw",
-	PushNotification: "cHVzaC1ub3RpZmljYXRpb24tYXV0aGVudGljYXRvcjpMT0NBTA",
-	SignInWithEthereum: "T3BlbklEQ29ubmVjdEF1dGhlbnRpY2F0b3I6U2lnbiBJbiBXaXRoIEV0aGVyZXVt",
-	SmsOtp: "c21zLW90cC1hdXRoZW50aWNhdG9yOkxPQ0FM",
-	Totp: "dG90cDpMT0NBTA",
-	UsernamePassword: "QmFzaWNBdXRoZW50aWNhdG9yOkxPQ0FM"
-} };
-var ApplicationNativeAuthenticationConstants_default = ApplicationNativeAuthenticationConstants;
+var executeEmbeddedUserOnboardingFlow_default = executeEmbeddedUserOnboardingFlow;
 
 //#endregion
-//#region src/constants/ScopeConstants.ts
+//#region src/api/getFlowMeta.ts
 /**
-* Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
+* Fetches aggregated flow metadata from the `GET /flow/meta` endpoint.
 *
-*     http://www.apache.org/licenses/LICENSE-2.0
+* The response includes:
+* - Application or OU details depending on the `type` parameter
+* - Resolved design configuration (theme and layout)
+* - i18n translations filtered by `language` and `namespace`
+* - Registration flow enablement status
 *
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
-*/
-/**
-* Constants for OAuth 2.0 and OpenID Connect scopes.
-* These scopes define the level of access that the client application
-* is requesting from the authorization server.
+* @param config - Request configuration including `baseUrl`/`url`, and optional
+*                 `type`, `id`, `language`, and `namespace` filters. When `type`
+*                 and `id` are omitted the server returns i18n-only metadata.
+* @returns A promise that resolves to the {@link FlowMetadataResponse}.
 *
-* @remarks
-* Scopes are space-separated strings that represent different permissions.
-* The 'openid' scope is required for OpenID Connect flows, while other
-* scopes provide access to different resources or user information.
+* @throws {ThunderIDAPIError} When the server returns a non-OK response.
 *
 * @example
 * ```typescript
-* // Requesting OpenID Connect authentication
-* const scope = [ScopeConstants.OPENID];
-*
-* // Requesting profile information
-* const scopes = [ScopeConstants.OPENID, ScopeConstants.PROFILE];
-* ```
-*/
-const ScopeConstants = {
-	OPENID: "openid",
-	PROFILE: "profile"
-};
-var ScopeConstants_default = ScopeConstants;
-
-//#endregion
-//#region src/constants/OIDCRequestConstants.ts
-/**
-* Constants representing standard OpenID Connect (OIDC) request and response parameters.
-* These parameters are commonly used during authorization, token exchange, and logout flows.
-*/
-const OIDCRequestConstants = {
-	Params: {
-		AUTHORIZATION_CODE: "code",
-		SESSION_STATE: "session_state",
-		SIGN_OUT_SUCCESS: "sign_out_success",
-		STATE: "state"
-	},
-	SignIn: { Payload: { DEFAULT_SCOPES: [ScopeConstants_default.OPENID, ScopeConstants_default.PROFILE] } },
-	SignOut: { Storage: { StorageKeys: { SIGN_OUT_URL: "sign_out_url" } } }
-};
-var OIDCRequestConstants_default = OIDCRequestConstants;
-
-//#endregion
-//#region src/constants/VendorConstants.ts
-/**
-* Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
+* import getFlowMeta from './api/getFlowMeta';
+* import { FlowMetaType } from './models/flow-meta';
 *
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
-*/
-/**
-* Constants for vendor-specific configurations.
-* By default, the vendor is inferred as ThunderID.
+* const meta = await getFlowMeta({
+*   baseUrl: 'https://localhost:8090',
+*   type: FlowMetaType.App,
+*   id: '60a9b38b-6eba-9f9e-55f9-267067de4680',
+*   language: 'en',
+*   namespace: 'auth',
+* });
 *
-* @example
-* ```typescript
-*  // Using the vendor prefix in a URL
-* const apiUrl = `${VendorConstants.VENDOR_PREFIX}/api/v1/resource`;
+* console.log(meta.application?.name);
+* console.log(meta.i18n.translations);
 * ```
+*
+* @experimental This function targets the ThunderID V2 platform API
 */
-const VendorConstants = { VENDOR_PREFIX: "thunderid" };
-var VendorConstants_default = VendorConstants;
+const getFlowMeta = async ({ url, baseUrl, type, id, language, namespace,...requestConfig }) => {
+	const queryParams = new URLSearchParams({
+		...id ? { id } : {},
+		...type ? { type } : {},
+		...language ? { language } : {},
+		...namespace ? { namespace } : {}
+	});
+	const endpoint = `${url ?? `${baseUrl}/flow/meta`}?${queryParams.toString()}`;
+	const response = await fetch(endpoint, {
+		...requestConfig,
+		headers: {
+			Accept: "application/json",
+			...requestConfig.headers
+		},
+		method: "GET"
+	});
+	if (!response.ok) throw new ThunderIDAPIError(await response.text(), "getFlowMeta-ResponseError-001", "javascript", response.status, response.statusText, "Flow metadata request failed");
+	return await response.json();
+};
+var getFlowMeta_default = getFlowMeta;
 
 //#endregion
-//#region src/errors/ThunderIDRuntimeError.ts
+//#region src/api/getOrganizationUnitChildren.ts
 /**
-* Base class for all runtime errors in ThunderID. This class extends ThunderIDError
-* and adds support for additional error details. Use this class for errors that occur
-* during runtime execution that are not related to API calls.
+* Retrieves the child organization units of a given organization unit.
 *
-* @example
-* ```typescript
-* throw new ThunderIDRuntimeError(
-*   "Failed to parse configuration",
-*   "CONFIG_PARSE_ERROR",
-*   { invalidField: "redirectUri" }
-* );
-* ```
+* @param config - Request configuration object.
+* @returns A promise that resolves with the list of child organization units.
 */
-var ThunderIDRuntimeError = class extends ThunderIDError {
-	/**
-	* Creates an instance of ThunderIDRuntimeError.
-	*
-	* @param message - Human-readable description of the error
-	* @param code - A unique error code that identifies the error type
-	* @param details - Additional details about the error that might be helpful for debugging
-	* @param origin - Optional. The SDK origin (e.g. 'react', 'vue'). Defaults to generic 'ThunderID'
-	* @constructor
-	*/
-	constructor(message, code, origin, details) {
-		super(message, code, origin);
-		this.details = details;
-		Object.defineProperty(this, "name", {
-			configurable: true,
-			value: "ThunderIDRuntimeError",
-			writable: true
-		});
+const getOrganizationUnitChildren = async ({ url, baseUrl, organizationUnitId, limit, offset, fetcher,...requestConfig }) => {
+	try {
+		new URL(url ?? baseUrl);
+	} catch (error$1) {
+		throw new ThunderIDAPIError(`Invalid URL provided. ${error$1?.toString()}`, "getOrganizationUnitChildren-ValidationError-001", "javascript", 400, "The provided `url` or `baseUrl` path does not adhere to the URL schema.");
 	}
-	/**
-	* Returns a string representation of the runtime error
-	* @returns Formatted error string with name, code, details, and message
-	*/
-	toString() {
-		const details = this.details ? `\nDetails: ${JSON.stringify(this.details, null, 2)}` : "";
-		return `[${this.name}] (code="${this.code}")${details}\nMessage: ${this.message}`;
+	const fetchFn = fetcher || fetch;
+	const queryParams = new URLSearchParams();
+	if (limit !== void 0) queryParams.set("limit", String(limit));
+	if (offset !== void 0) queryParams.set("offset", String(offset));
+	const query = queryParams.toString();
+	const resolvedBase = url ?? `${baseUrl}/api/server/v1/organization-units/${organizationUnitId}/children`;
+	const resolvedUrl = query ? `${resolvedBase}?${query}` : resolvedBase;
+	const requestInit = {
+		...requestConfig,
+		headers: {
+			Accept: "application/json",
+			"Content-Type": "application/json",
+			...requestConfig.headers
+		},
+		method: "GET"
+	};
+	try {
+		const response = await fetchFn(resolvedUrl, requestInit);
+		if (!response?.ok) throw new ThunderIDAPIError(await response.text(), "getOrganizationUnitChildren-ResponseError-001", "javascript", response.status, response.statusText, "Failed to fetch organization unit children");
+		return await response.json();
+	} catch (error$1) {
+		if (error$1 instanceof ThunderIDAPIError) throw error$1;
+		throw new ThunderIDAPIError(`Network or parsing error: ${error$1 instanceof Error ? error$1.message : "Unknown error"}`, "getOrganizationUnitChildren-NetworkError-001", "javascript", 0, "Network Error");
 	}
 };
+var getOrganizationUnitChildren_default = getOrganizationUnitChildren;
 
 //#endregion
-//#region src/models/embedded-recovery-flow.ts
-/**
-* Status enumeration for the embedded recovery flow operations.
-*
-* @experimental Part of the new ThunderID API
-*/
-let EmbeddedRecoveryFlowStatus = /* @__PURE__ */ function(EmbeddedRecoveryFlowStatus$1) {
-	/**
-	* Recovery flow completed successfully.
-	*/
-	EmbeddedRecoveryFlowStatus$1["Complete"] = "COMPLETE";
-	/**
-	* Recovery flow encountered an error and cannot proceed.
-	*
-	* @see {@link EmbeddedRecoveryFlowErrorResponse} for error response structure
-	*/
-	EmbeddedRecoveryFlowStatus$1["Error"] = "ERROR";
-	/**
-	* Recovery flow requires additional user input.
-	*/
-	EmbeddedRecoveryFlowStatus$1["Incomplete"] = "INCOMPLETE";
-	return EmbeddedRecoveryFlowStatus$1;
-}({});
+//#region src/api/getUserInfo.ts
 /**
-* Type enumeration for embedded recovery flow responses.
+* Retrieves the user information from the specified OIDC userinfo endpoint.
 *
-* @experimental Part of the new ThunderID API
+* @param requestConfig - Request configuration object.
+* @returns A promise that resolves with the user information.
+* @throw
+*   const userInfo = await getUserInfo({
+*     url: "https://localhost:8090/oauth2/userinfo",
+*   });
+*   console.log(userInfo);
+* } catch (error) {
+*   if (error instanceof ThunderIDAPIError) {
+*     console.error('Failed to get user info:', error.message);
+*   }
+* }
+* ```
 */
-let EmbeddedRecoveryFlowType = /* @__PURE__ */ function(EmbeddedRecoveryFlowType$1) {
-	/**
-	* Response requires external redirection.
-	*/
-	EmbeddedRecoveryFlowType$1["Redirection"] = "REDIRECTION";
-	/**
-	* Response contains view components for rendering.
-	*/
-	EmbeddedRecoveryFlowType$1["View"] = "VIEW";
-	return EmbeddedRecoveryFlowType$1;
-}({});
+const getUserInfo = async ({ url,...requestConfig }) => {
+	try {
+		new URL(url);
+	} catch (error$1) {
+		throw new ThunderIDAPIError("Invalid endpoint URL provided", "getUserInfo-ValidationError-001", "javascript", 400, "Invalid Request");
+	}
+	try {
+		const response = await fetch(url, {
+			...requestConfig,
+			headers: {
+				Accept: "application/json",
+				"Content-Type": "application/json",
+				...requestConfig.headers
+			},
+			method: "GET"
+		});
+		if (!response.ok) throw new ThunderIDAPIError(await response.text(), "getUserInfo-ResponseError-001", "javascript", response.status, response.statusText, "Failed to fetch user info");
+		return await response.json();
+	} catch (error$1) {
+		if (error$1 instanceof ThunderIDAPIError) throw error$1;
+		throw new ThunderIDAPIError(`Network or parsing error: ${error$1 instanceof Error ? error$1.message : "Unknown error"}`, "getUserInfo-NetworkError-001", "javascript", 0, "Network Error");
+	}
+};
+var getUserInfo_default = getUserInfo;
 
 //#endregion
-//#region src/models/flow-meta.ts
+//#region src/utils/processUsername.ts
 /**
-* Copyright (c) 2026, WSO2 LLC. (https://www.wso2.com).
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
+* Regular expression to match userstore prefixes in usernames.
+* Matches patterns like "DEFAULT/", "ASGARDEO_USER/", "PRIMARY/", etc.
+* The pattern matches any uppercase letters, numbers, and underscores followed by a forward slash.
 */
+const USERSTORE_PREFIX_REGEX = /^[A-Z_][A-Z0-9_]*\//;
 /**
-* The type of entity to retrieve flow metadata for.
+* Removes userstore prefixes from a username if they exist.
+* This is commonly used to clean usernames returned from profile endpoints
+* that include userstore prefixes like "DEFAULT/", "ASGARDEO_USER/", "PRIMARY/", etc.
+*
+* @param username - The username string to process
+* @returns The username without the userstore prefix, or the original username if no prefix exists
 *
 * @example
 * ```typescript
-* const config: GetFlowMetaRequestConfig = {
-*   baseUrl: 'https://localhost:8090',
-*   type: FlowMetaType.App,
-*   id: '60a9b38b-6eba-9f9e-55f9-267067de4680',
-* };
-* ```
+* const cleanUsername = removeUserstorePrefix("DEFAULT/john.doe");
+* console.log(cleanUsername); // "john.doe"
 *
-* @experimental This API may change in future versions
-*/
-let FlowMetaType = /* @__PURE__ */ function(FlowMetaType$1) {
-	/** Retrieve metadata scoped to a specific application */
-	FlowMetaType$1["App"] = "APP";
-	/** Retrieve metadata scoped to a specific organization unit */
-	FlowMetaType$1["Ou"] = "OU";
-	return FlowMetaType$1;
-}({});
-
-//#endregion
-//#region src/models/flow.ts
-/**
-* Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
+* const thunderidUser = removeUserstorePrefix("ASGARDEO_USER/jane.doe");
+* console.log(thunderidUser); // "jane.doe"
 *
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
+* const primaryUser = removeUserstorePrefix("PRIMARY/admin");
+* console.log(primaryUser); // "admin"
 *
-*     http://www.apache.org/licenses/LICENSE-2.0
+* const alreadyClean = removeUserstorePrefix("user.name");
+* console.log(alreadyClean); // "user.name"
 *
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
+* const emptyInput = removeUserstorePrefix("");
+* console.log(emptyInput); // ""
+* ```
 */
-let FlowMode = /* @__PURE__ */ function(FlowMode$1) {
-	/**
-	* This mode is suitable for embedded sign-in, sign-up, etc. flows where the authentication
-	* UIs are rendered within the application.
-	* @see {@link https://is.docs.wso2.com/en/7.1.0/references/app-native-authentication/}
-	*/
-	FlowMode$1["Embedded"] = "DIRECT";
-	/**
-	* Traditional redirect based sign-in, sign-up, etc. flows where the authentication
-	* UIs are from a external Identity Provider (ex: WSO2 Identity Server or ThunderID).
-	*/
-	FlowMode$1["Redirect"] = "REDIRECTION";
-	return FlowMode$1;
-}({});
-
-//#endregion
-//#region src/models/field.ts
+const removeUserstorePrefix = (username) => {
+	if (!username) return "";
+	return username.replace(USERSTORE_PREFIX_REGEX, "");
+};
 /**
-* Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
+* Processes a user object to remove userstore prefixes from username fields.
+* This is a helper function for processing user objects returned from profile endpoints.
+* Handles various username field variations: username, userName, and user_name.
+*
+* @param user - The user object to process
+* @returns The user object with processed username fields
 *
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
+* @example
+* ```typescript
+* const user = { username: "DEFAULT/john.doe", email: "john@example.com" };
+* const processedUser = processUserUsername(user);
+* console.log(processedUser.username); // "john.doe"
 *
-*     http://www.apache.org/licenses/LICENSE-2.0
+* const camelCaseUser = { userName: "ASGARDEO_USER/jane.doe", email: "jane@example.com" };
+* const processedCamelCaseUser = processUserUsername(camelCaseUser);
+* console.log(processedCamelCaseUser.userName); // "jane.doe"
 *
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
+* const snakeCaseUser = { user_name: "PRIMARY/admin", email: "admin@example.com" };
+* const processedSnakeCaseUser = processUserUsername(snakeCaseUser);
+* console.log(processedSnakeCaseUser.user_name); // "admin"
+* ```
 */
-let FieldType = /* @__PURE__ */ function(FieldType$1) {
-	FieldType$1["Checkbox"] = "CHECKBOX";
-	FieldType$1["Date"] = "DATE";
-	FieldType$1["Email"] = "EMAIL";
-	FieldType$1["Number"] = "NUMBER";
-	FieldType$1["Otp"] = "OTP";
-	FieldType$1["Password"] = "PASSWORD";
-	FieldType$1["Radio"] = "RADIO";
-	FieldType$1["Select"] = "SELECT";
-	FieldType$1["Tel"] = "TEL";
-	FieldType$1["Text"] = "TEXT";
-	FieldType$1["Textarea"] = "TEXTAREA";
-	FieldType$1["Time"] = "TIME";
-	return FieldType$1;
-}({});
+const processUsername = (user) => {
+	if (!user) return user;
+	const processedUser = { ...user };
+	if (processedUser.username) processedUser.username = removeUserstorePrefix(processedUser.username);
+	if (processedUser.userName) processedUser.userName = removeUserstorePrefix(processedUser.userName);
+	if (processedUser.user_name) processedUser.user_name = removeUserstorePrefix(processedUser.user_name);
+	return processedUser;
+};
+var processUsername_default = processUsername;
 
 //#endregion
-//#region src/constants/OIDCDiscoveryConstants.ts
+//#region src/api/getUsersMe.ts
 /**
-* Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
+* Retrieves the user profile information from the specified /users/me endpoint.
 *
-*     http://www.apache.org/licenses/LICENSE-2.0
+* @param config - Request configuration object.
+* @returns A promise that resolves with the user profile information.
+* @example
+* ```typescript
+* // Using default fetch
+* try {
+*   const userProfile = await getUsersMe({
+*     url: "https://localhost:8090/users/me",
+*   });
+*   console.log(userProfile);
+* } catch (error) {
+*   if (error instanceof ThunderIDAPIError) {
+*     console.error('Failed to get user profile:', error.message);
+*   }
+* }
+* ```
 *
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
+* @example
+* ```typescript
+* // Using custom fetcher (e.g., axios-based httpClient)
+* try {
+*   const userProfile = await getUsersMe({
+*     url: "https://localhost:8090/users/me",
+*     fetcher: async (url, config) => {
+*       const response = await httpClient({
+*         url,
+*         method: config.method,
+*         headers: config.headers,
+*         ...config
+*       });
+*       // Convert axios-like response to fetch-like Response
+*       return {
+*         ok: response.status >= 200 && response.status < 300,
+*         status: response.status,
+*         statusText: response.statusText,
+*         json: () => Promise.resolve(response.data),
+*         text: () => Promise.resolve(typeof response.data === 'string' ? response.data : JSON.stringify(response.data))
+*       } as Response;
+*     }
+*   });
+*   console.log(userProfile);
+* } catch (error) {
+*   if (error instanceof ThunderIDAPIError) {
+*     console.error('Failed to get user profile:', error.message);
+*   }
+* }
+* ```
 */
+const getUsersMe = async ({ url, baseUrl, fetcher,...requestConfig }) => {
+	try {
+		new URL(url ?? baseUrl);
+	} catch (error$1) {
+		throw new ThunderIDAPIError(`Invalid URL provided. ${error$1?.toString()}`, "getUsersMe-ValidationError-001", "javascript", 400, "The provided `url` or `baseUrl` path does not adhere to the URL schema.");
+	}
+	const fetchFn = fetcher || fetch;
+	const resolvedUrl = url ?? `${baseUrl}/users/me`;
+	const requestInit = {
+		...requestConfig,
+		headers: {
+			Accept: "application/json",
+			"Content-Type": "application/json",
+			...requestConfig.headers
+		},
+		method: "GET"
+	};
+	try {
+		const response = await fetchFn(resolvedUrl, requestInit);
+		if (!response?.ok) throw new ThunderIDAPIError(await response.text(), "getUsersMe-ResponseError-001", "javascript", response.status, response.statusText, "Failed to fetch user profile");
+		const user = await response.json();
+		const attributes = user["attributes"] ?? {};
+		return processUsername_default({
+			...user,
+			...attributes
+		});
+	} catch (error$1) {
+		if (error$1 instanceof ThunderIDAPIError) throw error$1;
+		throw new ThunderIDAPIError(`Network or parsing error: ${error$1 instanceof Error ? error$1.message : "Unknown error"}`, "getUsersMe-NetworkError-001", "javascript", 0, "Network Error");
+	}
+};
+var getUsersMe_default = getUsersMe;
+
+//#endregion
+//#region src/api/updateMeProfile.ts
 /**
-* Constants related to OpenID Connect (OIDC) metadata and endpoints.
-* This object contains all the standard OIDC endpoints and storage keys
-* used throughout the application for authentication and authorization.
-*
-* @remarks
-* The constants are organized into two main sections:
-* 1. Endpoints - Contains all OIDC standard endpoint paths
-* 2. Storage - Contains keys used for storing OIDC-related data
+* Updates the user profile information at the specified /users/me endpoint.
 *
+* @param config - Configuration object with URL, payload and optional request config.
+* @returns A promise that resolves with the updated user profile information.
 * @example
 * ```typescript
-* // Using an endpoint
-* const authEndpoint = OIDCDiscoveryConstants.Endpoints.AUTHORIZATION;
+* // Using default fetch
+* await updateMeProfile({
+*   url: "https://localhost:8090/users/me",
+*   payload: { mobileNumbers: ["0777933830"] }
+* });
+* ```
 *
-* // Using a storage key
-* const tokenKey = OIDCDiscoveryConstants.Storage.StorageKeys.Endpoints.TOKEN;
+* @example
+* ```typescript
+* // Using custom fetcher (e.g., axios-based httpClient)
+* await updateMeProfile({
+*   url: "https://localhost:8090/users/me",
+*   payload: { mobileNumbers: ["0777933830"] },
+*   fetcher: async (url, config) => {
+*     const response = await httpClient({
+*       url,
+*       method: config.method,
+*       headers: config.headers,
+*       data: config.body,
+*       ...config
+*     });
+*     // Convert axios-like response to fetch-like Response
+*     return {
+*       ok: response.status >= 200 && response.status < 300,
+*       status: response.status,
+*       statusText: response.statusText,
+*       json: () => Promise.resolve(response.data),
+*       text: () => Promise.resolve(typeof response.data === 'string' ? response.data : JSON.stringify(response.data))
+*     } as Response;
+*   }
+* });
 * ```
 */
-const OIDCDiscoveryConstants = {
-	Endpoints: {
-		AUTHORIZATION: "/oauth2/authorize",
-		END_SESSION: "/oauth2/logout",
-		ISSUER: "/oauth2/token",
-		JWKS: "/oauth2/jwks",
-		REVOCATION: "/oauth2/revoke",
-		SESSION_IFRAME: "/oidc/checksession",
-		TOKEN: "/oauth2/token",
-		USERINFO: "/oauth2/userinfo"
-	},
-	Storage: { StorageKeys: {
-		Endpoints: {
-			AUTHORIZATION: "authorization_endpoint",
-			END_SESSION: "end_session_endpoint",
-			ISSUER: "issuer",
-			JWKS: "jwks_uri",
-			REVOCATION: "revocation_endpoint",
-			SESSION_IFRAME: "check_session_iframe",
-			TOKEN: "token_endpoint",
-			USERINFO: "userinfo_endpoint"
-		},
-		OPENID_PROVIDER_CONFIG_INITIATED: "op_config_initiated"
-	} }
+const updateMeProfile = async ({ url, baseUrl, payload, fetcher,...requestConfig }) => {
+	try {
+		new URL(url ?? baseUrl);
+	} catch (error$1) {
+		throw new ThunderIDAPIError(`Invalid URL provided. ${error$1?.toString()}`, "updateMeProfile-ValidationError-001", "javascript", 400, "The provided `url` or `baseUrl` path does not adhere to the URL schema.");
+	}
+	const data = { attributes: payload };
+	const fetchFn = fetcher || fetch;
+	const resolvedUrl = url ?? `${baseUrl}/users/me`;
+	const requestInit = {
+		...requestConfig,
+		method: "PUT",
+		body: JSON.stringify(data),
+		headers: {
+			...requestConfig.headers,
+			Accept: "application/json",
+			"Content-Type": "application/json"
+		}
+	};
+	try {
+		const response = await fetchFn(resolvedUrl, requestInit);
+		if (!response?.ok) throw new ThunderIDAPIError(await response.text(), "updateMeProfile-ResponseError-001", "javascript", response.status, response.statusText, "Failed to update user profile");
+		const user = await response.json();
+		const attributes = user["attributes"] ?? {};
+		return processUsername_default({
+			...user,
+			...attributes
+		});
+	} catch (error$1) {
+		if (error$1 instanceof ThunderIDAPIError) throw error$1;
+		throw new ThunderIDAPIError(error$1?.response?.data?.detail || "An error occurred while updating the user profile. Please try again.", "updateMeProfile-NetworkError-001", "javascript", error$1?.data?.status, "Network Error");
+	}
 };
-var OIDCDiscoveryConstants_default = OIDCDiscoveryConstants;
+var updateMeProfile_default = updateMeProfile;
 
 //#endregion
-//#region src/constants/PKCEConstants.ts
+//#region src/constants/ApplicationNativeAuthenticationConstants.ts
 /**
-* Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
+* Constants representing Application Native Authentication related configurations and constants.
 */
+const ApplicationNativeAuthenticationConstants = { SupportedAuthenticators: {
+	EmailOtp: "ZW1haWwtb3RwLWF1dGhlbnRpY2F0b3I6TE9DQUw",
+	Facebook: "RmFjZWJvb2tBdXRoZW50aWNhdG9yOkZhY2Vib29r",
+	GitHub: "R2l0aHViQXV0aGVudGljYXRvcjpHaXRIdWI",
+	Google: "R29vZ2xlT0lEQ0F1dGhlbnRpY2F0b3I6R29vZ2xl",
+	IdentifierFirst: "SWRlbnRpZmllckV4ZWN1dG9yOkxPQ0FM",
+	LinkedIn: "TGlua2VkSW5PSURDOkxpbmtlZElu",
+	MagicLink: "TWFnaWNMaW5rQXV0aGVudGljYXRvcjpMT0NBTA",
+	Microsoft: "T3BlbklEQ29ubmVjdEF1dGhlbnRpY2F0b3I6TWljcm9zb2Z0",
+	Passkey: "RklET0F1dGhlbnRpY2F0b3I6TE9DQUw",
+	PushNotification: "cHVzaC1ub3RpZmljYXRpb24tYXV0aGVudGljYXRvcjpMT0NBTA",
+	SignInWithEthereum: "T3BlbklEQ29ubmVjdEF1dGhlbnRpY2F0b3I6U2lnbiBJbiBXaXRoIEV0aGVyZXVt",
+	SmsOtp: "c21zLW90cC1hdXRoZW50aWNhdG9yOkxPQ0FM",
+	Totp: "dG90cDpMT0NBTA",
+	UsernamePassword: "QmFzaWNBdXRoZW50aWNhdG9yOkxPQ0FM"
+} };
+var ApplicationNativeAuthenticationConstants_default = ApplicationNativeAuthenticationConstants;
+
+//#endregion
+//#region src/constants/ScopeConstants.ts
 /**
-* Constants related to Proof Key for Code Exchange (PKCE) implementation.
-* This object contains all the necessary constants for implementing PKCE
-* flow in the OAuth 2.0 authorization code grant.
+* Constants for OAuth 2.0 and OpenID Connect scopes.
+* These scopes define the level of access that the client application
+* is requesting from the authorization server.
 *
 * @remarks
-* PKCE is an extension to the authorization code flow to prevent CSRF and
-* authorization code injection attacks. The constants are organized into
-* storage-related sections for managing PKCE state.
+* Scopes are space-separated strings that represent different permissions.
+* The 'openid' scope is required for OpenID Connect flows, while other
+* scopes provide access to different resources or user information.
 *
 * @example
 * ```typescript
-* // Using storage keys
-* const codeVerifierKey = PKCEConstants.Storage.StorageKeys.CODE_VERIFIER;
-* const separator = PKCEConstants.Storage.StorageKeys.SEPARATOR;
+* // Requesting OpenID Connect authentication
+* const scope = [ScopeConstants.OPENID];
+*
+* // Requesting profile information
+* const scopes = [ScopeConstants.OPENID, ScopeConstants.PROFILE];
 * ```
 */
-const PKCEConstants = {
-	DEFAULT_CODE_CHALLENGE_METHOD: "S256",
-	Storage: { StorageKeys: {
-		CODE_VERIFIER: "pkce_code_verifier",
-		SEPARATOR: "#"
-	} }
+const ScopeConstants = {
+	OPENID: "openid",
+	PROFILE: "profile"
 };
-var PKCEConstants_default = PKCEConstants;
+var ScopeConstants_default = ScopeConstants;
 
 //#endregion
-//#region src/DefaultCacheStore.ts
+//#region src/constants/OIDCRequestConstants.ts
 /**
-* Copyright (c) 2026, WSO2 LLC. (https://www.wso2.com).
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
+* Constants representing standard OpenID Connect (OIDC) request and response parameters.
+* These parameters are commonly used during authorization, token exchange, and logout flows.
 */
-var DefaultCacheStore = class {
-	cache;
-	constructor() {
-		this.cache = /* @__PURE__ */ new Map();
-	}
-	get length() {
-		return this.cache.size;
-	}
-	getItem(key) {
-		return this.cache.get(key) ?? null;
-	}
-	setItem(key, value) {
-		this.cache.set(key, value);
-	}
-	removeItem(key) {
-		this.cache.delete(key);
-	}
-	clear() {
-		this.cache.clear();
-	}
-	key(index) {
-		return Array.from(this.cache.keys())[index] ?? null;
-	}
-	async setData(key, value) {
-		this.cache.set(key, value);
-	}
-	async getData(key) {
-		return this.cache.get(key) ?? "{}";
-	}
-	async removeData(key) {
-		this.cache.delete(key);
-	}
+const OIDCRequestConstants = {
+	Params: {
+		AUTHORIZATION_CODE: "code",
+		SESSION_STATE: "session_state",
+		SIGN_OUT_SUCCESS: "sign_out_success",
+		STATE: "state"
+	},
+	SignIn: { Payload: { DEFAULT_SCOPES: [ScopeConstants_default.OPENID, ScopeConstants_default.PROFILE] } },
+	SignOut: { Storage: { StorageKeys: { SIGN_OUT_URL: "sign_out_url" } } }
 };
+var OIDCRequestConstants_default = OIDCRequestConstants;
 
 //#endregion
-//#region src/DefaultCrypto.ts
+//#region src/constants/VendorConstants.ts
 /**
-* Default implementation of the Crypto interface using the 'jose' library
-* and the native Web Crypto API.
+* Constants for vendor-specific configurations.
+* By default, the vendor is inferred as ThunderID.
+*
+* @example
+* ```typescript
+*  // Using the vendor prefix in a URL
+* const apiUrl = `${VendorConstants.VENDOR_PREFIX}/api/v1/resource`;
+* ```
 */
-var DefaultCrypto = class {
-	base64URLDecode(value) {
-		const decodedArray = jose.base64url.decode(value);
-		return new TextDecoder().decode(decodedArray);
-	}
-	base64URLEncode(value) {
-		return jose.base64url.encode(value);
-	}
-	generateRandomBytes(length) {
-		return crypto.getRandomValues(new Uint8Array(length));
-	}
-	async hashSha256(data) {
-		const dataBuffer = new TextEncoder().encode(data);
-		const hashBuffer = await crypto.subtle.digest("SHA-256", dataBuffer);
-		return new Uint8Array(hashBuffer);
-	}
-	async verifyJwt(idToken, jwk, algorithms, clientId, issuer, subject, clockTolerance, validateJwtIssuer = true) {
-		const key = await jose.importJWK(jwk);
-		await jose.jwtVerify(idToken, key, {
-			algorithms,
-			audience: [clientId],
-			clockTolerance,
-			issuer: validateJwtIssuer ? issuer : void 0,
-			subject
-		});
-		return true;
-	}
-};
+const VendorConstants = { VENDOR_PREFIX: "thunderid" };
+var VendorConstants_default = VendorConstants;
 
 //#endregion
-//#region src/models/store.ts
+//#region src/errors/ThunderIDRuntimeError.ts
 /**
-* Enum representing different types of data stores used in the application.
+* Base class for all runtime errors in ThunderID. This class extends ThunderIDError
+* and adds support for additional error details. Use this class for errors that occur
+* during runtime execution that are not related to API calls.
+*
+* @example
+* ```typescript
+* throw new ThunderIDRuntimeError(
+*   "Failed to parse configuration",
+*   "CONFIG_PARSE_ERROR",
+*   { invalidField: "redirectUri" }
+* );
+* ```
 */
-let Stores = /* @__PURE__ */ function(Stores$1) {
-	/**
-	* Store for configuration data that defines the application's behavior and settings.
-	*/
-	Stores$1["ConfigData"] = "config_data";
-	/**
-	* Store for OpenID Connect provider metadata, including endpoints and configuration.
-	*/
-	Stores$1["OIDCProviderMetaData"] = "oidc_provider_meta_data";
-	/**
-	* Store for persisted data that needs to be retained across sessions and application restarts.
-	*/
-	Stores$1["PersistedData"] = "persisted_data";
-	/**
-	* Store for user session-related data like tokens and authentication state.
-	*/
-	Stores$1["SessionData"] = "session_data";
+var ThunderIDRuntimeError = class extends ThunderIDError {
 	/**
-	* Store for temporary data that needs to persist only for a short duration.
+	* Creates an instance of ThunderIDRuntimeError.
+	*
+	* @param message - Human-readable description of the error
+	* @param code - A unique error code that identifies the error type
+	* @param details - Additional details about the error that might be helpful for debugging
+	* @param origin - Optional. The SDK origin (e.g. 'react', 'vue'). Defaults to generic 'ThunderID'
+	* @constructor
 	*/
-	Stores$1["TemporaryData"] = "temporary_data";
+	constructor(message, code, origin, details) {
+		super(message, code, origin);
+		this.details = details;
+		Object.defineProperty(this, "name", {
+			configurable: true,
+			value: "ThunderIDRuntimeError",
+			writable: true
+		});
+	}
 	/**
-	* Store for data that leverages local storage if available, falling back to the configured storage.
+	* Returns a string representation of the runtime error
+	* @returns Formatted error string with name, code, details, and message
 	*/
-	Stores$1["HybridData"] = "hybrid_data";
-	return Stores$1;
-}({});
+	toString() {
+		const details = this.details ? `\nDetails: ${JSON.stringify(this.details, null, 2)}` : "";
+		return `[${this.name}] (code="${this.code}")${details}\nMessage: ${this.message}`;
+	}
+};
 
 //#endregion
-//#region src/utils/logger.ts
-const PREFIX = "⚡ ThunderID";
-/**
-* Default logger configuration
-*/
-const DEFAULT_CONFIG$1 = {
-	level: "info",
-	prefix: `${PREFIX}`,
-	showLevel: true,
-	timestamps: true
-};
-/**
-* Environment detection utilities
-*/
-const isBrowser = () => typeof window !== "undefined" && typeof window.document !== "undefined";
-const isNode = () => typeof process !== "undefined" && process.versions && process.versions.node;
-/**
-* Color codes for terminal output (Node.js)
-*/
-const COLORS = {
-	blue: "\x1B[34m",
-	bright: "\x1B[1m",
-	cyan: "\x1B[36m",
-	dim: "\x1B[2m",
-	gray: "\x1B[90m",
-	green: "\x1B[32m",
-	magenta: "\x1B[35m",
-	red: "\x1B[31m",
-	reset: "\x1B[0m",
-	white: "\x1B[37m",
-	yellow: "\x1B[33m"
-};
-/**
-* Browser console styling
-*/
-const BROWSER_STYLES = {
-	debug: "color: #6b7280; font-weight: normal;",
-	error: "color: #dc2626; font-weight: bold;",
-	info: "color: #2563eb; font-weight: bold;",
-	prefix: "color: #7c3aed; font-weight: bold;",
-	timestamp: "color: #6b7280; font-size: 0.9em;",
-	warn: "color: #d97706; font-weight: bold;"
-};
-const LOG_LEVEL_ORDER = {
-	debug: 0,
-	error: 3,
-	info: 1,
-	warn: 2
-};
+//#region src/models/embedded-recovery-flow.ts
 /**
-* Universal logger class that works in both browser and Node.js environments
+* Status enumeration for the embedded recovery flow operations.
+*
+* @experimental Part of the new ThunderID API
 */
-var Logger = class Logger {
-	config;
-	constructor(config = {}) {
-		this.config = {
-			...DEFAULT_CONFIG$1,
-			...config
-		};
-	}
-	/**
-	* Update logger configuration
-	*/
-	configure(config) {
-		this.config = {
-			...this.config,
-			...config
-		};
-	}
+let EmbeddedRecoveryFlowStatus = /* @__PURE__ */ function(EmbeddedRecoveryFlowStatus$1) {
 	/**
-	* Get current configuration
+	* Recovery flow completed successfully.
 	*/
-	getConfig() {
-		return { ...this.config };
-	}
+	EmbeddedRecoveryFlowStatus$1["Complete"] = "COMPLETE";
 	/**
-	* Check if a log level should be output
+	* Recovery flow encountered an error and cannot proceed.
+	*
+	* @see {@link EmbeddedRecoveryFlowErrorResponse} for error response structure
 	*/
-	shouldLog(level) {
-		return LOG_LEVEL_ORDER[level] >= LOG_LEVEL_ORDER[this.config.level];
-	}
+	EmbeddedRecoveryFlowStatus$1["Error"] = "ERROR";
 	/**
-	* Get timestamp string
+	* Recovery flow requires additional user input.
 	*/
-	static getTimestamp() {
-		return (/* @__PURE__ */ new Date()).toISOString();
-	}
+	EmbeddedRecoveryFlowStatus$1["Incomplete"] = "INCOMPLETE";
+	return EmbeddedRecoveryFlowStatus$1;
+}({});
+/**
+* Type enumeration for embedded recovery flow responses.
+*
+* @experimental Part of the new ThunderID API
+*/
+let EmbeddedRecoveryFlowType = /* @__PURE__ */ function(EmbeddedRecoveryFlowType$1) {
 	/**
-	* Get log level string
+	* Response requires external redirection.
 	*/
-	static getLevelString(level) {
-		switch (level) {
-			case "debug": return "DEBUG";
-			case "info": return "INFO";
-			case "warn": return "WARN";
-			case "error": return "ERROR";
-			default: return "UNKNOWN";
-		}
-	}
+	EmbeddedRecoveryFlowType$1["Redirection"] = "REDIRECTION";
 	/**
-	* Format message for Node.js terminal
+	* Response contains view components for rendering.
 	*/
-	formatForNode(level, message) {
-		const parts = [];
-		if (this.config.timestamps) parts.push(`${COLORS.gray}[${Logger.getTimestamp()}]${COLORS.reset}`);
-		if (this.config.prefix) parts.push(`${COLORS.magenta}${this.config.prefix}${COLORS.reset}`);
-		if (this.config.showLevel) {
-			const levelStr = Logger.getLevelString(level);
-			let coloredLevel;
-			switch (level) {
-				case "debug":
-					coloredLevel = `${COLORS.gray}[${levelStr}]${COLORS.reset}`;
-					break;
-				case "info":
-					coloredLevel = `${COLORS.blue}[${levelStr}]${COLORS.reset}`;
-					break;
-				case "warn":
-					coloredLevel = `${COLORS.yellow}[${levelStr}]${COLORS.reset}`;
-					break;
-				case "error":
-					coloredLevel = `${COLORS.red}[${levelStr}]${COLORS.reset}`;
-					break;
-				default: coloredLevel = `[${levelStr}]`;
-			}
-			parts.push(coloredLevel);
-		}
-		parts.push(message);
-		return parts.join(" ");
-	}
+	EmbeddedRecoveryFlowType$1["View"] = "VIEW";
+	return EmbeddedRecoveryFlowType$1;
+}({});
+
+//#endregion
+//#region src/models/flow-meta.ts
+/**
+* The type of entity to retrieve flow metadata for.
+*
+* @example
+* ```typescript
+* const config: GetFlowMetaRequestConfig = {
+*   baseUrl: 'https://localhost:8090',
+*   type: FlowMetaType.App,
+*   id: '60a9b38b-6eba-9f9e-55f9-267067de4680',
+* };
+* ```
+*
+* @experimental This API may change in future versions
+*/
+let FlowMetaType = /* @__PURE__ */ function(FlowMetaType$1) {
+	/** Retrieve metadata scoped to a specific application */
+	FlowMetaType$1["App"] = "APP";
+	/** Retrieve metadata scoped to a specific organization unit */
+	FlowMetaType$1["Ou"] = "OU";
+	return FlowMetaType$1;
+}({});
+
+//#endregion
+//#region src/models/flow.ts
+let FlowMode = /* @__PURE__ */ function(FlowMode$1) {
 	/**
-	* Log message using appropriate method
+	* This mode is suitable for embedded sign-in, sign-up, etc. flows where the authentication
+	* UIs are rendered within the application.
 	*/
-	logMessage(level, message, ...args) {
-		if (!this.shouldLog(level)) return;
-		if (this.config.formatter) {
-			this.config.formatter(level, message, ...args);
-			return;
-		}
-		if (isBrowser()) this.logToBrowser(level, message, ...args);
-		else if (isNode()) this.logToNode(level, message, ...args);
-		else console.log(message, ...args);
-	}
+	FlowMode$1["Embedded"] = "DIRECT";
 	/**
-	* Log to browser console with styling
+	* Traditional redirect based sign-in, sign-up, etc. flows where the authentication
+	* UIs are from a external Identity Provider (ex: ThunderID).
 	*/
-	logToBrowser(level, message, ...args) {
-		const parts = [];
-		const styles = [];
-		if (this.config.timestamps) {
-			parts.push(`%c[${Logger.getTimestamp()}]`);
-			styles.push(BROWSER_STYLES.timestamp);
-		}
-		if (this.config.prefix) {
-			parts.push(`%c${this.config.prefix}`);
-			styles.push(BROWSER_STYLES.prefix);
-		}
-		if (this.config.showLevel) {
-			const levelStr = Logger.getLevelString(level);
-			parts.push(`%c[${levelStr}]`);
-			switch (level) {
-				case "debug":
-					styles.push(BROWSER_STYLES.debug);
-					break;
-				case "info":
-					styles.push(BROWSER_STYLES.info);
-					break;
-				case "warn":
-					styles.push(BROWSER_STYLES.warn);
-					break;
-				case "error":
-					styles.push(BROWSER_STYLES.error);
-					break;
-				default: styles.push("");
-			}
-		}
-		parts.push(`%c${message}`);
-		styles.push("color: inherit; font-weight: normal;");
-		const formattedMessage = parts.join(" ");
-		switch (level) {
-			case "debug":
-				console.debug(formattedMessage, ...styles, ...args);
-				break;
-			case "info":
-				console.info(formattedMessage, ...styles, ...args);
-				break;
-			case "warn":
-				console.warn(formattedMessage, ...styles, ...args);
-				break;
-			case "error":
-				console.error(formattedMessage, ...styles, ...args);
-				break;
-			default: console.log(formattedMessage, ...styles, ...args);
-		}
+	FlowMode$1["Redirect"] = "REDIRECTION";
+	return FlowMode$1;
+}({});
+
+//#endregion
+//#region src/models/field.ts
+let FieldType = /* @__PURE__ */ function(FieldType$1) {
+	FieldType$1["Checkbox"] = "CHECKBOX";
+	FieldType$1["Date"] = "DATE";
+	FieldType$1["Email"] = "EMAIL";
+	FieldType$1["Number"] = "NUMBER";
+	FieldType$1["Otp"] = "OTP";
+	FieldType$1["Password"] = "PASSWORD";
+	FieldType$1["Radio"] = "RADIO";
+	FieldType$1["Select"] = "SELECT";
+	FieldType$1["Tel"] = "TEL";
+	FieldType$1["Text"] = "TEXT";
+	FieldType$1["Textarea"] = "TEXTAREA";
+	FieldType$1["Time"] = "TIME";
+	return FieldType$1;
+}({});
+
+//#endregion
+//#region src/constants/OIDCDiscoveryConstants.ts
+/**
+* Constants related to OpenID Connect (OIDC) metadata and endpoints.
+* This object contains all the standard OIDC endpoints and storage keys
+* used throughout the application for authentication and authorization.
+*
+* @remarks
+* The constants are organized into two main sections:
+* 1. Endpoints - Contains all OIDC standard endpoint paths
+* 2. Storage - Contains keys used for storing OIDC-related data
+*
+* @example
+* ```typescript
+* // Using an endpoint
+* const authEndpoint = OIDCDiscoveryConstants.Endpoints.AUTHORIZATION;
+*
+* // Using a storage key
+* const tokenKey = OIDCDiscoveryConstants.Storage.StorageKeys.Endpoints.TOKEN;
+* ```
+*/
+const OIDCDiscoveryConstants = {
+	Endpoints: {
+		AUTHORIZATION: "/oauth2/authorize",
+		END_SESSION: "/oauth2/logout",
+		ISSUER: "/oauth2/token",
+		JWKS: "/oauth2/jwks",
+		REVOCATION: "/oauth2/revoke",
+		SESSION_IFRAME: "/oidc/checksession",
+		TOKEN: "/oauth2/token",
+		USERINFO: "/oauth2/userinfo"
+	},
+	Storage: { StorageKeys: {
+		Endpoints: {
+			AUTHORIZATION: "authorization_endpoint",
+			END_SESSION: "end_session_endpoint",
+			ISSUER: "issuer",
+			JWKS: "jwks_uri",
+			REVOCATION: "revocation_endpoint",
+			SESSION_IFRAME: "check_session_iframe",
+			TOKEN: "token_endpoint",
+			USERINFO: "userinfo_endpoint"
+		},
+		OPENID_PROVIDER_CONFIG_INITIATED: "op_config_initiated"
+	} }
+};
+var OIDCDiscoveryConstants_default = OIDCDiscoveryConstants;
+
+//#endregion
+//#region src/constants/PKCEConstants.ts
+/**
+* Constants related to Proof Key for Code Exchange (PKCE) implementation.
+* This object contains all the necessary constants for implementing PKCE
+* flow in the OAuth 2.0 authorization code grant.
+*
+* @remarks
+* PKCE is an extension to the authorization code flow to prevent CSRF and
+* authorization code injection attacks. The constants are organized into
+* storage-related sections for managing PKCE state.
+*
+* @example
+* ```typescript
+* // Using storage keys
+* const codeVerifierKey = PKCEConstants.Storage.StorageKeys.CODE_VERIFIER;
+* const separator = PKCEConstants.Storage.StorageKeys.SEPARATOR;
+* ```
+*/
+const PKCEConstants = {
+	DEFAULT_CODE_CHALLENGE_METHOD: "S256",
+	Storage: { StorageKeys: {
+		CODE_VERIFIER: "pkce_code_verifier",
+		SEPARATOR: "#"
+	} }
+};
+var PKCEConstants_default = PKCEConstants;
+
+//#endregion
+//#region src/DefaultCacheStore.ts
+var DefaultCacheStore = class {
+	cache;
+	constructor() {
+		this.cache = /* @__PURE__ */ new Map();
 	}
-	/**
-	* Log to Node.js console
-	*/
-	logToNode(level, message, ...args) {
-		const formattedMessage = this.formatForNode(level, message);
-		switch (level) {
-			case "debug":
-				console.debug(formattedMessage, ...args);
-				break;
-			case "info":
-				console.info(formattedMessage, ...args);
-				break;
-			case "warn":
-				console.warn(formattedMessage, ...args);
-				break;
-			case "error":
-				console.error(formattedMessage, ...args);
-				break;
-			default: console.log(formattedMessage, ...args);
-		}
+	get length() {
+		return this.cache.size;
 	}
-	/**
-	* Log debug message
-	*/
-	debug(message, ...args) {
-		this.logMessage("debug", message, ...args);
+	getItem(key) {
+		return this.cache.get(key) ?? null;
+	}
+	setItem(key, value) {
+		this.cache.set(key, value);
+	}
+	removeItem(key) {
+		this.cache.delete(key);
+	}
+	clear() {
+		this.cache.clear();
+	}
+	key(index) {
+		return Array.from(this.cache.keys())[index] ?? null;
+	}
+	async setData(key, value) {
+		this.cache.set(key, value);
+	}
+	async getData(key) {
+		return this.cache.get(key) ?? "{}";
+	}
+	async removeData(key) {
+		this.cache.delete(key);
+	}
+};
+
+//#endregion
+//#region src/DefaultCrypto.ts
+/**
+* Default implementation of the Crypto interface using the 'jose' library
+* and the native Web Crypto API.
+*/
+var DefaultCrypto = class {
+	base64URLDecode(value) {
+		const decodedArray = jose.base64url.decode(value);
+		return new TextDecoder().decode(decodedArray);
+	}
+	base64URLEncode(value) {
+		return jose.base64url.encode(value);
+	}
+	generateRandomBytes(length) {
+		return crypto.getRandomValues(new Uint8Array(length));
+	}
+	async hashSha256(data) {
+		const dataBuffer = new TextEncoder().encode(data);
+		const hashBuffer = await crypto.subtle.digest("SHA-256", dataBuffer);
+		return new Uint8Array(hashBuffer);
+	}
+	async verifyJwt(idToken, jwk, algorithms, clientId, issuer, subject, clockTolerance, validateJwtIssuer = true) {
+		const key = await jose.importJWK(jwk);
+		await jose.jwtVerify(idToken, key, {
+			algorithms,
+			audience: [clientId],
+			clockTolerance,
+			issuer: validateJwtIssuer ? issuer : void 0,
+			subject
+		});
+		return true;
 	}
+};
+
+//#endregion
+//#region src/models/store.ts
+/**
+* Enum representing different types of data stores used in the application.
+*/
+let Stores = /* @__PURE__ */ function(Stores$1) {
 	/**
-	* Log info message
+	* Store for configuration data that defines the application's behavior and settings.
 	*/
-	info(message, ...args) {
-		this.logMessage("info", message, ...args);
-	}
+	Stores$1["ConfigData"] = "config_data";
 	/**
-	* Log warning message
+	* Store for OpenID Connect provider metadata, including endpoints and configuration.
 	*/
-	warn(message, ...args) {
-		this.logMessage("warn", message, ...args);
-	}
+	Stores$1["OIDCProviderMetaData"] = "oidc_provider_meta_data";
 	/**
-	* Log error message
+	* Store for persisted data that needs to be retained across sessions and application restarts.
 	*/
-	error(message, ...args) {
-		this.logMessage("error", message, ...args);
-	}
+	Stores$1["PersistedData"] = "persisted_data";
 	/**
-	* Create a child logger with additional prefix
+	* Store for user session-related data like tokens and authentication state.
 	*/
-	child(prefix) {
-		const childPrefix = this.config.prefix ? `${this.config.prefix} - ${prefix}` : prefix;
-		return new Logger({
-			...this.config,
-			prefix: childPrefix
-		});
-	}
+	Stores$1["SessionData"] = "session_data";
 	/**
-	* Set log level
+	* Store for temporary data that needs to persist only for a short duration.
 	*/
-	setLevel(level) {
-		this.config.level = level;
-	}
+	Stores$1["TemporaryData"] = "temporary_data";
 	/**
-	* Get current log level
+	* Store for data that leverages local storage if available, falling back to the configured storage.
 	*/
-	getLevel() {
-		return this.config.level;
-	}
-};
-/**
-* Default logger instance
-*/
-const logger = new Logger();
-/**
-* Create a new logger instance with custom configuration
-*/
-const createLogger = (config) => new Logger(config);
-/**
-* Default export - global logger instance
-*/
-var logger_default = logger;
-/**
-* Named exports for convenience
-*/
-const debug = (message, ...args) => logger.debug(message, ...args);
-const info = (message, ...args) => logger.info(message, ...args);
-const warn = (message, ...args) => logger.warn(message, ...args);
-const error = (message, ...args) => logger.error(message, ...args);
-/**
-* Configure the default logger
-*/
-const configure = (config) => logger.configure(config);
-/**
-* Create component-specific loggers
-*/
-const createComponentLogger = (component) => logger.child(component);
-/**
-* Create package-specific logger
-*/
-const createPackageLogger = (packageName) => createLogger({
-	level: "info",
-	prefix: `${PREFIX} - ${packageName}`,
-	showLevel: true,
-	timestamps: true
-});
-/**
-* Create package component logger (package + component)
-*/
-const createPackageComponentLogger = (packageName, component) => {
-	return createPackageLogger(packageName).child(component);
-};
+	Stores$1["HybridData"] = "hybrid_data";
+	return Stores$1;
+}({});
 
 //#endregion
 //#region src/StorageManager.ts
@@ -2585,23 +2343,6 @@ var resolveResourceEndpoint_default = resolveResourceEndpoint;
 //#endregion
 //#region src/constants/TokenExchangeConstants.ts
 /**
-* Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
-*/
-/**
 * Constants for OAuth 2.0 Token Exchange operations.
 * This object contains placeholders used in token exchange requests
 * and responses for dynamic value substitution.
@@ -2876,23 +2617,6 @@ var base64Encode_default = base64Encode;
 //#endregion
 //#region src/utils/deepMerge.ts
 /**
-* Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
-*/
-/**
 * Checks if a value is a plain object (not an array, function, date, etc.)
 *
 * @param value - The value to check
@@ -4116,23 +3840,6 @@ var createTheme_default = createTheme;
 //#endregion
 //#region src/utils/arrayBufferToBase64url.ts
 /**
-* Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
-*/
-/**
 * Converts an ArrayBuffer to a base64url encoded string.
 *
 * Base64url encoding is a URL-safe variant of base64 encoding that:
@@ -4172,23 +3879,6 @@ var arrayBufferToBase64url_default = arrayBufferToBase64url;
 //#endregion
 //#region src/utils/base64urlToArrayBuffer.ts
 /**
-* Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
-*/
-/**
 * Converts a base64url encoded string back to an ArrayBuffer.
 *
 * This function performs the inverse operation of base64url encoding by:
@@ -4237,23 +3927,6 @@ var base64urlToArrayBuffer_default = base64urlToArrayBuffer;
 //#endregion
 //#region src/utils/bem.ts
 /**
-* Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
-*/
-/**
 * Creates a BEM-style class name by combining a base class with element and/or modifier
 *
 * @param baseClass - The base CSS class string (usually from emotion's css function)
@@ -4291,23 +3964,6 @@ var bem_default = bem;
 //#endregion
 //#region src/utils/formatDate.ts
 /**
-* Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
-*/
-/**
 * Formats a date string to a human-readable format.
 *
 * @param dateString - The date string to format (optional)
@@ -4458,23 +4114,6 @@ var getRedirectBasedSignUpUrl_default = getRedirectBasedSignUpUrl;
 //#endregion
 //#region src/utils/isEmpty.ts
 /**
-* Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
-*/
-/**
 * Checks if a value is considered empty.
 *
 * A value is considered empty if it is:
@@ -4514,23 +4153,6 @@ var isEmpty_default = isEmpty;
 
 //#endregion
 //#region src/utils/isEmojiUri.ts
-/**
-* Copyright (c) 2026, WSO2 LLC. (https://www.wso2.com).
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
-*/
 const EMOJI_URI_SCHEME = "emoji:";
 /**
 * Checks whether a given URI uses the `emoji:` scheme (e.g. `"emoji:🐯"`).
@@ -4571,23 +4193,6 @@ var extractEmojiFromUri_default = extractEmojiFromUri;
 //#endregion
 //#region src/utils/set.ts
 /**
-* Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
-*/
-/**
 * Sets the value at path of object. If a portion of path doesn't exist,
 * it's created. Arrays are created for missing index properties while
 * objects are created for all other missing properties.
@@ -4617,23 +4222,6 @@ var set_default = set;
 //#endregion
 //#region src/utils/get.ts
 /**
-* Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
-*/
-/**
 * Gets the value at path of object. If the resolved value is undefined,
 * the defaultValue is returned in its place.
 * Similar to Lodash's get() function
@@ -4653,23 +4241,6 @@ var get_default = get;
 //#endregion
 //#region src/utils/startCase.ts
 /**
-* Copyright (c) 2026, WSO2 LLC. (https://www.wso2.com). All Rights Reserved.
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
-*/
-/**
 * Converts the first character of `string` to upper case.
 *
 * @param string - The string to convert.
@@ -4694,23 +4265,6 @@ var startCase_default = startCase;
 //#endregion
 //#region src/utils/removeTrailingSlash.ts
 /**
-* Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
-*/
-/**
 * Removes a trailing slash from a path string if it exists.
 *
 * @param path - The string path to process
@@ -4763,23 +4317,6 @@ function resolveMeta(path, meta) {
 //#endregion
 //#region src/utils/parseFlowTemplateLiteral.ts
 /**
-* Copyright (c) 2026, WSO2 LLC. (https://www.wso2.com).
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
-*/
-/**
 * Regular expression to detect a flow template literal wrapped in double braces.
 * Matches patterns like `{{ t(key) }}`, `{{ meta(key) }}`, etc.
 *
@@ -4896,23 +4433,6 @@ function resolveFlowTemplateLiterals(text, { t, meta }) {
 //#endregion
 //#region src/utils/countryCodeToFlagEmoji.ts
 /**
-* Copyright (c) 2026, WSO2 LLC. (https://www.wso2.com).
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
-*/
-/**
 * Converts a two-letter ISO 3166-1 alpha-2 country code to a flag emoji using
 * Unicode Regional Indicator Symbols (U+1F1E6–U+1F1FF).
 *
@@ -4926,23 +4446,6 @@ function countryCodeToFlagEmoji(countryCode) {
 //#endregion
 //#region src/utils/resolveLocaleDisplayName.ts
 /**
-* Copyright (c) 2026, WSO2 LLC. (https://www.wso2.com).
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
-*/
-/**
 * Resolves a BCP 47 locale tag to a human-readable display name using the
 * `Intl.DisplayNames` API.
 *
@@ -5114,7 +4617,7 @@ var buildValidatorFromRules_default = buildValidatorFromRules;
 * ```typescript
 * // Usage with clsx
 * clsx(withVendorCSSClassPrefix('sign-in-button'), className)
-* // Result: "wso2-sign-in-button"
+* // Result: "thunderid-sign-in-button"
 * ```
 */
 const withVendorCSSClassPrefix = (className) => `${VendorConstants_default.VENDOR_PREFIX}-${className}`;