@thunderid/javascript 0.3.0 → 0.3.7

package/dist/edge/index.js

@@ -82,12 +82,10 @@ var TokenConstants_default = TokenConstants;
 /**
 * @deprecated Use `ThunderIDRuntimeError` for runtime errors and `ThunderIDAPIError` for API errors.
 */
-var ThunderIDAuthException = class {
-	name;
+var ThunderIDAuthException = class extends Error {
 	code;
-	message;
 	constructor(code, name, message) {
-		this.message = message;
+		super(message);
 		this.name = name;
 		this.code = code;
 		Object.setPrototypeOf(this, new.target.prototype);
@@ -329,101 +327,91 @@ var ThunderIDAPIError = class extends ThunderIDError {
 };
 
 //#endregion
-//#region src/api/initializeEmbeddedSignInFlow.ts
+//#region src/models/embedded-signin-flow.ts
 /**
-* Sends an authorization request to the specified OAuth2/OIDC authorization endpoint.
+* Status enumeration for ThunderID embedded sign-in flow operations.
 *
-* @param requestConfig - Request configuration object containing URL and payload.
-* @returns A promise that resolves with the authorization response.
-* @throws ThunderIDAPIError when the request fails or URL is invalid.
+* These statuses indicate the current state of the sign-in flow and determine
+* the next action required by the client application. Each status provides
+* specific guidance on how to proceed with the authentication process.
 *
 * @example
 * ```typescript
-* try {
-*   const authResponse = await initializeEmbeddedSignInFlow({
-*     url: "https://localhost:8090/oauth2/authorize",
-*     payload: {
-*       response_type: "code",
-*       client_id: "your-client-id",
-*       redirect_uri: "https://your-app.com/callback",
-*       scope: "openid profile email",
-*       state: "random-state-value",
-*       code_challenge: "your-pkce-challenge",
-*       code_challenge_method: "S256"
-*     }
-*   });
-*   console.log(authResponse);
-* } catch (error) {
-*   if (error instanceof ThunderIDAPIError) {
-*     console.error('Authorization failed:', error.message);
-*   }
+* switch (response.flowStatus) {
+*   case EmbeddedSignInFlowStatus.Incomplete:
+*     // More user input needed - render form components
+*     break;
+*   case EmbeddedSignInFlowStatus.Complete:
+*     // Authentication successful - handle completion
+*     break;
+*   case EmbeddedSignInFlowStatus.Error:
+*     // Authentication failed - show error message
+*     break;
 * }
 * ```
+*
+* @experimental Part of the new ThunderID API
 */
-const initializeEmbeddedSignInFlow = async ({ url, baseUrl, payload,...requestConfig }) => {
-	try {
-		new URL(url ?? baseUrl);
-	} catch (error$1) {
-		throw new ThunderIDAPIError(`Invalid URL provided. ${error$1?.toString()}`, "getSchemas-ValidationError-001", "javascript", 400, "The provided `url` or `baseUrl` path does not adhere to the URL schema.");
-	}
-	if (!payload) throw new ThunderIDAPIError("Authorization payload is required", "initializeEmbeddedSignInFlow-ValidationError-002", "javascript", 400, "If an authorization payload is not provided, the request cannot be constructed correctly.");
-	const searchParams = new URLSearchParams();
-	Object.entries(payload).forEach(([key, value]) => {
-		if (value !== void 0 && value !== null) searchParams.append(key, String(value));
-	});
-	try {
-		const response = await fetch(url ?? `${baseUrl}/oauth2/authorize`, {
-			...requestConfig,
-			body: searchParams.toString(),
-			headers: {
-				...requestConfig.headers,
-				Accept: "application/json",
-				"Content-Type": "application/x-www-form-urlencoded"
-			},
-			method: requestConfig.method || "POST"
-		});
-		if (!response.ok) throw new ThunderIDAPIError(await response.text(), "initializeEmbeddedSignInFlow-ResponseError-001", "javascript", response.status, response.statusText, "Authorization request failed");
-		return await response.json();
-	} catch (error$1) {
-		if (error$1 instanceof ThunderIDAPIError) throw error$1;
-		throw new ThunderIDAPIError(`Network or parsing error: ${error$1 instanceof Error ? error$1.message : "Unknown error"}`, "initializeEmbeddedSignInFlow-NetworkError-001", "javascript", 0, "Network Error");
-	}
-};
-var initializeEmbeddedSignInFlow_default = initializeEmbeddedSignInFlow;
-
-//#endregion
-//#region src/api/executeEmbeddedSignInFlow.ts
-const executeEmbeddedSignInFlow = async ({ url, baseUrl, payload,...requestConfig }) => {
-	try {
-		new URL(url ?? baseUrl);
-	} catch (error$1) {
-		throw new ThunderIDAPIError(`Invalid URL provided. ${error$1?.toString()}`, "executeEmbeddedSignInFlow-ValidationError-001", "javascript", 400, "The provided `url` or `baseUrl` path does not adhere to the URL schema.");
-	}
-	if (!payload) throw new ThunderIDAPIError("Authorization payload is required", "executeEmbeddedSignInFlow-ValidationError-002", "javascript", 400, "If an authorization payload is not provided, the request cannot be constructed correctly.");
-	try {
-		const response = await fetch(url ?? `${baseUrl}/oauth2/authn`, {
-			...requestConfig,
-			body: JSON.stringify(payload),
-			headers: {
-				Accept: "application/json",
-				"Content-Type": "application/json",
-				...requestConfig.headers
-			},
-			method: requestConfig.method || "POST"
-		});
-		if (!response.ok) throw new ThunderIDAPIError(await response.text(), "initializeEmbeddedSignInFlow-ResponseError-001", "javascript", response.status, response.statusText, "Authorization request failed");
-		return await response.json();
-	} catch (error$1) {
-		if (error$1 instanceof ThunderIDAPIError) throw error$1;
-		throw new ThunderIDAPIError(`Network or parsing error: ${error$1 instanceof Error ? error$1.message : "Unknown error"}`, "executeEmbeddedSignInFlow-NetworkError-001", "javascript", 0, "Network Error");
-	}
-};
-var executeEmbeddedSignInFlow_default = executeEmbeddedSignInFlow;
+let EmbeddedSignInFlowStatus = /* @__PURE__ */ function(EmbeddedSignInFlowStatus$1) {
+	/**
+	* Sign-in flow completed successfully.
+	*
+	* The user has been authenticated and the flow can proceed to
+	* OAuth2 completion or redirection. Check for redirectUrl or
+	* assertion data in the response.
+	*/
+	EmbeddedSignInFlowStatus$1["Complete"] = "COMPLETE";
+	/**
+	* Sign-in flow encountered an error.
+	*
+	* Authentication failed due to invalid credentials, system error,
+	* or other issues. Check error details in the response and handle
+	* appropriately (retry, show error message, etc.).
+	*/
+	EmbeddedSignInFlowStatus$1["Error"] = "ERROR";
+	/**
+	* Sign-in flow requires additional user input.
+	*
+	* More authentication steps are needed. The response will contain
+	* components in data.meta.components that should be rendered to
+	* collect additional user input (e.g., MFA, password, etc.).
+	*/
+	EmbeddedSignInFlowStatus$1["Incomplete"] = "INCOMPLETE";
+	return EmbeddedSignInFlowStatus$1;
+}({});
+/**
+* Type enumeration for ThunderID embedded sign-in flow responses.
+*
+* Determines the nature of the flow response and how the client should
+* handle the returned data. This affects both UI rendering and flow
+* continuation logic.
+*
+* @experimental Part of the new ThunderID API
+*/
+let EmbeddedSignInFlowType = /* @__PURE__ */ function(EmbeddedSignInFlowType$1) {
+	/**
+	* Response requires external redirection.
+	*
+	* Used for social login providers, external identity providers,
+	* or other flows that require navigating to an external URL.
+	* The response will contain redirection information.
+	*/
+	EmbeddedSignInFlowType$1["Redirection"] = "REDIRECTION";
+	/**
+	* Response contains view components for rendering.
+	*
+	* Standard embedded flow response containing UI components
+	* that should be rendered within the current application
+	* context. Most common type for embedded authentication.
+	*/
+	EmbeddedSignInFlowType$1["View"] = "VIEW";
+	return EmbeddedSignInFlowType$1;
+}({});
 
 //#endregion
-//#region src/models/embedded-flow.ts
+//#region src/utils/injectRequestedPermissions.ts
 /**
-* Copyright (c) 2025-2026, WSO2 LLC. (https://www.wso2.com).
+* Copyright (c) 2026, WSO2 LLC. (https://www.wso2.com).
 *
 * WSO2 LLC. licenses this file to you under the Apache License,
 * Version 2.0 (the "License"); you may not use this file except
@@ -439,140 +427,286 @@ var executeEmbeddedSignInFlow_default = executeEmbeddedSignInFlow;
 * specific language governing permissions and limitations
 * under the License.
 */
-let EmbeddedFlowType = /* @__PURE__ */ function(EmbeddedFlowType$1) {
-	EmbeddedFlowType$1["Authentication"] = "AUTHENTICATION";
-	EmbeddedFlowType$1["Recovery"] = "RECOVERY";
-	EmbeddedFlowType$1["Registration"] = "REGISTRATION";
-	EmbeddedFlowType$1["UserOnboarding"] = "USER_ONBOARDING";
-	return EmbeddedFlowType$1;
-}({});
-let EmbeddedFlowStatus = /* @__PURE__ */ function(EmbeddedFlowStatus$1) {
-	EmbeddedFlowStatus$1["Complete"] = "COMPLETE";
-	EmbeddedFlowStatus$1["Incomplete"] = "INCOMPLETE";
-	return EmbeddedFlowStatus$1;
-}({});
-let EmbeddedFlowResponseType = /* @__PURE__ */ function(EmbeddedFlowResponseType$1) {
-	EmbeddedFlowResponseType$1["Redirection"] = "REDIRECTION";
-	EmbeddedFlowResponseType$1["View"] = "VIEW";
-	return EmbeddedFlowResponseType$1;
-}({});
-let EmbeddedFlowComponentType = /* @__PURE__ */ function(EmbeddedFlowComponentType$2) {
-	EmbeddedFlowComponentType$2["Button"] = "BUTTON";
-	EmbeddedFlowComponentType$2["Checkbox"] = "CHECKBOX";
-	EmbeddedFlowComponentType$2["Divider"] = "DIVIDER";
-	EmbeddedFlowComponentType$2["Form"] = "FORM";
-	EmbeddedFlowComponentType$2["Image"] = "IMAGE";
-	EmbeddedFlowComponentType$2["Input"] = "INPUT";
-	EmbeddedFlowComponentType$2["Radio"] = "RADIO";
-	EmbeddedFlowComponentType$2["Select"] = "SELECT";
-	EmbeddedFlowComponentType$2["Typography"] = "TYPOGRAPHY";
-	return EmbeddedFlowComponentType$2;
-}({});
-
-//#endregion
-//#region src/api/executeEmbeddedSignUpFlow.ts
 /**
-* Executes an embedded signup flow by sending a request to the specified flow execution endpoint.
-*
-* @param requestConfig - Request configuration object containing URL and payload.
-* @returns A promise that resolves with the flow execution response.
-* @throws ThunderIDAPIError when the request fails or URL is invalid.
+* Strips the top-level `scopes` field from a payload and injects it as
+* `inputs.requested_permissions` (space-separated string).
 *
-* @example
-* ```typescript
-* try {
-*   const embeddedSignUpResponse = await executeEmbeddedSignUpFlow({
-*     url: "https://localhost:8090/api/server/v1/flow/execute",
-*     payload: {
-*       flowType: "REGISTRATION"
-*     }
-*   });
-*   console.log(embeddedSignUpResponse);
-* } catch (error) {
-*   if (error instanceof ThunderIDAPIError) {
-*     console.error('Embedded SignUp flow execution failed:', error.message);
-*   }
-* }
-* ```
+* The backend reads requested_permissions from UserInputs (the `inputs` map), not a top-level field.
 */
-const executeEmbeddedSignUpFlow = async ({ url, baseUrl, payload,...requestConfig }) => {
-	if (!baseUrl && !url) throw new ThunderIDAPIError("Embedded SignUp flow execution failed: Base URL or URL is not provided.", "javascript-executeEmbeddedSignUpFlow-ValidationError-001", "javascript", 400, "At least one of the baseUrl or url must be provided to execute the embedded sign up flow.");
-	try {
-		new URL(url ?? baseUrl);
-	} catch (error$1) {
-		throw new ThunderIDAPIError(`Invalid URL provided. ${error$1?.toString()}`, "executeEmbeddedSignUpFlow-ValidationError-001", "javascript", 400, "The provided `url` or `baseUrl` path does not adhere to the URL schema.");
-	}
-	try {
-		const response = await fetch(url ?? `${baseUrl}/api/server/v1/flow/execute`, {
-			...requestConfig,
+const injectRequestedPermissions = (payload) => {
+	const { scopes,...rest } = payload;
+	const normalizedScopes = Array.isArray(scopes) ? scopes.map((s) => String(s).trim()).filter(Boolean).join(" ") : typeof scopes === "string" ? scopes.trim() : "";
+	if (!normalizedScopes) return rest;
+	const existingInputs = rest["inputs"] != null && typeof rest["inputs"] === "object" && !Array.isArray(rest["inputs"]) ? rest["inputs"] : {};
+	return {
+		...rest,
+		inputs: {
+			...existingInputs,
+			requested_permissions: normalizedScopes
+		}
+	};
+};
+var injectRequestedPermissions_default = injectRequestedPermissions;
+
+//#endregion
+//#region src/api/executeEmbeddedSignInFlow.ts
+const executeEmbeddedSignInFlow = async ({ url, baseUrl, payload, authId,...requestConfig }) => {
+	if (!payload) throw new ThunderIDAPIError("Authorization payload is required", "executeEmbeddedSignInFlow-ValidationError-002", "javascript", 400, "If an authorization payload is not provided, the request cannot be constructed correctly.");
+	const endpoint = url ?? `${baseUrl}/flow/execute`;
+	const cleanPayload = typeof payload === "object" && payload !== null ? Object.fromEntries(Object.entries(payload).filter(([key]) => key !== "verbose")) : payload;
+	const isNewFlowStart = typeof cleanPayload === "object" && cleanPayload !== null && "applicationId" in cleanPayload && "flowType" in cleanPayload;
+	const hasOnlyFlowId = typeof cleanPayload === "object" && cleanPayload !== null && "executionId" in cleanPayload && Object.keys(cleanPayload).length === 1;
+	const basePayload = isNewFlowStart ? injectRequestedPermissions_default(cleanPayload) : cleanPayload;
+	const requestPayload = isNewFlowStart || hasOnlyFlowId ? {
+		...basePayload,
+		verbose: true
+	} : basePayload;
+	const response = await fetch(endpoint, {
+		...requestConfig,
+		body: JSON.stringify(requestPayload),
+		headers: {
+			Accept: "application/json",
+			"Content-Type": "application/json",
+			...requestConfig.headers
+		},
+		method: requestConfig.method || "POST"
+	});
+	if (!response.ok) throw new ThunderIDAPIError(await response.text(), "executeEmbeddedSignInFlow-ResponseError-001", "javascript", response.status, response.statusText, "Authorization request failed");
+	const flowResponse = await response.json();
+	if (flowResponse.flowStatus === EmbeddedSignInFlowStatus.Complete && flowResponse.assertion && authId) try {
+		const oauth2Response = await fetch(`${baseUrl}/oauth2/auth/callback`, {
 			body: JSON.stringify({
-				...payload ?? {},
-				flowType: EmbeddedFlowType.Registration
+				assertion: flowResponse.assertion,
+				authId
 			}),
+			credentials: "include",
 			headers: {
 				Accept: "application/json",
 				"Content-Type": "application/json",
 				...requestConfig.headers
 			},
-			method: requestConfig.method || "POST"
+			method: "POST"
 		});
-		if (!response.ok) throw new ThunderIDAPIError(await response.text(), "javascript-executeEmbeddedSignUpFlow-ResponseError-100", "javascript", response.status, response.statusText, "Embedded SignUp flow execution failed");
-		return await response.json();
-	} catch (error$1) {
-		if (error$1 instanceof ThunderIDAPIError) throw error$1;
-		throw new ThunderIDAPIError(`Network or parsing error: ${error$1 instanceof Error ? error$1.message : "Unknown error"}`, "executeEmbeddedSignUpFlow-NetworkError-001", "javascript", 0, "Network Error");
+		if (!oauth2Response.ok) throw new ThunderIDAPIError(await oauth2Response.text(), "executeEmbeddedSignInFlow-OAuth2Error-002", "javascript", oauth2Response.status, oauth2Response.statusText, "OAuth2 authorization failed");
+		const oauth2Result = await oauth2Response.json();
+		return {
+			flowStatus: flowResponse.flowStatus,
+			redirectUrl: oauth2Result["redirect_uri"]
+		};
+	} catch (authError) {
+		if (authError instanceof ThunderIDAPIError) throw authError;
+		throw new ThunderIDAPIError(authError instanceof Error ? authError.message : "Unknown error", "executeEmbeddedSignInFlow-OAuth2Error-001", "javascript", 500, "Failed to complete OAuth2 authorization after successful embedded sign-in flow.", "OAuth2 authorization failed");
 	}
+	return flowResponse;
 };
-var executeEmbeddedSignUpFlow_default = executeEmbeddedSignUpFlow;
+var executeEmbeddedSignInFlow_default = executeEmbeddedSignInFlow;
 
 //#endregion
-//#region src/api/getUserInfo.ts
+//#region src/models/embedded-signup-flow.ts
 /**
-* Retrieves the user information from the specified OIDC userinfo endpoint.
+* Status enumeration for ThunderID embedded sign-up flow operations.
 *
-* @param requestConfig - Request configuration object.
-* @returns A promise that resolves with the user information.
-* @throw
-*   const userInfo = await getUserInfo({
-*     url: "https://localhost:8090/oauth2/userinfo",
-*   });
-*   console.log(userInfo);
-* } catch (error) {
-*   if (error instanceof ThunderIDAPIError) {
-*     console.error('Failed to get user info:', error.message);
-*   }
+* These statuses indicate the current state of the registration flow and determine
+* the next action required by the client application. Each status provides specific
+* guidance on how to proceed with the user registration process.
+*
+* @example
+* ```typescript
+* switch (response.flowStatus) {
+*   case EmbeddedSignUpFlowStatus.Incomplete:
+*     // More user input needed - render registration form components
+*     break;
+*   case EmbeddedSignUpFlowStatus.Complete:
+*     // Registration successful - handle completion
+*     break;
+*   case EmbeddedSignUpFlowStatus.Error:
+*     // Registration failed - show error details
+*     const errorResponse = response as EmbeddedSignUpFlowErrorResponse;
+*     showError(errorResponse.error.description.defaultValue);
+*     break;
 * }
 * ```
+*
+* @experimental Part of the new ThunderID API
 */
-const getUserInfo = async ({ url,...requestConfig }) => {
-	try {
-		new URL(url);
-	} catch (error$1) {
-		throw new ThunderIDAPIError("Invalid endpoint URL provided", "getUserInfo-ValidationError-001", "javascript", 400, "Invalid Request");
-	}
-	try {
-		const response = await fetch(url, {
-			...requestConfig,
-			headers: {
+let EmbeddedSignUpFlowStatus = /* @__PURE__ */ function(EmbeddedSignUpFlowStatus$1) {
+	/**
+	* Sign-up flow completed successfully.
+	*
+	* The user has successfully registered and the flow can proceed to
+	* OAuth2 completion or redirection. Check for redirectUrl or assertion
+	* data in the response for next steps.
+	*/
+	EmbeddedSignUpFlowStatus$1["Complete"] = "COMPLETE";
+	/**
+	* Sign-up flow encountered an error and cannot proceed.
+	*
+	* Registration failed due to validation errors, duplicate user,
+	* system errors, or other issues. The response will be of type
+	* `EmbeddedSignUpFlowErrorResponse` containing detailed failure
+	* information that can be displayed to the user.
+	*
+	* @see {@link EmbeddedSignUpFlowErrorResponse} for error response structure
+	*/
+	EmbeddedSignUpFlowStatus$1["Error"] = "ERROR";
+	/**
+	* Sign-up flow requires additional user input.
+	*
+	* More registration steps are needed. The response will contain
+	* components in data.meta.components that should be rendered to
+	* collect additional user information (e.g., profile data, verification).
+	*/
+	EmbeddedSignUpFlowStatus$1["Incomplete"] = "INCOMPLETE";
+	return EmbeddedSignUpFlowStatus$1;
+}({});
+/**
+* Type enumeration for ThunderID embedded sign-up flow responses.
+*
+* Determines the nature of the registration flow response and how the client
+* should handle the returned data. This affects both UI rendering and flow
+* continuation logic during the user registration process.
+*
+* @experimental Part of the new ThunderID API
+*/
+let EmbeddedSignUpFlowType = /* @__PURE__ */ function(EmbeddedSignUpFlowType$1) {
+	/**
+	* Response requires external redirection.
+	*
+	* Used for social registration providers, external identity providers,
+	* or other flows that require navigating to an external URL during
+	* the registration process. The response will contain redirection information.
+	*/
+	EmbeddedSignUpFlowType$1["Redirection"] = "REDIRECTION";
+	/**
+	* Response contains view components for rendering.
+	*
+	* Standard embedded registration flow response containing UI components
+	* that should be rendered within the current application context.
+	* Most common type for embedded user registration.
+	*/
+	EmbeddedSignUpFlowType$1["View"] = "VIEW";
+	return EmbeddedSignUpFlowType$1;
+}({});
+
+//#endregion
+//#region src/api/executeEmbeddedSignUpFlow.ts
+const executeEmbeddedSignUpFlow = async ({ url, baseUrl, payload, authId,...requestConfig }) => {
+	if (!payload) throw new ThunderIDAPIError("Registration payload is required", "executeEmbeddedSignUpFlow-ValidationError-002", "javascript", 400, "If a registration payload is not provided, the request cannot be constructed correctly.");
+	const endpoint = url ?? `${baseUrl}/flow/execute`;
+	const cleanPayload = typeof payload === "object" && payload !== null ? Object.fromEntries(Object.entries(payload).filter(([key]) => key !== "verbose")) : payload;
+	const isNewFlowStart = typeof cleanPayload === "object" && cleanPayload !== null && "applicationId" in cleanPayload && "flowType" in cleanPayload;
+	const hasOnlyFlowId = typeof cleanPayload === "object" && cleanPayload !== null && "executionId" in cleanPayload && Object.keys(cleanPayload).length === 1;
+	const basePayload = isNewFlowStart ? injectRequestedPermissions_default(cleanPayload) : cleanPayload;
+	const requestPayload = isNewFlowStart || hasOnlyFlowId ? {
+		...basePayload,
+		verbose: true
+	} : basePayload;
+	const response = await fetch(endpoint, {
+		...requestConfig,
+		body: JSON.stringify(requestPayload),
+		headers: {
+			Accept: "application/json",
+			"Content-Type": "application/json",
+			...requestConfig.headers
+		},
+		method: requestConfig.method || "POST"
+	});
+	if (!response.ok) throw new ThunderIDAPIError(await response.text(), "executeEmbeddedSignUpFlow-ResponseError-001", "javascript", response.status, response.statusText, "Registration request failed");
+	const flowResponse = await response.json();
+	if (flowResponse.flowStatus === EmbeddedSignUpFlowStatus.Complete && flowResponse.assertion && authId) try {
+		const oauth2Response = await fetch(`${baseUrl}/oauth2/auth/callback`, {
+			body: JSON.stringify({
+				assertion: flowResponse.assertion,
+				authId
+			}),
+			credentials: "include",
+			headers: {
 				Accept: "application/json",
 				"Content-Type": "application/json",
 				...requestConfig.headers
 			},
-			method: "GET"
+			method: "POST"
 		});
-		if (!response.ok) throw new ThunderIDAPIError(await response.text(), "getUserInfo-ResponseError-001", "javascript", response.status, response.statusText, "Failed to fetch user info");
-		return await response.json();
-	} catch (error$1) {
-		if (error$1 instanceof ThunderIDAPIError) throw error$1;
-		throw new ThunderIDAPIError(`Network or parsing error: ${error$1 instanceof Error ? error$1.message : "Unknown error"}`, "getUserInfo-NetworkError-001", "javascript", 0, "Network Error");
+		if (!oauth2Response.ok) throw new ThunderIDAPIError(await oauth2Response.text(), "executeEmbeddedSignUpFlow-OAuth2Error-002", "javascript", oauth2Response.status, oauth2Response.statusText, "OAuth2 authorization failed");
+		const oauth2Result = await oauth2Response.json();
+		return {
+			flowStatus: flowResponse.flowStatus,
+			redirectUrl: oauth2Result["redirect_uri"]
+		};
+	} catch (authError) {
+		if (authError instanceof ThunderIDAPIError) throw authError;
+		throw new ThunderIDAPIError(authError instanceof Error ? authError.message : "Unknown error", "executeEmbeddedSignUpFlow-OAuth2Error-001", "javascript", 500, "Failed to complete OAuth2 authorization after successful embedded sign-up flow.", "OAuth2 authorization failed");
 	}
+	return flowResponse;
 };
-var getUserInfo_default = getUserInfo;
+var executeEmbeddedSignUpFlow_default = executeEmbeddedSignUpFlow;
 
 //#endregion
-//#region src/utils/processUsername.ts
+//#region src/api/executeEmbeddedRecoveryFlow.ts
 /**
-* Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
+* Executes an embedded recovery flow by sending a request to the flow execution endpoint.
+*
+* This function handles password-recovery and account-recovery flows driven by the
+* ThunderID server. The server returns UI components for each step (e.g. username
+* collection, OTP verification, password reset) and this function forwards the
+* user's responses back to the server.
+*
+* @param requestConfig - Request configuration containing URL, payload, and optional headers.
+* @returns A promise that resolves with the flow execution response.
+* @throws ThunderIDAPIError when the request fails or a payload is missing.
+*
+* @example
+* ```typescript
+* // Initiate recovery flow
+* const response = await executeEmbeddedRecoveryFlow({
+*   baseUrl: 'https://localhost:8090',
+*   payload: {
+*     flowType: 'RECOVERY',
+*     applicationId: 'my-app-id',
+*   },
+* });
+*
+* // Continue recovery flow with user input
+* const nextResponse = await executeEmbeddedRecoveryFlow({
+*   baseUrl: 'https://localhost:8090',
+*   payload: {
+*     executionId: response.executionId,
+*     action: 'submit',
+*     inputs: { username: 'user@example.com' },
+*     challengeToken: response.challengeToken,
+*   },
+* });
+* ```
+*/
+const executeEmbeddedRecoveryFlow = async ({ url, baseUrl, payload,...requestConfig }) => {
+	if (!payload) throw new ThunderIDAPIError("Recovery payload is required", "executeEmbeddedRecoveryFlow-ValidationError-002", "javascript", 400, "If a recovery payload is not provided, the request cannot be constructed correctly.");
+	const endpoint = url ?? `${baseUrl}/flow/execute`;
+	const cleanPayload = typeof payload === "object" && payload !== null ? Object.fromEntries(Object.entries(payload).filter(([key]) => key !== "verbose")) : payload;
+	const hasOnlyAppIdAndFlowType = typeof cleanPayload === "object" && cleanPayload !== null && "applicationId" in cleanPayload && "flowType" in cleanPayload && Object.keys(cleanPayload).length === 2;
+	const hasOnlyFlowId = typeof cleanPayload === "object" && cleanPayload !== null && "executionId" in cleanPayload && Object.keys(cleanPayload).length === 1;
+	const requestPayload = hasOnlyAppIdAndFlowType || hasOnlyFlowId ? {
+		...cleanPayload,
+		verbose: true
+	} : cleanPayload;
+	const response = await fetch(endpoint, {
+		...requestConfig,
+		body: JSON.stringify(requestPayload),
+		headers: {
+			Accept: "application/json",
+			"Content-Type": "application/json",
+			...requestConfig.headers
+		},
+		method: requestConfig.method || "POST"
+	});
+	if (!response.ok) throw new ThunderIDAPIError(await response.text(), "executeEmbeddedRecoveryFlow-ResponseError-001", "javascript", response.status, response.statusText, "Recovery request failed");
+	return await response.json();
+};
+var executeEmbeddedRecoveryFlow_default = executeEmbeddedRecoveryFlow;
+
+//#endregion
+//#region src/models/embedded-flow.ts
+/**
+* Copyright (c) 2025-2026, WSO2 LLC. (https://www.wso2.com).
 *
 * WSO2 LLC. licenses this file to you under the Apache License,
 * Version 2.0 (the "License"); you may not use this file except
@@ -588,1510 +722,371 @@ var getUserInfo_default = getUserInfo;
 * specific language governing permissions and limitations
 * under the License.
 */
+let EmbeddedFlowType = /* @__PURE__ */ function(EmbeddedFlowType$1) {
+	EmbeddedFlowType$1["Authentication"] = "AUTHENTICATION";
+	EmbeddedFlowType$1["Recovery"] = "RECOVERY";
+	EmbeddedFlowType$1["Registration"] = "REGISTRATION";
+	EmbeddedFlowType$1["UserOnboarding"] = "USER_ONBOARDING";
+	return EmbeddedFlowType$1;
+}({});
+let EmbeddedFlowResponseType = /* @__PURE__ */ function(EmbeddedFlowResponseType$1) {
+	EmbeddedFlowResponseType$1["Redirection"] = "REDIRECTION";
+	EmbeddedFlowResponseType$1["View"] = "VIEW";
+	return EmbeddedFlowResponseType$1;
+}({});
 /**
-* Regular expression to match userstore prefixes in usernames.
-* Matches patterns like "DEFAULT/", "ASGARDEO_USER/", "PRIMARY/", etc.
-* The pattern matches any uppercase letters, numbers, and underscores followed by a forward slash.
-*/
-const USERSTORE_PREFIX_REGEX = /^[A-Z_][A-Z0-9_]*\//;
-/**
-* Removes userstore prefixes from a username if they exist.
-* This is commonly used to clean usernames returned from SCIM2 endpoints
-* that include userstore prefixes like "DEFAULT/", "ASGARDEO_USER/", "PRIMARY/", etc.
+* Component types supported by the ThunderID embedded flow API.
 *
-* @param username - The username string to process
-* @returns The username without the userstore prefix, or the original username if no prefix exists
+* These types define the different UI components that can be rendered
+* as part of the embedded authentication flows. Each type corresponds
+* to a specific UI element with its own behavior and properties.
 *
 * @example
 * ```typescript
-* const cleanUsername = removeUserstorePrefix("DEFAULT/john.doe");
-* console.log(cleanUsername); // "john.doe"
-*
-* const thunderidUser = removeUserstorePrefix("ASGARDEO_USER/jane.doe");
-* console.log(thunderidUser); // "jane.doe"
-*
-* const primaryUser = removeUserstorePrefix("PRIMARY/admin");
-* console.log(primaryUser); // "admin"
-*
-* const alreadyClean = removeUserstorePrefix("user.name");
-* console.log(alreadyClean); // "user.name"
-*
-* const emptyInput = removeUserstorePrefix("");
-* console.log(emptyInput); // ""
+* // Check component type to render appropriate UI
+* if (component.type === EmbeddedFlowComponentType.TextInput) {
+*   // Render text input field
+* } else if (component.type === EmbeddedFlowComponentType.Action) {
+*   // Render button/action
+* }
 * ```
+*
+* @experimental This API may change in future versions
 */
-const removeUserstorePrefix = (username) => {
-	if (!username) return "";
-	return username.replace(USERSTORE_PREFIX_REGEX, "");
-};
+let EmbeddedFlowComponentType = /* @__PURE__ */ function(EmbeddedFlowComponentType$1) {
+	/** Interactive action component (buttons, links) for user interactions */
+	EmbeddedFlowComponentType$1["Action"] = "ACTION";
+	/** Container block component that groups other components */
+	EmbeddedFlowComponentType$1["Block"] = "BLOCK";
+	/** Consent component for displaying consent purposes and attributes */
+	EmbeddedFlowComponentType$1["Consent"] = "CONSENT";
+	/** Copyable text display component that shows text with a copy-to-clipboard action */
+	EmbeddedFlowComponentType$1["CopyableText"] = "COPYABLE_TEXT";
+	/** Date input field for selecting a calendar date */
+	EmbeddedFlowComponentType$1["DateInput"] = "DATE_INPUT";
+	/** Divider component for visual separation of content */
+	EmbeddedFlowComponentType$1["Divider"] = "DIVIDER";
+	/** Email input field with validation for email addresses. */
+	EmbeddedFlowComponentType$1["EmailInput"] = "EMAIL_INPUT";
+	/** Icon display component for rendering named vector icons */
+	EmbeddedFlowComponentType$1["Icon"] = "ICON";
+	/** Image display component for logos and illustrations */
+	EmbeddedFlowComponentType$1["Image"] = "IMAGE";
+	/** One-time password input field for multi-factor authentication */
+	EmbeddedFlowComponentType$1["OtpInput"] = "OTP_INPUT";
+	/** Organization unit tree picker for selecting an OU */
+	EmbeddedFlowComponentType$1["OuSelect"] = "OU_SELECT";
+	/** Password input field with masking for sensitive data */
+	EmbeddedFlowComponentType$1["PasswordInput"] = "PASSWORD_INPUT";
+	/** Phone number input field with country code support */
+	EmbeddedFlowComponentType$1["PhoneInput"] = "PHONE_INPUT";
+	/** Rich text display component that renders formatted HTML content */
+	EmbeddedFlowComponentType$1["RichText"] = "RICH_TEXT";
+	/** Select/dropdown input component for single choice selection */
+	EmbeddedFlowComponentType$1["Select"] = "SELECT";
+	/** Stack layout component for arranging children in a row or column */
+	EmbeddedFlowComponentType$1["Stack"] = "STACK";
+	/** Text display component for labels, headings, and messages */
+	EmbeddedFlowComponentType$1["Text"] = "TEXT";
+	/** Standard text input field for user data entry */
+	EmbeddedFlowComponentType$1["TextInput"] = "TEXT_INPUT";
+	/** Timer component for displaying a countdown */
+	EmbeddedFlowComponentType$1["Timer"] = "TIMER";
+	/** QR code display component for wallet-based flows (e.g. OpenID4VP) */
+	EmbeddedFlowComponentType$1["QrCode"] = "QR_CODE";
+	return EmbeddedFlowComponentType$1;
+}({});
 /**
-* Processes a user object to remove userstore prefixes from username fields.
-* This is a helper function for processing user objects returned from SCIM2 endpoints.
-* Handles various username field variations: username, userName, and user_name.
-*
-* @param user - The user object to process
-* @returns The user object with processed username fields
+* Action variant types for buttons and interactive elements.
 *
-* @example
-* ```typescript
-* const user = { username: "DEFAULT/john.doe", email: "john@example.com" };
-* const processedUser = processUserUsername(user);
-* console.log(processedUser.username); // "john.doe"
+* @experimental This API may change in future versions
+*/
+let EmbeddedFlowActionVariant = /* @__PURE__ */ function(EmbeddedFlowActionVariant$1) {
+	/** Danger action button for destructive operations */
+	EmbeddedFlowActionVariant$1["Danger"] = "DANGER";
+	/** Info action button for informational purposes */
+	EmbeddedFlowActionVariant$1["Info"] = "INFO";
+	/** Link-styled action button */
+	EmbeddedFlowActionVariant$1["Link"] = "LINK";
+	/** Outlined action button for secondary emphasis */
+	EmbeddedFlowActionVariant$1["Outlined"] = "OUTLINED";
+	/** Primary action button with highest visual emphasis */
+	EmbeddedFlowActionVariant$1["Primary"] = "PRIMARY";
+	/** Secondary action button with moderate visual emphasis */
+	EmbeddedFlowActionVariant$1["Secondary"] = "SECONDARY";
+	/** Success action button for positive confirmations */
+	EmbeddedFlowActionVariant$1["Success"] = "SUCCESS";
+	/** Tertiary action button with minimal visual emphasis */
+	EmbeddedFlowActionVariant$1["Tertiary"] = "TERTIARY";
+	/** Warning action button for cautionary actions */
+	EmbeddedFlowActionVariant$1["Warning"] = "WARNING";
+	return EmbeddedFlowActionVariant$1;
+}({});
+/**
+* Text variant types for typography components.
 *
-* const camelCaseUser = { userName: "ASGARDEO_USER/jane.doe", email: "jane@example.com" };
-* const processedCamelCaseUser = processUserUsername(camelCaseUser);
-* console.log(processedCamelCaseUser.userName); // "jane.doe"
+* @experimental This API may change in future versions
+*/
+let EmbeddedFlowTextVariant = /* @__PURE__ */ function(EmbeddedFlowTextVariant$1) {
+	/** Primary body text for main content */
+	EmbeddedFlowTextVariant$1["Body1"] = "BODY_1";
+	/** Secondary body text for supplementary content */
+	EmbeddedFlowTextVariant$1["Body2"] = "BODY_2";
+	/** Text styled for button labels */
+	EmbeddedFlowTextVariant$1["ButtonText"] = "BUTTON_TEXT";
+	/** Small caption text for annotations and descriptions */
+	EmbeddedFlowTextVariant$1["Caption"] = "CAPTION";
+	/** Largest heading level for main titles */
+	EmbeddedFlowTextVariant$1["Heading1"] = "HEADING_1";
+	/** Second level heading for major sections */
+	EmbeddedFlowTextVariant$1["Heading2"] = "HEADING_2";
+	/** Third level heading for subsections */
+	EmbeddedFlowTextVariant$1["Heading3"] = "HEADING_3";
+	/** Fourth level heading for minor sections */
+	EmbeddedFlowTextVariant$1["Heading4"] = "HEADING_4";
+	/** Fifth level heading for detailed sections */
+	EmbeddedFlowTextVariant$1["Heading5"] = "HEADING_5";
+	/** Smallest heading level for fine-grained sections */
+	EmbeddedFlowTextVariant$1["Heading6"] = "HEADING_6";
+	/** Overline text for labels and categories */
+	EmbeddedFlowTextVariant$1["Overline"] = "OVERLINE";
+	/** Primary subtitle text with larger emphasis */
+	EmbeddedFlowTextVariant$1["Subtitle1"] = "SUBTITLE_1";
+	/** Secondary subtitle text with moderate emphasis */
+	EmbeddedFlowTextVariant$1["Subtitle2"] = "SUBTITLE_2";
+	return EmbeddedFlowTextVariant$1;
+}({});
+/**
+* Event types for action components.
 *
-* const snakeCaseUser = { user_name: "PRIMARY/admin", email: "admin@example.com" };
-* const processedSnakeCaseUser = processUserUsername(snakeCaseUser);
-* console.log(processedSnakeCaseUser.user_name); // "admin"
-* ```
+* @experimental This API may change in future versions
 */
-const processUsername = (user) => {
-	if (!user) return user;
-	const processedUser = { ...user };
-	if (processedUser.username) processedUser.username = removeUserstorePrefix(processedUser.username);
-	if (processedUser.userName) processedUser.userName = removeUserstorePrefix(processedUser.userName);
-	if (processedUser.user_name) processedUser.user_name = removeUserstorePrefix(processedUser.user_name);
-	return processedUser;
-};
-var processUsername_default = processUsername;
+let EmbeddedFlowEventType = /* @__PURE__ */ function(EmbeddedFlowEventType$1) {
+	/** Navigate back to the previous step */
+	EmbeddedFlowEventType$1["Back"] = "BACK";
+	/** Cancel the current operation */
+	EmbeddedFlowEventType$1["Cancel"] = "CANCEL";
+	/** Navigate to a different flow step or page */
+	EmbeddedFlowEventType$1["Navigate"] = "NAVIGATE";
+	/** Reset form fields to initial state */
+	EmbeddedFlowEventType$1["Reset"] = "RESET";
+	/** Submit form data to the server */
+	EmbeddedFlowEventType$1["Submit"] = "SUBMIT";
+	/** Trigger an action or event */
+	EmbeddedFlowEventType$1["Trigger"] = "TRIGGER";
+	return EmbeddedFlowEventType$1;
+}({});
 
 //#endregion
-//#region src/api/getScim2Me.ts
+//#region src/api/executeEmbeddedUserOnboardingFlow.ts
 /**
-* Retrieves the user profile information from the specified SCIM2 /Me endpoint.
+* Executes an embedded user onboarding flow by sending a request to the flow execution endpoint.
+*
+* This function handles both:
+* - Admin flow: Initiates onboarding, collects user details, generates invite link
+* - End-user flow: Validates invite token and allows password setting
+*
+* @param requestConfig - Request configuration object containing URL, payload, and optional auth token.
+* @returns A promise that resolves with the flow execution response.
+* @throws ThunderIDAPIError when the request fails or URL is invalid.
 *
-* @param config - Request configuration object.
-* @returns A promise that resolves with the user profile information.
 * @example
 * ```typescript
-* // Using default fetch
-* try {
-*   const userProfile = await getScim2Me({
-*     url: "https://localhost:8090/scim2/Me",
-*   });
-*   console.log(userProfile);
-* } catch (error) {
-*   if (error instanceof ThunderIDAPIError) {
-*     console.error('Failed to get user profile:', error.message);
+* // Admin initiating user onboarding (requires auth token)
+* const response = await executeEmbeddedUserOnboardingFlow({
+*   baseUrl: "https://api.thunder.io",
+*   payload: {
+*     flowType: "USER_ONBOARDING"
+*   },
+*   headers: {
+*     Authorization: `Bearer ${accessToken}`
 *   }
-* }
+* });
+*
+* // End-user accepting invite (no auth required)
+* const response = await executeEmbeddedUserOnboardingFlow({
+*   baseUrl: "https://api.thunder.io",
+*   payload: {
+*     executionId: "flow-id-from-url",
+*     inputs: { inviteToken: "token-from-url" }
+*   }
+* });
 * ```
+*/
+const executeEmbeddedUserOnboardingFlow = async ({ url, baseUrl, payload,...requestConfig }) => {
+	if (!payload) throw new ThunderIDAPIError("User onboarding payload is required", "executeEmbeddedUserOnboardingFlow-ValidationError-002", "javascript", 400, "If a user onboarding payload is not provided, the request cannot be constructed correctly.");
+	const endpoint = url ?? `${baseUrl}/flow/execute`;
+	const cleanPayload = typeof payload === "object" && payload !== null ? Object.fromEntries(Object.entries(payload).filter(([key]) => key !== "verbose")) : payload;
+	const hasOnlyFlowType = typeof cleanPayload === "object" && cleanPayload !== null && "flowType" in cleanPayload && Object.keys(cleanPayload).length === 1;
+	const hasOnlyFlowId = typeof cleanPayload === "object" && cleanPayload !== null && "executionId" in cleanPayload && Object.keys(cleanPayload).length === 1;
+	const hasFlowIdWithInputs = typeof cleanPayload === "object" && cleanPayload !== null && "executionId" in cleanPayload && "inputs" in cleanPayload;
+	const requestPayload = hasOnlyFlowType || hasOnlyFlowId || hasFlowIdWithInputs ? {
+		...cleanPayload,
+		verbose: true
+	} : cleanPayload;
+	if ("flowType" in requestPayload && requestPayload["flowType"] !== EmbeddedFlowType.UserOnboarding) requestPayload["flowType"] = EmbeddedFlowType.UserOnboarding;
+	const response = await fetch(endpoint, {
+		...requestConfig,
+		body: JSON.stringify(requestPayload),
+		headers: {
+			Accept: "application/json",
+			"Content-Type": "application/json",
+			...requestConfig.headers
+		},
+		method: requestConfig.method || "POST"
+	});
+	if (!response.ok) throw new ThunderIDAPIError(await response.text(), "executeEmbeddedUserOnboardingFlow-ResponseError-001", "javascript", response.status, response.statusText, "User onboarding request failed");
+	return await response.json();
+};
+var executeEmbeddedUserOnboardingFlow_default = executeEmbeddedUserOnboardingFlow;
+
+//#endregion
+//#region src/api/getFlowMeta.ts
+/**
+* Fetches aggregated flow metadata from the `GET /flow/meta` endpoint.
+*
+* The response includes:
+* - Application or OU details depending on the `type` parameter
+* - Resolved design configuration (theme and layout)
+* - i18n translations filtered by `language` and `namespace`
+* - Registration flow enablement status
+*
+* @param config - Request configuration including `baseUrl`/`url`, and optional
+*                 `type`, `id`, `language`, and `namespace` filters. When `type`
+*                 and `id` are omitted the server returns i18n-only metadata.
+* @returns A promise that resolves to the {@link FlowMetadataResponse}.
+*
+* @throws {ThunderIDAPIError} When the server returns a non-OK response.
 *
 * @example
 * ```typescript
-* // Using custom fetcher (e.g., axios-based httpClient)
-* try {
-*   const userProfile = await getScim2Me({
-*     url: "https://localhost:8090/scim2/Me",
-*     fetcher: async (url, config) => {
-*       const response = await httpClient({
-*         url,
-*         method: config.method,
-*         headers: config.headers,
-*         ...config
-*       });
-*       // Convert axios-like response to fetch-like Response
-*       return {
-*         ok: response.status >= 200 && response.status < 300,
-*         status: response.status,
-*         statusText: response.statusText,
-*         json: () => Promise.resolve(response.data),
-*         text: () => Promise.resolve(typeof response.data === 'string' ? response.data : JSON.stringify(response.data))
-*       } as Response;
-*     }
-*   });
-*   console.log(userProfile);
-* } catch (error) {
-*   if (error instanceof ThunderIDAPIError) {
-*     console.error('Failed to get user profile:', error.message);
-*   }
-* }
+* import getFlowMeta from './api/getFlowMeta';
+* import { FlowMetaType } from './models/flow-meta';
+*
+* const meta = await getFlowMeta({
+*   baseUrl: 'https://localhost:8090',
+*   type: FlowMetaType.App,
+*   id: '60a9b38b-6eba-9f9e-55f9-267067de4680',
+*   language: 'en',
+*   namespace: 'auth',
+* });
+*
+* console.log(meta.application?.name);
+* console.log(meta.i18n.translations);
 * ```
+*
+* @experimental This function targets the ThunderID V2 platform API
 */
-const getScim2Me = async ({ url, baseUrl, fetcher,...requestConfig }) => {
+const getFlowMeta = async ({ url, baseUrl, type, id, language, namespace,...requestConfig }) => {
+	const queryParams = new URLSearchParams({
+		...id ? { id } : {},
+		...type ? { type } : {},
+		...language ? { language } : {},
+		...namespace ? { namespace } : {}
+	});
+	const endpoint = `${url ?? `${baseUrl}/flow/meta`}?${queryParams.toString()}`;
+	const response = await fetch(endpoint, {
+		...requestConfig,
+		headers: {
+			Accept: "application/json",
+			...requestConfig.headers
+		},
+		method: "GET"
+	});
+	if (!response.ok) throw new ThunderIDAPIError(await response.text(), "getFlowMeta-ResponseError-001", "javascript", response.status, response.statusText, "Flow metadata request failed");
+	return await response.json();
+};
+var getFlowMeta_default = getFlowMeta;
+
+//#endregion
+//#region src/api/getOrganizationUnitChildren.ts
+/**
+* Retrieves the child organization units of a given organization unit.
+*
+* @param config - Request configuration object.
+* @returns A promise that resolves with the list of child organization units.
+*/
+const getOrganizationUnitChildren = async ({ url, baseUrl, organizationUnitId, limit, offset, fetcher,...requestConfig }) => {
 	try {
 		new URL(url ?? baseUrl);
 	} catch (error$1) {
-		throw new ThunderIDAPIError(`Invalid URL provided. ${error$1?.toString()}`, "getScim2Me-ValidationError-001", "javascript", 400, "The provided `url` or `baseUrl` path does not adhere to the URL schema.");
+		throw new ThunderIDAPIError(`Invalid URL provided. ${error$1?.toString()}`, "getOrganizationUnitChildren-ValidationError-001", "javascript", 400, "The provided `url` or `baseUrl` path does not adhere to the URL schema.");
 	}
 	const fetchFn = fetcher || fetch;
-	const resolvedUrl = url ?? `${baseUrl}/scim2/Me`;
+	const queryParams = new URLSearchParams();
+	if (limit !== void 0) queryParams.set("limit", String(limit));
+	if (offset !== void 0) queryParams.set("offset", String(offset));
+	const query = queryParams.toString();
+	const resolvedBase = url ?? `${baseUrl}/api/server/v1/organization-units/${organizationUnitId}/children`;
+	const resolvedUrl = query ? `${resolvedBase}?${query}` : resolvedBase;
 	const requestInit = {
 		...requestConfig,
 		headers: {
 			Accept: "application/json",
-			"Content-Type": "application/scim+json",
+			"Content-Type": "application/json",
 			...requestConfig.headers
 		},
 		method: "GET"
 	};
 	try {
 		const response = await fetchFn(resolvedUrl, requestInit);
-		if (!response?.ok) throw new ThunderIDAPIError(await response.text(), "getScim2Me-ResponseError-001", "javascript", response.status, response.statusText, "Failed to fetch user profile");
-		return processUsername_default(await response.json());
+		if (!response?.ok) throw new ThunderIDAPIError(await response.text(), "getOrganizationUnitChildren-ResponseError-001", "javascript", response.status, response.statusText, "Failed to fetch organization unit children");
+		return await response.json();
 	} catch (error$1) {
 		if (error$1 instanceof ThunderIDAPIError) throw error$1;
-		throw new ThunderIDAPIError(`Network or parsing error: ${error$1 instanceof Error ? error$1.message : "Unknown error"}`, "getScim2Me-NetworkError-001", "javascript", 0, "Network Error");
+		throw new ThunderIDAPIError(`Network or parsing error: ${error$1 instanceof Error ? error$1.message : "Unknown error"}`, "getOrganizationUnitChildren-NetworkError-001", "javascript", 0, "Network Error");
 	}
 };
-var getScim2Me_default = getScim2Me;
+var getOrganizationUnitChildren_default = getOrganizationUnitChildren;
 
 //#endregion
-//#region src/api/getSchemas.ts
+//#region src/api/getUserInfo.ts
 /**
-* Retrieves the SCIM2 schemas from the specified endpoint.
+* Retrieves the user information from the specified OIDC userinfo endpoint.
 *
-* @param config - Request configuration object.
-* @returns A promise that resolves with the SCIM2 schemas information.
-* @example
-* ```typescript
-* // Using default fetch
-* try {
-*   const schemas = await getSchemas({
-*     url: "https://localhost:8090/scim2/Schemas",
-*   });
-*   console.log(schemas);
-* } catch (error) {
-*   if (error instanceof ThunderIDAPIError) {
-*     console.error('Failed to get schemas:', error.message);
-*   }
-* }
-* ```
-*
-* @example
-* ```typescript
-* // Using custom fetcher (e.g., axios-based httpClient)
-* try {
-*   const schemas = await getSchemas({
-*     url: "https://localhost:8090/scim2/Schemas",
-*     fetcher: async (url, config) => {
-*       const response = await httpClient({
-*         url,
-*         method: config.method,
-*         headers: config.headers,
-*         ...config
-*       });
-*       // Convert axios-like response to fetch-like Response
-*       return {
-*         ok: response.status >= 200 && response.status < 300,
-*         status: response.status,
-*         statusText: response.statusText,
-*         json: () => Promise.resolve(response.data),
-*         text: () => Promise.resolve(typeof response.data === 'string' ? response.data : JSON.stringify(response.data))
-*       } as Response;
-*     }
-*   });
-*   console.log(schemas);
-* } catch (error) {
-*   if (error instanceof ThunderIDAPIError) {
-*     console.error('Failed to get schemas:', error.message);
-*   }
-* }
-* ```
-*/
-const getSchemas = async ({ url, baseUrl, fetcher,...requestConfig }) => {
-	try {
-		new URL(url ?? baseUrl);
-	} catch (error$1) {
-		throw new ThunderIDAPIError(`Invalid URL provided. ${error$1?.toString()}`, "getSchemas-ValidationError-001", "javascript", 400, "The provided `url` or `baseUrl` path does not adhere to the URL schema.");
-	}
-	const fetchFn = fetcher || fetch;
-	const resolvedUrl = url ?? `${baseUrl}/scim2/Schemas`;
-	const requestInit = {
-		...requestConfig,
-		headers: {
-			Accept: "application/json",
-			"Content-Type": "application/json",
-			...requestConfig.headers
-		},
-		method: "GET"
-	};
-	try {
-		const response = await fetchFn(resolvedUrl, requestInit);
-		if (!response?.ok) throw new ThunderIDAPIError(await response.text(), "getSchemas-ResponseError-001", "javascript", response.status, response.statusText, "Failed to fetch SCIM2 schemas");
-		return await response.json();
-	} catch (error$1) {
-		if (error$1 instanceof ThunderIDAPIError) throw error$1;
-		throw new ThunderIDAPIError(`Network or parsing error: ${error$1 instanceof Error ? error$1.message : "Unknown error"}`, "getSchemas-NetworkError-001", "javascript", 0, "Network Error");
-	}
-};
-var getSchemas_default = getSchemas;
-
-//#endregion
-//#region src/api/getAllOrganizations.ts
-/**
-* Retrieves all organizations with pagination support.
-*
-* @param config - Configuration object containing baseUrl, optional query parameters, and request config.
-* @returns A promise that resolves with the paginated organizations information.
-* @example
-* ```typescript
-* // Using default fetch
-* try {
-*   const response = await getAllOrganizations({
-*     baseUrl: "https://localhost:8090",
-*     filter: "",
-*     limit: 10,
-*     recursive: false
-*   });
-*   console.log(response.organizations);
-* } catch (error) {
-*   if (error instanceof ThunderIDAPIError) {
-*     console.error('Failed to get organizations:', error.message);
-*   }
-* }
-* ```
-*
-* @example
-* ```typescript
-* // Using custom fetcher (e.g., axios-based httpClient)
-* try {
-*   const response = await getAllOrganizations({
-*     baseUrl: "https://localhost:8090",
-*     filter: "",
-*     limit: 10,
-*     recursive: false,
-*     fetcher: async (url, config) => {
-*       const response = await httpClient({
-*         url,
-*         method: config.method,
-*         headers: config.headers,
-*         ...config
-*       });
-*       // Convert axios-like response to fetch-like Response
-*       return {
-*         ok: response.status >= 200 && response.status < 300,
-*         status: response.status,
-*         statusText: response.statusText,
-*         json: () => Promise.resolve(response.data),
-*         text: () => Promise.resolve(typeof response.data === 'string' ? response.data : JSON.stringify(response.data))
-*       } as Response;
-*     }
-*   });
-*   console.log(response.organizations);
-* } catch (error) {
-*   if (error instanceof ThunderIDAPIError) {
-*     console.error('Failed to get organizations:', error.message);
-*   }
-* }
-* ```
-*/
-const getAllOrganizations = async ({ baseUrl, filter = "", limit = 10, recursive = false, fetcher,...requestConfig }) => {
-	try {
-		new URL(baseUrl);
-	} catch (error$1) {
-		throw new ThunderIDAPIError(`Invalid base URL provided. ${error$1?.toString()}`, "getAllOrganizations-ValidationError-001", "javascript", 400, "The provided `baseUrl` does not adhere to the URL schema.");
-	}
-	const queryParams = new URLSearchParams(Object.fromEntries(Object.entries({
-		filter,
-		limit: limit.toString(),
-		recursive: recursive.toString()
-	}).filter(([, value]) => Boolean(value))));
-	const fetchFn = fetcher || fetch;
-	const resolvedUrl = `${baseUrl}/api/server/v1/organizations?${queryParams.toString()}`;
-	const requestInit = {
-		...requestConfig,
-		headers: {
-			...requestConfig.headers,
-			Accept: "application/json",
-			"Content-Type": "application/json"
-		},
-		method: "GET"
-	};
-	try {
-		const response = await fetchFn(resolvedUrl, requestInit);
-		if (!response?.ok) throw new ThunderIDAPIError(await response.text(), "getAllOrganizations-ResponseError-001", "javascript", response.status, response.statusText, "Failed to get organizations");
-		const data = await response.json();
-		return {
-			hasMore: data.hasMore,
-			nextCursor: data.nextCursor,
-			organizations: data.organizations || [],
-			totalCount: data.totalCount
-		};
-	} catch (error$1) {
-		if (error$1 instanceof ThunderIDAPIError) throw error$1;
-		throw new ThunderIDAPIError(`Network or parsing error: ${error$1 instanceof Error ? error$1.message : "Unknown error"}`, "getAllOrganizations-NetworkError-001", "javascript", 0, "Network Error");
-	}
-};
-var getAllOrganizations_default = getAllOrganizations;
-
-//#endregion
-//#region src/api/createOrganization.ts
-/**
-* Creates a new organization.
-*
-* @param config - Configuration object containing baseUrl, payload and optional request config.
-* @returns A promise that resolves with the created organization information.
-* @example
-* ```typescript
-* // Using default fetch
-* try {
-*   const organization = await createOrganization({
-*     baseUrl: "https://localhost:8090",
-*     payload: {
-*       description: "Share your screens",
-*       name: "Team Viewer",
-*       orgHandle: "team-viewer",
-*       parentId: "f4825104-4948-40d9-ab65-a960eee3e3d5",
-*       type: "TENANT"
-*     }
-*   });
-*   console.log(organization);
-* } catch (error) {
-*   if (error instanceof ThunderIDAPIError) {
-*     console.error('Failed to create organization:', error.message);
-*   }
-* }
-* ```
-*
-* @example
-* ```typescript
-* // Using custom fetcher (e.g., axios-based httpClient)
-* try {
-*   const organization = await createOrganization({
-*     baseUrl: "https://localhost:8090",
-*     payload: {
-*       description: "Share your screens",
-*       name: "Team Viewer",
-*       orgHandle: "team-viewer",
-*       parentId: "f4825104-4948-40d9-ab65-a960eee3e3d5",
-*       type: "TENANT"
-*     },
-*     fetcher: async (url, config) => {
-*       const response = await httpClient({
-*         url,
-*         method: config.method,
-*         headers: config.headers,
-*         data: config.body,
-*         ...config
-*       });
-*       // Convert axios-like response to fetch-like Response
-*       return {
-*         ok: response.status >= 200 && response.status < 300,
-*         status: response.status,
-*         statusText: response.statusText,
-*         json: () => Promise.resolve(response.data),
-*         text: () => Promise.resolve(typeof response.data === 'string' ? response.data : JSON.stringify(response.data))
-*       } as Response;
-*     }
-*   });
-*   console.log(organization);
-* } catch (error) {
-*   if (error instanceof ThunderIDAPIError) {
-*     console.error('Failed to create organization:', error.message);
-*   }
-* }
-* ```
-*/
-const createOrganization = async ({ baseUrl, payload, fetcher,...requestConfig }) => {
-	try {
-		new URL(baseUrl);
-	} catch (error$1) {
-		throw new ThunderIDAPIError(`Invalid base URL provided. ${error$1?.toString()}`, "createOrganization-ValidationError-001", "javascript", 400, "The provided `baseUrl` does not adhere to the URL schema.");
-	}
-	if (!payload) throw new ThunderIDAPIError("Organization payload is required", "createOrganization-ValidationError-002", "javascript", 400, "Invalid Request");
-	const organizationPayload = {
-		...payload,
-		type: "TENANT"
-	};
-	const fetchFn = fetcher || fetch;
-	const resolvedUrl = `${baseUrl}/api/server/v1/organizations`;
-	const requestInit = {
-		...requestConfig,
-		body: JSON.stringify(organizationPayload),
-		headers: {
-			Accept: "application/json",
-			"Content-Type": "application/json",
-			...requestConfig.headers
-		},
-		method: "POST"
-	};
-	try {
-		const response = await fetchFn(resolvedUrl, requestInit);
-		if (!response?.ok) throw new ThunderIDAPIError(await response.text(), "createOrganization-ResponseError-001", "javascript", response.status, response.statusText, "Failed to create organization");
-		return await response.json();
-	} catch (error$1) {
-		if (error$1 instanceof ThunderIDAPIError) throw error$1;
-		throw new ThunderIDAPIError(`Network or parsing error: ${error$1 instanceof Error ? error$1.message : "Unknown error"}`, "createOrganization-NetworkError-001", "javascript", 0, "Network Error");
-	}
-};
-var createOrganization_default = createOrganization;
-
-//#endregion
-//#region src/api/getMeOrganizations.ts
-/**
-* Retrieves the organizations associated with the current user.
-*
-* @param config - Configuration object containing baseUrl, optional query parameters, and request config.
-* @returns A promise that resolves with the organizations information.
-* @example
-* ```typescript
-* // Using default fetch
-* try {
-*   const organizations = await getMeOrganizations({
-*     baseUrl: "https://localhost:8090",
-*     after: "",
-*     before: "",
-*     filter: "",
-*     limit: 10,
-*     recursive: false
-*   });
-*   console.log(organizations);
-* } catch (error) {
-*   if (error instanceof ThunderIDAPIError) {
-*     console.error('Failed to get organizations:', error.message);
-*   }
-* }
-* ```
-*
-* @example
-* ```typescript
-* // Using custom fetcher (e.g., axios-based httpClient)
-* try {
-*   const organizations = await getMeOrganizations({
-*     baseUrl: "https://localhost:8090",
-*     after: "",
-*     before: "",
-*     filter: "",
-*     limit: 10,
-*     recursive: false,
-*     fetcher: async (url, config) => {
-*       const response = await httpClient({
-*         url,
-*         method: config.method,
-*         headers: config.headers,
-*         ...config
-*       });
-*       // Convert axios-like response to fetch-like Response
-*       return {
-*         ok: response.status >= 200 && response.status < 300,
-*         status: response.status,
-*         statusText: response.statusText,
-*         json: () => Promise.resolve(response.data),
-*         text: () => Promise.resolve(typeof response.data === 'string' ? response.data : JSON.stringify(response.data))
-*       } as Response;
-*     }
-*   });
-*   console.log(organizations);
-* } catch (error) {
-*   if (error instanceof ThunderIDAPIError) {
-*     console.error('Failed to get organizations:', error.message);
-*   }
-* }
-* ```
-*/
-const getMeOrganizations = async ({ baseUrl, after = "", authorizedAppName = "", before = "", filter = "", limit = 10, recursive = false, fetcher,...requestConfig }) => {
-	try {
-		new URL(baseUrl);
-	} catch (error$1) {
-		throw new ThunderIDAPIError(`Invalid base URL provided. ${error$1?.toString()}`, "getMeOrganizations-ValidationError-001", "javascript", 400, "The provided `baseUrl` does not adhere to the URL schema.");
-	}
-	const queryParams = new URLSearchParams(Object.fromEntries(Object.entries({
-		after,
-		authorizedAppName,
-		before,
-		filter,
-		limit: limit.toString(),
-		recursive: recursive.toString()
-	}).filter(([, value]) => Boolean(value))));
-	const fetchFn = fetcher || fetch;
-	const resolvedUrl = `${baseUrl}/api/users/v1/me/organizations?${queryParams.toString()}`;
-	const requestInit = {
-		...requestConfig,
-		headers: {
-			Accept: "application/json",
-			"Content-Type": "application/json",
-			...requestConfig.headers
-		},
-		method: "GET"
-	};
-	try {
-		const response = await fetchFn(resolvedUrl, requestInit);
-		if (!response?.ok) throw new ThunderIDAPIError(await response.text(), "getMeOrganizations-ResponseError-001", "javascript", response.status, response.statusText, "Failed to fetch associated organizations of the user");
-		return (await response.json())["organizations"] || [];
-	} catch (error$1) {
-		if (error$1 instanceof ThunderIDAPIError) throw error$1;
-		throw new ThunderIDAPIError(`Network or parsing error: ${error$1 instanceof Error ? error$1.message : "Unknown error"}`, "getMeOrganizations-NetworkError-001", "javascript", 0, "Network Error");
-	}
-};
-var getMeOrganizations_default = getMeOrganizations;
-
-//#endregion
-//#region src/api/getOrganization.ts
-/**
-* Retrieves detailed information for a specific organization.
-*
-* @param config - Configuration object containing baseUrl, organizationId, and request config.
-* @returns A promise that resolves with the organization details.
-* @example
-* ```typescript
-* // Using default fetch
-* try {
-*   const organization = await getOrganization({
-*     baseUrl: "https://localhost:8090",
-*     organizationId: "0d5e071b-d3d3-475d-b3c6-1a20ee2fa9b1"
-*   });
-*   console.log(organization);
-* } catch (error) {
-*   if (error instanceof ThunderIDAPIError) {
-*     console.error('Failed to get organization:', error.message);
-*   }
-* }
-* ```
-*
-* @example
-* ```typescript
-* // Using custom fetcher (e.g., axios-based httpClient)
-* try {
-*   const organization = await getOrganization({
-*     baseUrl: "https://localhost:8090",
-*     organizationId: "0d5e071b-d3d3-475d-b3c6-1a20ee2fa9b1",
-*     fetcher: async (url, config) => {
-*       const response = await httpClient({
-*         url,
-*         method: config.method,
-*         headers: config.headers,
-*         ...config
-*       });
-*       // Convert axios-like response to fetch-like Response
-*       return {
-*         ok: response.status >= 200 && response.status < 300,
-*         status: response.status,
-*         statusText: response.statusText,
-*         json: () => Promise.resolve(response.data),
-*         text: () => Promise.resolve(typeof response.data === 'string' ? response.data : JSON.stringify(response.data))
-*       } as Response;
-*     }
-*   });
-*   console.log(organization);
-* } catch (error) {
-*   if (error instanceof ThunderIDAPIError) {
-*     console.error('Failed to get organization:', error.message);
-*   }
-* }
-* ```
-*/
-const getOrganization = async ({ baseUrl, organizationId, fetcher,...requestConfig }) => {
-	try {
-		new URL(baseUrl);
-	} catch (error$1) {
-		throw new ThunderIDAPIError(`Invalid base URL provided. ${error$1?.toString()}`, "getOrganization-ValidationError-001", "javascript", 400, "The provided `baseUrl` does not adhere to the URL schema.");
-	}
-	if (!organizationId) throw new ThunderIDAPIError("Organization ID is required", "getOrganization-ValidationError-002", "javascript", 400, "Invalid Request");
-	const fetchFn = fetcher || fetch;
-	const resolvedUrl = `${baseUrl}/api/server/v1/organizations/${organizationId}`;
-	const requestInit = {
-		...requestConfig,
-		headers: {
-			Accept: "application/json",
-			"Content-Type": "application/json",
-			...requestConfig.headers
-		},
-		method: "GET"
-	};
-	try {
-		const response = await fetchFn(resolvedUrl, requestInit);
-		if (!response?.ok) throw new ThunderIDAPIError(await response.text(), "getOrganization-ResponseError-001", "javascript", response.status, response.statusText, "Failed to fetch organization details");
-		return await response.json();
-	} catch (error$1) {
-		if (error$1 instanceof ThunderIDAPIError) throw error$1;
-		throw new ThunderIDAPIError(`Network or parsing error: ${error$1 instanceof Error ? error$1.message : "Unknown error"}`, "getOrganization-NetworkError-001", "javascript", 0, "Network Error");
-	}
-};
-var getOrganization_default = getOrganization;
-
-//#endregion
-//#region src/utils/isEmpty.ts
-/**
-* Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
-*/
-/**
-* Checks if a value is considered empty.
-*
-* A value is considered empty if it is:
-* - null
-* - undefined
-* - empty string ("")
-* - string containing only whitespace characters
-* - empty array ([])
-* - empty object ({})
-*
-* @param value - The value to check
-* @returns true if the value is empty, false otherwise
-*
-* @example
-* ```typescript
-* isEmpty(null);              // true
-* isEmpty(undefined);         // true
-* isEmpty("");                // true
-* isEmpty("   ");             // true
-* isEmpty("hello");           // false
-* isEmpty([]);                // true
-* isEmpty([1, 2, 3]);         // false
-* isEmpty({});                // true
-* isEmpty({ name: "John" });  // false
-* isEmpty(0);                 // false
-* isEmpty(false);             // false
-* ```
-*/
-const isEmpty = (value) => {
-	if (value === null || value === void 0) return true;
-	if (typeof value === "string") return value.trim() === "";
-	if (Array.isArray(value)) return value.length === 0;
-	if (typeof value === "object" && value.constructor === Object) return Object.keys(value).length === 0;
-	return false;
-};
-var isEmpty_default = isEmpty;
-
-//#endregion
-//#region src/api/updateOrganization.ts
-/**
-* Updates the organization information using the Organizations Management API.
-*
-* @param config - Configuration object with baseUrl, organizationId, operations and optional request config.
-* @returns A promise that resolves with the updated organization information.
-* @example
-* ```typescript
-* // Using the helper function to create operations automatically
-* const operations = createPatchOperations({
-*   name: "Updated Organization Name",      // Will use REPLACE
-*   description: "",                        // Will use REMOVE (empty string)
-*   customField: "Some value"              // Will use REPLACE
-* });
-*
-* await updateOrganization({
-*   baseUrl: "https://localhost:8090",
-*   organizationId: "0d5e071b-d3d3-475d-b3c6-1a20ee2fa9b1",
-*   operations
-* });
-*
-* // Or manually specify operations
-* await updateOrganization({
-*   baseUrl: "https://localhost:8090",
-*   organizationId: "0d5e071b-d3d3-475d-b3c6-1a20ee2fa9b1",
-*   operations: [
-*     { operation: "REPLACE", path: "/name", value: "Updated Organization Name" },
-*     { operation: "REMOVE", path: "/description" }
-*   ]
-* });
-* ```
-*
-* @example
-* ```typescript
-* // Using custom fetcher (e.g., axios-based httpClient)
-* await updateOrganization({
-*   baseUrl: "https://localhost:8090",
-*   organizationId: "0d5e071b-d3d3-475d-b3c6-1a20ee2fa9b1",
-*   operations: [
-*     { operation: "REPLACE", path: "/name", value: "Updated Organization Name" }
-*   ],
-*   fetcher: async (url, config) => {
-*     const response = await httpClient({
-*       url,
-*       method: config.method,
-*       headers: config.headers,
-*       data: config.body,
-*       ...config
-*     });
-*     // Convert axios-like response to fetch-like Response
-*     return {
-*       ok: response.status >= 200 && response.status < 300,
-*       status: response.status,
-*       statusText: response.statusText,
-*       json: () => Promise.resolve(response.data),
-*       text: () => Promise.resolve(typeof response.data === 'string' ? response.data : JSON.stringify(response.data))
-*     } as Response;
-*   }
-* });
-* ```
-*/
-const updateOrganization = async ({ baseUrl, organizationId, operations, fetcher,...requestConfig }) => {
-	try {
-		new URL(baseUrl);
-	} catch (error$1) {
-		throw new ThunderIDAPIError(`Invalid base URL provided. ${error$1?.toString()}`, "updateOrganization-ValidationError-001", "javascript", 400, "The provided `baseUrl` does not adhere to the URL schema.");
-	}
-	if (!organizationId) throw new ThunderIDAPIError("Organization ID is required", "updateOrganization-ValidationError-002", "javascript", 400, "Invalid Request");
-	if (!operations || !Array.isArray(operations) || operations.length === 0) throw new ThunderIDAPIError("Operations array is required and cannot be empty", "updateOrganization-ValidationError-003", "javascript", 400, "Invalid Request");
-	const fetchFn = fetcher || fetch;
-	const resolvedUrl = `${baseUrl}/api/server/v1/organizations/${organizationId}`;
-	const requestInit = {
-		...requestConfig,
-		body: JSON.stringify(operations),
-		headers: {
-			Accept: "application/json",
-			"Content-Type": "application/json",
-			...requestConfig.headers
-		},
-		method: "PATCH"
-	};
-	try {
-		const response = await fetchFn(resolvedUrl, requestInit);
-		if (!response?.ok) throw new ThunderIDAPIError(await response.text(), "updateOrganization-ResponseError-001", "javascript", response.status, response.statusText, "Failed to update organization");
-		return await response.json();
-	} catch (error$1) {
-		if (error$1 instanceof ThunderIDAPIError) throw error$1;
-		throw new ThunderIDAPIError(`Network or parsing error: ${error$1 instanceof Error ? error$1.message : "Unknown error"}`, "updateOrganization-NetworkError-001", "javascript", 0, "Network Error");
-	}
-};
-/**
-* Helper function to convert field updates to patch operations format.
-* Uses REMOVE operation when the value is empty, otherwise uses REPLACE.
-*
-* @param payload - Object containing field updates
-* @returns Array of patch operations
-*/
-const createPatchOperations = (payload) => Object.entries(payload).map(([key, value]) => {
-	if (isEmpty_default(value)) return {
-		operation: "REMOVE",
-		path: `/${key}`
-	};
-	return {
-		operation: "REPLACE",
-		path: `/${key}`,
-		value
-	};
-});
-var updateOrganization_default = updateOrganization;
-
-//#endregion
-//#region src/api/updateMeProfile.ts
-/**
-* Updates the user profile information at the specified SCIM2 Me endpoint.
-*
-* @param config - Configuration object with URL, payload and optional request config.
-* @returns A promise that resolves with the updated user profile information.
-* @example
-* ```typescript
-* // Using default fetch
-* await updateMeProfile({
-*   url: "https://localhost:8090/scim2/Me",
-*   payload: { "urn:scim:wso2:schema": { mobileNumbers: ["0777933830"] } }
-* });
-* ```
-*
-* @example
-* ```typescript
-* // Using custom fetcher (e.g., axios-based httpClient)
-* await updateMeProfile({
-*   url: "https://localhost:8090/scim2/Me",
-*   payload: { "urn:scim:wso2:schema": { mobileNumbers: ["0777933830"] } },
-*   fetcher: async (url, config) => {
-*     const response = await httpClient({
-*       url,
-*       method: config.method,
-*       headers: config.headers,
-*       data: config.body,
-*       ...config
-*     });
-*     // Convert axios-like response to fetch-like Response
-*     return {
-*       ok: response.status >= 200 && response.status < 300,
-*       status: response.status,
-*       statusText: response.statusText,
-*       json: () => Promise.resolve(response.data),
-*       text: () => Promise.resolve(typeof response.data === 'string' ? response.data : JSON.stringify(response.data))
-*     } as Response;
-*   }
-* });
-* ```
-*/
-const updateMeProfile = async ({ url, baseUrl, payload, fetcher,...requestConfig }) => {
-	try {
-		new URL(url ?? baseUrl);
-	} catch (error$1) {
-		throw new ThunderIDAPIError(`Invalid URL provided. ${error$1?.toString()}`, "updateMeProfile-ValidationError-001", "javascript", 400, "The provided `url` or `baseUrl` path does not adhere to the URL schema.");
-	}
-	const data = {
-		Operations: [{
-			op: "replace",
-			value: payload
-		}],
-		schemas: ["urn:ietf:params:scim:api:messages:2.0:PatchOp"]
-	};
-	const fetchFn = fetcher || fetch;
-	const resolvedUrl = url ?? `${baseUrl}/scim2/Me`;
-	const requestInit = {
-		method: "PATCH",
-		...requestConfig,
-		body: JSON.stringify(data),
-		headers: {
-			...requestConfig.headers,
-			Accept: "application/json",
-			"Content-Type": "application/scim+json"
-		}
-	};
-	try {
-		const response = await fetchFn(resolvedUrl, requestInit);
-		if (!response?.ok) throw new ThunderIDAPIError(await response.text(), "updateMeProfile-ResponseError-001", "javascript", response.status, response.statusText, "Failed to update user profile");
-		return processUsername_default(await response.json());
-	} catch (error$1) {
-		if (error$1 instanceof ThunderIDAPIError) throw error$1;
-		throw new ThunderIDAPIError(error$1?.response?.data?.detail || "An error occurred while updating the user profile. Please try again.", "updateMeProfile-NetworkError-001", "javascript", error$1?.data?.status, "Network Error");
-	}
-};
-var updateMeProfile_default = updateMeProfile;
-
-//#endregion
-//#region src/models/platforms.ts
-/**
-* Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
-*
-* WSO2 LLC. licenses this file to you under the Apache License,
-* Version 2.0 (the "License"); you may not use this file except
-* in compliance with the License.
-* You may obtain a copy of the License at
-*
-*     http://www.apache.org/licenses/LICENSE-2.0
-*
-* Unless required by applicable law or agreed to in writing,
-* software distributed under the License is distributed on an
-* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-* KIND, either express or implied. See the License for the
-* specific language governing permissions and limitations
-* under the License.
-*/
-/**
-* Enumeration of supported identity platforms.
-*
-* - `ThunderID`: Represents the ThunderID identity platform.
-* - `IdentityServer`: Represents WSO2 Identity Server (on-prem or custom domains).
-* - `Unknown`: Used when the platform cannot be determined from the configuration.
-*/
-let Platform = /* @__PURE__ */ function(Platform$1) {
-	/** ThunderID identity platform */
-	Platform$1["ThunderID"] = "THUNDERID";
-	/** WSO2 Identity Server (on-prem or custom domains) */
-	Platform$1["IdentityServer"] = "IDENTITY_SERVER";
-	/** Unknown or unsupported platform */
-	Platform$1["Unknown"] = "UNKNOWN";
-	return Platform$1;
-}({});
-
-//#endregion
-//#region src/utils/logger.ts
-const PREFIX = "⚡ ThunderID";
-/**
-* Default logger configuration
-*/
-const DEFAULT_CONFIG$1 = {
-	level: "info",
-	prefix: `${PREFIX}`,
-	showLevel: true,
-	timestamps: true
-};
-/**
-* Environment detection utilities
-*/
-const isBrowser = () => typeof window !== "undefined" && typeof window.document !== "undefined";
-const isNode = () => typeof process !== "undefined" && void 0;
-/**
-* Color codes for terminal output (Node.js)
-*/
-const COLORS = {
-	blue: "\x1B[34m",
-	bright: "\x1B[1m",
-	cyan: "\x1B[36m",
-	dim: "\x1B[2m",
-	gray: "\x1B[90m",
-	green: "\x1B[32m",
-	magenta: "\x1B[35m",
-	red: "\x1B[31m",
-	reset: "\x1B[0m",
-	white: "\x1B[37m",
-	yellow: "\x1B[33m"
-};
-/**
-* Browser console styling
-*/
-const BROWSER_STYLES = {
-	debug: "color: #6b7280; font-weight: normal;",
-	error: "color: #dc2626; font-weight: bold;",
-	info: "color: #2563eb; font-weight: bold;",
-	prefix: "color: #7c3aed; font-weight: bold;",
-	timestamp: "color: #6b7280; font-size: 0.9em;",
-	warn: "color: #d97706; font-weight: bold;"
-};
-const LOG_LEVEL_ORDER = {
-	debug: 0,
-	error: 3,
-	info: 1,
-	warn: 2
-};
-/**
-* Universal logger class that works in both browser and Node.js environments
-*/
-var Logger = class Logger {
-	config;
-	constructor(config = {}) {
-		this.config = {
-			...DEFAULT_CONFIG$1,
-			...config
-		};
-	}
-	/**
-	* Update logger configuration
-	*/
-	configure(config) {
-		this.config = {
-			...this.config,
-			...config
-		};
-	}
-	/**
-	* Get current configuration
-	*/
-	getConfig() {
-		return { ...this.config };
-	}
-	/**
-	* Check if a log level should be output
-	*/
-	shouldLog(level) {
-		return LOG_LEVEL_ORDER[level] >= LOG_LEVEL_ORDER[this.config.level];
-	}
-	/**
-	* Get timestamp string
-	*/
-	static getTimestamp() {
-		return (/* @__PURE__ */ new Date()).toISOString();
-	}
-	/**
-	* Get log level string
-	*/
-	static getLevelString(level) {
-		switch (level) {
-			case "debug": return "DEBUG";
-			case "info": return "INFO";
-			case "warn": return "WARN";
-			case "error": return "ERROR";
-			default: return "UNKNOWN";
-		}
-	}
-	/**
-	* Format message for Node.js terminal
-	*/
-	formatForNode(level, message) {
-		const parts = [];
-		if (this.config.timestamps) parts.push(`${COLORS.gray}[${Logger.getTimestamp()}]${COLORS.reset}`);
-		if (this.config.prefix) parts.push(`${COLORS.magenta}${this.config.prefix}${COLORS.reset}`);
-		if (this.config.showLevel) {
-			const levelStr = Logger.getLevelString(level);
-			let coloredLevel;
-			switch (level) {
-				case "debug":
-					coloredLevel = `${COLORS.gray}[${levelStr}]${COLORS.reset}`;
-					break;
-				case "info":
-					coloredLevel = `${COLORS.blue}[${levelStr}]${COLORS.reset}`;
-					break;
-				case "warn":
-					coloredLevel = `${COLORS.yellow}[${levelStr}]${COLORS.reset}`;
-					break;
-				case "error":
-					coloredLevel = `${COLORS.red}[${levelStr}]${COLORS.reset}`;
-					break;
-				default: coloredLevel = `[${levelStr}]`;
-			}
-			parts.push(coloredLevel);
-		}
-		parts.push(message);
-		return parts.join(" ");
-	}
-	/**
-	* Log message using appropriate method
-	*/
-	logMessage(level, message, ...args) {
-		if (!this.shouldLog(level)) return;
-		if (this.config.formatter) {
-			this.config.formatter(level, message, ...args);
-			return;
-		}
-		if (isBrowser()) this.logToBrowser(level, message, ...args);
-		else if (isNode()) this.logToNode(level, message, ...args);
-		else console.log(message, ...args);
-	}
-	/**
-	* Log to browser console with styling
-	*/
-	logToBrowser(level, message, ...args) {
-		const parts = [];
-		const styles = [];
-		if (this.config.timestamps) {
-			parts.push(`%c[${Logger.getTimestamp()}]`);
-			styles.push(BROWSER_STYLES.timestamp);
-		}
-		if (this.config.prefix) {
-			parts.push(`%c${this.config.prefix}`);
-			styles.push(BROWSER_STYLES.prefix);
-		}
-		if (this.config.showLevel) {
-			const levelStr = Logger.getLevelString(level);
-			parts.push(`%c[${levelStr}]`);
-			switch (level) {
-				case "debug":
-					styles.push(BROWSER_STYLES.debug);
-					break;
-				case "info":
-					styles.push(BROWSER_STYLES.info);
-					break;
-				case "warn":
-					styles.push(BROWSER_STYLES.warn);
-					break;
-				case "error":
-					styles.push(BROWSER_STYLES.error);
-					break;
-				default: styles.push("");
-			}
-		}
-		parts.push(`%c${message}`);
-		styles.push("color: inherit; font-weight: normal;");
-		const formattedMessage = parts.join(" ");
-		switch (level) {
-			case "debug":
-				console.debug(formattedMessage, ...styles, ...args);
-				break;
-			case "info":
-				console.info(formattedMessage, ...styles, ...args);
-				break;
-			case "warn":
-				console.warn(formattedMessage, ...styles, ...args);
-				break;
-			case "error":
-				console.error(formattedMessage, ...styles, ...args);
-				break;
-			default: console.log(formattedMessage, ...styles, ...args);
-		}
-	}
-	/**
-	* Log to Node.js console
-	*/
-	logToNode(level, message, ...args) {
-		const formattedMessage = this.formatForNode(level, message);
-		switch (level) {
-			case "debug":
-				console.debug(formattedMessage, ...args);
-				break;
-			case "info":
-				console.info(formattedMessage, ...args);
-				break;
-			case "warn":
-				console.warn(formattedMessage, ...args);
-				break;
-			case "error":
-				console.error(formattedMessage, ...args);
-				break;
-			default: console.log(formattedMessage, ...args);
-		}
-	}
-	/**
-	* Log debug message
-	*/
-	debug(message, ...args) {
-		this.logMessage("debug", message, ...args);
-	}
-	/**
-	* Log info message
-	*/
-	info(message, ...args) {
-		this.logMessage("info", message, ...args);
-	}
-	/**
-	* Log warning message
-	*/
-	warn(message, ...args) {
-		this.logMessage("warn", message, ...args);
-	}
-	/**
-	* Log error message
-	*/
-	error(message, ...args) {
-		this.logMessage("error", message, ...args);
-	}
-	/**
-	* Create a child logger with additional prefix
-	*/
-	child(prefix) {
-		const childPrefix = this.config.prefix ? `${this.config.prefix} - ${prefix}` : prefix;
-		return new Logger({
-			...this.config,
-			prefix: childPrefix
-		});
-	}
-	/**
-	* Set log level
-	*/
-	setLevel(level) {
-		this.config.level = level;
-	}
-	/**
-	* Get current log level
-	*/
-	getLevel() {
-		return this.config.level;
-	}
-};
-/**
-* Default logger instance
-*/
-const logger = new Logger();
-/**
-* Create a new logger instance with custom configuration
-*/
-const createLogger = (config) => new Logger(config);
-/**
-* Default export - global logger instance
-*/
-var logger_default = logger;
-/**
-* Named exports for convenience
-*/
-const debug = (message, ...args) => logger.debug(message, ...args);
-const info = (message, ...args) => logger.info(message, ...args);
-const warn = (message, ...args) => logger.warn(message, ...args);
-const error = (message, ...args) => logger.error(message, ...args);
-/**
-* Configure the default logger
-*/
-const configure = (config) => logger.configure(config);
-/**
-* Create component-specific loggers
-*/
-const createComponentLogger = (component) => logger.child(component);
-/**
-* Create package-specific logger
-*/
-const createPackageLogger = (packageName) => createLogger({
-	level: "info",
-	prefix: `${PREFIX} - ${packageName}`,
-	showLevel: true,
-	timestamps: true
-});
-/**
-* Create package component logger (package + component)
-*/
-const createPackageComponentLogger = (packageName, component) => {
-	return createPackageLogger(packageName).child(component);
-};
-
-//#endregion
-//#region src/errors/ThunderIDRuntimeError.ts
-/**
-* Base class for all runtime errors in ThunderID. This class extends ThunderIDError
-* and adds support for additional error details. Use this class for errors that occur
-* during runtime execution that are not related to API calls.
-*
-* @example
-* ```typescript
-* throw new ThunderIDRuntimeError(
-*   "Failed to parse configuration",
-*   "CONFIG_PARSE_ERROR",
-*   { invalidField: "redirectUri" }
-* );
-* ```
-*/
-var ThunderIDRuntimeError = class extends ThunderIDError {
-	/**
-	* Creates an instance of ThunderIDRuntimeError.
-	*
-	* @param message - Human-readable description of the error
-	* @param code - A unique error code that identifies the error type
-	* @param details - Additional details about the error that might be helpful for debugging
-	* @param origin - Optional. The SDK origin (e.g. 'react', 'vue'). Defaults to generic 'ThunderID'
-	* @constructor
-	*/
-	constructor(message, code, origin, details) {
-		super(message, code, origin);
-		this.details = details;
-		Object.defineProperty(this, "name", {
-			configurable: true,
-			value: "ThunderIDRuntimeError",
-			writable: true
-		});
-	}
-	/**
-	* Returns a string representation of the runtime error
-	* @returns Formatted error string with name, code, details, and message
-	*/
-	toString() {
-		const details = this.details ? `\nDetails: ${JSON.stringify(this.details, null, 2)}` : "";
-		return `[${this.name}] (code="${this.code}")${details}\nMessage: ${this.message}`;
-	}
-};
-
-//#endregion
-//#region src/utils/isRecognizedBaseUrlPattern.ts
-/**
-* Utility to determine if sensible ThunderID fallbacks can be used based on the given base URL.
-*
-* This checks if the URL follows the standard ThunderID pattern: /t/{orgHandle}
-* Returns true if sensible fallbacks (like deriving organization handle, tenant, etc.) can be used, false otherwise.
-*
-* @param baseUrl - The base URL of the ThunderID identity server (string or undefined)
-* @returns boolean - true if sensible fallbacks can be used, false otherwise
-*
-* @example
-* isRecognizedBaseUrlPattern('https://localhost:8090/t/dxlab'); // true
-* isRecognizedBaseUrlPattern('https://custom.example.com/auth'); // false
-*/
-const isRecognizedBaseUrlPattern = (baseUrl) => {
-	if (!baseUrl) throw new ThunderIDRuntimeError("Base URL is required to derive if the `baseUrl` is recognized.", "isRecognizedBaseUrlPattern-ValidationError-001", "javascript", "A valid base URL must be provided to derive if the `baseUrl` is recognized to use the sensible fallbacks.");
-	let parsedUrl;
-	try {
-		parsedUrl = new URL(baseUrl);
-	} catch (error$1) {
-		throw new ThunderIDRuntimeError(`Invalid base URL format: ${baseUrl}`, "isRecognizedBaseUrlPattern-ValidationError-002", "javascript", "The provided base URL does not conform to valid URL syntax.");
-	}
-	const pathSegments = parsedUrl.pathname?.split("/")?.filter((segment) => segment?.length > 0);
-	if (pathSegments.length < 2 || pathSegments[0] !== "t") {
-		logger_default.warn("[isRecognizedBaseUrlPattern] The provided base URL does not follow the expected URL pattern (/t/{orgHandle}).");
-		return false;
-	}
-	return true;
-};
-var isRecognizedBaseUrlPattern_default = isRecognizedBaseUrlPattern;
-
-//#endregion
-//#region src/utils/identifyPlatform.ts
-/**
-* Identifies the platform based on the given base URL.
-*
-* If the URL is recognized and matches the ThunderID domain, returns Platform.ThunderID.
-* Otherwise, returns Platform.IdentityServer.
-*
-* @param baseUrl - The base URL to check
-* @returns Platform enum value
-*/
-const identifyPlatform = (config) => {
-	const { baseUrl } = config;
-	try {
-		if (isRecognizedBaseUrlPattern_default(baseUrl)) {
-			try {
-				const url = new URL(baseUrl);
-				if (/\.thunderid\.io$/i.test(url.hostname) || /thunderid\.io$/i.test(url.hostname)) return Platform.ThunderID;
-			} catch {
-				logger_default.debug(`[identifyPlatform] Could not identify platform from the base URL: ${baseUrl}. Defaulting to WSO2 Identity Server as the platform.`);
-			}
-			return Platform.IdentityServer;
-		}
-		return Platform.Unknown;
-	} catch (error$1) {
-		logger_default.debug(`[identifyPlatform] Error identifying platform from base URL: ${baseUrl}. Error: ${error$1.message}`);
-		return Platform.Unknown;
-	}
-};
-var identifyPlatform_default = identifyPlatform;
-
-//#endregion
-//#region src/api/getBrandingPreference.ts
-/**
-* Retrieves branding preference configuration.
-*
-* @param config - Configuration object containing baseUrl, optional query parameters, and request config.
-* @returns A promise that resolves with the branding preference information.
-* @example
-* ```typescript
-* // Using default fetch
-* try {
-*   const response = await getBrandingPreference({
-*     baseUrl: "https://localhost:8090",
-*     locale: "en-US",
-*     name: "my-branding",
-*     type: "org"
-*   });
-*   console.log(response.theme);
-* } catch (error) {
-*   if (error instanceof ThunderIDAPIError) {
-*     console.error('Failed to get branding preference:', error.message);
-*   }
-* }
-* ```
-*
-* @example
-* ```typescript
-* // Using custom fetcher (e.g., axios-based httpClient)
-* try {
-*   const response = await getBrandingPreference({
-*     baseUrl: "https://localhost:8090",
-*     locale: "en-US",
-*     name: "my-branding",
-*     type: "org",
-*     fetcher: async (url, config) => {
-*       const response = await httpClient({
-*         url,
-*         method: config.method,
-*         headers: config.headers,
-*         ...config
-*       });
-*       // Convert axios-like response to fetch-like Response
-*       return {
-*         ok: response.status >= 200 && response.status < 300,
-*         status: response.status,
-*         statusText: response.statusText,
-*         json: () => Promise.resolve(response.data),
-*         text: () => Promise.resolve(typeof response.data === 'string' ? response.data : JSON.stringify(response.data))
-*       } as Response;
-*     }
+* @param requestConfig - Request configuration object.
+* @returns A promise that resolves with the user information.
+* @throw
+*   const userInfo = await getUserInfo({
+*     url: "https://localhost:8090/oauth2/userinfo",
 *   });
-*   console.log(response.theme);
+*   console.log(userInfo);
 * } catch (error) {
 *   if (error instanceof ThunderIDAPIError) {
-*     console.error('Failed to get branding preference:', error.message);
-*   }
-* }
-* ```
-*/
-const getBrandingPreference = async ({ baseUrl, locale, name, type, fetcher,...requestConfig }) => {
-	try {
-		new URL(baseUrl);
-	} catch (error$1) {
-		throw new ThunderIDAPIError(`Invalid base URL provided. ${error$1?.toString()}`, "getBrandingPreference-ValidationError-001", "javascript", 400, "The provided `baseUrl` does not adhere to the URL schema.");
-	}
-	const queryParams = new URLSearchParams(Object.fromEntries(Object.entries({
-		locale: locale || "",
-		name: name || "",
-		type: type || ""
-	}).filter(([, value]) => Boolean(value))));
-	const fetchFn = fetcher || fetch;
-	const resolvedUrl = `${baseUrl}/api/server/v1/branding-preference/resolve${queryParams.toString() ? `?${queryParams.toString()}` : ""}`;
-	const requestInit = {
-		...requestConfig,
-		headers: {
-			Accept: "application/json",
-			"Content-Type": "application/json",
-			...requestConfig.headers
-		},
-		method: "GET"
-	};
-	try {
-		const response = await fetchFn(resolvedUrl, requestInit);
-		if (!response?.ok) {
-			const errorText = await response.text();
-			const platform = identifyPlatform_default({ baseUrl });
-			let errorDescription;
-			try {
-				const errorBody = JSON.parse(errorText);
-				errorDescription = errorBody?.description || errorBody?.message || errorText;
-			} catch {
-				errorDescription = errorText;
-			}
-			let platformConsoleGuidance;
-			if (platform === Platform.ThunderID) platformConsoleGuidance = "configure branding preferences in the ThunderID console";
-			else if (platform === Platform.IdentityServer) platformConsoleGuidance = "configure branding preferences in the WSO2 Identity Server console";
-			else platformConsoleGuidance = "configure branding preferences in the platform console";
-			logger_default.warn(`[BrandingError] ${errorDescription} To resolve this issue, please ${platformConsoleGuidance}. If you want to suppress this warning and stop fetching branding preferences, set \`<ThunderIDProvider>\` -> \`preferences\` -> \`theme\` -> \`inheritFromBranding\` to false.`);
-			throw new ThunderIDAPIError(errorText, "getBrandingPreference-ResponseError-001", "javascript", response.status, response.statusText, "Failed to get branding preference");
-		}
-		return await response.json();
-	} catch (error$1) {
-		if (error$1 instanceof ThunderIDAPIError) throw error$1;
-		throw new ThunderIDAPIError(`Network or parsing error: ${error$1 instanceof Error ? error$1.message : "Unknown error"}`, "getBrandingPreference-NetworkError-001", "javascript", 0, "Network Error");
-	}
-};
-var getBrandingPreference_default = getBrandingPreference;
-
-//#endregion
-//#region src/models/v2/embedded-signin-flow-v2.ts
-/**
-* Status enumeration for ThunderID embedded sign-in flow operations.
-*
-* These statuses indicate the current state of the sign-in flow and determine
-* the next action required by the client application. Each status provides
-* specific guidance on how to proceed with the authentication process.
-*
-* @example
-* ```typescript
-* switch (response.flowStatus) {
-*   case EmbeddedSignInFlowStatus.Incomplete:
-*     // More user input needed - render form components
-*     break;
-*   case EmbeddedSignInFlowStatus.Complete:
-*     // Authentication successful - handle completion
-*     break;
-*   case EmbeddedSignInFlowStatus.Error:
-*     // Authentication failed - show error message
-*     break;
-* }
-* ```
-*
-* @experimental Part of the new ThunderID API
-*/
-let EmbeddedSignInFlowStatus$1 = /* @__PURE__ */ function(EmbeddedSignInFlowStatus$2) {
-	/**
-	* Sign-in flow completed successfully.
-	*
-	* The user has been authenticated and the flow can proceed to
-	* OAuth2 completion or redirection. Check for redirectUrl or
-	* assertion data in the response.
-	*/
-	EmbeddedSignInFlowStatus$2["Complete"] = "COMPLETE";
-	/**
-	* Sign-in flow encountered an error.
-	*
-	* Authentication failed due to invalid credentials, system error,
-	* or other issues. Check error details in the response and handle
-	* appropriately (retry, show error message, etc.).
-	*/
-	EmbeddedSignInFlowStatus$2["Error"] = "ERROR";
-	/**
-	* Sign-in flow requires additional user input.
-	*
-	* More authentication steps are needed. The response will contain
-	* components in data.meta.components that should be rendered to
-	* collect additional user input (e.g., MFA, password, etc.).
-	*/
-	EmbeddedSignInFlowStatus$2["Incomplete"] = "INCOMPLETE";
-	return EmbeddedSignInFlowStatus$2;
-}({});
-/**
-* Type enumeration for ThunderID embedded sign-in flow responses.
-*
-* Determines the nature of the flow response and how the client should
-* handle the returned data. This affects both UI rendering and flow
-* continuation logic.
-*
-* @experimental Part of the new ThunderID API
-*/
-let EmbeddedSignInFlowType$1 = /* @__PURE__ */ function(EmbeddedSignInFlowType$2) {
-	/**
-	* Response requires external redirection.
-	*
-	* Used for social login providers, external identity providers,
-	* or other flows that require navigating to an external URL.
-	* The response will contain redirection information.
-	*/
-	EmbeddedSignInFlowType$2["Redirection"] = "REDIRECTION";
-	/**
-	* Response contains view components for rendering.
-	*
-	* Standard embedded flow response containing UI components
-	* that should be rendered within the current application
-	* context. Most common type for embedded authentication.
-	*/
-	EmbeddedSignInFlowType$2["View"] = "VIEW";
-	return EmbeddedSignInFlowType$2;
-}({});
+*     console.error('Failed to get user info:', error.message);
+*   }
+* }
+* ```
+*/
+const getUserInfo = async ({ url,...requestConfig }) => {
+	try {
+		new URL(url);
+	} catch (error$1) {
+		throw new ThunderIDAPIError("Invalid endpoint URL provided", "getUserInfo-ValidationError-001", "javascript", 400, "Invalid Request");
+	}
+	try {
+		const response = await fetch(url, {
+			...requestConfig,
+			headers: {
+				Accept: "application/json",
+				"Content-Type": "application/json",
+				...requestConfig.headers
+			},
+			method: "GET"
+		});
+		if (!response.ok) throw new ThunderIDAPIError(await response.text(), "getUserInfo-ResponseError-001", "javascript", response.status, response.statusText, "Failed to fetch user info");
+		return await response.json();
+	} catch (error$1) {
+		if (error$1 instanceof ThunderIDAPIError) throw error$1;
+		throw new ThunderIDAPIError(`Network or parsing error: ${error$1 instanceof Error ? error$1.message : "Unknown error"}`, "getUserInfo-NetworkError-001", "javascript", 0, "Network Error");
+	}
+};
+var getUserInfo_default = getUserInfo;
 
 //#endregion
-//#region src/utils/v2/injectRequestedPermissions.ts
+//#region src/utils/processUsername.ts
 /**
-* Copyright (c) 2026, WSO2 LLC. (https://www.wso2.com).
+* Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
 *
 * WSO2 LLC. licenses this file to you under the Apache License,
 * Version 2.0 (the "License"); you may not use this file except
@@ -2108,445 +1103,313 @@ let EmbeddedSignInFlowType$1 = /* @__PURE__ */ function(EmbeddedSignInFlowType$2
 * under the License.
 */
 /**
-* Strips the top-level `scopes` field from a payload and injects it as
-* `inputs.requested_permissions` (space-separated string).
-*
-* The backend reads requested_permissions from UserInputs (the `inputs` map), not a top-level field.
+* Regular expression to match userstore prefixes in usernames.
+* Matches patterns like "DEFAULT/", "ASGARDEO_USER/", "PRIMARY/", etc.
+* The pattern matches any uppercase letters, numbers, and underscores followed by a forward slash.
 */
-const injectRequestedPermissions = (payload) => {
-	const { scopes,...rest } = payload;
-	const normalizedScopes = Array.isArray(scopes) ? scopes.map((s) => String(s).trim()).filter(Boolean).join(" ") : typeof scopes === "string" ? scopes.trim() : "";
-	if (!normalizedScopes) return rest;
-	const existingInputs = rest["inputs"] != null && typeof rest["inputs"] === "object" && !Array.isArray(rest["inputs"]) ? rest["inputs"] : {};
-	return {
-		...rest,
-		inputs: {
-			...existingInputs,
-			requested_permissions: normalizedScopes
-		}
-	};
-};
-var injectRequestedPermissions_default = injectRequestedPermissions;
-
-//#endregion
-//#region src/api/v2/executeEmbeddedSignInFlowV2.ts
-const executeEmbeddedSignInFlowV2 = async ({ url, baseUrl, payload, authId,...requestConfig }) => {
-	if (!payload) throw new ThunderIDAPIError("Authorization payload is required", "executeEmbeddedSignInFlow-ValidationError-002", "javascript", 400, "If an authorization payload is not provided, the request cannot be constructed correctly.");
-	const endpoint = url ?? `${baseUrl}/flow/execute`;
-	const cleanPayload = typeof payload === "object" && payload !== null ? Object.fromEntries(Object.entries(payload).filter(([key]) => key !== "verbose")) : payload;
-	const isNewFlowStart = typeof cleanPayload === "object" && cleanPayload !== null && "applicationId" in cleanPayload && "flowType" in cleanPayload;
-	const hasOnlyFlowId = typeof cleanPayload === "object" && cleanPayload !== null && "executionId" in cleanPayload && Object.keys(cleanPayload).length === 1;
-	const basePayload = isNewFlowStart ? injectRequestedPermissions_default(cleanPayload) : cleanPayload;
-	const requestPayload = isNewFlowStart || hasOnlyFlowId ? {
-		...basePayload,
-		verbose: true
-	} : basePayload;
-	const response = await fetch(endpoint, {
-		...requestConfig,
-		body: JSON.stringify(requestPayload),
-		headers: {
-			Accept: "application/json",
-			"Content-Type": "application/json",
-			...requestConfig.headers
-		},
-		method: requestConfig.method || "POST"
-	});
-	if (!response.ok) throw new ThunderIDAPIError(await response.text(), "executeEmbeddedSignInFlow-ResponseError-001", "javascript", response.status, response.statusText, "Authorization request failed");
-	const flowResponse = await response.json();
-	if (flowResponse.flowStatus === EmbeddedSignInFlowStatus$1.Complete && flowResponse.assertion && authId) try {
-		const oauth2Response = await fetch(`${baseUrl}/oauth2/auth/callback`, {
-			body: JSON.stringify({
-				assertion: flowResponse.assertion,
-				authId
-			}),
-			credentials: "include",
-			headers: {
-				Accept: "application/json",
-				"Content-Type": "application/json",
-				...requestConfig.headers
-			},
-			method: "POST"
-		});
-		if (!oauth2Response.ok) throw new ThunderIDAPIError(await oauth2Response.text(), "executeEmbeddedSignInFlow-OAuth2Error-002", "javascript", oauth2Response.status, oauth2Response.statusText, "OAuth2 authorization failed");
-		const oauth2Result = await oauth2Response.json();
-		return {
-			flowStatus: flowResponse.flowStatus,
-			redirectUrl: oauth2Result["redirect_uri"]
-		};
-	} catch (authError) {
-		if (authError instanceof ThunderIDAPIError) throw authError;
-		throw new ThunderIDAPIError(authError instanceof Error ? authError.message : "Unknown error", "executeEmbeddedSignInFlow-OAuth2Error-001", "javascript", 500, "Failed to complete OAuth2 authorization after successful embedded sign-in flow.", "OAuth2 authorization failed");
-	}
-	return flowResponse;
-};
-var executeEmbeddedSignInFlowV2_default = executeEmbeddedSignInFlowV2;
-
-//#endregion
-//#region src/models/v2/embedded-signup-flow-v2.ts
+const USERSTORE_PREFIX_REGEX = /^[A-Z_][A-Z0-9_]*\//;
 /**
-* Status enumeration for ThunderID embedded sign-up flow operations.
+* Removes userstore prefixes from a username if they exist.
+* This is commonly used to clean usernames returned from SCIM2 endpoints
+* that include userstore prefixes like "DEFAULT/", "ASGARDEO_USER/", "PRIMARY/", etc.
 *
-* These statuses indicate the current state of the registration flow and determine
-* the next action required by the client application. Each status provides specific
-* guidance on how to proceed with the user registration process.
+* @param username - The username string to process
+* @returns The username without the userstore prefix, or the original username if no prefix exists
 *
 * @example
 * ```typescript
-* switch (response.flowStatus) {
-*   case EmbeddedSignUpFlowStatus.Incomplete:
-*     // More user input needed - render registration form components
-*     break;
-*   case EmbeddedSignUpFlowStatus.Complete:
-*     // Registration successful - handle completion
-*     break;
-*   case EmbeddedSignUpFlowStatus.Error:
-*     // Registration failed - show error details
-*     const errorResponse = response as EmbeddedSignUpFlowErrorResponse;
-*     showError(errorResponse.error.description.defaultValue);
-*     break;
-* }
-* ```
+* const cleanUsername = removeUserstorePrefix("DEFAULT/john.doe");
+* console.log(cleanUsername); // "john.doe"
 *
-* @experimental Part of the new ThunderID API
-*/
-let EmbeddedSignUpFlowStatus = /* @__PURE__ */ function(EmbeddedSignUpFlowStatus$1) {
-	/**
-	* Sign-up flow completed successfully.
-	*
-	* The user has successfully registered and the flow can proceed to
-	* OAuth2 completion or redirection. Check for redirectUrl or assertion
-	* data in the response for next steps.
-	*/
-	EmbeddedSignUpFlowStatus$1["Complete"] = "COMPLETE";
-	/**
-	* Sign-up flow encountered an error and cannot proceed.
-	*
-	* Registration failed due to validation errors, duplicate user,
-	* system errors, or other issues. The response will be of type
-	* `EmbeddedSignUpFlowErrorResponse` containing detailed failure
-	* information that can be displayed to the user.
-	*
-	* @see {@link EmbeddedSignUpFlowErrorResponse} for error response structure
-	*/
-	EmbeddedSignUpFlowStatus$1["Error"] = "ERROR";
-	/**
-	* Sign-up flow requires additional user input.
-	*
-	* More registration steps are needed. The response will contain
-	* components in data.meta.components that should be rendered to
-	* collect additional user information (e.g., profile data, verification).
-	*/
-	EmbeddedSignUpFlowStatus$1["Incomplete"] = "INCOMPLETE";
-	return EmbeddedSignUpFlowStatus$1;
-}({});
-/**
-* Type enumeration for ThunderID embedded sign-up flow responses.
+* const thunderidUser = removeUserstorePrefix("ASGARDEO_USER/jane.doe");
+* console.log(thunderidUser); // "jane.doe"
 *
-* Determines the nature of the registration flow response and how the client
-* should handle the returned data. This affects both UI rendering and flow
-* continuation logic during the user registration process.
+* const primaryUser = removeUserstorePrefix("PRIMARY/admin");
+* console.log(primaryUser); // "admin"
 *
-* @experimental Part of the new ThunderID API
+* const alreadyClean = removeUserstorePrefix("user.name");
+* console.log(alreadyClean); // "user.name"
+*
+* const emptyInput = removeUserstorePrefix("");
+* console.log(emptyInput); // ""
+* ```
 */
-let EmbeddedSignUpFlowType = /* @__PURE__ */ function(EmbeddedSignUpFlowType$1) {
-	/**
-	* Response requires external redirection.
-	*
-	* Used for social registration providers, external identity providers,
-	* or other flows that require navigating to an external URL during
-	* the registration process. The response will contain redirection information.
-	*/
-	EmbeddedSignUpFlowType$1["Redirection"] = "REDIRECTION";
-	/**
-	* Response contains view components for rendering.
-	*
-	* Standard embedded registration flow response containing UI components
-	* that should be rendered within the current application context.
-	* Most common type for embedded user registration.
-	*/
-	EmbeddedSignUpFlowType$1["View"] = "VIEW";
-	return EmbeddedSignUpFlowType$1;
-}({});
-
-//#endregion
-//#region src/api/v2/executeEmbeddedSignUpFlowV2.ts
-const executeEmbeddedSignUpFlowV2 = async ({ url, baseUrl, payload, authId,...requestConfig }) => {
-	if (!payload) throw new ThunderIDAPIError("Registration payload is required", "executeEmbeddedSignUpFlow-ValidationError-002", "javascript", 400, "If a registration payload is not provided, the request cannot be constructed correctly.");
-	const endpoint = url ?? `${baseUrl}/flow/execute`;
-	const cleanPayload = typeof payload === "object" && payload !== null ? Object.fromEntries(Object.entries(payload).filter(([key]) => key !== "verbose")) : payload;
-	const isNewFlowStart = typeof cleanPayload === "object" && cleanPayload !== null && "applicationId" in cleanPayload && "flowType" in cleanPayload;
-	const hasOnlyFlowId = typeof cleanPayload === "object" && cleanPayload !== null && "executionId" in cleanPayload && Object.keys(cleanPayload).length === 1;
-	const basePayload = isNewFlowStart ? injectRequestedPermissions_default(cleanPayload) : cleanPayload;
-	const requestPayload = isNewFlowStart || hasOnlyFlowId ? {
-		...basePayload,
-		verbose: true
-	} : basePayload;
-	const response = await fetch(endpoint, {
-		...requestConfig,
-		body: JSON.stringify(requestPayload),
-		headers: {
-			Accept: "application/json",
-			"Content-Type": "application/json",
-			...requestConfig.headers
-		},
-		method: requestConfig.method || "POST"
-	});
-	if (!response.ok) throw new ThunderIDAPIError(await response.text(), "executeEmbeddedSignUpFlow-ResponseError-001", "javascript", response.status, response.statusText, "Registration request failed");
-	const flowResponse = await response.json();
-	if (flowResponse.flowStatus === EmbeddedSignUpFlowStatus.Complete && flowResponse.assertion && authId) try {
-		const oauth2Response = await fetch(`${baseUrl}/oauth2/auth/callback`, {
-			body: JSON.stringify({
-				assertion: flowResponse.assertion,
-				authId
-			}),
-			credentials: "include",
-			headers: {
-				Accept: "application/json",
-				"Content-Type": "application/json",
-				...requestConfig.headers
-			},
-			method: "POST"
-		});
-		if (!oauth2Response.ok) throw new ThunderIDAPIError(await oauth2Response.text(), "executeEmbeddedSignUpFlow-OAuth2Error-002", "javascript", oauth2Response.status, oauth2Response.statusText, "OAuth2 authorization failed");
-		const oauth2Result = await oauth2Response.json();
-		return {
-			flowStatus: flowResponse.flowStatus,
-			redirectUrl: oauth2Result["redirect_uri"]
-		};
-	} catch (authError) {
-		if (authError instanceof ThunderIDAPIError) throw authError;
-		throw new ThunderIDAPIError(authError instanceof Error ? authError.message : "Unknown error", "executeEmbeddedSignUpFlow-OAuth2Error-001", "javascript", 500, "Failed to complete OAuth2 authorization after successful embedded sign-up flow.", "OAuth2 authorization failed");
-	}
-	return flowResponse;
+const removeUserstorePrefix = (username) => {
+	if (!username) return "";
+	return username.replace(USERSTORE_PREFIX_REGEX, "");
 };
-var executeEmbeddedSignUpFlowV2_default = executeEmbeddedSignUpFlowV2;
-
-//#endregion
-//#region src/api/v2/executeEmbeddedRecoveryFlowV2.ts
 /**
-* Executes an embedded recovery flow by sending a request to the flow execution endpoint.
-*
-* This function handles password-recovery and account-recovery flows driven by the
-* ThunderID server. The server returns UI components for each step (e.g. username
-* collection, OTP verification, password reset) and this function forwards the
-* user's responses back to the server.
+* Processes a user object to remove userstore prefixes from username fields.
+* This is a helper function for processing user objects returned from SCIM2 endpoints.
+* Handles various username field variations: username, userName, and user_name.
 *
-* @param requestConfig - Request configuration containing URL, payload, and optional headers.
-* @returns A promise that resolves with the flow execution response.
-* @throws ThunderIDAPIError when the request fails or a payload is missing.
+* @param user - The user object to process
+* @returns The user object with processed username fields
 *
 * @example
 * ```typescript
-* // Initiate recovery flow
-* const response = await executeEmbeddedRecoveryFlowV2({
-*   baseUrl: 'https://localhost:8090',
-*   payload: {
-*     flowType: 'RECOVERY',
-*     applicationId: 'my-app-id',
-*   },
-* });
+* const user = { username: "DEFAULT/john.doe", email: "john@example.com" };
+* const processedUser = processUserUsername(user);
+* console.log(processedUser.username); // "john.doe"
 *
-* // Continue recovery flow with user input
-* const nextResponse = await executeEmbeddedRecoveryFlowV2({
-*   baseUrl: 'https://localhost:8090',
-*   payload: {
-*     executionId: response.executionId,
-*     action: 'submit',
-*     inputs: { username: 'user@example.com' },
-*     challengeToken: response.challengeToken,
-*   },
-* });
+* const camelCaseUser = { userName: "ASGARDEO_USER/jane.doe", email: "jane@example.com" };
+* const processedCamelCaseUser = processUserUsername(camelCaseUser);
+* console.log(processedCamelCaseUser.userName); // "jane.doe"
+*
+* const snakeCaseUser = { user_name: "PRIMARY/admin", email: "admin@example.com" };
+* const processedSnakeCaseUser = processUserUsername(snakeCaseUser);
+* console.log(processedSnakeCaseUser.user_name); // "admin"
 * ```
 */
-const executeEmbeddedRecoveryFlowV2 = async ({ url, baseUrl, payload,...requestConfig }) => {
-	if (!payload) throw new ThunderIDAPIError("Recovery payload is required", "executeEmbeddedRecoveryFlow-ValidationError-002", "javascript", 400, "If a recovery payload is not provided, the request cannot be constructed correctly.");
-	const endpoint = url ?? `${baseUrl}/flow/execute`;
-	const cleanPayload = typeof payload === "object" && payload !== null ? Object.fromEntries(Object.entries(payload).filter(([key]) => key !== "verbose")) : payload;
-	const hasOnlyAppIdAndFlowType = typeof cleanPayload === "object" && cleanPayload !== null && "applicationId" in cleanPayload && "flowType" in cleanPayload && Object.keys(cleanPayload).length === 2;
-	const hasOnlyFlowId = typeof cleanPayload === "object" && cleanPayload !== null && "executionId" in cleanPayload && Object.keys(cleanPayload).length === 1;
-	const requestPayload = hasOnlyAppIdAndFlowType || hasOnlyFlowId ? {
-		...cleanPayload,
-		verbose: true
-	} : cleanPayload;
-	const response = await fetch(endpoint, {
-		...requestConfig,
-		body: JSON.stringify(requestPayload),
-		headers: {
-			Accept: "application/json",
-			"Content-Type": "application/json",
-			...requestConfig.headers
-		},
-		method: requestConfig.method || "POST"
-	});
-	if (!response.ok) throw new ThunderIDAPIError(await response.text(), "executeEmbeddedRecoveryFlow-ResponseError-001", "javascript", response.status, response.statusText, "Recovery request failed");
-	return await response.json();
+const processUsername = (user) => {
+	if (!user) return user;
+	const processedUser = { ...user };
+	if (processedUser.username) processedUser.username = removeUserstorePrefix(processedUser.username);
+	if (processedUser.userName) processedUser.userName = removeUserstorePrefix(processedUser.userName);
+	if (processedUser.user_name) processedUser.user_name = removeUserstorePrefix(processedUser.user_name);
+	return processedUser;
 };
-var executeEmbeddedRecoveryFlowV2_default = executeEmbeddedRecoveryFlowV2;
+var processUsername_default = processUsername;
 
 //#endregion
-//#region src/api/v2/executeEmbeddedUserOnboardingFlowV2.ts
+//#region src/api/getScim2Me.ts
 /**
-* Executes an embedded user onboarding flow by sending a request to the flow execution endpoint.
-*
-* This function handles both:
-* - Admin flow: Initiates onboarding, collects user details, generates invite link
-* - End-user flow: Validates invite token and allows password setting
-*
-* @param requestConfig - Request configuration object containing URL, payload, and optional auth token.
-* @returns A promise that resolves with the flow execution response.
-* @throws ThunderIDAPIError when the request fails or URL is invalid.
+* Retrieves the user profile information from the specified SCIM2 /Me endpoint.
 *
+* @param config - Request configuration object.
+* @returns A promise that resolves with the user profile information.
 * @example
 * ```typescript
-* // Admin initiating user onboarding (requires auth token)
-* const response = await executeEmbeddedUserOnboardingFlowV2({
-*   baseUrl: "https://api.thunder.io",
-*   payload: {
-*     flowType: "USER_ONBOARDING"
-*   },
-*   headers: {
-*     Authorization: `Bearer ${accessToken}`
+* // Using default fetch
+* try {
+*   const userProfile = await getScim2Me({
+*     url: "https://localhost:8090/scim2/Me",
+*   });
+*   console.log(userProfile);
+* } catch (error) {
+*   if (error instanceof ThunderIDAPIError) {
+*     console.error('Failed to get user profile:', error.message);
 *   }
-* });
+* }
+* ```
 *
-* // End-user accepting invite (no auth required)
-* const response = await executeEmbeddedUserOnboardingFlowV2({
-*   baseUrl: "https://api.thunder.io",
-*   payload: {
-*     executionId: "flow-id-from-url",
-*     inputs: { inviteToken: "token-from-url" }
+* @example
+* ```typescript
+* // Using custom fetcher (e.g., axios-based httpClient)
+* try {
+*   const userProfile = await getScim2Me({
+*     url: "https://localhost:8090/scim2/Me",
+*     fetcher: async (url, config) => {
+*       const response = await httpClient({
+*         url,
+*         method: config.method,
+*         headers: config.headers,
+*         ...config
+*       });
+*       // Convert axios-like response to fetch-like Response
+*       return {
+*         ok: response.status >= 200 && response.status < 300,
+*         status: response.status,
+*         statusText: response.statusText,
+*         json: () => Promise.resolve(response.data),
+*         text: () => Promise.resolve(typeof response.data === 'string' ? response.data : JSON.stringify(response.data))
+*       } as Response;
+*     }
+*   });
+*   console.log(userProfile);
+* } catch (error) {
+*   if (error instanceof ThunderIDAPIError) {
+*     console.error('Failed to get user profile:', error.message);
 *   }
-* });
+* }
 * ```
 */
-const executeEmbeddedUserOnboardingFlowV2 = async ({ url, baseUrl, payload,...requestConfig }) => {
-	if (!payload) throw new ThunderIDAPIError("User onboarding payload is required", "executeEmbeddedUserOnboardingFlow-ValidationError-002", "javascript", 400, "If a user onboarding payload is not provided, the request cannot be constructed correctly.");
-	const endpoint = url ?? `${baseUrl}/flow/execute`;
-	const cleanPayload = typeof payload === "object" && payload !== null ? Object.fromEntries(Object.entries(payload).filter(([key]) => key !== "verbose")) : payload;
-	const hasOnlyFlowType = typeof cleanPayload === "object" && cleanPayload !== null && "flowType" in cleanPayload && Object.keys(cleanPayload).length === 1;
-	const hasOnlyFlowId = typeof cleanPayload === "object" && cleanPayload !== null && "executionId" in cleanPayload && Object.keys(cleanPayload).length === 1;
-	const hasFlowIdWithInputs = typeof cleanPayload === "object" && cleanPayload !== null && "executionId" in cleanPayload && "inputs" in cleanPayload;
-	const requestPayload = hasOnlyFlowType || hasOnlyFlowId || hasFlowIdWithInputs ? {
-		...cleanPayload,
-		verbose: true
-	} : cleanPayload;
-	if ("flowType" in requestPayload && requestPayload["flowType"] !== EmbeddedFlowType.UserOnboarding) requestPayload["flowType"] = EmbeddedFlowType.UserOnboarding;
-	const response = await fetch(endpoint, {
+const getScim2Me = async ({ url, baseUrl, fetcher,...requestConfig }) => {
+	try {
+		new URL(url ?? baseUrl);
+	} catch (error$1) {
+		throw new ThunderIDAPIError(`Invalid URL provided. ${error$1?.toString()}`, "getScim2Me-ValidationError-001", "javascript", 400, "The provided `url` or `baseUrl` path does not adhere to the URL schema.");
+	}
+	const fetchFn = fetcher || fetch;
+	const resolvedUrl = url ?? `${baseUrl}/scim2/Me`;
+	const requestInit = {
 		...requestConfig,
-		body: JSON.stringify(requestPayload),
 		headers: {
 			Accept: "application/json",
-			"Content-Type": "application/json",
+			"Content-Type": "application/scim+json",
 			...requestConfig.headers
 		},
-		method: requestConfig.method || "POST"
-	});
-	if (!response.ok) throw new ThunderIDAPIError(await response.text(), "executeEmbeddedUserOnboardingFlow-ResponseError-001", "javascript", response.status, response.statusText, "User onboarding request failed");
-	return await response.json();
+		method: "GET"
+	};
+	try {
+		const response = await fetchFn(resolvedUrl, requestInit);
+		if (!response?.ok) throw new ThunderIDAPIError(await response.text(), "getScim2Me-ResponseError-001", "javascript", response.status, response.statusText, "Failed to fetch user profile");
+		return processUsername_default(await response.json());
+	} catch (error$1) {
+		if (error$1 instanceof ThunderIDAPIError) throw error$1;
+		throw new ThunderIDAPIError(`Network or parsing error: ${error$1 instanceof Error ? error$1.message : "Unknown error"}`, "getScim2Me-NetworkError-001", "javascript", 0, "Network Error");
+	}
 };
-var executeEmbeddedUserOnboardingFlowV2_default = executeEmbeddedUserOnboardingFlowV2;
+var getScim2Me_default = getScim2Me;
 
 //#endregion
-//#region src/api/v2/getFlowMetaV2.ts
+//#region src/api/getSchemas.ts
 /**
-* Fetches aggregated flow metadata from the `GET /flow/meta` endpoint.
-*
-* The response includes:
-* - Application or OU details depending on the `type` parameter
-* - Resolved design configuration (theme and layout)
-* - i18n translations filtered by `language` and `namespace`
-* - Registration flow enablement status
-*
-* @param config - Request configuration including `baseUrl`/`url`, and optional
-*                 `type`, `id`, `language`, and `namespace` filters. When `type`
-*                 and `id` are omitted the server returns i18n-only metadata.
-* @returns A promise that resolves to the {@link FlowMetadataResponse}.
-*
-* @throws {ThunderIDAPIError} When the server returns a non-OK response.
+* Retrieves the SCIM2 schemas from the specified endpoint.
 *
+* @param config - Request configuration object.
+* @returns A promise that resolves with the SCIM2 schemas information.
 * @example
 * ```typescript
-* import getFlowMetaV2 from './api/v2/getFlowMetaV2';
-* import { FlowMetaType } from './models/v2/flow-meta-v2';
-*
-* const meta = await getFlowMetaV2({
-*   baseUrl: 'https://localhost:8090',
-*   type: FlowMetaType.App,
-*   id: '60a9b38b-6eba-9f9e-55f9-267067de4680',
-*   language: 'en',
-*   namespace: 'auth',
-* });
-*
-* console.log(meta.application?.name);
-* console.log(meta.i18n.translations);
+* // Using default fetch
+* try {
+*   const schemas = await getSchemas({
+*     url: "https://localhost:8090/scim2/Schemas",
+*   });
+*   console.log(schemas);
+* } catch (error) {
+*   if (error instanceof ThunderIDAPIError) {
+*     console.error('Failed to get schemas:', error.message);
+*   }
+* }
 * ```
 *
-* @experimental This function targets the ThunderID V2 platform API
+* @example
+* ```typescript
+* // Using custom fetcher (e.g., axios-based httpClient)
+* try {
+*   const schemas = await getSchemas({
+*     url: "https://localhost:8090/scim2/Schemas",
+*     fetcher: async (url, config) => {
+*       const response = await httpClient({
+*         url,
+*         method: config.method,
+*         headers: config.headers,
+*         ...config
+*       });
+*       // Convert axios-like response to fetch-like Response
+*       return {
+*         ok: response.status >= 200 && response.status < 300,
+*         status: response.status,
+*         statusText: response.statusText,
+*         json: () => Promise.resolve(response.data),
+*         text: () => Promise.resolve(typeof response.data === 'string' ? response.data : JSON.stringify(response.data))
+*       } as Response;
+*     }
+*   });
+*   console.log(schemas);
+* } catch (error) {
+*   if (error instanceof ThunderIDAPIError) {
+*     console.error('Failed to get schemas:', error.message);
+*   }
+* }
+* ```
 */
-const getFlowMetaV2 = async ({ url, baseUrl, type, id, language, namespace,...requestConfig }) => {
-	const queryParams = new URLSearchParams({
-		...id ? { id } : {},
-		...type ? { type } : {},
-		...language ? { language } : {},
-		...namespace ? { namespace } : {}
-	});
-	const endpoint = `${url ?? `${baseUrl}/flow/meta`}?${queryParams.toString()}`;
-	const response = await fetch(endpoint, {
+const getSchemas = async ({ url, baseUrl, fetcher,...requestConfig }) => {
+	try {
+		new URL(url ?? baseUrl);
+	} catch (error$1) {
+		throw new ThunderIDAPIError(`Invalid URL provided. ${error$1?.toString()}`, "getSchemas-ValidationError-001", "javascript", 400, "The provided `url` or `baseUrl` path does not adhere to the URL schema.");
+	}
+	const fetchFn = fetcher || fetch;
+	const resolvedUrl = url ?? `${baseUrl}/scim2/Schemas`;
+	const requestInit = {
 		...requestConfig,
 		headers: {
 			Accept: "application/json",
+			"Content-Type": "application/json",
 			...requestConfig.headers
 		},
 		method: "GET"
-	});
-	if (!response.ok) throw new ThunderIDAPIError(await response.text(), "getFlowMetaV2-ResponseError-001", "javascript", response.status, response.statusText, "Flow metadata request failed");
-	return await response.json();
+	};
+	try {
+		const response = await fetchFn(resolvedUrl, requestInit);
+		if (!response?.ok) throw new ThunderIDAPIError(await response.text(), "getSchemas-ResponseError-001", "javascript", response.status, response.statusText, "Failed to fetch SCIM2 schemas");
+		return await response.json();
+	} catch (error$1) {
+		if (error$1 instanceof ThunderIDAPIError) throw error$1;
+		throw new ThunderIDAPIError(`Network or parsing error: ${error$1 instanceof Error ? error$1.message : "Unknown error"}`, "getSchemas-NetworkError-001", "javascript", 0, "Network Error");
+	}
 };
-var getFlowMetaV2_default = getFlowMetaV2;
+var getSchemas_default = getSchemas;
 
 //#endregion
-//#region src/api/v2/getOrganizationUnitChildren.ts
+//#region src/api/updateMeProfile.ts
 /**
-* Retrieves the child organization units of a given parent OU.
-*
-* @param config - Request configuration including `baseUrl`/`url`, `organizationUnitId`,
-*                 and optional `limit`/`offset` pagination parameters.
-* @returns A promise that resolves with the paginated list of child organization units.
-*
-* @throws {ThunderIDAPIError} When the server returns a non-OK response.
+* Updates the user profile information at the specified SCIM2 Me endpoint.
 *
+* @param config - Configuration object with URL, payload and optional request config.
+* @returns A promise that resolves with the updated user profile information.
 * @example
 * ```typescript
-* const children = await getOrganizationUnitChildren({
-*   baseUrl: 'https://localhost:8090',
-*   organizationUnitId: '0d5e071b-d3d3-475d-b3c6-1a20ee2fa9b1',
-*   limit: 10,
-*   offset: 0,
+* // Using default fetch
+* await updateMeProfile({
+*   url: "https://localhost:8090/scim2/Me",
+*   payload: { "urn:scim:wso2:schema": { mobileNumbers: ["0777933830"] } }
 * });
-* console.log(children.organizationUnits);
 * ```
 *
-* @experimental This function targets the ThunderID V2 platform API
+* @example
+* ```typescript
+* // Using custom fetcher (e.g., axios-based httpClient)
+* await updateMeProfile({
+*   url: "https://localhost:8090/scim2/Me",
+*   payload: { "urn:scim:wso2:schema": { mobileNumbers: ["0777933830"] } },
+*   fetcher: async (url, config) => {
+*     const response = await httpClient({
+*       url,
+*       method: config.method,
+*       headers: config.headers,
+*       data: config.body,
+*       ...config
+*     });
+*     // Convert axios-like response to fetch-like Response
+*     return {
+*       ok: response.status >= 200 && response.status < 300,
+*       status: response.status,
+*       statusText: response.statusText,
+*       json: () => Promise.resolve(response.data),
+*       text: () => Promise.resolve(typeof response.data === 'string' ? response.data : JSON.stringify(response.data))
+*     } as Response;
+*   }
+* });
+* ```
 */
-const getOrganizationUnitChildren = async ({ url, baseUrl, organizationUnitId, limit = 10, offset = 0,...requestConfig }) => {
-	if (!organizationUnitId) throw new ThunderIDAPIError("Organization Unit ID is required", "getOrganizationUnitChildren-ValidationError-001", "javascript", 400, "If an organization unit ID is not provided, the request cannot be constructed correctly.");
-	const queryParams = new URLSearchParams({
-		limit: String(limit),
-		offset: String(offset)
-	});
-	const endpoint = url ?? `${baseUrl}/organization-units/${organizationUnitId}/ous?${queryParams.toString()}`;
-	const response = await fetch(endpoint, {
+const updateMeProfile = async ({ url, baseUrl, payload, fetcher,...requestConfig }) => {
+	try {
+		new URL(url ?? baseUrl);
+	} catch (error$1) {
+		throw new ThunderIDAPIError(`Invalid URL provided. ${error$1?.toString()}`, "updateMeProfile-ValidationError-001", "javascript", 400, "The provided `url` or `baseUrl` path does not adhere to the URL schema.");
+	}
+	const data = {
+		Operations: [{
+			op: "replace",
+			value: payload
+		}],
+		schemas: ["urn:ietf:params:scim:api:messages:2.0:PatchOp"]
+	};
+	const fetchFn = fetcher || fetch;
+	const resolvedUrl = url ?? `${baseUrl}/scim2/Me`;
+	const requestInit = {
+		method: "PATCH",
 		...requestConfig,
+		body: JSON.stringify(data),
 		headers: {
+			...requestConfig.headers,
 			Accept: "application/json",
-			...requestConfig.headers
-		},
-		method: "GET"
-	});
-	if (!response.ok) throw new ThunderIDAPIError(await response.text(), "getOrganizationUnitChildren-ResponseError-001", "javascript", response.status, response.statusText, "Failed to fetch organization unit children");
-	return await response.json();
+			"Content-Type": "application/scim+json"
+		}
+	};
+	try {
+		const response = await fetchFn(resolvedUrl, requestInit);
+		if (!response?.ok) throw new ThunderIDAPIError(await response.text(), "updateMeProfile-ResponseError-001", "javascript", response.status, response.statusText, "Failed to update user profile");
+		return processUsername_default(await response.json());
+	} catch (error$1) {
+		if (error$1 instanceof ThunderIDAPIError) throw error$1;
+		throw new ThunderIDAPIError(error$1?.response?.data?.detail || "An error occurred while updating the user profile. Please try again.", "updateMeProfile-NetworkError-001", "javascript", error$1?.data?.status, "Network Error");
+	}
 };
-var getOrganizationUnitChildren_default = getOrganizationUnitChildren;
+var updateMeProfile_default = updateMeProfile;
 
 //#endregion
 //#region src/constants/ApplicationNativeAuthenticationConstants.ts
@@ -2688,198 +1551,52 @@ const VendorConstants = { VENDOR_PREFIX: "thunderid" };
 var VendorConstants_default = VendorConstants;
 
 //#endregion
-//#region src/models/embedded-signin-flow.ts
-let EmbeddedSignInFlowStatus = /* @__PURE__ */ function(EmbeddedSignInFlowStatus$2) {
-	EmbeddedSignInFlowStatus$2["FailCompleted"] = "FAIL_COMPLETED";
-	EmbeddedSignInFlowStatus$2["FailIncomplete"] = "FAIL_INCOMPLETE";
-	EmbeddedSignInFlowStatus$2["Incomplete"] = "INCOMPLETE";
-	EmbeddedSignInFlowStatus$2["SuccessCompleted"] = "SUCCESS_COMPLETED";
-	return EmbeddedSignInFlowStatus$2;
-}({});
-let EmbeddedSignInFlowType = /* @__PURE__ */ function(EmbeddedSignInFlowType$2) {
-	EmbeddedSignInFlowType$2["Authentication"] = "AUTHENTICATION";
-	return EmbeddedSignInFlowType$2;
-}({});
-let EmbeddedSignInFlowStepType = /* @__PURE__ */ function(EmbeddedSignInFlowStepType$1) {
-	EmbeddedSignInFlowStepType$1["AuthenticatorPrompt"] = "AUTHENTICATOR_PROMPT";
-	EmbeddedSignInFlowStepType$1["MultiOptionsPrompt"] = "MULTI_OPTIONS_PROMPT";
-	return EmbeddedSignInFlowStepType$1;
-}({});
-let EmbeddedSignInFlowAuthenticatorParamType = /* @__PURE__ */ function(EmbeddedSignInFlowAuthenticatorParamType$1) {
-	EmbeddedSignInFlowAuthenticatorParamType$1["Integer"] = "INTEGER";
-	EmbeddedSignInFlowAuthenticatorParamType$1["MultiValued"] = "MULTI_VALUED";
-	EmbeddedSignInFlowAuthenticatorParamType$1["String"] = "STRING";
-	return EmbeddedSignInFlowAuthenticatorParamType$1;
-}({});
-let EmbeddedSignInFlowAuthenticatorExtendedParamType = /* @__PURE__ */ function(EmbeddedSignInFlowAuthenticatorExtendedParamType$1) {
-	EmbeddedSignInFlowAuthenticatorExtendedParamType$1["Otp"] = "OTPCode";
-	return EmbeddedSignInFlowAuthenticatorExtendedParamType$1;
-}({});
-let EmbeddedSignInFlowAuthenticatorKnownIdPType = /* @__PURE__ */ function(EmbeddedSignInFlowAuthenticatorKnownIdPType$1) {
-	EmbeddedSignInFlowAuthenticatorKnownIdPType$1["Local"] = "LOCAL";
-	return EmbeddedSignInFlowAuthenticatorKnownIdPType$1;
-}({});
-let EmbeddedSignInFlowAuthenticatorPromptType = /* @__PURE__ */ function(EmbeddedSignInFlowAuthenticatorPromptType$1) {
-	/**
-	* Prompt for internal system use, such as API keys or tokens.
-	*/
-	EmbeddedSignInFlowAuthenticatorPromptType$1["InternalPrompt"] = "INTERNAL_PROMPT";
-	/**
-	* Prompt for redirection to another page or service.
-	*/
-	EmbeddedSignInFlowAuthenticatorPromptType$1["RedirectionPrompt"] = "REDIRECTION_PROMPT";
-	/**
-	* Prompt for user input, typically for username/password or similar credentials.
-	*/
-	EmbeddedSignInFlowAuthenticatorPromptType$1["UserPrompt"] = "USER_PROMPT";
-	return EmbeddedSignInFlowAuthenticatorPromptType$1;
-}({});
-
-//#endregion
-//#region src/models/v2/embedded-flow-v2.ts
+//#region src/errors/ThunderIDRuntimeError.ts
 /**
-* Component types supported by the ThunderID embedded flow API.
-*
-* These types define the different UI components that can be rendered
-* as part of the embedded authentication flows. Each type corresponds
-* to a specific UI element with its own behavior and properties.
+* Base class for all runtime errors in ThunderID. This class extends ThunderIDError
+* and adds support for additional error details. Use this class for errors that occur
+* during runtime execution that are not related to API calls.
 *
 * @example
 * ```typescript
-* // Check component type to render appropriate UI
-* if (component.type === EmbeddedFlowComponentType.TextInput) {
-*   // Render text input field
-* } else if (component.type === EmbeddedFlowComponentType.Action) {
-*   // Render button/action
-* }
+* throw new ThunderIDRuntimeError(
+*   "Failed to parse configuration",
+*   "CONFIG_PARSE_ERROR",
+*   { invalidField: "redirectUri" }
+* );
 * ```
-*
-* @experimental This API may change in future versions
 */
-let EmbeddedFlowComponentType$1 = /* @__PURE__ */ function(EmbeddedFlowComponentType$2) {
-	/** Interactive action component (buttons, links) for user interactions */
-	EmbeddedFlowComponentType$2["Action"] = "ACTION";
-	/** Container block component that groups other components */
-	EmbeddedFlowComponentType$2["Block"] = "BLOCK";
-	/** Consent component for displaying consent purposes and attributes */
-	EmbeddedFlowComponentType$2["Consent"] = "CONSENT";
-	/** Copyable text display component that shows text with a copy-to-clipboard action */
-	EmbeddedFlowComponentType$2["CopyableText"] = "COPYABLE_TEXT";
-	/** Divider component for visual separation of content */
-	EmbeddedFlowComponentType$2["Divider"] = "DIVIDER";
-	/** Email input field with validation for email addresses. */
-	EmbeddedFlowComponentType$2["EmailInput"] = "EMAIL_INPUT";
-	/** Icon display component for rendering named vector icons */
-	EmbeddedFlowComponentType$2["Icon"] = "ICON";
-	/** Image display component for logos and illustrations */
-	EmbeddedFlowComponentType$2["Image"] = "IMAGE";
-	/** One-time password input field for multi-factor authentication */
-	EmbeddedFlowComponentType$2["OtpInput"] = "OTP_INPUT";
-	/** Organization unit tree picker for selecting an OU */
-	EmbeddedFlowComponentType$2["OuSelect"] = "OU_SELECT";
-	/** Password input field with masking for sensitive data */
-	EmbeddedFlowComponentType$2["PasswordInput"] = "PASSWORD_INPUT";
-	/** Phone number input field with country code support */
-	EmbeddedFlowComponentType$2["PhoneInput"] = "PHONE_INPUT";
-	/** Rich text display component that renders formatted HTML content */
-	EmbeddedFlowComponentType$2["RichText"] = "RICH_TEXT";
-	/** Select/dropdown input component for single choice selection */
-	EmbeddedFlowComponentType$2["Select"] = "SELECT";
-	/** Stack layout component for arranging children in a row or column */
-	EmbeddedFlowComponentType$2["Stack"] = "STACK";
-	/** Text display component for labels, headings, and messages */
-	EmbeddedFlowComponentType$2["Text"] = "TEXT";
-	/** Standard text input field for user data entry */
-	EmbeddedFlowComponentType$2["TextInput"] = "TEXT_INPUT";
-	/** Timer component for displaying a countdown */
-	EmbeddedFlowComponentType$2["Timer"] = "TIMER";
-	/** QR code display component for wallet-based flows (e.g. OpenID4VP) */
-	EmbeddedFlowComponentType$2["QrCode"] = "QR_CODE";
-	return EmbeddedFlowComponentType$2;
-}({});
-/**
-* Action variant types for buttons and interactive elements.
-*
-* @experimental This API may change in future versions
-*/
-let EmbeddedFlowActionVariant = /* @__PURE__ */ function(EmbeddedFlowActionVariant$1) {
-	/** Danger action button for destructive operations */
-	EmbeddedFlowActionVariant$1["Danger"] = "DANGER";
-	/** Info action button for informational purposes */
-	EmbeddedFlowActionVariant$1["Info"] = "INFO";
-	/** Link-styled action button */
-	EmbeddedFlowActionVariant$1["Link"] = "LINK";
-	/** Outlined action button for secondary emphasis */
-	EmbeddedFlowActionVariant$1["Outlined"] = "OUTLINED";
-	/** Primary action button with highest visual emphasis */
-	EmbeddedFlowActionVariant$1["Primary"] = "PRIMARY";
-	/** Secondary action button with moderate visual emphasis */
-	EmbeddedFlowActionVariant$1["Secondary"] = "SECONDARY";
-	/** Success action button for positive confirmations */
-	EmbeddedFlowActionVariant$1["Success"] = "SUCCESS";
-	/** Tertiary action button with minimal visual emphasis */
-	EmbeddedFlowActionVariant$1["Tertiary"] = "TERTIARY";
-	/** Warning action button for cautionary actions */
-	EmbeddedFlowActionVariant$1["Warning"] = "WARNING";
-	return EmbeddedFlowActionVariant$1;
-}({});
-/**
-* Text variant types for typography components.
-*
-* @experimental This API may change in future versions
-*/
-let EmbeddedFlowTextVariant = /* @__PURE__ */ function(EmbeddedFlowTextVariant$1) {
-	/** Primary body text for main content */
-	EmbeddedFlowTextVariant$1["Body1"] = "BODY_1";
-	/** Secondary body text for supplementary content */
-	EmbeddedFlowTextVariant$1["Body2"] = "BODY_2";
-	/** Text styled for button labels */
-	EmbeddedFlowTextVariant$1["ButtonText"] = "BUTTON_TEXT";
-	/** Small caption text for annotations and descriptions */
-	EmbeddedFlowTextVariant$1["Caption"] = "CAPTION";
-	/** Largest heading level for main titles */
-	EmbeddedFlowTextVariant$1["Heading1"] = "HEADING_1";
-	/** Second level heading for major sections */
-	EmbeddedFlowTextVariant$1["Heading2"] = "HEADING_2";
-	/** Third level heading for subsections */
-	EmbeddedFlowTextVariant$1["Heading3"] = "HEADING_3";
-	/** Fourth level heading for minor sections */
-	EmbeddedFlowTextVariant$1["Heading4"] = "HEADING_4";
-	/** Fifth level heading for detailed sections */
-	EmbeddedFlowTextVariant$1["Heading5"] = "HEADING_5";
-	/** Smallest heading level for fine-grained sections */
-	EmbeddedFlowTextVariant$1["Heading6"] = "HEADING_6";
-	/** Overline text for labels and categories */
-	EmbeddedFlowTextVariant$1["Overline"] = "OVERLINE";
-	/** Primary subtitle text with larger emphasis */
-	EmbeddedFlowTextVariant$1["Subtitle1"] = "SUBTITLE_1";
-	/** Secondary subtitle text with moderate emphasis */
-	EmbeddedFlowTextVariant$1["Subtitle2"] = "SUBTITLE_2";
-	return EmbeddedFlowTextVariant$1;
-}({});
-/**
-* Event types for action components.
-*
-* @experimental This API may change in future versions
-*/
-let EmbeddedFlowEventType = /* @__PURE__ */ function(EmbeddedFlowEventType$1) {
-	/** Navigate back to the previous step */
-	EmbeddedFlowEventType$1["Back"] = "BACK";
-	/** Cancel the current operation */
-	EmbeddedFlowEventType$1["Cancel"] = "CANCEL";
-	/** Navigate to a different flow step or page */
-	EmbeddedFlowEventType$1["Navigate"] = "NAVIGATE";
-	/** Reset form fields to initial state */
-	EmbeddedFlowEventType$1["Reset"] = "RESET";
-	/** Submit form data to the server */
-	EmbeddedFlowEventType$1["Submit"] = "SUBMIT";
-	/** Trigger an action or event */
-	EmbeddedFlowEventType$1["Trigger"] = "TRIGGER";
-	return EmbeddedFlowEventType$1;
-}({});
+var ThunderIDRuntimeError = class extends ThunderIDError {
+	/**
+	* Creates an instance of ThunderIDRuntimeError.
+	*
+	* @param message - Human-readable description of the error
+	* @param code - A unique error code that identifies the error type
+	* @param details - Additional details about the error that might be helpful for debugging
+	* @param origin - Optional. The SDK origin (e.g. 'react', 'vue'). Defaults to generic 'ThunderID'
+	* @constructor
+	*/
+	constructor(message, code, origin, details) {
+		super(message, code, origin);
+		this.details = details;
+		Object.defineProperty(this, "name", {
+			configurable: true,
+			value: "ThunderIDRuntimeError",
+			writable: true
+		});
+	}
+	/**
+	* Returns a string representation of the runtime error
+	* @returns Formatted error string with name, code, details, and message
+	*/
+	toString() {
+		const details = this.details ? `\nDetails: ${JSON.stringify(this.details, null, 2)}` : "";
+		return `[${this.name}] (code="${this.code}")${details}\nMessage: ${this.message}`;
+	}
+};
 
 //#endregion
-//#region src/models/v2/embedded-recovery-flow-v2.ts
+//#region src/models/embedded-recovery-flow.ts
 /**
 * Status enumeration for the embedded recovery flow operations.
 *
@@ -2920,7 +1637,7 @@ let EmbeddedRecoveryFlowType = /* @__PURE__ */ function(EmbeddedRecoveryFlowType
 }({});
 
 //#endregion
-//#region src/models/v2/flow-meta-v2.ts
+//#region src/models/flow-meta.ts
 /**
 * Copyright (c) 2026, WSO2 LLC. (https://www.wso2.com).
 *
@@ -3244,47 +1961,346 @@ var DefaultCrypto = class {
 		});
 		return true;
 	}
-};
-
-//#endregion
-//#region src/models/agent.ts
-let AgentConfig;
-(function(_AgentConfig) {
-	_AgentConfig.DEFAULT_AUTHENTICATOR_NAME = "Username & Password";
-})(AgentConfig || (AgentConfig = {}));
-
-//#endregion
-//#region src/models/store.ts
-/**
-* Enum representing different types of data stores used in the application.
-*/
-let Stores = /* @__PURE__ */ function(Stores$1) {
+};
+
+//#endregion
+//#region src/models/store.ts
+/**
+* Enum representing different types of data stores used in the application.
+*/
+let Stores = /* @__PURE__ */ function(Stores$1) {
+	/**
+	* Store for configuration data that defines the application's behavior and settings.
+	*/
+	Stores$1["ConfigData"] = "config_data";
+	/**
+	* Store for OpenID Connect provider metadata, including endpoints and configuration.
+	*/
+	Stores$1["OIDCProviderMetaData"] = "oidc_provider_meta_data";
+	/**
+	* Store for persisted data that needs to be retained across sessions and application restarts.
+	*/
+	Stores$1["PersistedData"] = "persisted_data";
+	/**
+	* Store for user session-related data like tokens and authentication state.
+	*/
+	Stores$1["SessionData"] = "session_data";
+	/**
+	* Store for temporary data that needs to persist only for a short duration.
+	*/
+	Stores$1["TemporaryData"] = "temporary_data";
+	/**
+	* Store for data that leverages local storage if available, falling back to the configured storage.
+	*/
+	Stores$1["HybridData"] = "hybrid_data";
+	return Stores$1;
+}({});
+
+//#endregion
+//#region src/utils/logger.ts
+const PREFIX = "⚡ ThunderID";
+/**
+* Default logger configuration
+*/
+const DEFAULT_CONFIG$1 = {
+	level: "info",
+	prefix: `${PREFIX}`,
+	showLevel: true,
+	timestamps: true
+};
+/**
+* Environment detection utilities
+*/
+const isBrowser = () => typeof window !== "undefined" && typeof window.document !== "undefined";
+const isNode = () => typeof process !== "undefined" && void 0;
+/**
+* Color codes for terminal output (Node.js)
+*/
+const COLORS = {
+	blue: "\x1B[34m",
+	bright: "\x1B[1m",
+	cyan: "\x1B[36m",
+	dim: "\x1B[2m",
+	gray: "\x1B[90m",
+	green: "\x1B[32m",
+	magenta: "\x1B[35m",
+	red: "\x1B[31m",
+	reset: "\x1B[0m",
+	white: "\x1B[37m",
+	yellow: "\x1B[33m"
+};
+/**
+* Browser console styling
+*/
+const BROWSER_STYLES = {
+	debug: "color: #6b7280; font-weight: normal;",
+	error: "color: #dc2626; font-weight: bold;",
+	info: "color: #2563eb; font-weight: bold;",
+	prefix: "color: #7c3aed; font-weight: bold;",
+	timestamp: "color: #6b7280; font-size: 0.9em;",
+	warn: "color: #d97706; font-weight: bold;"
+};
+const LOG_LEVEL_ORDER = {
+	debug: 0,
+	error: 3,
+	info: 1,
+	warn: 2
+};
+/**
+* Universal logger class that works in both browser and Node.js environments
+*/
+var Logger = class Logger {
+	config;
+	constructor(config = {}) {
+		this.config = {
+			...DEFAULT_CONFIG$1,
+			...config
+		};
+	}
+	/**
+	* Update logger configuration
+	*/
+	configure(config) {
+		this.config = {
+			...this.config,
+			...config
+		};
+	}
+	/**
+	* Get current configuration
+	*/
+	getConfig() {
+		return { ...this.config };
+	}
+	/**
+	* Check if a log level should be output
+	*/
+	shouldLog(level) {
+		return LOG_LEVEL_ORDER[level] >= LOG_LEVEL_ORDER[this.config.level];
+	}
+	/**
+	* Get timestamp string
+	*/
+	static getTimestamp() {
+		return (/* @__PURE__ */ new Date()).toISOString();
+	}
+	/**
+	* Get log level string
+	*/
+	static getLevelString(level) {
+		switch (level) {
+			case "debug": return "DEBUG";
+			case "info": return "INFO";
+			case "warn": return "WARN";
+			case "error": return "ERROR";
+			default: return "UNKNOWN";
+		}
+	}
+	/**
+	* Format message for Node.js terminal
+	*/
+	formatForNode(level, message) {
+		const parts = [];
+		if (this.config.timestamps) parts.push(`${COLORS.gray}[${Logger.getTimestamp()}]${COLORS.reset}`);
+		if (this.config.prefix) parts.push(`${COLORS.magenta}${this.config.prefix}${COLORS.reset}`);
+		if (this.config.showLevel) {
+			const levelStr = Logger.getLevelString(level);
+			let coloredLevel;
+			switch (level) {
+				case "debug":
+					coloredLevel = `${COLORS.gray}[${levelStr}]${COLORS.reset}`;
+					break;
+				case "info":
+					coloredLevel = `${COLORS.blue}[${levelStr}]${COLORS.reset}`;
+					break;
+				case "warn":
+					coloredLevel = `${COLORS.yellow}[${levelStr}]${COLORS.reset}`;
+					break;
+				case "error":
+					coloredLevel = `${COLORS.red}[${levelStr}]${COLORS.reset}`;
+					break;
+				default: coloredLevel = `[${levelStr}]`;
+			}
+			parts.push(coloredLevel);
+		}
+		parts.push(message);
+		return parts.join(" ");
+	}
+	/**
+	* Log message using appropriate method
+	*/
+	logMessage(level, message, ...args) {
+		if (!this.shouldLog(level)) return;
+		if (this.config.formatter) {
+			this.config.formatter(level, message, ...args);
+			return;
+		}
+		if (isBrowser()) this.logToBrowser(level, message, ...args);
+		else if (isNode()) this.logToNode(level, message, ...args);
+		else console.log(message, ...args);
+	}
+	/**
+	* Log to browser console with styling
+	*/
+	logToBrowser(level, message, ...args) {
+		const parts = [];
+		const styles = [];
+		if (this.config.timestamps) {
+			parts.push(`%c[${Logger.getTimestamp()}]`);
+			styles.push(BROWSER_STYLES.timestamp);
+		}
+		if (this.config.prefix) {
+			parts.push(`%c${this.config.prefix}`);
+			styles.push(BROWSER_STYLES.prefix);
+		}
+		if (this.config.showLevel) {
+			const levelStr = Logger.getLevelString(level);
+			parts.push(`%c[${levelStr}]`);
+			switch (level) {
+				case "debug":
+					styles.push(BROWSER_STYLES.debug);
+					break;
+				case "info":
+					styles.push(BROWSER_STYLES.info);
+					break;
+				case "warn":
+					styles.push(BROWSER_STYLES.warn);
+					break;
+				case "error":
+					styles.push(BROWSER_STYLES.error);
+					break;
+				default: styles.push("");
+			}
+		}
+		parts.push(`%c${message}`);
+		styles.push("color: inherit; font-weight: normal;");
+		const formattedMessage = parts.join(" ");
+		switch (level) {
+			case "debug":
+				console.debug(formattedMessage, ...styles, ...args);
+				break;
+			case "info":
+				console.info(formattedMessage, ...styles, ...args);
+				break;
+			case "warn":
+				console.warn(formattedMessage, ...styles, ...args);
+				break;
+			case "error":
+				console.error(formattedMessage, ...styles, ...args);
+				break;
+			default: console.log(formattedMessage, ...styles, ...args);
+		}
+	}
+	/**
+	* Log to Node.js console
+	*/
+	logToNode(level, message, ...args) {
+		const formattedMessage = this.formatForNode(level, message);
+		switch (level) {
+			case "debug":
+				console.debug(formattedMessage, ...args);
+				break;
+			case "info":
+				console.info(formattedMessage, ...args);
+				break;
+			case "warn":
+				console.warn(formattedMessage, ...args);
+				break;
+			case "error":
+				console.error(formattedMessage, ...args);
+				break;
+			default: console.log(formattedMessage, ...args);
+		}
+	}
+	/**
+	* Log debug message
+	*/
+	debug(message, ...args) {
+		this.logMessage("debug", message, ...args);
+	}
 	/**
-	* Store for configuration data that defines the application's behavior and settings.
+	* Log info message
 	*/
-	Stores$1["ConfigData"] = "config_data";
+	info(message, ...args) {
+		this.logMessage("info", message, ...args);
+	}
 	/**
-	* Store for OpenID Connect provider metadata, including endpoints and configuration.
+	* Log warning message
 	*/
-	Stores$1["OIDCProviderMetaData"] = "oidc_provider_meta_data";
+	warn(message, ...args) {
+		this.logMessage("warn", message, ...args);
+	}
 	/**
-	* Store for persisted data that needs to be retained across sessions and application restarts.
+	* Log error message
 	*/
-	Stores$1["PersistedData"] = "persisted_data";
+	error(message, ...args) {
+		this.logMessage("error", message, ...args);
+	}
 	/**
-	* Store for user session-related data like tokens and authentication state.
+	* Create a child logger with additional prefix
 	*/
-	Stores$1["SessionData"] = "session_data";
+	child(prefix) {
+		const childPrefix = this.config.prefix ? `${this.config.prefix} - ${prefix}` : prefix;
+		return new Logger({
+			...this.config,
+			prefix: childPrefix
+		});
+	}
 	/**
-	* Store for temporary data that needs to persist only for a short duration.
+	* Set log level
 	*/
-	Stores$1["TemporaryData"] = "temporary_data";
+	setLevel(level) {
+		this.config.level = level;
+	}
 	/**
-	* Store for data that leverages local storage if available, falling back to the configured storage.
+	* Get current log level
 	*/
-	Stores$1["HybridData"] = "hybrid_data";
-	return Stores$1;
-}({});
+	getLevel() {
+		return this.config.level;
+	}
+};
+/**
+* Default logger instance
+*/
+const logger = new Logger();
+/**
+* Create a new logger instance with custom configuration
+*/
+const createLogger = (config) => new Logger(config);
+/**
+* Default export - global logger instance
+*/
+var logger_default = logger;
+/**
+* Named exports for convenience
+*/
+const debug = (message, ...args) => logger.debug(message, ...args);
+const info = (message, ...args) => logger.info(message, ...args);
+const warn = (message, ...args) => logger.warn(message, ...args);
+const error = (message, ...args) => logger.error(message, ...args);
+/**
+* Configure the default logger
+*/
+const configure = (config) => logger.configure(config);
+/**
+* Create component-specific loggers
+*/
+const createComponentLogger = (component) => logger.child(component);
+/**
+* Create package-specific logger
+*/
+const createPackageLogger = (packageName) => createLogger({
+	level: "info",
+	prefix: `${PREFIX} - ${packageName}`,
+	showLevel: true,
+	timestamps: true
+});
+/**
+* Create package component logger (package + component)
+*/
+const createPackageComponentLogger = (packageName, component) => {
+	return createPackageLogger(packageName).child(component);
+};
 
 //#endregion
 //#region src/StorageManager.ts
@@ -4224,22 +3240,10 @@ var ThunderIDJavaScriptClient = class {
 	signInSilently(_options) {
 		throw new Error("Method not implemented.");
 	}
-	signUp(_optionsOrPayload) {
+	signUp(_options) {
 		throw new Error("Method not implemented.");
 	}
-	recover(_payload) {
-		throw new Error("Method not implemented.");
-	}
-	switchOrganization(_organization, _sessionId) {
-		throw new Error("Method not implemented.");
-	}
-	getCurrentOrganization(_sessionId) {
-		throw new Error("Method not implemented.");
-	}
-	getAllOrganizations(_options, _sessionId) {
-		throw new Error("Method not implemented.");
-	}
-	getMyOrganizations(_options, _sessionId) {
+	recover() {
 		throw new Error("Method not implemented.");
 	}
 	getUserProfile(_options) {
@@ -4597,40 +3601,11 @@ var ThunderIDJavaScriptClient = class {
 		const error$1 = Boolean(url.searchParams.get("error"));
 		return stateParam ? stateParam === OIDCRequestConstants_default.Params.SIGN_OUT_SUCCESS && error$1 : false;
 	}
-	async getAgentToken(agentConfig) {
-		const authorizeURL = new URL(await this.getSignInUrl({ response_mode: "direct" }));
-		const authorizeResponse = await initializeEmbeddedSignInFlow_default({
-			payload: Object.fromEntries(authorizeURL.searchParams.entries()),
-			url: `${authorizeURL.origin}${authorizeURL.pathname}`
-		});
-		const authenticatorName = agentConfig.authenticatorName ?? AgentConfig.DEFAULT_AUTHENTICATOR_NAME;
-		const targetAuthenticator = authorizeResponse.nextStep.authenticators.find((auth) => auth.authenticator === authenticatorName);
-		if (!targetAuthenticator) throw new Error(`Authenticator '${authenticatorName}' not found among authentication steps.`);
-		const authnResponse = await executeEmbeddedSignInFlow_default({
-			baseUrl: this.baseURL,
-			payload: {
-				flowId: authorizeResponse.flowId,
-				selectedAuthenticator: {
-					authenticatorId: targetAuthenticator.authenticatorId,
-					params: {
-						password: agentConfig.agentSecret,
-						username: agentConfig.agentID
-					}
-				}
-			}
-		});
-		if (authnResponse.flowStatus !== EmbeddedSignInFlowStatus.SuccessCompleted) throw new Error("Agent authentication failed.");
-		return this.requestAccessToken(authnResponse.authData["code"], authnResponse.authData["session_state"], authnResponse.authData["state"]);
-	}
 	async getOBOSignInURL(agentConfig) {
 		const authURL = await this.getSignInUrl({ requested_actor: agentConfig.agentID });
 		if (authURL) return authURL.toString();
 		throw new Error("Could not build Authorize URL");
 	}
-	async getOBOToken(agentConfig, authCodeResponse) {
-		const agentToken = await this.getAgentToken(agentConfig);
-		return this.requestAccessToken(authCodeResponse.code, authCodeResponse.session_state, authCodeResponse.state, void 0, { params: { actor_token: agentToken.accessToken } });
-	}
 };
 var ThunderIDJavaScriptClient_default = ThunderIDJavaScriptClient;
 
@@ -5306,48 +4281,36 @@ const formatDate = (dateString) => {
 var formatDate_default = formatDate;
 
 //#endregion
-//#region src/utils/deriveOrganizationHandleFromBaseUrl.ts
+//#region src/utils/isRecognizedBaseUrlPattern.ts
 /**
-* Extracts the organization handle from a ThunderID base URL.
+* Utility to determine if sensible ThunderID fallbacks can be used based on the given base URL.
 *
-* Parses URLs following the `/t/{orgHandle}` pattern.
+* This checks if the URL follows the standard ThunderID pattern: /t/{orgHandle}
+* Returns true if sensible fallbacks (like deriving organization handle, tenant, etc.) can be used, false otherwise.
 *
-* @param baseUrl - The base URL of the ThunderID identity server
-* @returns The extracted organization handle
-* @throws {ThunderIDRuntimeError} When the URL doesn't match the expected ThunderID pattern,
-*   indicating a custom domain is configured and organizationHandle must be provided explicitly
+* @param baseUrl - The base URL of the ThunderID identity server (string or undefined)
+* @returns boolean - true if sensible fallbacks can be used, false otherwise
 *
 * @example
-* ```typescript
-* const handle = deriveOrganizationHandleFromBaseUrl('https://localhost:8090/t/dxlab');
-* // Returns: 'dxlab'
-*
-* // Custom domain - returns empty string with a warning
-* const handle2 = deriveOrganizationHandleFromBaseUrl('https://custom.example.com/auth');
-* // Returns: '' and logs a warning
-* ```
+* isRecognizedBaseUrlPattern('https://localhost:8090/t/dxlab'); // true
+* isRecognizedBaseUrlPattern('https://custom.example.com/auth'); // false
 */
-const deriveOrganizationHandleFromBaseUrl = (baseUrl) => {
-	if (!baseUrl) throw new ThunderIDRuntimeError("Base URL is required to derive organization handle.", "javascript-deriveOrganizationHandleFromBaseUrl-ValidationError-001", "javascript", "A valid base URL must be provided to extract the organization handle.");
+const isRecognizedBaseUrlPattern = (baseUrl) => {
+	if (!baseUrl) throw new ThunderIDRuntimeError("Base URL is required to derive if the `baseUrl` is recognized.", "isRecognizedBaseUrlPattern-ValidationError-001", "javascript", "A valid base URL must be provided to derive if the `baseUrl` is recognized to use the sensible fallbacks.");
 	let parsedUrl;
 	try {
 		parsedUrl = new URL(baseUrl);
 	} catch (error$1) {
-		throw new ThunderIDRuntimeError(`Invalid base URL format: ${baseUrl}`, "javascript-deriveOrganizationHandleFromBaseUrl-ValidationError-002", "javascript", "The provided base URL does not conform to valid URL syntax.");
+		throw new ThunderIDRuntimeError(`Invalid base URL format: ${baseUrl}`, "isRecognizedBaseUrlPattern-ValidationError-002", "javascript", "The provided base URL does not conform to valid URL syntax.");
 	}
 	const pathSegments = parsedUrl.pathname?.split("/")?.filter((segment) => segment?.length > 0);
 	if (pathSegments.length < 2 || pathSegments[0] !== "t") {
-		logger_default.warn(new ThunderIDRuntimeError("Organization handle is required since a custom domain is configured.", "javascript-deriveOrganizationHandleFromBaseUrl-CustomDomainError-002", "javascript", "The provided base URL does not follow the expected URL pattern (/t/{orgHandle}). Please provide the organizationHandle explicitly in the configuration.").toString());
-		return "";
-	}
-	const organizationHandle = pathSegments[1];
-	if (!organizationHandle || organizationHandle.trim().length === 0) {
-		logger_default.warn(new ThunderIDRuntimeError("Organization handle is required since a custom domain is configured.", "javascript-deriveOrganizationHandleFromBaseUrl-CustomDomainError-003", "javascript", "The organization handle could not be extracted from the base URL. Please provide the organizationHandle explicitly in the configuration.").toString());
-		return "";
+		logger_default.warn("[isRecognizedBaseUrlPattern] The provided base URL does not follow the expected URL pattern (/t/{orgHandle}).");
+		return false;
 	}
-	return organizationHandle;
+	return true;
 };
-var deriveOrganizationHandleFromBaseUrl_default = deriveOrganizationHandleFromBaseUrl;
+var isRecognizedBaseUrlPattern_default = isRecognizedBaseUrlPattern;
 
 //#endregion
 //#region src/utils/flattenUserSchema.ts
@@ -5697,14 +4660,14 @@ var generateFlattenedUserProfile_default = generateFlattenedUserProfile;
 * If the baseUrl is recognized (standard ThunderID pattern), constructs the sign-up URL.
 * Otherwise, returns an empty string.
 *
-* @param baseUrl - The base URL of the ThunderID identity server (string or undefined)
+* @param config - The ThunderID client configuration
 * @returns The sign-up URL if baseUrl is recognized, otherwise an empty string
 */
 const getRedirectBasedSignUpUrl = (config) => {
 	const { baseUrl } = config;
 	if (!isRecognizedBaseUrlPattern_default(baseUrl)) return "";
 	let signUpBaseUrl = baseUrl;
-	if (identifyPlatform_default(config) === Platform.ThunderID) try {
+	try {
 		const url$1 = new URL(baseUrl);
 		if (/([a-z0-9-]+\.)*api\.thunderid\.io$/i.test(url$1.hostname)) {
 			url$1.hostname = url$1.hostname.replace("api.", "accounts.");
@@ -5722,7 +4685,64 @@ const getRedirectBasedSignUpUrl = (config) => {
 var getRedirectBasedSignUpUrl_default = getRedirectBasedSignUpUrl;
 
 //#endregion
-//#region src/utils/v2/isEmojiUri.ts
+//#region src/utils/isEmpty.ts
+/**
+* Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
+*
+* WSO2 LLC. licenses this file to you under the Apache License,
+* Version 2.0 (the "License"); you may not use this file except
+* in compliance with the License.
+* You may obtain a copy of the License at
+*
+*     http://www.apache.org/licenses/LICENSE-2.0
+*
+* Unless required by applicable law or agreed to in writing,
+* software distributed under the License is distributed on an
+* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+* KIND, either express or implied. See the License for the
+* specific language governing permissions and limitations
+* under the License.
+*/
+/**
+* Checks if a value is considered empty.
+*
+* A value is considered empty if it is:
+* - null
+* - undefined
+* - empty string ("")
+* - string containing only whitespace characters
+* - empty array ([])
+* - empty object ({})
+*
+* @param value - The value to check
+* @returns true if the value is empty, false otherwise
+*
+* @example
+* ```typescript
+* isEmpty(null);              // true
+* isEmpty(undefined);         // true
+* isEmpty("");                // true
+* isEmpty("   ");             // true
+* isEmpty("hello");           // false
+* isEmpty([]);                // true
+* isEmpty([1, 2, 3]);         // false
+* isEmpty({});                // true
+* isEmpty({ name: "John" });  // false
+* isEmpty(0);                 // false
+* isEmpty(false);             // false
+* ```
+*/
+const isEmpty = (value) => {
+	if (value === null || value === void 0) return true;
+	if (typeof value === "string") return value.trim() === "";
+	if (Array.isArray(value)) return value.length === 0;
+	if (typeof value === "object" && value.constructor === Object) return Object.keys(value).length === 0;
+	return false;
+};
+var isEmpty_default = isEmpty;
+
+//#endregion
+//#region src/utils/isEmojiUri.ts
 /**
 * Copyright (c) 2026, WSO2 LLC. (https://www.wso2.com).
 *
@@ -5758,7 +4778,7 @@ const isEmojiUri = (uri) => typeof uri === "string" && uri.startsWith(EMOJI_URI_
 var isEmojiUri_default = isEmojiUri;
 
 //#endregion
-//#region src/utils/v2/extractEmojiFromUri.ts
+//#region src/utils/extractEmojiFromUri.ts
 /**
 * Extracts the emoji character from an `emoji:` URI.
 *
@@ -5811,18 +4831,6 @@ var extractEmojiFromUri_default = extractEmojiFromUri;
 const removeTrailingSlash = (path) => path.endsWith("/") ? path.slice(0, -1) : path;
 var removeTrailingSlash_default = removeTrailingSlash;
 
-//#endregion
-//#region src/utils/resolveFieldType.ts
-const resolveFieldType = (field) => {
-	if (field.type === EmbeddedSignInFlowAuthenticatorParamType.String) {
-		if (field.param === EmbeddedSignInFlowAuthenticatorExtendedParamType.Otp) return FieldType.Otp;
-		if (field?.confidential) return FieldType.Password;
-		return FieldType.Text;
-	}
-	throw new ThunderIDRuntimeError(`Field type is not supported: ${field.type}`, "resolveFieldType-Invalid-001", "javascript", "The provided field type is not supported. Please check the field configuration.");
-};
-var resolveFieldType_default = resolveFieldType;
-
 //#endregion
 //#region src/utils/resolveFieldName.ts
 const resolveFieldName = (field) => {
@@ -5832,7 +4840,7 @@ const resolveFieldName = (field) => {
 var resolveFieldName_default = resolveFieldName;
 
 //#endregion
-//#region src/utils/v2/resolveMeta.ts
+//#region src/utils/resolveMeta.ts
 /**
 * Resolves a dot-path expression against a FlowMetadataResponse object.
 *
@@ -5859,7 +4867,7 @@ function resolveMeta(path, meta) {
 }
 
 //#endregion
-//#region src/utils/v2/parseFlowTemplateLiteral.ts
+//#region src/utils/parseFlowTemplateLiteral.ts
 /**
 * Copyright (c) 2026, WSO2 LLC. (https://www.wso2.com).
 *
@@ -5955,7 +4963,7 @@ function parseFlowTemplateLiteral(content) {
 }
 
 //#endregion
-//#region src/utils/v2/resolveFlowTemplateLiterals.ts
+//#region src/utils/resolveFlowTemplateLiterals.ts
 /**
 * Global version of {@link FLOW_TEMPLATE_LITERAL_REGEX} for use with `String.prototype.replace`.
 */
@@ -5992,7 +5000,7 @@ function resolveFlowTemplateLiterals(text, { t, meta }) {
 }
 
 //#endregion
-//#region src/utils/v2/countryCodeToFlagEmoji.ts
+//#region src/utils/countryCodeToFlagEmoji.ts
 /**
 * Copyright (c) 2026, WSO2 LLC. (https://www.wso2.com).
 *
@@ -6022,7 +5030,7 @@ function countryCodeToFlagEmoji(countryCode) {
 }
 
 //#endregion
-//#region src/utils/v2/resolveLocaleDisplayName.ts
+//#region src/utils/resolveLocaleDisplayName.ts
 /**
 * Copyright (c) 2026, WSO2 LLC. (https://www.wso2.com).
 *
@@ -6060,7 +5068,7 @@ function resolveLocaleDisplayName(locale, displayLocale) {
 }
 
 //#endregion
-//#region src/utils/v2/resolveLocaleEmoji.ts
+//#region src/utils/resolveLocaleEmoji.ts
 /**
 * Maps BCP 47 language subtags to ISO 3166-1 alpha-2 country codes used for
 * flag emoji resolution when no country subtag is present in the locale.
@@ -6126,165 +5134,97 @@ function resolveLocaleEmoji(locale) {
 var resolveLocaleEmoji_default = resolveLocaleEmoji;
 
 //#endregion
-//#region src/utils/withVendorCSSClassPrefix.ts
+//#region src/utils/evaluateValidationRule.ts
 /**
-* Adds a vendor-specific prefix to a CSS class name.
-*
-* @param className - The original CSS class name to be prefixed
-* @returns A new string with the vendor prefix added to the class name
-*
-* @example
-* ```typescript
-* // Usage with clsx
-* clsx(withVendorCSSClassPrefix('sign-in-button'), className)
-* // Result: "wso2-sign-in-button"
-* ```
+* Default i18n fallback keys returned when a `ValidationRule.message` is not provided.
+* Match the server-side defaults so a flow author who omits `message` sees the same
+* string regardless of whether the rule was evaluated client-side or server-side.
 */
-const withVendorCSSClassPrefix = (className) => `${VendorConstants_default.VENDOR_PREFIX}-${className}`;
-var withVendorCSSClassPrefix_default = withVendorCSSClassPrefix;
-
-//#endregion
-//#region src/utils/transformBrandingPreferenceToTheme.ts
-const extractColorValue = (colorVariant, preferDark = false) => {
-	if (preferDark && colorVariant?.dark?.trim()) return colorVariant.dark;
-	return colorVariant?.main;
+const DEFAULT_VALIDATION_MESSAGE_KEYS = {
+	regex: "validation.pattern.invalid",
+	minLength: "validation.minLength.invalid",
+	maxLength: "validation.maxLength.invalid"
 };
 /**
-* Safely extracts contrast text color from the branding preference structure
-*/
-const extractContrastText = (colorVariant) => colorVariant?.contrastText;
+* Evaluates a single validation rule against the given input value.
+*
+* Returns `null` when the rule passes, or the rule's `message` (or the default
+* fallback key if `message` is absent) when it fails.
+*
+* Behavior notes:
+* - **regex**: an invalid regex pattern (one that cannot be compiled) is treated as
+*   **passing** on the client. This is lenient — the server is authoritative and
+*   will still enforce the rule if it can compile the pattern. Failing closed in the
+*   SDK risks denial-of-service for misconfigured flows.
+* - **minLength / maxLength**: compared against `value.length`. A non-numeric `value`
+*   on the rule is treated as the rule passing.
+* - Unknown rule types are treated as passing (forward compatibility with future types).
+*/
+const evaluateValidationRule = (rule, value) => {
+	const fail = () => rule.message ?? DEFAULT_VALIDATION_MESSAGE_KEYS[rule.type];
+	switch (rule.type) {
+		case "regex": {
+			if (typeof rule.value !== "string" || rule.value === "") return null;
+			let re;
+			try {
+				re = new RegExp(rule.value);
+			} catch {
+				return null;
+			}
+			return re.test(value) ? null : fail();
+		}
+		case "minLength":
+			if (typeof rule.value !== "number" || Number.isNaN(rule.value)) return null;
+			return value.length >= rule.value ? null : fail();
+		case "maxLength":
+			if (typeof rule.value !== "number" || Number.isNaN(rule.value)) return null;
+			return value.length <= rule.value ? null : fail();
+		default: return null;
+	}
+};
+var evaluateValidationRule_default = evaluateValidationRule;
+
+//#endregion
+//#region src/utils/buildValidatorFromRules.ts
 /**
-* Transforms a ThemeVariant from branding preference to ThemeConfig
+* Composes an array of `ValidationRule`s into a single validator function suitable for
+* `useForm`'s `FormField.validator` slot.
+*
+* The composed validator evaluates rules in declaration order and returns the **first**
+* failing rule's message — matching the SDK's render-prop shape of a single string per
+* field. When all rules pass it returns `null`.
+*
+* Returns `null` when no rules are supplied so callers can compose conditionally.
 */
-const transformThemeVariant = (themeVariant, isDark = false) => {
-	const { buttons } = themeVariant;
-	const { colors } = themeVariant;
-	const { images } = themeVariant;
-	const { inputs } = themeVariant;
-	const config = {
-		colors: {
-			action: {
-				activatedOpacity: .12,
-				active: isDark ? "rgba(255, 255, 255, 0.70)" : "rgba(0, 0, 0, 0.54)",
-				disabled: isDark ? "rgba(255, 255, 255, 0.26)" : "rgba(0, 0, 0, 0.26)",
-				disabledBackground: isDark ? "rgba(255, 255, 255, 0.12)" : "rgba(0, 0, 0, 0.12)",
-				disabledOpacity: .38,
-				focus: isDark ? "rgba(255, 255, 255, 0.12)" : "rgba(0, 0, 0, 0.12)",
-				focusOpacity: .12,
-				hover: isDark ? "rgba(255, 255, 255, 0.04)" : "rgba(0, 0, 0, 0.04)",
-				hoverOpacity: .04,
-				selected: isDark ? "rgba(255, 255, 255, 0.08)" : "rgba(0, 0, 0, 0.08)",
-				selectedOpacity: .08
-			},
-			background: {
-				body: {
-					dark: (colors?.background?.body)?.dark || (colors?.background?.body)?.main,
-					main: extractColorValue(colors?.background?.body, isDark) ?? ""
-				},
-				dark: (colors?.background?.surface)?.dark || (colors?.background?.surface)?.main,
-				disabled: extractColorValue(colors?.background?.surface, isDark) ?? "",
-				surface: extractColorValue(colors?.background?.surface, isDark) ?? ""
-			},
-			border: colors?.outlined?.default ?? "",
-			error: {
-				contrastText: extractContrastText(colors?.alerts?.error) ?? "",
-				dark: (colors?.alerts?.error)?.dark || (colors?.alerts?.error)?.main,
-				main: extractColorValue(colors?.alerts?.error, isDark) ?? ""
-			},
-			info: {
-				contrastText: extractContrastText(colors?.alerts?.info) ?? "",
-				dark: (colors?.alerts?.info)?.dark || (colors?.alerts?.info)?.main,
-				main: extractColorValue(colors?.alerts?.info, isDark) ?? ""
-			},
-			primary: {
-				contrastText: extractContrastText(colors?.primary) ?? "",
-				dark: colors?.primary?.dark || (colors?.primary)?.main,
-				main: extractColorValue(colors?.primary, isDark) ?? ""
-			},
-			secondary: {
-				contrastText: extractContrastText(colors?.secondary) ?? "",
-				dark: colors?.secondary?.dark || (colors?.secondary)?.main,
-				main: extractColorValue(colors?.secondary, isDark) ?? ""
-			},
-			success: {
-				contrastText: extractContrastText(colors?.alerts?.neutral) ?? "",
-				dark: (colors?.alerts?.neutral)?.dark || (colors?.alerts?.neutral)?.main,
-				main: extractColorValue(colors?.alerts?.neutral, isDark) ?? ""
-			},
-			text: {
-				dark: (colors?.text)?.dark || (colors?.text)?.primary,
-				primary: (colors?.text)?.primary ?? "",
-				secondary: (colors?.text)?.secondary ?? ""
-			},
-			warning: {
-				contrastText: extractContrastText(colors?.alerts?.warning) ?? "",
-				dark: (colors?.alerts?.warning)?.dark || (colors?.alerts?.warning)?.main,
-				main: extractColorValue(colors?.alerts?.warning, isDark) ?? ""
-			}
-		},
-		images: {
-			favicon: images?.favicon ? {
-				alt: images.favicon.altText,
-				title: images.favicon.title,
-				url: images.favicon.imgURL
-			} : void 0,
-			logo: images?.logo ? {
-				alt: images.logo.altText,
-				title: images.logo.title,
-				url: images.logo.imgURL
-			} : void 0
+const buildValidatorFromRules = (rules) => {
+	if (!rules || rules.length === 0) return null;
+	return (value) => {
+		for (const rule of rules) {
+			const message = evaluateValidationRule_default(rule, value);
+			if (message !== null) return message;
 		}
+		return null;
 	};
-	const buttonBorderRadius = buttons?.primary?.base?.border?.borderRadius;
-	const fieldBorderRadius = inputs?.base?.border?.borderRadius;
-	if (buttonBorderRadius || fieldBorderRadius) config.components = {
-		...buttonBorderRadius && { Button: { styleOverrides: { root: { borderRadius: buttonBorderRadius } } } },
-		...fieldBorderRadius && { Field: { styleOverrides: { root: { borderRadius: fieldBorderRadius } } } }
-	};
-	return config;
 };
+var buildValidatorFromRules_default = buildValidatorFromRules;
+
+//#endregion
+//#region src/utils/withVendorCSSClassPrefix.ts
 /**
-* Transforms branding preference response to Theme object
-*
-* @param brandingPreference - The branding preference response from getBrandingPreference
-* @param forceTheme - Optional parameter to force a specific theme ('light' or 'dark'),
-*                     if not provided, will use the activeTheme from branding preference
-* @returns Theme object that can be used with the theme system
+* Adds a vendor-specific prefix to a CSS class name.
 *
-* The function extracts the following from branding preference:
-* - Colors (primary, secondary, background, text, alerts, etc.)
-* - Border radius from buttons and inputs
-* - Images (logo and favicon with their URLs, titles, and alt text)
-* - Typography settings
+* @param className - The original CSS class name to be prefixed
+* @returns A new string with the vendor prefix added to the class name
 *
 * @example
 * ```typescript
-* const brandingPreference = await getBrandingPreference({ baseUrl: "..." });
-* const theme = transformBrandingPreferenceToTheme(brandingPreference);
-*
-* // Access image URLs via CSS variables
-* // Logo: var(--wso2-image-logo-url)
-* // Favicon: var(--wso2-image-favicon-url)
-*
-* // Force light theme regardless of branding preference activeTheme
-* const lightTheme = transformBrandingPreferenceToTheme(brandingPreference, 'light');
+* // Usage with clsx
+* clsx(withVendorCSSClassPrefix('sign-in-button'), className)
+* // Result: "wso2-sign-in-button"
 * ```
 */
-const transformBrandingPreferenceToTheme = (brandingPreference, forceTheme) => {
-	const themeConfig = brandingPreference?.preference?.theme;
-	if (!themeConfig) return createTheme_default({}, false);
-	let activeThemeKey;
-	if (forceTheme) activeThemeKey = forceTheme.toUpperCase();
-	else activeThemeKey = themeConfig.activeTheme || "LIGHT";
-	const themeVariant = themeConfig[activeThemeKey];
-	if (!themeVariant) {
-		const fallbackVariant = themeConfig.LIGHT || themeConfig.DARK;
-		if (fallbackVariant) return createTheme_default(transformThemeVariant(fallbackVariant, activeThemeKey === "DARK"), activeThemeKey === "DARK");
-		return createTheme_default({}, activeThemeKey === "DARK");
-	}
-	return createTheme_default(transformThemeVariant(themeVariant, activeThemeKey === "DARK"), activeThemeKey === "DARK");
-};
-var transformBrandingPreferenceToTheme_default = transformBrandingPreferenceToTheme;
+const withVendorCSSClassPrefix = (className) => `${VendorConstants_default.VENDOR_PREFIX}-${className}`;
+var withVendorCSSClassPrefix_default = withVendorCSSClassPrefix;
 
 //#endregion
 //#region src/HttpClient.ts
@@ -6426,6 +5366,9 @@ const en_US = {
 		"elements.fields.organization.select.label": "Select Organization",
 		"elements.fields.organization.select.placeholder": "Choose an organization",
 		"validations.required.field.error": "This field is required",
+		"validation.pattern.invalid": "This value does not match the required format.",
+		"validation.minLength.invalid": "This value is too short.",
+		"validation.maxLength.invalid": "This value is too long.",
 		"signin.heading": "Sign In",
 		"signin.subheading": "Welcome back! Please sign in to continue.",
 		"signup.heading": "Sign Up",
@@ -6536,6 +5479,9 @@ const fr_FR = {
 		"elements.fields.organization.select.label": "Sélectionner l'organisation",
 		"elements.fields.organization.select.placeholder": "Choisissez une organisation",
 		"validations.required.field.error": "Ce champ est obligatoire",
+		"validation.pattern.invalid": "Cette valeur ne correspond pas au format requis.",
+		"validation.minLength.invalid": "Cette valeur est trop courte.",
+		"validation.maxLength.invalid": "Cette valeur est trop longue.",
 		"signin.heading": "Se connecter",
 		"signin.subheading": "Entrez vos identifiants pour continuer.",
 		"signup.heading": "S'inscrire",
@@ -6646,6 +5592,9 @@ const te_IN = {
 		"elements.fields.organization.select.label": "ఆర్గనైజేషన్‌ను ఎంచుకోండి",
 		"elements.fields.organization.select.placeholder": "సంస్థను ఎంచుకోండి",
 		"validations.required.field.error": "ఈ ఫీల్డ్ అవసరం",
+		"validation.pattern.invalid": "ఈ విలువ అవసరమైన ఆకృతికి సరిపోలడం లేదు.",
+		"validation.minLength.invalid": "ఈ విలువ చాలా చిన్నది.",
+		"validation.maxLength.invalid": "ఈ విలువ చాలా పెద్దది.",
 		"signin.heading": "సైన్ ఇన్ చేయండి",
 		"signin.subheading": "కొనసాగించడానికి మీ వివరాలు ఇవ్వండి.",
 		"signup.heading": "సైన్ అప్ చేయండి",
@@ -6756,6 +5705,9 @@ const hi_IN = {
 		"elements.fields.organization.select.label": "संगठन चुनें",
 		"elements.fields.organization.select.placeholder": "एक संगठन चुनें",
 		"validations.required.field.error": "यह फील्ड आवश्यक है",
+		"validation.pattern.invalid": "यह मान आवश्यक प्रारूप से मेल नहीं खाता।",
+		"validation.minLength.invalid": "यह मान बहुत छोटा है।",
+		"validation.maxLength.invalid": "यह मान बहुत लंबा है।",
 		"signin.heading": "साइन इन",
 		"signin.subheading": "जारी रखने के लिए अपनी प्रमाणिक जानकारी दर्ज करें।",
 		"signup.heading": "साइन अप",
@@ -6866,6 +5818,9 @@ const pt_BR = {
 		"elements.fields.organization.select.label": "Selecionar Organização",
 		"elements.fields.organization.select.placeholder": "Selecione uma organização",
 		"validations.required.field.error": "Este campo é obrigatório",
+		"validation.pattern.invalid": "Este valor não corresponde ao formato necessário.",
+		"validation.minLength.invalid": "Este valor é muito curto.",
+		"validation.maxLength.invalid": "Este valor é muito longo.",
 		"signin.heading": "Entrar",
 		"signin.subheading": "Digite suas credencias para continuar.",
 		"signup.heading": "Cadastra-se",
@@ -6976,6 +5931,9 @@ const pt_PT = {
 		"elements.fields.organization.select.label": "Selecionar Organização",
 		"elements.fields.organization.select.placeholder": "Selecione uma organização",
 		"validations.required.field.error": "Este campo é obrigatório",
+		"validation.pattern.invalid": "Este valor não corresponde ao formato necessário.",
+		"validation.minLength.invalid": "Este valor é demasiado curto.",
+		"validation.maxLength.invalid": "Este valor é demasiado longo.",
 		"signin.heading": "Iniciar Sessão",
 		"signin.subheading": "Introduza as suas credenciais para continuar.",
 		"signup.heading": "Registar-se",
@@ -7086,6 +6044,9 @@ const ta_IN = {
 		"elements.fields.organization.select.label": "அமைப்பை தேர்ந்தெடு",
 		"elements.fields.organization.select.placeholder": "அமைப்பை தெரிந்தெடுக்கவும்",
 		"validations.required.field.error": "இந்த புலம் தேவை",
+		"validation.pattern.invalid": "இந்த மதிப்பு தேவையான வடிவத்துடன் பொருந்தவில்லை.",
+		"validation.minLength.invalid": "இந்த மதிப்பு மிகவும் குறுகியது.",
+		"validation.maxLength.invalid": "இந்த மதிப்பு மிகவும் நீளமானது.",
 		"signin.heading": "உள்நுழை",
 		"signin.subheading": "தொடர உங்கள் சான்றுகளை உள்ளிடவும்.",
 		"signup.heading": "பதிவு செய்",
@@ -7196,6 +6157,9 @@ const si_LK = {
 		"elements.fields.organization.select.label": "සංවිධානය තෝරන්න",
 		"elements.fields.organization.select.placeholder": "සංවිධානයක් සැළුම් කරන්න",
 		"validations.required.field.error": "මෙම ක්ෂේත්‍රය අවශ්‍යයි",
+		"validation.pattern.invalid": "මෙම අගය අවශ්‍ය ආකෘතියට නොගැලපේ.",
+		"validation.minLength.invalid": "මෙම අගය ඉතා කෙටියි.",
+		"validation.maxLength.invalid": "මෙම අගය ඉතා දිගයි.",
 		"signin.heading": "ලොග් වෙන්න",
 		"signin.subheading": "ඉදිරියට යාමට ඔබේ සත්‍යාපන තොරතුරු ඇතුළත් කරන්න.",
 		"signup.heading": "ලියාපදිංචි වන්න",
@@ -7351,4 +6315,4 @@ const normalizeTranslations = (translations) => {
 var normalizeTranslations_default = normalizeTranslations;
 
 //#endregion
-export { ApplicationNativeAuthenticationConstants_default as ApplicationNativeAuthenticationConstants, AuthenticationHelper_default as AuthenticationHelper, DEFAULT_THEME, EMOJI_URI_SCHEME, EmbeddedFlowActionVariant as EmbeddedFlowActionVariantV2, EmbeddedFlowComponentType, EmbeddedFlowComponentType$1 as EmbeddedFlowComponentTypeV2, EmbeddedFlowEventType as EmbeddedFlowEventTypeV2, EmbeddedFlowResponseType, EmbeddedFlowStatus, EmbeddedFlowTextVariant as EmbeddedFlowTextVariantV2, EmbeddedFlowType, EmbeddedRecoveryFlowStatus as EmbeddedRecoveryFlowStatusV2, EmbeddedRecoveryFlowType as EmbeddedRecoveryFlowTypeV2, EmbeddedSignInFlowAuthenticatorKnownIdPType, EmbeddedSignInFlowAuthenticatorParamType, EmbeddedSignInFlowAuthenticatorPromptType, EmbeddedSignInFlowStatus, EmbeddedSignInFlowStatus$1 as EmbeddedSignInFlowStatusV2, EmbeddedSignInFlowStepType, EmbeddedSignInFlowType, EmbeddedSignInFlowType$1 as EmbeddedSignInFlowTypeV2, EmbeddedSignUpFlowStatus as EmbeddedSignUpFlowStatusV2, EmbeddedSignUpFlowType as EmbeddedSignUpFlowTypeV2, FieldType, FlowMetaType, FlowMode, HttpClient, IsomorphicCrypto, OIDCRequestConstants_default as OIDCRequestConstants, Platform, StorageManager_default as StorageManager, ThunderIDAPIError, ThunderIDAuthException, ThunderIDError, ThunderIDJavaScriptClient_default as ThunderIDJavaScriptClient, ThunderIDRuntimeError, TokenConstants_default as TokenConstants, TranslationBundleConstants_default as TranslationBundleConstants, VendorConstants_default as VendorConstants, WellKnownSchemaIds, arrayBufferToBase64url_default as arrayBufferToBase64url, base64urlToArrayBuffer_default as base64urlToArrayBuffer, bem_default as bem, configure as configureLogger, countryCodeToFlagEmoji, createComponentLogger, createLogger, createOrganization_default as createOrganization, createPackageComponentLogger, createPackageLogger, createPatchOperations, createTheme_default as createTheme, debug, deepMerge_default as deepMerge, deriveOrganizationHandleFromBaseUrl_default as deriveOrganizationHandleFromBaseUrl, error, executeEmbeddedRecoveryFlowV2_default as executeEmbeddedRecoveryFlowV2, executeEmbeddedSignInFlow_default as executeEmbeddedSignInFlow, executeEmbeddedSignInFlowV2_default as executeEmbeddedSignInFlowV2, executeEmbeddedSignUpFlow_default as executeEmbeddedSignUpFlow, executeEmbeddedSignUpFlowV2_default as executeEmbeddedSignUpFlowV2, executeEmbeddedUserOnboardingFlowV2_default as executeEmbeddedUserOnboardingFlowV2, extractEmojiFromUri_default as extractEmojiFromUri, extractPkceStorageKeyFromState_default as extractPkceStorageKeyFromState, extractUserClaimsFromIdToken_default as extractUserClaimsFromIdToken, flattenUserSchema_default as flattenUserSchema, formatDate_default as formatDate, generateFlattenedUserProfile_default as generateFlattenedUserProfile, generateUserProfile_default as generateUserProfile, get_default as get, getAllOrganizations_default as getAllOrganizations, getBrandingPreference_default as getBrandingPreference, getDefaultI18nBundles_default as getDefaultI18nBundles, getFlowMetaV2_default as getFlowMetaV2, getLatestStateParam_default as getLatestStateParam, getMeOrganizations_default as getMeOrganizations, getOrganization_default as getOrganization, getOrganizationUnitChildren_default as getOrganizationUnitChildren, getRedirectBasedSignUpUrl_default as getRedirectBasedSignUpUrl, getSchemas_default as getSchemas, getScim2Me_default as getScim2Me, getUserInfo_default as getUserInfo, identifyPlatform_default as identifyPlatform, info, initializeEmbeddedSignInFlow_default as initializeEmbeddedSignInFlow, isEmojiUri_default as isEmojiUri, isEmpty_default as isEmpty, isRecognizedBaseUrlPattern_default as isRecognizedBaseUrlPattern, logger_default as logger, normalizeTranslations_default as normalizeTranslations, processOpenIDScopes_default as processOpenIDScopes, processUsername_default as processUsername, removeTrailingSlash_default as removeTrailingSlash, resolveFieldName_default as resolveFieldName, resolveFieldType_default as resolveFieldType, resolveFlowTemplateLiterals, resolveLocaleDisplayName, resolveLocaleEmoji_default as resolveLocaleEmoji, resolveMeta, set_default as set, transformBrandingPreferenceToTheme_default as transformBrandingPreferenceToTheme, updateMeProfile_default as updateMeProfile, updateOrganization_default as updateOrganization, warn, withVendorCSSClassPrefix_default as withVendorCSSClassPrefix };
+export { ApplicationNativeAuthenticationConstants_default as ApplicationNativeAuthenticationConstants, AuthenticationHelper_default as AuthenticationHelper, DEFAULT_THEME, DEFAULT_VALIDATION_MESSAGE_KEYS, EMOJI_URI_SCHEME, EmbeddedFlowActionVariant, EmbeddedFlowComponentType, EmbeddedFlowEventType, EmbeddedFlowResponseType, EmbeddedFlowTextVariant, EmbeddedFlowType, EmbeddedRecoveryFlowStatus, EmbeddedRecoveryFlowType, EmbeddedSignInFlowStatus, EmbeddedSignInFlowType, EmbeddedSignUpFlowStatus, EmbeddedSignUpFlowType, FieldType, FlowMetaType, FlowMode, HttpClient, IsomorphicCrypto, OIDCRequestConstants_default as OIDCRequestConstants, StorageManager_default as StorageManager, ThunderIDAPIError, ThunderIDAuthException, ThunderIDError, ThunderIDJavaScriptClient_default as ThunderIDJavaScriptClient, ThunderIDRuntimeError, TokenConstants_default as TokenConstants, TranslationBundleConstants_default as TranslationBundleConstants, VendorConstants_default as VendorConstants, WellKnownSchemaIds, arrayBufferToBase64url_default as arrayBufferToBase64url, base64urlToArrayBuffer_default as base64urlToArrayBuffer, bem_default as bem, buildValidatorFromRules_default as buildValidatorFromRules, configure as configureLogger, countryCodeToFlagEmoji, createComponentLogger, createLogger, createPackageComponentLogger, createPackageLogger, createTheme_default as createTheme, debug, deepMerge_default as deepMerge, error, evaluateValidationRule_default as evaluateValidationRule, executeEmbeddedRecoveryFlow_default as executeEmbeddedRecoveryFlow, executeEmbeddedSignInFlow_default as executeEmbeddedSignInFlow, executeEmbeddedSignUpFlow_default as executeEmbeddedSignUpFlow, executeEmbeddedUserOnboardingFlow_default as executeEmbeddedUserOnboardingFlow, extractEmojiFromUri_default as extractEmojiFromUri, extractPkceStorageKeyFromState_default as extractPkceStorageKeyFromState, extractUserClaimsFromIdToken_default as extractUserClaimsFromIdToken, flattenUserSchema_default as flattenUserSchema, formatDate_default as formatDate, generateFlattenedUserProfile_default as generateFlattenedUserProfile, generateUserProfile_default as generateUserProfile, get_default as get, getDefaultI18nBundles_default as getDefaultI18nBundles, getFlowMeta_default as getFlowMeta, getLatestStateParam_default as getLatestStateParam, getOrganizationUnitChildren_default as getOrganizationUnitChildren, getRedirectBasedSignUpUrl_default as getRedirectBasedSignUpUrl, getSchemas_default as getSchemas, getScim2Me_default as getScim2Me, getUserInfo_default as getUserInfo, info, isEmojiUri_default as isEmojiUri, isEmpty_default as isEmpty, isRecognizedBaseUrlPattern_default as isRecognizedBaseUrlPattern, logger_default as logger, normalizeTranslations_default as normalizeTranslations, processOpenIDScopes_default as processOpenIDScopes, processUsername_default as processUsername, removeTrailingSlash_default as removeTrailingSlash, resolveFieldName_default as resolveFieldName, resolveFlowTemplateLiterals, resolveLocaleDisplayName, resolveLocaleEmoji_default as resolveLocaleEmoji, resolveMeta, set_default as set, updateMeProfile_default as updateMeProfile, warn, withVendorCSSClassPrefix_default as withVendorCSSClassPrefix };