@trymellon/js 1.5.0 → 1.6.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/angular.cjs +1 -1
- package/dist/angular.cjs.map +1 -1
- package/dist/angular.js +1 -1
- package/dist/angular.js.map +1 -1
- package/dist/index.cjs +2 -2
- package/dist/index.cjs.map +1 -1
- package/dist/index.global.js +2 -2
- package/dist/index.global.js.map +1 -1
- package/dist/index.js +2 -2
- package/dist/index.js.map +1 -1
- package/dist/react.cjs +1 -1
- package/dist/react.cjs.map +1 -1
- package/dist/react.js +1 -1
- package/dist/react.js.map +1 -1
- package/package.json +1 -1
package/dist/index.cjs
CHANGED
|
@@ -1,3 +1,3 @@
|
|
|
1
|
-
'use strict';var g=e=>({ok:true,value:e}),a=e=>({ok:false,error:e});var w=class e extends Error{code;details;isTryMellonError=true;constructor(r,t,n){super(t),this.name="TryMellonError",this.code=r,this.details=n,Error.captureStackTrace&&Error.captureStackTrace(this,e);}},we={NOT_SUPPORTED:"WebAuthn is not supported in this environment",USER_CANCELLED:"User cancelled the operation",PASSKEY_NOT_FOUND:"Passkey not found",SESSION_EXPIRED:"Session has expired",NETWORK_FAILURE:"Network request failed",INVALID_ARGUMENT:"Invalid argument provided",TIMEOUT:"Operation timed out",ABORTED:"Operation was aborted",ABORT_ERROR:"Operation aborted by user or timeout",CHALLENGE_MISMATCH:"This link was already used or expired. Please try again from your computer.",UNKNOWN_ERROR:"An unknown error occurred"};function R(e,r,t){return new w(e,r??we[e],t)}function N(e){return e instanceof w||typeof e=="object"&&e!==null&&"isTryMellonError"in e&&e.isTryMellonError===true}function P(){return R("NOT_SUPPORTED")}function Ne(){return R("USER_CANCELLED")}function Ue(e){return R("NETWORK_FAILURE",void 0,{cause:e?.message,originalError:e})}function Fe(){return R("TIMEOUT")}function v(e,r){return R("INVALID_ARGUMENT",`Invalid argument: ${e} - ${r}`,{field:e,reason:r})}function fe(e){return R("UNKNOWN_ERROR",`Failed to ${e} credential`,{operation:e})}function $(e){return R("NOT_SUPPORTED",`No base64 ${e==="encode"?"encoding":"decoding"} available`,{type:e})}function X(e,r){try{let t=new URL(e);if(t.protocol!=="https:"&&t.protocol!=="http:")throw v(r,"must use http or https protocol")}catch(t){throw N(t)?t:v(r,"must be a valid URL")}}function S(e,r,t,n){if(!Number.isFinite(e))throw v(r,"must be a finite number");if(e<t||e>n)throw v(r,`must be between ${t} and ${n}`)}function U(e,r){if(typeof e!="string"||e.length===0)throw v(r,"must be a non-empty string");if(!/^[A-Za-z0-9_-]+$/.test(e))throw v(r,"must be a valid base64url string")}var Le={NotAllowedError:"USER_CANCELLED",AbortError:"ABORTED",NotSupportedError:"NOT_SUPPORTED",SecurityError:"NOT_SUPPORTED",InvalidStateError:"UNKNOWN_ERROR",UnknownError:"UNKNOWN_ERROR"};function h(e){if(e instanceof DOMException){let r=e.name,t=e.message||"WebAuthn operation failed",n=Le[r]??"UNKNOWN_ERROR";return R(n,t,{originalError:e})}return e instanceof Error?R("UNKNOWN_ERROR",e.message,{originalError:e}):R("UNKNOWN_ERROR","An unknown error occurred",{originalError:e})}function m(e){return typeof e=="object"&&e!==null&&!Array.isArray(e)}function u(e){return typeof e=="string"}function A(e){return typeof e=="number"&&Number.isFinite(e)}function F(e){return typeof e=="boolean"}function D(e){return Array.isArray(e)}function i(e,r){return a(R("UNKNOWN_ERROR",e,{...r,originalData:r?.originalData}))}function c(e,r){return e[r]}function Y(e){if(!m(e))return i("Invalid API response: expected object",{originalData:e});let r=c(e,"session_id");if(!u(r))return i("Invalid API response: session_id must be string",{field:"session_id",originalData:e});let t=c(e,"challenge");if(!m(t))return i("Invalid API response: challenge must be object",{field:"challenge",originalData:e});let n=c(t,"rp");if(!m(n)||!u(n.name)||!u(n.id))return i("Invalid API response: challenge.rp must have name and id strings",{originalData:e});let s=c(t,"user");if(!m(s)||!u(s.id)||!u(s.name)||!u(s.displayName))return i("Invalid API response: challenge.user must have id, name, displayName strings",{originalData:e});let o=c(t,"challenge");if(!u(o))return i("Invalid API response: challenge.challenge must be string",{originalData:e});let l=c(t,"pubKeyCredParams");if(!D(l))return i("Invalid API response: challenge.pubKeyCredParams must be array",{originalData:e});for(let d of l)if(!m(d)||d.type!=="public-key"||!A(d.alg))return i("Invalid API response: pubKeyCredParams items must have type and alg",{originalData:e});let y=t.timeout;if(y!==void 0&&!A(y))return i("Invalid API response: challenge.timeout must be number",{originalData:e});let p=t.excludeCredentials;if(p!==void 0){if(!D(p))return i("Invalid API response: excludeCredentials must be array",{originalData:e});for(let d of p)if(!m(d)||d.type!=="public-key"||!u(d.id))return i("Invalid API response: excludeCredentials items must have id and type",{originalData:e})}let f=t.authenticatorSelection;return f!==void 0&&!m(f)?i("Invalid API response: authenticatorSelection must be object",{originalData:e}):g({session_id:r,challenge:{rp:n,user:s,challenge:o,pubKeyCredParams:l,...y!==void 0&&{timeout:y},...p!==void 0&&{excludeCredentials:p},...f!==void 0&&{authenticatorSelection:f}}})}function z(e){if(!m(e))return i("Invalid API response: expected object",{originalData:e});let r=c(e,"session_id");if(!u(r))return i("Invalid API response: session_id must be string",{field:"session_id",originalData:e});let t=c(e,"challenge");if(!m(t))return i("Invalid API response: challenge must be object",{field:"challenge",originalData:e});let n=c(t,"challenge"),s=c(t,"rpId"),o=t.allowCredentials;if(!u(n))return i("Invalid API response: challenge.challenge must be string",{originalData:e});if(!u(s))return i("Invalid API response: challenge.rpId must be string",{originalData:e});if(o!==void 0&&!D(o))return i("Invalid API response: allowCredentials must be array",{originalData:e});if(o){for(let p of o)if(!m(p)||p.type!=="public-key"||!u(p.id))return i("Invalid API response: allowCredentials items must have id and type",{originalData:e})}let l=t.timeout;if(l!==void 0&&!A(l))return i("Invalid API response: challenge.timeout must be number",{originalData:e});let y=t.userVerification;return y!==void 0&&!["required","preferred","discouraged"].includes(String(y))?i("Invalid API response: userVerification must be required|preferred|discouraged",{originalData:e}):g({session_id:r,challenge:{challenge:n,rpId:s,allowCredentials:o??[],...l!==void 0&&{timeout:l},...y!==void 0&&{userVerification:y}}})}function G(e){if(!m(e))return i("Invalid API response: expected object",{originalData:e});let r=c(e,"credential_id"),t=c(e,"status"),n=c(e,"session_token"),s=c(e,"user");if(!u(r))return i("Invalid API response: credential_id must be string",{field:"credential_id",originalData:e});if(!u(t))return i("Invalid API response: status must be string",{field:"status",originalData:e});if(!u(n))return i("Invalid API response: session_token must be string",{field:"session_token",originalData:e});if(!m(s))return i("Invalid API response: user must be object",{field:"user",originalData:e});let o=c(s,"user_id"),l=c(s,"external_user_id");if(!u(o)||!u(l))return i("Invalid API response: user must have user_id and external_user_id strings",{originalData:e});let y=s.email,p=s.metadata;return y!==void 0&&!u(y)?i("Invalid API response: user.email must be string",{originalData:e}):p!==void 0&&(typeof p!="object"||p===null)?i("Invalid API response: user.metadata must be object",{originalData:e}):g({credential_id:r,status:t,session_token:n,user:{user_id:o,external_user_id:l,...y!==void 0&&{email:y},...p!==void 0&&{metadata:p}}})}function J(e){if(!m(e))return i("Invalid API response: expected object",{originalData:e});let r=c(e,"authenticated"),t=c(e,"session_token"),n=c(e,"user"),s=c(e,"signals");if(!F(r))return i("Invalid API response: authenticated must be boolean",{field:"authenticated",originalData:e});if(!u(t))return i("Invalid API response: session_token must be string",{field:"session_token",originalData:e});if(!m(n))return i("Invalid API response: user must be object",{field:"user",originalData:e});let o=c(n,"user_id"),l=c(n,"external_user_id");return !u(o)||!u(l)?i("Invalid API response: user must have user_id and external_user_id strings",{originalData:e}):s!==void 0&&!m(s)?i("Invalid API response: signals must be object",{originalData:e}):g({authenticated:r,session_token:t,user:{user_id:o,external_user_id:l,...n.email!==void 0&&{email:n.email},...n.metadata!==void 0&&{metadata:n.metadata}},signals:s})}function Z(e){if(!m(e))return i("Invalid API response: expected object",{originalData:e});let r=c(e,"valid"),t=c(e,"user_id"),n=c(e,"external_user_id"),s=c(e,"tenant_id"),o=c(e,"app_id");return F(r)?u(t)?u(n)?u(s)?u(o)?g({valid:r,user_id:t,external_user_id:n,tenant_id:s,app_id:o}):i("Invalid API response: app_id must be string",{field:"app_id",originalData:e}):i("Invalid API response: tenant_id must be string",{field:"tenant_id",originalData:e}):i("Invalid API response: external_user_id must be string",{field:"external_user_id",originalData:e}):i("Invalid API response: user_id must be string",{field:"user_id",originalData:e}):i("Invalid API response: valid must be boolean",{field:"valid",originalData:e})}function Q(e){if(!m(e))return i("Invalid API response: expected object",{originalData:e});let r=c(e,"sessionToken");return u(r)?g({sessionToken:r}):i("Invalid API response: sessionToken must be string",{field:"sessionToken",originalData:e})}var Ke=["pending_passkey","pending_data","completed"],je=["pending_data","completed"];function ee(e){if(!m(e))return i("Invalid API response: expected object",{originalData:e});let r=c(e,"session_id"),t=c(e,"onboarding_url"),n=c(e,"expires_in");return u(r)?u(t)?A(n)?g({session_id:r,onboarding_url:t,expires_in:n}):i("Invalid API response: expires_in must be number",{field:"expires_in",originalData:e}):i("Invalid API response: onboarding_url must be string",{field:"onboarding_url",originalData:e}):i("Invalid API response: session_id must be string",{field:"session_id",originalData:e})}function re(e){if(!m(e))return i("Invalid API response: expected object",{originalData:e});let r=c(e,"status"),t=c(e,"onboarding_url"),n=c(e,"expires_in");return !u(r)||!Ke.includes(r)?i("Invalid API response: status must be pending_passkey|pending_data|completed",{field:"status",originalData:e}):u(t)?A(n)?g({status:r,onboarding_url:t,expires_in:n}):i("Invalid API response: expires_in must be number",{originalData:e}):i("Invalid API response: onboarding_url must be string",{originalData:e})}function te(e){if(!m(e))return i("Invalid API response: expected object",{originalData:e});let r=c(e,"session_id"),t=c(e,"status"),n=c(e,"onboarding_url");if(!u(r))return i("Invalid API response: session_id must be string",{field:"session_id",originalData:e});if(t!=="pending_passkey")return i("Invalid API response: status must be pending_passkey",{field:"status",originalData:e});if(!u(n))return i("Invalid API response: onboarding_url must be string",{originalData:e});let s=e.challenge,o;if(s!==void 0){let l=qe(s);if(!l.ok)return l;o=l.value;}return g({session_id:r,status:"pending_passkey",onboarding_url:n,...o!==void 0&&{challenge:o}})}function qe(e){if(!m(e))return i("Invalid API response: challenge must be object",{originalData:e});let r=c(e,"rp"),t=c(e,"user"),n=c(e,"challenge"),s=c(e,"pubKeyCredParams");if(!m(r)||!u(r.name)||!u(r.id))return i("Invalid API response: challenge.rp must have name and id",{originalData:e});if(!m(t)||!u(t.id)||!u(t.name)||!u(t.displayName))return i("Invalid API response: challenge.user must have id, name, displayName",{originalData:e});if(!u(n))return i("Invalid API response: challenge.challenge must be string",{originalData:e});if(!D(s))return i("Invalid API response: challenge.pubKeyCredParams must be array",{originalData:e});for(let o of s)if(!m(o)||o.type!=="public-key"||!A(o.alg))return i("Invalid API response: pubKeyCredParams items must have type and alg",{originalData:e});return g({rp:r,user:t,challenge:n,pubKeyCredParams:s})}function ne(e){if(!m(e))return i("Invalid API response: expected object",{originalData:e});let r=c(e,"session_id"),t=c(e,"status"),n=c(e,"user_id"),s=c(e,"tenant_id");return u(r)?!u(t)||!je.includes(t)?i("Invalid API response: status must be pending_data|completed",{originalData:e}):u(n)?u(s)?g({session_id:r,status:t,user_id:n,tenant_id:s}):i("Invalid API response: tenant_id must be string",{originalData:e}):i("Invalid API response: user_id must be string",{originalData:e}):i("Invalid API response: session_id must be string",{originalData:e})}function se(e){if(!m(e))return i("Invalid API response: expected object",{originalData:e});let r=c(e,"session_id"),t=c(e,"status"),n=c(e,"user_id"),s=c(e,"tenant_id"),o=c(e,"session_token");return u(r)?t!=="completed"?i("Invalid API response: status must be completed",{originalData:e}):!u(n)||!u(s)||!u(o)?i("Invalid API response: user_id, tenant_id, session_token must be strings",{originalData:e}):g({session_id:r,status:"completed",user_id:n,tenant_id:s,session_token:o}):i("Invalid API response: session_id must be string",{originalData:e})}function Ve(e){if(!e||typeof e!="object")return false;let r=e;return typeof r.challenge=="string"&&r.rp!=null&&typeof r.rp=="object"&&r.user!=null&&typeof r.user=="object"&&Array.isArray(r.pubKeyCredParams)}function We(e){if(!e||typeof e!="object")return false;let r=e;return typeof r.challenge=="string"&&typeof r.rpId=="string"}function L(e){if(!m(e))return i("Invalid API response: expected object",{originalData:e});let r=e.session_id,t=e.qr_url,n=e.expires_at;return !u(r)||!u(t)||!u(n)?i("Invalid API response: missing required fields",{originalData:e}):g({session_id:r,qr_url:t,expires_at:n})}function ie(e){if(!m(e))return i("Invalid API response: expected object",{originalData:e});let r=e.status;return !u(r)||!["pending","authenticated","completed"].includes(r)?i("Invalid API response: invalid status",{originalData:e}):g({status:r,user_id:e.user_id,session_token:e.session_token})}function oe(e){if(!m(e))return i("Invalid API response: expected object",{originalData:e});let r=e.type,t=r==="registration"?"registration":"auth",n=e.options;return m(n)?t==="registration"?Ve(n)?g({type:"registration",options:n}):i("Invalid API response: registration options must have challenge, rp, user, pubKeyCredParams",{originalData:e}):We(n)?g({type:"auth",options:n}):i("Invalid API response: auth options must have challenge and rpId",{originalData:e}):i("Invalid API response: options are required",{originalData:e})}function ae(e){if(!m(e))return i("Invalid API response: expected object",{originalData:e});let r=c(e,"challenge"),t=c(e,"recovery_session_id");return m(r)?u(t)?g({challenge:r,recovery_session_id:t}):i("Invalid API response: recovery_session_id must be string",{field:"recovery_session_id",originalData:e}):i("Invalid API response: challenge must be object",{field:"challenge",originalData:e})}function le(e){if(!m(e))return i("Invalid API response: expected object",{originalData:e});let r=c(e,"status"),t=c(e,"session_token"),n=c(e,"user"),s=c(e,"credential_id");if(!u(r))return i("Invalid API response: status must be string",{field:"status",originalData:e});if(!u(t))return i("Invalid API response: session_token must be string",{field:"session_token",originalData:e});if(!u(s))return i("Invalid API response: credential_id must be string",{field:"credential_id",originalData:e});if(!m(n))return i("Invalid API response: user must be object",{field:"user",originalData:e});let o=c(n,"user_id");if(!u(o))return i("Invalid API response: user.user_id must be string",{field:"user.user_id",originalData:e});let l=n;return g({status:r,session_token:t,credential_id:s,user:{user_id:o,external_user_id:u(l.external_user_id)?l.external_user_id:void 0,email:u(l.email)?l.email:void 0,metadata:m(l.metadata)?l.metadata:void 0}})}var K=class{constructor(r,t,n={}){this.httpClient=r;this.baseUrl=t;this.defaultHeaders=n;}mergeHeaders(r){return {...this.defaultHeaders,...r}}async post(r,t,n){let s=`${this.baseUrl}${r}`,o=await this.httpClient.post(s,t,this.mergeHeaders());return o.ok?n(o.value):a(o.error)}async get(r,t,n){let s=`${this.baseUrl}${r}`,o=await this.httpClient.get(s,this.mergeHeaders(n));return o.ok?t(o.value):a(o.error)}async startRegister(r){return this.post("/v1/passkeys/register/start",r,Y)}async startAuth(r){return this.post("/v1/passkeys/auth/start",r,z)}async finishRegister(r){return this.post("/v1/passkeys/register/finish",r,G)}async finishAuthentication(r){return this.post("/v1/passkeys/auth/finish",r,J)}async validateSession(r){return this.get("/v1/sessions/validate",Z,{Authorization:`Bearer ${r}`})}async startEmailFallback(r){let t=`${this.baseUrl}/v1/fallback/email/start`,n=await this.httpClient.post(t,{userId:r.userId,email:r.email},this.mergeHeaders());return n.ok?g(void 0):a(n.error)}async verifyEmailCode(r,t){return this.post("/v1/fallback/email/verify",{userId:r,code:t},Q)}async startOnboarding(r){return this.post("/onboarding/start",r,ee)}async getOnboardingStatus(r){return this.get(`/onboarding/${r}/status`,re)}async getOnboardingRegister(r){return this.get(`/onboarding/${r}/register`,te)}async registerOnboardingPasskey(r,t){return this.post(`/onboarding/${r}/register-passkey`,t,ne)}async completeOnboarding(r,t){return this.post(`/onboarding/${r}/complete`,t,se)}async initCrossDeviceAuth(){return this.post("/v1/auth/cross-device/init",{},L)}async initCrossDeviceRegistration(r){return this.post("/v1/auth/cross-device/init-registration",{external_user_id:r.externalUserId},L)}async getCrossDeviceStatus(r){return this.get(`/v1/auth/cross-device/status/${r}`,ie)}async getCrossDeviceContext(r){return this.get(`/v1/auth/cross-device/context/${r}`,oe)}async verifyCrossDeviceAuth(r){let t=`${this.baseUrl}/v1/auth/cross-device/verify`,n=await this.httpClient.post(t,r,this.mergeHeaders());return n.ok?g(void 0):a(n.error)}async verifyCrossDeviceRegistration(r){let t=`${this.baseUrl}/v1/auth/cross-device/verify-registration`,n=await this.httpClient.post(t,r,this.mergeHeaders());return n.ok?g(void 0):a(n.error)}async verifyAccountRecoveryOtp(r,t){return this.post("/v1/users/recovery/verify",{external_id:r,otp:t},ae)}async completeAccountRecovery(r,t){return this.post("/v1/users/recovery/complete",{recovery_session_id:r,credential:t},le)}};var Be=3e4;function He(){if(typeof globalThis.crypto<"u"&&typeof globalThis.crypto.randomUUID=="function")return globalThis.crypto.randomUUID();throw new Error("Web Crypto API is required but not available.")}function he(e,r){let t=r*Math.pow(2,e);return Math.min(t,Be)}function $e(e,r){return e!=="GET"?false:r>=500||r===429}var j=class{constructor(r,t=0,n=1e3,s){this.timeoutMs=r;this.maxRetries=t;this.retryDelayMs=n;this.logger=s;}async get(r,t){return this.request(r,{method:"GET",headers:t})}async post(r,t,n){return this.request(r,{method:"POST",body:JSON.stringify(t),headers:{"Content-Type":"application/json",...n}})}async request(r,t){let n=(t.method??"GET").toUpperCase(),s=He(),o=new Headers(t.headers);o.set("X-Request-Id",s),this.logger&&this.logger.debug("request",{requestId:s,url:r,method:n});let l;for(let y=0;y<=this.maxRetries;y++)try{let p=new AbortController,f=setTimeout(()=>p.abort(),this.timeoutMs);try{let d=await fetch(r,{...t,headers:o,signal:p.signal});if(!d.ok){let k;try{k=await d.json();}catch{}let H=k,C=H?.message??d.statusText,ye=H?.error,Re=R(ye==="challenge_mismatch"?"CHALLENGE_MISMATCH":ye??"NETWORK_FAILURE",C,{requestId:s,status:d.status,statusText:d.statusText,data:k});if($e(n,d.status)&&y<this.maxRetries){l=Re,await new Promise(Me=>setTimeout(Me,he(y,this.retryDelayMs)));continue}return a(Re)}if(d.status===204)return g(void 0);if(d.headers.get("content-length")==="0")return g(void 0);let O=await d.json();return g(O)}finally{clearTimeout(f);}}catch(p){if(l=p,n==="GET"&&y<this.maxRetries)await new Promise(d=>setTimeout(d,he(y,this.retryDelayMs)));else break}return l instanceof Error&&l.name==="AbortError"?a(R("TIMEOUT","Request timed out",{requestId:s})):a(R("NETWORK_FAILURE",l instanceof Error?l.message:"Request failed",{requestId:s,cause:l}))}};function _(){try{return !(typeof navigator>"u"||!navigator.credentials||typeof PublicKeyCredential>"u")}catch{return false}}async function Xe(){try{return !_()||typeof PublicKeyCredential.isUserVerifyingPlatformAuthenticatorAvailable!="function"?false:await PublicKeyCredential.isUserVerifyingPlatformAuthenticatorAvailable()}catch{return false}}async function ve(){let e=_(),r=await Xe();return {isPasskeySupported:e,platformAuthenticatorAvailable:r,recommendedFlow:e?"passkey":"fallback"}}function T(e){let r=new Uint8Array(e),t=Array.from(r,s=>String.fromCharCode(s)).join("");if(typeof globalThis.btoa>"u")throw $("encode");return globalThis.btoa(t).replace(/\+/g,"-").replace(/\//g,"_").replace(/=/g,"")}function Ye(e){if(typeof globalThis.atob>"u")throw $("decode");let r=e.replace(/-/g,"+").replace(/_/g,"/"),t=r.length%4,n=t===0?r:r+"=".repeat(4-t),s=globalThis.atob(n);return Uint8Array.from(s,o=>o.charCodeAt(0))}function M(e){let r=Ye(e),t=new ArrayBuffer(r.length);return new Uint8Array(t).set(r),t}function E(e,r="create"){if(!e||typeof e!="object"||!("id"in e)||!("rawId"in e)||!("response"in e))throw fe(r)}function be(e){return e!==null&&typeof e=="object"&&"clientDataJSON"in e&&e.clientDataJSON instanceof ArrayBuffer}function I(e){if(!e.response)throw R("UNKNOWN_ERROR","Credential response is missing",{credential:e});let r=e.response;if(!be(r))throw R("UNKNOWN_ERROR","Invalid credential response structure",{response:r});if(!("attestationObject"in r))throw R("UNKNOWN_ERROR","Invalid credential response structure for register: attestationObject is missing",{response:r});let t=r.clientDataJSON,n=r.attestationObject;return {id:e.id,rawId:T(e.rawId),response:{clientDataJSON:T(t),attestationObject:T(n)},type:"public-key"}}function q(e){if(!e.response)throw R("UNKNOWN_ERROR","Credential response is missing",{credential:e});let r=e.response;if(!be(r))throw R("UNKNOWN_ERROR","Invalid credential response structure",{response:r});if(!("authenticatorData"in r)||!("signature"in r))throw R("UNKNOWN_ERROR","Invalid credential response structure for auth: authenticatorData or signature is missing",{response:r});let t=r.clientDataJSON,n=r.authenticatorData,s=r.signature,o=r.userHandle;return {id:e.id,rawId:T(e.rawId),response:{authenticatorData:T(n),clientDataJSON:T(t),signature:T(s),...o&&{userHandle:T(o)}},type:"public-key"}}function x(e,r){try{U(e.challenge,"challenge"),U(e.user.id,"user.id");let t=M(e.challenge),n=M(e.user.id),s={userVerification:"preferred"};e.authenticatorSelection&&(s={...e.authenticatorSelection}),r&&(s={...s,authenticatorAttachment:r});let o={rp:{id:e.rp.id,name:e.rp.name},user:{id:n,name:e.user.name,displayName:e.user.displayName},challenge:t,pubKeyCredParams:e.pubKeyCredParams,...e.timeout!==void 0&&{timeout:e.timeout},attestation:"none",authenticatorSelection:s,...e.excludeCredentials&&{excludeCredentials:e.excludeCredentials.map(l=>({id:M(l.id),type:l.type,...l.transports&&{transports:l.transports}}))}};return g({publicKey:o})}catch(t){return a(h(t))}}function ue(e,r){try{U(e.challenge,"challenge");let t=M(e.challenge);return g({publicKey:{challenge:t,rpId:e.rpId,...e.timeout!==void 0&&{timeout:e.timeout},userVerification:e.userVerification??"preferred",...e.allowCredentials&&{allowCredentials:e.allowCredentials.map(n=>({id:M(n.id),type:n.type,...n.transports&&{transports:n.transports}}))}},...r!==void 0&&{mediation:r}})}catch(t){return a(h(t))}}async function Ee(e,r,t){try{if(t.emit("start",{type:"start",operation:"register"}),!_()){let d=P();return t.emit("error",{type:"error",error:d}),a(d)}let n=e.externalUserId??e.external_user_id;if(!n||typeof n!="string"||n.trim()===""){let d=v("externalUserId","must be a non-empty string");return t.emit("error",{type:"error",error:d}),a(d)}let s=await r.startRegister({external_user_id:n});if(!s.ok)return t.emit("error",{type:"error",error:s.error}),a(s.error);let o=x(s.value.challenge,e.authenticatorType);if(!o.ok)return t.emit("error",{type:"error",error:o.error}),a(o.error);let l={...o.value,...e.signal&&{signal:e.signal}},y=await navigator.credentials.create(l);if(!y){let d=v("credential","creation failed");return t.emit("error",{type:"error",error:d}),a(d)}try{E(y);}catch(d){let b=h(d);return t.emit("error",{type:"error",error:b}),a(b)}let p=await r.finishRegister({session_id:s.value.session_id,credential:I(y)});if(!p.ok)return t.emit("error",{type:"error",error:p.error}),a(p.error);let f={success:true,credentialId:p.value.credential_id,credential_id:p.value.credential_id,status:p.value.status,sessionToken:p.value.session_token,user:{userId:p.value.user.user_id,externalUserId:p.value.user.external_user_id,email:p.value.user.email,metadata:p.value.user.metadata}};return t.emit("success",{type:"success",operation:"register"}),g(f)}catch(n){let s=h(n);return t.emit("error",{type:"error",error:s}),a(s)}}async function _e(e,r,t){try{if(t.emit("start",{type:"start",operation:"authenticate"}),!_()){let b=P();return t.emit("error",{type:"error",error:b}),a(b)}let n=e.externalUserId??e.external_user_id,s=n!==void 0&&typeof n=="string"&&n.trim()!=="",o=await r.startAuth(s?{external_user_id:n.trim()}:{});if(!o.ok)return t.emit("error",{type:"error",error:o.error}),a(o.error);let l=ue(o.value.challenge,e.mediation);if(!l.ok)return t.emit("error",{type:"error",error:l.error}),a(l.error);let y={...l.value,...e.signal&&{signal:e.signal}},p=await navigator.credentials.get(y);if(!p){let b=v("credential","retrieval failed");return t.emit("error",{type:"error",error:b}),a(b)}try{E(p);}catch(b){let O=h(b);return t.emit("error",{type:"error",error:O}),a(O)}let f=await r.finishAuthentication({session_id:o.value.session_id,credential:q(p)});if(!f.ok)return t.emit("error",{type:"error",error:f.error}),a(f.error);let d={authenticated:f.value.authenticated,sessionToken:f.value.session_token,user:{userId:f.value.user.user_id,externalUserId:f.value.user.external_user_id,email:f.value.user.email,metadata:f.value.user.metadata},signals:f.value.signals};return t.emit("success",{type:"success",operation:"authenticate"}),g(d)}catch(n){let s=h(n);return t.emit("error",{type:"error",error:s}),a(s)}}var ze=2e3,Ge=60,V=class{constructor(r){this.apiClient=r;}async startFlow(r){let t=await this.apiClient.startOnboarding({user_role:r.user_role});if(!t.ok)return a(t.error);let{session_id:n}=t.value;for(let s=0;s<Ge;s++){await new Promise(p=>setTimeout(p,ze));let o=await this.apiClient.getOnboardingStatus(n);if(!o.ok)return a(o.error);let l=o.value.status,y=o.value.onboarding_url;if(l==="pending_passkey"){let p=await this.apiClient.getOnboardingRegister(n);if(!p.ok)return a(p.error);let f=p.value;if(!f.challenge)return a(R("NOT_SUPPORTED","Onboarding requires user action - complete passkey registration at the provided onboarding_url",{onboarding_url:y}));let d=x(f.challenge);if(!d.ok)return a(d.error);let b;try{b=await navigator.credentials.create(d.value);}catch(C){return a(h(C))}try{E(b,"create");}catch(C){return a(h(C))}let O;try{O=I(b);}catch(C){return a(h(C))}let k=await this.apiClient.registerOnboardingPasskey(n,{credential:O,challenge:f.challenge.challenge});return k.ok?await this.apiClient.completeOnboarding(n,{company_name:r.company_name}):a(k.error)}if(l==="completed")return await this.apiClient.completeOnboarding(n,{company_name:r.company_name})}return a(R("TIMEOUT","Onboarding timed out"))}};var Je=2e3,Ze=60,W=class{constructor(r){this.apiClient=r;}async init(){return this.apiClient.initCrossDeviceAuth()}async initRegistration(r){return this.apiClient.initCrossDeviceRegistration(r)}async waitForSession(r,t){for(let n=0;n<Ze;n++){if(t?.aborted)return a(R("ABORT_ERROR","Operation aborted by user or timeout"));let s=await this.apiClient.getCrossDeviceStatus(r);if(!s.ok)return a(s.error);if(s.value.status==="completed")return !s.value.session_token||!s.value.user_id?a(R("UNKNOWN_ERROR","Missing data in completed session")):g({session_token:s.value.session_token,user_id:s.value.user_id});if(t?.aborted)return a(R("ABORT_ERROR","Operation aborted by user or timeout"));if(await new Promise(o=>{let l=setTimeout(()=>{o(null),t?.removeEventListener("abort",y);},Je),y=()=>{clearTimeout(l),o(null);};t?.addEventListener("abort",y);}),t?.aborted)return a(R("ABORT_ERROR","Operation aborted by user or timeout"))}return a(R("TIMEOUT","Cross-device authentication timed out"))}async approve(r){let t=await this.apiClient.getCrossDeviceContext(r);if(!t.ok)return a(t.error);let n=t.value;return n.type==="registration"?this.executeRegistrationApproval(r,n):this.executeAuthApproval(r,n)}async executeRegistrationApproval(r,t){let n=x(t.options);if(!n.ok)return a(n.error);let s;try{s=await navigator.credentials.create(n.value);}catch(l){return a(h(l))}try{E(s,"create");}catch(l){return a(h(l))}let o;try{o=I(s);}catch(l){return a(h(l))}return this.apiClient.verifyCrossDeviceRegistration({session_id:r,credential:o})}async executeAuthApproval(r,t){let n=ue(t.options);if(!n.ok)return a(n.error);let s;try{s=await navigator.credentials.get(n.value);}catch(l){return a(h(l))}try{E(s,"get");}catch(l){return a(h(l))}let o;try{o=q(s);}catch(l){return a(h(l))}return this.apiClient.verifyCrossDeviceAuth({session_id:r,credential:o})}};var B=class{handlers;constructor(){this.handlers=new Map;}on(r,t){let n=this.handlers.get(r);return n||(n=new Set,this.handlers.set(r,n)),n.add(t),()=>{this.off(r,t);}}off(r,t){let n=this.handlers.get(r);n&&(n.delete(t),n.size===0&&this.handlers.delete(r));}emit(r,t){let n=this.handlers.get(r);n&&n.forEach(s=>{try{s(t);}catch{}});}removeAllListeners(){this.handlers.clear();}};async function Te(e,r,t){try{if(t.emit("start",{type:"start",operation:"register"}),!_()){let d=P();return t.emit("error",{type:"error",error:d}),a(d)}let n=e.externalUserId??e.external_user_id;if(!n||typeof n!="string"||n.trim()===""){let d=v("externalUserId","must be a non-empty string");return t.emit("error",{type:"error",error:d}),a(d)}if(!e.otp||typeof e.otp!="string"||e.otp.trim().length!==6){let d=v("otp","must be a 6-digit string");return t.emit("error",{type:"error",error:d}),a(d)}let s=await r.verifyAccountRecoveryOtp(n,e.otp);if(!s.ok)return t.emit("error",{type:"error",error:s.error}),a(s.error);let o=x(s.value.challenge);if(!o.ok)return t.emit("error",{type:"error",error:o.error}),a(o.error);let l={...o.value},y=await navigator.credentials.create(l);if(!y){let d=v("credential","creation failed");return t.emit("error",{type:"error",error:d}),a(d)}try{E(y);}catch(d){let b=h(d);return t.emit("error",{type:"error",error:b}),a(b)}let p=await r.completeAccountRecovery(s.value.recovery_session_id,I(y));if(!p.ok)return t.emit("error",{type:"error",error:p.error}),a(p.error);let f={success:true,credentialId:p.value.credential_id,status:p.value.status,sessionToken:p.value.session_token,user:{userId:p.value.user.user_id,externalUserId:p.value.user.external_user_id,email:p.value.user.email,metadata:p.value.user.metadata}};return t.emit("success",{type:"success",operation:"register"}),g(f)}catch(n){let s=h(n);return t.emit("error",{type:"error",error:s}),a(s)}}var ce="https://api.trymellonauth.com",Ae="https://api.trymellonauth.com/v1/telemetry";var pe="trymellon_sandbox_session_token_v1";function Ie(e){return {async send(r){let t=JSON.stringify(r);if(typeof navigator<"u"&&typeof navigator.sendBeacon=="function"){navigator.sendBeacon(e,t);return}typeof fetch<"u"&&await fetch(e,{method:"POST",body:t,headers:{"Content-Type":"application/json"},keepalive:true});}}}function de(e,r){return {event:e,latencyMs:r,ok:true}}var ge=class e{sandbox;sandboxToken;apiClient;eventEmitter;telemetrySender;crossDeviceManager;onboarding;static create(r){try{let t=r.appId,n=r.publishableKey;if(!t||typeof t!="string"||t.trim()==="")return a(v("appId","must be a non-empty string"));if(!n||typeof n!="string"||n.trim()==="")return a(v("publishableKey","must be a non-empty string"));let s=r.apiBaseUrl??ce;X(s,"apiBaseUrl");let o=r.timeoutMs??3e4;return S(o,"timeoutMs",1e3,3e5),r.maxRetries!==void 0&&S(r.maxRetries,"maxRetries",0,10),r.retryDelayMs!==void 0&&S(r.retryDelayMs,"retryDelayMs",100,1e4),g(new e(r))}catch(t){return N(t)?a(t):a(v("config",t.message))}}constructor(r){this.sandbox=r.sandbox===true,this.sandboxToken=this.sandbox&&r.sandboxToken!=null&&r.sandboxToken!==""?r.sandboxToken:pe;let t=r.appId,n=r.publishableKey;if(!t||typeof t!="string"||t.trim()==="")throw v("appId","must be a non-empty string");if(!n||typeof n!="string"||n.trim()==="")throw v("publishableKey","must be a non-empty string");let s=r.apiBaseUrl??ce;X(s,"apiBaseUrl");let o=r.timeoutMs??3e4;S(o,"timeoutMs",1e3,3e5),r.maxRetries!==void 0&&S(r.maxRetries,"maxRetries",0,10),r.retryDelayMs!==void 0&&S(r.retryDelayMs,"retryDelayMs",100,1e4);let l=r.maxRetries??3,y=r.retryDelayMs??1e3,p=new j(o,l,y,r.logger),f=r.origin??(typeof window<"u"&&window?.location?.origin?window.location.origin:void 0),d={"X-App-Id":t.trim(),Authorization:`Bearer ${n.trim()}`,...f&&{Origin:f}};this.apiClient=new K(p,s,d),this.onboarding=new V(this.apiClient),this.crossDeviceManager=new W(this.apiClient),this.eventEmitter=new B,r.enableTelemetry&&(this.telemetrySender=r.telemetrySender??Ie(r.telemetryEndpoint??Ae));}static isSupported(){return _()}async register(r){if(this.sandbox){let s=r.externalUserId??r.external_user_id??"sandbox";return Promise.resolve(g({success:true,credentialId:"",status:"sandbox",sessionToken:this.sandboxToken,user:{userId:"sandbox-user",externalUserId:typeof s=="string"?s:"sandbox"}}))}let t=Date.now(),n=await Ee(r,this.apiClient,this.eventEmitter);return n.ok&&this.telemetrySender&&this.telemetrySender.send(de("register",Date.now()-t)).catch(()=>{}),n}async authenticate(r){if(this.sandbox){let s=r.externalUserId??r.external_user_id??"sandbox";return Promise.resolve(g({authenticated:true,sessionToken:this.sandboxToken,user:{userId:"sandbox-user",externalUserId:typeof s=="string"?s:"sandbox"}}))}let t=Date.now(),n=await _e(r,this.apiClient,this.eventEmitter);return n.ok&&this.telemetrySender&&this.telemetrySender.send(de("authenticate",Date.now()-t)).catch(()=>{}),n}async validateSession(r){return this.sandbox&&r===this.sandboxToken?Promise.resolve(g({valid:true,user_id:"sandbox-user",external_user_id:"sandbox",tenant_id:"sandbox-tenant",app_id:"sandbox-app"})):this.apiClient.validateSession(r)}async getStatus(){return ve()}on(r,t){return this.eventEmitter.on(r,t)}version(){return "1.5.0"}fallback={email:{start:async r=>this.apiClient.startEmailFallback(r),verify:async r=>this.apiClient.verifyEmailCode(r.userId,r.code)}};auth={crossDevice:{init:()=>this.crossDeviceManager.init(),initRegistration:r=>this.crossDeviceManager.initRegistration(r),waitForSession:(r,t)=>this.crossDeviceManager.waitForSession(r,t),approve:r=>this.crossDeviceManager.approve(r)},recoverAccount:async r=>Te(r,this.apiClient,this.eventEmitter)}};var me=class{debug(r,t){t&&Object.keys(t).length>0?console.debug(`[TryMellon] ${r}`,t):console.debug(`[TryMellon] ${r}`);}info(r,t){t&&Object.keys(t).length>0?console.info(`[TryMellon] ${r}`,t):console.info(`[TryMellon] ${r}`);}warn(r,t){t&&Object.keys(t).length>0?console.warn(`[TryMellon] ${r}`,t):console.warn(`[TryMellon] ${r}`);}error(r,t){t&&Object.keys(t).length>0?console.error(`[TryMellon] ${r}`,t):console.error(`[TryMellon] ${r}`);}};
|
|
2
|
-
exports.ConsoleLogger=
|
|
1
|
+
'use strict';var c=e=>({ok:true,value:e}),l=e=>({ok:false,error:e});var U=class e extends Error{code;details;isTryMellonError=true;constructor(r,t,n){super(t),this.name="TryMellonError",this.code=r,this.details=n,Error.captureStackTrace&&Error.captureStackTrace(this,e);}},Ve={NOT_SUPPORTED:"WebAuthn is not supported in this environment",USER_CANCELLED:"User cancelled the operation",PASSKEY_NOT_FOUND:"Passkey not found",SESSION_EXPIRED:"Session has expired",NETWORK_FAILURE:"Network request failed",INVALID_ARGUMENT:"Invalid argument provided",TIMEOUT:"Operation timed out",ABORTED:"Operation was aborted",ABORT_ERROR:"Operation aborted by user or timeout",CHALLENGE_MISMATCH:"This link was already used or expired. Please try again from your computer.",UNKNOWN_ERROR:"An unknown error occurred"};function m(e,r,t){return new U(e,r??Ve[e],t)}function q(e){return e instanceof U||typeof e=="object"&&e!==null&&"isTryMellonError"in e&&e.isTryMellonError===true}function J(){return m("NOT_SUPPORTED")}function We(){return m("USER_CANCELLED")}function Be(e){return m("NETWORK_FAILURE",void 0,{cause:e?.message,originalError:e})}function He(){return m("TIMEOUT")}function f(e,r){return m("INVALID_ARGUMENT",`Invalid argument: ${e} - ${r}`,{field:e,reason:r})}function Te(e){return m("UNKNOWN_ERROR",`Failed to ${e} credential`,{operation:e})}function Z(e){return m("NOT_SUPPORTED",`No base64 ${e==="encode"?"encoding":"decoding"} available`,{type:e})}function Q(e,r){try{let t=new URL(e);if(t.protocol!=="https:"&&t.protocol!=="http:")throw f(r,"must use http or https protocol")}catch(t){throw q(t)?t:f(r,"must be a valid URL")}}function O(e,r,t,n){if(!Number.isFinite(e))throw f(r,"must be a finite number");if(e<t||e>n)throw f(r,`must be between ${t} and ${n}`)}function V(e,r){if(typeof e!="string"||e.length===0)throw f(r,"must be a non-empty string");if(!/^[A-Za-z0-9_-]+$/.test(e))throw f(r,"must be a valid base64url string")}var $e={NotAllowedError:"USER_CANCELLED",AbortError:"ABORTED",NotSupportedError:"NOT_SUPPORTED",SecurityError:"NOT_SUPPORTED",InvalidStateError:"UNKNOWN_ERROR",UnknownError:"UNKNOWN_ERROR"};function F(e){if(typeof e!="string")return "UNKNOWN_ERROR";let r=e.toLowerCase().trim();return {challenge_mismatch:"CHALLENGE_MISMATCH",session_expired:"SESSION_EXPIRED",unauthorized:"SESSION_EXPIRED",validation_error:"INVALID_ARGUMENT",invalid_argument:"INVALID_ARGUMENT",user_not_found:"SESSION_EXPIRED",passkey_not_found:"PASSKEY_NOT_FOUND"}[r]??"UNKNOWN_ERROR"}function h(e){if(e instanceof DOMException){let r=e.name,t=e.message||"WebAuthn operation failed",n=$e[r]??"UNKNOWN_ERROR";return m(n,t,{originalError:e})}return e instanceof Error?m("UNKNOWN_ERROR",e.message,{originalError:e}):m("UNKNOWN_ERROR","An unknown error occurred",{originalError:e})}function g(e){return typeof e=="object"&&e!==null&&!Array.isArray(e)}function u(e){return typeof e=="string"}function A(e){return typeof e=="number"&&Number.isFinite(e)}function W(e){return typeof e=="boolean"}function M(e){return Array.isArray(e)}function i(e,r){return l(m("UNKNOWN_ERROR",e,{...r,originalData:r?.originalData}))}function p(e,r){return e[r]}function Ae(e,r){return !g(e)||!u(e.name)||!u(e.id)?i("Invalid API response: challenge.rp must have name and id strings",{originalData:r}):c(true)}function Ie(e,r){return !g(e)||!u(e.id)||!u(e.name)||!u(e.displayName)?i("Invalid API response: challenge.user must have id, name, displayName strings",{originalData:r}):c(true)}function Ce(e,r){if(!M(e))return i("Invalid API response: challenge.pubKeyCredParams must be array",{originalData:r});for(let t of e)if(!g(t)||t.type!=="public-key"||!A(t.alg))return i("Invalid API response: pubKeyCredParams items must have type and alg",{originalData:r});return c(true)}function ee(e,r){if(!g(e))return i("Invalid API response: user must be object",{field:"user",originalData:r});let t=p(e,"user_id"),n=p(e,"external_user_id");if(!u(t)||!u(n))return i("Invalid API response: user must have user_id and external_user_id strings",{originalData:r});let s=e.email,o=e.metadata;return s!==void 0&&!u(s)?i("Invalid API response: user.email must be string",{originalData:r}):o!==void 0&&(typeof o!="object"||o===null)?i("Invalid API response: user.metadata must be object",{originalData:r}):c({user_id:t,external_user_id:n,...s!==void 0&&{email:s},...o!==void 0&&{metadata:o}})}function re(e){if(!g(e))return i("Invalid API response: expected object",{originalData:e});let r=p(e,"session_id");if(!u(r))return i("Invalid API response: session_id must be string",{field:"session_id",originalData:e});let t=p(e,"challenge");if(!g(t))return i("Invalid API response: challenge must be object",{field:"challenge",originalData:e});let n=Ae(p(t,"rp"),e);if(!n.ok)return n;let s=Ie(p(t,"user"),e);if(!s.ok)return s;let o=p(t,"challenge");if(!u(o))return i("Invalid API response: challenge.challenge must be string",{originalData:e});let a=Ce(p(t,"pubKeyCredParams"),e);if(!a.ok)return a;let d=t.timeout;if(d!==void 0&&!A(d))return i("Invalid API response: challenge.timeout must be number",{originalData:e});let R=t.excludeCredentials;if(R!==void 0){if(!M(R))return i("Invalid API response: excludeCredentials must be array",{originalData:e});for(let y of R)if(!g(y)||y.type!=="public-key"||!u(y.id))return i("Invalid API response: excludeCredentials items must have id and type",{originalData:e})}let v=t.authenticatorSelection;return v!==void 0&&!g(v)?i("Invalid API response: authenticatorSelection must be object",{originalData:e}):c({session_id:r,challenge:{rp:t.rp,user:t.user,challenge:o,pubKeyCredParams:t.pubKeyCredParams,...d!==void 0&&{timeout:d},...R!==void 0&&{excludeCredentials:R},...v!==void 0&&{authenticatorSelection:v}}})}function te(e){if(!g(e))return i("Invalid API response: expected object",{originalData:e});let r=p(e,"session_id");if(!u(r))return i("Invalid API response: session_id must be string",{field:"session_id",originalData:e});let t=p(e,"challenge");if(!g(t))return i("Invalid API response: challenge must be object",{field:"challenge",originalData:e});let n=p(t,"challenge"),s=p(t,"rpId"),o=t.allowCredentials;if(!u(n))return i("Invalid API response: challenge.challenge must be string",{originalData:e});if(!u(s))return i("Invalid API response: challenge.rpId must be string",{originalData:e});if(o!==void 0&&!M(o))return i("Invalid API response: allowCredentials must be array",{originalData:e});if(o){for(let R of o)if(!g(R)||R.type!=="public-key"||!u(R.id))return i("Invalid API response: allowCredentials items must have id and type",{originalData:e})}let a=t.timeout;if(a!==void 0&&!A(a))return i("Invalid API response: challenge.timeout must be number",{originalData:e});let d=t.userVerification;return d!==void 0&&!["required","preferred","discouraged"].includes(String(d))?i("Invalid API response: userVerification must be required|preferred|discouraged",{originalData:e}):c({session_id:r,challenge:{challenge:n,rpId:s,allowCredentials:o??[],...a!==void 0&&{timeout:a},...d!==void 0&&{userVerification:d}}})}function ne(e){if(!g(e))return i("Invalid API response: expected object",{originalData:e});let r=p(e,"credential_id"),t=p(e,"status"),n=p(e,"session_token"),s=p(e,"user");if(!u(r))return i("Invalid API response: credential_id must be string",{field:"credential_id",originalData:e});if(!u(t))return i("Invalid API response: status must be string",{field:"status",originalData:e});if(!u(n))return i("Invalid API response: session_token must be string",{field:"session_token",originalData:e});let o=ee(s,e);return o.ok?c({credential_id:r,status:t,session_token:n,user:o.value}):i(o.error.message,{originalData:e})}function se(e){if(!g(e))return i("Invalid API response: expected object",{originalData:e});let r=p(e,"authenticated"),t=p(e,"session_token"),n=p(e,"user"),s=p(e,"signals");if(!W(r))return i("Invalid API response: authenticated must be boolean",{field:"authenticated",originalData:e});if(!u(t))return i("Invalid API response: session_token must be string",{field:"session_token",originalData:e});let o=ee(n,e);return o.ok?s!==void 0&&!g(s)?i("Invalid API response: signals must be object",{originalData:e}):c({authenticated:r,session_token:t,user:o.value,signals:s}):i(o.error.message,{originalData:e})}function ie(e){if(!g(e))return i("Invalid API response: expected object",{originalData:e});let r=p(e,"valid"),t=p(e,"user_id"),n=p(e,"external_user_id"),s=p(e,"tenant_id"),o=p(e,"app_id");return W(r)?u(t)?u(n)?u(s)?u(o)?c({valid:r,user_id:t,external_user_id:n,tenant_id:s,app_id:o}):i("Invalid API response: app_id must be string",{field:"app_id",originalData:e}):i("Invalid API response: tenant_id must be string",{field:"tenant_id",originalData:e}):i("Invalid API response: external_user_id must be string",{field:"external_user_id",originalData:e}):i("Invalid API response: user_id must be string",{field:"user_id",originalData:e}):i("Invalid API response: valid must be boolean",{field:"valid",originalData:e})}function oe(e){if(!g(e))return i("Invalid API response: expected object",{originalData:e});let r=p(e,"sessionToken");return u(r)?c({sessionToken:r}):i("Invalid API response: sessionToken must be string",{field:"sessionToken",originalData:e})}var Xe=["pending_passkey","pending_data","completed"],ze=["pending_data","completed"];function ae(e){if(!g(e))return i("Invalid API response: expected object",{originalData:e});let r=p(e,"session_id"),t=p(e,"onboarding_url"),n=p(e,"expires_in");return u(r)?u(t)?A(n)?c({session_id:r,onboarding_url:t,expires_in:n}):i("Invalid API response: expires_in must be number",{field:"expires_in",originalData:e}):i("Invalid API response: onboarding_url must be string",{field:"onboarding_url",originalData:e}):i("Invalid API response: session_id must be string",{field:"session_id",originalData:e})}function le(e){if(!g(e))return i("Invalid API response: expected object",{originalData:e});let r=p(e,"status"),t=p(e,"onboarding_url"),n=p(e,"expires_in");return !u(r)||!Xe.includes(r)?i("Invalid API response: status must be pending_passkey|pending_data|completed",{field:"status",originalData:e}):u(t)?A(n)?c({status:r,onboarding_url:t,expires_in:n}):i("Invalid API response: expires_in must be number",{originalData:e}):i("Invalid API response: onboarding_url must be string",{originalData:e})}function ue(e){if(!g(e))return i("Invalid API response: expected object",{originalData:e});let r=p(e,"session_id"),t=p(e,"status"),n=p(e,"onboarding_url");if(!u(r))return i("Invalid API response: session_id must be string",{field:"session_id",originalData:e});if(t!=="pending_passkey")return i("Invalid API response: status must be pending_passkey",{field:"status",originalData:e});if(!u(n))return i("Invalid API response: onboarding_url must be string",{originalData:e});let s=e.challenge,o;if(s!==void 0){let a=Ge(s);if(!a.ok)return a;o=a.value;}return c({session_id:r,status:"pending_passkey",onboarding_url:n,...o!==void 0&&{challenge:o}})}function Ge(e){if(!g(e))return i("Invalid API response: challenge must be object",{originalData:e});let r=p(e,"rp"),t=p(e,"user"),n=p(e,"challenge"),s=p(e,"pubKeyCredParams");if(!g(r)||!u(r.name)||!u(r.id))return i("Invalid API response: challenge.rp must have name and id",{originalData:e});if(!g(t)||!u(t.id)||!u(t.name)||!u(t.displayName))return i("Invalid API response: challenge.user must have id, name, displayName",{originalData:e});if(!u(n))return i("Invalid API response: challenge.challenge must be string",{originalData:e});if(!M(s))return i("Invalid API response: challenge.pubKeyCredParams must be array",{originalData:e});for(let o of s)if(!g(o)||o.type!=="public-key"||!A(o.alg))return i("Invalid API response: pubKeyCredParams items must have type and alg",{originalData:e});return c({rp:r,user:t,challenge:n,pubKeyCredParams:s})}function pe(e){if(!g(e))return i("Invalid API response: expected object",{originalData:e});let r=p(e,"session_id"),t=p(e,"status"),n=p(e,"user_id"),s=p(e,"tenant_id");return u(r)?!u(t)||!ze.includes(t)?i("Invalid API response: status must be pending_data|completed",{originalData:e}):u(n)?u(s)?c({session_id:r,status:t,user_id:n,tenant_id:s}):i("Invalid API response: tenant_id must be string",{originalData:e}):i("Invalid API response: user_id must be string",{originalData:e}):i("Invalid API response: session_id must be string",{originalData:e})}function ce(e){if(!g(e))return i("Invalid API response: expected object",{originalData:e});let r=p(e,"session_id"),t=p(e,"status"),n=p(e,"user_id"),s=p(e,"tenant_id"),o=p(e,"session_token");return u(r)?t!=="completed"?i("Invalid API response: status must be completed",{originalData:e}):!u(n)||!u(s)||!u(o)?i("Invalid API response: user_id, tenant_id, session_token must be strings",{originalData:e}):c({session_id:r,status:"completed",user_id:n,tenant_id:s,session_token:o}):i("Invalid API response: session_id must be string",{originalData:e})}function Ye(e){if(!e||typeof e!="object")return false;let r=e;return typeof r.challenge=="string"&&r.rp!=null&&typeof r.rp=="object"&&r.user!=null&&typeof r.user=="object"&&Array.isArray(r.pubKeyCredParams)}function Je(e){if(!e||typeof e!="object")return false;let r=e;return typeof r.challenge=="string"&&typeof r.rpId=="string"}function B(e){if(!g(e))return i("Invalid API response: expected object",{originalData:e});let r="resultado"in e&&g(e.resultado)?e.resultado:e,t=r.session_id,n=r.qr_url,s=r.expires_at;return !u(t)||!u(n)||!u(s)?i("Invalid API response: missing required fields",{originalData:e}):c({session_id:t,qr_url:n,expires_at:s})}function de(e){if(!g(e))return i("Invalid API response: expected object",{originalData:e});let r=e.status;return !u(r)||!["pending","authenticated","completed"].includes(r)?i("Invalid API response: invalid status",{originalData:e}):c({status:r,user_id:e.user_id,session_token:e.session_token})}function ge(e){if(!g(e))return i("Invalid API response: expected object",{originalData:e});let r=e.type,t=r==="registration"?"registration":"auth",n=e.options;return g(n)?t==="registration"?Ye(n)?c({type:"registration",options:n}):i("Invalid API response: registration options must have challenge, rp, user, pubKeyCredParams",{originalData:e}):Je(n)?c({type:"auth",options:n}):i("Invalid API response: auth options must have challenge and rpId",{originalData:e}):i("Invalid API response: options are required",{originalData:e})}function me(e){if(!g(e))return i("Invalid API response: expected object",{originalData:e});let r=p(e,"challenge"),t=p(e,"recovery_session_id");return g(r)?u(t)?c({challenge:r,recovery_session_id:t}):i("Invalid API response: recovery_session_id must be string",{field:"recovery_session_id",originalData:e}):i("Invalid API response: challenge must be object",{field:"challenge",originalData:e})}function Re(e){if(!g(e))return i("Invalid API response: expected object",{originalData:e});let r=p(e,"status"),t=p(e,"session_token"),n=p(e,"user"),s=p(e,"credential_id");if(!u(r))return i("Invalid API response: status must be string",{field:"status",originalData:e});if(!u(t))return i("Invalid API response: session_token must be string",{field:"session_token",originalData:e});if(!u(s))return i("Invalid API response: credential_id must be string",{field:"credential_id",originalData:e});if(!g(n))return i("Invalid API response: user must be object",{field:"user",originalData:e});let o=p(n,"user_id");if(!u(o))return i("Invalid API response: user.user_id must be string",{field:"user.user_id",originalData:e});let a=n;return c({status:r,session_token:t,credential_id:s,user:{user_id:o,external_user_id:u(a.external_user_id)?a.external_user_id:void 0,email:u(a.email)?a.email:void 0,metadata:g(a.metadata)?a.metadata:void 0}})}var H=class{constructor(r,t,n={}){this.httpClient=r;this.baseUrl=t;this.defaultHeaders=n;}mergeHeaders(r){return {...this.defaultHeaders,...r}}async post(r,t,n){let s=`${this.baseUrl}${r}`,o=await this.httpClient.post(s,t,this.mergeHeaders());return o.ok?n(o.value):l(o.error)}async get(r,t,n){let s=`${this.baseUrl}${r}`,o=await this.httpClient.get(s,this.mergeHeaders(n));return o.ok?t(o.value):l(o.error)}async startRegister(r){return this.post("/v1/passkeys/register/start",r,re)}async startAuth(r){return this.post("/v1/passkeys/auth/start",r,te)}async finishRegister(r){return this.post("/v1/passkeys/register/finish",r,ne)}async finishAuthentication(r){return this.post("/v1/passkeys/auth/finish",r,se)}async validateSession(r){return this.get("/v1/sessions/validate",ie,{Authorization:`Bearer ${r}`})}async startEmailFallback(r){let t=`${this.baseUrl}/v1/fallback/email/start`,n=await this.httpClient.post(t,{userId:r.userId,email:r.email},this.mergeHeaders());return n.ok?c(void 0):l(n.error)}async verifyEmailCode(r,t){return this.post("/v1/fallback/email/verify",{userId:r,code:t},oe)}async startOnboarding(r){return this.post("/onboarding/start",r,ae)}async getOnboardingStatus(r){return this.get(`/onboarding/${r}/status`,le)}async getOnboardingRegister(r){return this.get(`/onboarding/${r}/register`,ue)}async registerOnboardingPasskey(r,t){return this.post(`/onboarding/${r}/register-passkey`,t,pe)}async completeOnboarding(r,t){return this.post(`/onboarding/${r}/complete`,t,ce)}async initCrossDeviceAuth(){return this.post("/v1/auth/cross-device/init",{},B)}async initCrossDeviceRegistration(r){return this.post("/v1/auth/cross-device/init-registration",{external_user_id:r.externalUserId},B)}async getCrossDeviceStatus(r){return this.get(`/v1/auth/cross-device/status/${r}`,de)}async getCrossDeviceContext(r){return this.get(`/v1/auth/cross-device/context/${r}`,ge)}async verifyCrossDeviceAuth(r){let t=`${this.baseUrl}/v1/auth/cross-device/verify`,n=await this.httpClient.post(t,r,this.mergeHeaders());return n.ok?c(void 0):l(n.error)}async verifyCrossDeviceRegistration(r){let t=`${this.baseUrl}/v1/auth/cross-device/verify-registration`,n=await this.httpClient.post(t,r,this.mergeHeaders());return n.ok?c(void 0):l(n.error)}async verifyAccountRecoveryOtp(r,t){return this.post("/v1/users/recovery/verify",{external_id:r,otp:t},me)}async completeAccountRecovery(r,t){return this.post("/v1/users/recovery/complete",{recovery_session_id:r,credential:t},Re)}};function Ze(e){return typeof e=="object"&&e!==null&&e.ok===true&&"resultado"in e}function Qe(e){if(typeof e!="object"||e===null)return false;let r=e;if(r.ok!==false||!r.error||typeof r.error!="object")return false;let t=r.error;return typeof t.code=="string"&&typeof t.message=="string"}var er=3e4;function rr(){if(typeof globalThis.crypto<"u"&&typeof globalThis.crypto.randomUUID=="function")return globalThis.crypto.randomUUID();throw new Error("Web Crypto API is required but not available.")}function Oe(e,r){let t=r*Math.pow(2,e);return Math.min(t,er)}function tr(e,r){return e!=="GET"?false:r>=500||r===429}var $=class{constructor(r,t=0,n=1e3,s){this.timeoutMs=r;this.maxRetries=t;this.retryDelayMs=n;this.logger=s;}async get(r,t){return this.request(r,{method:"GET",headers:t})}async post(r,t,n){return this.request(r,{method:"POST",body:JSON.stringify(t),headers:{"Content-Type":"application/json",...n}})}async request(r,t){let n=(t.method??"GET").toUpperCase(),s=rr(),o=new Headers(t.headers);o.set("X-Request-Id",s),this.logger&&this.logger.debug("request",{requestId:s,url:r,method:n});let a;for(let d=0;d<=this.maxRetries;d++)try{let R=new AbortController,v=setTimeout(()=>R.abort(),this.timeoutMs);try{let y=await fetch(r,{...t,headers:o,signal:R.signal});if(!y.ok){let C;try{C=await y.json();}catch{}let _,K;if(Qe(C))_=C.error.message,K=F(C.error.code);else {let x=C,P=x?.error;if(typeof P=="object"&&P!==null&&"code"in P&&typeof P.code=="string")_=P.message??x?.message??y.statusText,K=F(P.code);else {_=x?.message??y.statusText;let j=x?.error;K=typeof j=="string"?F(j):j===void 0?"NETWORK_FAILURE":F(String(j));}}let _e=m(K,_,{requestId:s,status:y.status,statusText:y.statusText,data:C});if(tr(n,y.status)&&d<this.maxRetries){a=_e,await new Promise(x=>setTimeout(x,Oe(d,this.retryDelayMs)));continue}return l(_e)}if(y.status===204)return c(void 0);if(y.headers.get("content-length")==="0")return c(void 0);let b=await y.json();if(Ze(b))return c(b.resultado);let N=b;return typeof b=="object"&&b!==null&&N.ok===true&&!("resultado"in N)?c(void 0):c(b)}finally{clearTimeout(v);}}catch(R){if(a=R,n==="GET"&&d<this.maxRetries)await new Promise(y=>setTimeout(y,Oe(d,this.retryDelayMs)));else break}return a instanceof Error&&a.name==="AbortError"?l(m("TIMEOUT","Request timed out",{requestId:s})):l(m("NETWORK_FAILURE",a instanceof Error?a.message:"Request failed",{requestId:s,cause:a}))}};function T(e){let r=new Uint8Array(e),t=Array.from(r,s=>String.fromCharCode(s)).join("");if(typeof globalThis.btoa>"u")throw Z("encode");return globalThis.btoa(t).replace(/\+/g,"-").replace(/\//g,"_").replace(/=/g,"")}function nr(e){if(typeof globalThis.atob>"u")throw Z("decode");let r=e.replace(/-/g,"+").replace(/_/g,"/"),t=r.length%4,n=t===0?r:r+"=".repeat(4-t),s=globalThis.atob(n);return Uint8Array.from(s,o=>o.charCodeAt(0))}function D(e){let r=nr(e),t=new ArrayBuffer(r.length);return new Uint8Array(t).set(r),t}function Se(e){return e!==null&&typeof e=="object"&&"clientDataJSON"in e&&e.clientDataJSON instanceof ArrayBuffer}function I(e){if(!e.response)throw m("UNKNOWN_ERROR","Credential response is missing",{credential:e});let r=e.response;if(!Se(r))throw m("UNKNOWN_ERROR","Invalid credential response structure",{response:r});if(!("attestationObject"in r))throw m("UNKNOWN_ERROR","Invalid credential response structure for register: attestationObject is missing",{response:r});let t=r.clientDataJSON,n=r.attestationObject;return {id:e.id,rawId:T(e.rawId),response:{clientDataJSON:T(t),attestationObject:T(n)},type:"public-key"}}function X(e){if(!e.response)throw m("UNKNOWN_ERROR","Credential response is missing",{credential:e});let r=e.response;if(!Se(r))throw m("UNKNOWN_ERROR","Invalid credential response structure",{response:r});if(!("authenticatorData"in r)||!("signature"in r))throw m("UNKNOWN_ERROR","Invalid credential response structure for auth: authenticatorData or signature is missing",{response:r});let t=r.clientDataJSON,n=r.authenticatorData,s=r.signature,o=r.userHandle;return {id:e.id,rawId:T(e.rawId),response:{authenticatorData:T(n),clientDataJSON:T(t),signature:T(s),...o&&{userHandle:T(o)}},type:"public-key"}}function w(){try{return !(typeof navigator>"u"||!navigator.credentials||typeof PublicKeyCredential>"u")}catch{return false}}async function sr(){try{return !w()||typeof PublicKeyCredential.isUserVerifyingPlatformAuthenticatorAvailable!="function"?false:await PublicKeyCredential.isUserVerifyingPlatformAuthenticatorAvailable()}catch{return false}}async function ke(){let e=w(),r=await sr();return {isPasskeySupported:e,platformAuthenticatorAvailable:r,recommendedFlow:e?"passkey":"fallback"}}function S(e,r="create"){if(!e||typeof e!="object"||!("id"in e)||!("rawId"in e)||!("response"in e))throw Te(r)}async function L(e){let{operation:r,eventEmitter:t,start:n,createOptions:s,invoke:o,finish:a}=e;try{if(t.emit("start",{type:"start",operation:r}),!w()){let E=J();return t.emit("error",{type:"error",error:E}),l(E)}let d=await n();if(!d.ok)return t.emit("error",{type:"error",error:d.error}),l(d.error);let R=s(d.value);if(!R.ok)return t.emit("error",{type:"error",error:R.error}),l(R.error);let v=await o(R.value);if(!v){let E=f("credential",`${r==="register"?"creation":"retrieval"} failed`);return t.emit("error",{type:"error",error:E}),l(E)}try{S(v);}catch(E){let b=h(E);return t.emit("error",{type:"error",error:b}),l(b)}let y=await a(d.value,v);return y.ok?(t.emit("success",{type:"success",operation:r}),c(y.value)):(t.emit("error",{type:"error",error:y.error}),l(y.error))}catch(d){let R=h(d);return t.emit("error",{type:"error",error:R}),l(R)}}function k(e,r){try{V(e.challenge,"challenge"),V(e.user.id,"user.id");let t=D(e.challenge),n=D(e.user.id),s={userVerification:"preferred"};e.authenticatorSelection&&(s={...e.authenticatorSelection}),r&&(s={...s,authenticatorAttachment:r});let o={rp:{id:e.rp.id,name:e.rp.name},user:{id:n,name:e.user.name,displayName:e.user.displayName},challenge:t,pubKeyCredParams:e.pubKeyCredParams,...e.timeout!==void 0&&{timeout:e.timeout},attestation:"none",authenticatorSelection:s,...e.excludeCredentials&&{excludeCredentials:e.excludeCredentials.map(a=>({id:D(a.id),type:a.type,...a.transports&&{transports:a.transports}}))}};return c({publicKey:o})}catch(t){return l(h(t))}}function ye(e,r){try{V(e.challenge,"challenge");let t=D(e.challenge);return c({publicKey:{challenge:t,rpId:e.rpId,...e.timeout!==void 0&&{timeout:e.timeout},userVerification:e.userVerification??"preferred",...e.allowCredentials&&{allowCredentials:e.allowCredentials.map(n=>({id:D(n.id),type:n.type,...n.transports&&{transports:n.transports}}))}},...r!==void 0&&{mediation:r}})}catch(t){return l(h(t))}}async function xe(e,r,t){let n=e.externalUserId??e.external_user_id;if(!n||typeof n!="string"||n.trim()===""){let s=f("externalUserId","must be a non-empty string");return t.emit("error",{type:"error",error:s}),l(s)}return L({operation:"register",eventEmitter:t,start:()=>r.startRegister({external_user_id:n}),createOptions:s=>k(s.challenge,e.authenticatorType),invoke:async s=>{let o={...s,...e.signal&&{signal:e.signal}};return navigator.credentials.create(o)},finish:async(s,o)=>{let a=await r.finishRegister({session_id:s.session_id,credential:I(o)});return a.ok?c({success:true,credentialId:a.value.credential_id,credential_id:a.value.credential_id,status:a.value.status,sessionToken:a.value.session_token,user:{userId:a.value.user.user_id,externalUserId:a.value.user.external_user_id,email:a.value.user.email,metadata:a.value.user.metadata}}):l(a.error)}})}async function Pe(e,r,t){let n=e.externalUserId??e.external_user_id,s=n!==void 0&&typeof n=="string"&&n.trim()!=="";return L({operation:"authenticate",eventEmitter:t,start:()=>r.startAuth(s?{external_user_id:n.trim()}:{}),createOptions:o=>ye(o.challenge,e.mediation),invoke:async o=>{let a={...o,...e.signal&&{signal:e.signal}};return navigator.credentials.get(a)},finish:async(o,a)=>{let d=await r.finishAuthentication({session_id:o.session_id,credential:X(a)});return d.ok?c({authenticated:d.value.authenticated,sessionToken:d.value.session_token,user:{userId:d.value.user.user_id,externalUserId:d.value.user.external_user_id,email:d.value.user.email,metadata:d.value.user.metadata},signals:d.value.signals}):l(d.error)}})}var ir=2e3,or=60,z=class{constructor(r){this.apiClient=r;}async startFlow(r){let t=await this.apiClient.startOnboarding({user_role:r.user_role});if(!t.ok)return l(t.error);let{session_id:n}=t.value;for(let s=0;s<or;s++){await new Promise(R=>setTimeout(R,ir));let o=await this.apiClient.getOnboardingStatus(n);if(!o.ok)return l(o.error);let a=o.value.status,d=o.value.onboarding_url;if(a==="pending_passkey"){let R=await this.apiClient.getOnboardingRegister(n);if(!R.ok)return l(R.error);let v=R.value;if(!v.challenge)return l(m("NOT_SUPPORTED","Onboarding requires user action - complete passkey registration at the provided onboarding_url",{onboarding_url:d}));let y=k(v.challenge);if(!y.ok)return l(y.error);let E;try{E=await navigator.credentials.create(y.value);}catch(_){return l(h(_))}try{S(E,"create");}catch(_){return l(h(_))}let b;try{b=I(E);}catch(_){return l(h(_))}let N=await this.apiClient.registerOnboardingPasskey(n,{credential:b,challenge:v.challenge.challenge});return N.ok?await this.apiClient.completeOnboarding(n,{company_name:r.company_name}):l(N.error)}if(a==="completed")return await this.apiClient.completeOnboarding(n,{company_name:r.company_name})}return l(m("TIMEOUT","Onboarding timed out"))}};var ar=2e3,lr=60,G=class{constructor(r){this.apiClient=r;}async init(){return this.apiClient.initCrossDeviceAuth()}async initRegistration(r){return this.apiClient.initCrossDeviceRegistration(r)}async waitForSession(r,t){for(let n=0;n<lr;n++){if(t?.aborted)return l(m("ABORT_ERROR","Operation aborted by user or timeout"));let s=await this.apiClient.getCrossDeviceStatus(r);if(!s.ok)return l(s.error);if(s.value.status==="completed")return !s.value.session_token||!s.value.user_id?l(m("UNKNOWN_ERROR","Missing data in completed session")):c({session_token:s.value.session_token,user_id:s.value.user_id});if(t?.aborted)return l(m("ABORT_ERROR","Operation aborted by user or timeout"));if(await new Promise(o=>{let a=setTimeout(()=>{o(null),t?.removeEventListener("abort",d);},ar),d=()=>{clearTimeout(a),o(null);};t?.addEventListener("abort",d);}),t?.aborted)return l(m("ABORT_ERROR","Operation aborted by user or timeout"))}return l(m("TIMEOUT","Cross-device authentication timed out"))}async approve(r){let t=await this.apiClient.getCrossDeviceContext(r);if(!t.ok)return l(t.error);let n=t.value;return n.type==="registration"?this.executeRegistrationApproval(r,n):this.executeAuthApproval(r,n)}async executeRegistrationApproval(r,t){let n=k(t.options);if(!n.ok)return l(n.error);let s;try{s=await navigator.credentials.create(n.value);}catch(a){return l(h(a))}try{S(s,"create");}catch(a){return l(h(a))}let o;try{o=I(s);}catch(a){return l(h(a))}return this.apiClient.verifyCrossDeviceRegistration({session_id:r,credential:o})}async executeAuthApproval(r,t){let n=ye(t.options);if(!n.ok)return l(n.error);let s;try{s=await navigator.credentials.get(n.value);}catch(a){return l(h(a))}try{S(s,"get");}catch(a){return l(h(a))}let o;try{o=X(s);}catch(a){return l(h(a))}return this.apiClient.verifyCrossDeviceAuth({session_id:r,credential:o})}};var Y=class{handlers;constructor(){this.handlers=new Map;}on(r,t){let n=this.handlers.get(r);return n||(n=new Set,this.handlers.set(r,n)),n.add(t),()=>{this.off(r,t);}}off(r,t){let n=this.handlers.get(r);n&&(n.delete(t),n.size===0&&this.handlers.delete(r));}emit(r,t){let n=this.handlers.get(r);if(n)for(let s of n)try{s(t);}catch{}}removeAllListeners(){this.handlers.clear();}};async function Me(e,r,t){let n=e.externalUserId??e.external_user_id;if(!n||typeof n!="string"||n.trim()===""){let s=f("externalUserId","must be a non-empty string");return t.emit("error",{type:"error",error:s}),l(s)}if(!e.otp||typeof e.otp!="string"||e.otp.trim().length!==6){let s=f("otp","must be a 6-digit string");return t.emit("error",{type:"error",error:s}),l(s)}return L({operation:"register",eventEmitter:t,start:()=>r.verifyAccountRecoveryOtp(n,e.otp),createOptions:s=>k(s.challenge),invoke:async s=>navigator.credentials.create(s),finish:async(s,o)=>{let a=await r.completeAccountRecovery(s.recovery_session_id,I(o));return a.ok?c({success:true,credentialId:a.value.credential_id,status:a.value.status,sessionToken:a.value.session_token,user:{userId:a.value.user.user_id,externalUserId:a.value.user.external_user_id,email:a.value.user.email,metadata:a.value.user.metadata}}):l(a.error)}})}var fe="https://api.trymellonauth.com",De="https://api.trymellonauth.com/v1/telemetry";var ve="trymellon_sandbox_session_token_v1";function we(e){return {async send(r){let t=JSON.stringify(r);if(typeof navigator<"u"&&typeof navigator.sendBeacon=="function"){navigator.sendBeacon(e,t);return}typeof fetch<"u"&&await fetch(e,{method:"POST",body:t,headers:{"Content-Type":"application/json"},keepalive:true});}}}function he(e,r){return {event:e,latencyMs:r,ok:true}}var Ee=class e{sandbox;sandboxToken;apiClient;eventEmitter;telemetrySender;crossDeviceManager;onboarding;static create(r){try{let t=r.appId,n=r.publishableKey;if(!t||typeof t!="string"||t.trim()==="")return l(f("appId","must be a non-empty string"));if(!n||typeof n!="string"||n.trim()==="")return l(f("publishableKey","must be a non-empty string"));let s=r.apiBaseUrl??fe;Q(s,"apiBaseUrl");let o=r.timeoutMs??3e4;return O(o,"timeoutMs",1e3,3e5),r.maxRetries!==void 0&&O(r.maxRetries,"maxRetries",0,10),r.retryDelayMs!==void 0&&O(r.retryDelayMs,"retryDelayMs",100,1e4),c(new e(r))}catch(t){return q(t)?l(t):l(f("config",t.message))}}constructor(r){this.sandbox=r.sandbox===true,this.sandboxToken=this.sandbox&&r.sandboxToken!=null&&r.sandboxToken!==""?r.sandboxToken:ve;let t=r.appId,n=r.publishableKey;if(!t||typeof t!="string"||t.trim()==="")throw f("appId","must be a non-empty string");if(!n||typeof n!="string"||n.trim()==="")throw f("publishableKey","must be a non-empty string");let s=r.apiBaseUrl??fe;Q(s,"apiBaseUrl");let o=r.timeoutMs??3e4;O(o,"timeoutMs",1e3,3e5),r.maxRetries!==void 0&&O(r.maxRetries,"maxRetries",0,10),r.retryDelayMs!==void 0&&O(r.retryDelayMs,"retryDelayMs",100,1e4);let a=r.maxRetries??3,d=r.retryDelayMs??1e3,R=new $(o,a,d,r.logger),v=r.origin??(typeof window<"u"&&window?.location?.origin?window.location.origin:void 0),y={"X-App-Id":t.trim(),Authorization:`Bearer ${n.trim()}`,...v&&{Origin:v}};this.apiClient=new H(R,s,y),this.onboarding=new z(this.apiClient),this.crossDeviceManager=new G(this.apiClient),this.eventEmitter=new Y,r.enableTelemetry&&(this.telemetrySender=r.telemetrySender??we(r.telemetryEndpoint??De));}static isSupported(){return w()}async register(r){if(this.sandbox){let s=r.externalUserId??r.external_user_id??"sandbox";return Promise.resolve(c({success:true,credentialId:"",status:"sandbox",sessionToken:this.sandboxToken,user:{userId:"sandbox-user",externalUserId:typeof s=="string"?s:"sandbox"}}))}let t=Date.now(),n=await xe(r,this.apiClient,this.eventEmitter);return n.ok&&this.telemetrySender&&this.telemetrySender.send(he("register",Date.now()-t)).catch(()=>{}),n}async authenticate(r){if(this.sandbox){let s=r.externalUserId??r.external_user_id??"sandbox";return Promise.resolve(c({authenticated:true,sessionToken:this.sandboxToken,user:{userId:"sandbox-user",externalUserId:typeof s=="string"?s:"sandbox"}}))}let t=Date.now(),n=await Pe(r,this.apiClient,this.eventEmitter);return n.ok&&this.telemetrySender&&this.telemetrySender.send(he("authenticate",Date.now()-t)).catch(()=>{}),n}async validateSession(r){return this.sandbox&&r===this.sandboxToken?Promise.resolve(c({valid:true,user_id:"sandbox-user",external_user_id:"sandbox",tenant_id:"sandbox-tenant",app_id:"sandbox-app"})):this.apiClient.validateSession(r)}async getStatus(){return ke()}on(r,t){return this.eventEmitter.on(r,t)}version(){return "1.6.2"}fallback={email:{start:async r=>this.apiClient.startEmailFallback(r),verify:async r=>this.apiClient.verifyEmailCode(r.userId,r.code)}};auth={crossDevice:{init:()=>this.crossDeviceManager.init(),initRegistration:r=>this.crossDeviceManager.initRegistration(r),waitForSession:(r,t)=>this.crossDeviceManager.waitForSession(r,t),approve:r=>this.crossDeviceManager.approve(r)},recoverAccount:async r=>Me(r,this.apiClient,this.eventEmitter)}};var be=class{debug(r,t){t&&Object.keys(t).length>0?console.debug(`[TryMellon] ${r}`,t):console.debug(`[TryMellon] ${r}`);}info(r,t){t&&Object.keys(t).length>0?console.info(`[TryMellon] ${r}`,t):console.info(`[TryMellon] ${r}`);}warn(r,t){t&&Object.keys(t).length>0?console.warn(`[TryMellon] ${r}`,t):console.warn(`[TryMellon] ${r}`);}error(r,t){t&&Object.keys(t).length>0?console.error(`[TryMellon] ${r}`,t):console.error(`[TryMellon] ${r}`);}};
|
|
2
|
+
exports.ConsoleLogger=be;exports.SANDBOX_SESSION_TOKEN=ve;exports.TryMellon=Ee;exports.TryMellonError=U;exports.createError=m;exports.createInvalidArgumentError=f;exports.createNetworkError=Be;exports.createNotSupportedError=J;exports.createTimeoutError=He;exports.createUserCancelledError=We;exports.err=l;exports.isTryMellonError=q;exports.mapWebAuthnError=h;exports.ok=c;//# sourceMappingURL=index.cjs.map
|
|
3
3
|
//# sourceMappingURL=index.cjs.map
|