@zackbart/connecta 0.28.1 → 0.30.0

package/dist/auth/clerk-sdk/generated.js

@@ -0,0 +1,1845 @@
+// @ts-nocheck
+// Generated by scripts/build-clerk-sdk.mjs from @clerk/backend 3.12.0. Do not edit.
+// Runtime-neutral SDK copy with instance fetch and checked diagnostic hooks.
+/*!
+Clerk Backend SDK 3.12.0:
+MIT License
+
+Copyright (c) 2022 Clerk, Inc.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+Clerk Shared:
+MIT License
+
+Copyright (c) 2022 Clerk Inc
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+*/
+import { clerkSdkFailure as oe } from "../clerk-transport.js";
+var Kt = ["CI", "CONTINUOUS_INTEGRATION", "GITHUB_ACTIONS", "GITLAB_CI", "CIRCLECI", "TRAVIS", "BUILDKITE", "BITBUCKET_BUILD_NUMBER", "APPVEYOR", "CODEBUILD_BUILD_ID", "TF_BUILD", "TEAMCITY_VERSION", "JENKINS_URL", "HUDSON_URL", "BAMBOO_BUILDKEY", "CF_PAGES"];
+var Ht = () => { try {
+    return !1;
+}
+catch { } return !1; }, zt = () => { try {
+    return !0;
+}
+catch { } return !1; };
+var Wt = new Set, de = (t, e, r) => {
+    let s = Ht() || zt(), n = r ?? t;
+    Wt.has(n) || s || (Wt.add(n), console.warn(`Clerk - DEPRECATION WARNING: "${t}" is deprecated and will be removed in the next major release.
+${e}`));
+};
+var We = [".lcl.dev", ".lclstage.dev", ".lclclerk.com"], Bt = [".accounts.dev", ".accountsstage.dev", ".accounts.lclclerk.com"], jt = [".lcl.dev", ".stg.dev", ".lclstage.dev", ".stgstage.dev", ".dev.lclclerk.com", ".stg.lclclerk.com", ".accounts.lclclerk.com", "accountsstage.dev", "accounts.dev"];
+var fe = t => typeof atob < "u" && typeof atob == "function" ? atob(t) : typeof globalThis.Buffer < "u" ? globalThis.Buffer.from(t, "base64").toString() : t;
+var Vt = t => typeof btoa < "u" && typeof btoa == "function" ? btoa(t) : typeof globalThis.Buffer < "u" ? globalThis.Buffer.from(t).toString("base64") : t;
+var Gt = "pk_live_", Kn = "pk_test_";
+function Qt(t) { if (!t.endsWith("$"))
+    return !1; let e = t.slice(0, -1); return e.includes("$") ? !1 : e.includes("."); }
+function ee(t, e = {}) { if (t = t || "", !t || !$t(t)) {
+    if (e.fatal && !t)
+        throw new Error("Publishable key is missing. Ensure that your publishable key is correctly configured. Double-check your environment configuration for your keys, or access them here: https://dashboard.clerk.com/last-active?path=api-keys");
+    if (e.fatal && !$t(t))
+        throw new Error("Publishable key not valid.");
+    return null;
+} let r = t.startsWith(Gt) ? "production" : "development", s; try {
+    s = fe(t.split("_")[2]);
+}
+catch {
+    if (e.fatal)
+        throw new Error("Publishable key not valid: Failed to decode key.");
+    return null;
+} if (!Qt(s)) {
+    if (e.fatal)
+        throw new Error("Publishable key not valid: Decoded key has invalid format.");
+    return null;
+} let n = s.slice(0, -1); return e.proxyUrl ? n = e.proxyUrl : r !== "development" && e.domain && e.isSatellite && (n = `clerk.${e.domain}`), { instanceType: r, frontendApi: n }; }
+function $t(t = "") { try {
+    if (!(t.startsWith(Gt) || t.startsWith(Kn)))
+        return !1;
+    let e = t.split("_");
+    if (e.length !== 3)
+        return !1;
+    let r = e[2];
+    return r ? Qt(fe(r)) : !1;
+}
+catch {
+    return !1;
+} }
+function Yt() { let t = new Map; return { isDevOrStagingUrl: e => { if (!e)
+        return !1; let r = typeof e == "string" ? e : e.hostname, s = t.get(r); return s === void 0 && (s = jt.some(n => r.endsWith(n)), t.set(r, s)), s; } }; }
+function Xt(t) { return t.startsWith("live_") || t.startsWith("pk_live_"); }
+function Be(t) { return t.startsWith("test_") || t.startsWith("sk_test_"); }
+async function je(t, e = globalThis.crypto.subtle) { let r = new TextEncoder().encode(t), s = await e.digest("sha-1", r); return Vt(String.fromCharCode(...new Uint8Array(s))).replace(/\+/gi, "-").replace(/\//gi, "_").substring(0, 8); }
+var Ve = (t, e) => `${t}_${e}`;
+var Hn = { initialDelay: 125, maxDelayBetweenRetries: 0, factor: 2, shouldRetry: (t, e) => e < 5, retryImmediately: !1, jitter: !0 }, zn = 100, Zt = async (t) => new Promise(e => setTimeout(e, t)), er = (t, e) => e ? t * (1 + Math.random()) : t, Wn = t => { let e = 0, r = () => { let s = t.initialDelay, n = t.factor, i = s * Math.pow(n, e); return i = er(i, t.jitter), Math.min(t.maxDelayBetweenRetries || i, i); }; return async () => { await Zt(r()), e++; }; }, $e = async (t, e = {}) => { let r = 0, { shouldRetry: s, initialDelay: n, maxDelayBetweenRetries: i, factor: o, retryImmediately: a, jitter: c, onBeforeRetry: d } = { ...Hn, ...e }, f = Wn({ initialDelay: n, maxDelayBetweenRetries: i, factor: o, jitter: c }); for (;;)
+    try {
+        return await t();
+    }
+    catch (p) {
+        if (r++, !s(p, r))
+            throw p;
+        d && await d(r), a && r === 1 ? await Zt(er(zn, c)) : await f();
+    } };
+function tr(t) { return We.some(e => t.startsWith("accounts.") && t.endsWith(e)); }
+function rr(t) { return Bt.some(e => t.endsWith(e) && !t.endsWith(".clerk" + e)); }
+function we(t) { function e(r) { let s = r ?? this; if (!s)
+    throw new TypeError(`${t.kind || t.name} type guard requires an error object`); return t.kind && typeof s == "object" && s !== null && "constructor" in s && s.constructor?.kind === t.kind ? !0 : s instanceof t; } return e; }
+var ae = class sr extends Error {
+    static kind = "ClerkError";
+    clerkError = !0;
+    code;
+    longMessage;
+    docsUrl;
+    cause;
+    get name() { return this.constructor.name; }
+    constructor(e) { super(new.target.formatMessage(new.target.kind, e.message, e.code, e.docsUrl), { cause: e.cause }), Object.setPrototypeOf(this, sr.prototype), this.code = e.code, this.docsUrl = e.docsUrl, this.longMessage = e.longMessage, this.cause = e.cause; }
+    toString() {
+        return `[${this.name}]
+Message:${this.message}`;
+    }
+    static formatMessage(e, r, s, n) {
+        let i = "Clerk:", o = new RegExp(i.replace(" ", "\\s*"), "i");
+        return r = r.replace(o, ""), r = `${i} ${r.trim()}
+
+(code="${s}")
+
+`, n && (r += `
+
+Docs: ${n}`), r;
+    }
+};
+var Ge = class nr extends ae {
+    static kind = "ClerkRuntimeError";
+    clerkRuntimeError = !0;
+    constructor(e, r) { super({ ...r, message: e }), Object.setPrototypeOf(this, nr.prototype); }
+}, ir = we(Ge);
+var Ae = class {
+    static kind = "ClerkAPIError";
+    code;
+    message;
+    longMessage;
+    meta;
+    constructor(t) { let e = { code: t.code, message: t.message, longMessage: t.long_message, meta: { paramName: t.meta?.param_name, sessionId: t.meta?.session_id, emailAddresses: t.meta?.email_addresses, identifiers: t.meta?.identifiers, zxcvbn: t.meta?.zxcvbn, plan: t.meta?.plan, isPlanUpgradePossible: t.meta?.is_plan_upgrade_possible, seatsQuantityToAdd: t.meta?.seats_quantity_to_add, seatsQuantity: t.meta?.seats_quantity } }; this.code = e.code, this.message = e.message, this.longMessage = e.longMessage, this.meta = e.meta; }
+}, Bn = we(Ae);
+function Qe(t) { return new Ae(t); }
+var pe = class or extends ae {
+    static kind = "ClerkAPIResponseError";
+    status;
+    clerkTraceId;
+    retryAfter;
+    errors;
+    constructor(e, r) { let { data: s, status: n, clerkTraceId: i, retryAfter: o } = r; super({ ...r, message: e, code: "api_response_error" }), Object.setPrototypeOf(this, or.prototype), this.status = n, this.clerkTraceId = i, this.retryAfter = o, this.errors = (s || []).map(a => new Ae(a)); }
+    toString() {
+        let e = `[${this.name}]
+Message:${this.message}
+Status:${this.status}
+Serialized errors: ${this.errors.map(r => JSON.stringify(r))}`;
+        return this.clerkTraceId && (e += `
+Clerk Trace ID: ${this.clerkTraceId}`), e;
+    }
+    static formatMessage(e, r, s, n) { return r; }
+}, Pe = we(pe);
+var jn = Object.freeze({ InvalidProxyUrlErrorMessage: "The proxyUrl passed to Clerk is invalid. The expected value for proxyUrl is an absolute URL or a relative path with a leading '/'. (key={{url}})", InvalidPublishableKeyErrorMessage: "The publishableKey passed to Clerk is invalid. You can get your Publishable key at https://dashboard.clerk.com/last-active?path=api-keys. (key={{key}})", MissingPublishableKeyErrorMessage: "Missing publishableKey. You can get your key at https://dashboard.clerk.com/last-active?path=api-keys.", MissingSecretKeyErrorMessage: "Missing secretKey. You can get your key at https://dashboard.clerk.com/last-active?path=api-keys.", MissingClerkProvider: "{{source}} can only be used within the <ClerkProvider /> component. Learn more: https://clerk.com/docs/components/clerk-provider" });
+function Ye({ packageName: t, customMessages: e }) { let r = t; function s(i, o) { if (!o)
+    return `${r}: ${i}`; let a = i, c = i.matchAll(/{{([a-zA-Z0-9-_]+)}}/g); for (let d of c) {
+    let f = (o[d[1]] || "").toString();
+    a = a.replace(`{{${d[1]}}}`, f);
+} return `${r}: ${a}`; } let n = { ...jn, ...e }; return { setPackageName({ packageName: i }) { return typeof i == "string" && (r = i), this; }, setMessages({ customMessages: i }) { return Object.assign(n, i || {}), this; }, throwInvalidPublishableKeyError(i) { throw new Error(s(n.InvalidPublishableKeyErrorMessage, i)); }, throwInvalidProxyUrl(i) { throw new Error(s(n.InvalidProxyUrlErrorMessage, i)); }, throwMissingPublishableKeyError() { throw new Error(s(n.MissingPublishableKeyErrorMessage)); }, throwMissingSecretKeyError() { throw new Error(s(n.MissingSecretKeyErrorMessage)); }, throwMissingClerkProviderError(i) { throw new Error(s(n.MissingClerkProvider, i)); }, throw(i) { throw new Error(s(i)); } }; }
+var Vn = Ye({ packageName: "@clerk/backend" }), { isDevOrStagingUrl: il } = Yt();
+var ar = { InvalidSecretKey: "clerk_key_invalid" }, I = { TokenExpired: "token-expired", TokenInvalid: "token-invalid", TokenInvalidAlgorithm: "token-invalid-algorithm", TokenInvalidAuthorizedParties: "token-invalid-authorized-parties", TokenInvalidSignature: "token-invalid-signature", TokenNotActiveYet: "token-not-active-yet", TokenIatInTheFuture: "token-iat-in-the-future", TokenVerificationFailed: "token-verification-failed", InvalidSecretKey: "secret-key-invalid", LocalJWKMissing: "jwk-local-missing", RemoteJWKFailedToLoad: "jwk-remote-failed-to-load", RemoteJWKInvalid: "jwk-remote-invalid", RemoteJWKMissing: "jwk-remote-missing", JWKFailedToResolve: "jwk-failed-to-resolve", JWKKidMismatch: "jwk-kid-mismatch" }, L = { ContactSupport: "Contact support@clerk.com", EnsureClerkJWT: "Make sure that this is a valid Clerk-generated JWT.", SetClerkJWTKey: "Set the CLERK_JWT_KEY environment variable.", SetClerkSecretKey: "Set the CLERK_SECRET_KEY environment variable.", EnsureClockSync: "Make sure your system clock is in sync (e.g. turn off and on automatic time synchronization)." }, U = class cr extends Error {
+    constructor({ action: e, message: r, reason: s }) { super(r), Object.setPrototypeOf(this, cr.prototype), this.reason = s, this.message = r, this.action = e; }
+    getFullMessage() { return `${[this.message, this.action].filter(e => e).join(" ")} (reason=${this.reason}, token-carrier=${this.tokenCarrier})`; }
+};
+var W = { TokenInvalid: "token-invalid", InvalidSecretKey: "secret-key-invalid", UnexpectedError: "unexpected-error", TokenVerificationFailed: "token-verification-failed" }, ur = class lr extends ae {
+    constructor({ message: e, code: r, status: s, action: n }) { super({ message: e, code: r }), Object.setPrototypeOf(this, lr.prototype), this.status = s, this.action = n; }
+    static formatMessage(e, r, s, n) { return r; }
+    getFullMessage() { return `${this.message} (code=${this.code}, status=${this.status || "n/a"})`; }
+};
+ur.kind = "MachineTokenVerificationError";
+var B = ur;
+var hr = crypto;
+var $n = fetch.bind(globalThis), te = { crypto: hr, get fetch() { return $n; }, AbortController: globalThis.AbortController, Blob: globalThis.Blob, FormData: globalThis.FormData, Headers: globalThis.Headers, Request: globalThis.Request, Response: globalThis.Response }, Xe = { parse(t, e) { return Gn(t, dr, e); }, stringify(t, e) { return Qn(t, dr, e); } }, dr = { chars: "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_", bits: 6 };
+function Gn(t, e, r = {}) { if (!e.codes) {
+    e.codes = {};
+    for (let c = 0; c < e.chars.length; ++c)
+        e.codes[e.chars[c]] = c;
+} if (!r.loose && t.length * e.bits & 7)
+    throw new SyntaxError("Invalid padding"); let s = t.length; for (; t[s - 1] === "=";)
+    if (--s, !r.loose && !((t.length - s) * e.bits & 7))
+        throw new SyntaxError("Invalid padding"); let n = new (r.out ?? Uint8Array)(s * e.bits / 8 | 0), i = 0, o = 0, a = 0; for (let c = 0; c < s; ++c) {
+    let d = e.codes[t[c]];
+    if (d === void 0)
+        throw new SyntaxError("Invalid character " + t[c]);
+    o = o << e.bits | d, i += e.bits, i >= 8 && (i -= 8, n[a++] = 255 & o >> i);
+} if (i >= e.bits || 255 & o << 8 - i)
+    throw new SyntaxError("Unexpected end of data"); return n; }
+function Qn(t, e, r = {}) { let { pad: s = !0 } = r, n = (1 << e.bits) - 1, i = "", o = 0, a = 0; for (let c = 0; c < t.length; ++c)
+    for (a = a << 8 | 255 & t[c], o += 8; o > e.bits;)
+        o -= e.bits, i += e.chars[n & a >> o]; if (o && (i += e.chars[n & a << e.bits - o]), s)
+    for (; i.length * e.bits & 7;)
+        i += "="; return i; }
+var et = { RS256: "SHA-256", RS384: "SHA-384", RS512: "SHA-512" }, Ze = "RSASSA-PKCS1-v1_5", fr = { RS256: Ze, RS384: Ze, RS512: Ze }, tt = Object.keys(et);
+function Yn(t) { let e = et[t], r = fr[t]; if (!e || !r)
+    throw new Error(`Unsupported algorithm ${t}, expected one of ${tt.join(",")}.`); return { hash: { name: et[t] }, name: fr[t] }; }
+var Xn = t => Array.isArray(t) && t.length > 0 && t.every(e => typeof e == "string"), Zn = (t, e) => { let r = [e].flat().filter(i => !!i), s = [t].flat().filter(i => !!i); if (r.length > 0 && s.length > 0) {
+    if (typeof t == "string") {
+        if (!r.includes(t))
+            throw new U({ action: L.EnsureClerkJWT, reason: I.TokenVerificationFailed, message: `Invalid JWT audience claim (aud) ${JSON.stringify(t)}. Is not included in "${JSON.stringify(r)}".` });
+    }
+    else if (Xn(t) && !t.some(i => r.includes(i)))
+        throw new U({ action: L.EnsureClerkJWT, reason: I.TokenVerificationFailed, message: `Invalid JWT audience claim array (aud) ${JSON.stringify(t)}. Is not included in "${JSON.stringify(r)}".` });
+} }, rt = (t, e) => { if (typeof t > "u" && typeof e > "u")
+    return; let r = e ?? "JWT", s = Array.isArray(r) ? r : [r]; if (!s.includes(t))
+    throw new U({ action: L.EnsureClerkJWT, reason: I.TokenInvalid, message: `Invalid JWT type ${JSON.stringify(t)}. Expected "${s.join(", ")}".` }); }, st = t => { if (!tt.includes(t))
+    throw new U({ action: L.EnsureClerkJWT, reason: I.TokenInvalidAlgorithm, message: `Invalid JWT algorithm ${JSON.stringify(t)}. Supported: ${tt}.` }); }, ei = t => { if (typeof t != "string")
+    throw new U({ action: L.EnsureClerkJWT, reason: I.TokenVerificationFailed, message: `Subject claim (sub) is required and must be a string. Received ${JSON.stringify(t)}.` }); }, ti = (t, e) => { if (!(!e || e.length === 0) && (!t || !e.includes(t)))
+    throw new U({ reason: I.TokenInvalidAuthorizedParties, message: `Invalid JWT Authorized party claim (azp) ${JSON.stringify(t)}. Expected "${e}".` }); }, ri = (t, e) => { if (typeof t != "number")
+    throw new U({ action: L.EnsureClerkJWT, reason: I.TokenVerificationFailed, message: `Invalid JWT expiry date claim (exp) ${JSON.stringify(t)}. Expected number.` }); let r = new Date(Date.now()), s = new Date(0); if (s.setUTCSeconds(t), s.getTime() <= r.getTime() - e)
+    throw new U({ reason: I.TokenExpired, message: `JWT is expired. Expiry date: ${s.toUTCString()}, Current date: ${r.toUTCString()}.` }); }, si = (t, e) => { if (typeof t > "u")
+    return; if (typeof t != "number")
+    throw new U({ action: L.EnsureClerkJWT, reason: I.TokenVerificationFailed, message: `Invalid JWT not before date claim (nbf) ${JSON.stringify(t)}. Expected number.` }); let r = new Date(Date.now()), s = new Date(0); if (s.setUTCSeconds(t), s.getTime() > r.getTime() + e)
+    throw new U({ reason: I.TokenNotActiveYet, message: `JWT cannot be used prior to not before date claim (nbf). Not before date: ${s.toUTCString()}; Current date: ${r.toUTCString()};` }); }, ni = (t, e) => { if (typeof t > "u")
+    return; if (typeof t != "number")
+    throw new U({ action: L.EnsureClerkJWT, reason: I.TokenVerificationFailed, message: `Invalid JWT issued at date claim (iat) ${JSON.stringify(t)}. Expected number.` }); let r = new Date(Date.now()), s = new Date(0); if (s.setUTCSeconds(t), s.getTime() > r.getTime() + e)
+    throw new U({ reason: I.TokenIatInTheFuture, message: `JWT issued at date claim (iat) is in the future. Issued at date: ${s.toUTCString()}; Current date: ${r.toUTCString()};` }); };
+function ii(t) { let e = t.replace(/-----BEGIN.*?-----/g, "").replace(/-----END.*?-----/g, "").replace(/\s/g, ""), r = fe(e), s = new ArrayBuffer(r.length), n = new Uint8Array(s); for (let i = 0, o = r.length; i < o; i++)
+    n[i] = r.charCodeAt(i); return n; }
+function oi(t, e, r) { if (typeof t == "object")
+    return te.crypto.subtle.importKey("jwk", t, e, !1, [r]); let s = ii(t), n = r === "sign" ? "pkcs8" : "spki"; return te.crypto.subtle.importKey(n, s, e, !1, [r]); }
+var ai = 5 * 1e3;
+async function nt(t, e) { let { header: r, signature: s, raw: n } = t, o = new TextEncoder().encode([n.header, n.payload].join(".")), a = Yn(r.alg); try {
+    let c = await oi(e, a, "verify");
+    return { data: await te.crypto.subtle.verify(a.name, c, s, o) };
+}
+catch (c) {
+    return { errors: [new U({ reason: I.TokenInvalidSignature, message: c?.message })] };
+} }
+function K(t) { let e = (t || "").toString().split("."); if (e.length !== 3)
+    return { errors: [new U({ reason: I.TokenInvalid, message: "Invalid JWT form. A JWT consists of three parts separated by dots." })] }; let [r, s, n] = e, i = new TextDecoder, o = JSON.parse(i.decode(Xe.parse(r, { loose: !0 }))), a = JSON.parse(i.decode(Xe.parse(s, { loose: !0 }))), c = Xe.parse(n, { loose: !0 }); return { data: { header: o, payload: a, signature: c, raw: { header: r, payload: s, signature: n, text: t } } }; }
+async function it(t, e) { let { audience: r, authorizedParties: s, clockSkewInMs: n, key: i, headerType: o } = e, a = typeof n == "number" && Number.isFinite(n) ? n : ai, { data: c, errors: d } = K(t); if (d)
+    return { errors: d }; let { header: f, payload: p } = c; try {
+    let { typ: A, alg: P } = f;
+    rt(A, o), st(P);
+}
+catch (A) {
+    return { errors: [A] };
+} let { data: E, errors: S } = await nt(c, i); if (S)
+    return { errors: [new U({ action: L.EnsureClerkJWT, reason: I.TokenVerificationFailed, message: `Error verifying JWT signature. ${S[0]}` })] }; if (!E)
+    return { errors: [new U({ reason: I.TokenInvalidSignature, message: "JWT signature is invalid." })] }; try {
+    let { azp: A, sub: P, aud: x, iat: l, exp: y, nbf: m } = p;
+    ei(P), Zn(x, r), ti(A, s), ri(y, a), si(m, a), ni(l, a);
+}
+catch (A) {
+    return { errors: [A] };
+} return { data: p }; }
+var ci = Object.create, pr = Object.defineProperty, ui = Object.getOwnPropertyDescriptor, mr = Object.getOwnPropertyNames, li = Object.getPrototypeOf, hi = Object.prototype.hasOwnProperty, yr = t => { throw TypeError(t); }, gr = (t, e) => function () { return e || (0, t[mr(t)[0]])((e = { exports: {} }).exports, e), e.exports; }, di = (t, e, r, s) => { if (e && typeof e == "object" || typeof e == "function")
+    for (let n of mr(e))
+        !hi.call(t, n) && n !== r && pr(t, n, { get: () => e[n], enumerable: !(s = ui(e, n)) || s.enumerable }); return t; }, kr = (t, e, r) => (r = t != null ? ci(li(t)) : {}, di(e || !t || !t.__esModule ? pr(r, "default", { value: t, enumerable: !0 }) : r, t)), ot = (t, e, r) => e.has(t) || yr("Cannot " + r), _r = (t, e, r) => (ot(t, e, "read from private field"), r ? r.call(t) : e.get(t)), at = (t, e, r) => e.has(t) ? yr("Cannot add the same private member more than once") : e instanceof WeakSet ? e.add(t) : e.set(t, r), vr = (t, e, r, s) => (ot(t, e, "write to private field"), s ? s.call(t, r) : e.set(t, r), r), ce = (t, e, r) => (ot(t, e, "access private method"), r);
+function ct(t) { return t ? `https://${t.replace(/clerk\.accountsstage\./, "accountsstage.").replace(/clerk\.accounts\.|clerk\./, "accounts.")}` : ""; }
+var Ie = new Set, Sr = { warnOnce: t => { Ie.has(t) || (Ie.add(t), console.warn(t)); }, logOnce: t => { Ie.has(t) || (console.log(t), Ie.add(t)); } };
+function fi(t) { return t ? t.replace(/([-_][a-z])/g, e => e.toUpperCase().replace(/-|_/, "")) : ""; }
+function pi(t) { return t ? t.replace(/[A-Z]/g, e => `_${e.toLowerCase()}`) : ""; }
+var Tr = t => { let e = r => { if (!r)
+    return r; if (Array.isArray(r))
+    return r.map(i => typeof i == "object" || Array.isArray(i) ? e(i) : i); let s = { ...r }, n = Object.keys(s); for (let i of n) {
+    let o = t(i.toString());
+    o !== i && (s[o] = s[i], delete s[i]), typeof s[o] == "object" && (s[o] = e(s[o]));
+} return s; }; return e; }, kl = Tr(pi), _l = Tr(fi);
+function ue(t) { if (typeof t == "boolean")
+    return t; if (t == null)
+    return !1; if (typeof t == "string") {
+    if (t.toLowerCase() === "true")
+        return !0;
+    if (t.toLowerCase() === "false")
+        return !1;
+} let e = parseInt(t, 10); return isNaN(e) ? !1 : e > 0; }
+var mi = [".vercel.app"], yi = "/__clerk";
+function gi(t) { return mi.some(e => t?.endsWith(e)) ?? !1; }
+function br() { return typeof process < "u" && process.env ? process.env : {}; }
+function ki(t = br()) { return ue(t.CLERK_DISABLE_AUTO_PROXY); }
+function _i(t) { if (t.startsWith("http://") || t.startsWith("https://"))
+    try {
+        return new URL(t).hostname;
+    }
+    catch {
+        return "";
+    } return t.split("/")[0] || ""; }
+function Er({ publishableKey: t, hasDomain: e = !1, hasProxyUrl: r = !1, environment: s = br() }) { if (r || e || !Xt(t) || ki(s) || s.VERCEL_TARGET_ENV !== "production")
+    return ""; let n = s.VERCEL_PROJECT_PRODUCTION_URL; return !n || !gi(_i(n)) ? "" : yi; }
+var vi = { strict_mfa: { afterMinutes: 10, level: "multi_factor" }, strict: { afterMinutes: 10, level: "second_factor" }, moderate: { afterMinutes: 60, level: "second_factor" }, lax: { afterMinutes: 1440, level: "second_factor" } }, Si = new Set(["first_factor", "second_factor", "multi_factor"]), Ti = new Set(["strict_mfa", "strict", "moderate", "lax"]), wr = new Set(["o", "org", "organization"]), Ar = new Set(["u", "user"]), bi = t => typeof t == "number" && t > 0, Ei = t => Si.has(t), wi = t => Ti.has(t), Pr = t => typeof t == "number" && Number.isFinite(t) && (t === -1 || t >= 0), ut = t => t.replace(/^(org:)*/, "org:"), Ai = (t, e) => { let { orgId: r, orgRole: s, orgPermissions: n } = e, i = t.role !== void 0, o = t.permission !== void 0; return !i && !o ? "skip" : i && typeof t.role != "string" || o && typeof t.permission != "string" || !r || i && (typeof s != "string" || !s || ut(s) !== ut(t.role)) || o && (!Array.isArray(n) || !n.includes(ut(t.permission))) ? "fail" : "pass"; }, Ir = (t, e) => { let { org: r, user: s } = lt(t), [n, i] = e.split(":"), o = i !== void 0, a = n, c = i || n; if (o && !wr.has(a) && !Ar.has(a))
+    throw new Error(`Invalid scope: ${a}`); if (o) {
+    if (wr.has(a))
+        return r.includes(c);
+    if (Ar.has(a))
+        return s.includes(c);
+} return [...r, ...s].includes(c); }, Pi = (t, e) => { let { features: r, plans: s } = e, n = t.feature !== void 0, i = t.plan !== void 0; if (!n && !i)
+    return "skip"; if (n && typeof t.feature != "string" || i && typeof t.plan != "string")
+    return "fail"; if (n) {
+    if (typeof r != "string" || !r)
+        return "fail";
+    try {
+        if (!Ir(r, t.feature))
+            return "fail";
+    }
+    catch {
+        return "fail";
+    }
+} if (i) {
+    if (typeof s != "string" || !s)
+        return "fail";
+    try {
+        if (!Ir(s, t.plan))
+            return "fail";
+    }
+    catch {
+        return "fail";
+    }
+} return "pass"; }, lt = t => { let e = [], r = []; if (!t)
+    return { org: e, user: r }; let s = t.split(","); for (let n = 0; n < s.length; n++) {
+    let i = s[n].trim(), o = i.indexOf(":");
+    if (o === -1)
+        throw new Error(`Invalid claim element (missing colon): ${i}`);
+    let a = i.slice(0, o), c = i.slice(o + 1);
+    a === "o" ? e.push(c) : a === "u" ? r.push(c) : (a === "ou" || a === "uo") && (e.push(c), r.push(c));
+} return { org: e, user: r }; }, Ii = t => { if (!t)
+    return !1; let e = n => typeof n == "string" ? vi[n] : n, r = typeof t == "string" && wi(t), s = typeof t == "object" && Ei(t.level) && bi(t.afterMinutes); return r || s ? e.bind(null, t) : !1; }, Oi = (t, { factorVerificationAge: e }) => { if (t.reverification === void 0)
+    return "skip"; if (!e || !Array.isArray(e) || e.length !== 2 || !Pr(e[0]) || !Pr(e[1]))
+    return "fail"; let r = Ii(t.reverification); if (!r)
+    return "fail"; let { level: s, afterMinutes: n } = r(), [i, o] = e; if (i === -1 && o === -1)
+    return "fail"; let a = i !== -1 && n > i, c = o !== -1 && n > o; switch (s) {
+    case "first_factor": return a ? "pass" : "fail";
+    case "second_factor": return o === -1 ? a ? "pass" : "fail" : c ? "pass" : "fail";
+    case "multi_factor": return o === -1 ? a ? "pass" : "fail" : i === -1 ? "fail" : a && c ? "pass" : "fail";
+} }, Ci = t => t.some(e => e === "pass") && t.every(e => e === "pass" || e === "skip"), Or = t => e => t.userId ? Ci([Ai(e, t), Pi(e, t), Oi(e, t)]) : !1;
+var xi = ({ per: t, fpm: e }) => { if (!t || !e)
+    return { permissions: [], featurePermissionMap: [] }; let r = t.split(",").map(s => s.trim()); return { permissions: r, featurePermissionMap: e.split(",").map(s => Number.parseInt(s.trim(), 10)).map(s => s.toString(2).padStart(r.length, "0").split("").map(n => Number.parseInt(n, 10)).reverse()).filter(Boolean) }; };
+function Ui({ features: t, permissions: e, featurePermissionMap: r }) { if (!t || !e || !r)
+    return []; let s = []; for (let n = 0; n < t.length; n++) {
+    let i = t[n];
+    if (n >= r.length)
+        continue;
+    let o = r[n];
+    if (o)
+        for (let a = 0; a < o.length; a++)
+            o[a] === 1 && s.push(`org:${i}:${e[a]}`);
+} return s; }
+var Cr = t => { let e, r, s, n, i = t.fva ?? null, o = t.sts ?? null; switch (t.v) {
+    case 2:
+        if (t.o) {
+            e = t.o?.id, s = t.o?.slg, t.o?.rol && (r = `org:${t.o?.rol}`);
+            let { org: a } = lt(t.fea), { permissions: c, featurePermissionMap: d } = xi({ per: t.o?.per, fpm: t.o?.fpm });
+            n = Ui({ features: a, featurePermissionMap: d, permissions: c });
+        }
+        break;
+    default:
+        e = t.org_id, r = t.org_role, s = t.org_slug, n = t.org_permissions;
+        break;
+} return { sessionClaims: t, sessionId: t.sid, sessionStatus: o, actor: t.act, userId: t.sub, orgId: e, orgRole: r, orgSlug: s, orgPermissions: n, factorVerificationAge: i }; };
+function Ri(t) { for (var e = [], r = 0; r < t.length;) {
+    var s = t[r];
+    if (s === "*" || s === "+" || s === "?") {
+        e.push({ type: "MODIFIER", index: r, value: t[r++] });
+        continue;
+    }
+    if (s === "\\") {
+        e.push({ type: "ESCAPED_CHAR", index: r++, value: t[r++] });
+        continue;
+    }
+    if (s === "{") {
+        e.push({ type: "OPEN", index: r, value: t[r++] });
+        continue;
+    }
+    if (s === "}") {
+        e.push({ type: "CLOSE", index: r, value: t[r++] });
+        continue;
+    }
+    if (s === ":") {
+        for (var n = "", i = r + 1; i < t.length;) {
+            var o = t.charCodeAt(i);
+            if (o >= 48 && o <= 57 || o >= 65 && o <= 90 || o >= 97 && o <= 122 || o === 95) {
+                n += t[i++];
+                continue;
+            }
+            break;
+        }
+        if (!n)
+            throw new TypeError("Missing parameter name at ".concat(r));
+        e.push({ type: "NAME", index: r, value: n }), r = i;
+        continue;
+    }
+    if (s === "(") {
+        var a = 1, c = "", i = r + 1;
+        if (t[i] === "?")
+            throw new TypeError('Pattern cannot start with "?" at '.concat(i));
+        for (; i < t.length;) {
+            if (t[i] === "\\") {
+                c += t[i++] + t[i++];
+                continue;
+            }
+            if (t[i] === ")") {
+                if (a--, a === 0) {
+                    i++;
+                    break;
+                }
+            }
+            else if (t[i] === "(" && (a++, t[i + 1] !== "?"))
+                throw new TypeError("Capturing groups are not allowed at ".concat(i));
+            c += t[i++];
+        }
+        if (a)
+            throw new TypeError("Unbalanced pattern at ".concat(r));
+        if (!c)
+            throw new TypeError("Missing pattern at ".concat(r));
+        e.push({ type: "PATTERN", index: r, value: c }), r = i;
+        continue;
+    }
+    e.push({ type: "CHAR", index: r, value: t[r++] });
+} return e.push({ type: "END", index: r, value: "" }), e; }
+function qi(t, e) { e === void 0 && (e = {}); for (var r = Ri(t), s = e.prefixes, n = s === void 0 ? "./" : s, i = e.delimiter, o = i === void 0 ? "/#?" : i, a = [], c = 0, d = 0, f = "", p = function (_) { if (d < r.length && r[d].type === _)
+    return r[d++].value; }, E = function (_) { var O = p(_); if (O !== void 0)
+    return O; var q = r[d], z = q.type, D = q.index; throw new TypeError("Unexpected ".concat(z, " at ").concat(D, ", expected ").concat(_)); }, S = function () { for (var _ = "", O; O = p("CHAR") || p("ESCAPED_CHAR");)
+    _ += O; return _; }, A = function (_) { for (var O = 0, q = o; O < q.length; O++) {
+    var z = q[O];
+    if (_.indexOf(z) > -1)
+        return !0;
+} return !1; }, P = function (_) { var O = a[a.length - 1], q = _ || (O && typeof O == "string" ? O : ""); if (O && !q)
+    throw new TypeError('Must have text between two parameters, missing text after "'.concat(O.name, '"')); return !q || A(q) ? "[^".concat(G(o), "]+?") : "(?:(?!".concat(G(q), ")[^").concat(G(o), "])+?"); }; d < r.length;) {
+    var x = p("CHAR"), l = p("NAME"), y = p("PATTERN");
+    if (l || y) {
+        var m = x || "";
+        n.indexOf(m) === -1 && (f += m, m = ""), f && (a.push(f), f = ""), a.push({ name: l || c++, prefix: m, suffix: "", pattern: y || P(m), modifier: p("MODIFIER") || "" });
+        continue;
+    }
+    var h = x || p("ESCAPED_CHAR");
+    if (h) {
+        f += h;
+        continue;
+    }
+    if (f && (a.push(f), f = ""), p("OPEN")) {
+        var m = S(), g = p("NAME") || "", k = p("PATTERN") || "", T = S();
+        E("CLOSE"), a.push({ name: g || (k ? c++ : ""), pattern: g && !k ? P(m) : k, prefix: m, suffix: T, modifier: p("MODIFIER") || "" });
+        continue;
+    }
+    E("END");
+} return a; }
+function Mi(t, e) { var r = []; return Ni(Ur(t, r, e), r, e); }
+function Ni(t, e, r) { r === void 0 && (r = {}); var s = r.decode, n = s === void 0 ? function (i) { return i; } : s; return function (i) { var o = t.exec(i); if (!o)
+    return !1; for (var a = o[0], c = o.index, d = Object.create(null), f = function (E) { if (o[E] === void 0)
+    return "continue"; var S = e[E - 1]; S.modifier === "*" || S.modifier === "+" ? d[S.name] = o[E].split(S.prefix + S.suffix).map(function (A) { return n(A, S); }) : d[S.name] = n(o[E], S); }, p = 1; p < o.length; p++)
+    f(p); return { path: a, index: c, params: d }; }; }
+function G(t) { return t.replace(/([.+*?=^!:${}()[\]|/\\])/g, "\\$1"); }
+function xr(t) { return t && t.sensitive ? "" : "i"; }
+function Ji(t, e) { if (!e)
+    return t; for (var r = /\((?:\?<(.*?)>)?(?!\?)/g, s = 0, n = r.exec(t.source); n;)
+    e.push({ name: n[1] || s++, prefix: "", suffix: "", modifier: "", pattern: "" }), n = r.exec(t.source); return t; }
+function Li(t, e, r) { var s = t.map(function (n) { return Ur(n, e, r).source; }); return new RegExp("(?:".concat(s.join("|"), ")"), xr(r)); }
+function Di(t, e, r) { return Fi(qi(t, r), e, r); }
+function Fi(t, e, r) { r === void 0 && (r = {}); for (var s = r.strict, n = s === void 0 ? !1 : s, i = r.start, o = i === void 0 ? !0 : i, a = r.end, c = a === void 0 ? !0 : a, d = r.encode, f = d === void 0 ? function (q) { return q; } : d, p = r.delimiter, E = p === void 0 ? "/#?" : p, S = r.endsWith, A = S === void 0 ? "" : S, P = "[".concat(G(A), "]|$"), x = "[".concat(G(E), "]"), l = o ? "^" : "", y = 0, m = t; y < m.length; y++) {
+    var h = m[y];
+    if (typeof h == "string")
+        l += G(f(h));
+    else {
+        var g = G(f(h.prefix)), k = G(f(h.suffix));
+        if (h.pattern)
+            if (e && e.push(h), g || k)
+                if (h.modifier === "+" || h.modifier === "*") {
+                    var T = h.modifier === "*" ? "?" : "";
+                    l += "(?:".concat(g, "((?:").concat(h.pattern, ")(?:").concat(k).concat(g, "(?:").concat(h.pattern, "))*)").concat(k, ")").concat(T);
+                }
+                else
+                    l += "(?:".concat(g, "(").concat(h.pattern, ")").concat(k, ")").concat(h.modifier);
+            else {
+                if (h.modifier === "+" || h.modifier === "*")
+                    throw new TypeError('Can not repeat "'.concat(h.name, '" without a prefix and suffix'));
+                l += "(".concat(h.pattern, ")").concat(h.modifier);
+            }
+        else
+            l += "(?:".concat(g).concat(k, ")").concat(h.modifier);
+    }
+} if (c)
+    n || (l += "".concat(x, "?")), l += r.endsWith ? "(?=".concat(P, ")") : "$";
+else {
+    var _ = t[t.length - 1], O = typeof _ == "string" ? x.indexOf(_[_.length - 1]) > -1 : _ === void 0;
+    n || (l += "(?:".concat(x, "(?=").concat(P, "))?")), O || (l += "(?=".concat(x, "|").concat(P, ")"));
+} return new RegExp(l, xr(r)); }
+function Ur(t, e, r) { return t instanceof RegExp ? Ji(t, e) : Array.isArray(t) ? Li(t, e, r) : Di(t, e, r); }
+function ht(t, e) {
+    try {
+        return Mi(t, e);
+    }
+    catch (r) {
+        throw new Error(`Invalid path and options: Consult the documentation of path-to-regexp here: https://github.com/pillarjs/path-to-regexp/tree/6.x
+${r.message}`);
+    }
+}
+var Ki = gr({ "../../node_modules/.pnpm/cookie@1.1.1/node_modules/cookie/dist/index.js"(t) {
+        "use strict";
+        Object.defineProperty(t, "__esModule", { value: !0 }), t.parseCookie = c, t.parse = c, t.stringifyCookie = d, t.stringifySetCookie = f, t.serialize = f, t.parseSetCookie = p, t.stringifySetCookie = f, t.serialize = f;
+        var e = /^[\u0021-\u003A\u003C\u003E-\u007E]+$/, r = /^[\u0021-\u003A\u003C-\u007E]*$/, s = /^([.]?[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?)([.][a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?)*$/i, n = /^[\u0020-\u003A\u003D-\u007E]*$/, i = /^-?\d+$/, o = Object.prototype.toString, a = (() => { let l = function () { }; return l.prototype = Object.create(null), l; })();
+        function c(l, y) { let m = new a, h = l.length; if (h < 2)
+            return m; let g = y?.decode || P, k = 0; do {
+            let T = S(l, k, h);
+            if (T === -1)
+                break;
+            let _ = E(l, k, h);
+            if (T > _) {
+                k = l.lastIndexOf(";", T - 1) + 1;
+                continue;
+            }
+            let O = A(l, k, T);
+            m[O] === void 0 && (m[O] = g(A(l, T + 1, _))), k = _ + 1;
+        } while (k < h); return m; }
+        function d(l, y) { let m = y?.encode || encodeURIComponent, h = []; for (let g of Object.keys(l)) {
+            let k = l[g];
+            if (k === void 0)
+                continue;
+            if (!e.test(g))
+                throw new TypeError(`cookie name is invalid: ${g}`);
+            let T = m(k);
+            if (!r.test(T))
+                throw new TypeError(`cookie val is invalid: ${k}`);
+            h.push(`${g}=${T}`);
+        } return h.join("; "); }
+        function f(l, y, m) { let h = typeof l == "object" ? l : { ...m, name: l, value: String(y) }, k = (typeof y == "object" ? y : m)?.encode || encodeURIComponent; if (!e.test(h.name))
+            throw new TypeError(`argument name is invalid: ${h.name}`); let T = h.value ? k(h.value) : ""; if (!r.test(T))
+            throw new TypeError(`argument val is invalid: ${h.value}`); let _ = h.name + "=" + T; if (h.maxAge !== void 0) {
+            if (!Number.isInteger(h.maxAge))
+                throw new TypeError(`option maxAge is invalid: ${h.maxAge}`);
+            _ += "; Max-Age=" + h.maxAge;
+        } if (h.domain) {
+            if (!s.test(h.domain))
+                throw new TypeError(`option domain is invalid: ${h.domain}`);
+            _ += "; Domain=" + h.domain;
+        } if (h.path) {
+            if (!n.test(h.path))
+                throw new TypeError(`option path is invalid: ${h.path}`);
+            _ += "; Path=" + h.path;
+        } if (h.expires) {
+            if (!x(h.expires) || !Number.isFinite(h.expires.valueOf()))
+                throw new TypeError(`option expires is invalid: ${h.expires}`);
+            _ += "; Expires=" + h.expires.toUTCString();
+        } if (h.httpOnly && (_ += "; HttpOnly"), h.secure && (_ += "; Secure"), h.partitioned && (_ += "; Partitioned"), h.priority)
+            switch (typeof h.priority == "string" ? h.priority.toLowerCase() : void 0) {
+                case "low":
+                    _ += "; Priority=Low";
+                    break;
+                case "medium":
+                    _ += "; Priority=Medium";
+                    break;
+                case "high":
+                    _ += "; Priority=High";
+                    break;
+                default: throw new TypeError(`option priority is invalid: ${h.priority}`);
+            } if (h.sameSite)
+            switch (typeof h.sameSite == "string" ? h.sameSite.toLowerCase() : h.sameSite) {
+                case !0:
+                case "strict":
+                    _ += "; SameSite=Strict";
+                    break;
+                case "lax":
+                    _ += "; SameSite=Lax";
+                    break;
+                case "none":
+                    _ += "; SameSite=None";
+                    break;
+                default: throw new TypeError(`option sameSite is invalid: ${h.sameSite}`);
+            } return _; }
+        function p(l, y) { let m = y?.decode || P, h = l.length, g = E(l, 0, h), k = S(l, 0, g), T = k === -1 ? { name: "", value: m(A(l, 0, g)) } : { name: A(l, 0, k), value: m(A(l, k + 1, g)) }, _ = g + 1; for (; _ < h;) {
+            let O = E(l, _, h), q = S(l, _, O), z = q === -1 ? A(l, _, O) : A(l, _, q), D = q === -1 ? void 0 : A(l, q + 1, O);
+            switch (z.toLowerCase()) {
+                case "httponly":
+                    T.httpOnly = !0;
+                    break;
+                case "secure":
+                    T.secure = !0;
+                    break;
+                case "partitioned":
+                    T.partitioned = !0;
+                    break;
+                case "domain":
+                    T.domain = D;
+                    break;
+                case "path":
+                    T.path = D;
+                    break;
+                case "max-age":
+                    D && i.test(D) && (T.maxAge = Number(D));
+                    break;
+                case "expires":
+                    if (!D)
+                        break;
+                    let J = new Date(D);
+                    Number.isFinite(J.valueOf()) && (T.expires = J);
+                    break;
+                case "priority":
+                    if (!D)
+                        break;
+                    let H = D.toLowerCase();
+                    (H === "low" || H === "medium" || H === "high") && (T.priority = H);
+                    break;
+                case "samesite":
+                    if (!D)
+                        break;
+                    let V = D.toLowerCase();
+                    (V === "lax" || V === "strict" || V === "none") && (T.sameSite = V);
+                    break;
+            }
+            _ = O + 1;
+        } return T; }
+        function E(l, y, m) { let h = l.indexOf(";", y); return h === -1 ? m : h; }
+        function S(l, y, m) { let h = l.indexOf("=", y); return h < m ? h : -1; }
+        function A(l, y, m) { let h = y, g = m; do {
+            let k = l.charCodeAt(h);
+            if (k !== 32 && k !== 9)
+                break;
+        } while (++h < g); for (; g > h;) {
+            let k = l.charCodeAt(g - 1);
+            if (k !== 32 && k !== 9)
+                break;
+            g--;
+        } return l.slice(h, g); }
+        function P(l) { if (l.indexOf("%") === -1)
+            return l; try {
+            return decodeURIComponent(l);
+        }
+        catch {
+            return l;
+        } }
+        function x(l) { return o.call(l) === "[object Date]"; }
+    } }), ts = "https://api.clerk.com", rs = "v1", ss = "@clerk/backend@3.12.0", Hi = 300, Pt = "2026-05-12", zi = { AuthToken: "__clerkAuthToken", AuthSignature: "__clerkAuthSignature", AuthStatus: "__clerkAuthStatus", AuthReason: "__clerkAuthReason", AuthMessage: "__clerkAuthMessage", ClerkUrl: "__clerkUrl" }, Je = { Session: "__session", Refresh: "__refresh", ClientUat: "__client_uat", Handshake: "__clerk_handshake", DevBrowser: "__clerk_db_jwt", RedirectCount: "__clerk_redirect_count", HandshakeNonce: "__clerk_handshake_nonce" }, Wi = { ClerkSynced: "__clerk_synced", SuffixedCookies: "suffixed_cookies", ClerkRedirectUrl: "__clerk_redirect_url", DevBrowser: Je.DevBrowser, Handshake: Je.Handshake, HandshakeHelp: "__clerk_help", LegacyDevBrowser: "__dev_session", HandshakeReason: "__clerk_hs_reason", HandshakeNonce: Je.HandshakeNonce, HandshakeFormat: "format", Session: "__session" }, Bi = { Accept: "accept", AuthMessage: "x-clerk-auth-message", Authorization: "authorization", AuthReason: "x-clerk-auth-reason", AuthSignature: "x-clerk-auth-signature", AuthStatus: "x-clerk-auth-status", AuthToken: "x-clerk-auth-token", CacheControl: "cache-control", ClerkRedirectTo: "x-clerk-redirect-to", ClerkRequestData: "x-clerk-request-data", ClerkUrl: "x-clerk-clerk-url", CloudFrontForwardedProto: "cloudfront-forwarded-proto", ContentType: "content-type", ContentSecurityPolicy: "content-security-policy", ContentSecurityPolicyReportOnly: "content-security-policy-report-only", EnableDebug: "x-clerk-debug", ForwardedHost: "x-forwarded-host", ForwardedPort: "x-forwarded-port", ForwardedProto: "x-forwarded-proto", Host: "host", Location: "location", Nonce: "x-nonce", Origin: "origin", Referrer: "referer", SecFetchDest: "sec-fetch-dest", SecFetchSite: "sec-fetch-site", UserAgent: "user-agent", ReportingEndpoints: "reporting-endpoints" }, ji = { Json: "application/json" }, Vi = { NeedsSync: "false", Completed: "true" }, v = { Attributes: zi, Cookies: Je, Headers: Bi, ContentTypes: ji, QueryParameters: Wi, ClerkSyncStatus: Vi };
+function Rr(t, e) { return Object.keys(t).reduce((r, s) => ({ ...r, [s]: e[s] || r[s] }), { ...t }); }
+function ns(t) { if (!t || typeof t != "string")
+    throw Error("Missing Clerk Secret Key. Go to https://dashboard.clerk.com and get your key for your instance."); }
+function $i(t) { ee(t, { fatal: !0 }); }
+var b = { SessionToken: "session_token", ApiKey: "api_key", M2MToken: "m2m_token", OAuthToken: "oauth_token" }, Gi = class {
+    constructor(t, e, r) { this.cookieSuffix = t, this.clerkRequest = e, this.originalFrontendApi = ""; let s = Er({ publishableKey: r.publishableKey ?? "", hasProxyUrl: !!r.proxyUrl, hasDomain: !!r.domain }); s && (r = { ...r, proxyUrl: `${e.clerkUrl.origin}${s}` }), r.acceptsToken === b.M2MToken || r.acceptsToken === b.ApiKey ? this.initHeaderValues() : (this.initPublishableKeyValues(r), this.initHeaderValues(), this.initCookieValues(), this.initHandshakeValues()), Object.assign(this, r), this.clerkUrl = this.clerkRequest.clerkUrl, this.proxyUrl?.startsWith("/") && (this.proxyUrl = `${this.clerkUrl.origin}${this.proxyUrl}`); }
+    get sessionToken() { return this.sessionTokenInCookie || this.tokenInHeader; }
+    usesSuffixedCookies() { let t = this.getSuffixedCookie(v.Cookies.ClientUat), e = this.getCookie(v.Cookies.ClientUat), r = this.getSuffixedCookie(v.Cookies.Session) || "", s = this.getCookie(v.Cookies.Session) || ""; if (s && !this.tokenHasIssuer(s))
+        return !1; if (s && !this.tokenBelongsToInstance(s))
+        return !0; if (!t && !r)
+        return !1; let { data: n } = K(s), i = n?.payload.iat || 0, { data: o } = K(r), a = o?.payload.iat || 0; if (t !== "0" && e !== "0" && i > a || t === "0" && e !== "0")
+        return !1; if (this.instanceType !== "production") {
+        let c = this.sessionExpired(o);
+        if (t !== "0" && e === "0" && c)
+            return !1;
+    } return !(!t && r); }
+    isCrossOriginReferrer() { if (!this.referrer || !this.clerkUrl.origin)
+        return !1; try {
+        return new URL(this.referrer).origin !== this.clerkUrl.origin;
+    }
+    catch {
+        return !1;
+    } }
+    isKnownClerkReferrer() { if (!this.referrer)
+        return !1; try {
+        let t = new URL(this.referrer), e = t.hostname;
+        if (this.frontendApi) {
+            let s = this.frontendApi.startsWith("http") ? new URL(this.frontendApi).hostname : this.frontendApi;
+            if (e === s)
+                return !0;
+        }
+        if (this.instanceType !== "production" && (tr(e) || rr(e)))
+            return !0;
+        let r = ct(this.frontendApi);
+        if (r) {
+            let s = new URL(r).origin;
+            if (t.origin === s)
+                return !0;
+        }
+        return !1;
+    }
+    catch {
+        return !1;
+    } }
+    initPublishableKeyValues(t) { $i(t.publishableKey), this.publishableKey = t.publishableKey; let e = t.proxyUrl; e?.startsWith("/") && (e = `${this.clerkRequest.clerkUrl.origin}${e}`); let r = ee(this.publishableKey, { fatal: !0, domain: t.domain, isSatellite: t.isSatellite }); this.originalFrontendApi = r.frontendApi; let s = ee(this.publishableKey, { fatal: !0, proxyUrl: e, domain: t.domain, isSatellite: t.isSatellite }); this.instanceType = s.instanceType, this.frontendApi = s.frontendApi; }
+    initHeaderValues() { this.method = this.clerkRequest.method, this.tokenInHeader = this.parseAuthorizationHeader(this.getHeader(v.Headers.Authorization)), this.origin = this.getHeader(v.Headers.Origin), this.host = this.getHeader(v.Headers.Host), this.forwardedHost = this.getHeader(v.Headers.ForwardedHost), this.forwardedProto = this.getHeader(v.Headers.CloudFrontForwardedProto) || this.getHeader(v.Headers.ForwardedProto), this.referrer = this.getHeader(v.Headers.Referrer), this.userAgent = this.getHeader(v.Headers.UserAgent), this.secFetchDest = this.getHeader(v.Headers.SecFetchDest), this.accept = this.getHeader(v.Headers.Accept); }
+    initCookieValues() { this.sessionTokenInCookie = this.getSuffixedOrUnSuffixedCookie(v.Cookies.Session), this.refreshTokenInCookie = this.getSuffixedCookie(v.Cookies.Refresh), this.clientUat = Number.parseInt(this.getSuffixedOrUnSuffixedCookie(v.Cookies.ClientUat) || "") || 0; }
+    initHandshakeValues() { this.devBrowserToken = this.getQueryParam(v.QueryParameters.DevBrowser) || this.getSuffixedOrUnSuffixedCookie(v.Cookies.DevBrowser), this.handshakeToken = this.getQueryParam(v.QueryParameters.Handshake) || this.getCookie(v.Cookies.Handshake), this.handshakeRedirectLoopCounter = Number(this.getCookie(v.Cookies.RedirectCount)) || 0, this.handshakeNonce = this.getQueryParam(v.QueryParameters.HandshakeNonce) || this.getCookie(v.Cookies.HandshakeNonce); }
+    getQueryParam(t) { return this.clerkRequest.clerkUrl.searchParams.get(t); }
+    getHeader(t) { return this.clerkRequest.headers.get(t) || void 0; }
+    getCookie(t) { return this.clerkRequest.cookies.get(t) || void 0; }
+    getSuffixedCookie(t) { return this.getCookie(Ve(t, this.cookieSuffix)) || void 0; }
+    getSuffixedOrUnSuffixedCookie(t) { return this.usesSuffixedCookies() ? this.getSuffixedCookie(t) : this.getCookie(t); }
+    parseAuthorizationHeader(t) { if (!t)
+        return; let [e, r] = t.split(" ", 2); if (!r)
+        return e; if (e === "Bearer")
+        return r; }
+    tokenHasIssuer(t) { let { data: e, errors: r } = K(t); return r ? !1 : !!e.payload.iss; }
+    tokenBelongsToInstance(t) { if (!t)
+        return !1; let { data: e, errors: r } = K(t); if (r)
+        return !1; let s = e.payload.iss.replace(/https?:\/\//gi, ""); return this.originalFrontendApi === s; }
+    sessionExpired(t) { return !!t && t?.payload.exp <= Date.now() / 1e3 >> 0; }
+}, Qi = async (t, e) => { let r = e.publishableKey ? await je(e.publishableKey, te.crypto.subtle) : ""; return new Gi(r, t, e); }, Le = "/", Yi = new RegExp("(?<!:)" + Le + "{1,}", "g"), qr = 10;
+function Xi(t) { let e = t; for (let r = 0; r <= qr; r++) {
+    if (e.split(/[/\\]/).some(s => s === "." || s === ".."))
+        return !0;
+    if (r === qr)
+        throw new Error(`joinPaths: too many layers of encoding in ${t}`);
+    try {
+        let s = decodeURIComponent(e);
+        if (s === e)
+            break;
+        e = s;
+    }
+    catch {
+        break;
+    }
+} return !1; }
+function u(...t) { let e = t.filter(r => r).join(Le).replace(Yi, Le); for (let r of e.split(Le))
+    if (Xi(r))
+        throw new Error(`joinPaths: "." and ".." path segments are not allowed (received "${e}")`); return e; }
+var C = class {
+    constructor(t) { this.request = t; }
+    requireId(t) { if (!t)
+        throw new Error("A valid resource ID is required."); }
+}, Mr = "/actor_tokens", Zi = class extends C {
+    async create(t) { return this.request({ method: "POST", path: Mr, bodyParams: t }); }
+    async revoke(t) { return this.requireId(t), this.request({ method: "POST", path: u(Mr, t, "revoke") }); }
+}, Nr = "/agents/tasks", eo = class extends C {
+    async create(t) { return this.request({ method: "POST", path: Nr, bodyParams: t, options: { deepSnakecaseBodyParamKeys: !0 } }); }
+    async revoke(t) { return this.requireId(t), this.request({ method: "POST", path: u(Nr, t, "revoke") }); }
+}, Jr = "/accountless_applications", to = class extends C {
+    async createAccountlessApplication(t) { let e = t?.requestHeaders ? Object.fromEntries(t.requestHeaders.entries()) : void 0; return this.request({ method: "POST", path: Jr, headerParams: e, queryParams: { source: t?.source } }); }
+    async completeAccountlessApplicationOnboarding(t) { let e = t?.requestHeaders ? Object.fromEntries(t.requestHeaders.entries()) : void 0; return this.request({ method: "POST", path: u(Jr, "complete"), headerParams: e, queryParams: { source: t?.source } }); }
+}, dt = "/allowlist_identifiers", ro = class extends C {
+    async getAllowlistIdentifierList(t = {}) { return this.request({ method: "GET", path: dt, queryParams: { ...t, paginated: !0 } }); }
+    async createAllowlistIdentifier(t) { return this.request({ method: "POST", path: dt, bodyParams: t }); }
+    async deleteAllowlistIdentifier(t) { return this.requireId(t), this.request({ method: "DELETE", path: u(dt, t) }); }
+}, Q = "/api_keys", so = class extends C {
+    async list(t) { return this.request({ method: "GET", path: Q, queryParams: t }); }
+    async create(t) { return this.request({ method: "POST", path: Q, bodyParams: t }); }
+    async get(t) { return this.requireId(t), this.request({ method: "GET", path: u(Q, t) }); }
+    async update(t) { let { apiKeyId: e, ...r } = t; return this.requireId(e), this.request({ method: "PATCH", path: u(Q, e), bodyParams: r }); }
+    async delete(t) { return this.requireId(t), this.request({ method: "DELETE", path: u(Q, t) }); }
+    async revoke(t) { let { apiKeyId: e, revocationReason: r = null } = t; return this.requireId(e), this.request({ method: "POST", path: u(Q, e, "revoke"), bodyParams: { revocationReason: r } }); }
+    async getSecret(t) { return this.requireId(t), this.request({ method: "GET", path: u(Q, t, "secret") }); }
+    async verify(t) { return this.request({ method: "POST", path: u(Q, "verify"), bodyParams: { secret: t } }); }
+}, no = "/beta_features", io = class extends C {
+    async changeDomain(t) { return this.request({ method: "POST", path: u(no, "change_domain"), bodyParams: t }); }
+}, ft = "/blocklist_identifiers", oo = class extends C {
+    async getBlocklistIdentifierList(t = {}) { return this.request({ method: "GET", path: ft, queryParams: t }); }
+    async createBlocklistIdentifier(t) { return this.request({ method: "POST", path: ft, bodyParams: t }); }
+    async deleteBlocklistIdentifier(t) { return this.requireId(t), this.request({ method: "DELETE", path: u(ft, t) }); }
+}, Oe = "/clients", ao = class extends C {
+    async getClientList(t = {}) { return this.request({ method: "GET", path: Oe, queryParams: { ...t, paginated: !0 } }); }
+    async getClient(t) { return this.requireId(t), this.request({ method: "GET", path: u(Oe, t) }); }
+    verifyClient(t) { return this.request({ method: "POST", path: u(Oe, "verify"), bodyParams: { token: t } }); }
+    async getHandshakePayload(t) { return this.request({ method: "GET", path: u(Oe, "handshake_payload"), queryParams: t }); }
+}, Ce = "/domains", co = class extends C {
+    async list() { return this.request({ method: "GET", path: Ce }); }
+    async add(t) { return this.request({ method: "POST", path: Ce, bodyParams: t }); }
+    async update(t) { let { domainId: e, ...r } = t; return this.requireId(e), this.request({ method: "PATCH", path: u(Ce, e), bodyParams: r }); }
+    async delete(t) { return this.deleteDomain(t); }
+    async deleteDomain(t) { return this.requireId(t), this.request({ method: "DELETE", path: u(Ce, t) }); }
+}, xe = "/email_addresses", uo = class extends C {
+    async getEmailAddress(t) { return this.requireId(t), this.request({ method: "GET", path: u(xe, t) }); }
+    async createEmailAddress(t) { return this.request({ method: "POST", path: xe, bodyParams: t }); }
+    async updateEmailAddress(t, e = {}) { return this.requireId(t), this.request({ method: "PATCH", path: u(xe, t), bodyParams: e }); }
+    async deleteEmailAddress(t) { return this.requireId(t), this.request({ method: "DELETE", path: u(xe, t) }); }
+}, lo = "/email", ho = class extends C {
+    async create(t) { return this.request({ method: "POST", path: lo, bodyParams: t, options: { deepSnakecaseBodyParamKeys: !0 } }); }
+}, me = "/enterprise_connections", fo = class extends C {
+    async createEnterpriseConnection(t) { return this.request({ method: "POST", path: me, bodyParams: t, options: { deepSnakecaseBodyParamKeys: !0 } }); }
+    async updateEnterpriseConnection(t, e) { return this.requireId(t), this.request({ method: "PATCH", path: u(me, t), bodyParams: e, options: { deepSnakecaseBodyParamKeys: !0 } }); }
+    async getEnterpriseConnectionList(t = {}) { return this.request({ method: "GET", path: me, queryParams: t }); }
+    async getEnterpriseConnection(t) { return this.requireId(t), this.request({ method: "GET", path: u(me, t) }); }
+    async deleteEnterpriseConnection(t) { return this.requireId(t), this.request({ method: "DELETE", path: u(me, t) }); }
+}, po = "/oauth_applications/access_tokens", mo = class extends C {
+    async verify(t) { return this.request({ method: "POST", path: u(po, "verify"), bodyParams: { access_token: t } }); }
+}, ye = "/instance", yo = class extends C {
+    async get() { return this.request({ method: "GET", path: ye }); }
+    async update(t) { return this.request({ method: "PATCH", path: ye, bodyParams: t }); }
+    async updateRestrictions(t) { return this.request({ method: "PATCH", path: u(ye, "restrictions"), bodyParams: t }); }
+    async getOrganizationSettings() { return this.request({ method: "GET", path: u(ye, "organization_settings") }); }
+    async updateOrganizationSettings(t) { return this.request({ method: "PATCH", path: u(ye, "organization_settings"), bodyParams: t }); }
+}, Ue = "/invitations", go = class extends C {
+    async getInvitationList(t = {}) { return this.request({ method: "GET", path: Ue, queryParams: { ...t, paginated: !0 } }); }
+    async createInvitation(t) { return this.request({ method: "POST", path: Ue, bodyParams: t }); }
+    async createInvitationBulk(t) { return this.request({ method: "POST", path: u(Ue, "bulk"), bodyParams: t }); }
+    async revokeInvitation(t) { return this.requireId(t), this.request({ method: "POST", path: u(Ue, t, "revoke") }); }
+}, $ = "/machines", ko = class extends C {
+    async get(t) { return this.requireId(t), this.request({ method: "GET", path: u($, t) }); }
+    async list(t = {}) { return this.request({ method: "GET", path: $, queryParams: t }); }
+    async create(t) { return this.request({ method: "POST", path: $, bodyParams: t }); }
+    async update(t) { let { machineId: e, ...r } = t; return this.requireId(e), this.request({ method: "PATCH", path: u($, e), bodyParams: r }); }
+    async delete(t) { return this.requireId(t), this.request({ method: "DELETE", path: u($, t) }); }
+    async getSecretKey(t) { return this.requireId(t), this.request({ method: "GET", path: u($, t, "secret_key") }); }
+    async rotateSecretKey(t) { let { machineId: e, previousTokenTtl: r } = t; return this.requireId(e), this.request({ method: "POST", path: u($, e, "secret_key", "rotate"), bodyParams: { previousTokenTtl: r } }); }
+    async createScope(t, e) { return this.requireId(t), this.request({ method: "POST", path: u($, t, "scopes"), bodyParams: { toMachineId: e } }); }
+    async deleteScope(t, e) { return this.requireId(t), this.request({ method: "DELETE", path: u($, t, "scopes", e) }); }
+}, is = class _t {
+    constructor(e, r, s, n, i, o, a, c, d, f, p) { this.id = e, this.clientId = r, this.type = s, this.subject = n, this.scopes = i, this.revoked = o, this.revocationReason = a, this.expired = c, this.expiration = d, this.createdAt = f, this.updatedAt = p; }
+    static fromJSON(e) { return new _t(e.id, e.client_id, e.type, e.subject, e.scopes, e.revoked, e.revocation_reason, e.expired, e.expiration, e.created_at, e.updated_at); }
+    static fromJwtPayload(e, r = 5e3) { let s = e; return new _t(s.jti ?? "", s.client_id ?? "", "oauth_token", e.sub, s.scp ?? s.scope?.split(" ") ?? [], !1, null, e.exp * 1e3 <= Date.now() - r, e.exp * 1e3, e.iat * 1e3, e.iat * 1e3); }
+}, _o = new Set(["iss", "sub", "exp", "nbf", "iat", "jti"]);
+function vo(t) { let e = {}; for (let r of Object.keys(t))
+    _o.has(r) || (e[r] = t[r]); return Object.keys(e).length > 0 ? e : null; }
+var os = class vt {
+    constructor(e, r, s, n, i, o, a, c, d, f, p) { this.id = e, this.subject = r, this.scopes = s, this.claims = n, this.revoked = i, this.revocationReason = o, this.expired = a, this.expiration = c, this.createdAt = d, this.updatedAt = f, this.token = p; }
+    static fromJSON(e) { return new vt(e.id, e.subject, e.scopes, e.claims, e.revoked, e.revocation_reason, e.expired, e.expiration, e.created_at, e.updated_at, e.token); }
+    static fromJwtPayload(e, r = 5e3) { return new vt(e.jti ?? "", e.sub, e.scopes?.split(" ") ?? e.aud ?? [], vo(e), !1, null, e.exp * 1e3 <= Date.now() - r, e.exp * 1e3, e.iat * 1e3, e.iat * 1e3); }
+}, Ke = {}, St = 0;
+function Tt(t) { return Ke[t]; }
+function So() { return Object.values(Ke); }
+function as(t, e, r = !0) { Ke[t] = e, St = r ? Date.now() : -1; }
+var To = "-----BEGIN PUBLIC KEY-----", bo = "-----END PUBLIC KEY-----", Eo = "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA", wo = "IDAQAB";
+function It(t) { let { kid: e, pem: r } = t, s = `local-${e}`, n = Tt(s); if (n)
+    return n; if (!r)
+    throw new U({ action: L.SetClerkJWTKey, message: "Missing local JWK.", reason: I.LocalJWKMissing }); let i = r.replace(/\r\n|\n|\r/g, "").replace(To, "").replace(bo, "").replace(Eo, "").replace(wo, "").replace(/\+/g, "-").replace(/\//g, "_"), o = { kid: s, kty: "RSA", alg: "RS256", n: i, e: "AQAB" }; return as(s, o, !1), o; }
+async function Ot(t) { let { secretKey: e, apiUrl: r = ts, apiVersion: s = rs, kid: n, skipJwksCache: i } = t; if (i || Po() || !Tt(n)) {
+    if (!e)
+        throw new U({ action: L.ContactSupport, message: "Failed to load JWKS from Clerk Backend or Frontend API.", reason: I.RemoteJWKFailedToLoad });
+    let a = () => Ao(r, e, s, t.fetch), { keys: c } = await $e(a);
+    if (!c || !c.length)
+        throw new U({ action: L.ContactSupport, message: "The JWKS endpoint did not contain any signing keys. Contact support@clerk.com.", reason: I.RemoteJWKFailedToLoad });
+    c.forEach(d => as(d.kid, d));
+} let o = Tt(n); if (!o) {
+    let c = So().map(d => d.kid).sort().join(", ");
+    throw new U({ action: `Go to your Dashboard and validate your secret and public keys are correct. ${L.ContactSupport} if the issue persists.`, message: `Unable to find a signing key in JWKS that matches the kid='${n}' of the provided session token. Please make sure that the __session cookie or the HTTP authorization header contain a Clerk-generated session JWT. The following kid is available: ${c}`, reason: I.JWKKidMismatch });
+} return o; }
+async function Ao(t, e, r, s) { if (!e)
+    throw new U({ action: L.SetClerkSecretKey, message: "Missing Clerk Secret Key or API Key. Go to https://dashboard.clerk.com and get your key for your instance.", reason: I.RemoteJWKFailedToLoad }); let n = new URL(t); n.pathname = u(n.pathname, r, "/jwks"); let i = await s(n.href, { headers: { Authorization: `Bearer ${e}`, "Clerk-API-Version": Pt, "Content-Type": "application/json", "User-Agent": ss } }); if (!i.ok) {
+    let o = await i.json(), a = Io(o?.errors, ar.InvalidSecretKey);
+    if (a) {
+        let c = I.InvalidSecretKey;
+        throw new U({ action: L.ContactSupport, message: a.message, reason: c });
+    }
+    throw new U({ action: L.ContactSupport, message: `Error loading Clerk JWKS from ${n.href} with code=${i.status}`, reason: I.RemoteJWKFailedToLoad });
+} return i.json(); }
+function Po() { if (St === -1)
+    return !1; let t = Date.now() - St >= Hi * 1e3; return t && (Ke = {}), t; }
+var Io = (t, e) => t ? t.find(r => r.code === e) : null, Ct = "mt_", cs = "mch_", xt = "oat_", Ut = "ak_", us = "cl_B7d4PD333AAA", Oo = [Ct, xt, Ut], Co = /^[a-zA-Z0-9\-_]+\.[a-zA-Z0-9\-_]+\.[a-zA-Z0-9\-_]+$/;
+function Rt(t) { return Co.test(t); }
+var De = ["at+jwt", "application/at+jwt"];
+function qt(t) { if (!Rt(t))
+    return !1; try {
+    let { data: e, errors: r } = K(t);
+    return !r && !!e && De.includes(e.header.typ);
+}
+catch {
+    return !1;
+} }
+function He(t) { if (!Rt(t))
+    return !1; try {
+    let { data: e, errors: r } = K(t);
+    return !r && !!e && typeof e.payload.sub == "string" && e.payload.sub.startsWith(cs);
+}
+catch {
+    return !1;
+} }
+function Lr(t) { return qt(t) || He(t); }
+function xo(t) { return Oo.some(e => t.startsWith(e)); }
+function bt(t) { return xo(t) || qt(t) || He(t); }
+function Et(t) { if (t.startsWith(Ct) || He(t))
+    return b.M2MToken; if (t.startsWith(xt) || qt(t))
+    return b.OAuthToken; if (t.startsWith(Ut))
+    return b.ApiKey; throw new Error("Unknown machine token type"); }
+var ls = (t, e) => t ? e === "any" ? !0 : (Array.isArray(e) ? e : [e]).includes(t) : !1, jl = new Set([b.ApiKey, b.M2MToken, b.OAuthToken]);
+async function hs(t, e, r, s) { try {
+    let n;
+    if (r.jwtKey)
+        n = It({ kid: e, pem: r.jwtKey });
+    else if (r.secretKey)
+        n = await Ot({ ...r, kid: e });
+    else
+        return { error: new B({ action: L.SetClerkJWTKey, message: "Failed to resolve JWK during verification.", code: W.TokenVerificationFailed }) };
+    let { data: i, errors: o } = await it(t, { ...r, key: n, ...s ? { headerType: s } : {} });
+    return o ? { error: new B({ code: W.TokenVerificationFailed, message: o[0].message }) } : { payload: i };
+}
+catch (n) {
+    return { error: new B({ code: W.TokenVerificationFailed, message: n.message }) };
+} }
+async function ds(t, e, r) { let s = e.header.cat; if (s !== void 0 && s !== us)
+    return { data: void 0, tokenType: b.M2MToken, errors: [new B({ code: W.TokenInvalid, message: "Invalid M2M JWT category." })] }; let n = await hs(t, e.header.kid, r); return "error" in n ? { data: void 0, tokenType: b.M2MToken, errors: [n.error] } : { data: os.fromJwtPayload(n.payload, r.clockSkewInMs), tokenType: b.M2MToken, errors: void 0 }; }
+async function Uo(t, e, r) { let s = await hs(t, e.header.kid, r, De); return "error" in s ? { data: void 0, tokenType: b.OAuthToken, errors: [s.error] } : { data: is.fromJwtPayload(s.payload, r.clockSkewInMs), tokenType: b.OAuthToken, errors: void 0 }; }
+var Re = "/m2m_tokens", Fe, ie, Se, fs, Ro = class extends C {
+    constructor(t, e = {}) { super(t), at(this, ie), at(this, Fe), vr(this, Fe, e); }
+    async list(t) { let { machineSecretKey: e, ...r } = t, s = ce(this, ie, Se).call(this, { method: "GET", path: Re, queryParams: r }, e); return this.request(s); }
+    async createToken(t) { let { claims: e = null, machineSecretKey: r, minRemainingTtlSeconds: s, secondsUntilExpiration: n = null, tokenFormat: i = "opaque" } = t || {}, o = ce(this, ie, Se).call(this, { method: "POST", path: Re, bodyParams: { secondsUntilExpiration: n, claims: e, minRemainingTtlSeconds: s, tokenFormat: i } }, r); return this.request(o); }
+    async revokeToken(t) { let { m2mTokenId: e, revocationReason: r = null, machineSecretKey: s } = t; this.requireId(e); let n = ce(this, ie, Se).call(this, { method: "POST", path: u(Re, e, "revoke"), bodyParams: { revocationReason: r } }, s); return this.request(n); }
+    async verify(t) { let { token: e, machineSecretKey: r } = t; if (He(e))
+        return ce(this, ie, fs).call(this, e); let s = ce(this, ie, Se).call(this, { method: "POST", path: u(Re, "verify"), bodyParams: { token: e } }, r); return this.request(s); }
+};
+Fe = new WeakMap;
+ie = new WeakSet;
+Se = function (t, e) { return e ? { ...t, headerParams: { ...t.headerParams, Authorization: `Bearer ${e}` } } : t; };
+fs = async function (t) { let e; try {
+    let { data: s, errors: n } = K(t);
+    if (n)
+        throw n[0];
+    e = s;
+}
+catch (s) {
+    throw new B({ code: W.TokenInvalid, message: s.message });
+} let r = await ds(t, e, _r(this, Fe)); if (r.errors)
+    throw r.errors[0]; return r.data; };
+var qo = "/jwks", Mo = class extends C {
+    async getJwks() { return this.request({ method: "GET", path: qo }); }
+}, ge = "/jwt_templates", No = class extends C {
+    async list(t = {}) { return this.request({ method: "GET", path: ge, queryParams: { ...t, paginated: !0 } }); }
+    async get(t) { return this.requireId(t), this.request({ method: "GET", path: u(ge, t) }); }
+    async create(t) { return this.request({ method: "POST", path: ge, bodyParams: t }); }
+    async update(t) { let { templateId: e, ...r } = t; return this.requireId(e), this.request({ method: "PATCH", path: u(ge, e), bodyParams: r }); }
+    async delete(t) { return this.requireId(t), this.request({ method: "DELETE", path: u(ge, t) }); }
+}, N = "/organizations", Jo = class extends C {
+    async getOrganizationList(t) { return this.request({ method: "GET", path: N, queryParams: t }); }
+    async createOrganization(t) { return this.request({ method: "POST", path: N, bodyParams: t }); }
+    async getOrganization(t) { let { includeMembersCount: e } = t, r = "organizationId" in t ? t.organizationId : t.slug; return this.requireId(r), this.request({ method: "GET", path: u(N, r), queryParams: { includeMembersCount: e } }); }
+    async updateOrganization(t, e) { this.requireId(t); let { publicMetadata: r, privateMetadata: s, ...n } = e, i = r !== void 0 || s !== void 0, o = Object.keys(n).length > 0; return i && de("updateOrganization(organizationId, { publicMetadata | privateMetadata })", "Use updateOrganizationMetadata for partial updates (merge) or replaceOrganizationMetadata for full replacement."), i ? (o && await this.request({ method: "PATCH", path: u(N, t), bodyParams: n }), this.request({ method: "PUT", path: u(N, t, "metadata"), bodyParams: { publicMetadata: r, privateMetadata: s } })) : this.request({ method: "PATCH", path: u(N, t), bodyParams: n }); }
+    async updateOrganizationLogo(t, e) { this.requireId(t); let r = new te.FormData; return r.append("file", e?.file), e?.uploaderUserId && r.append("uploader_user_id", e?.uploaderUserId), this.request({ method: "PUT", path: u(N, t, "logo"), formData: r }); }
+    async deleteOrganizationLogo(t) { return this.requireId(t), this.request({ method: "DELETE", path: u(N, t, "logo") }); }
+    async updateOrganizationMetadata(t, e) { return this.requireId(t), this.request({ method: "PATCH", path: u(N, t, "metadata"), bodyParams: e }); }
+    async replaceOrganizationMetadata(t, e) { return this.requireId(t), this.request({ method: "PUT", path: u(N, t, "metadata"), bodyParams: e }); }
+    async deleteOrganization(t) { return this.requireId(t), this.request({ method: "DELETE", path: u(N, t) }); }
+    async getOrganizationMembershipList(t) { let { organizationId: e, ...r } = t; return this.requireId(e), this.request({ method: "GET", path: u(N, e, "memberships"), queryParams: r }); }
+    async getInstanceOrganizationMembershipList(t) { return this.request({ method: "GET", path: "/organization_memberships", queryParams: t }); }
+    async createOrganizationMembership(t) { let { organizationId: e, ...r } = t; return this.requireId(e), this.request({ method: "POST", path: u(N, e, "memberships"), bodyParams: r }); }
+    async updateOrganizationMembership(t) { let { organizationId: e, userId: r, ...s } = t; return this.requireId(e), this.request({ method: "PATCH", path: u(N, e, "memberships", r), bodyParams: s }); }
+    async updateOrganizationMembershipMetadata(t) { let { organizationId: e, userId: r, ...s } = t; return this.request({ method: "PATCH", path: u(N, e, "memberships", r, "metadata"), bodyParams: s }); }
+    async deleteOrganizationMembership(t) { let { organizationId: e, userId: r } = t; return this.requireId(e), this.request({ method: "DELETE", path: u(N, e, "memberships", r) }); }
+    async getOrganizationInvitationList(t) { let { organizationId: e, ...r } = t; return this.requireId(e), this.request({ method: "GET", path: u(N, e, "invitations"), queryParams: r }); }
+    async createOrganizationInvitation(t) { let { organizationId: e, ...r } = t; return this.requireId(e), this.request({ method: "POST", path: u(N, e, "invitations"), bodyParams: r }); }
+    async createOrganizationInvitationBulk(t, e) { return this.requireId(t), this.request({ method: "POST", path: u(N, t, "invitations", "bulk"), bodyParams: e }); }
+    async getOrganizationInvitation(t) { let { organizationId: e, invitationId: r } = t; return this.requireId(e), this.requireId(r), this.request({ method: "GET", path: u(N, e, "invitations", r) }); }
+    async revokeOrganizationInvitation(t) { let { organizationId: e, invitationId: r, ...s } = t; return this.requireId(e), this.request({ method: "POST", path: u(N, e, "invitations", r, "revoke"), bodyParams: s }); }
+    async getOrganizationDomainList(t) { let { organizationId: e, ...r } = t; return this.requireId(e), this.request({ method: "GET", path: u(N, e, "domains"), queryParams: r }); }
+    async createOrganizationDomain(t) { let { organizationId: e, ...r } = t; return this.requireId(e), this.request({ method: "POST", path: u(N, e, "domains"), bodyParams: { ...r, verified: r.verified ?? !0 } }); }
+    async updateOrganizationDomain(t) { let { organizationId: e, domainId: r, ...s } = t; return this.requireId(e), this.requireId(r), this.request({ method: "PATCH", path: u(N, e, "domains", r), bodyParams: s }); }
+    async deleteOrganizationDomain(t) { let { organizationId: e, domainId: r } = t; return this.requireId(e), this.requireId(r), this.request({ method: "DELETE", path: u(N, e, "domains", r) }); }
+}, ke = "/organization_permissions", Lo = class extends C {
+    async getOrganizationPermissionList(t = {}) { return this.request({ method: "GET", path: ke, queryParams: t }); }
+    async getOrganizationPermission(t) { return this.requireId(t), this.request({ method: "GET", path: u(ke, t) }); }
+    async createOrganizationPermission(t) { return this.request({ method: "POST", path: ke, bodyParams: t }); }
+    async updateOrganizationPermission(t) { let { permissionId: e, ...r } = t; return this.requireId(e), this.request({ method: "PATCH", path: u(ke, e), bodyParams: r }); }
+    async deleteOrganizationPermission(t) { return this.requireId(t), this.request({ method: "DELETE", path: u(ke, t) }); }
+}, re = "/organization_roles", Do = class extends C {
+    async getOrganizationRoleList(t = {}) { return this.request({ method: "GET", path: re, queryParams: t }); }
+    async getOrganizationRole(t) { return this.requireId(t), this.request({ method: "GET", path: u(re, t) }); }
+    async createOrganizationRole(t) { return this.request({ method: "POST", path: re, bodyParams: t }); }
+    async updateOrganizationRole(t) { let { organizationRoleId: e, ...r } = t; return this.requireId(e), this.request({ method: "PATCH", path: u(re, e), bodyParams: r }); }
+    async deleteOrganizationRole(t) { return this.requireId(t), this.request({ method: "DELETE", path: u(re, t) }); }
+    async assignPermissionToOrganizationRole(t) { let { organizationRoleId: e, permissionId: r } = t; return this.requireId(e), this.requireId(r), this.request({ method: "POST", path: u(re, e, "permissions", r) }); }
+    async removePermissionFromOrganizationRole(t) { let { organizationRoleId: e, permissionId: r } = t; return this.requireId(e), this.requireId(r), this.request({ method: "DELETE", path: u(re, e, "permissions", r) }); }
+}, se = "/oauth_applications", Fo = class extends C {
+    async list(t = {}) { return this.request({ method: "GET", path: se, queryParams: t }); }
+    async get(t) { return this.requireId(t), this.request({ method: "GET", path: u(se, t) }); }
+    async create(t) { return this.request({ method: "POST", path: se, bodyParams: t }); }
+    async update(t) { let { oauthApplicationId: e, ...r } = t; return this.requireId(e), this.request({ method: "PATCH", path: u(se, e), bodyParams: r }); }
+    async delete(t) { return this.requireId(t), this.request({ method: "DELETE", path: u(se, t) }); }
+    async rotateSecret(t) { return this.requireId(t), this.request({ method: "POST", path: u(se, t, "rotate_secret") }); }
+    async revokeToken(t) { let { oauthApplicationId: e, ...r } = t; return this.requireId(e), this.request({ method: "POST", path: u(se, e, "revoke_token"), bodyParams: r }); }
+}, qe = "/phone_numbers", Ko = class extends C {
+    async getPhoneNumber(t) { return this.requireId(t), this.request({ method: "GET", path: u(qe, t) }); }
+    async createPhoneNumber(t) { return this.request({ method: "POST", path: qe, bodyParams: t }); }
+    async updatePhoneNumber(t, e = {}) { return this.requireId(t), this.request({ method: "PATCH", path: u(qe, t), bodyParams: e }); }
+    async deletePhoneNumber(t) { return this.requireId(t), this.request({ method: "DELETE", path: u(qe, t) }); }
+}, Ho = "/proxy_checks", zo = class extends C {
+    async verify(t) { return this.request({ method: "POST", path: Ho, bodyParams: t }); }
+}, Me = "/redirect_urls", Wo = class extends C {
+    async getRedirectUrlList() { return this.request({ method: "GET", path: Me, queryParams: { paginated: !0 } }); }
+    async getRedirectUrl(t) { return this.requireId(t), this.request({ method: "GET", path: u(Me, t) }); }
+    async createRedirectUrl(t) { return this.request({ method: "POST", path: Me, bodyParams: t }); }
+    async deleteRedirectUrl(t) { return this.requireId(t), this.request({ method: "DELETE", path: u(Me, t) }); }
+}, ne = "/role_sets", Bo = class extends C {
+    async getRoleSetList(t = {}) { return this.request({ method: "GET", path: ne, queryParams: t }); }
+    async getRoleSet(t) { return this.requireId(t), this.request({ method: "GET", path: u(ne, t) }); }
+    async createRoleSet(t) { return this.request({ method: "POST", path: ne, bodyParams: t }); }
+    async updateRoleSet(t) { let { roleSetKeyOrId: e, ...r } = t; return this.requireId(e), this.request({ method: "PATCH", path: u(ne, e), bodyParams: r }); }
+    async addRolesToRoleSet(t) { let { roleSetKeyOrId: e, ...r } = t; return this.requireId(e), this.request({ method: "POST", path: u(ne, e, "roles"), bodyParams: r }); }
+    async replaceRoleInRoleSet(t) { let { roleSetKeyOrId: e, ...r } = t; return this.requireId(e), this.request({ method: "POST", path: u(ne, e, "roles", "replace"), bodyParams: r }); }
+    async replaceRoleSet(t) { let { roleSetKeyOrId: e, ...r } = t; return this.requireId(e), this.request({ method: "POST", path: u(ne, e, "replace"), bodyParams: r }); }
+}, _e = "/saml_connections", jo = class extends C {
+    async getSamlConnectionList(t = {}) { return this.request({ method: "GET", path: _e, queryParams: t }); }
+    async createSamlConnection(t) { return this.request({ method: "POST", path: _e, bodyParams: t, options: { deepSnakecaseBodyParamKeys: !0 } }); }
+    async getSamlConnection(t) { return this.requireId(t), this.request({ method: "GET", path: u(_e, t) }); }
+    async updateSamlConnection(t, e = {}) { return this.requireId(t), this.request({ method: "PATCH", path: u(_e, t), bodyParams: e, options: { deepSnakecaseBodyParamKeys: !0 } }); }
+    async deleteSamlConnection(t) { return this.requireId(t), this.request({ method: "DELETE", path: u(_e, t) }); }
+}, Y = "/sessions", Vo = class extends C {
+    async getSessionList(t = {}) { return this.request({ method: "GET", path: Y, queryParams: { ...t, paginated: !0 } }); }
+    async getSession(t) { return this.requireId(t), this.request({ method: "GET", path: u(Y, t) }); }
+    async createSession(t) { return this.request({ method: "POST", path: Y, bodyParams: t }); }
+    async revokeSession(t) { return this.requireId(t), this.request({ method: "POST", path: u(Y, t, "revoke") }); }
+    async verifySession(t, e) { return this.requireId(t), this.request({ method: "POST", path: u(Y, t, "verify"), bodyParams: { token: e } }); }
+    async getToken(t, e, r) { this.requireId(t); let n = { method: "POST", path: e ? u(Y, t, "tokens", e) : u(Y, t, "tokens") }; return r !== void 0 && (n.bodyParams = { expires_in_seconds: r }), this.request(n); }
+    async refreshSession(t, e) { this.requireId(t); let { suffixed_cookies: r, ...s } = e; return this.request({ method: "POST", path: u(Y, t, "refresh"), bodyParams: s, queryParams: { suffixed_cookies: r } }); }
+}, Dr = "/sign_in_tokens", $o = class extends C {
+    async createSignInToken(t) { return this.request({ method: "POST", path: Dr, bodyParams: t }); }
+    async revokeSignInToken(t) { return this.requireId(t), this.request({ method: "POST", path: u(Dr, t, "revoke") }); }
+}, Fr = "/sign_ups", Go = class extends C {
+    async get(t) { return this.requireId(t), this.request({ method: "GET", path: u(Fr, t) }); }
+    async update(t) { let { signUpAttemptId: e, ...r } = t; return this.request({ method: "PATCH", path: u(Fr, e), bodyParams: r }); }
+}, Qo = "/testing_tokens", Yo = class extends C {
+    async createTestingToken() { return this.request({ method: "POST", path: Qo }); }
+}, R = "/users", Xo = class extends C {
+    async getUserList(t = {}) { let { limit: e, offset: r, orderBy: s, ...n } = t, [i, o] = await Promise.all([this.request({ method: "GET", path: R, queryParams: t }), this.getCount(n)]); return { data: i, totalCount: o }; }
+    async getUser(t) { return this.requireId(t), this.request({ method: "GET", path: u(R, t) }); }
+    async createUser(t) { return this.request({ method: "POST", path: R, bodyParams: t }); }
+    async updateUser(t, e = {}) { this.requireId(t); let { publicMetadata: r, privateMetadata: s, unsafeMetadata: n, ...i } = e, o = r !== void 0 || s !== void 0 || n !== void 0, a = Object.keys(i).length > 0; return o && de("updateUser(userId, { publicMetadata | privateMetadata | unsafeMetadata })", "Use updateUserMetadata for partial updates (merge) or replaceUserMetadata for full replacement."), o ? (a && await this.request({ method: "PATCH", path: u(R, t), bodyParams: i }), this.request({ method: "PUT", path: u(R, t, "metadata"), bodyParams: { publicMetadata: r, privateMetadata: s, unsafeMetadata: n } })) : this.request({ method: "PATCH", path: u(R, t), bodyParams: i }); }
+    async replaceUserEmailAddress(t, e) { return this.requireId(t), this.request({ method: "PUT", path: u(R, t, "email_address"), bodyParams: e }); }
+    async replaceUserPhoneNumber(t, e) { return this.requireId(t), this.request({ method: "PUT", path: u(R, t, "phone_number"), bodyParams: e }); }
+    async updateUserProfileImage(t, e) { this.requireId(t); let r = new te.FormData; return r.append("file", e?.file), this.request({ method: "POST", path: u(R, t, "profile_image"), formData: r }); }
+    async updateUserMetadata(t, e) { return this.requireId(t), this.request({ method: "PATCH", path: u(R, t, "metadata"), bodyParams: e }); }
+    async replaceUserMetadata(t, e) { return this.requireId(t), this.request({ method: "PUT", path: u(R, t, "metadata"), bodyParams: e }); }
+    async deleteUser(t) { return this.requireId(t), this.request({ method: "DELETE", path: u(R, t) }); }
+    async getCount(t = {}) { return this.request({ method: "GET", path: u(R, "count"), queryParams: t }); }
+    async getUserOauthAccessToken(t, e) { this.requireId(t); let r = e.startsWith("oauth_"), s = r ? e : `oauth_${e}`; return r && de("getUserOauthAccessToken(userId, provider)", "Remove the `oauth_` prefix from the `provider` argument."), this.request({ method: "GET", path: u(R, t, "oauth_access_tokens", s), queryParams: { paginated: !0 } }); }
+    async disableUserMFA(t) { return this.requireId(t), this.request({ method: "DELETE", path: u(R, t, "mfa") }); }
+    async getOrganizationMembershipList(t) { let { userId: e, limit: r, offset: s } = t; return this.requireId(e), this.request({ method: "GET", path: u(R, e, "organization_memberships"), queryParams: { limit: r, offset: s } }); }
+    async getOrganizationInvitationList(t) { let { userId: e, ...r } = t; return this.requireId(e), this.request({ method: "GET", path: u(R, e, "organization_invitations"), queryParams: r }); }
+    async verifyPassword(t) { let { userId: e, password: r } = t; return this.requireId(e), this.request({ method: "POST", path: u(R, e, "verify_password"), bodyParams: { password: r } }); }
+    async verifyTOTP(t) { let { userId: e, code: r } = t; return this.requireId(e), this.request({ method: "POST", path: u(R, e, "verify_totp"), bodyParams: { code: r } }); }
+    async banUser(t) { return this.requireId(t), this.request({ method: "POST", path: u(R, t, "ban") }); }
+    async unbanUser(t) { return this.requireId(t), this.request({ method: "POST", path: u(R, t, "unban") }); }
+    async lockUser(t) { return this.requireId(t), this.request({ method: "POST", path: u(R, t, "lock") }); }
+    async unlockUser(t) { return this.requireId(t), this.request({ method: "POST", path: u(R, t, "unlock") }); }
+    async deleteUserProfileImage(t) { return this.requireId(t), this.request({ method: "DELETE", path: u(R, t, "profile_image") }); }
+    async deleteUserPasskey(t) { return this.requireId(t.userId), this.requireId(t.passkeyIdentificationId), this.request({ method: "DELETE", path: u(R, t.userId, "passkeys", t.passkeyIdentificationId) }); }
+    async deleteUserWeb3Wallet(t) { return this.requireId(t.userId), this.requireId(t.web3WalletIdentificationId), this.request({ method: "DELETE", path: u(R, t.userId, "web3_wallets", t.web3WalletIdentificationId) }); }
+    async deleteUserExternalAccount(t) { return this.requireId(t.userId), this.requireId(t.externalAccountId), this.request({ method: "DELETE", path: u(R, t.userId, "external_accounts", t.externalAccountId) }); }
+    async deleteUserBackupCodes(t) { return this.requireId(t), this.request({ method: "DELETE", path: u(R, t, "backup_code") }); }
+    async deleteUserTOTP(t) { return this.requireId(t), this.request({ method: "DELETE", path: u(R, t, "totp") }); }
+    async setPasswordCompromised(t, e = { revokeAllSessions: !1 }) { return this.requireId(t), this.request({ method: "POST", path: u(R, t, "password", "set_compromised"), bodyParams: e }); }
+    async unsetPasswordCompromised(t) { return this.requireId(t), this.request({ method: "POST", path: u(R, t, "password", "unset_compromised") }); }
+}, le = "/waitlist_entries", Zo = class extends C {
+    async list(t = {}) { return this.request({ method: "GET", path: le, queryParams: t }); }
+    async create(t) { return this.request({ method: "POST", path: le, bodyParams: t }); }
+    async createBulk(t) { return this.request({ method: "POST", path: u(le, "bulk"), bodyParams: t }); }
+    async invite(t, e = {}) { return this.requireId(t), this.request({ method: "POST", path: u(le, t, "invite"), bodyParams: e }); }
+    async reject(t) { return this.requireId(t), this.request({ method: "POST", path: u(le, t, "reject") }); }
+    async delete(t) { return this.requireId(t), this.request({ method: "DELETE", path: u(le, t) }); }
+}, pt = "/webhooks", ea = class extends C {
+    async createSvixApp() { return this.request({ method: "POST", path: u(pt, "svix") }); }
+    async generateSvixAuthURL() { return this.request({ method: "POST", path: u(pt, "svix_url") }); }
+    async deleteSvixApp() { return this.request({ method: "DELETE", path: u(pt, "svix") }); }
+}, Kr = "/billing", ta = "/organizations", ra = "/users", sa = class extends C {
+    async getPlanList(t) { return this.request({ method: "GET", path: u(Kr, "plans"), queryParams: t }); }
+    async cancelSubscriptionItem(t, e) { return this.requireId(t), this.request({ method: "DELETE", path: u(Kr, "subscription_items", t), queryParams: e }); }
+    async extendSubscriptionItemFreeTrial(t, e) { return this.requireId(t), this.request({ method: "POST", path: u("/billing", "subscription_items", t, "extend_free_trial"), bodyParams: e }); }
+    async getOrganizationBillingSubscription(t) { return this.requireId(t), this.request({ method: "GET", path: u(ta, t, "billing", "subscription") }); }
+    async getUserBillingSubscription(t) { return this.requireId(t), this.request({ method: "GET", path: u(ra, t, "billing", "subscription") }); }
+}, ps = t => typeof t == "object" && t !== null, Hr = t => ps(t) && !(t instanceof RegExp) && !(t instanceof Error) && !(t instanceof Date) && !(globalThis.Blob && t instanceof globalThis.Blob), na = Symbol("mapObjectSkip"), wt = (t, e, r, s = new WeakMap) => { if (r = { deep: !1, target: {}, ...r }, s.has(t))
+    return s.get(t); s.set(t, r.target); let { target: n } = r; delete r.target; let i = o => o.map(a => Hr(a) ? wt(a, e, r, s) : a); if (Array.isArray(t))
+    return i(t); for (let [o, a] of Object.entries(t)) {
+    let c = e(o, a, t);
+    if (c === na)
+        continue;
+    let [d, f, { shouldRecurse: p = !0 } = {}] = c;
+    d !== "__proto__" && (r.deep && p && Hr(f) && (f = Array.isArray(f) ? i(f) : wt(f, e, r, s)), n[d] = f);
+} return n; };
+function zr(t, e, r) { if (!ps(t))
+    throw new TypeError(`Expected an object, got \`${t}\` (${typeof t})`); if (Array.isArray(t))
+    throw new TypeError("Expected an object, got an array"); return wt(t, e, r); }
+var ia = /([\p{Ll}\d])(\p{Lu})/gu, oa = /(\p{Lu})([\p{Lu}][\p{Ll}])/gu, aa = /(\d)\p{Ll}|(\p{L})\d/u, ca = /[^\p{L}\d]+/giu, Wr = "$1\0$2", Br = "";
+function ms(t) { let e = t.trim(); e = e.replace(ia, Wr).replace(oa, Wr), e = e.replace(ca, "\0"); let r = 0, s = e.length; for (; e.charAt(r) === "\0";)
+    r++; if (r === s)
+    return []; for (; e.charAt(s - 1) === "\0";)
+    s--; return e.slice(r, s).split(/\0/g); }
+function ua(t) { let e = ms(t); for (let r = 0; r < e.length; r++) {
+    let s = e[r], n = aa.exec(s);
+    if (n) {
+        let i = n.index + (n[1] ?? n[2]).length;
+        e.splice(r, 1, s.slice(0, i), s.slice(i));
+    }
+} return e; }
+function la(t, e) { let [r, s, n] = da(t, e); return r + s.map(ha(e?.locale)).join(e?.delimiter ?? " ") + n; }
+function jr(t, e) { return la(t, { delimiter: "_", ...e }); }
+function ha(t) { return t === !1 ? e => e.toLowerCase() : e => e.toLocaleLowerCase(t); }
+function da(t, e = {}) { let r = e.split ?? (e.separateNumbers ? ua : ms), s = e.prefixCharacters ?? Br, n = e.suffixCharacters ?? Br, i = 0, o = t.length; for (; i < t.length;) {
+    let a = t.charAt(i);
+    if (!s.includes(a))
+        break;
+    i++;
+} for (; o > i;) {
+    let a = o - 1, c = t.charAt(a);
+    if (!n.includes(c))
+        break;
+    o = a;
+} return [t.slice(0, i), r(t.slice(i, o)), t.slice(o)]; }
+var Vr = {}.constructor;
+function fa(t, e) { if (Array.isArray(t)) {
+    if (t.some(n => n.constructor !== Vr))
+        throw new Error("obj must be array of plain objects");
+    e = { deep: !0, exclude: [], parsingOptions: {}, ...e };
+    let s = e.snakeCase || (n => jr(n, e.parsingOptions));
+    return t.map(n => zr(n, (i, o) => [$r(e.exclude, i) ? i : s(i), o, Gr(i, o, e)], e));
+}
+else if (t.constructor !== Vr)
+    throw new Error("obj must be an plain object"); e = { deep: !0, exclude: [], parsingOptions: {}, ...e }; let r = e.snakeCase || (s => jr(s, e.parsingOptions)); return zr(t, (s, n) => [$r(e.exclude, s) ? s : r(s), n, Gr(s, n, e)], e); }
+function $r(t, e) { return t.some(r => typeof r == "string" ? r === e : r.test(e)); }
+function Gr(t, e, r) { return r.shouldRecurse ? { shouldRecurse: r.shouldRecurse(t, e) } : void 0; }
+var Qr = fa, pa = class ys {
+    constructor(e, r, s, n) { this.publishableKey = e, this.secretKey = r, this.claimUrl = s, this.apiKeysUrl = n; }
+    static fromJSON(e) { return new ys(e.publishable_key, e.secret_key, e.claim_url, e.api_keys_url); }
+}, ma = class gs {
+    constructor(e, r, s, n) { this.agentId = e, this.taskId = r, this.agentTaskId = s, this.url = n; }
+    static fromJSON(e) { let r = e.agent_task_id ?? e.task_id ?? ""; return new gs(e.agent_id, r, r, e.url); }
+}, ya = class ks {
+    constructor(e, r, s, n, i, o, a, c) { this.id = e, this.status = r, this.userId = s, this.actor = n, this.token = i, this.url = o, this.createdAt = a, this.updatedAt = c; }
+    static fromJSON(e) { return new ks(e.id, e.status, e.user_id, e.actor, e.token, e.url, e.created_at, e.updated_at); }
+}, ga = class _s {
+    constructor(e, r, s, n, i, o, a) { this.id = e, this.identifier = r, this.identifierType = s, this.createdAt = n, this.updatedAt = i, this.instanceId = o, this.invitationId = a; }
+    static fromJSON(e) { return new _s(e.id, e.identifier, e.identifier_type, e.created_at, e.updated_at, e.instance_id, e.invitation_id); }
+}, ka = class vs {
+    constructor(e, r, s, n, i, o, a, c, d, f, p, E, S, A, P, x) { this.id = e, this.type = r, this.name = s, this.subject = n, this.scopes = i, this.claims = o, this.revoked = a, this.revocationReason = c, this.expired = d, this.expiration = f, this.createdBy = p, this.description = E, this.lastUsedAt = S, this.createdAt = A, this.updatedAt = P, this.secret = x; }
+    static fromJSON(e) { return new vs(e.id, e.type, e.name, e.subject, e.scopes, e.claims, e.revoked, e.revocation_reason, e.expired, e.expiration, e.created_by, e.description, e.last_used_at, e.created_at, e.updated_at, e.secret); }
+}, _a = class Ss {
+    constructor(e, r, s, n, i, o) { this.id = e, this.identifier = r, this.identifierType = s, this.createdAt = n, this.updatedAt = i, this.instanceId = o; }
+    static fromJSON(e) { return new Ss(e.id, e.identifier, e.identifier_type, e.created_at, e.updated_at, e.instance_id); }
+}, va = class Ts {
+    constructor(e, r, s, n, i, o, a, c) { this.id = e, this.isMobile = r, this.ipAddress = s, this.city = n, this.country = i, this.browserVersion = o, this.browserName = a, this.deviceType = c; }
+    static fromJSON(e) { return new Ts(e.id, e.is_mobile, e.ip_address, e.city, e.country, e.browser_version, e.browser_name, e.device_type); }
+}, bs = class Es {
+    constructor(e, r, s, n, i, o, a, c, d, f, p, E = null) { this.id = e, this.clientId = r, this.userId = s, this.status = n, this.lastActiveAt = i, this.expireAt = o, this.abandonAt = a, this.createdAt = c, this.updatedAt = d, this.lastActiveOrganizationId = f, this.latestActivity = p, this.actor = E; }
+    static fromJSON(e) { return new Es(e.id, e.client_id, e.user_id, e.status, e.last_active_at, e.expire_at, e.abandon_at, e.created_at, e.updated_at, e.last_active_organization_id, e.latest_activity && va.fromJSON(e.latest_activity), e.actor); }
+}, Sa = class ws {
+    constructor(e, r, s, n, i, o, a, c, d) { this.id = e, this.sessionIds = r, this.sessions = s, this.signInId = n, this.signUpId = i, this.lastActiveSessionId = o, this.lastAuthenticationStrategy = a, this.createdAt = c, this.updatedAt = d; }
+    static fromJSON(e) { return new ws(e.id, e.session_ids, e.sessions.map(r => bs.fromJSON(r)), e.sign_in_id, e.sign_up_id, e.last_active_session_id, e.last_authentication_strategy, e.created_at, e.updated_at); }
+}, Ta = class As {
+    constructor(e, r, s) { this.host = e, this.value = r, this.required = s; }
+    static fromJSON(e) { return new As(e.host, e.value, e.required); }
+}, ba = class Ps {
+    constructor(e) { this.cookies = e; }
+    static fromJSON(e) { return new Ps(e.cookies); }
+}, Ea = class Is {
+    constructor(e, r, s, n) { this.object = e, this.id = r, this.slug = s, this.deleted = n; }
+    static fromJSON(e) { return new Is(e.object, e.id || null, e.slug || null, e.deleted); }
+}, wa = class Os {
+    constructor(e, r, s, n, i, o, a, c) { this.id = e, this.name = r, this.isSatellite = s, this.frontendApiUrl = n, this.developmentOrigin = i, this.cnameTargets = o, this.accountsPortalUrl = a, this.proxyUrl = c; }
+    static fromJSON(e) { return new Os(e.id, e.name, e.is_satellite, e.frontend_api_url, e.development_origin, e.cname_targets && e.cname_targets.map(r => Ta.fromJSON(r)), e.accounts_portal_url, e.proxy_url); }
+}, Aa = class Cs {
+    constructor(e, r, s, n, i, o, a, c, d, f, p, E) { this.id = e, this.fromEmailName = r, this.emailAddressId = s, this.toEmailAddress = n, this.subject = i, this.body = o, this.bodyPlain = a, this.status = c, this.slug = d, this.data = f, this.deliveredByClerk = p, this.userId = E; }
+    static fromJSON(e) { return new Cs(e.id, e.from_email_name, e.email_address_id, e.to_email_address, e.subject, e.body, e.body_plain, e.status, e.slug, e.data, e.delivered_by_clerk, e.user_id); }
+}, xs = class Us {
+    constructor(e, r) { this.id = e, this.type = r; }
+    static fromJSON(e) { return new Us(e.id, e.type); }
+}, be = class Rs {
+    constructor(e, r, s = null, n = null, i = null, o = null, a = null) { this.status = e, this.strategy = r, this.externalVerificationRedirectURL = s, this.attempts = n, this.expireAt = i, this.nonce = o, this.message = a; }
+    static fromJSON(e) { return new Rs(e.status, e.strategy, e.external_verification_redirect_url ? new URL(e.external_verification_redirect_url) : null, e.attempts, e.expire_at, e.nonce); }
+}, qs = class Ms {
+    constructor(e, r, s, n) { this.id = e, this.emailAddress = r, this.verification = s, this.linkedTo = n; }
+    static fromJSON(e) { return new Ms(e.id, e.email_address, e.verification && be.fromJSON(e.verification), e.linked_to.map(r => xs.fromJSON(r))); }
+}, Ns = class Js {
+    constructor(e, r, s, n, i) { this.id = e, this.name = r, this.description = s, this.slug = n, this.avatarUrl = i; }
+    static fromJSON(e) { return new Js(e.id, e.name, e.description ?? null, e.slug, e.avatar_url ?? null); }
+}, Ls = class Ds {
+    constructor(e, r, s, n, i, o, a, c, d, f, p, E, S, A, P, x) { this.id = e, this.name = r, this.slug = s, this.description = n, this.isDefault = i, this.isRecurring = o, this.hasBaseFee = a, this.publiclyVisible = c, this.fee = d, this.annualFee = f, this.annualMonthlyFee = p, this.forPayerType = E, this.features = S, this.avatarUrl = A, this.freeTrialDays = P, this.freeTrialEnabled = x; }
+    static fromJSON(e) { let r = s => s ? { amount: s.amount, amountFormatted: s.amount_formatted, currency: s.currency, currencySymbol: s.currency_symbol } : null; return new Ds(e.id, e.name, e.slug, e.description ?? null, e.is_default, e.is_recurring, e.has_base_fee, e.publicly_visible, r(e.fee), r(e.annual_fee), r(e.annual_monthly_fee), e.for_payer_type, (e.features ?? []).map(s => Ns.fromJSON(s)), e.avatar_url, e.free_trial_days, e.free_trial_enabled); }
+}, Fs = class Ks {
+    constructor(e, r, s, n, i, o, a, c, d, f, p, E, S, A, P, x, l) { this.id = e, this.status = r, this.planPeriod = s, this.periodStart = n, this.nextPayment = i, this.amount = o, this.plan = a, this.planId = c, this.createdAt = d, this.updatedAt = f, this.periodEnd = p, this.canceledAt = E, this.pastDueAt = S, this.endedAt = A, this.payerId = P, this.isFreeTrial = x, this.lifetimePaid = l; }
+    static fromJSON(e) { function r(s) { return s && { amount: s.amount, amountFormatted: s.amount_formatted, currency: s.currency, currencySymbol: s.currency_symbol }; } return new Ks(e.id, e.status, e.plan_period, e.period_start, e.next_payment, r(e.amount) ?? void 0, e.plan ? Ls.fromJSON(e.plan) : null, e.plan_id ?? null, e.created_at, e.updated_at, e.period_end, e.canceled_at, e.past_due_at, e.ended_at, e.payer_id, e.is_free_trial, r(e.lifetime_paid) ?? void 0); }
+}, Pa = class Hs {
+    constructor(e, r, s, n, i, o, a, c, d, f) { this.id = e, this.status = r, this.payerId = s, this.createdAt = n, this.updatedAt = i, this.activeAt = o, this.pastDueAt = a, this.subscriptionItems = c, this.nextPayment = d, this.eligibleForFreeTrial = f; }
+    static fromJSON(e) { let r = e.next_payment ? { date: e.next_payment.date, amount: { amount: e.next_payment.amount.amount, amountFormatted: e.next_payment.amount.amount_formatted, currency: e.next_payment.amount.currency, currencySymbol: e.next_payment.amount.currency_symbol } } : null; return new Hs(e.id, e.status, e.payer_id, e.created_at, e.updated_at, e.active_at ?? null, e.past_due_at ?? null, (e.subscription_items ?? []).map(s => Fs.fromJSON(s)), r, e.eligible_for_free_trial ?? !1); }
+}, Ia = class zs {
+    constructor(e, r, s, n, i, o, a, c, d, f, p, E, S) { this.id = e, this.active = r, this.allowIdpInitiated = s, this.allowSubdomains = n, this.disableAdditionalIdentifications = i, this.domain = o, this.logoPublicUrl = a, this.name = c, this.protocol = d, this.provider = f, this.syncUserAttributes = p, this.createdAt = E, this.updatedAt = S; }
+    static fromJSON(e) { return new zs(e.id, e.active, e.allow_idp_initiated, e.allow_subdomains, e.disable_additional_identifications, e.domain, e.logo_public_url, e.name, e.protocol, e.provider, e.sync_user_attributes, e.created_at, e.updated_at); }
+}, Ws = class Bs {
+    constructor(e, r, s, n, i, o, a, c, d, f, p, E, S) { this.id = e, this.active = r, this.emailAddress = s, this.enterpriseConnection = n, this.firstName = i, this.lastName = o, this.protocol = a, this.provider = c, this.providerUserId = d, this.publicMetadata = f, this.verification = p, this.lastAuthenticatedAt = E, this.enterpriseConnectionId = S; }
+    static fromJSON(e) { return new Bs(e.id, e.active, e.email_address, e.enterprise_connection && Ia.fromJSON(e.enterprise_connection), e.first_name, e.last_name, e.protocol, e.provider, e.provider_user_id, e.public_metadata, e.verification && be.fromJSON(e.verification), e.last_authenticated_at, e.enterprise_connection_id); }
+}, Oa = class js {
+    constructor(e, r, s, n, i, o, a, c, d, f, p, E, S, A, P) { this.id = e, this.name = r, this.idpEntityId = s, this.idpSsoUrl = n, this.idpCertificate = i, this.idpCertificateIssuedAt = o, this.idpCertificateExpiresAt = a, this.idpMetadataUrl = c, this.idpMetadata = d, this.acsUrl = f, this.spEntityId = p, this.spMetadataUrl = E, this.syncUserAttributes = S, this.allowSubdomains = A, this.allowIdpInitiated = P; }
+    static fromJSON(e) { return new js(e.id, e.name, e.idp_entity_id, e.idp_sso_url, e.idp_certificate, e.idp_certificate_issued_at, e.idp_certificate_expires_at, e.idp_metadata_url, e.idp_metadata, e.acs_url, e.sp_entity_id, e.sp_metadata_url, e.sync_user_attributes, e.allow_subdomains, e.allow_idp_initiated); }
+}, Ca = class Vs {
+    constructor(e, r, s, n, i, o, a) { this.id = e, this.name = r, this.clientId = s, this.discoveryUrl = n, this.logoPublicUrl = i, this.createdAt = o, this.updatedAt = a; }
+    static fromJSON(e) { return new Vs(e.id, e.name, e.client_id, e.discovery_url, e.logo_public_url, e.created_at, e.updated_at); }
+}, xa = class $s {
+    constructor(e, r, s, n, i, o, a, c, d, f, p, E) { this.id = e, this.name = r, this.domains = s, this.organizationId = n, this.active = i, this.syncUserAttributes = o, this.allowSubdomains = a, this.disableAdditionalIdentifications = c, this.createdAt = d, this.updatedAt = f, this.samlConnection = p, this.oauthConfig = E; }
+    static fromJSON(e) { return new $s(e.id, e.name, e.domains, e.organization_id, e.active, e.sync_user_attributes, e.allow_subdomains, e.disable_additional_identifications, e.created_at, e.updated_at, e.saml_connection != null ? Oa.fromJSON(e.saml_connection) : null, e.oauth_config != null ? Ca.fromJSON(e.oauth_config) : null); }
+}, Ua = class Gs {
+    constructor(e, r, s, n, i, o, a, c, d, f, p, E, S = {}, A, P, x) { this.id = e, this.provider = r, this.providerUserId = s, this.identificationId = n, this.externalId = i, this.approvedScopes = o, this.emailAddress = a, this.firstName = c, this.lastName = d, this.imageUrl = f, this.username = p, this.phoneNumber = E, this.publicMetadata = S, this.label = A, this.verification = P, this.externalAccountId = x; }
+    static fromJSON(e) { return new Gs(e.id, e.provider, e.provider_user_id, e.identification_id, e.provider_user_id, e.approved_scopes, e.email_address, e.first_name, e.last_name, e.image_url || "", e.username, e.phone_number, e.public_metadata, e.label, e.verification && be.fromJSON(e.verification), e.external_account_id); }
+}, Ra = class Qs {
+    constructor(e, r, s) { this.id = e, this.environmentType = r, this.allowedOrigins = s; }
+    static fromJSON(e) { return new Qs(e.id, e.environment_type, e.allowed_origins); }
+}, qa = class Ys {
+    constructor(e, r, s, n, i) { this.allowlist = e, this.blocklist = r, this.blockEmailSubaddresses = s, this.blockDisposableEmailDomains = n, this.ignoreDotsForGmailAddresses = i; }
+    static fromJSON(e) { return new Ys(e.allowlist, e.blocklist, e.block_email_subaddresses, e.block_disposable_email_domains, e.ignore_dots_for_gmail_addresses); }
+}, Ma = class Xs {
+    constructor(e, r, s, n, i) { this.id = e, this.restrictedToAllowlist = r, this.fromEmailAddress = s, this.progressiveSignUp = n, this.enhancedEmailDeliverability = i; }
+    static fromJSON(e) { return new Xs(e.id, e.restricted_to_allowlist, e.from_email_address, e.progressive_sign_up, e.enhanced_email_deliverability); }
+}, Zs = class en {
+    constructor(e, r, s, n, i, o, a, c) { this.id = e, this.emailAddress = r, this.publicMetadata = s, this.createdAt = n, this.updatedAt = i, this.status = o, this.url = a, this.revoked = c, this._raw = null; }
+    get raw() { return this._raw; }
+    static fromJSON(e) { let r = new en(e.id, e.email_address, e.public_metadata, e.created_at, e.updated_at, e.status, e.url, e.revoked); return r._raw = e, r; }
+}, w = { AccountlessApplication: "accountless_application", ActorToken: "actor_token", AgentTask: "agent_task", AllowlistIdentifier: "allowlist_identifier", ApiKey: "api_key", BlocklistIdentifier: "blocklist_identifier", Client: "client", Cookies: "cookies", Domain: "domain", Email: "email", EnterpriseAccount: "enterprise_account", EnterpriseConnection: "enterprise_connection", EmailAddress: "email_address", ExternalAccount: "external_account", FacebookAccount: "facebook_account", GoogleAccount: "google_account", Instance: "instance", InstanceRestrictions: "instance_restrictions", InstanceSettings: "instance_settings", Invitation: "invitation", Machine: "machine", MachineScope: "machine_scope", MachineSecretKey: "machine_secret_key", M2MToken: "machine_to_machine_token", JwtTemplate: "jwt_template", OauthAccessToken: "oauth_access_token", IdpOAuthAccessToken: "clerk_idp_oauth_access_token", OAuthApplication: "oauth_application", Organization: "organization", OrganizationDomain: "organization_domain", OrganizationInvitation: "organization_invitation", OrganizationMembership: "organization_membership", OrganizationSettings: "organization_settings", PhoneNumber: "phone_number", ProxyCheck: "proxy_check", RedirectUrl: "redirect_url", SamlConnection: "saml_connection", Session: "session", SignInAttempt: "sign_in_attempt", SignInToken: "sign_in_token", SignUpAttempt: "sign_up_attempt", SmsMessage: "sms_message", User: "user", WaitlistEntry: "waitlist_entry", Web3Wallet: "web3_wallet", Token: "token", TotalCount: "total_count", TestingToken: "testing_token", Role: "role", RoleSet: "role_set", RoleSetItem: "role_set_item", RoleSetMigration: "role_set_migration", Permission: "permission", BillingPayer: "commerce_payer", BillingPaymentAttempt: "commerce_payment_attempt", BillingSubscription: "commerce_subscription", BillingSubscriptionItem: "commerce_subscription_item", BillingPlan: "commerce_plan", Feature: "feature" }, Na = class tn {
+    constructor(e, r, s, n, i, o, a, c, d) { this.id = e, this.name = r, this.claims = s, this.lifetime = n, this.allowedClockSkew = i, this.customSigningKey = o, this.signingAlgorithm = a, this.createdAt = c, this.updatedAt = d; }
+    static fromJSON(e) { return new tn(e.id, e.name, e.claims, e.lifetime, e.allowed_clock_skew, e.custom_signing_key, e.signing_algorithm, e.created_at, e.updated_at); }
+}, Ja = class At {
+    constructor(e, r, s, n, i, o, a, c) { this.id = e, this.name = r, this.instanceId = s, this.createdAt = n, this.updatedAt = i, this.scopedMachines = o, this.defaultTokenTtl = a, this.secretKey = c; }
+    static fromJSON(e) { return new At(e.id, e.name, e.instance_id, e.created_at, e.updated_at, e.scoped_machines.map(r => new At(r.id, r.name, r.instance_id, r.created_at, r.updated_at, [], r.default_token_ttl)), e.default_token_ttl, e.secret_key); }
+}, La = class rn {
+    constructor(e, r, s, n) { this.fromMachineId = e, this.toMachineId = r, this.createdAt = s, this.deleted = n; }
+    static fromJSON(e) { return new rn(e.from_machine_id, e.to_machine_id, e.created_at, e.deleted); }
+}, Da = class sn {
+    constructor(e) { this.secret = e; }
+    static fromJSON(e) { return new sn(e.secret); }
+}, Fa = class nn {
+    constructor(e, r, s, n = {}, i, o, a, c, d) { this.externalAccountId = e, this.provider = r, this.token = s, this.publicMetadata = n, this.label = i, this.scopes = o, this.tokenSecret = a, this.expiresAt = c, this.idToken = d; }
+    static fromJSON(e) { return new nn(e.external_account_id, e.provider, e.token, e.public_metadata, e.label || "", e.scopes, e.token_secret, e.expires_at, e.id_token); }
+}, Ka = class on {
+    constructor(e, r, s, n, i, o, a, c, d, f, p, E, S, A, P, x, l, y, m, h) { this.id = e, this.instanceId = r, this.name = s, this.clientId = n, this.clientUri = i, this.clientImageUrl = o, this.dynamicallyRegistered = a, this.consentScreenEnabled = c, this.pkceRequired = d, this.isPublic = f, this.scopes = p, this.redirectUris = E, this.authorizeUrl = S, this.tokenFetchUrl = A, this.userInfoUrl = P, this.discoveryUrl = x, this.tokenIntrospectionUrl = l, this.createdAt = y, this.updatedAt = m, this.clientSecret = h; }
+    static fromJSON(e) { return new on(e.id, e.instance_id, e.name, e.client_id, e.client_uri, e.client_image_url, e.dynamically_registered, e.consent_screen_enabled, e.pkce_required, e.public, e.scopes, e.redirect_uris, e.authorize_url, e.token_fetch_url, e.user_info_url, e.discovery_url, e.token_introspection_url, e.created_at, e.updated_at, e.client_secret); }
+}, an = class cn {
+    constructor(e, r, s, n, i, o, a, c = {}, d = {}, f, p, E, S) { this.id = e, this.name = r, this.slug = s, this.imageUrl = n, this.hasImage = i, this.createdAt = o, this.updatedAt = a, this.publicMetadata = c, this.privateMetadata = d, this.maxAllowedMemberships = f, this.adminDeleteEnabled = p, this.membersCount = E, this.createdBy = S, this._raw = null; }
+    get raw() { return this._raw; }
+    static fromJSON(e) { let r = new cn(e.id, e.name, e.slug, e.image_url || "", e.has_image, e.created_at, e.updated_at, e.public_metadata, e.private_metadata, e.max_allowed_memberships, e.admin_delete_enabled, e.members_count, e.created_by); return r._raw = e, r; }
+}, Ha = class un {
+    constructor(e, r, s, n, i, o, a, c, d, f, p = {}, E = {}, S) { this.id = e, this.emailAddress = r, this.role = s, this.roleName = n, this.organizationId = i, this.createdAt = o, this.updatedAt = a, this.expiresAt = c, this.url = d, this.status = f, this.publicMetadata = p, this.privateMetadata = E, this.publicOrganizationData = S, this._raw = null; }
+    get raw() { return this._raw; }
+    static fromJSON(e) { let r = new un(e.id, e.email_address, e.role, e.role_name, e.organization_id, e.created_at, e.updated_at, e.expires_at, e.url, e.status, e.public_metadata, e.private_metadata, e.public_organization_data); return r._raw = e, r; }
+}, za = class ln {
+    constructor(e, r, s, n = {}, i = {}, o, a, c, d) { this.id = e, this.role = r, this.permissions = s, this.publicMetadata = n, this.privateMetadata = i, this.createdAt = o, this.updatedAt = a, this.organization = c, this.publicUserData = d, this._raw = null; }
+    get raw() { return this._raw; }
+    static fromJSON(e) { let r = new ln(e.id, e.role, e.permissions, e.public_metadata, e.private_metadata, e.created_at, e.updated_at, an.fromJSON(e.organization), Wa.fromJSON(e.public_user_data)); return r._raw = e, r; }
+}, Wa = class hn {
+    constructor(e, r, s, n, i, o) { this.identifier = e, this.firstName = r, this.lastName = s, this.imageUrl = n, this.hasImage = i, this.userId = o; }
+    static fromJSON(e) { return new hn(e.identifier, e.first_name, e.last_name, e.image_url, e.has_image, e.user_id); }
+}, Ba = class dn {
+    constructor(e, r, s, n, i, o, a, c, d, f) { this.enabled = e, this.maxAllowedMemberships = r, this.maxAllowedRoles = s, this.maxAllowedPermissions = n, this.creatorRole = i, this.adminDeleteEnabled = o, this.domainsEnabled = a, this.slugDisabled = c, this.domainsEnrollmentModes = d, this.domainsDefaultRole = f; }
+    static fromJSON(e) { return new dn(e.enabled, e.max_allowed_memberships, e.max_allowed_roles, e.max_allowed_permissions, e.creator_role, e.admin_delete_enabled, e.domains_enabled, e.slug_disabled, e.domains_enrollment_modes, e.domains_default_role); }
+}, fn = class pn {
+    constructor(e, r, s, n, i, o) { this.id = e, this.name = r, this.key = s, this.description = n, this.createdAt = i, this.updatedAt = o; }
+    static fromJSON(e) { return new pn(e.id, e.name, e.key, e.description, e.created_at, e.updated_at); }
+}, mn = class yn {
+    constructor(e, r, s, n, i, o) { this.id = e, this.phoneNumber = r, this.reservedForSecondFactor = s, this.defaultSecondFactor = n, this.verification = i, this.linkedTo = o; }
+    static fromJSON(e) { return new yn(e.id, e.phone_number, e.reserved_for_second_factor, e.default_second_factor, e.verification && be.fromJSON(e.verification), e.linked_to.map(r => xs.fromJSON(r))); }
+}, ja = class gn {
+    constructor(e, r, s, n, i, o, a) { this.id = e, this.domainId = r, this.lastRunAt = s, this.proxyUrl = n, this.successful = i, this.createdAt = o, this.updatedAt = a; }
+    static fromJSON(e) { return new gn(e.id, e.domain_id, e.last_run_at, e.proxy_url, e.successful, e.created_at, e.updated_at); }
+}, Va = class kn {
+    constructor(e, r, s, n) { this.id = e, this.url = r, this.createdAt = s, this.updatedAt = n; }
+    static fromJSON(e) { return new kn(e.id, e.url, e.created_at, e.updated_at); }
+}, $a = class _n {
+    constructor(e, r, s, n, i, o, a, c) { this.id = e, this.name = r, this.key = s, this.description = n, this.permissions = i, this.isCreatorEligible = o, this.createdAt = a, this.updatedAt = c; }
+    static fromJSON(e) { return new _n(e.id, e.name, e.key, e.description, (e.permissions ?? []).map(r => fn.fromJSON(r)), e.is_creator_eligible, e.created_at, e.updated_at); }
+}, mt = class vn {
+    constructor(e, r, s, n, i, o, a, c) { this.id = e, this.name = r, this.key = s, this.description = n, this.createdAt = i, this.updatedAt = o, this.membersCount = a, this.hasMembers = c; }
+    static fromJSON(e) { return new vn(e.id, e.name, e.key, e.description, e.created_at, e.updated_at, e.members_count, e.has_members); }
+}, Ga = class Sn {
+    constructor(e, r, s, n, i, o, a, c, d, f, p, E, S) { this.id = e, this.organizationId = r, this.instanceId = s, this.sourceRoleSetId = n, this.destRoleSetId = i, this.triggerType = o, this.status = a, this.migratedMembers = c, this.mappings = d, this.createdAt = f, this.updatedAt = p, this.startedAt = E, this.completedAt = S; }
+    static fromJSON(e) { return new Sn(e.id, e.organization_id, e.instance_id, e.source_role_set_id, e.dest_role_set_id, e.trigger_type, e.status, e.migrated_members, e.mappings, e.created_at, e.updated_at, e.started_at, e.completed_at); }
+}, Qa = class Tn {
+    constructor(e, r, s, n, i, o, a, c, d, f, p) { this.id = e, this.name = r, this.key = s, this.description = n, this.roles = i, this.defaultRole = o, this.creatorRole = a, this.type = c, this.roleSetMigration = d, this.createdAt = f, this.updatedAt = p; }
+    static fromJSON(e) { return new Tn(e.id, e.name, e.key, e.description, (e.roles ?? []).map(r => mt.fromJSON(r)), e.default_role ? mt.fromJSON(e.default_role) : null, e.creator_role ? mt.fromJSON(e.creator_role) : null, e.type, e.role_set_migration ? Ga.fromJSON(e.role_set_migration) : null, e.created_at, e.updated_at); }
+}, Ya = class bn {
+    constructor(e, r, s, n, i, o, a, c, d, f, p, E, S, A, P, x, l, y, m, h, g, k, T) { this.id = e, this.name = r, this.domain = s, this.organizationId = n, this.idpEntityId = i, this.idpSsoUrl = o, this.idpCertificate = a, this.idpCertificateIssuedAt = c, this.idpCertificateExpiresAt = d, this.idpMetadataUrl = f, this.idpMetadata = p, this.acsUrl = E, this.spEntityId = S, this.spMetadataUrl = A, this.active = P, this.provider = x, this.userCount = l, this.syncUserAttributes = y, this.allowSubdomains = m, this.allowIdpInitiated = h, this.createdAt = g, this.updatedAt = k, this.attributeMapping = T; }
+    static fromJSON(e) { return new bn(e.id, e.name, e.domain, e.organization_id, e.idp_entity_id, e.idp_sso_url, e.idp_certificate, e.idp_certificate_issued_at, e.idp_certificate_expires_at, e.idp_metadata_url, e.idp_metadata, e.acs_url, e.sp_entity_id, e.sp_metadata_url, e.active, e.provider, e.user_count, e.sync_user_attributes, e.allow_subdomains, e.allow_idp_initiated, e.created_at, e.updated_at, e.attribute_mapping && Xa.fromJSON(e.attribute_mapping)); }
+}, Xa = class En {
+    constructor(e, r, s, n) { this.userId = e, this.emailAddress = r, this.firstName = s, this.lastName = n; }
+    static fromJSON(e) { return new En(e.user_id, e.email_address, e.first_name, e.last_name); }
+}, Za = class wn {
+    constructor(e, r, s, n, i, o, a) { this.id = e, this.userId = r, this.token = s, this.status = n, this.url = i, this.createdAt = o, this.updatedAt = a; }
+    static fromJSON(e) { return new wn(e.id, e.user_id, e.token, e.status, e.url, e.created_at, e.updated_at); }
+}, yt = class An {
+    constructor(e, r) { this.nextAction = e, this.supportedStrategies = r; }
+    static fromJSON(e) { return new An(e.next_action, e.supported_strategies); }
+}, ec = class Pn {
+    constructor(e, r, s, n) { this.emailAddress = e, this.phoneNumber = r, this.web3Wallet = s, this.externalAccount = n; }
+    static fromJSON(e) { return new Pn(e.email_address && yt.fromJSON(e.email_address), e.phone_number && yt.fromJSON(e.phone_number), e.web3_wallet && yt.fromJSON(e.web3_wallet), e.external_account); }
+}, tc = class In {
+    constructor(e, r, s, n, i, o, a, c, d, f, p, E, S, A, P, x, l, y, m, h, g, k) { this.id = e, this.status = r, this.requiredFields = s, this.optionalFields = n, this.missingFields = i, this.unverifiedFields = o, this.verifications = a, this.username = c, this.emailAddress = d, this.phoneNumber = f, this.web3Wallet = p, this.passwordEnabled = E, this.firstName = S, this.lastName = A, this.customAction = P, this.externalId = x, this.createdSessionId = l, this.createdUserId = y, this.abandonAt = m, this.legalAcceptedAt = h, this.publicMetadata = g, this.unsafeMetadata = k; }
+    static fromJSON(e) { return new In(e.id, e.status, e.required_fields, e.optional_fields, e.missing_fields, e.unverified_fields, e.verifications ? ec.fromJSON(e.verifications) : null, e.username, e.email_address, e.phone_number, e.web3_wallet, e.password_enabled, e.first_name, e.last_name, e.custom_action, e.external_id, e.created_session_id, e.created_user_id, e.abandon_at, e.legal_accepted_at, e.public_metadata, e.unsafe_metadata); }
+}, rc = class On {
+    constructor(e, r, s, n, i, o, a) { this.id = e, this.fromPhoneNumber = r, this.toPhoneNumber = s, this.message = n, this.status = i, this.phoneNumberId = o, this.data = a; }
+    static fromJSON(e) { return new On(e.id, e.from_phone_number, e.to_phone_number, e.message, e.status, e.phone_number_id, e.data); }
+}, sc = class Cn {
+    constructor(e) { this.jwt = e; }
+    static fromJSON(e) { return new Cn(e.jwt); }
+}, nc = class xn {
+    constructor(e, r, s) { this.id = e, this.web3Wallet = r, this.verification = s; }
+    static fromJSON(e) { return new xn(e.id, e.web3_wallet, e.verification && be.fromJSON(e.verification)); }
+}, ic = class Un {
+    constructor(e, r, s, n, i, o, a, c, d, f, p, E, S, A, P, x, l, y, m, h = {}, g = {}, k = {}, T = [], _ = [], O = [], q = [], z = [], D, J, H = null, V, Dt, Ee) { this.id = e, this.passwordEnabled = r, this.totpEnabled = s, this.backupCodeEnabled = n, this.twoFactorEnabled = i, this.banned = o, this.locked = a, this.createdAt = c, this.updatedAt = d, this.imageUrl = f, this.hasImage = p, this.primaryEmailAddressId = E, this.primaryPhoneNumberId = S, this.primaryWeb3WalletId = A, this.lastSignInAt = P, this.externalId = x, this.username = l, this.firstName = y, this.lastName = m, this.publicMetadata = h, this.privateMetadata = g, this.unsafeMetadata = k, this.emailAddresses = T, this.phoneNumbers = _, this.web3Wallets = O, this.externalAccounts = q, this.enterpriseAccounts = z, this.lastActiveAt = D, this.createOrganizationEnabled = J, this.createOrganizationsLimit = H, this.deleteSelfEnabled = V, this.legalAcceptedAt = Dt, this.locale = Ee, this._raw = null; }
+    get raw() { return this._raw; }
+    static fromJSON(e) { let r = new Un(e.id, e.password_enabled, e.totp_enabled, e.backup_code_enabled, e.two_factor_enabled, e.banned, e.locked, e.created_at, e.updated_at, e.image_url, e.has_image, e.primary_email_address_id, e.primary_phone_number_id, e.primary_web3_wallet_id, e.last_sign_in_at, e.external_id, e.username, e.first_name, e.last_name, e.public_metadata, e.private_metadata, e.unsafe_metadata, (e.email_addresses || []).map(s => qs.fromJSON(s)), (e.phone_numbers || []).map(s => mn.fromJSON(s)), (e.web3_wallets || []).map(s => nc.fromJSON(s)), (e.external_accounts || []).map(s => Ua.fromJSON(s)), (e.enterprise_accounts || []).map(s => Ws.fromJSON(s)), e.last_active_at, e.create_organization_enabled, e.create_organizations_limit, e.delete_self_enabled, e.legal_accepted_at, e.locale); return r._raw = e, r; }
+    get primaryEmailAddress() { return this.emailAddresses.find(({ id: e }) => e === this.primaryEmailAddressId) ?? null; }
+    get primaryPhoneNumber() { return this.phoneNumbers.find(({ id: e }) => e === this.primaryPhoneNumberId) ?? null; }
+    get primaryWeb3Wallet() { return this.web3Wallets.find(({ id: e }) => e === this.primaryWeb3WalletId) ?? null; }
+    get fullName() { return [this.firstName, this.lastName].join(" ").trim() || null; }
+}, oc = class Rn {
+    constructor(e, r, s, n, i, o, a) { this.id = e, this.emailAddress = r, this.status = s, this.invitation = n, this.createdAt = i, this.updatedAt = o, this.isLocked = a; }
+    static fromJSON(e) { return new Rn(e.id, e.email_address, e.status, e.invitation && Zs.fromJSON(e.invitation), e.created_at, e.updated_at, e.is_locked); }
+};
+function ac(t) { let e, r; return Array.isArray(t) ? { data: t.map(n => Ne(n)) } : uc(t) ? (e = t.m2m_tokens.map(s => Ne(s)), r = t.total_count, { data: e, totalCount: r }) : cc(t) ? (e = t.data.map(s => Ne(s)), r = t.total_count, { data: e, totalCount: r }) : { data: Ne(t) }; }
+function cc(t) { return !t || typeof t != "object" || !("data" in t) ? !1 : Array.isArray(t.data) && t.data !== void 0; }
+function uc(t) { return !t || typeof t != "object" || !("m2m_tokens" in t) ? !1 : Array.isArray(t.m2m_tokens); }
+function lc(t) { return t.total_count; }
+function Ne(t) { if (typeof t != "string" && "object" in t && "deleted" in t)
+    return Ea.fromJSON(t); switch (t.object) {
+    case w.AccountlessApplication: return pa.fromJSON(t);
+    case w.ActorToken: return ya.fromJSON(t);
+    case w.AllowlistIdentifier: return ga.fromJSON(t);
+    case w.ApiKey: return ka.fromJSON(t);
+    case w.BlocklistIdentifier: return _a.fromJSON(t);
+    case w.Client: return Sa.fromJSON(t);
+    case w.Cookies: return ba.fromJSON(t);
+    case w.Domain: return wa.fromJSON(t);
+    case w.EmailAddress: return qs.fromJSON(t);
+    case w.EnterpriseAccount: return Ws.fromJSON(t);
+    case w.Email: return Aa.fromJSON(t);
+    case w.IdpOAuthAccessToken: return is.fromJSON(t);
+    case w.Instance: return Ra.fromJSON(t);
+    case w.InstanceRestrictions: return qa.fromJSON(t);
+    case w.InstanceSettings: return Ma.fromJSON(t);
+    case w.Invitation: return Zs.fromJSON(t);
+    case w.JwtTemplate: return Na.fromJSON(t);
+    case w.Machine: return Ja.fromJSON(t);
+    case w.MachineScope: return La.fromJSON(t);
+    case w.MachineSecretKey: return Da.fromJSON(t);
+    case w.M2MToken: return os.fromJSON(t);
+    case w.OauthAccessToken: return Fa.fromJSON(t);
+    case w.OAuthApplication: return Ka.fromJSON(t);
+    case w.Organization: return an.fromJSON(t);
+    case w.OrganizationInvitation: return Ha.fromJSON(t);
+    case w.OrganizationMembership: return za.fromJSON(t);
+    case w.OrganizationSettings: return Ba.fromJSON(t);
+    case w.Permission: return fn.fromJSON(t);
+    case w.PhoneNumber: return mn.fromJSON(t);
+    case w.ProxyCheck: return ja.fromJSON(t);
+    case w.RedirectUrl: return Va.fromJSON(t);
+    case w.Role: return $a.fromJSON(t);
+    case w.RoleSet: return Qa.fromJSON(t);
+    case w.EnterpriseConnection: return xa.fromJSON(t);
+    case w.SamlConnection: return Ya.fromJSON(t);
+    case w.SignInToken: return Za.fromJSON(t);
+    case w.AgentTask: return ma.fromJSON(t);
+    case w.SignUpAttempt: return tc.fromJSON(t);
+    case w.Session: return bs.fromJSON(t);
+    case w.SmsMessage: return rc.fromJSON(t);
+    case w.Token: return sc.fromJSON(t);
+    case w.TotalCount: return lc(t);
+    case w.User: return ic.fromJSON(t);
+    case w.WaitlistEntry: return oc.fromJSON(t);
+    case w.BillingPlan: return Ls.fromJSON(t);
+    case w.BillingSubscription: return Pa.fromJSON(t);
+    case w.BillingSubscriptionItem: return Fs.fromJSON(t);
+    case w.Feature: return Ns.fromJSON(t);
+    default: return t;
+} }
+function ve(t) { return hc(async (r) => { let { secretKey: s, machineSecretKey: n, useMachineSecretKey: i = !1, requireSecretKey: o = !0, apiUrl: a = ts, apiVersion: c = rs, userAgent: d = ss, skipApiVersionInUrl: f = !1 } = t, { path: p, method: E, queryParams: S, headerParams: A, bodyParams: P, formData: x, options: l } = r, { deepSnakecaseBodyParamKeys: y = !1 } = l || {}; o && ns(s); let m = f ? u(a, p) : u(a, c, p), h = new URL(m); if (S) {
+    let _ = Qr({ ...S });
+    for (let [O, q] of Object.entries(_))
+        q && [q].flat().forEach(z => h.searchParams.append(O, z));
+} let g = new Headers({ "Clerk-API-Version": Pt, [v.Headers.UserAgent]: d, ...A }), k = v.Headers.Authorization; g.has(k) || (i && n ? g.set(k, `Bearer ${n}`) : s && g.set(k, `Bearer ${s}`)); let T; try {
+    if (x)
+        T = await t.fetch(h.href, { method: E, headers: g, body: x });
+    else {
+        g.set("Content-Type", "application/json");
+        let q = () => { if (!(E !== "GET" && P && Object.keys(P).length > 0))
+            return null; let D = J => Qr(J, { deep: y }); return { body: JSON.stringify(Array.isArray(P) ? P.map(D) : D(P)) }; };
+        T = await t.fetch(h.href, { method: E, headers: g, ...q() });
+    }
+    if (T.status === 204)
+        return { data: void 0, errors: null };
+    let O = await (T?.headers && T.headers?.get(v.Headers.ContentType) === v.ContentTypes.Json ? T.json() : T.text());
+    return T.ok ? { ...ac(O), errors: null } : { data: null, errors: Xr(O), status: T?.status, statusText: T?.statusText, clerkTraceId: gt(O, T?.headers), retryAfter: Yr(T?.headers) };
+}
+catch (_) {
+    return _ instanceof Error ? { data: null, errors: [{ code: "unexpected_error", message: _.message || "Unexpected error" }], clerkTraceId: gt(_, T?.headers) } : { data: null, errors: Xr(_), status: T?.status, statusText: T?.statusText, clerkTraceId: gt(_, T?.headers), retryAfter: Yr(T?.headers) };
+} }); }
+function gt(t, e) { return t && typeof t == "object" && "clerk_trace_id" in t && typeof t.clerk_trace_id == "string" ? t.clerk_trace_id : e?.get("cf-ray") || ""; }
+function Yr(t) { let e = t?.get("Retry-After"); if (!e)
+    return; let r = parseInt(e, 10); if (!isNaN(r))
+    return r; }
+function Xr(t) { if (t && typeof t == "object" && "errors" in t) {
+    let e = t.errors;
+    return e.length > 0 ? e.map(Qe) : [];
+} return []; }
+function hc(t) { return async (...e) => { let { data: r, errors: s, totalCount: n, status: i, statusText: o, clerkTraceId: a, retryAfter: c } = await t(...e); if (s) {
+    let d = new pe(o || "", { data: [], status: i, clerkTraceId: a, retryAfter: c });
+    throw d.errors = s, d;
+} return typeof n < "u" ? { data: r, totalCount: n } : r; }; }
+function he(t) { let e = ve(t); return { __experimental_accountlessApplications: new to(ve({ ...t, requireSecretKey: !1 })), actorTokens: new Zi(e), agentTasks: new eo(e), allowlistIdentifiers: new ro(e), apiKeys: new so(ve({ ...t, skipApiVersionInUrl: !0 })), betaFeatures: new io(e), blocklistIdentifiers: new oo(e), billing: new sa(e), clients: new ao(e), domains: new co(e), emailAddresses: new uo(e), emails: new ho(e), enterpriseConnections: new fo(e), idPOAuthAccessToken: new mo(ve({ ...t, skipApiVersionInUrl: !0 })), instance: new yo(e), invitations: new go(e), jwks: new Mo(e), jwtTemplates: new No(e), machines: new ko(e), m2m: new Ro(ve({ ...t, skipApiVersionInUrl: !0, requireSecretKey: !1, useMachineSecretKey: !0 }), { secretKey: t.secretKey, apiUrl: t.apiUrl, jwtKey: t.jwtKey, fetch: t.fetch }), oauthApplications: new Fo(e), organizations: new Jo(e), organizationPermissions: new Lo(e), organizationRoles: new Do(e), phoneNumbers: new Ko(e), proxyChecks: new zo(e), redirectUrls: new Wo(e), roleSets: new Bo(e), sessions: new Vo(e), signInTokens: new $o(e), signUps: new Go(e), testingTokens: new Yo(e), users: new Xo(e), waitlistEntries: new Zo(e), webhooks: new ea(e), samlConnections: new jo(e) }; }
+var ze = t => () => { let e = { ...t }; return e.secretKey = (e.secretKey || "").substring(0, 7), e.jwtKey = (e.jwtKey || "").substring(0, 7), e.sessionToken = (e.sessionToken || "").substring(0, 7), e.tokenInHeader = (e.tokenInHeader || "").substring(0, 7), e.sessionTokenInCookie = (e.sessionTokenInCookie || "").substring(0, 7), e.refreshTokenInCookie = (e.refreshTokenInCookie || "").substring(0, 7), e.devBrowserToken = (e.devBrowserToken || "").substring(0, 7), e.handshakeToken = (e.handshakeToken || "").substring(0, 7), { ...e }; };
+function dc(t, e, r) { let { actor: s, sessionId: n, sessionStatus: i, userId: o, orgId: a, orgRole: c, orgSlug: d, orgPermissions: f, factorVerificationAge: p } = Cr(r), E = he(t), S = yc({ sessionId: n, sessionToken: e, fetcher: async (A, P, x) => (await E.sessions.getToken(A, P || "", x)).jwt }); return { tokenType: b.SessionToken, actor: s, sessionClaims: r, sessionId: n, sessionStatus: i, userId: o, orgId: a, orgRole: c, orgSlug: d, orgPermissions: f, factorVerificationAge: p, getToken: S, has: Or({ orgId: a, orgRole: c, orgPermissions: f, userId: o, factorVerificationAge: p, features: r.fea || "", plans: r.pla || "" }), debug: ze({ ...t, sessionToken: e }), isAuthenticated: !0 }; }
+function qn(t, e) { return { tokenType: b.SessionToken, sessionClaims: null, sessionId: null, sessionStatus: e ?? null, userId: null, actor: null, orgId: null, orgRole: null, orgSlug: null, orgPermissions: null, factorVerificationAge: null, getToken: () => Promise.resolve(null), has: () => !1, debug: ze(t), isAuthenticated: !1 }; }
+function fc(t, e, r, s) { let n = { id: r.id, subject: r.subject, getToken: () => Promise.resolve(e), has: () => !1, debug: ze(s), isAuthenticated: !0 }; switch (t) {
+    case b.ApiKey: {
+        let i = r;
+        return { ...n, tokenType: t, name: i.name, claims: i.claims, scopes: i.scopes, userId: i.subject.startsWith("user_") ? i.subject : null, orgId: i.subject.startsWith("org_") ? i.subject : null };
+    }
+    case b.M2MToken: {
+        let i = r;
+        return { ...n, tokenType: t, claims: i.claims, scopes: i.scopes, machineId: i.subject };
+    }
+    case b.OAuthToken: {
+        let i = r;
+        return { ...n, tokenType: t, scopes: i.scopes, userId: i.subject, clientId: i.clientId };
+    }
+    default: throw new Error(`Invalid token type: ${t}`);
+} }
+function pc(t, e) { let r = { id: null, subject: null, scopes: null, has: () => !1, getToken: () => Promise.resolve(null), debug: ze(e), isAuthenticated: !1 }; switch (t) {
+    case b.ApiKey: return { ...r, tokenType: t, name: null, claims: null, scopes: null, userId: null, orgId: null };
+    case b.M2MToken: return { ...r, tokenType: t, claims: null, scopes: null, machineId: null };
+    case b.OAuthToken: return { ...r, tokenType: t, scopes: null, userId: null, clientId: null };
+    default: throw new Error(`Invalid token type: ${t}`);
+} }
+function mc() { return { isAuthenticated: !1, tokenType: null, getToken: () => Promise.resolve(null), has: () => !1, debug: () => ({}) }; }
+var yc = t => { let { fetcher: e, sessionToken: r, sessionId: s } = t || {}; return async (n = {}) => s ? n.template || n.expiresInSeconds !== void 0 ? e(s, n.template, n.expiresInSeconds) : r : null; };
+var Te = { SignedIn: "signed-in", SignedOut: "signed-out", Handshake: "handshake" }, M = { ClientUATWithoutSessionToken: "client-uat-but-no-session-token", DevBrowserMissing: "dev-browser-missing", DevBrowserSync: "dev-browser-sync", PrimaryRespondsToSyncing: "primary-responds-to-syncing", PrimaryDomainCrossOriginSync: "primary-domain-cross-origin-sync", SatelliteCookieNeedsSyncing: "satellite-needs-syncing", SessionTokenAndUATMissing: "session-token-and-uat-missing", SessionTokenMissing: "session-token-missing", SessionTokenExpired: "session-token-expired", SessionTokenIATBeforeClientUAT: "session-token-iat-before-client-uat", SessionTokenNBF: "session-token-nbf", SessionTokenIatInTheFuture: "session-token-iat-in-the-future", SessionTokenWithoutClientUAT: "session-token-but-no-client-uat", ActiveOrganizationMismatch: "active-organization-mismatch", TokenTypeMismatch: "token-type-mismatch", UnexpectedError: "unexpected-error" };
+function X(t) { let { authenticateContext: e, headers: r = new Headers, token: s } = t, n = (({ treatPendingAsSignedOut: i = !0 } = {}) => { if (t.tokenType === b.SessionToken) {
+    let { sessionClaims: a } = t, c = dc(e, s, a);
+    return i && c.sessionStatus === "pending" ? qn(void 0, c.sessionStatus) : c;
+} let { machineData: o } = t; return fc(t.tokenType, s, o, e); }); return { status: Te.SignedIn, reason: null, message: null, proxyUrl: e.proxyUrl || "", publishableKey: e.publishableKey || "", isSatellite: e.isSatellite || !1, domain: e.domain || "", signInUrl: e.signInUrl || "", signUpUrl: e.signUpUrl || "", afterSignInUrl: e.afterSignInUrl || "", afterSignUpUrl: e.afterSignUpUrl || "", isSignedIn: !0, isAuthenticated: !0, tokenType: t.tokenType, toAuth: n, headers: r, token: s }; }
+function F(t) { let { authenticateContext: e, headers: r = new Headers, reason: s, message: n = "", tokenType: i } = t, o = (() => i === b.SessionToken ? qn({ ...e, status: Te.SignedOut, reason: s, message: n }) : pc(i, { reason: s, message: n, headers: r })); return Mt({ status: Te.SignedOut, reason: s, message: n, proxyUrl: e.proxyUrl || "", publishableKey: e.publishableKey || "", isSatellite: e.isSatellite || !1, domain: e.domain || "", signInUrl: e.signInUrl || "", signUpUrl: e.signUpUrl || "", afterSignInUrl: e.afterSignInUrl || "", afterSignUpUrl: e.afterSignUpUrl || "", isSignedIn: !1, isAuthenticated: !1, tokenType: i, toAuth: o, headers: r, token: null }); }
+function gc(t, e, r = "", s) { return Mt({ status: Te.Handshake, reason: e, message: r, publishableKey: t.publishableKey || "", isSatellite: t.isSatellite || !1, domain: t.domain || "", proxyUrl: t.proxyUrl || "", signInUrl: t.signInUrl || "", signUpUrl: t.signUpUrl || "", afterSignInUrl: t.afterSignInUrl || "", afterSignUpUrl: t.afterSignUpUrl || "", isSignedIn: !1, isAuthenticated: !1, tokenType: b.SessionToken, toAuth: () => null, headers: s, token: null }); }
+function kc() { let t = mc(); return Mt({ status: Te.SignedOut, reason: M.TokenTypeMismatch, message: "", proxyUrl: "", publishableKey: "", isSatellite: !1, domain: "", signInUrl: "", signUpUrl: "", afterSignInUrl: "", afterSignUpUrl: "", isSignedIn: !1, isAuthenticated: !1, tokenType: null, toAuth: () => t, headers: new Headers, token: null }); }
+var Mt = t => { let e = new Headers(t.headers || {}); if (t.message)
+    try {
+        e.set(v.Headers.AuthMessage, t.message);
+    }
+    catch { } if (t.reason)
+    try {
+        e.set(v.Headers.AuthReason, t.reason);
+    }
+    catch { } if (t.status)
+    try {
+        e.set(v.Headers.AuthStatus, t.status);
+    }
+    catch { } return t.headers = e, t; }, _c = kr(Ki()), vc = class extends URL {
+    isCrossOrigin(t) { return this.origin !== new URL(t.toString()).origin; }
+}, kt = (...t) => new vc(...t), Sc = class extends Request {
+    constructor(t, e) { let r = typeof t != "string" && "url" in t ? t.url : String(t), s; e ? s = e : typeof t != "string" && (s = new Proxy(t, { get(n, i) { if (!(i === "signal" || i === "body"))
+            return Reflect.get(n, i, n); } })), super(r, s), this.clerkUrl = this.deriveUrlFromHeaders(this), this.cookies = this.parseCookies(this); }
+    toJSON() { return { url: this.clerkUrl.href, method: this.method, headers: JSON.stringify(Object.fromEntries(this.headers)), clerkUrl: this.clerkUrl.toString(), cookies: JSON.stringify(Object.fromEntries(this.cookies)) }; }
+    deriveUrlFromHeaders(t) { let e = new URL(t.url), r = t.headers.get(v.Headers.ForwardedProto), s = t.headers.get(v.Headers.ForwardedHost), n = t.headers.get(v.Headers.Host), i = e.protocol, o = this.getFirstValueFromHeader(s) ?? n, a = this.getFirstValueFromHeader(r) ?? i?.replace(/[:/]/, ""), c = o && a ? `${a}://${o}` : e.origin; if (c === e.origin)
+        return kt(e); try {
+        return kt(e.pathname + e.search, c);
+    }
+    catch {
+        return kt(e);
+    } }
+    getFirstValueFromHeader(t) { return t?.split(",")[0]; }
+    parseCookies(t) { let e = (0, _c.parse)(this.decodeCookieValue(t.headers.get("cookie") || "")); return new Map(Object.entries(e)); }
+    decodeCookieValue(t) { return t && t.replace(/(%[0-9A-Z]{2})+/g, decodeURIComponent); }
+}, Tc = (...t) => t[0] && typeof t[0] == "object" && "clerkUrl" in t[0] && "cookies" in t[0] ? t[0] : new Sc(...t), Mn = t => t.split(";")[0]?.split("=")[0], Nn = t => t.split(";")[0]?.split("=")[1];
+async function Z(t, e) { let { data: r, errors: s } = K(t); if (s)
+    return { errors: s }; let { header: n } = r, { kid: i } = n; if (n.cat === us)
+    return { errors: [new U({ action: L.EnsureClerkJWT, reason: I.TokenInvalid, message: "Invalid session token category." })] }; try {
+    let o;
+    if (e.jwtKey)
+        o = It({ kid: i, pem: e.jwtKey });
+    else if (e.secretKey)
+        o = await Ot({ ...e, kid: i });
+    else
+        return { errors: [new U({ action: L.SetClerkJWTKey, message: "Failed to resolve JWK during verification.", reason: I.JWKFailedToResolve })] };
+    return await it(t, { ...e, key: o });
+}
+catch (o) {
+    return { errors: [o] };
+} }
+function Nt(t, e, r) { if (Pe(e)) {
+    let s, n;
+    switch (e.status) {
+        case 401:
+            s = W.InvalidSecretKey, n = e.errors[0]?.message || "Invalid secret key";
+            break;
+        case 404:
+            s = W.TokenInvalid, n = r;
+            break;
+        default: s = W.UnexpectedError, n = "Unexpected error";
+    }
+    return { data: void 0, tokenType: t, errors: [new B({ message: n, code: s, status: e.status })] };
+} return { data: void 0, tokenType: t, errors: [new B({ message: "Unexpected error", code: W.UnexpectedError, status: e.status })] }; }
+async function bc(t, e) { try {
+    return { data: await he(e).m2m.verify({ token: t }), tokenType: b.M2MToken, errors: void 0 };
+}
+catch (r) {
+    return Nt(b.M2MToken, r, "Machine token not found");
+} }
+async function Ec(t, e) { try {
+    return { data: await he(e).idPOAuthAccessToken.verify(t), tokenType: b.OAuthToken, errors: void 0 };
+}
+catch (r) {
+    return Nt(b.OAuthToken, r, "OAuth token not found");
+} }
+async function wc(t, e) { try {
+    return { data: await he(e).apiKeys.verify(t), tokenType: b.ApiKey, errors: void 0 };
+}
+catch (r) {
+    return Nt(b.ApiKey, r, "API key not found");
+} }
+async function Zr(t, e) { if (Rt(t)) {
+    let r;
+    try {
+        let { data: s, errors: n } = K(t);
+        if (n)
+            throw n[0];
+        r = s;
+    }
+    catch (s) {
+        return { data: void 0, tokenType: b.M2MToken, errors: [new B({ code: W.TokenInvalid, message: s.message })] };
+    }
+    return typeof r.payload.sub == "string" && r.payload.sub.startsWith(cs) ? ds(t, r, e) : De.includes(r.header.typ) ? Uo(t, r, e) : { data: void 0, tokenType: b.OAuthToken, errors: [new B({ code: W.TokenVerificationFailed, message: `Invalid JWT type: ${r.header.typ ?? "missing"}. Expected one of: ${De.join(", ")} for OAuth, or sub starting with 'mch_' for M2M` })] };
+} if (t.startsWith(Ct))
+    return bc(t, e); if (t.startsWith(xt))
+    return Ec(t, e); if (t.startsWith(Ut))
+    return wc(t, e); throw new Error("Unknown machine token type"); }
+async function Ac(t, { key: e }) { let { data: r, errors: s } = K(t); if (s)
+    throw s[0]; let { header: n, payload: i } = r, { typ: o, alg: a } = n; rt(o), st(a); let { data: c, errors: d } = await nt(r, e); if (d)
+    throw new U({ reason: I.TokenVerificationFailed, message: `Error verifying handshake token. ${d[0]}` }); if (!c)
+    throw new U({ reason: I.TokenInvalidSignature, message: "Handshake signature is invalid." }); return i; }
+async function Pc(t, e) { let { secretKey: r, apiUrl: s, apiVersion: n, jwksCacheTtlInMs: i, jwtKey: o, skipJwksCache: a } = e, { data: c, errors: d } = K(t); if (d)
+    throw d[0]; let { kid: f } = c.header, p; if (o)
+    p = It({ kid: f, pem: o });
+else if (r)
+    p = await Ot({ secretKey: r, apiUrl: s, apiVersion: n, kid: f, jwksCacheTtlInMs: i, skipJwksCache: a, fetch: e.fetch });
+else
+    throw new U({ action: L.SetClerkJWTKey, message: "Failed to resolve JWK during handshake verification.", reason: I.JWKFailedToResolve }); return Ac(t, { key: p }); }
+var Ic = class {
+    constructor(t, e, r) { this.authenticateContext = t, this.options = e, this.organizationMatcher = r; }
+    isRequestEligibleForHandshake() { let { accept: t, method: e, secFetchDest: r } = this.authenticateContext; return e !== "GET" ? !1 : !!(r === "document" || r === "iframe" || !r && t?.startsWith("text/html")); }
+    buildRedirectToHandshake(t) { if (!this.authenticateContext?.clerkUrl)
+        throw new Error("Missing clerkUrl in authenticateContext"); let e = this.removeDevBrowserFromURL(this.authenticateContext.clerkUrl), r = this.authenticateContext.frontendApi.startsWith("http") ? this.authenticateContext.frontendApi : `https://${this.authenticateContext.frontendApi}`; r = r.replace(/\/+$/, "") + "/"; let s = new URL("v1/client/handshake", r); s.searchParams.append("redirect_url", e?.href || ""), s.searchParams.append("__clerk_api_version", Pt), s.searchParams.append(v.QueryParameters.SuffixedCookies, this.authenticateContext.usesSuffixedCookies().toString()), s.searchParams.append(v.QueryParameters.HandshakeReason, t), s.searchParams.append(v.QueryParameters.HandshakeFormat, "nonce"), this.authenticateContext.sessionToken && s.searchParams.append(v.QueryParameters.Session, this.authenticateContext.sessionToken), this.authenticateContext.instanceType === "development" && this.authenticateContext.devBrowserToken && s.searchParams.append(v.QueryParameters.DevBrowser, this.authenticateContext.devBrowserToken); let n = this.getOrganizationSyncTarget(this.authenticateContext.clerkUrl, this.organizationMatcher); return n && this.getOrganizationSyncQueryParams(n).forEach((o, a) => { s.searchParams.append(a, o); }), new Headers({ [v.Headers.Location]: s.href }); }
+    async getCookiesFromHandshake() { let t = []; if (this.authenticateContext.handshakeNonce)
+        try {
+            let e = await this.authenticateContext.apiClient?.clients.getHandshakePayload({ nonce: this.authenticateContext.handshakeNonce });
+            e && t.push(...e.directives);
+        }
+        catch (e) {
+            oe(e);
+        }
+    else if (this.authenticateContext.handshakeToken) {
+        let e = await Pc(this.authenticateContext.handshakeToken, this.authenticateContext);
+        e && Array.isArray(e.handshake) && t.push(...e.handshake);
+    } return t; }
+    async resolveHandshake() { let t = new Headers({ "Access-Control-Allow-Origin": "null", "Access-Control-Allow-Credentials": "true" }), e = await this.getCookiesFromHandshake(), r = ""; if (e.forEach(i => { t.append("Set-Cookie", i), Mn(i).startsWith(v.Cookies.Session) && (r = Nn(i)); }), this.authenticateContext.instanceType === "development") {
+        let i = new URL(this.authenticateContext.clerkUrl);
+        i.searchParams.delete(v.QueryParameters.Handshake), i.searchParams.delete(v.QueryParameters.HandshakeHelp), i.searchParams.delete(v.QueryParameters.DevBrowser), i.searchParams.delete(v.QueryParameters.HandshakeNonce), t.append(v.Headers.Location, i.toString()), t.set(v.Headers.CacheControl, "no-store");
+    } if (r === "")
+        return F({ tokenType: b.SessionToken, authenticateContext: this.authenticateContext, reason: M.SessionTokenMissing, message: "", headers: t }); let { data: s, errors: [n] = [] } = await Z(r, this.authenticateContext); if (s)
+        return X({ tokenType: b.SessionToken, authenticateContext: this.authenticateContext, sessionClaims: s, headers: t, token: r }); if (this.authenticateContext.instanceType === "development" && (n?.reason === I.TokenExpired || n?.reason === I.TokenNotActiveYet || n?.reason === I.TokenIatInTheFuture)) {
+        let i = new U({ action: n.action, message: n.message, reason: n.reason });
+        i.tokenCarrier = "cookie", oe();
+        let { data: o, errors: [a] = [] } = await Z(r, { ...this.authenticateContext, clockSkewInMs: 864e5 });
+        if (o)
+            return X({ tokenType: b.SessionToken, authenticateContext: this.authenticateContext, sessionClaims: o, headers: t, token: r });
+        throw new Error(a?.message || "Clerk: Handshake retry failed.");
+    } throw new Error(n?.message || "Clerk: Handshake failed."); }
+    handleTokenVerificationErrorInDevelopment(t) { if (t.reason === I.TokenInvalidSignature) {
+        let e = "Clerk: Handshake token verification failed due to an invalid signature. If you have switched Clerk keys locally, clear your cookies and try again.";
+        throw new Error(e);
+    } throw new Error(`Clerk: Handshake token verification failed: ${t.getFullMessage()}.`); }
+    checkAndTrackRedirectLoop(t) { if (this.authenticateContext.handshakeRedirectLoopCounter === 3)
+        return !0; let e = this.authenticateContext.handshakeRedirectLoopCounter + 1, r = v.Cookies.RedirectCount; return t.append("Set-Cookie", `${r}=${e}; SameSite=Lax; HttpOnly; Max-Age=2`), !1; }
+    removeDevBrowserFromURL(t) { let e = new URL(t); return e.searchParams.delete(v.QueryParameters.DevBrowser), e.searchParams.delete(v.QueryParameters.LegacyDevBrowser), e; }
+    getOrganizationSyncTarget(t, e) { return e.findTarget(t); }
+    getOrganizationSyncQueryParams(t) { let e = new Map; return t.type === "personalAccount" && e.set("organization_id", ""), t.type === "organization" && (t.organizationId && e.set("organization_id", t.organizationId), t.organizationSlug && e.set("organization_id", t.organizationSlug)), e; }
+}, Oc = class {
+    constructor(t) { this.organizationPattern = this.createMatcher(t?.organizationPatterns), this.personalAccountPattern = this.createMatcher(t?.personalAccountPatterns); }
+    createMatcher(t) { if (!t)
+        return null; try {
+        return ht(t);
+    }
+    catch (e) {
+        throw new Error(`Invalid pattern "${t}": ${e}`);
+    } }
+    findTarget(t) { let e = this.findOrganizationTarget(t); return e || this.findPersonalAccountTarget(t); }
+    findOrganizationTarget(t) { if (!this.organizationPattern)
+        return null; try {
+        let e = this.organizationPattern(t.pathname);
+        if (!e || !("params" in e))
+            return null;
+        let r = e.params;
+        return r.id ? { type: "organization", organizationId: r.id } : r.slug ? { type: "organization", organizationSlug: r.slug } : null;
+    }
+    catch (e) {
+        return oe(e), null;
+    } }
+    findPersonalAccountTarget(t) { if (!this.personalAccountPattern)
+        return null; try {
+        return this.personalAccountPattern(t.pathname) ? { type: "personalAccount" } : null;
+    }
+    catch (e) {
+        return oe(e), null;
+    } }
+}, j = { NonEligibleNoCookie: "non-eligible-no-refresh-cookie", NonEligibleNonGet: "non-eligible-non-get", InvalidSessionToken: "invalid-session-token", MissingApiClient: "missing-api-client", MissingSessionToken: "missing-session-token", MissingRefreshToken: "missing-refresh-token", ExpiredSessionTokenDecodeFailed: "expired-session-token-decode-failed", ExpiredSessionTokenMissingSidClaim: "expired-session-token-missing-sid-claim", FetchError: "fetch-error", UnexpectedSDKError: "unexpected-sdk-error", UnexpectedBAPIError: "unexpected-bapi-error" };
+function Cc(t, e) { if (!t && Be(e))
+    throw new Error("Missing signInUrl. Pass a signInUrl for dev instances if an app is satellite"); }
+function xc(t) { if (!t)
+    throw new Error("Missing domain and proxyUrl. A satellite application needs to specify a domain or a proxyUrl"); }
+function Uc(t, e) { let r; try {
+    r = new URL(t);
+}
+catch {
+    throw new Error("The signInUrl needs to have a absolute url format.");
+} if (r.origin === e)
+    throw new Error("The signInUrl needs to be on a different origin than your satellite application."); }
+function Rc(t) { if (!t.machineSecretKey && !t.secretKey)
+    throw new Error("Machine token authentication requires either a Machine secret key or a Clerk secret key. Ensure a Clerk secret key or Machine secret key is set."); }
+function qc(t, e, r) { return t.reason === I.TokenExpired && !!e.refreshTokenInCookie && r.method === "GET"; }
+function es(t, e, r) { return ls(t, e) ? null : F({ tokenType: typeof e == "string" ? e : t, authenticateContext: r, reason: M.TokenTypeMismatch }); }
+function Mc(t, e) { let r = null, { tokenInHeader: s } = e; s && (bt(s) ? r = Et(s) : r = b.SessionToken); let n = r ?? b.SessionToken; return ls(n, t); }
+var Nc = (async (t, e) => { let r = await Qi(Tc(t), e), s = e.acceptsToken ?? b.SessionToken; s !== b.M2MToken && (ns(r.secretKey), r.isSatellite && (Cc(r.signInUrl, r.secretKey), r.signInUrl && r.origin && Uc(r.signInUrl, r.origin), xc(r.proxyUrl || r.domain))), s === b.M2MToken && Rc(r); let n = new Oc(e.organizationSyncOptions), i = new Ic(r, { organizationSyncOptions: e.organizationSyncOptions }, n); async function o(l) { if (!e.apiClient)
+    return { data: null, error: { message: "An apiClient is needed to perform token refresh.", cause: { reason: j.MissingApiClient } } }; let { sessionToken: y, refreshTokenInCookie: m } = l; if (!y)
+    return { data: null, error: { message: "Session token must be provided.", cause: { reason: j.MissingSessionToken } } }; if (!m)
+    return { data: null, error: { message: "Refresh token must be provided.", cause: { reason: j.MissingRefreshToken } } }; let { data: h, errors: g } = K(y); if (!h || g)
+    return { data: null, error: { message: "Unable to decode the expired session token.", cause: { reason: j.ExpiredSessionTokenDecodeFailed, errors: g } } }; if (!h?.payload?.sid)
+    return { data: null, error: { message: "Expired session token is missing the `sid` claim.", cause: { reason: j.ExpiredSessionTokenMissingSidClaim } } }; try {
+    return { data: (await e.apiClient.sessions.refreshSession(h.payload.sid, { format: "cookie", suffixed_cookies: l.usesSuffixedCookies(), expired_token: y || "", refresh_token: m || "", request_origin: l.clerkUrl.origin, request_headers: Object.fromEntries(Array.from(t.headers.entries()).map(([T, _]) => [T, [_]])) })).cookies, error: null };
+}
+catch (k) {
+    return k?.errors?.length ? k.errors[0].code === "unexpected_error" ? { data: null, error: { message: "Fetch unexpected error", cause: { reason: j.FetchError, errors: k.errors } } } : { data: null, error: { message: k.errors[0].code, cause: { reason: k.errors[0].code, errors: k.errors } } } : { data: null, error: { message: "Unexpected Server/BAPI error", cause: { reason: j.UnexpectedBAPIError, errors: [k] } } };
+} } async function a(l) { let { data: y, error: m } = await o(l); if (!y || y.length === 0)
+    return { data: null, error: m }; let h = new Headers, g = ""; y.forEach(_ => { h.append("Set-Cookie", _), Mn(_).startsWith(v.Cookies.Session) && (g = Nn(_)); }); let { data: k, errors: T } = await Z(g, l); return T ? { data: null, error: { message: "Clerk: unable to verify refreshed session token.", cause: { reason: j.InvalidSessionToken, errors: T } } } : { data: { jwtPayload: k, sessionToken: g, headers: h }, error: null }; } function c(l, y, m, h) { if (!i.isRequestEligibleForHandshake())
+    return F({ tokenType: b.SessionToken, authenticateContext: l, reason: y, message: m }); let g = h ?? i.buildRedirectToHandshake(y); if (g.get(v.Headers.Location) && g.set(v.Headers.CacheControl, "no-store"), i.checkAndTrackRedirectLoop(g)) {
+    let T = d(y);
+    return oe(), F({ tokenType: b.SessionToken, authenticateContext: l, reason: y, message: m });
+} return gc(l, y, m, g); } function d(l) { return l === M.SatelliteCookieNeedsSyncing ? "Clerk: Satellite-domain authentication resulted in an infinite redirect loop. Check that this request is using a configured primary or satellite domain for the production instance. For preview deployments, use a development/staging Clerk instance or a supported configured preview-domain setup." : "Clerk: Refreshing the session token resulted in an infinite redirect loop. This usually means that your Clerk instance keys do not match - make sure to copy the correct publishable and secret keys from the Clerk dashboard."; } function f(l, y) { let m = n.findTarget(l.clerkUrl); if (!m)
+    return null; let h = !1; if (m.type === "organization" && (m.organizationSlug && m.organizationSlug !== y.orgSlug && (h = !0), m.organizationId && m.organizationId !== y.orgId && (h = !0)), m.type === "personalAccount" && y.orgId && (h = !0), !h)
+    return null; if (l.handshakeRedirectLoopCounter >= 3)
+    return oe(), null; let g = c(l, M.ActiveOrganizationMismatch, ""); return g.status !== "handshake" ? null : g; } async function p() { let { tokenInHeader: l } = r; if (Lr(l))
+    return F({ tokenType: b.SessionToken, authenticateContext: r, reason: M.TokenTypeMismatch, message: "" }); try {
+    let { data: y, errors: m } = await Z(l, r);
+    if (m)
+        throw m[0];
+    return X({ tokenType: b.SessionToken, authenticateContext: r, sessionClaims: y, headers: new Headers, token: l });
+}
+catch (y) {
+    return S(y, "header");
+} } async function E() { let l = r.clientUat, y = !!r.sessionTokenInCookie, m = !!r.devBrowserToken; if (r.handshakeNonce || r.handshakeToken)
+    try {
+        return await i.resolveHandshake();
+    }
+    catch (J) {
+        J instanceof U && r.instanceType === "development" ? i.handleTokenVerificationErrorInDevelopment(J) : oe(J);
+    } let h = r.isSatellite && r.secFetchDest === "document" && r.method === "GET", g = r.clerkUrl.searchParams.get(v.QueryParameters.ClerkSynced), k = g === v.ClerkSyncStatus.NeedsSync, T = g === v.ClerkSyncStatus.Completed, _ = y || l, O = r.satelliteAutoSync !== !0 && !_ && !k; if (r.instanceType === "production" && h && !T) {
+    if (O)
+        return F({ tokenType: b.SessionToken, authenticateContext: r, reason: M.SessionTokenAndUATMissing });
+    if (!_ || k)
+        return c(r, M.SatelliteCookieNeedsSyncing, "");
+} if (r.instanceType === "development" && h && !T) {
+    if (O)
+        return F({ tokenType: b.SessionToken, authenticateContext: r, reason: M.SessionTokenAndUATMissing });
+    if (!_ || k) {
+        let J = new URL(r.signInUrl);
+        J.searchParams.append(v.QueryParameters.ClerkRedirectUrl, r.clerkUrl.toString());
+        let H = new Headers({ [v.Headers.Location]: J.toString() });
+        return c(r, M.SatelliteCookieNeedsSyncing, "", H);
+    }
+} let q = new URL(r.clerkUrl).searchParams.get(v.QueryParameters.ClerkRedirectUrl); if (r.instanceType === "development" && !r.isSatellite && q) {
+    let J = new URL(q);
+    r.devBrowserToken && J.searchParams.append(v.QueryParameters.DevBrowser, r.devBrowserToken), J.searchParams.set(v.QueryParameters.ClerkSynced, v.ClerkSyncStatus.Completed);
+    let H = new Headers({ [v.Headers.Location]: J.toString() });
+    return c(r, M.PrimaryRespondsToSyncing, "", H);
+} if (r.instanceType === "development" && r.clerkUrl.searchParams.has(v.QueryParameters.DevBrowser))
+    return c(r, M.DevBrowserSync, ""); if (r.instanceType === "development" && !m)
+    return c(r, M.DevBrowserMissing, ""); if (!l && !y)
+    return F({ tokenType: b.SessionToken, authenticateContext: r, reason: M.SessionTokenAndUATMissing }); if (!l && y)
+    return c(r, M.SessionTokenWithoutClientUAT, ""); if (l && !y)
+    return c(r, M.ClientUATWithoutSessionToken, ""); let { data: z, errors: D } = K(r.sessionTokenInCookie); if (D)
+    return S(D[0], "cookie"); if (Lr(r.sessionTokenInCookie))
+    return F({ tokenType: b.SessionToken, authenticateContext: r, reason: M.TokenTypeMismatch, message: "" }); if (z.payload.iat < r.clientUat)
+    return c(r, M.SessionTokenIATBeforeClientUAT, ""); try {
+    let { data: J, errors: H } = await Z(r.sessionTokenInCookie, r);
+    if (H)
+        throw H[0];
+    J.azp || Sr.warnOnce("Clerk: Session token from cookie is missing the azp claim. In a future version of Clerk, this token will be considered invalid. Please contact Clerk support if you see this warning.");
+    let V = X({ tokenType: b.SessionToken, authenticateContext: r, sessionClaims: J, headers: new Headers, token: r.sessionTokenInCookie });
+    if (!r.isSatellite && r.method === "GET" && r.secFetchDest === "document" && r.isCrossOriginReferrer() && !r.isKnownClerkReferrer() && r.handshakeRedirectLoopCounter === 0)
+        return c(r, M.PrimaryDomainCrossOriginSync, "Cross-origin request from satellite domain requires handshake");
+    let Ee = V.toAuth();
+    if (Ee.userId) {
+        let Ft = f(r, Ee);
+        if (Ft)
+            return Ft;
+    }
+    return V;
+}
+catch (J) {
+    return S(J, "cookie");
+} return F({ tokenType: b.SessionToken, authenticateContext: r, reason: M.UnexpectedError }); } async function S(l, y) { if (!(l instanceof U))
+    return F({ tokenType: b.SessionToken, authenticateContext: r, reason: M.UnexpectedError }); let m; if (qc(l, r, t)) {
+    let { data: g, error: k } = await a(r);
+    if (g)
+        return X({ tokenType: b.SessionToken, authenticateContext: r, sessionClaims: g.jwtPayload, headers: g.headers, token: g.sessionToken });
+    k?.cause?.reason ? m = k.cause.reason : m = j.UnexpectedSDKError;
+}
+else
+    t.method !== "GET" ? m = j.NonEligibleNonGet : r.refreshTokenInCookie ? m = null : m = j.NonEligibleNoCookie; return l.tokenCarrier = y, [I.TokenExpired, I.TokenNotActiveYet, I.TokenIatInTheFuture].includes(l.reason) ? c(r, Lc({ tokenError: l.reason, refreshError: m }), l.getFullMessage()) : F({ tokenType: b.SessionToken, authenticateContext: r, reason: l.reason, message: l.getFullMessage() }); } function A(l, y) { return y instanceof B ? F({ tokenType: l, authenticateContext: r, reason: y.code, message: y.getFullMessage() }) : F({ tokenType: l, authenticateContext: r, reason: M.UnexpectedError }); } async function P() { let { tokenInHeader: l } = r; if (!l)
+    return S(new Error("Missing token in header"), "header"); if (!bt(l))
+    return F({ tokenType: s, authenticateContext: r, reason: M.TokenTypeMismatch, message: "" }); let y = Et(l), m = es(y, s, r); if (m)
+    return m; let { data: h, tokenType: g, errors: k } = await Zr(l, r); return k ? A(g, k[0]) : X({ tokenType: g, authenticateContext: r, machineData: h, token: l }); } async function x() { let { tokenInHeader: l } = r; if (!l)
+    return S(new Error("Missing token in header"), "header"); if (bt(l)) {
+    let h = Et(l), g = es(h, s, r);
+    if (g)
+        return g;
+    let { data: k, tokenType: T, errors: _ } = await Zr(l, r);
+    return _ ? A(T, _[0]) : X({ tokenType: T, authenticateContext: r, machineData: k, token: l });
+} let { data: y, errors: m } = await Z(l, r); return m ? S(m[0], "header") : X({ tokenType: b.SessionToken, authenticateContext: r, sessionClaims: y, token: l }); } return Array.isArray(s) && !Mc(s, r) ? kc() : r.tokenInHeader ? s === "any" || Array.isArray(s) ? x() : s === b.SessionToken ? p() : P() : s === b.OAuthToken || s === b.ApiKey || s === b.M2MToken ? F({ tokenType: s, authenticateContext: r, reason: "No token in header" }) : E(); }), Jc = t => { let { isSignedIn: e, isAuthenticated: r, proxyUrl: s, reason: n, message: i, publishableKey: o, isSatellite: a, domain: c } = t; return { isSignedIn: e, isAuthenticated: r, proxyUrl: s, reason: n, message: i, publishableKey: o, isSatellite: a, domain: c }; }, Lc = ({ tokenError: t, refreshError: e }) => { switch (t) {
+    case I.TokenExpired: return `${M.SessionTokenExpired}-refresh-${e}`;
+    case I.TokenNotActiveYet: return M.SessionTokenNBF;
+    case I.TokenIatInTheFuture: return M.SessionTokenIatInTheFuture;
+    default: return M.UnexpectedError;
+} }, Dc = { fetch: void 0, secretKey: "", machineSecretKey: "", jwtKey: "", apiUrl: void 0, apiVersion: void 0, proxyUrl: "", publishableKey: "", isSatellite: !1, domain: "", audience: "" };
+function Jn(t) { let e = Rr(Dc, t.options), r = t.apiClient; return { authenticateRequest: (n, i = {}) => { let { apiUrl: o, apiVersion: a } = e, c = Rr(e, i); return Nc(n, { ...i, ...c, apiUrl: o, apiVersion: a, apiClient: r }); }, debugRequestState: Jc }; }
+function Ln(t) { return async (...e) => { let { data: r, errors: s } = await t(...e); if (s)
+    throw s[0]; return r; }; }
+var Fn = Symbol.for("@clerk/shared.telemetryNoticeShown"), Fc = ["Attention: Clerk collects telemetry data from its SDKs when connected to development instances.", "The data collected is used to inform Clerk's product roadmap.", "To learn more, including how to opt-out from the telemetry program, visit: https://clerk.com/docs/telemetry."];
+function Kc() { return !(typeof window < "u" || typeof globalThis.EdgeRuntime < "u"); }
+function Hc() { return typeof process > "u" || !process.env ? !1 : Kt.some(t => ue(process.env[t])); }
+function zc() { return !!globalThis[Fn]; }
+function Wc() { globalThis[Fn] = !0; }
+function Bc() { if (!(typeof console > "u" || typeof console.log != "function")) {
+    for (let t of Fc)
+        console.log(t);
+    console.log("");
+} }
+function jc(t = {}) { if (!t.skip)
+    try {
+        if (!Kc() || Hc() || zc())
+            return;
+        Bc(), Wc();
+    }
+    catch { } }
+var Vc = 864e5, $c = class {
+    #e;
+    #r = Vc;
+    constructor(t) { this.#e = t; }
+    isEventThrottled(t) { let e = Date.now(), r = this.#t(t), s = this.#e.getItem(r); return s ? e - s > this.#r ? (this.#e.setItem(r, e), !1) : !0 : (this.#e.setItem(r, e), !1); }
+    #t(t) { let { sk: e, pk: r, payload: s, ...n } = t, i = { ...s, ...n }; return JSON.stringify(Object.keys({ ...s, ...n }).sort().map(o => i[o])); }
+}, Dn = class {
+    #e = "clerk_telemetry_throttler";
+    getItem(t) { return this.#r()[t]; }
+    setItem(t, e) { try {
+        let r = this.#r();
+        r[t] = e, localStorage.setItem(this.#e, JSON.stringify(r));
+    }
+    catch (r) {
+        r instanceof DOMException && (r.name === "QuotaExceededError" || r.name === "NS_ERROR_DOM_QUOTA_REACHED") && localStorage.length > 0 && localStorage.removeItem(this.#e);
+    } }
+    removeItem(t) { try {
+        let e = this.#r();
+        delete e[t], localStorage.setItem(this.#e, JSON.stringify(e));
+    }
+    catch { } }
+    #r() { try {
+        let t = localStorage.getItem(this.#e);
+        return t ? JSON.parse(t) : {};
+    }
+    catch {
+        return {};
+    } }
+    static isSupported() { return typeof window < "u" && !!window.localStorage; }
+}, Gc = class {
+    #e = new Map;
+    #r = 1e4;
+    getItem(t) { if (this.#e.size > this.#r) {
+        this.#e.clear();
+        return;
+    } return this.#e.get(t); }
+    setItem(t, e) { this.#e.set(t, e); }
+    removeItem(t) { this.#e.delete(t); }
+};
+function Qc(t) { return typeof t == "object" && t !== null && "constructor" in t && typeof t.constructor == "function"; }
+var Yc = new Set(["error", "warn", "info", "debug", "trace"]), Jt = { samplingRate: 1, maxBufferSize: 5, endpoint: "https://clerk-telemetry.com" }, Lt = class {
+    #e;
+    #r;
+    #t = {};
+    #n = [];
+    #s = null;
+    constructor(t) { this.#e = { maxBufferSize: t.maxBufferSize ?? Jt.maxBufferSize, samplingRate: t.samplingRate ?? Jt.samplingRate, perEventSampling: t.perEventSampling ?? !0, disabled: t.disabled ?? !1, debug: t.debug ?? !1, endpoint: Jt.endpoint }, !t.clerkVersion && typeof window > "u" ? this.#t.clerkVersion = "" : this.#t.clerkVersion = t.clerkVersion ?? "", this.#t.sdk = t.sdk, this.#t.sdkVersion = t.sdkVersion, this.#t.publishableKey = t.publishableKey ?? ""; let e = ee(t.publishableKey); e && (this.#t.instanceType = e.instanceType), t.secretKey && (this.#t.secretKey = t.secretKey.substring(0, 16)); let r = Dn.isSupported() ? new Dn : new Gc; this.#r = new $c(r), jc({ skip: !this.isEnabled }); }
+    get isEnabled() { return !(this.#t.instanceType !== "development" || this.#e.disabled || typeof process < "u" && process.env && ue(process.env.CLERK_TELEMETRY_DISABLED) || typeof window < "u" && window?.navigator?.webdriver); }
+    get isDebug() { return this.#e.debug || typeof process < "u" && process.env && ue(process.env.CLERK_TELEMETRY_DEBUG); }
+    record(t) { try {
+        let e = this.#d(t.event, t.payload);
+        if (this.#h(e.event, e), !this.#c(e, t.eventSamplingRate))
+            return;
+        this.#n.push({ kind: "event", value: e }), this.#o();
+    }
+    catch (e) {
+        console.error("[clerk/telemetry] Error recording telemetry event", e);
+    } }
+    recordLog(t) { try {
+        if (!this.#u(t))
+            return;
+        let e = typeof t?.level == "string" && Yc.has(t.level), r = typeof t?.message == "string" && t.message.trim().length > 0, s = null, n = t?.timestamp;
+        if (typeof n == "number" || typeof n == "string") {
+            let a = new Date(n);
+            Number.isNaN(a.getTime()) || (s = a);
+        }
+        if (!e || !r || s === null) {
+            this.isDebug && typeof console < "u" && console.warn("[clerk/telemetry] Dropping invalid telemetry log entry", { levelIsValid: e, messageIsValid: r, timestampIsValid: s !== null });
+            return;
+        }
+        let i = this.#a(), o = { sdk: i.name, sdkv: i.version, cv: this.#t.clerkVersion ?? "", lvl: t.level, msg: t.message, ts: s.toISOString(), pk: this.#t.publishableKey || null, payload: this.#f(t.context) };
+        this.#n.push({ kind: "log", value: o }), this.#o();
+    }
+    catch (e) {
+        console.error("[clerk/telemetry] Error recording telemetry log entry", e);
+    } }
+    #c(t, e) { return this.isEnabled && !this.isDebug && this.#l(t, e); }
+    #u(t) { return !0; }
+    #l(t, e) { let r = Math.random(); return r <= this.#e.samplingRate && (this.#e.perEventSampling === !1 || typeof e > "u" || r <= e) ? !this.#r.isEventThrottled(t) : !1; }
+    #o() { if (typeof window > "u") {
+        this.#i();
+        return;
+    } if (this.#n.length >= this.#e.maxBufferSize) {
+        this.#s && (typeof cancelIdleCallback < "u" ? cancelIdleCallback(Number(this.#s)) : clearTimeout(Number(this.#s))), this.#i();
+        return;
+    } this.#s || ("requestIdleCallback" in window ? this.#s = requestIdleCallback(() => { this.#i(), this.#s = null; }) : this.#s = setTimeout(() => { this.#i(), this.#s = null; }, 0)); }
+    #i() { let t = [...this.#n]; if (this.#n = [], this.#s = null, t.length === 0)
+        return; let e = t.filter(s => s.kind === "event").map(s => s.value), r = t.filter(s => s.kind === "log").map(s => s.value); if (e.length > 0) {
+        let s = new URL("/v1/event", this.#e.endpoint);
+        fetch(s, { headers: { "Content-Type": "application/json" }, keepalive: !0, method: "POST", body: JSON.stringify({ events: e }) }).catch(() => { });
+    } if (r.length > 0) {
+        let s = new URL("/v1/logs", this.#e.endpoint);
+        fetch(s, { headers: { "Content-Type": "application/json" }, keepalive: !0, method: "POST", body: JSON.stringify({ logs: r }) }).catch(() => { });
+    } }
+    #h(t, e) { this.isDebug && (typeof console.groupCollapsed < "u" ? (console.groupCollapsed("[clerk/telemetry]", t), console.log(e), console.groupEnd()) : console.log("[clerk/telemetry]", t, e)); }
+    #a() { let t = { name: this.#t.sdk, version: this.#t.sdkVersion }; if (typeof window < "u") {
+        let e = window;
+        if (e.Clerk) {
+            let r = e.Clerk;
+            if (Qc(r) && r.constructor.sdkMetadata) {
+                let { name: s, version: n } = r.constructor.sdkMetadata;
+                s !== void 0 && (t.name = s), n !== void 0 && (t.version = n);
+            }
+        }
+    } return t; }
+    #d(t, e) { let r = this.#a(); return { event: t, cv: this.#t.clerkVersion ?? "", it: this.#t.instanceType ?? "", sdk: r.name, sdkv: r.version, ...this.#t.publishableKey ? { pk: this.#t.publishableKey } : {}, ...this.#t.secretKey ? { sk: this.#t.secretKey } : {}, payload: e }; }
+    #f(t) { if (t === null || typeof t > "u" || typeof t != "object")
+        return null; try {
+        let e = JSON.parse(JSON.stringify(t));
+        return e && typeof e == "object" && !Array.isArray(e) ? e : null;
+    }
+    catch {
+        return null;
+    } }
+};
+var fd = Ln(Z);
+function Xc(t) { let e = { ...t }, r = he(e), s = Jn({ options: e, apiClient: r }), n = new Lt({ publishableKey: e.publishableKey, secretKey: e.secretKey, samplingRate: .1, ...e.sdkMetadata ? { sdk: e.sdkMetadata.name, sdkVersion: e.sdkMetadata.version } : {}, ...e.telemetry || {} }); return { ...r, ...s, telemetry: n }; }
+export { Xc as createClerkClient };