@thunderid/javascript 0.11.2 → 0.12.0

package/dist/cjs/index.cjs

@@ -34,23 +34,6 @@ jose = __toESM(jose);
 
 //#region src/constants/TokenConstants.ts
 /**
-* Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
-*/
-/**
 * Constants related to OIDC token management and storage.
 * This object contains configuration values and storage keys
 * used in token validation and management processes.
@@ -87,23 +70,6 @@ var TokenConstants_default = TokenConstants;
 //#endregion
 //#region src/errors/exception.ts
 /**
-* Copyright (c) 2020, WSO2 LLC. (https://www.wso2.com). All Rights Reserved.
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
-*/
-/**
 * @deprecated Use `ThunderIDRuntimeError` for runtime errors and `ThunderIDAPIError` for API errors.
 */
 var ThunderIDAuthException = class extends Error {
@@ -191,23 +157,6 @@ var IsomorphicCrypto = class {
 //#endregion
 //#region src/errors/ThunderIDError.ts
 /**
-* Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
-*/
-/**
 * Base class for all ThunderID errors. This class extends the native Error class
 * and adds support for error codes and proper stack traces. Each error is prefixed
 * with a lightning emoji and the SDK name for easy identification.
@@ -256,23 +205,6 @@ var ThunderIDError = class ThunderIDError extends Error {
 //#endregion
 //#region src/utils/parseApiErrorMessage.ts
 /**
-* Copyright (c) 2026, WSO2 LLC. (https://www.wso2.com).
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
-*/
-/**
 * Attempts to extract a human-readable message from a structured API error response body.
 *
 * The backend returns errors in the following form:
@@ -435,23 +367,6 @@ let EmbeddedSignInFlowType = /* @__PURE__ */ function(EmbeddedSignInFlowType$1)
 //#endregion
 //#region src/utils/injectRequestedPermissions.ts
 /**
-* Copyright (c) 2026, WSO2 LLC. (https://www.wso2.com).
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
-*/
-/**
 * Strips the top-level `scopes` field from a payload and injects it as
 * `inputs.requested_permissions` (space-separated string).
 *
@@ -473,175 +388,512 @@ const injectRequestedPermissions = (payload) => {
 var injectRequestedPermissions_default = injectRequestedPermissions;
 
 //#endregion
-//#region src/api/executeEmbeddedSignInFlow.ts
-const executeEmbeddedSignInFlow = async ({ url, baseUrl, payload, authId, flowSecret,...requestConfig }) => {
-	if (!payload) throw new ThunderIDAPIError("Authorization payload is required", "executeEmbeddedSignInFlow-ValidationError-002", "javascript", 400, "If an authorization payload is not provided, the request cannot be constructed correctly.");
-	const endpoint = url ?? `${baseUrl}/flow/execute`;
-	const cleanPayload = typeof payload === "object" && payload !== null ? Object.fromEntries(Object.entries(payload).filter(([key]) => key !== "verbose")) : payload;
-	const isNewFlowStart = typeof cleanPayload === "object" && cleanPayload !== null && "applicationId" in cleanPayload && "flowType" in cleanPayload;
-	const hasOnlyFlowId = typeof cleanPayload === "object" && cleanPayload !== null && "executionId" in cleanPayload && Object.keys(cleanPayload).length === 1;
-	const basePayload = isNewFlowStart ? injectRequestedPermissions_default(cleanPayload) : cleanPayload;
-	const requestPayload = isNewFlowStart || hasOnlyFlowId ? {
-		...basePayload,
-		verbose: true
-	} : basePayload;
-	const response = await fetch(endpoint, {
-		...requestConfig,
-		body: JSON.stringify(requestPayload),
-		headers: {
-			Accept: "application/json",
-			"Content-Type": "application/json",
-			...isNewFlowStart && flowSecret ? { "Flow-Secret": flowSecret } : {},
-			...requestConfig.headers
-		},
-		method: requestConfig.method || "POST"
-	});
-	if (!response.ok) throw new ThunderIDAPIError(await response.text(), "executeEmbeddedSignInFlow-ResponseError-001", "javascript", response.status, response.statusText, "Authorization request failed");
-	const flowResponse = await response.json();
-	if (flowResponse.flowStatus === EmbeddedSignInFlowStatus.Complete && flowResponse.assertion && authId) try {
-		const oauth2Response = await fetch(`${baseUrl}/oauth2/auth/callback`, {
-			body: JSON.stringify({
-				assertion: flowResponse.assertion,
-				authId
-			}),
-			credentials: "include",
-			headers: {
-				Accept: "application/json",
-				"Content-Type": "application/json",
-				...requestConfig.headers
-			},
-			method: "POST"
-		});
-		if (!oauth2Response.ok) throw new ThunderIDAPIError(await oauth2Response.text(), "executeEmbeddedSignInFlow-OAuth2Error-002", "javascript", oauth2Response.status, oauth2Response.statusText, "OAuth2 authorization failed");
-		const oauth2Result = await oauth2Response.json();
-		return {
-			flowStatus: flowResponse.flowStatus,
-			redirectUrl: oauth2Result["redirect_uri"]
-		};
-	} catch (authError) {
-		if (authError instanceof ThunderIDAPIError) throw authError;
-		throw new ThunderIDAPIError(authError instanceof Error ? authError.message : "Unknown error", "executeEmbeddedSignInFlow-OAuth2Error-001", "javascript", 500, "Failed to complete OAuth2 authorization after successful embedded sign-in flow.", "OAuth2 authorization failed");
-	}
-	return flowResponse;
+//#region src/utils/logger.ts
+const PREFIX = "⚡ ThunderID";
+/**
+* Default logger configuration
+*/
+const DEFAULT_CONFIG$1 = {
+	level: "info",
+	prefix: `${PREFIX}`,
+	showLevel: true,
+	timestamps: true
 };
-var executeEmbeddedSignInFlow_default = executeEmbeddedSignInFlow;
-
-//#endregion
-//#region src/models/embedded-signup-flow.ts
 /**
-* Status enumeration for ThunderID embedded sign-up flow operations.
-*
-* These statuses indicate the current state of the registration flow and determine
-* the next action required by the client application. Each status provides specific
-* guidance on how to proceed with the user registration process.
-*
-* @example
-* ```typescript
-* switch (response.flowStatus) {
-*   case EmbeddedSignUpFlowStatus.Incomplete:
-*     // More user input needed - render registration form components
-*     break;
-*   case EmbeddedSignUpFlowStatus.Complete:
-*     // Registration successful - handle completion
-*     break;
-*   case EmbeddedSignUpFlowStatus.Error:
-*     // Registration failed - show error details
-*     const errorResponse = response as EmbeddedSignUpFlowErrorResponse;
-*     showError(errorResponse.error.description.defaultValue);
-*     break;
-* }
-* ```
-*
-* @experimental Part of the new ThunderID API
+* Environment detection utilities
 */
-let EmbeddedSignUpFlowStatus = /* @__PURE__ */ function(EmbeddedSignUpFlowStatus$1) {
+const isBrowser = () => typeof window !== "undefined" && typeof window.document !== "undefined";
+const isNode = () => typeof process !== "undefined" && process.versions && process.versions.node;
+/**
+* Color codes for terminal output (Node.js)
+*/
+const COLORS = {
+	blue: "\x1B[34m",
+	bright: "\x1B[1m",
+	cyan: "\x1B[36m",
+	dim: "\x1B[2m",
+	gray: "\x1B[90m",
+	green: "\x1B[32m",
+	magenta: "\x1B[35m",
+	red: "\x1B[31m",
+	reset: "\x1B[0m",
+	white: "\x1B[37m",
+	yellow: "\x1B[33m"
+};
+/**
+* Browser console styling
+*/
+const BROWSER_STYLES = {
+	debug: "color: #6b7280; font-weight: normal;",
+	error: "color: #dc2626; font-weight: bold;",
+	info: "color: #2563eb; font-weight: bold;",
+	prefix: "color: #7c3aed; font-weight: bold;",
+	timestamp: "color: #6b7280; font-size: 0.9em;",
+	warn: "color: #d97706; font-weight: bold;"
+};
+const LOG_LEVEL_ORDER = {
+	debug: 0,
+	error: 3,
+	info: 1,
+	warn: 2
+};
+/**
+* Universal logger class that works in both browser and Node.js environments
+*/
+var Logger = class Logger {
+	config;
+	constructor(config = {}) {
+		this.config = {
+			...DEFAULT_CONFIG$1,
+			...config
+		};
+	}
 	/**
-	* Sign-up flow completed successfully.
-	*
-	* The user has successfully registered and the flow can proceed to
-	* OAuth2 completion or redirection. Check for redirectUrl or assertion
-	* data in the response for next steps.
+	* Update logger configuration
 	*/
-	EmbeddedSignUpFlowStatus$1["Complete"] = "COMPLETE";
+	configure(config) {
+		this.config = {
+			...this.config,
+			...config
+		};
+	}
 	/**
-	* Sign-up flow encountered an error and cannot proceed.
-	*
-	* Registration failed due to validation errors, duplicate user,
-	* system errors, or other issues. The response will be of type
-	* `EmbeddedSignUpFlowErrorResponse` containing detailed failure
-	* information that can be displayed to the user.
-	*
-	* @see {@link EmbeddedSignUpFlowErrorResponse} for error response structure
+	* Get current configuration
 	*/
-	EmbeddedSignUpFlowStatus$1["Error"] = "ERROR";
+	getConfig() {
+		return { ...this.config };
+	}
 	/**
-	* Sign-up flow requires additional user input.
-	*
-	* More registration steps are needed. The response will contain
-	* components in data.meta.components that should be rendered to
-	* collect additional user information (e.g., profile data, verification).
+	* Check if a log level should be output
 	*/
-	EmbeddedSignUpFlowStatus$1["Incomplete"] = "INCOMPLETE";
-	return EmbeddedSignUpFlowStatus$1;
-}({});
-/**
-* Type enumeration for ThunderID embedded sign-up flow responses.
-*
-* Determines the nature of the registration flow response and how the client
-* should handle the returned data. This affects both UI rendering and flow
-* continuation logic during the user registration process.
-*
-* @experimental Part of the new ThunderID API
-*/
-let EmbeddedSignUpFlowType = /* @__PURE__ */ function(EmbeddedSignUpFlowType$1) {
+	shouldLog(level) {
+		return LOG_LEVEL_ORDER[level] >= LOG_LEVEL_ORDER[this.config.level];
+	}
 	/**
-	* Response requires external redirection.
-	*
-	* Used for social registration providers, external identity providers,
-	* or other flows that require navigating to an external URL during
-	* the registration process. The response will contain redirection information.
+	* Get timestamp string
 	*/
-	EmbeddedSignUpFlowType$1["Redirection"] = "REDIRECTION";
+	static getTimestamp() {
+		return (/* @__PURE__ */ new Date()).toISOString();
+	}
 	/**
-	* Response contains view components for rendering.
-	*
-	* Standard embedded registration flow response containing UI components
-	* that should be rendered within the current application context.
-	* Most common type for embedded user registration.
+	* Get log level string
 	*/
-	EmbeddedSignUpFlowType$1["View"] = "VIEW";
-	return EmbeddedSignUpFlowType$1;
-}({});
-
-//#endregion
-//#region src/api/executeEmbeddedSignUpFlow.ts
-const executeEmbeddedSignUpFlow = async ({ url, baseUrl, payload, authId,...requestConfig }) => {
-	if (!payload) throw new ThunderIDAPIError("Registration payload is required", "executeEmbeddedSignUpFlow-ValidationError-002", "javascript", 400, "If a registration payload is not provided, the request cannot be constructed correctly.");
-	const endpoint = url ?? `${baseUrl}/flow/execute`;
-	const cleanPayload = typeof payload === "object" && payload !== null ? Object.fromEntries(Object.entries(payload).filter(([key]) => key !== "verbose")) : payload;
-	const isNewFlowStart = typeof cleanPayload === "object" && cleanPayload !== null && "applicationId" in cleanPayload && "flowType" in cleanPayload;
-	const hasOnlyFlowId = typeof cleanPayload === "object" && cleanPayload !== null && "executionId" in cleanPayload && Object.keys(cleanPayload).length === 1;
-	const basePayload = isNewFlowStart ? injectRequestedPermissions_default(cleanPayload) : cleanPayload;
-	const requestPayload = isNewFlowStart || hasOnlyFlowId ? {
-		...basePayload,
-		verbose: true
-	} : basePayload;
-	const response = await fetch(endpoint, {
-		...requestConfig,
-		body: JSON.stringify(requestPayload),
-		headers: {
-			Accept: "application/json",
-			"Content-Type": "application/json",
-			...requestConfig.headers
-		},
-		method: requestConfig.method || "POST"
-	});
-	if (!response.ok) throw new ThunderIDAPIError(await response.text(), "executeEmbeddedSignUpFlow-ResponseError-001", "javascript", response.status, response.statusText, "Registration request failed");
-	const flowResponse = await response.json();
-	if (flowResponse.flowStatus === EmbeddedSignUpFlowStatus.Complete && flowResponse.assertion && authId) try {
-		const oauth2Response = await fetch(`${baseUrl}/oauth2/auth/callback`, {
-			body: JSON.stringify({
-				assertion: flowResponse.assertion,
+	static getLevelString(level) {
+		switch (level) {
+			case "debug": return "DEBUG";
+			case "info": return "INFO";
+			case "warn": return "WARN";
+			case "error": return "ERROR";
+			default: return "UNKNOWN";
+		}
+	}
+	/**
+	* Format message for Node.js terminal
+	*/
+	formatForNode(level, message) {
+		const parts = [];
+		if (this.config.timestamps) parts.push(`${COLORS.gray}[${Logger.getTimestamp()}]${COLORS.reset}`);
+		if (this.config.prefix) parts.push(`${COLORS.magenta}${this.config.prefix}${COLORS.reset}`);
+		if (this.config.showLevel) {
+			const levelStr = Logger.getLevelString(level);
+			let coloredLevel;
+			switch (level) {
+				case "debug":
+					coloredLevel = `${COLORS.gray}[${levelStr}]${COLORS.reset}`;
+					break;
+				case "info":
+					coloredLevel = `${COLORS.blue}[${levelStr}]${COLORS.reset}`;
+					break;
+				case "warn":
+					coloredLevel = `${COLORS.yellow}[${levelStr}]${COLORS.reset}`;
+					break;
+				case "error":
+					coloredLevel = `${COLORS.red}[${levelStr}]${COLORS.reset}`;
+					break;
+				default: coloredLevel = `[${levelStr}]`;
+			}
+			parts.push(coloredLevel);
+		}
+		parts.push(message);
+		return parts.join(" ");
+	}
+	/**
+	* Log message using appropriate method
+	*/
+	logMessage(level, message, ...args) {
+		if (!this.shouldLog(level)) return;
+		if (this.config.formatter) {
+			this.config.formatter(level, message, ...args);
+			return;
+		}
+		if (isBrowser()) this.logToBrowser(level, message, ...args);
+		else if (isNode()) this.logToNode(level, message, ...args);
+		else console.log(message, ...args);
+	}
+	/**
+	* Log to browser console with styling
+	*/
+	logToBrowser(level, message, ...args) {
+		const parts = [];
+		const styles = [];
+		if (this.config.timestamps) {
+			parts.push(`%c[${Logger.getTimestamp()}]`);
+			styles.push(BROWSER_STYLES.timestamp);
+		}
+		if (this.config.prefix) {
+			parts.push(`%c${this.config.prefix}`);
+			styles.push(BROWSER_STYLES.prefix);
+		}
+		if (this.config.showLevel) {
+			const levelStr = Logger.getLevelString(level);
+			parts.push(`%c[${levelStr}]`);
+			switch (level) {
+				case "debug":
+					styles.push(BROWSER_STYLES.debug);
+					break;
+				case "info":
+					styles.push(BROWSER_STYLES.info);
+					break;
+				case "warn":
+					styles.push(BROWSER_STYLES.warn);
+					break;
+				case "error":
+					styles.push(BROWSER_STYLES.error);
+					break;
+				default: styles.push("");
+			}
+		}
+		parts.push(`%c${message}`);
+		styles.push("color: inherit; font-weight: normal;");
+		const formattedMessage = parts.join(" ");
+		switch (level) {
+			case "debug":
+				console.debug(formattedMessage, ...styles, ...args);
+				break;
+			case "info":
+				console.info(formattedMessage, ...styles, ...args);
+				break;
+			case "warn":
+				console.warn(formattedMessage, ...styles, ...args);
+				break;
+			case "error":
+				console.error(formattedMessage, ...styles, ...args);
+				break;
+			default: console.log(formattedMessage, ...styles, ...args);
+		}
+	}
+	/**
+	* Log to Node.js console
+	*/
+	logToNode(level, message, ...args) {
+		const formattedMessage = this.formatForNode(level, message);
+		switch (level) {
+			case "debug":
+				console.debug(formattedMessage, ...args);
+				break;
+			case "info":
+				console.info(formattedMessage, ...args);
+				break;
+			case "warn":
+				console.warn(formattedMessage, ...args);
+				break;
+			case "error":
+				console.error(formattedMessage, ...args);
+				break;
+			default: console.log(formattedMessage, ...args);
+		}
+	}
+	/**
+	* Log debug message
+	*/
+	debug(message, ...args) {
+		this.logMessage("debug", message, ...args);
+	}
+	/**
+	* Log info message
+	*/
+	info(message, ...args) {
+		this.logMessage("info", message, ...args);
+	}
+	/**
+	* Log warning message
+	*/
+	warn(message, ...args) {
+		this.logMessage("warn", message, ...args);
+	}
+	/**
+	* Log error message
+	*/
+	error(message, ...args) {
+		this.logMessage("error", message, ...args);
+	}
+	/**
+	* Create a child logger with additional prefix
+	*/
+	child(prefix) {
+		const childPrefix = this.config.prefix ? `${this.config.prefix} - ${prefix}` : prefix;
+		return new Logger({
+			...this.config,
+			prefix: childPrefix
+		});
+	}
+	/**
+	* Set log level
+	*/
+	setLevel(level) {
+		this.config.level = level;
+	}
+	/**
+	* Get current log level
+	*/
+	getLevel() {
+		return this.config.level;
+	}
+};
+/**
+* Default logger instance
+*/
+const logger = new Logger();
+/**
+* Create a new logger instance with custom configuration
+*/
+const createLogger = (config) => new Logger(config);
+/**
+* Default export - global logger instance
+*/
+var logger_default = logger;
+/**
+* Named exports for convenience
+*/
+const debug = (message, ...args) => logger.debug(message, ...args);
+const info = (message, ...args) => logger.info(message, ...args);
+const warn = (message, ...args) => logger.warn(message, ...args);
+const error = (message, ...args) => logger.error(message, ...args);
+/**
+* Configure the default logger
+*/
+const configure = (config) => logger.configure(config);
+/**
+* Create component-specific loggers
+*/
+const createComponentLogger = (component) => logger.child(component);
+/**
+* Create package-specific logger
+*/
+const createPackageLogger = (packageName) => createLogger({
+	level: "info",
+	prefix: `${PREFIX} - ${packageName}`,
+	showLevel: true,
+	timestamps: true
+});
+/**
+* Create package component logger (package + component)
+*/
+const createPackageComponentLogger = (packageName, component) => {
+	return createPackageLogger(packageName).child(component);
+};
+
+//#endregion
+//#region src/api/executeEmbeddedSignInFlow.ts
+const readErrorAssertion = (body) => {
+	try {
+		return JSON.parse(body).errorAssertion;
+	} catch {
+		return;
+	}
+};
+const postAuthCallback = async (baseUrl, body, headers) => {
+	const oauth2Response = await fetch(`${baseUrl}/oauth2/auth/callback`, {
+		body: JSON.stringify(body),
+		credentials: "include",
+		headers: {
+			Accept: "application/json",
+			"Content-Type": "application/json",
+			...headers
+		},
+		method: "POST"
+	});
+	if (!oauth2Response.ok) {
+		const oauth2ErrorText = await oauth2Response.text();
+		logger_default.error(`OAuth2 authorization failed. The callback responded ${oauth2Response.status} ${oauth2Response.statusText}:`, oauth2ErrorText);
+		throw new ThunderIDAPIError("OAuth2 authorization failed", "executeEmbeddedSignInFlow-OAuth2Error-002", "javascript", oauth2Response.status, oauth2Response.statusText);
+	}
+	return oauth2Response.json();
+};
+const relayFailure = async (baseUrl, authId, errorAssertion, headers, flowResponse) => {
+	const oauth2Result = await postAuthCallback(baseUrl, {
+		assertion: errorAssertion,
+		authId
+	}, headers);
+	return {
+		...flowResponse,
+		flowStatus: EmbeddedSignInFlowStatus.Error,
+		redirectUrl: oauth2Result["redirect_uri"]
+	};
+};
+const executeEmbeddedSignInFlow = async ({ url, baseUrl, payload, authId, flowSecret,...requestConfig }) => {
+	if (!payload) throw new ThunderIDAPIError("Authorization payload is required", "executeEmbeddedSignInFlow-ValidationError-002", "javascript", 400, "If an authorization payload is not provided, the request cannot be constructed correctly.");
+	const endpoint = url ?? `${baseUrl}/flow/execute`;
+	const cleanPayload = typeof payload === "object" && payload !== null ? Object.fromEntries(Object.entries(payload).filter(([key]) => key !== "verbose")) : payload;
+	const isNewFlowStart = typeof cleanPayload === "object" && cleanPayload !== null && "applicationId" in cleanPayload && "flowType" in cleanPayload;
+	const hasOnlyFlowId = typeof cleanPayload === "object" && cleanPayload !== null && "executionId" in cleanPayload && Object.keys(cleanPayload).length === 1;
+	const basePayload = isNewFlowStart ? injectRequestedPermissions_default(cleanPayload) : cleanPayload;
+	const requestPayload = isNewFlowStart || hasOnlyFlowId ? {
+		...basePayload,
+		verbose: true
+	} : basePayload;
+	const response = await fetch(endpoint, {
+		...requestConfig,
+		body: JSON.stringify(requestPayload),
+		headers: {
+			Accept: "application/json",
+			"Content-Type": "application/json",
+			...isNewFlowStart && flowSecret ? { "Flow-Secret": flowSecret } : {},
+			...requestConfig.headers
+		},
+		method: requestConfig.method || "POST"
+	});
+	if (!response.ok) {
+		const errorText = await response.text();
+		const errorAssertion = readErrorAssertion(errorText);
+		if (authId && errorAssertion) return await relayFailure(baseUrl, authId, errorAssertion, requestConfig.headers);
+		throw new ThunderIDAPIError(errorText, "executeEmbeddedSignInFlow-ResponseError-001", "javascript", response.status, response.statusText, "Authorization request failed");
+	}
+	const flowResponse = await response.json();
+	if (flowResponse.flowStatus === EmbeddedSignInFlowStatus.Complete && flowResponse.assertion && authId) try {
+		const oauth2Result = await postAuthCallback(baseUrl, {
+			assertion: flowResponse.assertion,
+			authId
+		}, requestConfig.headers);
+		return {
+			flowStatus: flowResponse.flowStatus,
+			redirectUrl: oauth2Result["redirect_uri"]
+		};
+	} catch (authError) {
+		if (authError instanceof ThunderIDAPIError) throw authError;
+		throw new ThunderIDAPIError(authError instanceof Error ? authError.message : "Unknown error", "executeEmbeddedSignInFlow-OAuth2Error-001", "javascript", 500, "Failed to complete OAuth2 authorization after successful embedded sign-in flow.", "OAuth2 authorization failed");
+	}
+	if (flowResponse.flowStatus === EmbeddedSignInFlowStatus.Error && flowResponse.errorAssertion && authId) return relayFailure(baseUrl, authId, flowResponse.errorAssertion, requestConfig.headers, flowResponse);
+	return flowResponse;
+};
+var executeEmbeddedSignInFlow_default = executeEmbeddedSignInFlow;
+
+//#endregion
+//#region src/models/embedded-signup-flow.ts
+/**
+* Status enumeration for ThunderID embedded sign-up flow operations.
+*
+* These statuses indicate the current state of the registration flow and determine
+* the next action required by the client application. Each status provides specific
+* guidance on how to proceed with the user registration process.
+*
+* @example
+* ```typescript
+* switch (response.flowStatus) {
+*   case EmbeddedSignUpFlowStatus.Incomplete:
+*     // More user input needed - render registration form components
+*     break;
+*   case EmbeddedSignUpFlowStatus.Complete:
+*     // Registration successful - handle completion
+*     break;
+*   case EmbeddedSignUpFlowStatus.Error:
+*     // Registration failed - show error details
+*     const errorResponse = response as EmbeddedSignUpFlowErrorResponse;
+*     showError(errorResponse.error.description.defaultValue);
+*     break;
+* }
+* ```
+*
+* @experimental Part of the new ThunderID API
+*/
+let EmbeddedSignUpFlowStatus = /* @__PURE__ */ function(EmbeddedSignUpFlowStatus$1) {
+	/**
+	* Sign-up flow completed successfully.
+	*
+	* The user has successfully registered and the flow can proceed to
+	* OAuth2 completion or redirection. Check for redirectUrl or assertion
+	* data in the response for next steps.
+	*/
+	EmbeddedSignUpFlowStatus$1["Complete"] = "COMPLETE";
+	/**
+	* Sign-up flow encountered an error and cannot proceed.
+	*
+	* Registration failed due to validation errors, duplicate user,
+	* system errors, or other issues. The response will be of type
+	* `EmbeddedSignUpFlowErrorResponse` containing detailed failure
+	* information that can be displayed to the user.
+	*
+	* @see {@link EmbeddedSignUpFlowErrorResponse} for error response structure
+	*/
+	EmbeddedSignUpFlowStatus$1["Error"] = "ERROR";
+	/**
+	* Sign-up flow requires additional user input.
+	*
+	* More registration steps are needed. The response will contain
+	* components in data.meta.components that should be rendered to
+	* collect additional user information (e.g., profile data, verification).
+	*/
+	EmbeddedSignUpFlowStatus$1["Incomplete"] = "INCOMPLETE";
+	return EmbeddedSignUpFlowStatus$1;
+}({});
+/**
+* Type enumeration for ThunderID embedded sign-up flow responses.
+*
+* Determines the nature of the registration flow response and how the client
+* should handle the returned data. This affects both UI rendering and flow
+* continuation logic during the user registration process.
+*
+* @experimental Part of the new ThunderID API
+*/
+let EmbeddedSignUpFlowType = /* @__PURE__ */ function(EmbeddedSignUpFlowType$1) {
+	/**
+	* Response requires external redirection.
+	*
+	* Used for social registration providers, external identity providers,
+	* or other flows that require navigating to an external URL during
+	* the registration process. The response will contain redirection information.
+	*/
+	EmbeddedSignUpFlowType$1["Redirection"] = "REDIRECTION";
+	/**
+	* Response contains view components for rendering.
+	*
+	* Standard embedded registration flow response containing UI components
+	* that should be rendered within the current application context.
+	* Most common type for embedded user registration.
+	*/
+	EmbeddedSignUpFlowType$1["View"] = "VIEW";
+	return EmbeddedSignUpFlowType$1;
+}({});
+
+//#endregion
+//#region src/api/executeEmbeddedSignUpFlow.ts
+const executeEmbeddedSignUpFlow = async ({ url, baseUrl, payload, authId,...requestConfig }) => {
+	if (!payload) throw new ThunderIDAPIError("Registration payload is required", "executeEmbeddedSignUpFlow-ValidationError-002", "javascript", 400, "If a registration payload is not provided, the request cannot be constructed correctly.");
+	const endpoint = url ?? `${baseUrl}/flow/execute`;
+	const cleanPayload = typeof payload === "object" && payload !== null ? Object.fromEntries(Object.entries(payload).filter(([key]) => key !== "verbose")) : payload;
+	const isNewFlowStart = typeof cleanPayload === "object" && cleanPayload !== null && "applicationId" in cleanPayload && "flowType" in cleanPayload;
+	const hasOnlyFlowId = typeof cleanPayload === "object" && cleanPayload !== null && "executionId" in cleanPayload && Object.keys(cleanPayload).length === 1;
+	const basePayload = isNewFlowStart ? injectRequestedPermissions_default(cleanPayload) : cleanPayload;
+	const requestPayload = isNewFlowStart || hasOnlyFlowId ? {
+		...basePayload,
+		verbose: true
+	} : basePayload;
+	const response = await fetch(endpoint, {
+		...requestConfig,
+		body: JSON.stringify(requestPayload),
+		headers: {
+			Accept: "application/json",
+			"Content-Type": "application/json",
+			...requestConfig.headers
+		},
+		method: requestConfig.method || "POST"
+	});
+	if (!response.ok) throw new ThunderIDAPIError(await response.text(), "executeEmbeddedSignUpFlow-ResponseError-001", "javascript", response.status, response.statusText, "Registration request failed");
+	const flowResponse = await response.json();
+	if (flowResponse.flowStatus === EmbeddedSignUpFlowStatus.Complete && flowResponse.assertion && authId) try {
+		const oauth2Response = await fetch(`${baseUrl}/oauth2/auth/callback`, {
+			body: JSON.stringify({
+				assertion: flowResponse.assertion,
 				authId
 			}),
 			credentials: "include",
@@ -730,23 +982,6 @@ var executeEmbeddedRecoveryFlow_default = executeEmbeddedRecoveryFlow;
 
 //#endregion
 //#region src/models/embedded-flow.ts
-/**
-* Copyright (c) 2025-2026, WSO2 LLC. (https://www.wso2.com).
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
-*/
 let EmbeddedFlowType = /* @__PURE__ */ function(EmbeddedFlowType$1) {
 	EmbeddedFlowType$1["Authentication"] = "AUTHENTICATION";
 	EmbeddedFlowType$1["Recovery"] = "RECOVERY";
@@ -1111,23 +1346,6 @@ var getUserInfo_default = getUserInfo;
 //#endregion
 //#region src/utils/processUsername.ts
 /**
-* Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
-*/
-/**
 * Regular expression to match userstore prefixes in usernames.
 * Matches patterns like "DEFAULT/", "ASGARDEO_USER/", "PRIMARY/", etc.
 * The pattern matches any uppercase letters, numbers, and underscores followed by a forward slash.
@@ -1362,23 +1580,6 @@ var updateMeProfile_default = updateMeProfile;
 //#endregion
 //#region src/constants/ApplicationNativeAuthenticationConstants.ts
 /**
-* Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
-*/
-/**
 * Constants representing Application Native Authentication related configurations and constants.
 */
 const ApplicationNativeAuthenticationConstants = { SupportedAuthenticators: {
@@ -1402,23 +1603,6 @@ var ApplicationNativeAuthenticationConstants_default = ApplicationNativeAuthenti
 //#endregion
 //#region src/constants/ScopeConstants.ts
 /**
-* Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
-*/
-/**
 * Constants for OAuth 2.0 and OpenID Connect scopes.
 * These scopes define the level of access that the client application
 * is requesting from the authorization server.
@@ -1453,778 +1637,376 @@ const OIDCRequestConstants = {
 	Params: {
 		AUTHORIZATION_CODE: "code",
 		SESSION_STATE: "session_state",
-		SIGN_OUT_SUCCESS: "sign_out_success",
-		STATE: "state"
-	},
-	SignIn: { Payload: { DEFAULT_SCOPES: [ScopeConstants_default.OPENID, ScopeConstants_default.PROFILE] } },
-	SignOut: { Storage: { StorageKeys: { SIGN_OUT_URL: "sign_out_url" } } }
-};
-var OIDCRequestConstants_default = OIDCRequestConstants;
-
-//#endregion
-//#region src/constants/VendorConstants.ts
-/**
-* Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
-*/
-/**
-* Constants for vendor-specific configurations.
-* By default, the vendor is inferred as ThunderID.
-*
-* @example
-* ```typescript
-*  // Using the vendor prefix in a URL
-* const apiUrl = `${VendorConstants.VENDOR_PREFIX}/api/v1/resource`;
-* ```
-*/
-const VendorConstants = { VENDOR_PREFIX: "thunderid" };
-var VendorConstants_default = VendorConstants;
-
-//#endregion
-//#region src/errors/ThunderIDRuntimeError.ts
-/**
-* Base class for all runtime errors in ThunderID. This class extends ThunderIDError
-* and adds support for additional error details. Use this class for errors that occur
-* during runtime execution that are not related to API calls.
-*
-* @example
-* ```typescript
-* throw new ThunderIDRuntimeError(
-*   "Failed to parse configuration",
-*   "CONFIG_PARSE_ERROR",
-*   { invalidField: "redirectUri" }
-* );
-* ```
-*/
-var ThunderIDRuntimeError = class extends ThunderIDError {
-	/**
-	* Creates an instance of ThunderIDRuntimeError.
-	*
-	* @param message - Human-readable description of the error
-	* @param code - A unique error code that identifies the error type
-	* @param details - Additional details about the error that might be helpful for debugging
-	* @param origin - Optional. The SDK origin (e.g. 'react', 'vue'). Defaults to generic 'ThunderID'
-	* @constructor
-	*/
-	constructor(message, code, origin, details) {
-		super(message, code, origin);
-		this.details = details;
-		Object.defineProperty(this, "name", {
-			configurable: true,
-			value: "ThunderIDRuntimeError",
-			writable: true
-		});
-	}
-	/**
-	* Returns a string representation of the runtime error
-	* @returns Formatted error string with name, code, details, and message
-	*/
-	toString() {
-		const details = this.details ? `\nDetails: ${JSON.stringify(this.details, null, 2)}` : "";
-		return `[${this.name}] (code="${this.code}")${details}\nMessage: ${this.message}`;
-	}
-};
-
-//#endregion
-//#region src/models/embedded-recovery-flow.ts
-/**
-* Status enumeration for the embedded recovery flow operations.
-*
-* @experimental Part of the new ThunderID API
-*/
-let EmbeddedRecoveryFlowStatus = /* @__PURE__ */ function(EmbeddedRecoveryFlowStatus$1) {
-	/**
-	* Recovery flow completed successfully.
-	*/
-	EmbeddedRecoveryFlowStatus$1["Complete"] = "COMPLETE";
-	/**
-	* Recovery flow encountered an error and cannot proceed.
-	*
-	* @see {@link EmbeddedRecoveryFlowErrorResponse} for error response structure
-	*/
-	EmbeddedRecoveryFlowStatus$1["Error"] = "ERROR";
-	/**
-	* Recovery flow requires additional user input.
-	*/
-	EmbeddedRecoveryFlowStatus$1["Incomplete"] = "INCOMPLETE";
-	return EmbeddedRecoveryFlowStatus$1;
-}({});
-/**
-* Type enumeration for embedded recovery flow responses.
-*
-* @experimental Part of the new ThunderID API
-*/
-let EmbeddedRecoveryFlowType = /* @__PURE__ */ function(EmbeddedRecoveryFlowType$1) {
-	/**
-	* Response requires external redirection.
-	*/
-	EmbeddedRecoveryFlowType$1["Redirection"] = "REDIRECTION";
-	/**
-	* Response contains view components for rendering.
-	*/
-	EmbeddedRecoveryFlowType$1["View"] = "VIEW";
-	return EmbeddedRecoveryFlowType$1;
-}({});
-
-//#endregion
-//#region src/models/flow-meta.ts
-/**
-* Copyright (c) 2026, WSO2 LLC. (https://www.wso2.com).
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
-*/
-/**
-* The type of entity to retrieve flow metadata for.
-*
-* @example
-* ```typescript
-* const config: GetFlowMetaRequestConfig = {
-*   baseUrl: 'https://localhost:8090',
-*   type: FlowMetaType.App,
-*   id: '60a9b38b-6eba-9f9e-55f9-267067de4680',
-* };
-* ```
-*
-* @experimental This API may change in future versions
-*/
-let FlowMetaType = /* @__PURE__ */ function(FlowMetaType$1) {
-	/** Retrieve metadata scoped to a specific application */
-	FlowMetaType$1["App"] = "APP";
-	/** Retrieve metadata scoped to a specific organization unit */
-	FlowMetaType$1["Ou"] = "OU";
-	return FlowMetaType$1;
-}({});
-
-//#endregion
-//#region src/models/flow.ts
-/**
-* Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
-*/
-let FlowMode = /* @__PURE__ */ function(FlowMode$1) {
-	/**
-	* This mode is suitable for embedded sign-in, sign-up, etc. flows where the authentication
-	* UIs are rendered within the application.
-	* @see {@link https://is.docs.wso2.com/en/7.1.0/references/app-native-authentication/}
-	*/
-	FlowMode$1["Embedded"] = "DIRECT";
-	/**
-	* Traditional redirect based sign-in, sign-up, etc. flows where the authentication
-	* UIs are from a external Identity Provider (ex: WSO2 Identity Server or ThunderID).
-	*/
-	FlowMode$1["Redirect"] = "REDIRECTION";
-	return FlowMode$1;
-}({});
-
-//#endregion
-//#region src/models/field.ts
-/**
-* Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
-*/
-let FieldType = /* @__PURE__ */ function(FieldType$1) {
-	FieldType$1["Checkbox"] = "CHECKBOX";
-	FieldType$1["Date"] = "DATE";
-	FieldType$1["Email"] = "EMAIL";
-	FieldType$1["Number"] = "NUMBER";
-	FieldType$1["Otp"] = "OTP";
-	FieldType$1["Password"] = "PASSWORD";
-	FieldType$1["Radio"] = "RADIO";
-	FieldType$1["Select"] = "SELECT";
-	FieldType$1["Tel"] = "TEL";
-	FieldType$1["Text"] = "TEXT";
-	FieldType$1["Textarea"] = "TEXTAREA";
-	FieldType$1["Time"] = "TIME";
-	return FieldType$1;
-}({});
-
-//#endregion
-//#region src/constants/OIDCDiscoveryConstants.ts
-/**
-* Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
-*/
-/**
-* Constants related to OpenID Connect (OIDC) metadata and endpoints.
-* This object contains all the standard OIDC endpoints and storage keys
-* used throughout the application for authentication and authorization.
-*
-* @remarks
-* The constants are organized into two main sections:
-* 1. Endpoints - Contains all OIDC standard endpoint paths
-* 2. Storage - Contains keys used for storing OIDC-related data
-*
-* @example
-* ```typescript
-* // Using an endpoint
-* const authEndpoint = OIDCDiscoveryConstants.Endpoints.AUTHORIZATION;
-*
-* // Using a storage key
-* const tokenKey = OIDCDiscoveryConstants.Storage.StorageKeys.Endpoints.TOKEN;
-* ```
-*/
-const OIDCDiscoveryConstants = {
-	Endpoints: {
-		AUTHORIZATION: "/oauth2/authorize",
-		END_SESSION: "/oauth2/logout",
-		ISSUER: "/oauth2/token",
-		JWKS: "/oauth2/jwks",
-		REVOCATION: "/oauth2/revoke",
-		SESSION_IFRAME: "/oidc/checksession",
-		TOKEN: "/oauth2/token",
-		USERINFO: "/oauth2/userinfo"
-	},
-	Storage: { StorageKeys: {
-		Endpoints: {
-			AUTHORIZATION: "authorization_endpoint",
-			END_SESSION: "end_session_endpoint",
-			ISSUER: "issuer",
-			JWKS: "jwks_uri",
-			REVOCATION: "revocation_endpoint",
-			SESSION_IFRAME: "check_session_iframe",
-			TOKEN: "token_endpoint",
-			USERINFO: "userinfo_endpoint"
-		},
-		OPENID_PROVIDER_CONFIG_INITIATED: "op_config_initiated"
-	} }
+		SIGN_OUT_SUCCESS: "sign_out_success",
+		STATE: "state"
+	},
+	SignIn: { Payload: { DEFAULT_SCOPES: [ScopeConstants_default.OPENID, ScopeConstants_default.PROFILE] } },
+	SignOut: { Storage: { StorageKeys: { SIGN_OUT_URL: "sign_out_url" } } }
 };
-var OIDCDiscoveryConstants_default = OIDCDiscoveryConstants;
+var OIDCRequestConstants_default = OIDCRequestConstants;
 
 //#endregion
-//#region src/constants/PKCEConstants.ts
-/**
-* Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
-*/
+//#region src/constants/VendorConstants.ts
 /**
-* Constants related to Proof Key for Code Exchange (PKCE) implementation.
-* This object contains all the necessary constants for implementing PKCE
-* flow in the OAuth 2.0 authorization code grant.
-*
-* @remarks
-* PKCE is an extension to the authorization code flow to prevent CSRF and
-* authorization code injection attacks. The constants are organized into
-* storage-related sections for managing PKCE state.
+* Constants for vendor-specific configurations.
+* By default, the vendor is inferred as ThunderID.
 *
 * @example
 * ```typescript
-* // Using storage keys
-* const codeVerifierKey = PKCEConstants.Storage.StorageKeys.CODE_VERIFIER;
-* const separator = PKCEConstants.Storage.StorageKeys.SEPARATOR;
+*  // Using the vendor prefix in a URL
+* const apiUrl = `${VendorConstants.VENDOR_PREFIX}/api/v1/resource`;
 * ```
 */
-const PKCEConstants = {
-	DEFAULT_CODE_CHALLENGE_METHOD: "S256",
-	Storage: { StorageKeys: {
-		CODE_VERIFIER: "pkce_code_verifier",
-		SEPARATOR: "#"
-	} }
-};
-var PKCEConstants_default = PKCEConstants;
+const VendorConstants = { VENDOR_PREFIX: "thunderid" };
+var VendorConstants_default = VendorConstants;
 
 //#endregion
-//#region src/DefaultCacheStore.ts
+//#region src/constants/ConsentConstants.ts
 /**
-* Copyright (c) 2026, WSO2 LLC. (https://www.wso2.com).
+* Constants describing why a set of consent decisions was submitted.
 *
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
+* @remarks
+* The reason travels on `ConsentDecisions.reason` and explains a submission the server cannot infer
+* from the decisions alone. It is omitted when the user approves.
 *
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
-*/
-var DefaultCacheStore = class {
-	cache;
-	constructor() {
-		this.cache = /* @__PURE__ */ new Map();
-	}
-	get length() {
-		return this.cache.size;
-	}
-	getItem(key) {
-		return this.cache.get(key) ?? null;
-	}
-	setItem(key, value) {
-		this.cache.set(key, value);
-	}
-	removeItem(key) {
-		this.cache.delete(key);
-	}
-	clear() {
-		this.cache.clear();
-	}
-	key(index) {
-		return Array.from(this.cache.keys())[index] ?? null;
-	}
-	async setData(key, value) {
-		this.cache.set(key, value);
-	}
-	async getData(key) {
-		return this.cache.get(key) ?? "{}";
-	}
-	async removeData(key) {
-		this.cache.delete(key);
-	}
-};
-
-//#endregion
-//#region src/DefaultCrypto.ts
-/**
-* Default implementation of the Crypto interface using the 'jose' library
-* and the native Web Crypto API.
+* @example
+* ```typescript
+* const decisions: ConsentDecisions = {
+*   approved: false,
+*   reason: ConsentConstants.REASON_TIMEOUT,
+*   purposes: [],
+* };
+* ```
 */
-var DefaultCrypto = class {
-	base64URLDecode(value) {
-		const decodedArray = jose.base64url.decode(value);
-		return new TextDecoder().decode(decodedArray);
-	}
-	base64URLEncode(value) {
-		return jose.base64url.encode(value);
-	}
-	generateRandomBytes(length) {
-		return crypto.getRandomValues(new Uint8Array(length));
-	}
-	async hashSha256(data) {
-		const dataBuffer = new TextEncoder().encode(data);
-		const hashBuffer = await crypto.subtle.digest("SHA-256", dataBuffer);
-		return new Uint8Array(hashBuffer);
-	}
-	async verifyJwt(idToken, jwk, algorithms, clientId, issuer, subject, clockTolerance, validateJwtIssuer = true) {
-		const key = await jose.importJWK(jwk);
-		await jose.jwtVerify(idToken, key, {
-			algorithms,
-			audience: [clientId],
-			clockTolerance,
-			issuer: validateJwtIssuer ? issuer : void 0,
-			subject
-		});
-		return true;
-	}
+const ConsentConstants = {
+	REASON_TIMEOUT: "timeout",
+	REASON_USER_DENIED: "user_denied"
 };
+var ConsentConstants_default = ConsentConstants;
 
 //#endregion
-//#region src/models/store.ts
+//#region src/errors/ThunderIDRuntimeError.ts
 /**
-* Enum representing different types of data stores used in the application.
+* Base class for all runtime errors in ThunderID. This class extends ThunderIDError
+* and adds support for additional error details. Use this class for errors that occur
+* during runtime execution that are not related to API calls.
+*
+* @example
+* ```typescript
+* throw new ThunderIDRuntimeError(
+*   "Failed to parse configuration",
+*   "CONFIG_PARSE_ERROR",
+*   { invalidField: "redirectUri" }
+* );
+* ```
 */
-let Stores = /* @__PURE__ */ function(Stores$1) {
-	/**
-	* Store for configuration data that defines the application's behavior and settings.
-	*/
-	Stores$1["ConfigData"] = "config_data";
-	/**
-	* Store for OpenID Connect provider metadata, including endpoints and configuration.
-	*/
-	Stores$1["OIDCProviderMetaData"] = "oidc_provider_meta_data";
-	/**
-	* Store for persisted data that needs to be retained across sessions and application restarts.
-	*/
-	Stores$1["PersistedData"] = "persisted_data";
-	/**
-	* Store for user session-related data like tokens and authentication state.
-	*/
-	Stores$1["SessionData"] = "session_data";
+var ThunderIDRuntimeError = class extends ThunderIDError {
 	/**
-	* Store for temporary data that needs to persist only for a short duration.
+	* Creates an instance of ThunderIDRuntimeError.
+	*
+	* @param message - Human-readable description of the error
+	* @param code - A unique error code that identifies the error type
+	* @param details - Additional details about the error that might be helpful for debugging
+	* @param origin - Optional. The SDK origin (e.g. 'react', 'vue'). Defaults to generic 'ThunderID'
+	* @constructor
 	*/
-	Stores$1["TemporaryData"] = "temporary_data";
+	constructor(message, code, origin, details) {
+		super(message, code, origin);
+		this.details = details;
+		Object.defineProperty(this, "name", {
+			configurable: true,
+			value: "ThunderIDRuntimeError",
+			writable: true
+		});
+	}
 	/**
-	* Store for data that leverages local storage if available, falling back to the configured storage.
+	* Returns a string representation of the runtime error
+	* @returns Formatted error string with name, code, details, and message
 	*/
-	Stores$1["HybridData"] = "hybrid_data";
-	return Stores$1;
-}({});
+	toString() {
+		const details = this.details ? `\nDetails: ${JSON.stringify(this.details, null, 2)}` : "";
+		return `[${this.name}] (code="${this.code}")${details}\nMessage: ${this.message}`;
+	}
+};
 
 //#endregion
-//#region src/utils/logger.ts
-const PREFIX = "⚡ ThunderID";
-/**
-* Default logger configuration
-*/
-const DEFAULT_CONFIG$1 = {
-	level: "info",
-	prefix: `${PREFIX}`,
-	showLevel: true,
-	timestamps: true
-};
-/**
-* Environment detection utilities
-*/
-const isBrowser = () => typeof window !== "undefined" && typeof window.document !== "undefined";
-const isNode = () => typeof process !== "undefined" && process.versions && process.versions.node;
-/**
-* Color codes for terminal output (Node.js)
-*/
-const COLORS = {
-	blue: "\x1B[34m",
-	bright: "\x1B[1m",
-	cyan: "\x1B[36m",
-	dim: "\x1B[2m",
-	gray: "\x1B[90m",
-	green: "\x1B[32m",
-	magenta: "\x1B[35m",
-	red: "\x1B[31m",
-	reset: "\x1B[0m",
-	white: "\x1B[37m",
-	yellow: "\x1B[33m"
-};
-/**
-* Browser console styling
-*/
-const BROWSER_STYLES = {
-	debug: "color: #6b7280; font-weight: normal;",
-	error: "color: #dc2626; font-weight: bold;",
-	info: "color: #2563eb; font-weight: bold;",
-	prefix: "color: #7c3aed; font-weight: bold;",
-	timestamp: "color: #6b7280; font-size: 0.9em;",
-	warn: "color: #d97706; font-weight: bold;"
-};
-const LOG_LEVEL_ORDER = {
-	debug: 0,
-	error: 3,
-	info: 1,
-	warn: 2
-};
+//#region src/models/embedded-recovery-flow.ts
 /**
-* Universal logger class that works in both browser and Node.js environments
+* Status enumeration for the embedded recovery flow operations.
+*
+* @experimental Part of the new ThunderID API
 */
-var Logger = class Logger {
-	config;
-	constructor(config = {}) {
-		this.config = {
-			...DEFAULT_CONFIG$1,
-			...config
-		};
-	}
-	/**
-	* Update logger configuration
-	*/
-	configure(config) {
-		this.config = {
-			...this.config,
-			...config
-		};
-	}
+let EmbeddedRecoveryFlowStatus = /* @__PURE__ */ function(EmbeddedRecoveryFlowStatus$1) {
 	/**
-	* Get current configuration
+	* Recovery flow completed successfully.
 	*/
-	getConfig() {
-		return { ...this.config };
-	}
+	EmbeddedRecoveryFlowStatus$1["Complete"] = "COMPLETE";
 	/**
-	* Check if a log level should be output
+	* Recovery flow encountered an error and cannot proceed.
+	*
+	* @see {@link EmbeddedRecoveryFlowErrorResponse} for error response structure
 	*/
-	shouldLog(level) {
-		return LOG_LEVEL_ORDER[level] >= LOG_LEVEL_ORDER[this.config.level];
-	}
+	EmbeddedRecoveryFlowStatus$1["Error"] = "ERROR";
 	/**
-	* Get timestamp string
+	* Recovery flow requires additional user input.
 	*/
-	static getTimestamp() {
-		return (/* @__PURE__ */ new Date()).toISOString();
-	}
+	EmbeddedRecoveryFlowStatus$1["Incomplete"] = "INCOMPLETE";
+	return EmbeddedRecoveryFlowStatus$1;
+}({});
+/**
+* Type enumeration for embedded recovery flow responses.
+*
+* @experimental Part of the new ThunderID API
+*/
+let EmbeddedRecoveryFlowType = /* @__PURE__ */ function(EmbeddedRecoveryFlowType$1) {
 	/**
-	* Get log level string
+	* Response requires external redirection.
 	*/
-	static getLevelString(level) {
-		switch (level) {
-			case "debug": return "DEBUG";
-			case "info": return "INFO";
-			case "warn": return "WARN";
-			case "error": return "ERROR";
-			default: return "UNKNOWN";
-		}
-	}
+	EmbeddedRecoveryFlowType$1["Redirection"] = "REDIRECTION";
 	/**
-	* Format message for Node.js terminal
+	* Response contains view components for rendering.
 	*/
-	formatForNode(level, message) {
-		const parts = [];
-		if (this.config.timestamps) parts.push(`${COLORS.gray}[${Logger.getTimestamp()}]${COLORS.reset}`);
-		if (this.config.prefix) parts.push(`${COLORS.magenta}${this.config.prefix}${COLORS.reset}`);
-		if (this.config.showLevel) {
-			const levelStr = Logger.getLevelString(level);
-			let coloredLevel;
-			switch (level) {
-				case "debug":
-					coloredLevel = `${COLORS.gray}[${levelStr}]${COLORS.reset}`;
-					break;
-				case "info":
-					coloredLevel = `${COLORS.blue}[${levelStr}]${COLORS.reset}`;
-					break;
-				case "warn":
-					coloredLevel = `${COLORS.yellow}[${levelStr}]${COLORS.reset}`;
-					break;
-				case "error":
-					coloredLevel = `${COLORS.red}[${levelStr}]${COLORS.reset}`;
-					break;
-				default: coloredLevel = `[${levelStr}]`;
-			}
-			parts.push(coloredLevel);
-		}
-		parts.push(message);
-		return parts.join(" ");
-	}
+	EmbeddedRecoveryFlowType$1["View"] = "VIEW";
+	return EmbeddedRecoveryFlowType$1;
+}({});
+
+//#endregion
+//#region src/models/flow-meta.ts
+/**
+* The type of entity to retrieve flow metadata for.
+*
+* @example
+* ```typescript
+* const config: GetFlowMetaRequestConfig = {
+*   baseUrl: 'https://localhost:8090',
+*   type: FlowMetaType.App,
+*   id: '60a9b38b-6eba-9f9e-55f9-267067de4680',
+* };
+* ```
+*
+* @experimental This API may change in future versions
+*/
+let FlowMetaType = /* @__PURE__ */ function(FlowMetaType$1) {
+	/** Retrieve metadata scoped to a specific application */
+	FlowMetaType$1["App"] = "APP";
+	/** Retrieve metadata scoped to a specific organization unit */
+	FlowMetaType$1["Ou"] = "OU";
+	return FlowMetaType$1;
+}({});
+
+//#endregion
+//#region src/models/flow.ts
+let FlowMode = /* @__PURE__ */ function(FlowMode$1) {
 	/**
-	* Log message using appropriate method
+	* This mode is suitable for embedded sign-in, sign-up, etc. flows where the authentication
+	* UIs are rendered within the application.
 	*/
-	logMessage(level, message, ...args) {
-		if (!this.shouldLog(level)) return;
-		if (this.config.formatter) {
-			this.config.formatter(level, message, ...args);
-			return;
-		}
-		if (isBrowser()) this.logToBrowser(level, message, ...args);
-		else if (isNode()) this.logToNode(level, message, ...args);
-		else console.log(message, ...args);
-	}
+	FlowMode$1["Embedded"] = "DIRECT";
 	/**
-	* Log to browser console with styling
+	* Traditional redirect based sign-in, sign-up, etc. flows where the authentication
+	* UIs are from a external Identity Provider (ex: ThunderID).
 	*/
-	logToBrowser(level, message, ...args) {
-		const parts = [];
-		const styles = [];
-		if (this.config.timestamps) {
-			parts.push(`%c[${Logger.getTimestamp()}]`);
-			styles.push(BROWSER_STYLES.timestamp);
-		}
-		if (this.config.prefix) {
-			parts.push(`%c${this.config.prefix}`);
-			styles.push(BROWSER_STYLES.prefix);
-		}
-		if (this.config.showLevel) {
-			const levelStr = Logger.getLevelString(level);
-			parts.push(`%c[${levelStr}]`);
-			switch (level) {
-				case "debug":
-					styles.push(BROWSER_STYLES.debug);
-					break;
-				case "info":
-					styles.push(BROWSER_STYLES.info);
-					break;
-				case "warn":
-					styles.push(BROWSER_STYLES.warn);
-					break;
-				case "error":
-					styles.push(BROWSER_STYLES.error);
-					break;
-				default: styles.push("");
-			}
-		}
-		parts.push(`%c${message}`);
-		styles.push("color: inherit; font-weight: normal;");
-		const formattedMessage = parts.join(" ");
-		switch (level) {
-			case "debug":
-				console.debug(formattedMessage, ...styles, ...args);
-				break;
-			case "info":
-				console.info(formattedMessage, ...styles, ...args);
-				break;
-			case "warn":
-				console.warn(formattedMessage, ...styles, ...args);
-				break;
-			case "error":
-				console.error(formattedMessage, ...styles, ...args);
-				break;
-			default: console.log(formattedMessage, ...styles, ...args);
-		}
+	FlowMode$1["Redirect"] = "REDIRECTION";
+	return FlowMode$1;
+}({});
+
+//#endregion
+//#region src/models/field.ts
+let FieldType = /* @__PURE__ */ function(FieldType$1) {
+	FieldType$1["Checkbox"] = "CHECKBOX";
+	FieldType$1["Date"] = "DATE";
+	FieldType$1["Email"] = "EMAIL";
+	FieldType$1["Number"] = "NUMBER";
+	FieldType$1["Otp"] = "OTP";
+	FieldType$1["Password"] = "PASSWORD";
+	FieldType$1["Radio"] = "RADIO";
+	FieldType$1["Select"] = "SELECT";
+	FieldType$1["Tel"] = "TEL";
+	FieldType$1["Text"] = "TEXT";
+	FieldType$1["Textarea"] = "TEXTAREA";
+	FieldType$1["Time"] = "TIME";
+	return FieldType$1;
+}({});
+
+//#endregion
+//#region src/constants/OIDCDiscoveryConstants.ts
+/**
+* Constants related to OpenID Connect (OIDC) metadata and endpoints.
+* This object contains all the standard OIDC endpoints and storage keys
+* used throughout the application for authentication and authorization.
+*
+* @remarks
+* The constants are organized into two main sections:
+* 1. Endpoints - Contains all OIDC standard endpoint paths
+* 2. Storage - Contains keys used for storing OIDC-related data
+*
+* @example
+* ```typescript
+* // Using an endpoint
+* const authEndpoint = OIDCDiscoveryConstants.Endpoints.AUTHORIZATION;
+*
+* // Using a storage key
+* const tokenKey = OIDCDiscoveryConstants.Storage.StorageKeys.Endpoints.TOKEN;
+* ```
+*/
+const OIDCDiscoveryConstants = {
+	Endpoints: {
+		AUTHORIZATION: "/oauth2/authorize",
+		END_SESSION: "/oauth2/logout",
+		ISSUER: "/oauth2/token",
+		JWKS: "/oauth2/jwks",
+		REVOCATION: "/oauth2/revoke",
+		SESSION_IFRAME: "/oidc/checksession",
+		TOKEN: "/oauth2/token",
+		USERINFO: "/oauth2/userinfo"
+	},
+	Storage: { StorageKeys: {
+		Endpoints: {
+			AUTHORIZATION: "authorization_endpoint",
+			END_SESSION: "end_session_endpoint",
+			ISSUER: "issuer",
+			JWKS: "jwks_uri",
+			REVOCATION: "revocation_endpoint",
+			SESSION_IFRAME: "check_session_iframe",
+			TOKEN: "token_endpoint",
+			USERINFO: "userinfo_endpoint"
+		},
+		OPENID_PROVIDER_CONFIG_INITIATED: "op_config_initiated"
+	} }
+};
+var OIDCDiscoveryConstants_default = OIDCDiscoveryConstants;
+
+//#endregion
+//#region src/constants/PKCEConstants.ts
+/**
+* Constants related to Proof Key for Code Exchange (PKCE) implementation.
+* This object contains all the necessary constants for implementing PKCE
+* flow in the OAuth 2.0 authorization code grant.
+*
+* @remarks
+* PKCE is an extension to the authorization code flow to prevent CSRF and
+* authorization code injection attacks. The constants are organized into
+* storage-related sections for managing PKCE state.
+*
+* @example
+* ```typescript
+* // Using storage keys
+* const codeVerifierKey = PKCEConstants.Storage.StorageKeys.CODE_VERIFIER;
+* const separator = PKCEConstants.Storage.StorageKeys.SEPARATOR;
+* ```
+*/
+const PKCEConstants = {
+	DEFAULT_CODE_CHALLENGE_METHOD: "S256",
+	Storage: { StorageKeys: {
+		CODE_VERIFIER: "pkce_code_verifier",
+		SEPARATOR: "#"
+	} }
+};
+var PKCEConstants_default = PKCEConstants;
+
+//#endregion
+//#region src/DefaultCacheStore.ts
+var DefaultCacheStore = class {
+	cache;
+	constructor() {
+		this.cache = /* @__PURE__ */ new Map();
 	}
-	/**
-	* Log to Node.js console
-	*/
-	logToNode(level, message, ...args) {
-		const formattedMessage = this.formatForNode(level, message);
-		switch (level) {
-			case "debug":
-				console.debug(formattedMessage, ...args);
-				break;
-			case "info":
-				console.info(formattedMessage, ...args);
-				break;
-			case "warn":
-				console.warn(formattedMessage, ...args);
-				break;
-			case "error":
-				console.error(formattedMessage, ...args);
-				break;
-			default: console.log(formattedMessage, ...args);
-		}
+	get length() {
+		return this.cache.size;
 	}
-	/**
-	* Log debug message
-	*/
-	debug(message, ...args) {
-		this.logMessage("debug", message, ...args);
+	getItem(key) {
+		return this.cache.get(key) ?? null;
+	}
+	setItem(key, value) {
+		this.cache.set(key, value);
+	}
+	removeItem(key) {
+		this.cache.delete(key);
+	}
+	clear() {
+		this.cache.clear();
+	}
+	key(index) {
+		return Array.from(this.cache.keys())[index] ?? null;
+	}
+	async setData(key, value) {
+		this.cache.set(key, value);
+	}
+	async getData(key) {
+		return this.cache.get(key) ?? "{}";
+	}
+	async removeData(key) {
+		this.cache.delete(key);
+	}
+};
+
+//#endregion
+//#region src/DefaultCrypto.ts
+/**
+* Default implementation of the Crypto interface using the 'jose' library
+* and the native Web Crypto API.
+*/
+var DefaultCrypto = class {
+	base64URLDecode(value) {
+		const decodedArray = jose.base64url.decode(value);
+		return new TextDecoder().decode(decodedArray);
+	}
+	base64URLEncode(value) {
+		return jose.base64url.encode(value);
+	}
+	generateRandomBytes(length) {
+		return crypto.getRandomValues(new Uint8Array(length));
+	}
+	async hashSha256(data) {
+		const dataBuffer = new TextEncoder().encode(data);
+		const hashBuffer = await crypto.subtle.digest("SHA-256", dataBuffer);
+		return new Uint8Array(hashBuffer);
+	}
+	async verifyJwt(idToken, jwk, algorithms, clientId, issuer, subject, clockTolerance, validateJwtIssuer = true) {
+		const key = await jose.importJWK(jwk);
+		await jose.jwtVerify(idToken, key, {
+			algorithms,
+			audience: [clientId],
+			clockTolerance,
+			issuer: validateJwtIssuer ? issuer : void 0,
+			subject
+		});
+		return true;
 	}
+};
+
+//#endregion
+//#region src/models/store.ts
+/**
+* Enum representing different types of data stores used in the application.
+*/
+let Stores = /* @__PURE__ */ function(Stores$1) {
 	/**
-	* Log info message
+	* Store for configuration data that defines the application's behavior and settings.
 	*/
-	info(message, ...args) {
-		this.logMessage("info", message, ...args);
-	}
+	Stores$1["ConfigData"] = "config_data";
 	/**
-	* Log warning message
+	* Store for OpenID Connect provider metadata, including endpoints and configuration.
 	*/
-	warn(message, ...args) {
-		this.logMessage("warn", message, ...args);
-	}
+	Stores$1["OIDCProviderMetaData"] = "oidc_provider_meta_data";
 	/**
-	* Log error message
+	* Store for persisted data that needs to be retained across sessions and application restarts.
 	*/
-	error(message, ...args) {
-		this.logMessage("error", message, ...args);
-	}
+	Stores$1["PersistedData"] = "persisted_data";
 	/**
-	* Create a child logger with additional prefix
+	* Store for user session-related data like tokens and authentication state.
 	*/
-	child(prefix) {
-		const childPrefix = this.config.prefix ? `${this.config.prefix} - ${prefix}` : prefix;
-		return new Logger({
-			...this.config,
-			prefix: childPrefix
-		});
-	}
+	Stores$1["SessionData"] = "session_data";
 	/**
-	* Set log level
+	* Store for temporary data that needs to persist only for a short duration.
 	*/
-	setLevel(level) {
-		this.config.level = level;
-	}
+	Stores$1["TemporaryData"] = "temporary_data";
 	/**
-	* Get current log level
+	* Store for data that leverages local storage if available, falling back to the configured storage.
 	*/
-	getLevel() {
-		return this.config.level;
-	}
-};
-/**
-* Default logger instance
-*/
-const logger = new Logger();
-/**
-* Create a new logger instance with custom configuration
-*/
-const createLogger = (config) => new Logger(config);
-/**
-* Default export - global logger instance
-*/
-var logger_default = logger;
-/**
-* Named exports for convenience
-*/
-const debug = (message, ...args) => logger.debug(message, ...args);
-const info = (message, ...args) => logger.info(message, ...args);
-const warn = (message, ...args) => logger.warn(message, ...args);
-const error = (message, ...args) => logger.error(message, ...args);
-/**
-* Configure the default logger
-*/
-const configure = (config) => logger.configure(config);
-/**
-* Create component-specific loggers
-*/
-const createComponentLogger = (component) => logger.child(component);
-/**
-* Create package-specific logger
-*/
-const createPackageLogger = (packageName) => createLogger({
-	level: "info",
-	prefix: `${PREFIX} - ${packageName}`,
-	showLevel: true,
-	timestamps: true
-});
-/**
-* Create package component logger (package + component)
-*/
-const createPackageComponentLogger = (packageName, component) => {
-	return createPackageLogger(packageName).child(component);
-};
+	Stores$1["HybridData"] = "hybrid_data";
+	return Stores$1;
+}({});
 
 //#endregion
 //#region src/StorageManager.ts
@@ -2585,23 +2367,6 @@ var resolveResourceEndpoint_default = resolveResourceEndpoint;
 //#endregion
 //#region src/constants/TokenExchangeConstants.ts
 /**
-* Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
-*/
-/**
 * Constants for OAuth 2.0 Token Exchange operations.
 * This object contains placeholders used in token exchange requests
 * and responses for dynamic value substitution.
@@ -2876,23 +2641,6 @@ var base64Encode_default = base64Encode;
 //#endregion
 //#region src/utils/deepMerge.ts
 /**
-* Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
-*/
-/**
 * Checks if a value is a plain object (not an array, function, date, etc.)
 *
 * @param value - The value to check
@@ -4116,23 +3864,6 @@ var createTheme_default = createTheme;
 //#endregion
 //#region src/utils/arrayBufferToBase64url.ts
 /**
-* Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
-*/
-/**
 * Converts an ArrayBuffer to a base64url encoded string.
 *
 * Base64url encoding is a URL-safe variant of base64 encoding that:
@@ -4172,23 +3903,6 @@ var arrayBufferToBase64url_default = arrayBufferToBase64url;
 //#endregion
 //#region src/utils/base64urlToArrayBuffer.ts
 /**
-* Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
-*/
-/**
 * Converts a base64url encoded string back to an ArrayBuffer.
 *
 * This function performs the inverse operation of base64url encoding by:
@@ -4237,23 +3951,6 @@ var base64urlToArrayBuffer_default = base64urlToArrayBuffer;
 //#endregion
 //#region src/utils/bem.ts
 /**
-* Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
-*/
-/**
 * Creates a BEM-style class name by combining a base class with element and/or modifier
 *
 * @param baseClass - The base CSS class string (usually from emotion's css function)
@@ -4291,23 +3988,6 @@ var bem_default = bem;
 //#endregion
 //#region src/utils/formatDate.ts
 /**
-* Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
-*/
-/**
 * Formats a date string to a human-readable format.
 *
 * @param dateString - The date string to format (optional)
@@ -4458,23 +4138,6 @@ var getRedirectBasedSignUpUrl_default = getRedirectBasedSignUpUrl;
 //#endregion
 //#region src/utils/isEmpty.ts
 /**
-* Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
-*/
-/**
 * Checks if a value is considered empty.
 *
 * A value is considered empty if it is:
@@ -4514,23 +4177,6 @@ var isEmpty_default = isEmpty;
 
 //#endregion
 //#region src/utils/isEmojiUri.ts
-/**
-* Copyright (c) 2026, WSO2 LLC. (https://www.wso2.com).
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
-*/
 const EMOJI_URI_SCHEME = "emoji:";
 /**
 * Checks whether a given URI uses the `emoji:` scheme (e.g. `"emoji:🐯"`).
@@ -4571,23 +4217,6 @@ var extractEmojiFromUri_default = extractEmojiFromUri;
 //#endregion
 //#region src/utils/set.ts
 /**
-* Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
-*/
-/**
 * Sets the value at path of object. If a portion of path doesn't exist,
 * it's created. Arrays are created for missing index properties while
 * objects are created for all other missing properties.
@@ -4617,23 +4246,6 @@ var set_default = set;
 //#endregion
 //#region src/utils/get.ts
 /**
-* Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
-*/
-/**
 * Gets the value at path of object. If the resolved value is undefined,
 * the defaultValue is returned in its place.
 * Similar to Lodash's get() function
@@ -4653,23 +4265,6 @@ var get_default = get;
 //#endregion
 //#region src/utils/startCase.ts
 /**
-* Copyright (c) 2026, WSO2 LLC. (https://www.wso2.com). All Rights Reserved.
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
-*/
-/**
 * Converts the first character of `string` to upper case.
 *
 * @param string - The string to convert.
@@ -4694,23 +4289,6 @@ var startCase_default = startCase;
 //#endregion
 //#region src/utils/removeTrailingSlash.ts
 /**
-* Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
-*/
-/**
 * Removes a trailing slash from a path string if it exists.
 *
 * @param path - The string path to process
@@ -4763,23 +4341,6 @@ function resolveMeta(path, meta) {
 //#endregion
 //#region src/utils/parseFlowTemplateLiteral.ts
 /**
-* Copyright (c) 2026, WSO2 LLC. (https://www.wso2.com).
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
-*/
-/**
 * Regular expression to detect a flow template literal wrapped in double braces.
 * Matches patterns like `{{ t(key) }}`, `{{ meta(key) }}`, etc.
 *
@@ -4896,23 +4457,6 @@ function resolveFlowTemplateLiterals(text, { t, meta }) {
 //#endregion
 //#region src/utils/countryCodeToFlagEmoji.ts
 /**
-* Copyright (c) 2026, WSO2 LLC. (https://www.wso2.com).
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
-*/
-/**
 * Converts a two-letter ISO 3166-1 alpha-2 country code to a flag emoji using
 * Unicode Regional Indicator Symbols (U+1F1E6–U+1F1FF).
 *
@@ -4926,23 +4470,6 @@ function countryCodeToFlagEmoji(countryCode) {
 //#endregion
 //#region src/utils/resolveLocaleDisplayName.ts
 /**
-* Copyright (c) 2026, WSO2 LLC. (https://www.wso2.com).
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
-*/
-/**
 * Resolves a BCP 47 locale tag to a human-readable display name using the
 * `Intl.DisplayNames` API.
 *
@@ -5114,7 +4641,7 @@ var buildValidatorFromRules_default = buildValidatorFromRules;
 * ```typescript
 * // Usage with clsx
 * clsx(withVendorCSSClassPrefix('sign-in-button'), className)
-* // Result: "wso2-sign-in-button"
+* // Result: "thunderid-sign-in-button"
 * ```
 */
 const withVendorCSSClassPrefix = (className) => `${VendorConstants_default.VENDOR_PREFIX}-${className}`;
@@ -6224,6 +5751,7 @@ var normalizeTranslations_default = normalizeTranslations;
 //#endregion
 exports.ApplicationNativeAuthenticationConstants = ApplicationNativeAuthenticationConstants_default;
 exports.AuthenticationHelper = AuthenticationHelper_default;
+exports.ConsentConstants = ConsentConstants_default;
 exports.DEFAULT_THEME = DEFAULT_THEME;
 exports.DEFAULT_VALIDATION_MESSAGE_KEYS = DEFAULT_VALIDATION_MESSAGE_KEYS;
 exports.EMOJI_URI_SCHEME = EMOJI_URI_SCHEME;