1!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},t=(new e.Error).stack;t&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[t]="f0b584fc-1a1f-4bd3-b70d-69e0f8bdaf95",e._sentryDebugIdIdentifier="sentry-dbid-f0b584fc-1a1f-4bd3-b70d-69e0f8bdaf95")}catch(e){}}();"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E||[]).push([[3727],{62040:(e,t,r)=>{r.d(t,{Bs:()=>rL,nr:()=>rv,y3:()=>rh});var s,i,a,n,o=r(56359),d=r(43157),c=r(49562),l=r(67952),u=r(67804),h=r(68660),p=r(12464),m=r(92383),y=r(74752),f=r(80454),k=r(85616),g=(0,l.P$)({"../../node_modules/.pnpm/[email protected]/node_modules/cookie/dist/index.js"(e){"use strict";Object.defineProperty(e,"__esModule",{value:!0}),e.parseCookie=d,e.parse=d,e.stringifyCookie=function(e,s){let i=s?.encode||encodeURIComponent,a=[];for(let s of Object.keys(e)){let n=e[s];if(void 0===n)continue;if(!t.test(s))throw TypeError(`cookie name is invalid: ${s}`);let o=i(n);if(!r.test(o))throw TypeError(`cookie val is invalid: ${n}`);a.push(`${s}=${o}`)}return a.join("; ")},e.stringifySetCookie=c,e.serialize=c,e.parseSetCookie=function(e,t){let r=t?.decode||p,s=e.length,i=l(e,0,s),n=u(e,0,i),o=-1===n?{name:"",value:r(h(e,0,i))}:{name:h(e,0,n),value:r(h(e,n+1,i))},d=i+1;for(;d<s;){let t=l(e,d,s),r=u(e,d,t),i=-1===r?h(e,d,t):h(e,d,r),n=-1===r?void 0:h(e,r+1,t);switch(i.toLowerCase()){case"httponly":o.httpOnly=!0;break;case"secure":o.secure=!0;break;case"partitioned":o.partitioned=!0;break;case"domain":o.domain=n;break;case"path":o.path=n;break;case"max-age":n&&a.test(n)&&(o.maxAge=Number(n));break;case"expires":if(!n)break;let c=new Date(n);Number.isFinite(c.valueOf())&&(o.expires=c);break;case"priority":if(!n)break;let p=n.toLowerCase();("low"===p||"medium"===p||"high"===p)&&(o.priority=p);break;case"samesite":if(!n)break;let m=n.toLowerCase();("lax"===m||"strict"===m||"none"===m)&&(o.sameSite=m)}d=t+1}return o},e.stringifySetCookie=c,e.serialize=c;var t=/^[\u0021-\u003A\u003C\u003E-\u007E]+$/,r=/^[\u0021-\u003A\u003C-\u007E]*$/,s=/^([.]?[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?)([.][a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?)*$/i,i=/^[\u0020-\u003A\u003D-\u007E]*$/,a=/^-?\d+$/,n=Object.prototype.toString,o=(()=>{let e=function(){};return e.prototype=Object.create(null),e})();function d(e,t){let r=new o,s=e.length;if(s<2)return r;let i=t?.decode||p,a=0;do{let t=u(e,a,s);if(-1===t)break;let n=l(e,a,s);if(t>n){a=e.lastIndexOf(";",t-1)+1;continue}let o=h(e,a,t);void 0===r[o]&&(r[o]=i(h(e,t+1,n))),a=n+1}while(a<s);return r}function c(e,a,o){let d="object"==typeof e?e:{...o,name:e,value:String(a)},c=("object"==typeof a?a:o)?.encode||encodeURIComponent;if(!t.test(d.name))throw TypeError(`argument name is invalid: ${d.name}`);let l=d.value?c(d.value):"";if(!r.test(l))throw TypeError(`argument val is invalid: ${d.value}`);let u=d.name+"="+l;if(void 0!==d.maxAge){if(!Number.isInteger(d.maxAge))throw TypeError(`option maxAge is invalid: ${d.maxAge}`);u+="; Max-Age="+d.maxAge}if(d.domain){if(!s.test(d.domain))throw TypeError(`option domain is invalid: ${d.domain}`);u+="; Domain="+d.domain}if(d.path){if(!i.test(d.path))throw TypeError(`option path is invalid: ${d.path}`);u+="; Path="+d.path}if(d.expires){var h;if(h=d.expires,"[object Date]"!==n.call(h)||!Number.isFinite(d.expires.valueOf()))throw TypeError(`option expires is invali
1d: ${d.expires}`);u+="; Expires="+d.expires.toUTCString()}if(d.httpOnly&&(u+="; HttpOnly"),d.secure&&(u+="; Secure"),d.partitioned&&(u+="; Partitioned"),d.priority)switch("string"==typeof d.priority?d.priority.toLowerCase():void 0){case"low":u+="; Priority=Low";break;case"medium":u+="; Priority=Medium";break;case"high":u+="; Priority=High";break;default:throw TypeError(`option priority is invalid: ${d.priority}`)}if(d.sameSite)switch("string"==typeof d.sameSite?d.sameSite.toLowerCase():d.sameSite){case!0:case"strict":u+="; SameSite=Strict";break;case"lax":u+="; SameSite=Lax";break;case"none":u+="; SameSite=None";break;default:throw TypeError(`option sameSite is invalid: ${d.sameSite}`)}return u}function l(e,t,r){let s=e.indexOf(";",t);return -1===s?r:s}function u(e,t,r){let s=e.indexOf("=",t);return s<r?s:-1}function h(e,t,r){let s=t,i=r;do{let t=e.charCodeAt(s);if(32!==t&&9!==t)break}while(++s<i);for(;i>s;){let t=e.charCodeAt(i-1);if(32!==t&&9!==t)break;i--}return e.slice(s,i)}function p(e){if(-1===e.indexOf("%"))return e;try{return decodeURIComponent(e)}catch(t){return e}}}}),_="https://api.clerk.com",S="@clerk/[email protected]",T="2025-11-10",b={Session:"__session",Refresh:"__refresh",ClientUat:"__client_uat",Handshake:"__clerk_handshake",DevBrowser:"__clerk_db_jwt",RedirectCount:"__clerk_redirect_count",HandshakeNonce:"__clerk_handshake_nonce"},w={ClerkSynced:"__clerk_synced",SuffixedCookies:"suffixed_cookies",ClerkRedirectUrl:"__clerk_redirect_url",DevBrowser:b.DevBrowser,Handshake:b.Handshake,HandshakeHelp:"__clerk_help",LegacyDevBrowser:"__dev_session",HandshakeReason:"__clerk_hs_reason",HandshakeNonce:b.HandshakeNonce,HandshakeFormat:"format",Session:"__session"},A={Cookies:b,Headers:{Accept:"accept",AuthMessage:"x-clerk-auth-message",Authorization:"authorization",AuthReason:"x-clerk-auth-reason",AuthSignature:"x-clerk-auth-signature",AuthStatus:"x-clerk-auth-status",AuthToken:"x-clerk-auth-token",CacheControl:"cache-control",ClerkRedirectTo:"x-clerk-redirect-to",ClerkRequestData:"x-clerk-request-data",ClerkUrl:"x-clerk-clerk-url",CloudFrontForwardedProto:"cloudfront-forwarded-proto",ContentType:"content-type",ContentSecurityPolicy:"content-security-policy",ContentSecurityPolicyReportOnly:"content-security-policy-report-only",EnableDebug:"x-clerk-debug",ForwardedHost:"x-forwarded-host",ForwardedPort:"x-forwarded-port",ForwardedProto:"x-forwarded-proto",Host:"host",Location:"location",Nonce:"x-nonce",Origin:"origin",Referrer:"referer",SecFetchDest:"sec-fetch-dest",SecFetchSite:"sec-fetch-site",UserAgent:"user-agent",ReportingEndpoints:"reporting-endpoints"},ContentTypes:{Json:"application/json"},QueryParameters:w,ClerkSyncStatus:{NeedsSync:"false",Completed:"true"}};function I(e,t){return Object.keys(e).reduce((e,r)=>({...e,[r]:t[r]||e[r]}),{...e})}function v(e){if(!e||"string"!=typeof e)throw Error("Missing Clerk Secret Key. Go to https://dashboard.clerk.com and get your key for your instance.")}var q={SessionToken:"session_token",ApiKey:"api_key",M2MToken:"m2m_token",OAuthToken:"oauth_token"},O=class{constructor(e,t,r){this.cookieSuffix=e,this.clerkRequest=t,this.originalFrontendApi="";let s=(0,h.kk)({publishableKey:r.publishableKey??"",hasProxyUrl:!!r.proxyUrl,hasDomain:!!r.domain});s&&(r={...r,proxyUrl:`${t.clerkUrl.origin}${s}`}),r.acceptsToken===q.M2MToken||r.acceptsToken===q.ApiKey?this.initHeaderValues():(this.initPublishableKeyValues(r),this.initHeaderValues(),this.initCookieValues(),this.initHandshakeValues()),Object.assign(this,r),this.clerkUrl=this.clerkRequest.clerkUrl,this.proxyUrl?.startsWith("/")&&(this.proxyUrl=`${this.clerkUrl.origin}${this.proxyUrl}`)}get sessionToken(){return this.sessionTokenInCookie||this.tokenInHeader}usesSuffixedCookies(){let e=this.getSuffixedCookie(A.Cookies.ClientUat),t=this.getCookie(A.Cookies.ClientUat),r=this.getSuffixedCookie(A.Cookies.Session)||"",s=this.getCookie(A.Cookies.Session)||"";if(s&&!this.tokenHasIssuer(s))return!1;if(s&&!this.tokenBelongsToInstance(s))return!0;if(!e&&!r)return!1;let{data:i}=(0,d.iU)(s),a=i?.payload.iat||0,{data:n}=(0,d.iU)(r),o=n?.payload.iat||0;if("0"!==e&&"0"!==t&&a>o||"0"===e&&"0"!==t)return!1;if("production"!==this.instanceType){let r=this.sessionExpired(n);if("0"!==e&&"0"===t&&r)return!1}return!!e||!r}isCrossOriginReferrer(){if(!this.referrer||!this.clerkUrl.origin)return!1;try{return new URL(this.referrer).origin!==this.clerkUrl.origin}catch{return!1}}isKnownClerkReferrer(){if(!this.referrer)return!1;try{let e=new URL(this.referrer),t=e.hostname;if(this.frontendApi){let e=this.frontendApi.startsWith("http")?new URL(this.frontendApi).hostname:this.frontendApi;if(t===e)return!0}if((0,p.l)(t)||(0,p.c)(t))return!0;let r=(0,u.j)(this.frontendApi);if(r){let t=new URL(r).origin;if(e.origin===t)return!0}if(t.startsWith("accounts."))return!0;return!1}catch{return!1}}initPublishableKeyValues(e){var t;t=e.publishableKey,(0,o.q5)(t,{fatal:!0}),this.publishableKey=e.publishableKey;let r=e.proxyUrl;r?.startsWith("/")&&(r=`${this.clerkRequest.clerkUrl.origin}${r}`);let s=(0,o.q5)(this.publishableKey,{fatal:!0,domain:e.domain,isSatellite:e.isSatellite});this.originalFrontendApi=s.frontendApi;let i=(0,o.q5)(this.publishableKey,{fatal:!0,proxyUrl:r,domain:e.domain,isSatellite:e.isSatellite});this.instanceType=i.instanceType,this.frontendApi=i.frontendApi}initHeaderValues(){this.method=this.clerkRequest.method,this.tokenInHeader=this.parseAuthorizationHeader(this.getHeader(A.Headers.Authorization)),this.origin=this.getHeader(A.Headers.Origin),this.host=this.getHeader(A.Headers.Host),this.forwardedHost=this.getHeader(A.Headers.ForwardedHost),this.forwardedProto=this.getHeader(A.Headers.CloudFrontForwardedProto)||this.getHeader(A.Headers.ForwardedProto),this.referrer=this.getHeader(A.Headers.Referrer),this.userAgent=this.getHeader(A.Headers.UserAgent),this.secFetchDest=this.getHeader(A.Headers.SecFetchDest),this.accept=this.getHeader(A.Headers.Accept)}initCookieValues(){this.sessionTokenInCookie=this.getSuffixedOrUnSuffixedCookie(A.Cookies.Session),this.refreshTokenInCookie=this.getSuffixedCookie(A.Cookies.Refresh),this.clientUat=Number.parseInt(this.getSuffixedOrUnSuffixedCookie(A.Cookies.ClientUat)||"")||
10}initHandshakeValues(){this.devBrowserToken=this.getQueryParam(A.QueryParameters.DevBrowser)||this.getSuffixedOrUnSuffixedCookie(A.Cookies.DevBrowser),this.handshakeToken=this.getQueryParam(A.QueryParameters.Handshake)||this.getCookie(A.Cookies.Handshake),this.handshakeRedirectLoopCounter=Number(this.getCookie(A.Cookies.RedirectCount))||0,this.handshakeNonce=this.getQueryParam(A.QueryParameters.HandshakeNonce)||this.getCookie(A.Cookies.HandshakeNonce)}getQueryParam(e){return this.clerkRequest.clerkUrl.searchParams.get(e)}getHeader(e){return this.clerkRequest.headers.get(e)||void 0}getCookie(e){return this.clerkRequest.cookies.get(e)||void 0}getSuffixedCookie(e){return this.getCookie((0,o.ky)(e,this.cookieSuffix))||void 0}getSuffixedOrUnSuffixedCookie(e){return this.usesSuffixedCookies()?this.getSuffixedCookie(e):this.getCookie(e)}parseAuthorizationHeader(e){if(!e)return;let[t,r]=e.split(" ",2);return r?"Bearer"===t?r:void 0:t}tokenHasIssuer(e){let{data:t,errors:r}=(0,d.iU)(e);return!r&&!!t.payload.iss}tokenBelongsToInstance(e){if(!e)return!1;let{data:t,errors:r}=(0,d.iU)(e);if(r)return!1;let s=t.payload.iss.replace(/https?:\/\//gi,"");return this.originalFrontendApi===s}sessionExpired(e){return!!e&&e?.payload.exp<=(Date.now()/1e3|0)}},C=async(e,t)=>new O(t.publishableKey?await (0,o.qS)(t.publishableKey,d.fA.crypto.subtle):"",e,t),P=RegExp("(?<!:)/{1,}","g");function x(...e){let t=e.filter(e=>e).join("/").replace(P,"/");for(let e of t.split("/"))if(function(e){let t=e;for(let r=0;r<=10;r++){if(t.split(/[/\\]/).some(e=>"."===e||".."===e))return!0;if(10===r)throw Error(`joinPaths: too many layers of encoding in ${e}`);try{let e=decodeURIComponent(t);if(e===t)break;t=e}catch{break}}return!1}(e))throw Error(`joinPaths: "." and ".." path segments are not allowed (received "${t}")`);return t}var E=class{constructor(e){this.request=e}requireId(e){if(!e)throw Error("A valid resource ID is required.")}},U="/actor_tokens",N=class extends E{async create(e){return this.request({method:"POST",path:U,bodyParams:e})}async revoke(e){return this.requireId(e),this.request({method:"POST",path:x(U,e,"revoke")})}},J="/agents/tasks",M=class extends E{async create(e){return this.request({method:"POST",path:J,bodyParams:e,options:{deepSnakecaseBodyParamKeys:!0}})}async revoke(e){return this.requireId(e),this.request({method:"POST",path:x(J,e,"revoke")})}},z="/accountless_applications",H=class extends E{async createAccountlessApplication(e){let t=e?.requestHeaders?Object.fromEntries(e.requestHeaders.entries()):void 0;return this.request({method:"POST",path:z,headerParams:t})}async completeAccountlessApplicationOnboarding(e){let t=e?.requestHeaders?Object.fromEntries(e.requestHeaders.entries()):void 0;return this.request({method:"POST",path:x(z,"complete"),headerParams:t})}},j="/allowlist_identifiers",F=class extends E{async getAllowlistIdentifierList(e={}){return this.request({method:"GET",path:j,queryParams:{...e,paginated:!0}})}async createAllowlistIdentifier(e){return this.request({method:"POST",path:j,bodyParams:e})}async deleteAllowlistIdentifier(e){return this.requireId(e),this.request({method:"DELETE",path:x(j,e)})}},R="/api_keys",L=class extends E{async list(e){return this.request({method:"GET",path:R,queryParams:e})}async create(e){return this.request({method:"POST",path:R,bodyParams:e})}async get(e){return this.requireId(e),this.request({method:"GET",path:x(R,e)})}async update(e){let{apiKeyId:t,...r}=e;return this.requireId(t),this.request({method:"PATCH",path:x(R,t),bodyParams:r})}async delete(e){return this.requireId(e),this.request({method:"DELETE",path:x(R,e)})}async revoke(e){let{apiKeyId:t,revocationReason:r=null}=e;return this.requireId(t),this.request({method:"POST",path:x(R,t,"revoke"),bodyParams:{revocationReason:r}})}async getSecret(e){return this.requireId(e),this.request({method:"GET",path:x(R,e,"secret")})}async verify(e){return this.request({method:"POST",path:x(R,"verify"),bodyParams:{secret:e}})}},D=class extends E{async changeDomain(e){return this.request({method:"POST",path:x("/beta_features","change_domain"),bodyParams:e})}}
1,K="/blocklist_identifiers",B=class extends E{async getBlocklistIdentifierList(e={}){return this.request({method:"GET",path:K,queryParams:e})}async createBlocklistIdentifier(e){return this.request({method:"POST",path:K,bodyParams:e})}async deleteBlocklistIdentifier(e){return this.requireId(e),this.request({method:"DELETE",path:x(K,e)})}},W="/clients",G=class extends E{async getClientList(e={}){return this.request({method:"GET",path:W,queryParams:{...e,paginated:!0}})}async getClient(e){return this.requireId(e),this.request({method:"GET",path:x(W,e)})}verifyClient(e){return this.request({method:"POST",path:x(W,"verify"),bodyParams:{token:e}})}async getHandshakePayload(e){return this.request({method:"GET",path:x(W,"handshake_payload"),queryParams:e})}},$="/domains",V=class extends E{async list(){return this.request({method:"GET",path:$})}async add(e){return this.request({method:"POST",path:$,bodyParams:e})}async update(e){let{domainId:t,...r}=e;return this.requireId(t),this.request({method:"PATCH",path:x($,t),bodyParams:r})}async delete(e){return this.deleteDomain(e)}async deleteDomain(e){return this.requireId(e),this.request({method:"DELETE",path:x($,e)})}},Q="/email_addresses",Y=class extends E{async getEmailAddress(e){return this.requireId(e),this.request({method:"GET",path:x(Q,e)})}async createEmailAddress(e){return this.request({method:"POST",path:Q,bodyParams:e})}async updateEmailAddress(e,t={}){return this.requireId(e),this.request({method:"PATCH",path:x(Q,e),bodyParams:t})}async deleteEmailAddress(e){return this.requireId(e),this.request({method:"DELETE",path:x(Q,e)})}},Z="/enterprise_connections",X=class extends E{async createEnterpriseConnection(e){return this.request({method:"POST",path:Z,bodyParams:e,options:{deepSnakecaseBodyParamKeys:!0}})}async updateEnterpriseConnection(e,t){return this.requireId(e),this.request({method:"PATCH",path:x(Z,e),bodyParams:t,options:{deepSnakecaseBodyParamKeys:!0}})}async getEnterpriseConnectionList(e={}){return this.request({method:"GET",path:Z,queryParams:e})}async getEnterpriseConnection(e){return this.requireId(e),this.request({method:"GET",path:x(Z,e)})}async deleteEnterpriseConnection(e){return this.requireId(e),this.request({method:"DELETE",path:x(Z,e)})}},ee=class extends E{async verify(e){return this.request({method:"POST",path:x("/oauth_applications/access_tokens","verify"),bodyParams:{access_token:e}})}},et="/instance",er=class extends E{async get(){return this.request({method:"GET",path:et})}async update(e){return this.request({method:"PATCH",path:et,bodyParams:e})}async updateRestrictions(e){return this.request({method:"PATCH",path:x(et,"restrictions"),bodyParams:e})}async getOrganizationSettings(){return this.request({method:"GET",path:x(et,"organization_settings")})}async updateOrganizationSettings(e){return this.request({method:"PATCH",path:x(et,"organization_settings"),bodyParams:e})}},es="/invitations",ei=class extends E{async getInvitationList(e={}){return this.request({method:"GET",path:es,queryParams:{...e,paginated:!0}})}async createInvitation(e){return this.request({method:"POST",path:es,bodyParams:e})}async createInvitationBulk(e){return this.request({method:"POST",path:x(es,"bulk"),bodyParams:e})}async revokeInvitation(e){return this.requireId(e),this.request({method:"POST",path:x(es,e,"revoke")})}},ea="/machines",en=class extends E{async get(e){return this.requireId(e),this.request({method:"GET",path:x(ea,e)})}async list(e={}){return this.request({method:"GET",path:ea,queryParams:e})}async create(e){return this.request({method:"POST",path:ea,bodyParams:e})}async update(e){let{machineId:t,...r}=e;return this.requireId(t),this.request({method:"PATCH",path:x(ea,t),bodyParams:r})}async delete(e){return this.requireId(e),this.request({method:"DELETE",path:x(ea,e)})}async getSecretKey(e){return this.requireId(e),this.request({method:"GET",path:x(ea,e,"secret_key")})}async rotateSecretKey(e){let{machineId:t,previousTokenTtl:r}=e;return this.requireId(t),this.request({method:"POST",path:x(ea,t,"secret_key","rotate"),bodyParams:{previousTokenTtl:r}})}async createScope(e,t){return this.requireId(e),this.request({method:"POST",path:x(ea,e,"scopes"),bodyParams:{toMachineId:t}})}async deleteScope(e,t){return this.requireId(e),this.request({method:"DELETE",path:x(ea,e,"scopes",t)})}},eo=class e{constructor(e,t,r,s,i,a,n,o,d,c,l){this.id=e,this.clientId=t,this.type=r,this.subject=s,this.scopes=i,this.revoked=a,this.revocationReason=n,this.expired=o,this.expiration=d,this.createdAt=c,this.updatedAt=l}static fromJSON(t){return new e(t.id,t.client_id,t.type,t.subject,t.scopes,t.revoked,t.revocation_reason,t.expired,t.expiration,t.created_at,t.updated_at)}static fromJwtPayload(t,r=5e3){return new e(t.jti??"",t.client_id??"","oauth_token",t.sub,t.scp??t.scope?.split(" ")??[],!1,null,1e3*t.exp<=Date.now()-r,t.exp,t.iat,t.i
1at)}},ed=class e{constructor(e,t,r,s,i,a,n,o,d,c,l){this.id=e,this.subject=t,this.scopes=r,this.claims=s,this.revoked=i,this.revocationReason=a,this.expired=n,this.expiration=o,this.createdAt=d,this.updatedAt=c,this.token=l}static fromJSON(t){return new e(t.id,t.subject,t.scopes,t.claims,t.revoked,t.revocation_reason,t.expired,t.expiration,t.created_at,t.updated_at,t.token)}static fromJwtPayload(t,r=5e3){return new e(t.jti??"",t.sub,t.scopes?.split(" ")??t.aud??[],null,!1,null,1e3*t.exp<=Date.now()-r,1e3*t.exp,1e3*t.iat,1e3*t.iat)}},ec={},el=0;function eu(e,t,r=!0){ec[e]=t,el=r?Date.now():-1}function eh(e){let{kid:t,pem:r}=e,s=`local-${t}`,i=ec[s];if(i)return i;if(!r)throw new c.zF({action:c.z.SetClerkJWTKey,message:"Missing local JWK.",reason:c.jn.LocalJWKMissing});let a={kid:s,kty:"RSA",alg:"RS256",n:r.replace(/\r\n|\n|\r/g,"").replace("-----BEGIN PUBLIC KEY-----","").replace("-----END PUBLIC KEY-----","").replace("MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA","").replace("IDAQAB","").replace(/\+/g,"-").replace(/\//g,"_"),e:"AQAB"};return eu(s,a,!1),a}async function ep(e){let{secretKey:t,apiUrl:r=_,apiVersion:s="v1",kid:i,skipJwksCache:a}=e;if(a||function(){if(-1===el)return!1;let e=Date.now()-el>=3e5;return e&&(ec={}),e}()||!ec[i]){if(!t)throw new c.zF({action:c.z.ContactSupport,message:"Failed to load JWKS from Clerk Backend or Frontend API.",reason:c.jn.RemoteJWKFailedToLoad});let{keys:e}=await (0,o.L5)(()=>em(r,t,s));if(!e||!e.length)throw new c.zF({action:c.z.ContactSupport,message:"The JWKS endpoint did not contain any signing keys. Contact [email protected].",reason:c.jn.RemoteJWKFailedToLoad});e.forEach(e=>eu(e.kid,e))}let n=ec[i];if(!n){let e=Object.values(ec).map(e=>e.kid).sort().join(", ");throw new c.zF({action:`Go to your Dashboard and validate your secret and public keys are correct. ${c.z.ContactSupport} if the issue persists.`,message:`Unable to find a signing key in JWKS that matches the kid='${i}' of the provided session token. Please make sure that the __session cookie or the HTTP authorization header contain a Clerk-generated session JWT. The following kid is available: ${e}`,reason:c.jn.JWKKidMismatch})}return n}async function em(e,t,r){if(!t)throw new c.zF({action:c.z.SetClerkSecretKey,message:"Missing Clerk Secret Key or API Key. Go to https://dashboard.clerk.com and get your key for your instance.",reason:c.jn.RemoteJWKFailedToLoad});let s=new URL(e);s.pathname=x(s.pathname,r,"/jwks");let i=await d.fA.fetch(s.href,{headers:{Authorization:`Bearer ${t}`,"Clerk-API-Version":T,"Content-Type":"application/json","User-Agent":S}});if(!i.ok){let e=await i.json(),t=ey(e?.errors,c.qu.InvalidSecretKey);if(t){let e=c.jn.InvalidSecretKey;throw new c.zF({action:c.z.ContactSupport,message:t.message,reason:e})}throw new c.zF({action:c.z.ContactSupport,message:`Error loading Clerk JWKS from ${s.href} with code=${i.status}`,reason:c.jn.RemoteJWKFailedToLoad})}return i.json()}var ey=(e,t)=>e?e.find(e=>e.code===t):null,ef="mch_",ek="oat_",eg=["mt_",ek,"ak_"],e_=/^[a-zA-Z0-9\-_]+\.[a-zA-Z0-9\-_]+\.[a-zA-Z0-9\-_]+$/;function eS(e){return e_.test(e)}var eT=["at+jwt","application/at+jwt"];function eb(e){if(!eS(e))return!1;try{let{data:t,errors:r}=(0,d.iU)(e);return!r&&!!t&&eT.includes(t.header.typ)}catch{return!1}}function ew(e){if(!eS(e))return!1;try{let{data:t,errors:r}=(0,d.iU)(e);return!r&&!!t&&"string"==typeof t.payload.sub&&t.payload.sub.startsWith(ef)}catch{return!1}}function eA(e){return eg.some(t=>e.startsWith(t))||eb(e)||ew(e)}function eI(e){if(e.startsWith("mt_")||ew(e))return q.M2MToken;if(e.startsWith(ek)||eb(e))return q.OAuthToken;if(e.startsWith("ak_"))return q.ApiKey;throw Error("Unknown machine token type")}var ev=(e,t)=>!!e&&("any"===t||(Array.isArray(t)?t:[t]).includes(e));async function eq(e,t,r,s){try{let i;if(r.jwtKey)i=eh({kid:t,pem:r.jwtKey});else{if(!r.secretKey)return{error:new c.sM({action:c.z.SetClerkJWTKey,message:"Failed to resolve JWK during verification.",code:c.h5.TokenVerificationFailed})};i=await ep({...r,kid:t})}let{data:a,errors:n}=await (0,d.J0)(e,{...r,key:i,...s?{headerType:s}:{}});if(n)return{error:new c.sM({code:c.h5.TokenVerificationFailed,message:n[0].message})};return{payload:a}}catch(e){return{error:new c.sM({code:c.h5.TokenVerificationFailed,message:e.message})}}}async function eO(e,t,r){let s=await eq(e,t.header.kid,r);return"error"in s?{data:void 0,tokenType:q.M2MToken,errors:[s.error]}:{data:ed.fromJwtPayload(s.payload,r.clockSkewInMs),tokenType:q.M2MToken,errors:void 0}}async function eC(e,t,r){let s=await eq(e,t.header.kid,r,eT);return"error"in s?{data:void 0,tokenType:q.OAuthToken,errors:[s.error]}:{data:eo.fromJwtPayload(s.payload,r.clockSkewInMs),tokenType:q.OAuthToken,errors:void 0}}q.ApiKey,q.M2MToken,q.OAuthToken;
1var eP="/m2m_tokens",ex=class extends E{constructor(e,t={}){super(e),(0,l.VK)(this,i),(0,l.VK)(this,s),(0,l.OV)(this,s,t)}async list(e){let{machineSecretKey:t,...r}=e,s=(0,l.jq)(this,i,a).call(this,{method:"GET",path:eP,queryParams:r},t);return this.request(s)}async createToken(e){let{claims:t=null,machineSecretKey:r,minRemainingTtlSeconds:s,secondsUntilExpiration:n=null,tokenFormat:o="opaque"}=e||{},d=(0,l.jq)(this,i,a).call(this,{method:"POST",path:eP,bodyParams:{secondsUntilExpiration:n,claims:t,minRemainingTtlSeconds:s,tokenFormat:o}},r);return this.request(d)}async revokeToken(e){let{m2mTokenId:t,revocationReason:r=null,machineSecretKey:s}=e;this.requireId(t);let n=(0,l.jq)(this,i,a).call(this,{method:"POST",path:x(eP,t,"revoke"),bodyParams:{revocationReason:r}},s);return this.request(n)}async verify(e){let{token:t,machineSecretKey:r}=e;if(ew(t))return(0,l.jq)(this,i,n).call(this,t);let s=(0,l.jq)(this,i,a).call(this,{method:"POST",path:x(eP,"verify"),bodyParams:{token:t}},r);return this.request(s)}};s=new WeakMap,i=new WeakSet,a=function(e,t){return t?{...e,headerParams:{...e.headerParams,Authorization:`Bearer ${t}`}}:e},n=async function(e){let t;try{let{data:r,errors:s}=(0,d.iU)(e);if(s)throw s[0];t=r}catch(e){throw new c.sM({code:c.h5.TokenInvalid,message:e.message})}let r=await eO(e,t,(0,l.S7)(this,s));if(r.errors)throw r.errors[0];return r.data};var eE=class extends E{async getJwks(){return this.request({method:"GET",path:"/jwks"})}},eU="/jwt_templates",eN=class extends E{async list(e={}){return this.request({method:"GET",path:eU,queryParams:{...e,paginated:!0}})}async get(e){return this.requireId(e),this.request({method:"GET",path:x(eU,e)})}async create(e){return this.request({method:"POST",path:eU,bodyParams:e})}async update(e){let{templateId:t,...r}=e;return this.requireId(t),this.request({method:"PATCH",path:x(eU,t),bodyParams:r})}async delete(e){return this.requireId(e),this.request({method:"DELETE",path:x(eU,e)})}},eJ="/organizations",eM=class extends E{async getOrganizationList(e){return this.request({method:"GET",path:eJ,queryParams:e})}async createOrganization(e){return this.request({method:"POST",path:eJ,bodyParams:e})}async getOrganization(e){let{includeMembersCount:t}=e,r="organizationId"in e?e.organizationId:e.slug;return this.requireId(r),this.request({method:"GET",path:x(eJ,r),queryParams:{includeMembersCount:t}})}async updateOrganization(e,t){return this.requireId(e),this.request({method:"PATCH",path:x(eJ,e),bodyParams:t})}async updateOrganizationLogo(e,t){this.requireId(e);let r=new d.fA.FormData;return r.append("file",t?.file),t?.uploaderUserId&&r.append("uploader_user_id",t?.uploaderUserId),this.request({method:"PUT",path:x(eJ,e,"logo"),formData:r})}async deleteOrganizationLogo(e){return this.requireId(e),this.request({method:"DELETE",path:x(eJ,e,"logo")})}async updateOrganizationMetadata(e,t){return this.requireId(e),this.request({method:"PATCH",path:x(eJ,e,"metadata"),bodyParams:t})}async deleteOrganization(e){return this.request({method:"DELETE",path:x(eJ,e)})}async getOrganizationMembershipList(e){let{organizationId:t,...r}=e;return this.requireId(t),this.request({method:"GET",path:x(eJ,t,"memberships"),queryParams:r})}async getInstanceOrganizationMembershipList(e){return this.request({method:"GET",path:"/organization_memberships",queryParams:e})}async createOrganizationMembership(e){let{organizationId:t,...r}=e;return this.requireId(t),this.request({method:"POST",path:x(eJ,t,"memberships"),bodyParams:r})}async updateOrganizationMembership(e){let{organizationId:t,userId:r,...s}=e;return this.requireId(t),this.request({method:"PATCH",path:x(eJ,t,"memberships",r),bodyParams:s})}async updateOrganizationMembershipMetadata(e){let{organizationId:t,userId:r,...s}=e;return this.request({method:"PATCH",path:x(eJ,t,"memberships",r,"metadata"),bodyParams:s})}async deleteOrganizationMembership(e){let{organizationId:t,userId:r}=e;return this.requireId(t),this.request({method:"DELETE",path:x(eJ,t,"memberships",r)})}async getOrganizationInvitationList(e){let{organizationId:t,...r}=e;return this.requireId(t),this.request({method:"GET",path:x(eJ,t,"invitations"),queryParams:r})}async createOrganizationInvitation(e){let{organizationId:t,...r}=e;return this.requireId(t),this.request({method:"POST",path:x(eJ,t,"invitations"),bodyParams:r})}async createOrganizationInvitationBulk(e,t){return this.requireId(e),this.request({method:"POST",path:x(eJ,e,"invitations","bulk"),bodyParams:t})}async getOrganizationInvitation(e){let{organizationId:t,invitationId:r}=e;return this.requireId(t),this.requireId(r),this.request({method:"GET",path:x(eJ,t,"invitations",r)})}async revokeOrganizationInvitation(e){let{organizationId:t,invitationId:r,...s}=e;return this.requireId(t),this.request({method:"POST",path:x(eJ,t,"invitations",r,"revoke"),bodyParams:s})}async getOrganizationDomainList(e){let{organizationId:t,...r}=e;return this.requireId(t),this.request({method:"GET",path:x(eJ,t,"domains"),queryParams:r})}async createOrganizationDomain(e){let{organizationId:t,...r}=e;return this.requireId(t),this.request({method:"POST",path:x(eJ,t,"domains"),bodyParams:{...r,verified:r.verified??!0}})}async updateOrganizationDomain(e){let{organizationId:t,domainId:r,...s}=e;return this.requireId(t),this.requireId(r),this.request({method:"PATCH",path:x(eJ,t,"domains",r),bodyParams:s})}async deleteOrganizationDomain(e){let{organizationId:t,domainId:r}=e;return this.requireId(t),this.requireId(r),this.request({method:"DELETE",path:x(eJ,t,"domains",r)})}}
1,ez="/oauth_applications",eH=class extends E{async list(e={}){return this.request({method:"GET",path:ez,queryParams:e})}async get(e){return this.requireId(e),this.request({method:"GET",path:x(ez,e)})}async create(e){return this.request({method:"POST",path:ez,bodyParams:e})}async update(e){let{oauthApplicationId:t,...r}=e;return this.requireId(t),this.request({method:"PATCH",path:x(ez,t),bodyParams:r})}async delete(e){return this.requireId(e),this.request({method:"DELETE",path:x(ez,e)})}async rotateSecret(e){return this.requireId(e),this.request({method:"POST",path:x(ez,e,"rotate_secret")})}},ej="/phone_numbers",eF=class extends E{async getPhoneNumber(e){return this.requireId(e),this.request({method:"GET",path:x(ej,e)})}async createPhoneNumber(e){return this.request({method:"POST",path:ej,bodyParams:e})}async updatePhoneNumber(e,t={}){return this.requireId(e),this.request({method:"PATCH",path:x(ej,e),bodyParams:t})}async deletePhoneNumber(e){return this.requireId(e),this.request({method:"DELETE",path:x(ej,e)})}},eR=class extends E{async verify(e){return this.request({method:"POST",path:"/proxy_checks",bodyParams:e})}},eL="/redirect_urls",eD=class extends E{async getRedirectUrlList(
1){return this.request({method:"GET",path:eL,queryParams:{paginated:!0}})}async getRedirectUrl(e){return this.requireId(e),this.request({method:"GET",path:x(eL,e)})}async createRedirectUrl(e){return this.request({method:"POST",path:eL,bodyParams:e})}async deleteRedirectUrl(e){return this.requireId(e),this.request({method:"DELETE",path:x(eL,e)})}},eK="/saml_connections",eB=class extends E{async getSamlConnectionList(e={}){return this.request({method:"GET",path:eK,queryParams:e})}async createSamlConnection(e){return this.request({method:"POST",path:eK,bodyParams:e,options:{deepSnakecaseBodyParamKeys:!0}})}async getSamlConnection(e){return this.requireId(e),this.request({method:"GET",path:x(eK,e)})}async updateSamlConnection(e,t={}){return this.requireId(e),this.request({method:"PATCH",path:x(eK,e),bodyParams:t,options:{deepSnakecaseBodyParamKeys:!0}})}async deleteSamlConnection(e){return this.requireId(e),this.request({method:"DELETE",path:x(eK,e)})}},eW="/sessions",eG=class extends E{async getSessionList(e={}){return this.request({method:"GET",path:eW,queryParams:{...e,paginated:!0}})}async getSession(e){return this.requireId(e),this.request({method:"GET",path:x(eW,e)})}async createSession(e){return this.request({method:"POST",path:eW,bodyParams:e})}async revokeSession(e){return this.requireId(e),this.request({method:"POST",path:x(eW,e,"revoke")})}async verifySession(e,t){return this.requireId(e),this.request({method:"POST",path:x(eW,e,"verify"),bodyParams:{token:t}})}async getToken(e,t,r){this.requireId(e);let s={method:"POST",path:t?x(eW,e,"tokens",t):x(eW,e,"tokens")};return void 0!==r&&(s.bodyParams={expires_in_seconds:r}),this.request(s)}async refreshSession(e,t){this.requireId(e);let{suffixed_cookies:r,...s}=t;return this.request({method:"POST",path:x(eW,e,"refresh"),bodyParams:s,queryParams:{suffixed_cookies:r}})}},e$="/sign_in_tokens",eV=class extends E{async createSignInToken(e){return this.request({method:"POST",path:e$,bodyParams:e})}async revokeSignInToken(e){return this.requireId(e),this.request({method:"POST",path:x(e$,e,"revoke")})}},eQ="/sign_ups",eY=class extends E{async get(e){return this.requireId(e),this.request({method:"GET",path:x(eQ,e)})}async update(e){let{signUpAttemptId:t,...r}=e;return this.request({method:"PATCH",path:x(eQ,t),bodyParams:r})}},eZ=class extends E{async createTestingToken(){return this.request({method:"POST",path:"/testing_tokens"})}},eX="/users",e0=class extends E{async getUserList(e={}){let{limit:t,offset:r,orderBy:s,...i}=e,[a,n]=await Promise.all([this.request({method:"GET",path:eX,queryParams:e}),this.getCount(i)]);return{data:a,totalCount:n}}async getUser(e){return this.requireId(e),this.request({method:"GET",path:x(eX,e)})}async createUser(e){return this.request({method:"POST",path:eX,bodyParams:e})}async updateUser(e,t={}){return this.requireId(e),this.request({method:"PATCH",path:x(eX,e),bodyParams:t})}async updateUserProfileImage(e,t){this.requireId(e);let r=new d.fA.FormData;return r.append("file",t?.file),this.request({method:"POST",path:x(eX,e,"profile_image"),formData:r})}async updateUserMetadata(e,t){return this.requireId(e),this.request({method:"PATCH",path:x(eX,e,"metadata"),bodyParams:t})}async deleteUser(e){return this.requireId(e),this.request({method:"DELETE",path:x(eX,e)})}async getCount(e={}){return this.request({method:"GET",path:x(eX,"count"),queryParams:e})}async getUserOauthAccessToken(e,t){this.requireId(e);let r=t.startsWith("oauth_"),s=r?t:`oauth_${t}`;return r&&(0,o.io)("getUserOauthAccessToken(userId, provider)","Remove the `oauth_` prefix from the `provider` argument."),this.request({method:"GET",path:x(eX,e,"oauth_access_tokens",s),queryParams:{paginated:!0}})}async disableUserMFA(e){return this.requireId(e),this.request({method:"DELETE",path:x(eX,e,"mfa")})}async getOrganizationMembershipList(e){let{userId:t,limit:r,offset:s}=e;return this.requireId(t),this.request({method:"GET",path:x(eX,t,"organization_memberships"),queryParams:{limit:r,offset:s}})}async getOrganizationInvitationList(e){let{userId:t,...r}=e;return this.requireId(t),this.request({method:"GET",path:x(eX,t,"organization_invitations"),queryParams:r})}async verifyPassword(e){let{userId:t,password:r}=e;return this.requireId(t),this.request({method:"POST",path:x(eX,t,"verify_password"),bodyParams:{password:r}})}async verifyTOTP(e){let{userId:t,code:r}=e;return this.requireId(t),this.request({method:"POST",path:x(eX,t,"verify_totp"),bodyParams:{code:r}})}async banUser(e){return this.requireId(e),this.request({method:"POST",path:x(eX,e,"ban")})}async unbanUser(e){return this.requireId(e),this.request({method:"POST",path:x(eX,e,"unban")})}async lockUser(e){return this.requireId(e),this.request({method:"POST",path:x(eX,e,"lock")})}async unlockUser(e){return this.requireId(e),this.request({method:"POST",path:x(eX,e,"unlock")})}async deleteUserProfileImage(e){return this.requireId(e),this.request({method:"DELETE",path:x(eX,e,"profile_image")})}async deleteUserPasskey(e){return this.requireId(e.userId),this.requireId(e.passkeyIdentificationId),this.request({method:"DELETE",path:x(eX,e.userId,"passkeys",e.passkeyIdentificationId)})}async deleteUserWeb3Wallet(e){return this.requireId(e.userId),this.requireId(e.web3WalletIdentificationId),this.request({method:"DELETE",path:x(eX,e.userId,"web3_wallets",e.web3WalletIdentificationId)})}async deleteUserExternalAccount(e){return this.requireId(e.userId),this.requireId(e.externalAccountId),this.request({method:"DELETE",path:x(eX,e.userId,"external_accounts",e.externalAccountId)})}async deleteUserBackupCodes(e){return this.requireId(e),this.request({method:"DELETE",path:x(eX,e,"backup_code")})}async deleteUserTOTP(e){return this.requireId(e),this.request({method:"DELETE",path:x(eX,e,"totp")})}async setPasswordCompromised(e,t={revokeAllSessions:!1}){return this.requireId(e),this.request({method:"POST",path:x(eX,e,"password","set_compromised"),bodyParams:t})}async unsetPasswordCompromised(e){return this.requireId(e),this.request({method:"POST",path:x(eX,e,"password","unset_compromised")})}}
1,e1="/waitlist_entries",e3=class extends E{async list(e={}){return this.request({method:"GET",path:e1,queryParams:e})}async create(e){return this.request({method:"POST",path:e1,bodyParams:e})}async createBulk(e){return this.request({method:"POST",path:x(e1,"bulk"),bodyParams:e})}async invite(e,t={}){return this.requireId(e),this.request({method:"POST",path:x(e1,e,"invite"),bodyParams:t})}async reject(e){return this.requireId(e),this.request({method:"POST",path:x(e1,e,"reject")})}async delete(e){return this.requireId(e),this.request({method:"DELETE",path:x(e1,e)})}},e2="/webhooks",e5=class extends E{async createSvixApp(){return this.request({method:"POST",path:x(e2,"svix")})}async generateSvixAuthURL(){return this.request({method:"POST",path:x(e2,"svix_url")})}async deleteSvixApp(){return this.request({method:"DELETE",path:x(e2,"svix")})}},e9="/billing",e4=class extends E{async getPlanList(e){return this.request({method:"GET",path:x(e9,"plans"),queryParams:e})}async cancelSubscriptionItem(e,t){return this.requireId(e),this.request({method:"DELETE",path:x(e9,"subscription_items",e),queryParams:t})}async extendSubscriptionItemFreeTrial(e,t){return this.requireId(e),this.request({method:"POST",path:x("/billing","subscription_items",e,"extend_free_trial"),bodyParams:t})}async getOrganizationBillingSubscription(e){return this.requireId(e),this.request({method:"GET",path:x("/organizations",e,"billing","subscription")})}async getUserBillingSubscription(e){return this.requireId(e),this.request({method:"GET",path:x("/users",e,"billing","subscription")})}},e6=e=>"object"==typeof e&&null!==e,e7=e=>e6(e)&&!(e instanceof RegExp)&&!(e instanceof Error)&&!(e instanceof Date)&&!(globalThis.Blob&&e instanceof globalThis.Blob),e8=Symbol("mapObjectSkip"),te=(e,t,r,s=new WeakMap)=>{if(r={deep:!1,target:{},...r},s.has(e))return s.get(e);s.set(e,r.target);let{target:i}=r;delete r.target;let a=e=>e.map(e=>e7(e)?te(e,t,r,s):e);if(Array.isArray(e))return a(e);for(let[n,o]of Object.entries(e)){let d=t(n,o,e);if(d===e8)continue;let[c,l,{shouldRecurse:u=!0}={}]=d;"__proto__"!==c&&(r.deep&&u&&e7(l)&&(l=Array.isArray(l)?a(l):te(l,t,r,s)),i[c]=l)}return i};function tt(e,t,r){if(!e6(e))throw TypeError(`Expected an object, got \`${e}\` (${typeof e})`);if(Array.isArray(e))throw TypeError("Expected an object, got an array");return te(e,t,r)}var tr=/([\p{Ll}\d])(\p{Lu})/gu,ts=/(\p{Lu})([\p{Lu}][\p{Ll}])/gu,ti=/(\d)\p{Ll}|(\p{L})\d/u,ta=/[^\p{L}\d]+/giu,tn="$1\0$2";function to(e){let t=e.trim();t=(t=t.replace(tr,tn).replace(ts,tn)).replace(ta,"\0");let r=0,s=t.length;for(;"\0"===t.charAt(r);)r++;if(r===s)return[];for(;"\0"===t.charAt(s-1);)s--;return t.slice(r,s).split(/\0/g)}function td(e){let t=to(e);for(let e=0;e<t.length;e++){let r=t[e],s=ti.exec(r);if(s){let i=s.index+(s[1]??s[2]).length;t.splice(e,1,r.slice(0,i),r.slice(i))}}return t}function tc(e,t){var r,s={delimiter:"_",...t};let[i,a,n]=function(e,t={}){let r=t.split??(t.separateNumbers?td:to),s=t.prefixCharacters??"",i=t.suffixCharacters??"",a=0,n=e.length;for(;a<e.length;){let t=e.charAt(a);if(!s.includes(t))break;a++}for(;n>a;){let t=n-1,r=e.charAt(t);if(!i.includes(r))break;n=t}return[e.slice(0,a),r(e.slice(a,n)),e.slice(n)]}(e,s);return i+a.map(!1===(r=s?.locale)?e=>e.toLowerCase():e=>e.toLocaleLowerCase(r)).join(s?.delimiter??" ")+n}var tl={}.constructor;function tu(e,t){return e.some(e=>"string"==typeof e?e===t:e.test(t))}function th(e,t,r){return r.shouldRecurse?{shouldRecurse:r.shouldRecurse(e,t)}:void 0}var tp=function(e,t){if(Array.isArray(e)){if(e.some(e=>e.constructor!==tl))throw Error("obj must be array of plain objects");let r=(t={deep:!0,exclude:[],parsingOptions:{},...t}).snakeCase||(e=>tc(e,t.parsingOptions));return e.map(e=>tt(e,(e,s)=>[tu(t.exclude,e)?e:r(e),s,th(e,s,t)],t))}if(e.constructor!==tl)throw Error("obj must be an plain object");let r=(t={deep:!0,exclude:[],parsingOptions:{},...t}).snakeCase||(e=>tc(e,t.parsingOptions));return tt(e,(e,s)=>[tu(t.exclude,e)?e:r(e),s,th(e,s,t)],t)},tm=class e{constructor(e,t,r,s){this.publishableKey=e,this.secretKey=t,this.claimUrl=r,this.apiKeysUrl=s}static fromJSON(t){return new e(t.publishable_key,t.secret_key,t.claim_url,t.api_keys_url)}},ty=class e{constructor(e,t,r,s){this.agentId=e,this.taskId=t,this.agentTaskId=r,this.url=s}static fromJSON(t){let r=t.agent_task_id??t.task_id??"";return new e(t.agent_id,r,r,t.url)}},tf=class e{constructor(e,t,r,s,i,a,n,o){this.id=e,this.status=t,this.userId=r,this.actor=s,this.token=i,this.url=a,this.createdAt=n,this.updatedAt=o}static fromJSON(t){return new e(t.id,t.status,t.user_id,t.actor,t.token,t.url,t.created_at,t.updated_at)}},tk=class e{constructor(e,t,r,s,i,a,n){this.id=e,this.identifier=t,this.identifierType=r,this.createdAt=s,this.updatedAt=i,this.instanceId=a,this.invitationId=n}static fromJSON(t){return new e(t.id,t.identifier,t.identifier_type,t.created_at,t.updated_at,t.instance_id,t.invitation_id)}}
1,tg=class e{constructor(e,t,r,s,i,a,n,o,d,c,l,u,h,p,m,y){this.id=e,this.type=t,this.name=r,this.subject=s,this.scopes=i,this.claims=a,this.revoked=n,this.revocationReason=o,this.expired=d,this.expiration=c,this.createdBy=l,this.description=u,this.lastUsedAt=h,this.createdAt=p,this.updatedAt=m,this.secret=y}static fromJSON(t){return new e(t.id,t.type,t.name,t.subject,t.scopes,t.claims,t.revoked,t.revocation_reason,t.expired,t.expiration,t.created_by,t.description,t.last_used_at,t.created_at,t.updated_at,t.secret)}},t_=class e{constructor(e,t,r,s,i,a){this.id=e,this.identifier=t,this.identifierType=r,this.createdAt=s,this.updatedAt=i,this.instanceId=a}static fromJSON(t){return new e(t.id,t.identifier,t.identifier_type,t.created_at,t.updated_at,t.instance_id)}},tS=class e{constructor(e,t,r,s,i,a,n,o){this.id=e,this.isMobile=t,this.ipAddress=r,this.city=s,this.country=i,this.browserVersion=a,this.browserName=n,this.deviceType=o}static fromJSON(t){return new e(t.id,t.is_mobile,t.ip_address,t.city,t.country,t.browser_version,t.browser_name,t.device_type)}},tT=class e{constructor(e,t,r,s,i,a,n,o,d,c,l,u=null){this.id=e,this.clientId=t,this.userId=r,this.status=s,this.lastActiveAt=i,this.expireAt=a,this.abandonAt=n,this.createdAt=o,this.updatedAt=d,this.lastActiveOrganizationId=c,this.latestActivity=l,this.actor=u}static fromJSON(t){return new e(t.id,t.client_id,t.user_id,t.status,t.last_active_at,t.expire_at,t.abandon_at,t.created_at,t.updated_at,t.last_active_organization_id,t.latest_activity&&tS.fromJSON(t.latest_activity),t.actor)}},tb=class e{constructor(e,t,r,s,i,a,n,o,d){this.id=e,this.sessionIds=t,this.sessions=r,this.signInId=s,this.signUpId=i,this.lastActiveSessionId=a,this.lastAuthenticationStrategy=n,this.createdAt=o,this.updatedAt=d}static fromJSON(t){return new e(t.id,t.session_ids,t.sessions.map(e=>tT.fromJSON(e)),t.sign_in_id,t.sign_up_id,t.last_active_session_id,t.last_authentication_strategy,t.created_at,t.updated_at)}},tw=class e{constructor(e,t,r){this.host=e,this.value=t,this.required=r}static fromJSON(t){return new e(t.host,t.value,t.required)}},tA=class e{constructor(e){this.cookies=e}static fromJSON(t){return new e(t.cookies)}},tI=class e{constructor(e,t,r,s){this.object=e,this.id=t,this.slug=r,this.deleted=s}static fromJSON(t){return new e(t.object,t.id||null,t.slug||null,t.deleted)}},tv=class e{constructor(e,t,r,s,i,a,n,o){this.id=e,this.name=t,this.isSatellite=r,this.frontendApiUrl=s,this.developmentOrigin=i,this.cnameTargets=a,this.accountsPortalUrl=n,this.proxyUrl=o}static fromJSON(t){return new e(t.id,t.name,t.is_satellite,t.frontend_api_url,t.development_origin,t.cname_targets&&t.cname_targets.map(e=>tw.fromJSON(e)),t.accounts_portal_url,t.proxy_url)}},tq=class e{constructor(e,t,r,s,i,a,n,o,d,c,l){this.id=e,this.fromEmailName=t,this.emailAddressId=r,this.toEmailAddress=s,this.subject=i,this.body=a,this.bodyPlain=n,this.status=o,this.slug=d,this.data=c,this.deliveredByClerk=l}static fromJSON(t){return new e(t.id,t.from_email_name,t.email_address_id,t.to_email_address,t.subject,t.body,t.body_plain,t.status,t.slug,t.data,t.delivered_by_clerk)}},tO=class e{constructor(e,t){this.id=e,this.type=t}static fromJSON(t){return new e(t.id,t.type)}},tC=class e{constructor(e,t,r=null,s=null,i=null,a=null,n=null){this.status=e,this.strategy=t,this.externalVerificationRedirectURL=r,this.attempts=s,this.expireAt=i,this.nonce=a,this.message=n}static fromJSON(t){return new e(t.status,t.strategy,t.external_verification_redirect_url?new URL(t.external_verification_redirect_url):null,t.attempts,t.expire_at,t.nonce)}},tP=class e{constructor(e,t,r,s){this.id=e,this.emailAddress=t,this.verification=r,this.linkedTo=s}static fromJSON(t){return new e(t.id,t.email_address,t.verification&&tC.fromJSON(t.verification),t.linked_to.map(e=>tO.fromJSON(e)))}},tx=class e{constructor(e,t,r,s,i){this.id=e,this.name=t,this.description=r,this.slug=s,this.avatarUrl=i}static fromJSON(t){return new e(t.id,t.name,t.description??null,t.slug,t.avatar_url??null)}},tE=class e{constructor(e,t,r,s,i,a,n,o,d,c,l,u,h,p,m,y){this.id=e,this.name=t,this.slug=r,this.description=s,this.isDefault=i,this.isRecurring=a,this.hasBaseFee=n,this.publiclyVisible=o,this.fee=d,this.annualFee=c,this.annualMonthlyFee=l,this.forPayerType=u,this.features=h,this.avatarUrl=p,this.freeTrialDays=m,this.freeTrialEnabled=y}static fromJSON(t){let r=e=>e?{amount:e.amount,amountFormatted:e.amount_formatted,currency:e.currency,currencySymbol:e.currency_symbol}:null;return new e(t.id,t.name,t.slug,t.description??null,t.is_default,t.is_recurring,t.has_base_fee,t.publicly_visible,r(t.fee),r(t.annual_fee),r(t.annual_monthly_fee),t.for_payer_type,(t.features??[]).map(e=>tx.fromJSON(e)),t.avatar_url,t.free_trial_days,t.free_trial_enabled)}},tU=class e{constructor(e,t,r,s,i,a,n,o,d,c,l,u,h,p,m,y,f){this.id=e,this.status=t,this.planPeriod=r,this.periodStart=s,this.nextPayment=i,this.amount=a,this.plan=n,this.planId=o,this.createdAt=d,this.updatedAt=c,this.periodEnd=l,this.canceledAt=u,this.pastDueAt=h,this.endedAt=p,this.payerId=m,this.isFreeTrial=y,this.lifetimePaid=f}static fromJSON(t){function r(e){return e?{amount:e.amount,amountFormatted:e.amount_formatted,currency:e.currency,currencySymbol:e.currency_symbol}:e}return new e(t.id,t.status,t.plan_period,t.period_start,t.next_payment,r(t.amount)??void 0,t.plan?tE.fromJSON(t.plan):null,t.plan_id??null,t.created_at,t.updated_at,t.period_end,t.canceled_at,t.past_due_at,t.ended_at,t.payer_id,t.is_free_trial,r(t.lifetime_paid)??void 0)}},tN=class e{constructor(e,t,r,s,i,a,n,o,d,c){this.id=e,this.status=t,this.payerId=r,this.createdAt=s,this.updatedAt=i,this.activeAt=a,this.pastDueAt=n,this.subscriptionItems=o,this.nextPayment=d,this.eligibleForFreeTrial=c}static fromJSON(t){let r=t.next_payment?{date:t.next_payment.date,amount:{amount:t.next_payment.amount.amount,amountFormatted:t.next_payment.amount.amount_formatted,currency:t.next_payment.amount.currency,currencySymbol:t.next_payment.amount.currency_symbol}}:null;return new e(t.id,t.status,t.payer_id,t.created_at,t.updated_at,t.active_at??null,t.past_due_at??null,(t.subscription_items??[]).map(e=>tU.fromJSON(e)),r,t.eligible_for_free_trial??!1)}},tJ=class e{constructor(e,t,r,s,i,a,n,o,d,c,l,u,h){this.id=e,this.active=t,this.allowIdpInitiated=r,this.allowSubdomains=s,this.disableAdditionalIdentifications=i,this.domain=a,this.logoPublicUrl=n,this.name=o,this.protocol=d,this.provider=c,this.syncUserAttributes=l,this.createdAt=u,this.updatedAt=h}static fromJSON(t){return new e(t.id,t.active,t.allow_idp_initiated,t.allow_subdomains,t.disable_additional_identifications,t.domain,t.logo_public_url,t.name,t.protocol,t.provider,t.sync_user_attributes,t.created_at,t.updated_at)}},tM=class e{constructor(e,t,r,s,i,a,n,o,d,c,l,u,h){this.id=e,this.active=t,this.emailAddress=r,this.enterpriseConnection=s,this.firstName=i,this.lastName=a,this.protocol=n,this.provider=o,this.providerUserId=d,this.publicMetadata=c,this.verification=l,this.lastAuthenticatedAt=u,this.enterpriseConnectionId=h}static fromJSON(t){return new e(t.id,t.active,t.email_address,t.enterprise_connection&&tJ.fromJSON(t.enterprise_connection),t.first_name,t.last_name,t.protocol,t.provider,t.provider_user_id,t.public_metadata,t.verification&&tC.fromJSON(t.verification),t.last_authenticated_at,t.enterprise_connection_id)}},tz=class e{constructor(e,t,r,s,i,a,n,o,d,c,l,u,h){this.id=e,this.name=t,this.idpEntityId=r,this.idpSsoUrl=s,this.idpCertificate=i,this.idpMetadataUrl=a,this.idpMetadata=n,this.acsUrl=o,this.spEntityId=d,this.spMetadataUrl=c,this.syncUserAttributes=l,this.allowSubdomains=u,this.allowIdpInitiated=h}static fromJSON(t){return new e(t.id,t.name,t.idp_entity_id,t.idp_sso_url,t.idp_certificate,t.idp_metadata_url,t.idp_metadata,t.acs_url,t.sp_entity_id,t.sp_metadata_url,t.sync_user_attributes,t.allow_subdomains,t.allow_idp_initiated)}},tH=class e{constructor(e,t,r,s,i,a,n){this.id=e,this.name=t,this.clientId=r,this.discoveryUrl=s,this.logoPublicUrl=i,this.createdAt=a,this.updatedAt=n}static fromJSON(t){return new e(t.id,t.name,t.client_id,t.discovery_url,t.logo_public_url,t.created_at,t.updated_at)}},tj=class e{constructor(e,t,r,s,i,a,n,o,d,c,l,u){this.id=e,this.name=t,this.domains=r,this.organizationId=s,this.active=i,this.syncUserAttributes=a,this.allowSubdomains=n,this.disableAdditionalIdentifications=o,this.createdAt=d,this.updatedAt=c,this.samlConnection=l,this.oauthConfig=u}static fromJSON(t){return new e(t.id,t.name,t.domains,t.organization_id,t.active,t.sync_user_attributes,t.allow_subdomains,t.disable_additional_identifications,t.created_at,t.updated_at,null!=t.saml_connection?tz.fromJSON(t.saml_connection):null,null!=t.oauth_config?tH.fromJSON(t.oauth_config):null)}},tF=class e{constructor(e,t,r,s,i,a,n,o,d,c,l,u,h={},p,m){this.id=e,this.provider=t,this.providerUserId=r,this.identificationId=s,this.externalId=i,this.approvedScopes=a,this.emailAddress=n,this.firstName=o,this.lastName=d,this.imageUrl=c,this.username=l,this.phoneNumber=u,this.publicMetadata=h,this.label=p,this.verification=m}static fromJSON(t){return new e(t.id,t.provider,t.provider_user_id,t.identification_id,t.provider_user_id,t.approved_scopes,t.email_address,t.first_name,t.last_name,t.image_url||"",t.username,t.phone_number,t.public_metadata,t.label,t.verification&&tC.fromJSON(t.verification))}},tR=class e{constructor(e,t,r){this.id=e,this.environmentType=t,this.allowedOrigins=r}static fromJSON(t){return new e(t.id,t.environment_type,t.allowed_origins)}},tL=class e{constructor(e,t,r,s,i){this.allowlist=e,this.blocklist=t,this.blockEmailSubaddresses=r,this.blockDisposableEmailDomains=s,this.ignoreDotsForGmailAddresses=i}static fromJSON(t){return new e(t.allowlist,t.blocklist,t.block_email_subaddresses,t.block_disposable_email_domains,t.ignore_dots_for_gmail_addresses)}},tD=class e{constructor(e,t,r,s,i){this.id=e,this.restrictedToAllowlist=t,this.fromEmailAddress=r,this.progressiveSignUp=s,this.enhancedEmailDeliverability=i}static fromJSON(t){return new e(t.id,t.restricted_to_allowlist,t.from_email_address,t.progressive_sign_up,t.enhanced_email_deliverability)}},tK=class e{constructor(e,t,r,s,i,a,n,o){this.id=e,this.emailAddress=t,this.publicMetadata=r,this.createdAt=s,this.updatedAt=i,this.status=a,this.url=n,this.revoked=o,this._raw=null}get raw(){return this._raw}static fromJSON(t){let r=new e(t.id,t.email_address,t.public_metadata,t.created_at,t.updated_at,t.status,t.url,t.revoked);return r._raw=t,r}},tB={AccountlessApplication:"accountless_application",ActorToken:"actor_token",AgentTask:"agent_task",AllowlistIdentifier:"allowlist_identifier",ApiKey:"api_key",BlocklistIdentifier:"blocklist_identifier",Client:"client",Cookies:"cookies",Domain:"domain",Email:"email",EnterpriseAccount:"enterprise_account",EnterpriseConnection:"enterprise_connection",EmailAddress:"email_address",Instance:"instance",InstanceRestrictions:"instance_restrictions",InstanceSettings:"instance_settings",Invitation:"invitation",Machine:"machine",MachineScope:"machine_scope",MachineSecretKey:"machine_secret_key",M2MToken:"machine_to_machine_token",JwtTemplate:"jwt_template",OauthAccessToken:"oauth_access_token",IdpOAuthAccessToken:"clerk_idp_oauth_access_token",OAuthApplication:"oauth_application",Organization:"organization",OrganizationInvitation:"organization_invitation",OrganizationMembership:"organization_membership",OrganizationSettings:"organization_settings",PhoneNumber:"phone_number",ProxyCheck:"proxy_check",RedirectUrl:"redirect_url",SamlConnection:"saml_connection",Session:"session",SignInToken:"sign_in_token",SignUpAttempt:"sign_up_attempt",SmsMessage:"sms_message",User:"user",WaitlistEntry:"waitlist_entry",Token:"token",TotalCount:"total_count",BillingSubscription:"commerce_subscription",BillingSubscriptionItem:"commerce_subscription_item",BillingPlan:"commerce_plan",Feature:"feature"},tW=class e{constructor(e,t,r,s,i,a,n,o,d){this.id=e,this.name=t,this.claims=r,this.lifetime=s,this.allowedClockSkew=i,this.customSigningKey=a,this.signingAlgorithm=n,this.createdAt=o,this.updatedAt=d}static fromJSON(t){return new e(t.id,t.name,t.claims,t.lifetime,t.allowed_clock_skew,t.custom_signing_key,t.signing_algorithm,t.created_at,t.updated_at)}},tG=class e{constructor(e,t,r,s,i,a,n,o){this.id=e,this.name=t,this.instanceId=r,this.createdAt=s,this.updatedAt=i,this.scopedMachines=a,this.defaultTokenTtl=n,this.secretKey=o}static fromJSON(t){return new e(t.id,t.name,t.instance_id,t.created_at,t.updated_at,t.scoped_machines.map(t=>new e(t.id,t.name,t.instance_id,t.created_at,t.updated_at,[],t.default_token_ttl)),t.default_token_ttl,t.secret_key)}},t$=class e{constructor(e,t,r,s){this.fromMachineId=e,this.toMac
1hineId=t,this.createdAt=r,this.deleted=s}static fromJSON(t){return new e(t.from_machine_id,t.to_machine_id,t.created_at,t.deleted)}},tV=class e{constructor(e){this.secret=e}static fromJSON(t){return new e(t.secret)}},tQ=class e{constructor(e,t,r,s={},i,a,n,o,d){this.externalAccountId=e,this.provider=t,this.token=r,this.publicMetadata=s,this.label=i,this.scopes=a,this.tokenSecret=n,this.expiresAt=o,this.idToken=d}static fromJSON(t){return new e(t.external_account_id,t.provider,t.token,t.public_metadata,t.label||"",t.scopes,t.token_secret,t.expires_at,t.id_token)}},tY=class e{constructor(e,t,r,s,i,a,n,o,d,c,l,u,h,p,m,y,f,k,g,_){this.id=e,this.instanceId=t,this.name=r,this.clientId=s,this.clientUri=i,this.clientImageUrl=a,this.dynamicallyRegistered=n,this.consentScreenEnabled=o,this.pkceRequired=d,this.isPublic=c,this.scopes=l,this.redirectUris=u,this.authorizeUrl=h,this.tokenFetchUrl=p,this.userInfoUrl=m,this.discoveryUrl=y,this.tokenIntrospectionUrl=f,this.createdAt=k,this.updatedAt=g,this.clientSecret=_}static fromJSON(t){return new e(t.id,t.instance_id,t.name,t.client_id,t.client_uri,t.client_image_url,t.dynamically_registered,t.consent_screen_enabled,t.pkce_required,t.public,t.scopes,t.redirect_uris,t.authorize_url,t.token_fetch_url,t.user_info_url,t.discovery_url,t.token_introspection_url,t.created_at,t.updated_at,t.client_secret)}},tZ=class e{constructor(e,t,r,s,i,a,n,o={},d={},c,l,u,h){this.id=e,this.name=t,this.slug=r,this.imageUrl=s,this.hasImage=i,this.createdAt=a,this.updatedAt=n,this.publicMetadata=o,this.privateMetadata=d,this.maxAllowedMemberships=c,this.adminDeleteEnabled=l,this.membersCount=u,this.createdBy=h,this._raw=null}get raw(){return this._raw}static fromJSON(t){let r=new e(t.id,t.name,t.slug,t.image_url||"",t.has_image,t.created_at,t.updated_at,t.public_metadata,t.private_metadata,t.max_allowed_memberships,t.admin_delete_enabled,t.members_count,t.created_by);return r._raw=t,r}},tX=class e{constructor(e,t,r,s,i,a,n,o,d,c,l={},u={},h){this.id=e,this.emailAddress=t,this.role=r,this.roleName=s,this.organizationId=i,this.createdAt=a,this.updatedAt=n,this.expiresAt=o,this.url=d,this.status=c,this.publicMetadata=l,this.privateMetadata=u,this.publicOrganizationData=h,this._raw=null}get raw(){return this._raw}static fromJSON(t){let r=new e(t.id,t.email_address,t.role,t.role_name,t.organization_id,t.created_at,t.updated_at,t.expires_at,t.url,t.status,t.public_metadata,t.private_metadata,t.public_organization_data);return r._raw=t,r}},t0=class e{constructor(e,t,r,s={},i={},a,n,o,d){this.id=e,this.role=t,this.permissions=r,this.publicMetadata=s,this.privateMetadata=i,this.createdAt=a,this.updatedAt=n,this.organization=o,this.publicUserData=d,this._raw=null}get raw(){return this._raw}static fromJSON(t){let r=new e(t.id,t.role,t.permissions,t.public_metadata,t.private_metadata,t.created_at,t.updated_at,tZ.fromJSON(t.organization),t1.fromJSON(t.public_user_data));return r._raw=t,r}},t1=class e{constructor(e,t,r,s,i,a){this.identifier=e,this.firstName=t,this.lastName=r,this.imageUrl=s,this.hasImage=i,this.userId=a}static fromJSON(t){return new e(t.identifier,t.first_name,t.last_name,t.image_url,t.has_image,t.user_id)}},t3=class e{constructor(e,t,r,s,i,a,n,o,d,c){this.enabled=e,this.maxAllowedMemberships=t,this.maxAllowedRoles=r,this.maxAllowedPermissions=s,this.creatorRole=i,this.adminDeleteEnabled=a,this.domainsEnabled=n,this.slugDisabled=o,this.domainsEnrollmentModes=d,this.domainsDefaultRole=c}static fromJSON(t){return new e(t.enabled,t.max_allowed_memberships,t.max_allowed_roles,t.max_allowed_permissions,t.creator_role,t.admin_delete_enabled,t.domains_enabled,t.slug_disabled,t.domains_enrollment_modes,t.domains_default_role)}},t2=class e{constructor(e,t,r,s,i,a){this.id=e,this.phoneNumber=t,this.reservedForSecondFactor=r,this.defaultSecondFactor=s,this.verification=i,this.linkedTo=a}static fromJSON(t){return new e(t.id,t.phone_number,t.reserved_for_second_factor,t.default_second_factor,t.verification&&tC.fromJSON(t.verification),t.linked_to.map(e=>tO.fromJSON(e)))}},t5=class e{constructor(e,t,r,s,i,a,n){this.id=e,this.domainId=t,this.lastRunAt=r,this.proxyUrl=s,this.successful=i,this.createdAt=a,this.updatedAt=n}static fromJSON(t){return new e(t.id,t.domain_id,t.last_run_at,t.proxy_url,t.successful,t.created_at,t.updated_at)}},t9=class e{constructor(e,t,r,s){this.id=e,this.url=t,this.createdAt=r,this.updatedAt=s}static fromJSON(t){return new e(t.id,t.url,t.created_at,t.updated_at)}},t4=class e{constructor(e,t,r,s,i,a,n,o,d,c,l,u,h,p,m,y,f,k,g,_,S){this.id=e,this.name=t,this.domain=r,this.organizationId=s,this.idpEntityId=i,this.idpSsoUrl=a,this.idpCertificate=n,this.idpMetadataUrl=o,this.idpMetadata=d,this.acsUrl=c,this.spEntityId=l,this.spMetadataUrl=u,this.active=h,this.provider=p,this.userCount=m,this.syncUserAttributes=y,this.allowSubdomains=f,this.allowIdpInitiated=k,this.createdAt=g,this.updatedAt=_,this.attributeMapping=S}static fromJSON(t){return new e(t.id,t.name,t.domain,t.organization_id,t.idp_entity_id,t.idp_sso_url,t.idp_certificate,t.idp_metadata_url,t.idp_metadata,t.acs_url,t.sp_entity_id,t.sp_metadata_url,t.active,t.provider,t.user_count,t.sync_user_attributes,t.allow_subdomains,t.allow_idp_initiated,t.created_at,t.updated_at,t.attribute_mapping&&t6.fromJSON(t.attribute_mapping))}},t6=class e{constructor(e,t,r,s){this.userId=e,this.emailAddress=t,this.firstName=r,this.lastName=s}static fromJSON(t){return new e(t.user_id,t.email_address,t.first_name,t.last_name)}},t7=class e{constructor(e,t,r,s,i,a,n){this.id=e,this.userId=t,this.token=r,this.status=s,this.url=i,this.createdAt=a,this.updatedAt=n}static fromJSON(t){return new e(t.id,t.user_id,t.token,t.status,t.url,t.created_at,t.updated_at)}},t8=class e{constructor(e,t){this.nextAction=e,this.supportedStrategies=t}static fromJSON(t){return new e(t.next_action,t.supported_strategies)}},re=class e{constructor(e,t,r,s){this.emailAddress=e,this.phoneNumber=t,this.web3Wallet=r,this.externalAccount=s}static fromJSON(t){return new e(t.email_address&&t8.fromJSON(t.email_address),t.phone_number&&t8.fromJSON(t.phone_number),t.web3_wallet&&t8.fromJSON(t.web3_wallet),t.external_account)}},rt=class e{constructor(e,t,r,s,i,a,n,o,d,c,l,u,h,p,m,y,f,k,g,_,S,T){this.id=e,this.status=t,this.requiredFields=r,this.optionalFields=s,this.missingFields=i,this.unverifiedFields=a,this.verifications=n,this.username=o,this.emailAddress=d,this.phoneNumber=c,this.web3Wallet=l,this.passwordEnabled=u,this.firstName=h,this.lastName=p,this.customAction=m,this.externalId=y,this.createdSe
1ssionId=f,this.createdUserId=k,this.abandonAt=g,this.legalAcceptedAt=_,this.publicMetadata=S,this.unsafeMetadata=T}static fromJSON(t){return new e(t.id,t.status,t.required_fields,t.optional_fields,t.missing_fields,t.unverified_fields,t.verifications?re.fromJSON(t.verifications):null,t.username,t.email_address,t.phone_number,t.web3_wallet,t.password_enabled,t.first_name,t.last_name,t.custom_action,t.external_id,t.created_session_id,t.created_user_id,t.abandon_at,t.legal_accepted_at,t.public_metadata,t.unsafe_metadata)}},rr=class e{constructor(e,t,r,s,i,a,n){this.id=e,this.fromPhoneNumber=t,this.toPhoneNumber=r,this.message=s,this.status=i,this.phoneNumberId=a,this.data=n}static fromJSON(t){return new e(t.id,t.from_phone_number,t.to_phone_number,t.message,t.status,t.phone_number_id,t.data)}},rs=class e{constructor(e){this.jwt=e}static fromJSON(t){return new e(t.jwt)}},ri=class e{constructor(e,t,r){this.id=e,this.web3Wallet=t,this.verification=r}static fromJSON(t){return new e(t.id,t.web3_wallet,t.verification&&tC.fromJSON(t.verification))}},ra=class e{constructor(e,t,r,s,i,a,n,o,d,c,l,u,h,p,m,y,f,k,g,_={},S={},T={},b=[],w=[],A=[],I=[],v=[],q,O,C=null,P,x,E){this.id=e,this.passwordEnabled=t,this.totpEnabled=r,this.backupCodeEnabled=s,this.twoFactorEnabled=i,this.banned=a,this.locked=n,this.createdAt=o,this.updatedAt=d,this.imageUrl=c,this.hasImage=l,this.primaryEmailAddressId=u,this.primaryPhoneNumberId=h,this.primaryWeb3WalletId=p,this.lastSignInAt=m,this.externalId=y,this.username=f,this.firstName=k,this.lastName=g,this.publicMetadata=_,this.privateMetadata=S,this.unsafeMetadata=T,this.emailAddresses=b,this.phoneNumbers=w,this.web3Wallets=A,this.externalAccounts=I,this.enterpriseAccounts=v,this.lastActiveAt=q,this.createOrganizationEnabled=O,this.createOrganizationsLimit=C,this.deleteSelfEnabled=P,this.legalAcceptedAt=x,this.locale=E,this._raw=null}get raw(){return this._raw}static fromJSON(t){let r=new e(t.id,t.password_enabled,t.totp_enabled,t.backup_code_enabled,t.two_factor_enabled,t.banned,t.locked,t.created_at,t.updated_at,t.image_url,t.has_image,t.primary_email_address_id,t.primary_phone_number_id,t.primary_web3_wallet_id,t.last_sign_in_at,t.external_id,t.username,t.first_name,t.last_name,t.public_metadata,t.private_metadata,t.unsafe_metadata,(t.email_addresses||[]).map(e=>tP.fromJSON(e)),(t.phone_numbers||[]).map(e=>t2.fromJSON(e)),(t.web3_wallets||[]).map(e=>ri.fromJSON(e)),(t.external_accounts||[]).map(e=>tF.fromJSON(e)),(t.enterprise_accounts||[]).map(e=>tM.fromJSON(e)),t.last_active_at,t.create_organization_enabled,t.create_organizations_limit,t.delete_self_enabled,t.legal_accepted_at,t.locale);return r._raw=t,r}get primaryEmailAddress(){return this.emailAddresses.find(({id:e})=>e===this.primaryEmailAddressId)??null}get primaryPhoneNumber(){return this.phoneNumbers.find(({id:e})=>e===this.primaryPhoneNumberId)??null}get primaryWeb3Wallet(){return this.web3Wallets.find(({id:e})=>e===this.primaryWeb3WalletId)??null}get fullName(){return[this.firstName,this.lastName].join(" ").trim()||null}},rn=class e{constructor(e,t,r,s,i,a,n){this.id=e,this.emailAddress=t,this.status=r,this.invitation=s,this.createdAt=i,this.updatedAt=a,this.isLocked=n}static fromJSON(t){return new e(t.id,t.email_address,t.status,t.invitation&&tK.fromJSON(t.invitation),t.created_at,t.updated_at,t.is_locked)}};function ro(e){if("string"!=typeof e&&"object"in e&&"deleted"in e)return tI.fromJSON(e);switch(e.object){case tB.AccountlessApplication:return tm.fromJSON(e);case tB.ActorToken:return tf.fromJSON(e);case tB.AllowlistIdentifier:return tk.fromJSON(e);case tB.ApiKey:return tg.fromJSON(e);case tB.BlocklistIdentifier:return t_.fromJSON(e);case tB.Client:return tb.fromJSON(e);case tB.Cookies:return tA.fromJSON(e);case tB.Domain:return tv.fromJSON(e);case tB.EmailAddress:return tP.fromJSON(e);case tB.EnterpriseAccount:return tM.fromJSON(e);case tB.Email:return tq.fromJSON(e);case tB.IdpOAuthAccessToken:return eo.fromJSON(e);case tB.Instance:return tR.fromJSON(e);case tB.InstanceRestrictions:return tL.fromJSON(e);case tB.InstanceSettings:return tD.fromJSON(e);case tB.Invitation:return tK.fromJSON(e);case tB.JwtTemplate:return tW.fromJSON(e);case tB.Machine:return tG.fromJSON(e);case tB.MachineScope:return t$.fromJSON(e);case tB.MachineSecretKey:return tV.fromJSON(e);case tB.M2MToken:return ed.fromJSON(e);case tB.OauthAccessToken:return tQ.fromJSON(e);case tB.OAuthApplication:return tY.fromJSON(e);case tB.Organization:return tZ.fromJSON(e);case tB.OrganizationInvitation:return tX.fromJSON(e);case tB.OrganizationMembership:return t0.fromJSON(e);case tB.OrganizationSettings:return t3.fromJSON(e);case tB.PhoneNumber:return t2.fromJSON(e);case tB.ProxyCheck:return t5.fromJSON(e);case tB.RedirectUrl:return t9.fromJSON(e);case tB.EnterpriseConnection:return tj.fromJSON(e);case tB.SamlConnection:return t4.fromJSON(e);case tB.SignInToken:return t7.fromJSON(e);case tB.AgentTask:return ty.fromJSON(e);case tB.SignUpAttempt:return rt.fromJSON(e);case tB.Session:return tT.fromJSON(e);case tB.SmsMessage:return rr.fromJSON(e);case tB.Token:return rs.fromJSON(e);case tB.TotalCount:return e.total_count;case tB.User:return ra.fromJSON(e);case tB.WaitlistEntry:return rn.fromJSON(e);case tB.BillingPlan:return tE.fromJSON(e);case tB.BillingSubscription:return tN.fromJSON(e);case tB.BillingSubscriptionItem:return tU.fromJSON(e);case tB.Feature:return tx.fromJSON(e);default:return e}}function rd(e){var t;return t=async t=>{let r,{secretKey:s,machineSecretKey:i,useMachineSecretKey:a=!1,requireSecretKey:n=!0,apiUrl:o=_,apiVersion:c="v1",userAgent:l=S,skipApiVersionInUrl:u=!1}=e,{path:h,method:p,queryParams:m,headerParams:y,bodyParams:f,formData:k,options:g}=t,{deepSnakecaseBodyParamKeys:b=!1}=g||{};n&&v(s);let w=new URL(u?x(o,h):x(o,c,h));if(m)for(let[e,t]of Object.entries(tp({...m}
1)))t&&[t].flat().forEach(t=>w.searchParams.append(e,t));let I=new Headers({"Clerk-API-Version":T,[A.Headers.UserAgent]:l,...y}),q=A.Headers.Authorization;!I.has(q)&&(a&&i?I.set(q,`Bearer ${i}`):s&&I.set(q,`Bearer ${s}`));try{k?r=await d.fA.fetch(w.href,{method:p,headers:I,body:k}):(I.set("Content-Type","application/json"),r=await d.fA.fetch(w.href,{method:p,headers:I,...(()=>{if(!("GET"!==p&&f&&Object.keys(f).length>0))return null;let e=e=>tp(e,{deep:b});return{body:JSON.stringify(Array.isArray(f)?f.map(e):e(f))}})()}));let e=r?.headers&&r.headers?.get(A.Headers.ContentType)===A.ContentTypes.Json,t=await (e?r.json():r.text());if(!r.ok)return{data:null,errors:ru(t),status:r?.status,statusText:r?.statusText,clerkTraceId:rc(t,r?.headers),retryAfter:rl(r?.headers)};return{...function(e){var t,r;let s;if(Array.isArray(e))return{data:e.map(e=>ro(e))};if((t=e)&&"object"==typeof t&&"m2m_tokens"in t&&Array.isArray(t.m2m_tokens))return{data:s=e.m2m_tokens.map(e=>ro(e)),totalCount:e.total_count};return(r=e)&&"object"==typeof r&&"data"in r&&Array.isArray(r.data)&&void 0!==r.data?{data:s=e.data.map(e=>ro(e)),totalCount:e.total_count}:{data:ro(e)}}(t),errors:null}}catch(e){if(e instanceof Error)return{data:null,errors:[{code:"unexpected_error",message:e.message||"Unexpected error"}],clerkTraceId:rc(e,r?.headers)};return{data:null,errors:ru(e),status:r?.status,statusText:r?.statusText,clerkTraceId:rc(e,r?.headers),retryAfter:rl(r?.headers)}}},async(...e)=>{let{data:r,errors:s,totalCount:i,status:a,statusText:n,clerkTraceId:o,retryAfter:d}=await t(...e);if(s){let e=new f.LR(n||"",{data:[],status:a,clerkTraceId:o,retryAfter:d});throw e.errors=s,e}return void 0!==i?{data:r,totalCount:i}:r}}function rc(e,t){return e&&"object"==typeof e&&"clerk_trace_id"in e&&"string"==typeof e.clerk_trace_id?e.clerk_trace_id:t?.get("cf-ray")||""}function rl(e){let t=e?.get("Retry-After");if(!t)return;let r=parseInt(t,10);if(!isNaN(r))return r}function ru(e){if(e&&"object"==typeof e&&"errors"in e){let t=e.errors;return t.length>0?t.map(f.u$):[]}return[]}function rh(e){let t=rd(e);return{__experimental_accountlessApplications:new H(rd({...e,requireSecretKey:!1})),actorTokens:new N(t),agentTasks:new M(t),allowlistIdentifiers:new F(t),apiKeys:new L(rd({...e,skipApiVersionInUrl:!0})),betaFeatures:new D(t),blocklistIdentifiers:new B(t),billing:new e4(t),clients:new G(t),domains:new V(t),emailAddresses:new Y(t),enterpriseConnections:new X(t),idPOAuthAccessToken:new ee(rd({...e,skipApiVersionInUrl:!0})),instance:new er(t),invitations:new ei(t),jwks:new eE(t),jwtTemplates:new eN(t),machines:new en(t),m2m:new ex(rd({...e,skipApiVersionInUrl:!0,requireSecretKey:!1,useMachineSecretKey:!0}),{secretKey:e.secretKey,apiUrl:e.apiUrl,jwtKey:e.jwtKey}),oauthApplications:new eH(t),organizations:new eM(t),phoneNumbers:new eF(t),proxyChecks:new eR(t),redirectUrls:new eD(t),sessions:new eG(t),signInTokens:new eV(t),signUps:new eY(t),testingTokens:new eZ(t),users:new e0(t),waitlistEntries:new e3(t),webhooks:new e5(t),samlConnections:new eB(t)}}var rp=e=>()=>{let t={...e};return t.secretKey=(t.secretKey||"").substring(0,7),t.jwtKey=(t.jwtKey||"").substring(0,7),{...t}};function rm(e,t){return{tokenType:q.SessionToken,sessionClaims:null,sessionId:null,
1sessionStatus:t??null,userId:null,actor:null,orgId:null,orgRole:null,orgSlug:null,orgPermissions:null,factorVerificationAge:null,getToken:()=>Promise.resolve(null),has:()=>!1,debug:rp(e),isAuthenticated:!1}}var ry={SignedIn:"signed-in",SignedOut:"signed-out",Handshake:"handshake"},rf={ClientUATWithoutSessionToken:"client-uat-but-no-session-token",DevBrowserMissing:"dev-browser-missing",DevBrowserSync:"dev-browser-sync",PrimaryRespondsToSyncing:"primary-responds-to-syncing",PrimaryDomainCrossOriginSync:"primary-domain-cross-origin-sync",SatelliteCookieNeedsSyncing:"satellite-needs-syncing",SessionTokenAndUATMissing:"session-token-and-uat-missing",SessionTokenMissing:"session-token-missing",SessionTokenExpired:"session-token-expired",SessionTokenIATBeforeClientUAT:"session-token-iat-before-client-uat",SessionTokenNBF:"session-token-nbf",SessionTokenIatInTheFuture:"session-token-iat-in-the-future",SessionTokenWithoutClientUAT:"session-token-but-no-client-uat",ActiveOrganizationMismatch:"active-organization-mismatch",TokenTypeMismatch:"token-type-mismatch",UnexpectedError:"unexpected-error"};function rk(e){let{authenticateContext:t,headers:r=new Headers,token:s}=e;return{status:ry.SignedIn,reason:null,message:null,proxyUrl:t.proxyUrl||"",publishableKey:t.publishableKey||"",isSatellite:t.isSatellite||!1,domain:t.domain||"",signInUrl:t.signInUrl||"",signUpUrl:t.signUpUrl||"",afterSignInUrl:t.afterSignInUrl||"",afterSignUpUrl:t.afterSignUpUrl||"",isSignedIn:!0,isAuthenticated:!0,tokenType:e.tokenType,toAuth:({treatPendingAsSignedOut:r=!0}={})=>{if(e.tokenType===q.SessionToken){let{sessionClaims:i}=e,a=function(e,t,r){let{actor:s,sessionId:i,sessionStatus:a,userId:n,orgId:o,orgRole:d,orgSlug:c,orgPermissions:l,factorVerificationAge:u}=(0,y.Y)(r),h=rh(e),p=(e=>{let{fetcher:t,sessionToken:r,sessionId:s}=e||{};return async(e={})=>s?e.template||void 0!==e.expiresInSeconds?t(s,e.template,e.expiresInSeconds):r:null})({sessionId:i,sessionToken:t,fetcher:async(e,t,r)=>(await h.sessions.getToken(e,t||"",r)).jwt});return{tokenType:q.SessionToken,actor:s,sessionClaims:r,sessionId:i,sessionStatus:a,userId:n,orgId:o,orgRole:d,orgSlug:c,orgPermissions:l,factorVerificationAge:u,getToken:p,has:(0,m.MR)({orgId:o,orgRole:d,orgPermissions:l,userId:n,factorVerificationAge:u,features:r.fea||"",plans:r.pla||""}),debug:rp({...e,sessionToken:t}),isAuthenticated:!0}}(t,s,i);return r&&"pending"===a.sessionStatus?rm(void 0,a.sessionStatus):a}let{machineData:i}=e;var a=e.tokenType;let n={id:i.id,subject:i.subject,getToken:()=>Promise.resolve(s),has:()=>!1,debug:rp(t),isAuthenticated:!0};switch(a){case q.ApiKey:return{...n,tokenType:a,name:i.name,claims:i.claims,scopes:i.scopes,userId:i.subject.startsWith("user_")?i.subject:null,orgId:i.subject.startsWith("org_")?i.subject:null};case q.M2MToken:return{...n,tokenType:a,claims:i.claims,scopes:i.scopes,machineId:i.subject};case q.OAuthToken:return{...n,tokenType:a,scopes:i.scopes,userId:i.subject,clientId:i.clientId};default:throw Error(`Invalid token type: ${a}`)}},headers:r,token:s}}function rg(e){let{authenticateContext:t,headers:r=new Headers,reason:s,message:i="",tokenType:a}=e;return r_({status:ry.SignedOut,reason:s,message:i,proxyUrl:t.proxyUrl||"",publishableKey:t.publishableKey||"",isSatellite:t.isSatellite||!1,domain:t.domain||"",signInUrl:t.signInUrl||"",signUpUrl:t.signUpUrl||"",afterSignInUrl:t.afterSignInUrl||"",afterSignUpUrl:t.afterSignUpUrl||"",isSignedIn:!1,isAuthenticated:!1,tokenType:a,toAuth:()=>{if(a===q.SessionToken)return rm({...t,status:ry.SignedOut,reason:s,message:i});let e={id:null,subject:null,scopes:null,has:()=>!1,getToken:()=>Promise.resolve(null),debug:rp({reason:s,message:i,headers:r}),isAuthenticated:!1};switch(a){case q.ApiKey:return{...e,tokenType:a,name:null,claims:null,scopes:null,userId:null,orgId:null};case q.M2MToken:return{...e,tokenType:a,claims:null,scopes:null,machineId:null};case q.OAuthToken:return{...e,tokenType:a,scopes:null,userId:null,clientId:null};default:throw Error(`Invalid token type: ${a}`)}},headers:r,token:null})}var r_=e=>{let t=new Headers(e.headers||{});if(e.message)try{t.set(A.Headers.AuthMessage,e.message)}catch{}if(e.reason)try{t.set(A.Headers.AuthReason,e.reason)}catch{}if(e.status)try{t.set(A.Headers.AuthStatus,e.status)}catch{}return e.headers=t,e},rS=(0,l.f1)(g()),rT=class extends URL{isCrossOrigin(e){return this.origin!==new URL(e.toString()).origin}},rb=(...e)=>new rT(...e),rw=class extends Request{constructor(e,t){let r,s="string"!=typeof e&&"url"in e?e.url:String(e);t?r=t:"string"!=typeof e&&(r=new Proxy(e,{get(e,t){if("signal"!==t)return Reflect.get(e,t,e)}})),super(s,r),this.clerkUrl=this.deriveUrlFromHeaders(this),this.cookies=this.parseCookies(this)}toJSON(){return{url:this.clerkUrl.href,method:this.method,headers:JSON.stringify(Object.fromEntries(this.headers)),clerkUrl:this.clerkUrl.toString(),cookies:JSON.stringify(Object.fromEntries(this.cookies))}}deriveUrlFromHeaders(e){let t=new URL(e.url),r=e.headers.get(A.Headers.ForwardedProto),s=e.headers.get(A.Headers.ForwardedHost),i=e.headers.get(A.Headers.Host),a=t.protocol,n=this.getFirstValueFromHeader(s)??i,o=this.getFirstValueFromHeader(r)??a?.replace(/[:/]/,""),d=n&&o?`${o}://${n}`:t.origin;if(d===t.origin)return rb(t);try{return rb(t.pathname+t.search,d)}catch{return rb(t)}}getFirstValueFromHeader(e){return e?.split(",")[0]}parseCookies(e){return new Map(Object.entries((0,rS.parse)(this.decodeCookieValue(e.headers.get("cookie")||""))))}decodeCookieValue(e){return e?e.replace(/(%[0-9A-Z]{2}
1)+/g,decodeURIComponent):e}},rA=e=>e.split(";")[0]?.split("=")[0],rI=e=>e.split(";")[0]?.split("=")[1];async function rv(e,t){let{data:r,errors:s}=(0,d.iU)(e);if(s)return{errors:s};let{header:i}=r,{kid:a}=i;try{let r;if(t.jwtKey)r=eh({kid:a,pem:t.jwtKey});else{if(!t.secretKey)return{errors:[new c.zF({action:c.z.SetClerkJWTKey,message:"Failed to resolve JWK during verification.",reason:c.jn.JWKFailedToResolve})]};r=await ep({...t,kid:a})}return await (0,d.J0)(e,{...t,key:r})}catch(e){return{errors:[e]}}}function rq(e,t,r){if((0,f.$R)(t)){let s,i;switch(t.status){case 401:s=c.h5.InvalidSecretKey,i=t.errors[0]?.message||"Invalid secret key";break;case 404:s=c.h5.TokenInvalid,i=r;break;default:s=c.h5.UnexpectedError,i="Unexpected error"}return{data:void 0,tokenType:e,errors:[new c.sM({message:i,code:s,status:t.status})]}}return{data:void 0,tokenType:e,errors:[new c.sM({message:"Unexpected error",code:c.h5.UnexpectedError,status:t.status})]}}async function rO(e,t){try{let r=rh(t);return{data:await r.m2m.verify({token:e}),tokenType:q.M2MToken,errors:void 0}}catch(e){return rq(q.M2MToken,e,"Machine token not found")}}async function rC(e,t){try{let r=rh(t);return{data:await r.idPOAuthAccessToken.verify(e),tokenType:q.OAuthToken,errors:void 0}}catch(e){return rq(q.OAuthToken,e,"OAuth token not found")}}async function rP(e,t){try{let r=rh(t);return{data:await r.apiKeys.verify(e),tokenType:q.ApiKey,errors:void 0}}catch(e){return rq(q.ApiKey,e,"API key not found")}}async function rx(e,t){if(eS(e)){let r;try{let{data:t,errors:s}=(0,d.iU)(e);if(s)throw s[0];r=t}catch(e){return{data:void 0,tokenType:q.M2MToken,errors:[new c.sM({code:c.h5.TokenInvalid,message:e.message})]}}return r.payload.sub.startsWith(ef)?eO(e,r,t):eT.includes(r.header.typ)?eC(e,r,t):{data:void 0,tokenType:q.OAuthToken,errors:[new c.sM({code:c.h5.TokenVerificationFailed,message:`Invalid JWT type: ${r.header.typ??"missing"}. Expected one of: ${eT.join(", ")} for OAuth, or sub starting with 'mch_' for M2M`})]}}if(e.startsWith("mt_"))return rO(e,t);if(e.startsWith(ek))return rC(e,t);if(e.startsWith("ak_"))return rP(e,t);throw Error("Unknown machine token type")}async function rE(e,{key:t}){let{data:r,errors:s}=(0,d.iU)(e);if(s)throw s[0];let{header:i,payload:a}=r,{typ:n,alg:o}=i;(0,d.qf)(n),(0,d.l3)(o);let{data:l,errors:u}=await (0,d.nk)(r,t);if(u)throw new c.zF({reason:c.jn.TokenVerificationFailed,message:`Error verifying handshake token. ${u[0]}`});if(!l)throw new c.zF({reason:c.jn.TokenInvalidSignature,message:"Handshake signature is invalid."});return a}async function rU(e,t){let r,{secretKey:s,apiUrl:i,apiVersion:a,jwksCacheTtlInMs:n,jwtKey:o,skipJwksCache:l}=t,{data:u,errors:h}=(0,d.iU)(e);if(h)throw h[0];let{kid:p}=u.header;if(o)r=eh({kid:p,pem:o});else if(s)r=await ep({secretKey:s,apiUrl:i,apiVersion:a,kid:p,jwksCacheTtlInMs:n,skipJwksCache:l});else throw new c.zF({action:c.z.SetClerkJWTKey,message:"Failed to resolve JWK during handshake verification.",reason:c.jn.JWKFailedToResolve});return rE(e,{key:r})}var rN=class{constructor(e,t,r){this.authenticateContext=e,this.options=t,this.organizationMatcher=r}isRequestEligibleForHandshake(){let{accept:e,method:t,secFetchDest:r}=this.authenticateContext;return"GET"===t&&!!("document"===r||"iframe"===r||!r&&e?.startsWith("text/html"))}buildRedirectToHandshake(e){if(!this.authenticateContext?.clerkUrl)throw Error("Missing clerkUrl in authenticateContext");let t=this.removeDevBrowserFromURL(this.authenticateContext.clerkUrl),r=this.authenticateContext.frontendApi.startsWith("http")?this.authenticateContext.frontendApi:`https://${this.authenticateContext.frontendApi}`,s=new URL("v1/client/handshake",r=r.replace(/\/+$/,"")+"/");s.searchParams.append("redirect_url",t?.href||""),s.searchParams.append("__clerk_api_version",T),s.searchParams.append(A.QueryParameters.SuffixedCookies,this.authenticateContext.usesSuffixedCookies().toString()),s.searchParams.append(A.QueryParameters.HandshakeReason,e),s.searchParams.append(A.QueryParameters.HandshakeFormat,"nonce"),this.authenticateContext.sessionToken&&s.searchParams.append(A.QueryParameters.Session,this.authenticateContext.sessionToken),"development"===this.authenticateContext.
1instanceType&&this.authenticateContext.devBrowserToken&&s.searchParams.append(A.QueryParameters.DevBrowser,this.authenticateContext.devBrowserToken);let i=this.getOrganizationSyncTarget(this.authenticateContext.clerkUrl,this.organizationMatcher);return i&&this.getOrganizationSyncQueryParams(i).forEach((e,t)=>{s.searchParams.append(t,e)}),new Headers({[A.Headers.Location]:s.href})}async getCookiesFromHandshake(){let e=[];if(this.authenticateContext.handshakeNonce)try{let t=await this.authenticateContext.apiClient?.clients.getHandshakePayload({nonce:this.authenticateContext.handshakeNonce});t&&e.push(...t.directives)}catch(e){console.error("Clerk: HandshakeService: error getting handshake payload:",e)}else if(this.authenticateContext.handshakeToken){let t=await rU(this.authenticateContext.handshakeToken,this.authenticateContext);t&&Array.isArray(t.handshake)&&e.push(...t.handshake)}return e}async resolveHandshake(){let e=new Headers({"Access-Control-Allow-Origin":"null","Access-Control-Allow-Credentials":"true"}),t=await this.getCookiesFromHandshake(),r="";if(t.forEach(t=>{e.append("Set-Cookie",t),rA(t).startsWith(A.Cookies.Session)&&(r=rI(t))}),"development"===this.authenticateContext.instanceType){let t=new URL(this.authenticateContext.clerkUrl);t.searchParams.delete(A.QueryParameters.Handshake),t.searchParams.delete(A.QueryParameters.HandshakeHelp),t.searchParams.delete(A.QueryParameters.DevBrowser),t.searchParams.delete(A.QueryParameters.HandshakeNonce),e.append(A.Headers.Location,t.toString()),e.set(A.Headers.CacheControl,"no-store")}if(""===r)return rg({tokenType:q.SessionToken,authenticateContext:this.authenticateContext,reason:rf.SessionTokenMissing,message:"",headers:e});let{data:s,errors:[i]=[]}=await rv(r,this.authenticateContext);if(s)return rk({tokenType:q.SessionToken,authenticateContext:this.authenticateContext,sessionClaims:s,headers:e,token:r});if("development"===this.authenticateContext.instanceType&&(i?.reason===c.jn.TokenExpired||i?.reason===c.jn.TokenNotActiveYet||i?.reason===c.jn.TokenIatInTheFuture)){let t=new c.zF({action:i.action,message:i.message,reason:i.reason});t.tokenCarrier="cookie",console.error(`Clerk: Clock skew detected. This usually means that your system clock is inaccurate. Clerk will attempt to account for the clock skew in development. 2 3To resolve this issue, make sure your system's clock is set to the correct time (e.g. turn off and on automatic time synchronization). 4 5--- 6 7${t.getFullMessage()}`);let{data:s,errors:[a]=[]}=await rv(r,{...this.authenticateContext,clockSkewInMs:864e5});if(s)return rk({tokenType:q.SessionToken,authenticateContext:this.authenticateContext,sessionClaims:s,headers:e,token:r});throw Error(a?.message||"Clerk: Handshake retry failed.")}throw Error(i?.message||"Clerk: Handshake failed.")}handleTokenVerificationErrorInDevelopment(e){if(e.reason===c.jn.TokenInvalidSignature)throw Error("Clerk: Handshake token verification failed due to an invalid signature. If you have switched Clerk keys locally, clear your cookies and try again.");throw Error(`Clerk: Handshake token verification failed: ${e.getFullMessage()}.`)}checkAndTrackRedirectLoop(e){if(3===this.authenticateContext.handshakeRedirectLoopCounter)return!0;let t=this.authenticateContext.handshakeRedirectLoopCounter+1,r=A.Cookies.RedirectCount;return e.append("Set-Cookie",`${r}=${t}; SameSite=Lax; HttpOnly; Max-Age=2`),!1}removeDevBrowserFromURL(e){let t=new URL(e);return t.searchParams.delete(A.QueryParameters.DevBrowser),t.searchParams.delete(A.QueryParameters.LegacyDevBrowser),t}getOrganizationSyncTarget(e,t){return t.findTarget(e)}getOrganizationSyncQueryParams(e){let t=new Map;return"personalAccount"===e.type&&t.set("organization_id",""),"organization"===e.type&&(e.organizationId&&t.set("organization_id",e.organizationId),e.organizationSlug&&t.set("organization_id",e.organizationSlug)),t}},rJ=class{constructor(e){this.organizationPattern=this.createMatcher(e?.organizationPatterns),this.personalAccountPattern=this.createMatcher(e?.personalAccountPatterns)}createMatcher(e){if(!e)return null;try{return(0,k.t)(e)}catch(t){throw Error(`Invalid pattern "${e}": ${t}`)}}findTarget(e){let t=this.findOrganizationTarget(e);return t||this.findPersonalAccountTarget(e)}findOrganizationTarget(e){if(!this.organizationPattern)return null;try{let t=this.organizationPattern(e.pathname);if(!t||!("params"in t))return null;let r=t.params;if(r.id)return{type:"organization",organizationId:r.id};if(r.slug)return{type:"organization",organizationSlug:r.slug};return null}catch(e){return console.error("Failed to match organization pattern:",e),null}}findPersonalAccountTarget(e){if(!this.personalAccountPattern)return null;try{return this.personalAccountPattern(e.pathname)?{type:"personalAccount"}:null}catch(e){return console.error("Failed to match personal account pattern:",e),null}}},rM={NonEligibleNoCookie:"non-eligible-no-refresh-cookie",NonEligibleNonGet:"non-eligible-non-get",InvalidSessionToken:"invalid-session-token",MissingApiClient:"missing-api-client",MissingSessionToken:"missing-session-token",MissingRefreshToken:"missing-refresh-token",ExpiredSessionTokenDecodeFailed:"expired-session-token-decode-failed",ExpiredSessionTokenMissingSidClaim:"expired-session-token-missing-sid-claim",FetchError:"fetch-error",UnexpectedSDKError:"unexpected-sdk-error",UnexpectedBAPIError:"unexpected-bapi-error"};function rz(e,t,r){return ev(e,t)?null:rg({tokenType:"string"==typeof t?t:e,authenticateContext:r,reason:rf.TokenTypeMismatch})}var rH=async(e,t)=>{let r=await C(((...e)=>e[0]&&"object"==typeof e[0]&&"clerkUrl"in e[0]&&"cookies"in e[0]?e[0]:new rw(...e))(e),t),s=t.acceptsToken??q.SessionToken;if(s!==q.M2MToken&&(v(r.secretKey),r.isSatellite)){var i=r.signInUrl,a=r.secretKey;if(!i&&(0,o.Ve)(a))throw Error("Missing signInUrl. Pass a signInUrl for dev instances if an app is satellite");if(r.signInUrl&&r.origin&&function(e,t){let r;try{r=new URL(e)}catch{throw Error("The signInUrl needs to have a absolute url format.")}if(r.origin===t)throw Error("The signInUrl needs to be on a different origin than your satellite application.")}(r.signInUrl,r.origin),!(r.proxyUrl||r.domain))throw Error("Missing domain and proxyUrl. A satellite application needs to specify a domain or a proxyUrl")}s===q.M2MToken&&function(e){if(!e.machineSecretKey&&!e.secretKey)throw Error("Machine token authentication requires either a Machine secret key or a Clerk secret key. Ensure a Clerk secret key or Machine secret key is set.")}(r);let n=new rJ(t.organizationSyncOptions),l=new rN(r,{organizationSyncOptions:t.organizationSyncOptions},n);async function u(r){if(!t.apiClient)return{data:null,error:{message:"An apiClient is needed to perform token refresh.",cause:{reason:rM.MissingApiClient}}};let{sessionToken:s,refreshTokenInCookie:i}=r;if(!s)return{data:null,error:{message:"Session token must be provided.",cause:{reason:rM.MissingSessionToken}}};if(!i)return{data:null,error:{message:"Refresh token must be provided.",cause:{reason:rM.MissingRefreshToken}}};let{data:a,errors:n}=(0,d.iU)(s);if(!a||n)return{data:null,error:{message:"Unable to decode the expired session token.",cause:{reason:rM.ExpiredSessionTokenDecodeFailed,errors:n}}};if(!a?.payload?.sid)return{data:null,error:{message:"Expired session token is missing the `sid` claim.",cause:{reason:rM.ExpiredSessionTokenMissingSidClaim}}};try{return{data:(await t.apiClient.sessions.refreshSession(a.payload.sid,{format:"cookie",suffixed_cookies:r.usesSuffixedCookies(),expired_token:s||"",refresh_token:i||"",request_origin:r.clerkUrl.origin,request_headers:Object.fromEntries(Array.from(e.headers.entries()).map(([e,t])=>[e,[t]]))})).cookies,error:null}}catch(e){if(!e?.errors?.length)return{data:null,error:{message:"Unexpected Server/BAPI error",cause:{reason:rM.UnexpectedBAPIError,errors:[e]}}};if("unexpected_error"===e.errors[0].code)return{data:null,error:{message:"Fetch unexpected error",cause:{reason:rM.FetchError,errors:e.errors}}};return{data:null,error:{message:e.errors[0].code,cause:{reason:e.errors[0].code,errors:e.errors}}}}}async function h(e){let{data:t,error:r}=await u(e);if(!t||0===t.length)return{data:null,error:r};let s=new Headers,i="";
7t.forEach(e=>{s.append("Set-Cookie",e),rA(e).startsWith(A.Cookies.Session)&&(i=rI(e))});let{data:a,errors:n}=await rv(i,e);return n?{data:null,error:{message:"Clerk: unable to verify refreshed session token.",cause:{reason:rM.InvalidSessionToken,errors:n}}}:{data:{jwtPayload:a,sessionToken:i,headers:s},error:null}}function p(e,t,r,s){if(!l.isRequestEligibleForHandshake())return rg({tokenType:q.SessionToken,authenticateContext:e,reason:t,message:r});let i=s??l.buildRedirectToHandshake(t);return(i.get(A.Headers.Location)&&i.set(A.Headers.CacheControl,"no-store"),l.checkAndTrackRedirectLoop(i))?(console.log("Clerk: Refreshing the session token resulted in an infinite redirect loop. This usually means that your Clerk instance keys do not match - make sure to copy the correct publishable and secret keys from the Clerk dashboard."),rg({tokenType:q.SessionToken,authenticateContext:e,reason:t,message:r})):function(e,t,r="",s){return r_({status:ry.Handshake,reason:t,message:r,publishableKey:e.publishableKey||"",isSatellite:e.isSatellite||!1,domain:e.domain||"",proxyUrl:e.proxyUrl||"",signInUrl:e.signInUrl||"",signUpUrl:e.signUpUrl||"",afterSignInUrl:e.afterSignInUrl||"",afterSignUpUrl:e.afterSignUpUrl||"",isSignedIn:!1,isAuthenticated:!1,tokenType:q.SessionToken,toAuth:()=>null,headers:s,token:null})}(e,t,r,i)}async function m(){let{tokenInHeader:e}=r;if(eb(e)||ew(e))return rg({tokenType:q.SessionToken,authenticateContext:r,reason:rf.TokenTypeMismatch,message:""});try{let{data:t,errors:s}=await rv(e,r);if(s)throw s[0];return rk({tokenType:q.SessionToken,authenticateContext:r,sessionClaims:t,headers:new Headers,token:e})}catch(e){return f(e,"header")}}async function y(){let e=r.clientUat,t=!!r.sessionTokenInCookie,s=!!r.devBrowserToken;if(r.handshakeNonce||r.handshakeToken)try{return await l.resolveHandshake()}catch(e){e instanceof c.zF&&"development"===r.instanceType?l.handleTokenVerificationErrorInDevelopment(e):console.error("Clerk: unable to resolve handshake:",e)}let i=r.isSatellite&&"document"===r.secFetchDest&&"GET"===r.method,a=r.clerkUrl.searchParams.get(A.QueryParameters.ClerkSynced),o=a===A.ClerkSyncStatus.NeedsSync,u=a===A.ClerkSyncStatus.Completed,h=t||e,m=!0!==r.satelliteAutoSync&&!h&&!o;if("production"===r.instanceType&&i&&!u){if(m)return rg({tokenType:q.SessionToken,authenticateContext:r,reason:rf.SessionTokenAndUATMissing});if(!h||o)return p(r,rf.SatelliteCookieNeedsSyncing,"")}if("development"===r.instanceType&&i&&!u){if(m)return rg({tokenType:q.SessionToken,authenticateContext:r,reason:rf.SessionTokenAndUATMissing});if(!h||o){let e=new URL(r.signInUrl);e.searchParams.append(A.QueryParameters.ClerkRedirectUrl,r.clerkUrl.toString());let t=new Headers({[A.Headers.Location]:e.toString()});return p(r,rf.SatelliteCookieNeedsSyncing,"",t)}}let y=new URL(r.clerkUrl).searchParams.get(A.QueryParameters.ClerkRedirectUrl);if("development"===r.instanceType&&!r.isSatellite&&y){let e=new URL(y);r.devBrowserToken&&e.searchParams.append(A.QueryParameters.DevBrowser,r.devBrowserToken),e.searchParams.set(A.QueryParameters.ClerkSynced,A.ClerkSyncStatus.Completed);let t=new Headers({[A.Headers.Location]:e.toString()});return p(r,rf.PrimaryRespondsToSyncing,"",t)}if("development"===r.instanceType&&r.clerkUrl.searchParams.has(A.QueryParameters.DevBrowser))return p(r,rf.DevBrowserSync,"");if("development"===r.instanceType&&!s)return p(r,rf.DevBrowserMissing,"");if(!e&&!t)return rg({tokenType:q.SessionToken,authenticateContext:r,reason:rf.SessionTokenAndUATMissing});if(!e&&t)return p(r,rf.SessionTokenWithoutClientUAT,"");if(e&&!t)return p(r,rf.ClientUATWithoutSessionToken,"");let{data:k,errors:g}=(0,d.iU)(r.sessionTokenInCookie);if(g)return f(g[0],"cookie");if(k.payload.iat<r.clientUat)return p(r,rf.SessionTokenIATBeforeClientUAT,"");try{let{data:e,errors:t}=await rv(r.sessionTokenInCookie,r);if(t)throw t[0];e.azp||console.warn("Clerk: Session token from cookie is missing the azp claim. In a future version of Clerk, this token will be considered invali
7d. Please contact Clerk support if you see this warning.");let s=rk({tokenType:q.SessionToken,authenticateContext:r,sessionClaims:e,headers:new Headers,token:r.sessionTokenInCookie});if(!r.isSatellite&&"GET"===r.method&&"document"===r.secFetchDest&&r.isCrossOriginReferrer()&&!r.isKnownClerkReferrer()&&0===r.handshakeRedirectLoopCounter)return p(r,rf.PrimaryDomainCrossOriginSync,"Cross-origin request from satellite domain requires handshake");let i=s.toAuth();if(i.userId){let e=function(e,t){let r=n.findTarget(e.clerkUrl);if(!r)return null;let s=!1;if("organization"===r.type&&(r.organizationSlug&&r.organizationSlug!==t.orgSlug&&(s=!0),r.organizationId&&r.organizationId!==t.orgId&&(s=!0)),"personalAccount"===r.type&&t.orgId&&(s=!0),!s)return null;if(e.handshakeRedirectLoopCounter>=3)return console.warn("Clerk: Organization activation handshake loop detected. This is likely due to an invalid organization ID or slug. Skipping organization activation."),null;let i=p(e,rf.ActiveOrganizationMismatch,"");return"handshake"!==i.status?null:i}(r,i);if(e)return e}return s}catch(e){return f(e,"cookie")}}async function f(t,s){let i;if(!(t instanceof c.zF))return rg({tokenType:q.SessionToken,authenticateContext:r,reason:rf.UnexpectedError});if(t.reason===c.jn.TokenExpired&&r.refreshTokenInCookie&&"GET"===e.method){let{data:e,error:t}=await h(r);if(e)return rk({tokenType:q.SessionToken,authenticateContext:r,sessionClaims:e.jwtPayload,headers:e.headers,token:e.sessionToken});i=t?.cause?.reason?t.cause.reason:rM.UnexpectedSDKError}else i="GET"!==e.method?rM.NonEligibleNonGet:r.refreshTokenInCookie?null:rM.NonEligibleNoCookie;return(t.tokenCarrier=s,[c.jn.TokenExpired,c.jn.TokenNotActiveYet,c.jn.TokenIatInTheFuture].includes(t.reason))?p(r,rF({tokenError:t.reason,refreshError:i}),t.getFullMessage()):rg({tokenType:q.SessionToken,authenticateContext:r,reason:t.reason,message:t.getFullMessage()})}function k(e,t){return t instanceof c.sM?rg({tokenType:e,authenticateContext:r,reason:t.code,message:t.getFullMessage()}):rg({tokenType:e,authenticateContext:r,reason:rf.UnexpectedError})}async function g(){let{tokenInHeader:e}=r;if(!e)return f(Error("Missing token in header"),"header");if(!eA(e))return rg({tokenType:s,authenticateContext:r,reason:rf.TokenTypeMismatch,message:""});let t=rz(eI(e),s,r);if(t)return t;let{data:i,tokenType:a,errors:n}=await rx(e,r);return n?k(a,n[0]):rk({tokenType:a,authenticateContext:r,machineData:i,token:e})}async function _(){let{tokenInHeader:e}=r;if(!e)return f(Error("Missing token in header"),"header");if(eA(e)){let t=rz(eI(e),s,r);if(t)return t;let{data:i,tokenType:a,errors:n}=await rx(e,r);return n?k(a,n[0]):rk({tokenType:a,authenticateContext:r,machineData:i,token:e})}let{data:t,errors:i}=await rv(e,r);return i?f(i[0],"header"):rk({tokenType:q.SessionToken,authenticateContext:r,sessionClaims:t,token:e})}return Array.isArray(s)&&!function(e,t){let r=null,{tokenInHeader:s}=t;return s&&(r=eA(s)?eI(s):q.SessionToken),ev(r??q.SessionToken,e)}(s,r)?function(){let e={isAuthenticated:!1,tokenType:null,getToken:()=>Promise.resolve(null),has:()=>!1,debug:()=>({})};return r_({status:ry.SignedOut,reason:rf.TokenTypeMismatch,message:"",proxyUrl:"",publishableKey:"",isSatellite:!1,domain:"",signInUrl:"",signUpUrl:"",afterSignInUrl:"",afterSignUpUrl:"",isSignedIn:!1,isAuthenticated:!1,tokenType:null,toAuth:()=>e,headers:new Headers,token:null})}():r.tokenInHeader?"any"===s||Array.isArray(s)?_():s===q.SessionToken?m():g():s===q.OAuthToken||s===q.ApiKey||s===q.M2MToken?rg({tokenType:s,authenticateContext:r,reason:"No token in header"}):y()},rj=e=>{let{isSignedIn:t,isAuthenticated:r,proxyUrl:s,reason:i,message:a,publishableKey:n,isSatellite:o,domain:d}=e;return{isSignedIn:t,isAuthenticated:r,proxyUrl:s,reason:i,message:a,publishableKey:n,isSatellite:o,domain:d}},rF=({tokenError:e,refreshError:t})=>{switch(e){case c.jn.TokenExpired:return`${rf.SessionTokenExpired}-refresh-${t}`;case c.jn.TokenNotActiveYet:return rf.SessionTokenNBF;case c.jn.TokenIatInTheFuture:return rf.SessionTokenIatInTheFuture;default:return rf.UnexpectedError}},rR={secretKey:"",machineSecretKey:"",jwtKey:"",apiUrl:void 0,apiVersion:void 0,proxyUrl:"",publishableKey:"",isSatellite:!1,domain:"",audience:""};function rL(e){let t=I(rR,e.options),r=e.apiClient;return{authenticateRequest:(e,s={})=>{let{apiUrl:i,apiVersion:a}=t,n=I(t,s);return rH(e,{...s,...n,apiUrl:i,apiVersion:a,apiClient:r})},debugRequestState:rj}}}}]);
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.