1"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E||[]).push([[146],{5258:(e,t,r)=>{r.d(t,{Bs:()=>rM,nr:()=>rS,y3:()=>rn});var s,i,a,n,o=r(4810),d=r(7592),c=r(7385),u=r(6813),h=r(761),l=r(7389),p=r(8064),m=r(73),y=r(293),f=r(5705),k=(0,u.P$)({"../../node_modules/.pnpm/[email protected]/node_modules/cookie/dist/index.js"(e){Object.defineProperty(e,"__esModule",{value:!0}),e.parse=function(e,t){let r=new n,s=e.length;if(s<2)return r;let i=t?.decode||c,a=0;do{let t=e.indexOf("=",a);if(-1===t)break;let n=e.indexOf(";",a),c=-1===n?s:n;if(t>c){a=e.lastIndexOf(";",t-1)+1;continue}let u=o(e,a,t),h=d(e,t,u),l=e.slice(u,h);if(void 0===r[l]){let s=o(e,t+1,c),a=d(e,c,s),n=i(e.slice(s,a));r[l]=n}a=c+1}while(a<s);return r},e.serialize=function(e,n,o){let d=o?.encode||encodeURIComponent;if(!t.test(e))throw TypeError(`argument name is invalid: ${e}`);let c=d(n);if(!r.test(c))throw TypeError(`argument val is invalid: ${n}`);let u=e+"="+c;if(!o)return u;if(void 0!==o.maxAge){if(!Number.isInteger(o.maxAge))throw TypeError(`option maxAge is invalid: ${o.maxAge}`);u+="; Max-Age="+o.maxAge}if(o.domain){if(!s.test(o.domain))throw TypeError(`option domain is invalid: ${o.domain}`);u+="; Domain="+o.domain}if(o.path){if(!i.test(o.path))throw TypeError(`option path is invalid: ${o.path}`);u+="; Path="+o.path}if(o.expires){var h;if(h=o.expires,"[object Date]"!==a.call(h)||!Number.isFinite(o.expires.valueOf()))throw TypeError(`option expires is invali
1d: ${o.expires}`);u+="; Expires="+o.expires.toUTCString()}if(o.httpOnly&&(u+="; HttpOnly"),o.secure&&(u+="; Secure"),o.partitioned&&(u+="; Partitioned"),o.priority)switch("string"==typeof o.priority?o.priority.toLowerCase():void 0){case"low":u+="; Priority=Low";break;case"medium":u+="; Priority=Medium";break;case"high":u+="; Priority=High";break;default:throw TypeError(`option priority is invalid: ${o.priority}`)}if(o.sameSite)switch("string"==typeof o.sameSite?o.sameSite.toLowerCase():o.sameSite){case!0:case"strict":u+="; SameSite=Strict";break;case"lax":u+="; SameSite=Lax";break;case"none":u+="; SameSite=None";break;default:throw TypeError(`option sameSite is invalid: ${o.sameSite}`)}return u};var t=/^[\u0021-\u003A\u003C\u003E-\u007E]+$/,r=/^[\u0021-\u003A\u003C-\u007E]*$/,s=/^([.]?[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?)([.][a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?)*$/i,i=/^[\u0020-\u003A\u003D-\u007E]*$/,a=Object.prototype.toString,n=(()=>{let e=function(){};return e.prototype=Object.create(null),e})();function o(e,t,r){do{let r=e.charCodeAt(t);if(32!==r&&9!==r)return t}while(++t<r);return r}function d(e,t,r){for(;t>r;){let r=e.charCodeAt(--t);if(32!==r&&9!==r)return t+1}return r}function c(e){if(-1===e.indexOf("%"))return e;try{return decodeURIComponent(e)}catch(t){return e}}}}),g="https://api.clerk.com",_="@clerk/[email protected]",S="2025-11-10",T={Session:"__session",Refresh:"__refresh",ClientUat:"__client_uat",Handshake:"__clerk_handshake",DevBrowser:"__clerk_db_jwt",RedirectCount:"__clerk_redirect_count",HandshakeNonce:"__clerk_handshake_nonce"},w={ClerkSynced:"__clerk_synced",SuffixedCookies:"suffixed_cookies",ClerkRedirectUrl:"__clerk_redirect_url",DevBrowser:T.DevBrowser,Handshake:T.Handshake,HandshakeHelp:"__clerk_help",LegacyDevBrowser:"__dev_session",HandshakeReason:"__clerk_hs_reason",HandshakeNonce:T.HandshakeNonce,HandshakeFormat:"format",Session:"__session"},b={Cookies:T,Headers:{Accept:"accept",AuthMessage:"x-clerk-auth-message",Authorization:"authorization",AuthReason:"x-clerk-auth-reason",AuthSignature:"x-clerk-auth-signature",AuthStatus:"x-clerk-auth-status",AuthToken:"x-clerk-auth-token",CacheControl:"cache-control",ClerkRedirectTo:"x-clerk-redirect-to",ClerkRequestData:"x-clerk-request-data",ClerkUrl:"x-clerk-clerk-url",CloudFrontForwardedProto:"cloudfront-forwarded-proto",ContentType:"content-type",ContentSecurityPolicy:"content-security-policy",ContentSecurityPolicyReportOnly:"content-security-policy-report-only",EnableDebug:"x-clerk-debug",ForwardedHost:"x-forwarded-host",ForwardedPort:"x-forwarded-port",ForwardedProto:"x-forwarded-proto",Host:"host",Location:"location",Nonce:"x-nonce",Origin:"origin",Referrer:"referer",SecFetchDest:"sec-fetch-dest",SecFetchSite:"sec-fetch-site",UserAgent:"user-agent",ReportingEndpoints:"reporting-endpoints"},ContentTypes:{Json:"application/json"},QueryParameters:w};function A(e,t){return Object.keys(e).reduce((e,r)=>({...e,[r]:t[r]||e[r]}),{...e})}function v(e){if(!e||"string"!=typeof e)throw Error("Missing Clerk Secret Key. Go to https://dashboard.clerk.com and get your key for your instance.")}var I={SessionToken:"session_token",ApiKey:"api_key",M2MToken:"m2m_token",OAuthToken:"oauth_token"},O=class{constructor(e,t,r){this.cookieSuffix=e,this.clerkRequest=t,this.originalFrontendApi="",r.acceptsToken===I.M2MToken||r.acceptsToken===I.ApiKey?this.initHeaderValues():(this.initPublishableKeyValues(r),this.initHeaderValues(),this.initCookieValues(),this.initHandshakeValues()),Object.assign(this,r),this.clerkUrl=this.clerkRequest.clerkUrl}get sessionToken(){return this.sessionTokenInCookie||this.tokenInHeader}usesSuffixedCookies(){let e=this.getSuffixedCookie(b.Cookies.ClientUat),t=this.getCookie(b.Cookies.ClientUat),r=this.getSuffixedCookie(b.Cookies.Session)||"",s=this.getCookie(b.Cookies.Session)||"";if(s&&!this.tokenHasIssuer(s))return!1;if(s&&!this.tokenBelongsToInstance(s))return!0;if(!e&&!r)return!1;let{data:i}=(0,d.iU)(s),a=i?.payload.iat||0,{data:n}=(0,d.iU)(r),o=n?.payload.iat||0;if("0"!==e&&"0"!==t&&a>o||"0"===e&&"0"!==t)return!1;if("production"!==this.instanceType){let r=this.sessionExpired(n);if("0"!==e&&"0"===t&&r)return!1}return!!e||!r}isCrossOriginReferrer(){if(!this.referrer||!this.clerkUrl.origin)return!1;try{return new URL(this.referrer).origin!==this.clerkUrl.origin}catch{return!1}}isKnownClerkReferrer(){if(!this.referrer)return!1;try{let e=new URL(this.referrer),t=e.hostname;if(this.frontendApi){let e=this.frontendApi.startsWith("http")?new URL(this.frontendApi).hostname:this.frontendApi;if(t===e)return!0}if((0,l.sB)(t)||(0,l.Ab)(t))return!0;let r=(0,h.j)(this.frontendApi);if(r){let t=new URL(r).origin;if(e.origin===t)return!0}if(t.startsWith("accounts."))return!0;return!1}catch{return!1}}initPublishableKeyValues(e){var t;t=e.publishableKey,(0,o.q5)(t,{fatal:!0}),this.publishableKey=e.publishableKey;let r=(0,o.q5)(this.publishableKey,{fatal:!0,domain:e.domain,isSatellite:e.isSatellite});this.originalFrontendApi=r.frontendApi;let s=(0,o.q5)(this.publishableKey,{fatal:!0,proxyUrl:e.proxyUrl,domain:e.domain,isSatellite:e.isSatellite});this.instanceType=s.instanceType,this.frontendApi=s.frontendApi}initHeaderValues(){this.tokenInHeader=this.parseAuthorizationHeader(this.getHeader(b.Headers.Authorization)),this.origin=this.getHeader(b.Headers.Origin),this.host=this.getHeader(b.Headers.Host),this.forwardedHost=this.getHeader(b.Headers.ForwardedHost),this.forwardedProto=this.getHeader(b.Headers.CloudFrontForwardedProto)||this.getHeader(b.Headers.ForwardedProto),this.referrer=this.getHeader(b.Headers.Referrer),this.userAgent=this.getHeader(b.Headers.UserAgent),this.secFetchDest=this.getHeader(b.Headers.SecFetchDest),this.accept=this.getHeader(b.Headers.Accept)}initCookieValues(){this.sessionTokenInCookie=this.getSuffixedOrUnSuffixedCookie(b.Cookies.Session),this.refreshTokenInCookie=this.getSuffixedCookie(b.Cookies.Refresh),this.clientUat=Number.parseInt(this.getSuffixedOrUnSuffixedCookie(b.Cookies.ClientUat)||"")||
10}initHandshakeValues(){this.devBrowserToken=this.getQueryParam(b.QueryParameters.DevBrowser)||this.getSuffixedOrUnSuffixedCookie(b.Cookies.DevBrowser),this.handshakeToken=this.getQueryParam(b.QueryParameters.Handshake)||this.getCookie(b.Cookies.Handshake),this.handshakeRedirectLoopCounter=Number(this.getCookie(b.Cookies.RedirectCount))||0,this.handshakeNonce=this.getQueryParam(b.QueryParameters.HandshakeNonce)||this.getCookie(b.Cookies.HandshakeNonce)}getQueryParam(e){return this.clerkRequest.clerkUrl.searchParams.get(e)}getHeader(e){return this.clerkRequest.headers.get(e)||void 0}getCookie(e){return this.clerkRequest.cookies.get(e)||void 0}getSuffixedCookie(e){return this.getCookie((0,o.ky)(e,this.cookieSuffix))||void 0}getSuffixedOrUnSuffixedCookie(e){return this.usesSuffixedCookies()?this.getSuffixedCookie(e):this.getCookie(e)}parseAuthorizationHeader(e){if(!e)return;let[t,r]=e.split(" ",2);return r?"Bearer"===t?r:void 0:t}tokenHasIssuer(e){let{data:t,errors:r}=(0,d.iU)(e);return!r&&!!t.payload.iss}tokenBelongsToInstance(e){if(!e)return!1;let{data:t,errors:r}=(0,d.iU)(e);if(r)return!1;let s=t.payload.iss.replace(/https?:\/\//gi,"");return this.originalFrontendApi===s}sessionExpired(e){return!!e&&e?.payload.exp<=(Date.now()/1e3|0)}},q=async(e,t)=>new O(t.publishableKey?await (0,o.qS)(t.publishableKey,d.fA.crypto.subtle):"",e,t),P=RegExp("(?<!:)/{1,}","g");function C(...e){return e.filter(e=>e).join("/").replace(P,"/")}var x=class{constructor(e){this.request=e}requireId(e){if(!e)throw Error("A valid resource ID is required.")}},E="/actor_tokens",U=class extends x{async create(e){return this.request({method:"POST",path:E,bodyParams:e})}async revoke(e){return this.requireId(e),this.request({method:"POST",path:C(E,e,"revoke")})}},N="/agents/tasks",J=class extends x{async create(e){return this.request({method:"POST",path:N,bodyParams:e,options:{deepSnakecaseBodyParamKeys:!0}})}async revoke(e){return this.requireId(e),this.request({method:"POST",path:C(N,e,"revoke")})}},M="/accountless_applications",z=class extends x{async createAccountlessApplication(e){let t=e?.requestHeaders?Object.fromEntries(e.requestHeaders.entries()):void 0;return this.request({method:"POST",path:M,headerParams:t})}async completeAccountlessApplicationOnboarding(e){let t=e?.requestHeaders?Object.fromEntries(e.requestHeaders.entries()):void 0;return this.request({method:"POST",path:C(M,"complete"),headerParams:t})}},H="/allowlist_identifiers",j=class extends x{async getAllowlistIdentifierList(e={}){return this.request({method:"GET",path:H,queryParams:{...e,paginated:!0}})}async createAllowlistIdentifier(e){return this.request({method:"POST",path:H,bodyParams:e})}async deleteAllowlistIdentifier(e){return this.requireId(e),this.request({method:"DELETE",path:C(H,e)})}},F="/api_keys",R=class extends x{async list(e){return this.request({method:"GET",path:F,queryParams:e})}async create(e){return this.request({method:"POST",path:F,bodyParams:e})}async get(e){return this.requireId(e),this.request({method:"GET",path:C(F,e)})}async update(e){let{apiKeyId:t,...r}=e;return this.requireId(t),this.request({method:"PATCH",path:C(F,t),bodyParams:r})}async delete(e){return this.requireId(e),this.request({method:"DELETE",path:C(F,e)})}async revoke(e){let{apiKeyId:t,revocationReason:r=null}=e;return this.requireId(t),this.request({method:"POST",path:C(F,t,"revoke"),bodyParams:{revocationReason:r}})}async getSecret(e){return this.requireId(e),this.request({method:"GET",path:C(F,e,"secret")})}async verify(e){return this.request({method:"POST",path:C(F,"verify"),bodyParams:{secret:e}})}async verifySecret(e){return(0,o.io)("apiKeys.verifySecret()","Use `apiKeys.verify()` instead."),this.verify(e)}},L=class extends x{async changeDomain(e){return this.request({method:"POST",path:C("/beta_features","change_domain"),bodyParams:e})}},K="/blocklist_identifiers",D=class extends x{async getBlocklistIdentifierList(e={}){return this.request({method:"GET",path:K,queryParams:e})}async createBlocklistIdentifier(e){return this.request({method:"POST",path:K,bodyParams:e})}async deleteBlocklistIdentifier(e){return this.requireId(e),this.request({method:"DELETE",path:C(K,e)})}},B="/clients",W=class extends x{async getClientList(e={}){return this.request({method:"GET",path:B,queryParams:{...e,paginated:!0}})}async getClient(e){return this.requireId(e),this.request({method:"GET",path:C(B,e)})}verifyClient(e){return this.request({method:"POST",path:C(B,"verify"),bodyParams:{token:e}})}async getHandshakePayload(e){return this.request({method:"GET",path:C(B,"handshake_payload"),queryParams:e})}},G="/domains",$=class extends x{async list(){return this.request({method:"GET",path:G})}async add(e){return this.request({method:"POST",path:G,bodyParams:e})}async update(e){let{domainId:t,...r}=e;return this.requireId(t),this.request({method:"PATCH",path:C(G,t),bodyParams:r})}async delete(e){return this.deleteDomain(e)}async deleteDomain(e){return this.requireId(e),this.request({method:"DELETE",path:C(G,e)})}},V="/email_addresses",Q=class extends x{async getEmailAddress(e){return this.requireId(e),this.request({method:"GET",path:C(V,e)})}async createEmailAddress(e){return this.request({method:"POST",path:V,bodyParams:e})}async updateEmailAddress(e,t={}){return this.requireId(e),this.request({method:"PATCH",path:C(V,e),bodyParams:t})}async deleteEmailAddress(e){return this.requireId(e),this.request({method:"DELETE",path:C(V,e)})}},Y=class extends x{async verify(e){return this.request({method:"POST",path:C("/oauth_applications/access_tokens","verify"),bodyParams:{access_token:e}})}async verifyAccessToken(e){return(0,o.io)("idPOAuthAccessToken.verifyAccessToken()","Use `idPOAuthAccessToken.verify()` instead."),this.verify(e)}},Z="/instance",X=class extends x{async get(){return this.request({method:"GET",path:Z})}async update(e){return this.request({method:"PATCH",path:Z,bodyParams:e})}async updateRestrictions(e){return this.request({method:"PATCH",path:C(Z,"restrictions"),bodyParams:e})}async updateOrganizationSettings(e){return this.request({method:"PATCH",path:C(Z,"organization_settings"),bodyParams:e})}},ee="/invitations",et=class extends x{async getInvitationList(e={}){return this.request({method:"GET",path:ee,queryParams:{...e,paginated:!0}})}async createInvitation(e){return this.request({method:"POST",path:ee,bodyParams:e})}async createInvitationBulk(e){return this.request({method:"POST",path:C(ee,"bulk"),bodyParams:e})}async revokeInvitation(e){return this.requireId(e),this.request({method:"POST",path:C(ee,e,"revoke")})}},er="/machines",es=class extends x{async get(e){return this.requireId(e),this.request({method:"GET",path:C(er,e)})}async list(e={}){return this.request({method:"GET",path:er,queryParams:e})}async create(e){return this.request({method:"POST",path:er,bodyParams:e})}async update(e){let{machineId:t,...r}=e;return this.requireId(t),this.request({method:"PATCH",path:C(er,t),bodyParams:r})}async delete(e){return this.requireId(e),this.request({method:"DELETE",path:C(er,e)})}async getSecretKey(e){return this.requireId(e),this.request({method:"GET",path:C(er,e,"secret_key")})}async rotateSecretKey(e){let{machineId:t,previousTokenTtl:r}=e;return this.requireId(t),this.request({method:"POST",path:C(er,t,"secret_key","rotate"),bodyParams:{previousTokenTtl:r}})}async createScope(e,t){return this.requireId(e),this.request({method:"POST",path:C(er,e,"scopes"),bodyParams:{toMachineId:t}})}async deleteScope(e,t){return this.requireId(e),this.request({method:"DELETE",path:C(er,e,"scopes",t)})}},ei=class e{constructor(e,t,r,s,i,a,n,o,d,c,u){this.id=e,this.clientId=t,this.type=r,this.subject=s,this.scopes=i,this.revoked=a,this.revocationReason=n,this.expired=o,this.expiration=d,this.createdAt=c,this.updatedAt=u}static fromJSON(t){return new e(t.id,t.client_id,t.type,t.subject,t.scopes,t.revoked,t.revocation_reason,t.expired,t.expiration,t.created_at,t.updated_at)}static fromJwtPayload(t,r=5e3){return new e(t.jti??"",t.client_id??"","oauth_token",t.sub,t.scp??t.scope?.split(" ")??[],!1,null,1e3*t.exp<=Date.now()-r,t.exp,t.iat,t.i
1at)}},ea=class e{constructor(e,t,r,s,i,a,n,o,d,c,u){this.id=e,this.subject=t,this.scopes=r,this.claims=s,this.revoked=i,this.revocationReason=a,this.expired=n,this.expiration=o,this.createdAt=d,this.updatedAt=c,this.token=u}static fromJSON(t){return new e(t.id,t.subject,t.scopes,t.claims,t.revoked,t.revocation_reason,t.expired,t.expiration,t.created_at,t.updated_at,t.token)}static fromJwtPayload(t,r=5e3){return new e(t.jti??"",t.sub,t.scopes?.split(" ")??t.aud??[],null,!1,null,1e3*t.exp<=Date.now()-r,1e3*t.exp,1e3*t.iat,1e3*t.iat)}},en={},eo=0;function ed(e,t,r=!0){en[e]=t,eo=r?Date.now():-1}function ec(e){let{kid:t,pem:r}=e,s=`local-${t}`,i=en[s];if(i)return i;if(!r)throw new c.zF({action:c.z.SetClerkJWTKey,message:"Missing local JWK.",reason:c.jn.LocalJWKMissing});let a={kid:s,kty:"RSA",alg:"RS256",n:r.replace(/\r\n|\n|\r/g,"").replace("-----BEGIN PUBLIC KEY-----","").replace("-----END PUBLIC KEY-----","").replace("MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA","").replace("IDAQAB","").replace(/\+/g,"-").replace(/\//g,"_"),e:"AQAB"};return ed(s,a,!1),a}async function eu(e){let{secretKey:t,apiUrl:r=g,apiVersion:s="v1",kid:i,skipJwksCache:a}=e;if(a||function(){if(-1===eo)return!1;let e=Date.now()-eo>=3e5;return e&&(en={}),e}()||!en[i]){if(!t)throw new c.zF({action:c.z.ContactSupport,message:"Failed to load JWKS from Clerk Backend or Frontend API.",reason:c.jn.RemoteJWKFailedToLoad});let{keys:e}=await (0,o.L5)(()=>eh(r,t,s));if(!e||!e.length)throw new c.zF({action:c.z.ContactSupport,message:"The JWKS endpoint did not contain any signing keys. Contact [email protected].",reason:c.jn.RemoteJWKFailedToLoad});e.forEach(e=>ed(e.kid,e))}let n=en[i];if(!n){let e=Object.values(en).map(e=>e.kid).sort().join(", ");throw new c.zF({action:`Go to your Dashboard and validate your secret and public keys are correct. ${c.z.ContactSupport} if the issue persists.`,message:`Unable to find a signing key in JWKS that matches the kid='${i}' of the provided session token. Please make sure that the __session cookie or the HTTP authorization header contain a Clerk-generated session JWT. The following kid is available: ${e}`,reason:c.jn.JWKKidMismatch})}return n}async function eh(e,t,r){if(!t)throw new c.zF({action:c.z.SetClerkSecretKey,message:"Missing Clerk Secret Key or API Key. Go to https://dashboard.clerk.com and get your key for your instance.",reason:c.jn.RemoteJWKFailedToLoad});let s=new URL(e);s.pathname=C(s.pathname,r,"/jwks");let i=await d.fA.fetch(s.href,{headers:{Authorization:`Bearer ${t}`,"Clerk-API-Version":S,"Content-Type":"application/json","User-Agent":_}});if(!i.ok){let e=await i.json(),t=el(e?.errors,c.qu.InvalidSecretKey);if(t){let e=c.jn.InvalidSecretKey;throw new c.zF({action:c.z.ContactSupport,message:t.message,reason:e})}throw new c.zF({action:c.z.ContactSupport,message:`Error loading Clerk JWKS from ${s.href} with code=${i.status}`,reason:c.jn.RemoteJWKFailedToLoad})}return i.json()}var el=(e,t)=>e?e.find(e=>e.code===t):null,ep="mch_",em="oat_",ey=["mt_",em,"ak_"],ef=/^[a-zA-Z0-9\-_]+\.[a-zA-Z0-9\-_]+\.[a-zA-Z0-9\-_]+$/;function ek(e){return ef.test(e)}var eg=["at+jwt","application/at+jwt"];function e_(e){if(!ek(e))return!1;try{let{data:t,errors:r}=(0,d.iU)(e);return!r&&!!t&&eg.includes(t.header.typ)}catch{return!1}}function eS(e){if(!ek(e))return!1;try{let{data:t,errors:r}=(0,d.iU)(e);return!r&&!!t&&"string"==typeof t.payload.sub&&t.payload.sub.startsWith(ep)}catch{return!1}}function eT(e){return ey.some(t=>e.startsWith(t))||e_(e)||eS(e)}function ew(e){if(e.startsWith("mt_")||eS(e))return I.M2MToken;if(e.startsWith(em)||e_(e))return I.OAuthToken;if(e.startsWith("ak_"))return I.ApiKey;throw Error("Unknown machine token type")}var eb=(e,t)=>!!e&&("any"===t||(Array.isArray(t)?t:[t]).includes(e));async function eA(e,t,r,s){try{let i;if(r.jwtKey)i=ec({kid:t,pem:r.jwtKey});else{if(!r.secretKey)return{error:new c.sM({action:c.z.SetClerkJWTKey,message:"Failed to resolve JWK during verification.",code:c.h5.TokenVerificationFailed})};i=await eu({...r,kid:t})}let{data:a,errors:n}=await (0,d.J0)(e,{...r,key:i,...s?{headerType:s}:{}});if(n)return{error:new c.sM({code:c.h5.TokenVerificationFailed,message:n[0].message})};return{payload:a}}catch(e){return{error:new c.sM({code:c.h5.TokenVerificationFailed,message:e.message})}}}async function ev(e,t,r){let s=await eA(e,t.header.kid,r);return"error"in s?{data:void 0,tokenType:I.M2MToken,errors:[s.error]}:{data:ea.fromJwtPayload(s.payload,r.clockSkewInMs),tokenType:I.M2MToken,errors:void 0}}async function eI(e,t,r){let s=await eA(e,t.header.kid,r,eg);return"error"in s?{data:void 0,tokenType:I.OAuthToken,errors:[s.error]}:{data:ei.fromJwtPayload(s.payload,r.clockSkewInMs),tokenType:I.OAuthToken,errors:void 0}}I.ApiKey,I.M2MToken,I.OAuthToken;var eO="/m2m_tokens",eq=class extends x{constructor(e,t={}){super(e),(0,u.VK)(this,i),(0,u.VK)(this,s),(0,u.OV)(this,s,t)}async list(e){return this.request({method:"GET",path:eO,queryParams:e})}async createToken(e){let{claims:t=null,machineSecretKey:r,secondsUntilExpiration:s=null,tokenFormat:n="opaque"}=e||{},o=(0,u.jq)(this,i,a).call(this,{method:"POST",path:eO,bodyParams:{secondsUntilExpiration:s,claims:t,tokenFormat:n}},r);return this.request(o)}async revokeToken(e){let{m2mTokenId:t,revocationReason:r=null,machineSecretKey:s}=e;this.requireId(t);let n=(0,u.jq)(this,i,a).call(this,{method:"POST",path:C(eO,t,"revoke"),bodyParams:{revocationReason:r}},s);return this.request(n)}async verify(e){let{token:t,machineSecretKey:r}=e;if(eS(t))return(0,u.jq)(this,i,n).call(this,t);let s=(0,u.jq)(this,i,a).call(this,{method:"POST",path:C(eO,"verify"),bodyParams:{token:t}},r);return this.request(s)}async verifyToken(e){return(0,o.io)("m2m.verifyToken()","Use `m2m.verify()` instead."),this.verify(e)}};s=new WeakMap,i=new WeakSet,a=function(e,t){return t?{...e,headerParams:{...e.headerParams,Authorization:`Bearer ${t}`}}:e},n=async function(e){let t;try{let{data:r,errors:s}=(0,d.iU)(e);if(s)throw s[0];t=r}catch(e){throw new c.sM({code:c.h5.TokenInvalid,message:e.message})}let r=await ev(e,t,(0,u.S7)(this,s));if(r.errors)throw r.errors[0];return r.data};var eP=class extends x{async getJwks(){return this.request({method:"GET",path:"/jwks"})}},eC="/jwt_templates",ex=class extends x{async list(e={}){return this.request({method:"GET",path:eC,queryParams:{...e,paginated:!0}})}async get(e){return this.requireId(e),this.request({method:"GET",path:C(eC,e)})}async create(e){return this.request({method:"POST",path:eC,bodyParams:e})}async update(e){let{templateId:t,...r}=e;return this.requireId(t),this.request({method:"PATCH",path:C(eC,t),bodyParams:r})}async delete(e){return this.requireId(e),this.request({method:"DELETE",path:C(eC,e)})}},eE="/organizations",eU=class extends x{async getOrganizationList(e){return this.request({method:"GET",path:eE,queryParams:e})}async createOrganization(e){return this.request({method:"POST",path:eE,bodyParams:e})}async getOrganization(e){let{includeMembersCount:t}=e,r="organizationId"in e?e.organizationId:e.slug;return this.requireId(r),this.request({method:"GET",path:C(eE,r),queryParams:{includeMembersCount:t}})}async updateOrganization(e,t){return this.requireId(e),this.request({method:"PATCH",path:C(eE,e),bodyParams:t})}async updateOrganizationLogo(e,t){this.requireId(e);let r=new d.fA.FormData;return r.append("file",t?.file),t?.uploaderUserId&&r.append("uploader_user_id",t?.uploaderUserId),this.request({method:"PUT",path:C(eE,e,"logo"),formData:r})}async deleteOrganizationLogo(e){return this.requireId(e),this.request({method:"DELETE",path:C(eE,e,"logo")})}async updateOrganizationMetadata(e,t){return this.requireId(e),this.request({method:"PATCH",path:C(eE,e,"metadata"),bodyParams:t})}async deleteOrganization(e){return this.request({method:"DELETE",path:C(eE,e)})}async getOrganizationMembershipList(e){let{organizationId:t,...r}=e;return this.requireId(t),this.request({method:"GET",path:C(eE,t,"memberships"),queryParams:r})}async getInstanceOrganizationMembershipList(e){return this.request({method:"GET",path:"/organization_memberships",queryParams:e})}async createOrganizationMembership(e){let{organizationId:t,...r}=e;return this.requireId(t),this.request({method:"POST",path:C(eE,t,"memberships"),bodyParams:r})}async updateOrganizationMembership(e){let{organizationId:t,userId:r,...s}=e;return this.requireId(t),this.request({method:"PATCH",path:C(eE,t,"memberships",r),bodyParams:s})}async updateOrganizationMembershipMetadata(e){let{organizationId:t,userId:r,...s}=e;return this.request({method:"PATCH",path:C(eE,t,"memberships",r,"metadata"),bodyParams:s})}async deleteOrganizationMembership(e){let{organizationId:t,userId:r}=e;return this.requireId(t),this.request({method:"DELETE",path:C(eE,t,"memberships",r)}
1)}async getOrganizationInvitationList(e){let{organizationId:t,...r}=e;return this.requireId(t),this.request({method:"GET",path:C(eE,t,"invitations"),queryParams:r})}async createOrganizationInvitation(e){let{organizationId:t,...r}=e;return this.requireId(t),this.request({method:"POST",path:C(eE,t,"invitations"),bodyParams:r})}async createOrganizationInvitationBulk(e,t){return this.requireId(e),this.request({method:"POST",path:C(eE,e,"invitations","bulk"),bodyParams:t})}async getOrganizationInvitation(e){let{organizationId:t,invitationId:r}=e;return this.requireId(t),this.requireId(r),this.request({method:"GET",path:C(eE,t,"invitations",r)})}async revokeOrganizationInvitation(e){let{organizationId:t,invitationId:r,...s}=e;return this.requireId(t),this.request({method:"POST",path:C(eE,t,"invitations",r,"revoke"),bodyParams:s})}async getOrganizationDomainList(e){let{organizationId:t,...r}=e;return this.requireId(t),this.request({method:"GET",path:C(eE,t,"domains"),queryParams:r})}async createOrganizationDomain(e){let{organizationId:t,...r}=e;return this.requireId(t),this.request({method:"POST",path:C(eE,t,"domains"),bodyParams:{...r,verified:r.verified??!0}})}async updateOrganizationDomain(e){let{organizationId:t,domainId:r,...s}=e;return this.requireId(t),this.requireId(r),this.request({method:"PATCH",path:C(eE,t,"domains",r),bodyParams:s})}async deleteOrganizationDomain(e){let{organizationId:t,domainId:r}=e;return this.requireId(t),this.requireId(r),this.request({method:"DELETE",path:C(eE,t,"domains",r)})}},eN="/oauth_applications",eJ=class extends x{async list(e={}){return this.request({method:"GET",path:eN,queryParams:e})}async get(e){return this.requireId(e),this.request({method:"GET",path:C(eN,e)})}async create(e){return this.request({method:"POST",path:eN,bodyParams:e})}async update(e){let{oauthApplicationId:t,...r}=e;return this.requireId(t),this.request({method:"PATCH",path:C(eN,t),bodyParams:r})}async delete(e){return this.requireId(e),this.request({method:"DELETE",path:C(eN,e)})}async rotateSecret(e){return this.requireId(e),this.request({method:"POST",path:C(eN,e,"rotate_secret")})}},eM="/phone_numbers",ez=class extends x{async getPhoneNumber(e){return this.requireId(e),this.request({method:"GET",path:C(eM,e)})}async createPhoneNumber(e){return this.request({method:"POST",path:eM,bodyParams:e})}async updatePhoneNumber(e,t={}){return this.requireId(e),this.request({method:"PATCH",path:C(eM,e),bodyParams:t})}async deletePhoneNumber(e){return this.requireId(e),this.request({method:"DELETE",path:C(eM,e)})}},eH=class extends x{async verify(e){return this.request({method:"POST",path:"/proxy_checks",bodyParams:e})}},ej="/redirect_urls",eF=class extends x{async getRedirectUrlList(
1){return this.request({method:"GET",path:ej,queryParams:{paginated:!0}})}async getRedirectUrl(e){return this.requireId(e),this.request({method:"GET",path:C(ej,e)})}async createRedirectUrl(e){return this.request({method:"POST",path:ej,bodyParams:e})}async deleteRedirectUrl(e){return this.requireId(e),this.request({method:"DELETE",path:C(ej,e)})}},eR="/saml_connections",eL=class extends x{async getSamlConnectionList(e={}){return this.request({method:"GET",path:eR,queryParams:e})}async createSamlConnection(e){return this.request({method:"POST",path:eR,bodyParams:e,options:{deepSnakecaseBodyParamKeys:!0}})}async getSamlConnection(e){return this.requireId(e),this.request({method:"GET",path:C(eR,e)})}async updateSamlConnection(e,t={}){return this.requireId(e),this.request({method:"PATCH",path:C(eR,e),bodyParams:t,options:{deepSnakecaseBodyParamKeys:!0}})}async deleteSamlConnection(e){return this.requireId(e),this.request({method:"DELETE",path:C(eR,e)})}},eK="/sessions",eD=class extends x{async getSessionList(e={}){return this.request({method:"GET",path:eK,queryParams:{...e,paginated:!0}})}async getSession(e){return this.requireId(e),this.request({method:"GET",path:C(eK,e)})}async createSession(e){return this.request({method:"POST",path:eK,bodyParams:e})}async revokeSession(e){return this.requireId(e),this.request({method:"POST",path:C(eK,e,"revoke")})}async verifySession(e,t){return this.requireId(e),this.request({method:"POST",path:C(eK,e,"verify"),bodyParams:{token:t}})}async getToken(e,t,r){this.requireId(e);let s={method:"POST",path:t?C(eK,e,"tokens",t):C(eK,e,"tokens")};return void 0!==r&&(s.bodyParams={expires_in_seconds:r}),this.request(s)}async refreshSession(e,t){this.requireId(e);let{suffixed_cookies:r,...s}=t;return this.request({method:"POST",path:C(eK,e,"refresh"),bodyParams:s,queryParams:{suffixed_cookies:r}})}},eB="/sign_in_tokens",eW=class extends x{async createSignInToken(e){return this.request({method:"POST",path:eB,bodyParams:e})}async revokeSignInToken(e){return this.requireId(e),this.request({method:"POST",path:C(eB,e,"revoke")})}},eG="/sign_ups",e$=class extends x{async get(e){return this.requireId(e),this.request({method:"GET",path:C(eG,e)})}async update(e){let{signUpAttemptId:t,...r}=e;return this.request({method:"PATCH",path:C(eG,t),bodyParams:r})}},eV=class extends x{async createTestingToken(){return this.request({method:"POST",path:"/testing_tokens"})}},eQ="/users",eY=class extends x{async getUserList(e={}){let{limit:t,offset:r,orderBy:s,...i}=e,[a,n]=await Promise.all([this.request({method:"GET",path:eQ,queryParams:e}),this.getCount(i)]);return{data:a,totalCount:n}}async getUser(e){return this.requireId(e),this.request({method:"GET",path:C(eQ,e)})}async createUser(e){return this.request({method:"POST",path:eQ,bodyParams:e})}async updateUser(e,t={}){return this.requireId(e),this.request({method:"PATCH",path:C(eQ,e),bodyParams:t})}async updateUserProfileImage(e,t){this.requireId(e);let r=new d.fA.FormData;return r.append("file",t?.file),this.request({method:"POST",path:C(eQ,e,"profile_image"),formData:r})}async updateUserMetadata(e,t){return this.requireId(e),this.request({method:"PATCH",path:C(eQ,e,"metadata"),bodyParams:t})}async deleteUser(e){return this.requireId(e),this.request({method:"DELETE",path:C(eQ,e)})}async getCount(e={}){return this.request({method:"GET",path:C(eQ,"count"),queryParams:e})}async getUserOauthAccessToken(e,t){this.requireId(e);let r=t.startsWith("oauth_"),s=r?t:`oauth_${t}`;return r&&(0,o.io)("getUserOauthAccessToken(userId, provider)","Remove the `oauth_` prefix from the `provider` argument."),this.request({method:"GET",path:C(eQ,e,"oauth_access_tokens",s),queryParams:{paginated:!0}})}async disableUserMFA(e){return this.requireId(e),this.request({method:"DELETE",path:C(eQ,e,"mfa")})}async getOrganizationMembershipList(e){let{userId:t,limit:r,offset:s}=e;return this.requireId(t),this.request({method:"GET",path:C(eQ,t,"organization_memberships"),queryParams:{limit:r,offset:s}})}async getOrganizationInvitationList(e){let{userId:t,...r}=e;return this.requireId(t),this.request({method:"GET",path:C(eQ,t,"organization_invitations"),queryParams:r})}async verifyPassword(e){let{userId:t,password:r}=e;return this.requireId(t),this.request({method:"POST",path:C(eQ,t,"verify_password"),bodyParams:{password:r}})}async verifyTOTP(e){let{userId:t,code:r}=e;return this.requireId(t),this.request({method:"POST",path:C(eQ,t,"verify_totp"),bodyParams:{code:r}})}async banUser(e){return this.requireId(e),this.request({method:"POST",path:C(eQ,e,"ban")})}async unbanUser(e){return this.requireId(e),this.request({method:"POST",path:C(eQ,e,"unban")})}async lockUser(e){return this.requireId(e),this.request({method:"POST",path:C(eQ,e,"lock")})}async unlockUser(e){return this.requireId(e),this.request({method:"POST",path:C(eQ,e,"unlock")})}async deleteUserProfileImage(e){return this.requireId(e),this.request({method:"DELETE",path:C(eQ,e,"profile_image")})}async deleteUserPasskey(e){return this.requireId(e.userId),this.requireId(e.passkeyIdentificationId),this.request({method:"DELETE",path:C(eQ,e.userId,"passkeys",e.passkeyIdentificationId)})}async deleteUserWeb3Wallet(e){return this.requireId(e.userId),this.requireId(e.web3WalletIdentificationId),this.request({method:"DELETE",path:C(eQ,e.userId,"web3_wallets",e.web3WalletIdentificationId)})}async deleteUserExternalAccount(e){return this.requireId(e.userId),this.requireId(e.externalAccountId),this.request({method:"DELETE",path:C(eQ,e.userId,"external_accounts",e.externalAccountId)})}async deleteUserBackupCodes(e){return this.requireId(e),this.request({method:"DELETE",path:C(eQ,e,"backup_code")})}async deleteUserTOTP(e){return this.requireId(e),this.request({method:"DELETE",path:C(eQ,e,"totp")})}async setPasswordCompromised(e,t={revokeAllSessions:!1}){return this.requireId(e),this.request({method:"POST",path:C(eQ,e,"password","set_compromised"),bodyParams:t})}async unsetPasswordCompromised(e){return this.requireId(e),this.request({method:"POST",path:C(eQ,e,"password","unset_compromised")})}}
1,eZ="/waitlist_entries",eX=class extends x{async list(e={}){return this.request({method:"GET",path:eZ,queryParams:e})}async create(e){return this.request({method:"POST",path:eZ,bodyParams:e})}async createBulk(e){return this.request({method:"POST",path:C(eZ,"bulk"),bodyParams:e})}async invite(e,t={}){return this.requireId(e),this.request({method:"POST",path:C(eZ,e,"invite"),bodyParams:t})}async reject(e){return this.requireId(e),this.request({method:"POST",path:C(eZ,e,"reject")})}async delete(e){return this.requireId(e),this.request({method:"DELETE",path:C(eZ,e)})}},e0="/webhooks",e1=class extends x{async createSvixApp(){return this.request({method:"POST",path:C(e0,"svix")})}async generateSvixAuthURL(){return this.request({method:"POST",path:C(e0,"svix_url")})}async deleteSvixApp(){return this.request({method:"DELETE",path:C(e0,"svix")})}},e3="/billing",e2=class extends x{async getPlanList(e){return this.request({method:"GET",path:C(e3,"plans"),queryParams:e})}async cancelSubscriptionItem(e,t){return this.requireId(e),this.request({method:"DELETE",path:C(e3,"subscription_items",e),queryParams:t})}async extendSubscriptionItemFreeTrial(e,t){return this.requireId(e),this.request({method:"POST",path:C("/billing","subscription_items",e,"extend_free_trial"),bodyParams:t})}async getOrganizationBillingSubscription(e){return this.requireId(e),this.request({method:"GET",path:C("/organizations",e,"billing","subscription")})}async getUserBillingSubscription(e){return this.requireId(e),this.request({method:"GET",path:C("/users",e,"billing","subscription")})}},e5=e=>"object"==typeof e&&null!==e,e9=e=>e5(e)&&!(e instanceof RegExp)&&!(e instanceof Error)&&!(e instanceof Date)&&!(globalThis.Blob&&e instanceof globalThis.Blob),e7=Symbol("mapObjectSkip"),e6=(e,t,r,s=new WeakMap)=>{if(r={deep:!1,target:{},...r},s.has(e))return s.get(e);s.set(e,r.target);let{target:i}=r;delete r.target;let a=e=>e.map(e=>e9(e)?e6(e,t,r,s):e);if(Array.isArray(e))return a(e);for(let[n,o]of Object.entries(e)){let d=t(n,o,e);if(d===e7)continue;let[c,u,{shouldRecurse:h=!0}={}]=d;"__proto__"!==c&&(r.deep&&h&&e9(u)&&(u=Array.isArray(u)?a(u):e6(u,t,r,s)),i[c]=u)}return i};function e8(e,t,r){if(!e5(e))throw TypeError(`Expected an object, got \`${e}\` (${typeof e})`);if(Array.isArray(e))throw TypeError("Expected an object, got an array");return e6(e,t,r)}var e4=/([\p{Ll}\d])(\p{Lu})/gu,te=/(\p{Lu})([\p{Lu}][\p{Ll}])/gu,tt=/(\d)\p{Ll}|(\p{L})\d/u,tr=/[^\p{L}\d]+/giu,ts="$1\0$2";function ti(e){let t=e.trim();t=(t=t.replace(e4,ts).replace(te,ts)).replace(tr,"\0");let r=0,s=t.length;for(;"\0"===t.charAt(r);)r++;if(r===s)return[];for(;"\0"===t.charAt(s-1);)s--;return t.slice(r,s).split(/\0/g)}function ta(e){let t=ti(e);for(let e=0;e<t.length;e++){let r=t[e],s=tt.exec(r);if(s){let i=s.index+(s[1]??s[2]).length;t.splice(e,1,r.slice(0,i),r.slice(i))}}return t}function tn(e,t){var r,s={delimiter:"_",...t};let[i,a,n]=function(e,t={}){let r=t.split??(t.separateNumbers?ta:ti),s=t.prefixCharacters??"",i=t.suffixCharacters??"",a=0,n=e.length;for(;a<e.length;){let t=e.charAt(a);if(!s.includes(t))break;a++}for(;n>a;){let t=n-1,r=e.charAt(t);if(!i.includes(r))break;n=t}return[e.slice(0,a),r(e.slice(a,n)),e.slice(n)]}(e,s);return i+a.map(!1===(r=s?.locale)?e=>e.toLowerCase():e=>e.toLocaleLowerCase(r)).join(s?.delimiter??" ")+n}var to={}.constructor;function td(e,t){return e.some(e=>"string"==typeof e?e===t:e.test(t))}function tc(e,t,r){return r.shouldRecurse?{shouldRecurse:r.shouldRecurse(e,t)}:void 0}var tu=function(e,t){if(Array.isArray(e)){if(e.some(e=>e.constructor!==to))throw Error("obj must be array of plain objects");let r=(t={deep:!0,exclude:[],parsingOptions:{},...t}).snakeCase||(e=>tn(e,t.parsingOptions));return e.map(e=>e8(e,(e,s)=>[td(t.exclude,e)?e:r(e),s,tc(e,s,t)],t))}if(e.constructor!==to)throw Error("obj must be an plain object");let r=(t={deep:!0,exclude:[],parsingOptions:{},...t}).snakeCase||(e=>tn(e,t.parsingOptions));return e8(e,(e,s)=>[td(t.exclude,e)?e:r(e),s,tc(e,s,t)],t)},th=class e{constructor(e,t,r,s){this.publishableKey=e,this.secretKey=t,this.claimUrl=r,this.apiKeysUrl=s}static fromJSON(t){return new e(t.publishable_key,t.secret_key,t.claim_url,t.api_keys_url)}},tl=class e{constructor(e,t,r){this.agentId=e,this.taskId=t,this.url=r}static fromJSON(t){return new e(t.agent_id,t.task_id,t.url)}},tp=class e{constructor(e,t,r,s,i,a,n,o){this.id=e,this.status=t,this.userId=r,this.actor=s,this.token=i,this.url=a,this.createdAt=n,this.updatedAt=o}static fromJSON(t){return new e(t.id,t.status,t.user_id,t.actor,t.token,t.url,t.created_at,t.updated_at)}},tm=class e{constructor(e,t,r,s,i,a,n){this.id=e,this.identifier=t,this.identifierType=r,this.createdAt=s,this.updatedAt=i,this.instanceId=a,this.invitationId=n}static fromJSON(t){return new e(t.id,t.identifier,t.identifier_type,t.created_at,t.updated_at,t.instance_id,t.invitation_id)}},ty=class e{constructor(e,t,r,s,i,a,n,o,d,c,u,h,l,p,m,y){this.id=e,this.type=t,this.name=r,this.subject=s,this.scopes=i,this.claims=a,this.revoked=n,this.revocationReason=o,this.expired=d,this.expiration=c,this.createdBy=u,this.description=h,this.lastUsedAt=l,this.createdAt=p,this.updatedAt=m,this.secret=y}static fromJSON(t){return new e(t.id,t.type,t.name,t.subject,t.scopes,t.claims,t.revoked,t.revocation_reason,t.expired,t.expiration,t.created_by,t.description,t.last_used_at,t.created_at,t.updated_at,t.secret)}},tf=class e{constructor(e,t,r,s,i,a){this.id=e,this.identifier=t,this.identifierType=r,this.createdAt=s,this.updatedAt=i,this.instanceId=a}static fromJSON(t){return new e(t.id,t.identifier,t.identifier_type,t.created_at,t.updated_at,t.instance_id)}},tk=class e{constructor(e,t,r,s,i,a,n,o){this.id=e,this.isMobile=t,this.ipAddress=r,this.city=s,this.country=i,this.browserVersion=a,this.browserName=n,this.deviceType=o}static fromJSON(t){return new e(t.id,t.is_mobile,t.ip_address,t.city,t.country,t.browser_version,t.browser_name,t.device_type)}},tg=class e{constructor(e,t,r,s,i,a,n,o,d,c,u,h=null){this.id=e,this.clientId=t,this.userId=r,this.status=s,this.lastActiveAt=i,this.expireAt=a,this.abandonAt=n,this.createdAt=o,this.updatedAt=d,this.lastActiveOrganizationId=c,this.latestActivity=u,this.actor=h}static fromJSON(t){return new e(t.id,t.client_id,t.user_id,t.status,t.last_active_at,t.expire_at,t.abandon_at,t.created_at,t.updated_at,t.last_active_organization_id,t.latest_activity&&tk.fromJSON(t.latest_activity),t.actor)}},t_=class e{constructor(e,t,r,s,i,a,n,o,d){this.id=e,this.sessionIds=t,this.sessions=r,this.signInId=s,this.signUpId=i,this.lastActiveSessionId=a,this.lastAuthenticationStrategy=n,this.createdAt=o,this.updatedAt=d}static fromJSON(t){return new e(t.id,t.session_ids,t.sessions.map(e=>tg.fromJSON(e)),t.sign_in_id,t.sign_up_id,t.last_active_session_id,t.last_authentication_strategy,t.created_at,t.updated_at)}},tS=class e{constructor(e,t,r){this.host=e,this.value=t,this.required=r}static fromJSON(t){return new e(t.host,t.value,t.required)}},tT=class e{constructor(e){this.cookies=e}static fromJSON(t){return new e(t.cookies)}},tw=class e{constructor(e,t,r,s){this.object=e,this.id=t,this.slug=r,this.deleted=s}static fromJSON(t){return new e(t.object,t.id||null,t.slug||null,t.deleted)}},tb=class e{constructor(e,t,r,s,i,a,n,o){this.id=e,this.name=t,this.isSatellite=r,this.frontendApiUrl=s,this.developmentOrigin=i,this.cnameTargets=a,this.accountsPortalUrl=n,this.proxyUrl=o}static fromJSON(t){return new e(t.id,t.name,t.is_satellite,t.frontend_api_url,t.development_origin,t.cname_targets&&t.cname_targets.map(e=>tS.fromJSON(e)),t.accounts_portal_url,t.proxy_url)}},tA=class e{constructor(e,t,r,s,i,a,n,o,d,c,u){this.id=e,this.fromEmailName=t,this.emailAddressId=r,this.toEmailAddress=s,this.subject=i,this.body=a,this.bodyPlain=n,this.status=o,this.slug=d,this.data=c,this.deliveredByClerk=u}static fromJSON(t){return new e(t.id,t.from_email_name,t.email_address_id,t.to_email_address,t.subject,t.body,t.body_plain,t.status,t.slug,t.data,t.delivered_by_clerk)}},tv=class e{constructor(e,t){this.id=e,this.type=t}static fromJSON(t){return new e(t.id,t.type)}},tI=class e{constructor(e,t,r=null,s=null,i=null,a=null,n=null){this.status=e,this.strategy=t,this.externalVerificationRedirectURL=r,this.attempts=s,this.expireAt=i,this.nonce=a,this.message=n}static fromJSON(t){return new e(t.status,t.strategy,t.external_verification_redirect_url?new URL(t.external_verification_redirect_url):null,t.attempts,t.expire_at,t.nonce)}},tO=class e{constructor(e,t,r,s){this.id=e,this.emailAddress=t,this.verification=r,this.linkedTo=s}static fromJSON(t){return new e(t.id,t.email_address,t.verification&&tI.fromJSON(t.verification),t.linked_to.map(e=>tv.fromJSON(e)))}},tq=class e{constructor(e,t,r,s,i,a,n,o,d,c,u,h,l={},p,m){this.id=e,this.provider=t,this.providerUserId=r,this.identificationId=s,this.externalId=i,this.approvedScopes=a,this.emailAddress=n,this.firstName=o,this.lastName=d,this.imageUrl=c,this.username=u,this.phoneNumber=h,this.publicMetadata=l,this.label=p,this.verification=m}static fromJSON(t){return new e(t.id,t.provider,t.provider_user_id,t.identification_id,t.provider_user_id,t.approved_scopes,t.email_address,t.first_name,t.last_name,t.image_url||"",t.username,t.phone_number,t.public_metadata,t.label,t.verification&&tI.fromJSON(t.verification))}},tP=class e{constructor(e,t,r){this.id=e,this.environmentType=t,this.allowedOrigins=r}static fromJSON(t){return new e(t.id,t.environment_type,t.allowed_origins)}},tC=class e{constructor(e,t,r,s,i){this.allowlist=e,this.blocklist=t,this.blockEmailSubaddresses=r,this.blockDisposableEmailDomains=s,this.ignoreDotsForGmailAddresses=i}static fromJSON(t){return new e(t.allowlist,t.blocklist,t.block_email_subaddresses,t.block_disposable_email_domains,t.ignore_dots_for_gmail_addresses)}},tx=class e{constructor(e,t,r,s,i){this.id=e,this.restrictedToAllowlist=t,this.fromEmailAddress=r,this.progressiveSignUp=s,this.enhancedEmailDeliverability=i}static fromJSON(t){return new e(t.id,t.restricted_to_allowlist,t.from_email_address,t.progressive_sign_up,t.enhanced_email_deliverability)}},tE=class e{constructor(e,t,r,s,i,a,n,o){this.id=e,this.emailAddress=t,this.publicMetadata=r,this.createdAt=s,this.updatedAt=i,this.status=a,this.url=n,this.revoked=o,this._raw=null}get raw(){return this._raw}static fromJSON(t){let r=new e(t.id,t.email_address,t.public_metadata,t.created_at,t.updated_at,t.status,t.url,t.revoked);return r._raw=t,r}},tU={AccountlessApplication:"accountless_application",ActorToken:"actor_token",AgentTask:"agent_task",AllowlistIdentifier:"allowlist_identifier",ApiKey:"api_key",BlocklistIdentifier:"blocklist_identifier",Client:"client",Cookies:"cookies",Domain:"domain",Email:"email",EmailAddress:"email_address",Instance:"instance",InstanceRestrictions:"instance_restrictions",InstanceSettings:"instance_settings",Invitation:"invitation",Machine:"machine",MachineScope:"machine_scope",MachineSecretKey:"machine_secret_key",M2MToken:"machine_to_machine_token",JwtTemplate:"jwt_template",OauthAccessToken:"oauth_access_token",IdpOAuthAccessToken:"clerk_idp_oauth_access_token",OAuthApplication:"oauth_application",Organization:"organization",OrganizationInvitation:"organization_invitation",OrganizationMembership:"organization_membership",OrganizationSettings:"organization_settings",PhoneNumber:"phone_number",ProxyCheck:"proxy_check",RedirectUrl:"redirect_url",SamlConnection:"saml_connection",Session:"session",SignInToken:"sign_in_token",SignUpAttempt:"sign_up_attempt",SmsMessage:"sms_message",User:"user",WaitlistEntry:"waitlist_entry",Token:"token",TotalCount:"total_count",BillingSubscription:"commerce_subscription",BillingSubscriptionItem:"commerce_subscription_item",BillingPlan:"commerce_plan",Feature:"feature"},tN=class e{constructor(e,t,r,s,i,a,n,o){this.id=e,this.name=t,this.instanceId=r,this.createdAt=s,this.updatedAt=i,this.scopedMachines=a,this.defaultTokenTtl=n,this.secretKey=o}static fromJSON(t){return new e(t.id,t.name,t.instance_id,t.created_at,t.updated_at,t.scoped_machines.map(t=>new e(t.id,t.name,t.instance_id,t.created_at,t.updated_at,[],t.default_token_ttl)),t.default_token_ttl,t.secret_key)}},tJ=class e{constructor(e,t,r,s){this.fromMachineId=e,this.toMac
1hineId=t,this.createdAt=r,this.deleted=s}static fromJSON(t){return new e(t.from_machine_id,t.to_machine_id,t.created_at,t.deleted)}},tM=class e{constructor(e){this.secret=e}static fromJSON(t){return new e(t.secret)}},tz=class e{constructor(e,t,r,s,i,a,n,o,d){this.id=e,this.name=t,this.claims=r,this.lifetime=s,this.allowedClockSkew=i,this.customSigningKey=a,this.signingAlgorithm=n,this.createdAt=o,this.updatedAt=d}static fromJSON(t){return new e(t.id,t.name,t.claims,t.lifetime,t.allowed_clock_skew,t.custom_signing_key,t.signing_algorithm,t.created_at,t.updated_at)}},tH=class e{constructor(e,t,r,s={},i,a,n,o,d){this.externalAccountId=e,this.provider=t,this.token=r,this.publicMetadata=s,this.label=i,this.scopes=a,this.tokenSecret=n,this.expiresAt=o,this.idToken=d}static fromJSON(t){return new e(t.external_account_id,t.provider,t.token,t.public_metadata,t.label||"",t.scopes,t.token_secret,t.expires_at,t.id_token)}},tj=class e{constructor(e,t,r,s,i,a,n,o,d,c,u,h,l,p,m,y,f,k,g,_){this.id=e,this.instanceId=t,this.name=r,this.clientId=s,this.clientUri=i,this.clientImageUrl=a,this.dynamicallyRegistered=n,this.consentScreenEnabled=o,this.pkceRequired=d,this.isPublic=c,this.scopes=u,this.redirectUris=h,this.authorizeUrl=l,this.tokenFetchUrl=p,this.userInfoUrl=m,this.discoveryUrl=y,this.tokenIntrospectionUrl=f,this.createdAt=k,this.updatedAt=g,this.clientSecret=_}static fromJSON(t){return new e(t.id,t.instance_id,t.name,t.client_id,t.client_uri,t.client_image_url,t.dynamically_registered,t.consent_screen_enabled,t.pkce_required,t.public,t.scopes,t.redirect_uris,t.authorize_url,t.token_fetch_url,t.user_info_url,t.discovery_url,t.token_introspection_url,t.created_at,t.updated_at,t.client_secret)}},tF=class e{constructor(e,t,r,s,i,a,n,o={},d={},c,u,h,l){this.id=e,this.name=t,this.slug=r,this.imageUrl=s,this.hasImage=i,this.createdAt=a,this.updatedAt=n,this.publicMetadata=o,this.privateMetadata=d,this.maxAllowedMemberships=c,this.adminDeleteEnabled=u,this.membersCount=h,this.createdBy=l,this._raw=null}get raw(){return this._raw}static fromJSON(t){let r=new e(t.id,t.name,t.slug,t.image_url||"",t.has_image,t.created_at,t.updated_at,t.public_metadata,t.private_metadata,t.max_allowed_memberships,t.admin_delete_enabled,t.members_count,t.created_by);return r._raw=t,r}},tR=class e{constructor(e,t,r,s,i,a,n,o,d,c,u={},h={},l){this.id=e,this.emailAddress=t,this.role=r,this.roleName=s,this.organizationId=i,this.createdAt=a,this.updatedAt=n,this.expiresAt=o,this.url=d,this.status=c,this.publicMetadata=u,this.privateMetadata=h,this.publicOrganizationData=l,this._raw=null}get raw(){return this._raw}static fromJSON(t){let r=new e(t.id,t.email_address,t.role,t.role_name,t.organization_id,t.created_at,t.updated_at,t.expires_at,t.url,t.status,t.public_metadata,t.private_metadata,t.public_organization_data);return r._raw=t,r}},tL=class e{constructor(e,t,r,s={},i={},a,n,o,d){this.id=e,this.role=t,this.permissions=r,this.publicMetadata=s,this.privateMetadata=i,this.createdAt=a,this.updatedAt=n,this.organization=o,this.publicUserData=d,this._raw=null}get raw(){return this._raw}static fromJSON(t){let r=new e(t.id,t.role,t.permissions,t.public_metadata,t.private_metadata,t.created_at,t.updated_at,tF.fromJSON(t.organization),tK.fromJSON(t.public_user_data));return r._raw=t,r}},tK=class e{constructor(e,t,r,s,i,a){this.identifier=e,this.firstName=t,this.lastName=r,this.imageUrl=s,this.hasImage=i,this.userId=a}static fromJSON(t){return new e(t.identifier,t.first_name,t.last_name,t.image_url,t.has_image,t.user_id)}},tD=class e{constructor(e,t,r,s,i,a,n,o,d,c){this.enabled=e,this.maxAllowedMemberships=t,this.maxAllowedRoles=r,this.maxAllowedPermissions=s,this.creatorRole=i,this.adminDeleteEnabled=a,this.domainsEnabled=n,this.slugDisabled=o,this.domainsEnrollmentModes=d,this.domainsDefaultRole=c}static fromJSON(t){return new e(t.enabled,t.max_allowed_memberships,t.max_allowed_roles,t.max_allowed_permissions,t.creator_role,t.admin_delete_enabled,t.domains_enabled,t.slug_disabled,t.domains_enrollment_modes,t.domains_default_role)}},tB=class e{constructor(e,t,r,s,i,a){this.id=e,this.phoneNumber=t,this.reservedForSecondFactor=r,this.defaultSecondFactor=s,this.verification=i,this.linkedTo=a}static fromJSON(t){return new e(t.id,t.phone_number,t.reserved_for_second_factor,t.default_second_factor,t.verification&&tI.fromJSON(t.verification),t.linked_to.map(e=>tv.fromJSON(e)))}},tW=class e{constructor(e,t,r,s,i,a,n){this.id=e,this.domainId=t,this.lastRunAt=r,this.proxyUrl=s,this.successful=i,this.createdAt=a,this.updatedAt=n}static fromJSON(t){return new e(t.id,t.domain_id,t.last_run_at,t.proxy_url,t.successful,t.created_at,t.updated_at)}},tG=class e{constructor(e,t,r,s){this.id=e,this.url=t,this.createdAt=r,this.updatedAt=s}static fromJSON(t){return new e(t.id,t.url,t.created_at,t.updated_at)}},t$=class e{constructor(e,t,r,s,i,a,n,o,d,c,u,h,l,p,m,y,f,k,g,_,S){this.id=e,this.name=t,this.domain=r,this.organizationId=s,this.idpEntityId=i,this.idpSsoUrl=a,this.idpCertificate=n,this.idpMetadataUrl=o,this.idpMetadata=d,this.acsUrl=c,this.spEntityId=u,this.spMetadataUrl=h,this.active=l,this.provider=p,this.userCount=m,this.syncUserAttributes=y,this.allowSubdomains=f,this.allowIdpInitiated=k,this.createdAt=g,this.updatedAt=_,this.attributeMapping=S}static fromJSON(t){return new e(t.id,t.name,t.domain,t.organization_id,t.idp_entity_id,t.idp_sso_url,t.idp_certificate,t.idp_metadata_url,t.idp_metadata,t.acs_url,t.sp_entity_id,t.sp_metadata_url,t.active,t.provider,t.user_count,t.sync_user_attributes,t.allow_subdomains,t.allow_idp_initiated,t.created_at,t.updated_at,t.attribute_mapping&&tQ.fromJSON(t.attribute_mapping))}},tV=class e{constructor(e,t,r,s,i,a,n,o,d,c){this.id=e,this.name=t,this.domain=r,this.active=s,this.provider=i,this.syncUserAttributes=a,this.allowSubdomains=n,this.allowIdpInitiated=o,this.createdAt=d,this.updatedAt=c}static fromJSON(t){return new e(t.id,t.name,t.domain,t.active,t.provider,t.sync_user_attributes,t.allow_subdomains,t.allow_idp_initiated,t.created_at,t.updated_at)}},tQ=class e{constructor(e,t,r,s){this.userId=e,this.emailAddress=t,this.firstName=r,this.lastName=s}static fromJSON(t){return new e(t.user_id,t.email_address,t.first_name,t.last_name)}},tY=class e{constructor(e,t,r,s,i,a,n,o,d,c,u){this.id=e,this.provider=t,this.providerUserId=r,this.active=s,this.emailAddress=i,this.firstName=a,this.lastName=n,this.verification=o,this.samlConnection=d,this.lastAuthenticatedAt=c,this.enterpriseConnectionId=u}static fromJSON(t){return new e(t.id,t.provider,t.provider_user_id,t.active,t.email_address,t.first_name,t.last_name,t.verification&&tI.fromJSON(t.verification),t.saml_connection&&tV.fromJSON(t.saml_connection),t.last_authenticated_at??null,t.enterprise_connection_id)}},tZ=class e{constructor(e,t,r,s,i,a,n){this.id=e,this.userId=t,this.token=r,this.status=s,this.url=i,this.createdAt=a,this.updatedAt=n}static fromJSON(t){return new e(t.id,t.user_id,t.token,t.status,t.url,t.created_at,t.updated_at)}},tX=class e{constructor(e,t){this.nextAction=e,this.supportedStrategies=t}static fromJSON(t){return new e(t.next_action,t.supported_strategies)}},t0=class e{constructor(e,t,r,s){this.emailAddress=e,this.phoneNumber=t,this.web3Wallet=r,this.externalAccount=s}static fromJSON(t){return new e(t.email_address&&tX.fromJSON(t.email_address),t.phone_number&&tX.fromJSON(t.phone_number),t.web3_wallet&&tX.fromJSON(t.web3_wallet),t.external_account)}},t1=class e{constructor(e,t,r,s,i,a,n,o,d,c,u,h,l,p,m,y,f,k,g,_,S,T){this.id=e,this.status=t,this.requiredFields=r,this.optionalFields=s,this.missingFields=i,this.unverifiedFields=a,this.verifications=n,this.username=o,this.emailAddress=d,this.phoneNumber=c,this.web3Wallet=u,this.passwordEnabled=h,this.firstName=l,this.lastName=p,this.customAction=m,this.externalId=y,this.createdSe
1ssionId=f,this.createdUserId=k,this.abandonAt=g,this.legalAcceptedAt=_,this.publicMetadata=S,this.unsafeMetadata=T}static fromJSON(t){return new e(t.id,t.status,t.required_fields,t.optional_fields,t.missing_fields,t.unverified_fields,t.verifications?t0.fromJSON(t.verifications):null,t.username,t.email_address,t.phone_number,t.web3_wallet,t.password_enabled,t.first_name,t.last_name,t.custom_action,t.external_id,t.created_session_id,t.created_user_id,t.abandon_at,t.legal_accepted_at,t.public_metadata,t.unsafe_metadata)}},t3=class e{constructor(e,t,r,s,i,a,n){this.id=e,this.fromPhoneNumber=t,this.toPhoneNumber=r,this.message=s,this.status=i,this.phoneNumberId=a,this.data=n}static fromJSON(t){return new e(t.id,t.from_phone_number,t.to_phone_number,t.message,t.status,t.phone_number_id,t.data)}},t2=class e{constructor(e){this.jwt=e}static fromJSON(t){return new e(t.jwt)}},t5=class e{constructor(e,t,r){this.id=e,this.web3Wallet=t,this.verification=r}static fromJSON(t){return new e(t.id,t.web3_wallet,t.verification&&tI.fromJSON(t.verification))}},t9=class e{constructor(e,t,r,s,i,a,n,o,d,c,u,h,l,p,m,y,f,k,g,_={},S={},T={},w=[],b=[],A=[],v=[],I=[],O,q,P=null,C,x,E){this.id=e,this.passwordEnabled=t,this.totpEnabled=r,this.backupCodeEnabled=s,this.twoFactorEnabled=i,this.banned=a,this.locked=n,this.createdAt=o,this.updatedAt=d,this.imageUrl=c,this.hasImage=u,this.primaryEmailAddressId=h,this.primaryPhoneNumberId=l,this.primaryWeb3WalletId=p,this.lastSignInAt=m,this.externalId=y,this.username=f,this.firstName=k,this.lastName=g,this.publicMetadata=_,this.privateMetadata=S,this.unsafeMetadata=T,this.emailAddresses=w,this.phoneNumbers=b,this.web3Wallets=A,this.externalAccounts=v,this.samlAccounts=I,this.lastActiveAt=O,this.createOrganizationEnabled=q,this.createOrganizationsLimit=P,this.deleteSelfEnabled=C,this.legalAcceptedAt=x,this.locale=E,this._raw=null}get raw(){return this._raw}static fromJSON(t){let r=new e(t.id,t.password_enabled,t.totp_enabled,t.backup_code_enabled,t.two_factor_enabled,t.banned,t.locked,t.created_at,t.updated_at,t.image_url,t.has_image,t.primary_email_address_id,t.primary_phone_number_id,t.primary_web3_wallet_id,t.last_sign_in_at,t.external_id,t.username,t.first_name,t.last_name,t.public_metadata,t.private_metadata,t.unsafe_metadata,(t.email_addresses||[]).map(e=>tO.fromJSON(e)),(t.phone_numbers||[]).map(e=>tB.fromJSON(e)),(t.web3_wallets||[]).map(e=>t5.fromJSON(e)),(t.external_accounts||[]).map(e=>tq.fromJSON(e)),(t.saml_accounts||[]).map(e=>tY.fromJSON(e)),t.last_active_at,t.create_organization_enabled,t.create_organizations_limit,t.delete_self_enabled,t.legal_accepted_at,t.locale);return r._raw=t,r}get primaryEmailAddress(){return this.emailAddresses.find(({id:e})=>e===this.primaryEmailAddressId)??null}get primaryPhoneNumber(){return this.phoneNumbers.find(({id:e})=>e===this.primaryPhoneNumberId)??null}get primaryWeb3Wallet(){return this.web3Wallets.find(({id:e})=>e===this.primaryWeb3WalletId)??null}get fullName(){return[this.firstName,this.lastName].join(" ").trim()||null}},t7=class e{constructor(e,t,r,s,i,a,n){this.id=e,this.emailAddress=t,this.status=r,this.invitation=s,this.createdAt=i,this.updatedAt=a,this.isLocked=n}static fromJSON(t){return new e(t.id,t.email_address,t.status,t.invitation&&tE.fromJSON(t.invitation),t.created_at,t.updated_at,t.is_locked)}},t6=class e{constructor(e,t,r,s,i){this.id=e,this.name=t,this.description=r,this.slug=s,this.avatarUrl=i}static fromJSON(t){return new e(t.id,t.name,t.description??null,t.slug,t.avatar_url??null)}},t8=class e{constructor(e,t,r,s,i,a,n,o,d,c,u,h,l){this.id=e,this.name=t,this.slug=r,this.description=s,this.isDefault=i,this.isRecurring=a,this.hasBaseFee=n,this.publiclyVisible=o,this.fee=d,this.annualFee=c,this.annualMonthlyFee=u,this.forPayerType=h,this.features=l}static fromJSON(t){let r=e=>e?{amount:e.amount,amountFormatted:e.amount_formatted,currency:e.currency,currencySymbol:e.currency_symbol}:null;return new e(t.id,t.name,t.slug,t.description??null,t.is_default,t.is_recurring,t.has_base_fee,t.publicly_visible,r(t.fee),r(t.annual_fee),r(t.annual_monthly_fee),t.for_payer_type,(t.features??[]).map(e=>t6.fromJSON(e)))}},t4=class e{constructor(e,t,r,s,i,a,n,o,d,c,u,h,l,p,m,y,f){this.id=e,this.status=t,this.planPeriod=r,this.periodStart=s,this.nextPayment=i,this.amount=a,this.plan=n,this.planId=o,this.createdAt=d,this.updatedAt=c,this.periodEnd=u,this.canceledAt=h,this.pastDueAt=l,this.endedAt=p,this.payerId=m,this.isFreeTrial=y,this.lifetimePaid=f}static fromJSON(t){function r(e){return e?{amount:e.amount,amountFormatted:e.amount_formatted,currency:e.currency,currencySymbol:e.currency_symbol}:e}return new e(t.id,t.status,t.plan_period,t.period_start,t.next_payment,r(t.amount)??void 0,t.plan?t8.fromJSON(t.plan):null,t.plan_id??null,t.created_at,t.updated_at,t.period_end,t.canceled_at,t.past_due_at,t.ended_at,t.payer_id,t.is_free_trial,r(t.lifetime_paid)??void 0)}},re=class e{constructor(e,t,r,s,i,a,n,o,d,c){this.id=e,this.status=t,this.payerId=r,this.createdAt=s,this.updatedAt=i,this.activeAt=a,this.pastDueAt=n,this.subscriptionItems=o,this.nextPayment=d,this.eligibleForFreeTrial=c}static fromJSON(t){let r=t.next_payment?{date:t.next_payment.date,amount:{amount:t.next_payment.amount.amount,amountFormatted:t.next_payment.amount.amount_formatted,currency:t.next_payment.amount.currency,currencySymbol:t.next_payment.amount.currency_symbol}}:null;return new e(t.id,t.status,t.payer_id,t.created_at,t.updated_at,t.active_at??null,t.past_due_at??null,(t.subscription_items??[]).map(e=>t4.fromJSON(e)),r,t.eligible_for_free_trial??!1)}};function rt(e){if("string"!=typeof e&&"object"in e&&"deleted"in e)return tw.fromJSON(e);switch(e.object){case tU.AccountlessApplication:return th.fromJSON(e);case tU.ActorToken:return tp.fromJSON(e);case tU.AllowlistIdentifier:return tm.fromJSON(e);case tU.ApiKey:return ty.fromJSON(e);case tU.BlocklistIdentifier:return tf.fromJSON(e);case tU.Client:return t_.fromJSON(e);case tU.Cookies:return tT.fromJSON(e);case tU.Domain:return tb.fromJSON(e);case tU.EmailAddress:return tO.fromJSON(e);case tU.Email:return tA.fromJSON(e);case tU.IdpOAuthAccessToken:return ei.fromJSON(e);case tU.Instance:return tP.fromJSON(e);case tU.InstanceRestrictions:return tC.fromJSON(e);case tU.InstanceSettings:return tx.fromJSON(e);case tU.Invitation:return tE.fromJSON(e);case tU.JwtTemplate:return tz.fromJSON(e);case tU.Machine:return tN.fromJSON(e);case tU.MachineScope:return tJ.fromJSON(e);case tU.MachineSecretKey:return tM.fromJSON(e);case tU.M2MToken:return ea.fromJSON(e);case tU.OauthAccessToken:return tH.fromJSON(e);case tU.OAuthApplication:return tj.fromJSON(e);case tU.Organization:return tF.fromJSON(e);case tU.OrganizationInvitation:return tR.fromJSON(e);case tU.OrganizationMembership:return tL.fromJSON(e);case tU.OrganizationSettings:return tD.fromJSON(e);case tU.PhoneNumber:return tB.fromJSON(e);case tU.ProxyCheck:return tW.fromJSON(e);case tU.RedirectUrl:return tG.fromJSON(e);case tU.SamlConnection:return t$.fromJSON(e);case tU.SignInToken:return tZ.fromJSON(e);case tU.AgentTask:return tl.fromJSON(e);case tU.SignUpAttempt:return t1.fromJSON(e);case tU.Session:return tg.fromJSON(e);case tU.SmsMessage:return t3.fromJSON(e);case tU.Token:return t2.fromJSON(e);case tU.TotalCount:return e.total_count;case tU.User:return t9.fromJSON(e);case tU.WaitlistEntry:return t7.fromJSON(e);case tU.BillingPlan:return t8.fromJSON(e);case tU.BillingSubscription:return re.fromJSON(e);case tU.BillingSubscriptionItem:return t4.fromJSON(e);case tU.Feature:return t6.fromJSON(e);default:return e}}function rr(e){var t;return t=async t=>{let r,{secretKey:s,machineSecretKey:i,useMachineSecretKey:a=!1,requireSecretKey:n=!0,apiUrl:o=g,apiVersion:c="v1",userAgent:u=_,skipApiVersionInUrl:h=!1}=e,{path:l,method:p,queryParams:m,headerParams:y,bodyParams:f,formData:k,options:T}=t,{deepSnakecaseBodyParamKeys:w=!1}
1=T||{};n&&v(s);let A=new URL(h?C(o,l):C(o,c,l));if(m)for(let[e,t]of Object.entries(tu({...m})))t&&[t].flat().forEach(t=>A.searchParams.append(e,t));let I=new Headers({"Clerk-API-Version":S,[b.Headers.UserAgent]:u,...y}),O=b.Headers.Authorization;!I.has(O)&&(a&&i?I.set(O,`Bearer ${i}`):s&&I.set(O,`Bearer ${s}`));try{k?r=await d.fA.fetch(A.href,{method:p,headers:I,body:k}):(I.set("Content-Type","application/json"),r=await d.fA.fetch(A.href,{method:p,headers:I,...(()=>{if(!("GET"!==p&&f&&Object.keys(f).length>0))return null;let e=e=>tu(e,{deep:w});return{body:JSON.stringify(Array.isArray(f)?f.map(e):e(f))}})()}));let e=r?.headers&&r.headers?.get(b.Headers.ContentType)===b.ContentTypes.Json,t=await (e?r.json():r.text());if(!r.ok)return{data:null,errors:ra(t),status:r?.status,statusText:r?.statusText,clerkTraceId:rs(t,r?.headers),retryAfter:ri(r?.headers)};return{...function(e){var t,r;let s;if(Array.isArray(e))return{data:e.map(e=>rt(e))};if((t=e)&&"object"==typeof t&&"m2m_tokens"in t&&Array.isArray(t.m2m_tokens))return{data:s=e.m2m_tokens.map(e=>rt(e)),totalCount:e.total_count};return(r=e)&&"object"==typeof r&&"data"in r&&Array.isArray(r.data)&&void 0!==r.data?{data:s=e.data.map(e=>rt(e)),totalCount:e.total_count}:{data:rt(e)}}(t),errors:null}}catch(e){if(e instanceof Error)return{data:null,errors:[{code:"unexpected_error",message:e.message||"Unexpected error"}],clerkTraceId:rs(e,r?.headers)};return{data:null,errors:ra(e),status:r?.status,statusText:r?.statusText,clerkTraceId:rs(e,r?.headers),retryAfter:ri(r?.headers)}}},async(...e)=>{let{data:r,errors:s,totalCount:i,status:a,statusText:n,clerkTraceId:o,retryAfter:d}=await t(...e);if(s){let e=new y.LR(n||"",{data:[],status:a,clerkTraceId:o,retryAfter:d});throw e.errors=s,e}return void 0!==i?{data:r,totalCount:i}:r}}function rs(e,t){return e&&"object"==typeof e&&"clerk_trace_id"in e&&"string"==typeof e.clerk_trace_id?e.clerk_trace_id:t?.get("cf-ray")||""}function ri(e){let t=e?.get("Retry-After");if(!t)return;let r=parseInt(t,10);if(!isNaN(r))return r}function ra(e){if(e&&"object"==typeof e&&"errors"in e){let t=e.errors;return t.length>0?t.map(y.u$):[]}return[]}function rn(e){let t=rr(e);return{__experimental_accountlessApplications:new z(rr({...e,requireSecretKey:!1})),actorTokens:new U(t),agentTasks:new J(t),allowlistIdentifiers:new j(t),apiKeys:new R(rr({...e,skipApiVersionInUrl:!0})),betaFeatures:new L(t),blocklistIdentifiers:new D(t),billing:new e2(t),clients:new W(t),domains:new $(t),emailAddresses:new Q(t),idPOAuthAccessToken:new Y(rr({...e,skipApiVersionInUrl:!0})),instance:new X(t),invitations:new et(t),jwks:new eP(t),jwtTemplates:new ex(t),machines:new es(t),m2m:new eq(rr({...e,skipApiVersionInUrl:!0,requireSecretKey:!1,useMachineSecretKey:!0}),{secretKey:e.secretKey,apiUrl:e.apiUrl,jwtKey:e.jwtKey}),oauthApplications:new eJ(t),organizations:new eU(t),phoneNumbers:new ez(t),proxyChecks:new eH(t),redirectUrls:new eF(t),samlConnections:new eL(t),sessions:new eD(t),signInTokens:new eW(t),signUps:new e$(t),testingTokens:new eV(t),users:new eY(t),waitlistEntries:new eX(t),webhooks:new e1(t)}}var ro=e=>()=>{let t={...e};return t.secretKey=(t.secretKey||"").substring(0,7),t.jwtKey=(t.jwtKey||"").substring(0,7),{...t}};function rd(e,t){return{tokenType:I.SessionToken,sessionClaims:null,sessionId:null,
1sessionStatus:t??null,userId:null,actor:null,orgId:null,orgRole:null,orgSlug:null,orgPermissions:null,factorVerificationAge:null,getToken:()=>Promise.resolve(null),has:()=>!1,debug:ro(e),isAuthenticated:!1}}var rc={SignedIn:"signed-in",SignedOut:"signed-out",Handshake:"handshake"},ru={ClientUATWithoutSessionToken:"client-uat-but-no-session-token",DevBrowserMissing:"dev-browser-missing",DevBrowserSync:"dev-browser-sync",PrimaryRespondsToSyncing:"primary-responds-to-syncing",PrimaryDomainCrossOriginSync:"primary-domain-cross-origin-sync",SatelliteCookieNeedsSyncing:"satellite-needs-syncing",SessionTokenAndUATMissing:"session-token-and-uat-missing",SessionTokenMissing:"session-token-missing",SessionTokenExpired:"session-token-expired",SessionTokenIATBeforeClientUAT:"session-token-iat-before-client-uat",SessionTokenNBF:"session-token-nbf",SessionTokenIatInTheFuture:"session-token-iat-in-the-future",SessionTokenWithoutClientUAT:"session-token-but-no-client-uat",ActiveOrganizationMismatch:"active-organization-mismatch",TokenTypeMismatch:"token-type-mismatch",UnexpectedError:"unexpected-error"};function rh(e){let{authenticateContext:t,headers:r=new Headers,token:s}=e;return{status:rc.SignedIn,reason:null,message:null,proxyUrl:t.proxyUrl||"",publishableKey:t.publishableKey||"",isSatellite:t.isSatellite||!1,domain:t.domain||"",signInUrl:t.signInUrl||"",signUpUrl:t.signUpUrl||"",afterSignInUrl:t.afterSignInUrl||"",afterSignUpUrl:t.afterSignUpUrl||"",isSignedIn:!0,isAuthenticated:!0,tokenType:e.tokenType,toAuth:({treatPendingAsSignedOut:r=!0}={})=>{if(e.tokenType===I.SessionToken){let{sessionClaims:i}=e,a=function(e,t,r){let{actor:s,sessionId:i,sessionStatus:a,userId:n,orgId:o,orgRole:d,orgSlug:c,orgPermissions:u,factorVerificationAge:h}=(0,m.Y)(r),l=rn(e),y=(e=>{let{fetcher:t,sessionToken:r,sessionId:s}=e||{};return async(e={})=>s?e.template||void 0!==e.expiresInSeconds?t(s,e.template,e.expiresInSeconds):r:null})({sessionId:i,sessionToken:t,fetcher:async(e,t,r)=>(await l.sessions.getToken(e,t||"",r)).jwt});return{tokenType:I.SessionToken,actor:s,sessionClaims:r,sessionId:i,sessionStatus:a,userId:n,orgId:o,orgRole:d,orgSlug:c,orgPermissions:u,factorVerificationAge:h,getToken:y,has:(0,p.MR)({orgId:o,orgRole:d,orgPermissions:u,userId:n,factorVerificationAge:h,features:r.fea||"",plans:r.pla||""}),debug:ro({...e,sessionToken:t}),isAuthenticated:!0}}(t,s,i);return r&&"pending"===a.sessionStatus?rd(void 0,a.sessionStatus):a}let{machineData:i}=e;var a=e.tokenType;let n={id:i.id,subject:i.subject,getToken:()=>Promise.resolve(s),has:()=>!1,debug:ro(t),isAuthenticated:!0};switch(a){case I.ApiKey:return{...n,tokenType:a,name:i.name,claims:i.claims,scopes:i.scopes,userId:i.subject.startsWith("user_")?i.subject:null,orgId:i.subject.startsWith("org_")?i.subject:null};case I.M2MToken:return{...n,tokenType:a,claims:i.claims,scopes:i.scopes,machineId:i.subject};case I.OAuthToken:return{...n,tokenType:a,scopes:i.scopes,userId:i.subject,clientId:i.clientId};default:throw Error(`Invalid token type: ${a}`)}},headers:r,token:s}}function rl(e){let{authenticateContext:t,headers:r=new Headers,reason:s,message:i="",tokenType:a}=e;return rp({status:rc.SignedOut,reason:s,message:i,proxyUrl:t.proxyUrl||"",publishableKey:t.publishableKey||"",isSatellite:t.isSatellite||!1,domain:t.domain||"",signInUrl:t.signInUrl||"",signUpUrl:t.signUpUrl||"",afterSignInUrl:t.afterSignInUrl||"",afterSignUpUrl:t.afterSignUpUrl||"",isSignedIn:!1,isAuthenticated:!1,tokenType:a,toAuth:()=>{if(a===I.SessionToken)return rd({...t,status:rc.SignedOut,reason:s,message:i});let e={id:null,subject:null,scopes:null,has:()=>!1,getToken:()=>Promise.resolve(null),debug:ro({reason:s,message:i,headers:r}),isAuthenticated:!1};switch(a){case I.ApiKey:return{...e,tokenType:a,name:null,claims:null,scopes:null,userId:null,orgId:null};case I.M2MToken:return{...e,tokenType:a,claims:null,scopes:null,machineId:null};case I.OAuthToken:return{...e,tokenType:a,scopes:null,userId:null,clientId:null};default:throw Error(`Invalid token type: ${a}`)}},headers:r,token:null})}var rp=e=>{let t=new Headers(e.headers||{});if(e.message)try{t.set(b.Headers.AuthMessage,e.message)}catch{}if(e.reason)try{t.set(b.Headers.AuthReason,e.reason)}catch{}if(e.status)try{t.set(b.Headers.AuthStatus,e.status)}catch{}return e.headers=t,e},rm=(0,u.f1)(k()),ry=class extends URL{isCrossOrigin(e){return this.origin!==new URL(e.toString()).origin}},rf=(...e)=>new ry(...e),rk=class extends Request{constructor(e,t){super("string"!=typeof e&&"url"in e?e.url:String(e),t||"string"==typeof e?void 0:e),this.clerkUrl=this.deriveUrlFromHeaders(this),this.cookies=this.parseCookies(this)}toJSON(){return{url:this.clerkUrl.href,method:this.method,headers:JSON.stringify(Object.fromEntries(this.headers)),clerkUrl:this.clerkUrl.toString(),cookies:JSON.stringify(Object.fromEntries(this.cookies))}}deriveUrlFromHeaders(e){let t=new URL(e.url),r=e.headers.get(b.Headers.ForwardedProto),s=e.headers.get(b.Headers.ForwardedHost),i=e.headers.get(b.Headers.Host),a=t.protocol,n=this.getFirstValueFromHeader(s)??i,o=this.getFirstValueFromHeader(r)??a?.replace(/[:/]/,""),d=n&&o?`${o}://${n}`:t.origin;return d===t.origin?rf(t):rf(t.pathname+t.search,d)}getFirstValueFromHeader(e){return e?.split(",")[0]}parseCookies(e){return new Map(Object.entries((0,rm.parse)(this.decodeCookieValue(e.headers.get("cookie")||""))))}decodeCookieValue(e){return e?e.replace(/(%[0-9A-Z]{2}
1)+/g,decodeURIComponent):e}},rg=e=>e.split(";")[0]?.split("=")[0],r_=e=>e.split(";")[0]?.split("=")[1];async function rS(e,t){let{data:r,errors:s}=(0,d.iU)(e);if(s)return{errors:s};let{header:i}=r,{kid:a}=i;try{let r;if(t.jwtKey)r=ec({kid:a,pem:t.jwtKey});else{if(!t.secretKey)return{errors:[new c.zF({action:c.z.SetClerkJWTKey,message:"Failed to resolve JWK during verification.",reason:c.jn.JWKFailedToResolve})]};r=await eu({...t,kid:a})}return await (0,d.J0)(e,{...t,key:r})}catch(e){return{errors:[e]}}}function rT(e,t,r){if((0,y.$R)(t)){let s,i;switch(t.status){case 401:s=c.h5.InvalidSecretKey,i=t.errors[0]?.message||"Invalid secret key";break;case 404:s=c.h5.TokenInvalid,i=r;break;default:s=c.h5.UnexpectedError,i="Unexpected error"}return{data:void 0,tokenType:e,errors:[new c.sM({message:i,code:s,status:t.status})]}}return{data:void 0,tokenType:e,errors:[new c.sM({message:"Unexpected error",code:c.h5.UnexpectedError,status:t.status})]}}async function rw(e,t){try{let r=rn(t);return{data:await r.m2m.verify({token:e}),tokenType:I.M2MToken,errors:void 0}}catch(e){return rT(I.M2MToken,e,"Machine token not found")}}async function rb(e,t){try{let r=rn(t);return{data:await r.idPOAuthAccessToken.verify(e),tokenType:I.OAuthToken,errors:void 0}}catch(e){return rT(I.OAuthToken,e,"OAuth token not found")}}async function rA(e,t){try{let r=rn(t);return{data:await r.apiKeys.verify(e),tokenType:I.ApiKey,errors:void 0}}catch(e){return rT(I.ApiKey,e,"API key not found")}}async function rv(e,t){if(ek(e)){let r;try{let{data:t,errors:s}=(0,d.iU)(e);if(s)throw s[0];r=t}catch(e){return{data:void 0,tokenType:I.M2MToken,errors:[new c.sM({code:c.h5.TokenInvalid,message:e.message})]}}return r.payload.sub.startsWith(ep)?ev(e,r,t):eg.includes(r.header.typ)?eI(e,r,t):{data:void 0,tokenType:I.OAuthToken,errors:[new c.sM({code:c.h5.TokenVerificationFailed,message:`Invalid JWT type: ${r.header.typ??"missing"}. Expected one of: ${eg.join(", ")} for OAuth, or sub starting with 'mch_' for M2M`})]}}if(e.startsWith("mt_"))return rw(e,t);if(e.startsWith(em))return rb(e,t);if(e.startsWith("ak_"))return rA(e,t);throw Error("Unknown machine token type")}async function rI(e,{key:t}){let{data:r,errors:s}=(0,d.iU)(e);if(s)throw s[0];let{header:i,payload:a}=r,{typ:n,alg:o}=i;(0,d.qf)(n),(0,d.l3)(o);let{data:u,errors:h}=await (0,d.nk)(r,t);if(h)throw new c.zF({reason:c.jn.TokenVerificationFailed,message:`Error verifying handshake token. ${h[0]}`});if(!u)throw new c.zF({reason:c.jn.TokenInvalidSignature,message:"Handshake signature is invalid."});return a}async function rO(e,t){let r,{secretKey:s,apiUrl:i,apiVersion:a,jwksCacheTtlInMs:n,jwtKey:o,skipJwksCache:u}=t,{data:h,errors:l}=(0,d.iU)(e);if(l)throw l[0];let{kid:p}=h.header;if(o)r=ec({kid:p,pem:o});else if(s)r=await eu({secretKey:s,apiUrl:i,apiVersion:a,kid:p,jwksCacheTtlInMs:n,skipJwksCache:u});else throw new c.zF({action:c.z.SetClerkJWTKey,message:"Failed to resolve JWK during handshake verification.",reason:c.jn.JWKFailedToResolve});return rI(e,{key:r})}var rq=class{constructor(e,t,r){this.authenticateContext=e,this.options=t,this.organizationMatcher=r}isRequestEligibleForHandshake(){let{accept:e,secFetchDest:t}=this.authenticateContext;return!!("document"===t||"iframe"===t||!t&&e?.startsWith("text/html"))}buildRedirectToHandshake(e){if(!this.authenticateContext?.clerkUrl)throw Error("Missing clerkUrl in authenticateContext");let t=this.removeDevBrowserFromURL(this.authenticateContext.clerkUrl),r=this.authenticateContext.frontendApi.startsWith("http")?this.authenticateContext.frontendApi:`https://${this.authenticateContext.frontendApi}`,s=new URL("v1/client/handshake",r=r.replace(/\/+$/,"")+"/");s.searchParams.append("redirect_url",t?.href||""),s.searchParams.append("__clerk_api_version",S),s.searchParams.append(b.QueryParameters.SuffixedCookies,this.authenticateContext.usesSuffixedCookies().toString()),s.searchParams.append(b.QueryParameters.HandshakeReason,e),s.searchParams.append(b.QueryParameters.HandshakeFormat,"nonce"),this.authenticateContext.sessionToken&&s.searchParams.append(b.QueryParameters.Session,this.authenticateContext.sessionToken),"development"===this.authenticateContext.
1instanceType&&this.authenticateContext.devBrowserToken&&s.searchParams.append(b.QueryParameters.DevBrowser,this.authenticateContext.devBrowserToken);let i=this.getOrganizationSyncTarget(this.authenticateContext.clerkUrl,this.organizationMatcher);return i&&this.getOrganizationSyncQueryParams(i).forEach((e,t)=>{s.searchParams.append(t,e)}),new Headers({[b.Headers.Location]:s.href})}async getCookiesFromHandshake(){let e=[];if(this.authenticateContext.handshakeNonce)try{let t=await this.authenticateContext.apiClient?.clients.getHandshakePayload({nonce:this.authenticateContext.handshakeNonce});t&&e.push(...t.directives)}catch(e){console.error("Clerk: HandshakeService: error getting handshake payload:",e)}else if(this.authenticateContext.handshakeToken){let t=await rO(this.authenticateContext.handshakeToken,this.authenticateContext);t&&Array.isArray(t.handshake)&&e.push(...t.handshake)}return e}async resolveHandshake(){let e=new Headers({"Access-Control-Allow-Origin":"null","Access-Control-Allow-Credentials":"true"}),t=await this.getCookiesFromHandshake(),r="";if(t.forEach(t=>{e.append("Set-Cookie",t),rg(t).startsWith(b.Cookies.Session)&&(r=r_(t))}),"development"===this.authenticateContext.instanceType){let t=new URL(this.authenticateContext.clerkUrl);t.searchParams.delete(b.QueryParameters.Handshake),t.searchParams.delete(b.QueryParameters.HandshakeHelp),t.searchParams.delete(b.QueryParameters.DevBrowser),t.searchParams.delete(b.QueryParameters.HandshakeNonce),e.append(b.Headers.Location,t.toString()),e.set(b.Headers.CacheControl,"no-store")}if(""===r)return rl({tokenType:I.SessionToken,authenticateContext:this.authenticateContext,reason:ru.SessionTokenMissing,message:"",headers:e});let{data:s,errors:[i]=[]}=await rS(r,this.authenticateContext);if(s)return rh({tokenType:I.SessionToken,authenticateContext:this.authenticateContext,sessionClaims:s,headers:e,token:r});if("development"===this.authenticateContext.instanceType&&(i?.reason===c.jn.TokenExpired||i?.reason===c.jn.TokenNotActiveYet||i?.reason===c.jn.TokenIatInTheFuture)){let t=new c.zF({action:i.action,message:i.message,reason:i.reason});t.tokenCarrier="cookie",console.error(`Clerk: Clock skew detected. This usually means that your system clock is inaccurate. Clerk will attempt to account for the clock skew in development. 2 3To resolve this issue, make sure your system's clock is set to the correct time (e.g. turn off and on automatic time synchronization). 4 5--- 6 7${t.getFullMessage()}`);let{data:s,errors:[a]=[]}=await rS(r,{...this.authenticateContext,clockSkewInMs:864e5});if(s)return rh({tokenType:I.SessionToken,authenticateContext:this.authenticateContext,sessionClaims:s,headers:e,token:r});throw Error(a?.message||"Clerk: Handshake retry failed.")}throw Error(i?.message||"Clerk: Handshake failed.")}handleTokenVerificationErrorInDevelopment(e){if(e.reason===c.jn.TokenInvalidSignature)throw Error("Clerk: Handshake token verification failed due to an invalid signature. If you have switched Clerk keys locally, clear your cookies and try again.");throw Error(`Clerk: Handshake token verification failed: ${e.getFullMessage()}.`)}checkAndTrackRedirectLoop(e){if(3===this.authenticateContext.handshakeRedirectLoopCounter)return!0;let t=this.authenticateContext.handshakeRedirectLoopCounter+1,r=b.Cookies.RedirectCount;return e.append("Set-Cookie",`${r}=${t}; SameSite=Lax; HttpOnly; Max-Age=2`),!1}removeDevBrowserFromURL(e){let t=new URL(e);return t.searchParams.delete(b.QueryParameters.DevBrowser),t.searchParams.delete(b.QueryParameters.LegacyDevBrowser),t}getOrganizationSyncTarget(e,t){return t.findTarget(e)}getOrganizationSyncQueryParams(e){let t=new Map;return"personalAccount"===e.type&&t.set("organization_id",""),"organization"===e.type&&(e.organizationId&&t.set("organization_id",e.organizationId),e.organizationSlug&&t.set("organization_id",e.organizationSlug)),t}},rP=class{constructor(e){this.organizationPattern=this.createMatcher(e?.organizationPatterns),this.personalAccountPattern=this.createMatcher(e?.personalAccountPatterns)}createMatcher(e){if(!e)return null;try{return(0,f.Y)(e)}catch(t){throw Error(`Invalid pattern "${e}": ${t}`)}}findTarget(e){let t=this.findOrganizationTarget(e);return t||this.findPersonalAccountTarget(e)}findOrganizationTarget(e){if(!this.organizationPattern)return null;try{let t=this.organizationPattern(e.pathname);if(!t||!("params"in t))return null;let r=t.params;if(r.id)return{type:"organization",organizationId:r.id};if(r.slug)return{type:"organization",organizationSlug:r.slug};return null}catch(e){return console.error("Failed to match organization pattern:",e),null}}findPersonalAccountTarget(e){if(!this.personalAccountPattern)return null;try{return this.personalAccountPattern(e.pathname)?{type:"personalAccount"}:null}catch(e){return console.error("Failed to match personal account pattern:",e),null}}},rC={NonEligibleNoCookie:"non-eligible-no-refresh-cookie",NonEligibleNonGet:"non-eligible-non-get",InvalidSessionToken:"invalid-session-token",MissingApiClient:"missing-api-client",MissingSessionToken:"missing-session-token",MissingRefreshToken:"missing-refresh-token",ExpiredSessionTokenDecodeFailed:"expired-session-token-decode-failed",ExpiredSessionTokenMissingSidClaim:"expired-session-token-missing-sid-claim",FetchError:"fetch-error",UnexpectedSDKError:"unexpected-sdk-error",UnexpectedBAPIError:"unexpected-bapi-error"};function rx(e,t,r){return eb(e,t)?null:rl({tokenType:"string"==typeof t?t:e,authenticateContext:r,reason:ru.TokenTypeMismatch})}var rE=async(e,t)=>{let r=await q(((...e)=>e[0]&&"object"==typeof e[0]&&"clerkUrl"in e[0]&&"cookies"in e[0]?e[0]:new rk(...e))(e),t),s=t.acceptsToken??I.SessionToken;if(s!==I.M2MToken&&(v(r.secretKey),r.isSatellite)){var i=r.signInUrl,a=r.secretKey;if(!i&&(0,o.Ve)(a))throw Error("Missing signInUrl. Pass a signInUrl for dev instances if an app is satellite");if(r.signInUrl&&r.origin&&function(e,t){let r;try{r=new URL(e)}catch{throw Error("The signInUrl needs to have a absolute url format.")}if(r.origin===t)throw Error("The signInUrl needs to be on a different origin than your satellite application.")}(r.signInUrl,r.origin),!(r.proxyUrl||r.domain))throw Error("Missing domain and proxyUrl. A satellite application needs to specify a domain or a proxyUrl")}s===I.M2MToken&&function(e){if(!e.machineSecretKey&&!e.secretKey)throw Error("Machine token authentication requires either a Machine secret key or a Clerk secret key. Ensure a Clerk secret key or Machine secret key is set.")}(r);let n=new rP(t.organizationSyncOptions),u=new rq(r,{organizationSyncOptions:t.organizationSyncOptions},n);async function h(r){if(!t.apiClient)return{data:null,error:{message:"An apiClient is needed to perform token refresh.",cause:{reason:rC.MissingApiClient}}};let{sessionToken:s,refreshTokenInCookie:i}=r;if(!s)return{data:null,error:{message:"Session token must be provided.",cause:{reason:rC.MissingSessionToken}}};if(!i)return{data:null,error:{message:"Refresh token must be provided.",cause:{reason:rC.MissingRefreshToken}}};let{data:a,errors:n}=(0,d.iU)(s);if(!a||n)return{data:null,error:{message:"Unable to decode the expired session token.",cause:{reason:rC.ExpiredSessionTokenDecodeFailed,errors:n}}};if(!a?.payload?.sid)return{data:null,error:{message:"Expired session token is missing the `sid` claim.",cause:{reason:rC.ExpiredSessionTokenMissingSidClaim}}};try{return{data:(await t.apiClient.sessions.refreshSession(a.payload.sid,{format:"cookie",suffixed_cookies:r.usesSuffixedCookies(),expired_token:s||"",refresh_token:i||"",request_origin:r.clerkUrl.origin,request_headers:Object.fromEntries(Array.from(e.headers.entries()).map(([e,t])=>[e,[t]]))})).cookies,error:null}}catch(e){if(!e?.errors?.length)return{data:null,error:{message:"Unexpected Server/BAPI error",cause:{reason:rC.UnexpectedBAPIError,errors:[e]}}};if("unexpected_error"===e.errors[0].code)return{data:null,error:{message:"Fetch unexpected error",cause:{reason:rC.FetchError,errors:e.errors}}};return{data:null,error:{message:e.errors[0].code,cause:{reason:e.errors[0].code,errors:e.errors}}}}}async function l(e){let{data:t,error:r}=await h(e);if(!t||0===t.length)return{data:null,error:r};let s=new Headers,i="";
7t.forEach(e=>{s.append("Set-Cookie",e),rg(e).startsWith(b.Cookies.Session)&&(i=r_(e))});let{data:a,errors:n}=await rS(i,e);return n?{data:null,error:{message:"Clerk: unable to verify refreshed session token.",cause:{reason:rC.InvalidSessionToken,errors:n}}}:{data:{jwtPayload:a,sessionToken:i,headers:s},error:null}}function p(e,t,r,s){if(!u.isRequestEligibleForHandshake())return rl({tokenType:I.SessionToken,authenticateContext:e,reason:t,message:r});let i=s??u.buildRedirectToHandshake(t);return(i.get(b.Headers.Location)&&i.set(b.Headers.CacheControl,"no-store"),u.checkAndTrackRedirectLoop(i))?(console.log("Clerk: Refreshing the session token resulted in an infinite redirect loop. This usually means that your Clerk instance keys do not match - make sure to copy the correct publishable and secret keys from the Clerk dashboard."),rl({tokenType:I.SessionToken,authenticateContext:e,reason:t,message:r})):function(e,t,r="",s){return rp({status:rc.Handshake,reason:t,message:r,publishableKey:e.publishableKey||"",isSatellite:e.isSatellite||!1,domain:e.domain||"",proxyUrl:e.proxyUrl||"",signInUrl:e.signInUrl||"",signUpUrl:e.signUpUrl||"",afterSignInUrl:e.afterSignInUrl||"",afterSignUpUrl:e.afterSignUpUrl||"",isSignedIn:!1,isAuthenticated:!1,tokenType:I.SessionToken,toAuth:()=>null,headers:s,token:null})}(e,t,r,i)}async function m(){let{tokenInHeader:e}=r;if(e_(e)||eS(e))return rl({tokenType:I.SessionToken,authenticateContext:r,reason:ru.TokenTypeMismatch,message:""});try{let{data:t,errors:s}=await rS(e,r);if(s)throw s[0];return rh({tokenType:I.SessionToken,authenticateContext:r,sessionClaims:t,headers:new Headers,token:e})}catch(e){return f(e,"header")}}async function y(){let e=r.clientUat,t=!!r.sessionTokenInCookie,s=!!r.devBrowserToken;if(r.handshakeNonce||r.handshakeToken)try{return await u.resolveHandshake()}catch(e){e instanceof c.zF&&"development"===r.instanceType?u.handleTokenVerificationErrorInDevelopment(e):console.error("Clerk: unable to resolve handshake:",e)}let i=r.isSatellite&&"document"===r.secFetchDest;if("production"===r.instanceType&&i)return p(r,ru.SatelliteCookieNeedsSyncing,"");if("development"===r.instanceType&&i&&!r.clerkUrl.searchParams.has(b.QueryParameters.ClerkSynced)){let e=new URL(r.signInUrl);e.searchParams.append(b.QueryParameters.ClerkRedirectUrl,r.clerkUrl.toString());let t=new Headers({[b.Headers.Location]:e.toString()});return p(r,ru.SatelliteCookieNeedsSyncing,"",t)}let a=new URL(r.clerkUrl).searchParams.get(b.QueryParameters.ClerkRedirectUrl);if("development"===r.instanceType&&!r.isSatellite&&a){let e=new URL(a);r.devBrowserToken&&e.searchParams.append(b.QueryParameters.DevBrowser,r.devBrowserToken),e.searchParams.append(b.QueryParameters.ClerkSynced,"true");let t=new Headers({[b.Headers.Location]:e.toString()});return p(r,ru.PrimaryRespondsToSyncing,"",t)}if("development"===r.instanceType&&r.clerkUrl.searchParams.has(b.QueryParameters.DevBrowser))return p(r,ru.DevBrowserSync,"");if("development"===r.instanceType&&!s)return p(r,ru.DevBrowserMissing,"");if(!e&&!t)return rl({tokenType:I.SessionToken,authenticateContext:r,reason:ru.SessionTokenAndUATMissing});if(!e&&t)return p(r,ru.SessionTokenWithoutClientUAT,"");if(e&&!t)return p(r,ru.ClientUATWithoutSessionToken,"");let{data:o,errors:h}=(0,d.iU)(r.sessionTokenInCookie);if(h)return f(h[0],"cookie");if(o.payload.iat<r.clientUat)return p(r,ru.SessionTokenIATBeforeClientUAT,"");try{let{data:e,errors:t}=await rS(r.sessionTokenInCookie,r);if(t)throw t[0];let s=rh({tokenType:I.SessionToken,authenticateContext:r,sessionClaims:e,headers:new Headers,token:r.sessionTokenInCookie});if(!r.isSatellite&&"document"===r.secFetchDest&&r.isCrossOriginReferrer()&&!r.isKnownClerkReferrer()&&0===r.handshakeRedirectLoopCounter)return p(r,ru.PrimaryDomainCrossOriginSync,"Cross-origin request from satellite domain requires handshake");let i=s.toAuth();if(i.userId){let e=function(e,t){let r=n.findTarget(e.clerkUrl);if(!r)return null;let s=!1;if("organization"===r.type&&(r.organizationSlug&&r.organizationSlug!==t.orgSlug&&(s=!0),r.organizationId&&r.organizationId!==t.orgId&&(s=!0)),"personalAccount"===r.type&&t.orgId&&(s=!0),!s)return null;if(e.handshakeRedirectLoopCounter>=3)return console.warn("Clerk: Organization activation handshake loop detected. This is likely due to an invali
7d organization ID or slug. Skipping organization activation."),null;let i=p(e,ru.ActiveOrganizationMismatch,"");return"handshake"!==i.status?null:i}(r,i);if(e)return e}return s}catch(e){return f(e,"cookie")}}async function f(t,s){let i;if(!(t instanceof c.zF))return rl({tokenType:I.SessionToken,authenticateContext:r,reason:ru.UnexpectedError});if(t.reason===c.jn.TokenExpired&&r.refreshTokenInCookie&&"GET"===e.method){let{data:e,error:t}=await l(r);if(e)return rh({tokenType:I.SessionToken,authenticateContext:r,sessionClaims:e.jwtPayload,headers:e.headers,token:e.sessionToken});i=t?.cause?.reason?t.cause.reason:rC.UnexpectedSDKError}else i="GET"!==e.method?rC.NonEligibleNonGet:r.refreshTokenInCookie?null:rC.NonEligibleNoCookie;return(t.tokenCarrier=s,[c.jn.TokenExpired,c.jn.TokenNotActiveYet,c.jn.TokenIatInTheFuture].includes(t.reason))?p(r,rN({tokenError:t.reason,refreshError:i}),t.getFullMessage()):rl({tokenType:I.SessionToken,authenticateContext:r,reason:t.reason,message:t.getFullMessage()})}function k(e,t){return t instanceof c.sM?rl({tokenType:e,authenticateContext:r,reason:t.code,message:t.getFullMessage()}):rl({tokenType:e,authenticateContext:r,reason:ru.UnexpectedError})}async function g(){let{tokenInHeader:e}=r;if(!e)return f(Error("Missing token in header"),"header");if(!eT(e))return rl({tokenType:s,authenticateContext:r,reason:ru.TokenTypeMismatch,message:""});let t=rx(ew(e),s,r);if(t)return t;let{data:i,tokenType:a,errors:n}=await rv(e,r);return n?k(a,n[0]):rh({tokenType:a,authenticateContext:r,machineData:i,token:e})}async function _(){let{tokenInHeader:e}=r;if(!e)return f(Error("Missing token in header"),"header");if(eT(e)){let t=rx(ew(e),s,r);if(t)return t;let{data:i,tokenType:a,errors:n}=await rv(e,r);return n?k(a,n[0]):rh({tokenType:a,authenticateContext:r,machineData:i,token:e})}let{data:t,errors:i}=await rS(e,r);return i?f(i[0],"header"):rh({tokenType:I.SessionToken,authenticateContext:r,sessionClaims:t,token:e})}return Array.isArray(s)&&!function(e,t){let r=null,{tokenInHeader:s}=t;return s&&(r=eT(s)?ew(s):I.SessionToken),eb(r??I.SessionToken,e)}(s,r)?function(){let e={isAuthenticated:!1,tokenType:null,getToken:()=>Promise.resolve(null),has:()=>!1,debug:()=>({})};return rp({status:rc.SignedOut,reason:ru.TokenTypeMismatch,message:"",proxyUrl:"",publishableKey:"",isSatellite:!1,domain:"",signInUrl:"",signUpUrl:"",afterSignInUrl:"",afterSignUpUrl:"",isSignedIn:!1,isAuthenticated:!1,tokenType:null,toAuth:()=>e,headers:new Headers,token:null})}():r.tokenInHeader?"any"===s||Array.isArray(s)?_():s===I.SessionToken?m():g():s===I.OAuthToken||s===I.ApiKey||s===I.M2MToken?rl({tokenType:s,authenticateContext:r,reason:"No token in header"}):y()},rU=e=>{let{isSignedIn:t,isAuthenticated:r,proxyUrl:s,reason:i,message:a,publishableKey:n,isSatellite:o,domain:d}=e;return{isSignedIn:t,isAuthenticated:r,proxyUrl:s,reason:i,message:a,publishableKey:n,isSatellite:o,domain:d}},rN=({tokenError:e,refreshError:t})=>{switch(e){case c.jn.TokenExpired:return`${ru.SessionTokenExpired}-refresh-${t}`;case c.jn.TokenNotActiveYet:return ru.SessionTokenNBF;case c.jn.TokenIatInTheFuture:return ru.SessionTokenIatInTheFuture;default:return ru.UnexpectedError}},rJ={secretKey:"",machineSecretKey:"",jwtKey:"",apiUrl:void 0,apiVersion:void 0,proxyUrl:"",publishableKey:"",isSatellite:!1,domain:"",audience:""};function rM(e){let t=A(rJ,e.options),r=e.apiClient;return{authenticateRequest:(e,s={})=>{let{apiUrl:i,apiVersion:a}=t,n=A(t,s);return rE(e,{...s,...n,apiUrl:i,apiVersion:a,apiClient:r})},debugRequestState:rU}}}}]);
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.