@humain/terminal 0.0.6 → 0.0.7

package/dist/bundle/chunks/pi-messages-57K43J6J.js

@@ -0,0 +1,8 @@
+import { createRequire as __piCreateRequire } from "node:module"; const require = __piCreateRequire(import.meta.url);
+import{headersToRecord,providerHeadersToRecord}from"./chunk-6R7UI4IY.js";import{getProviderEnvValue}from"./chunk-7DDKXS2Q.js";import{parseStreamingJson}from"./chunk-D7XAASZM.js";import{AssistantMessageEventStream,appendAssistantMessageDiagnostic,createAssistantMessageDiagnostic}from"./chunk-72KO4OMP.js";import"./chunk-JXWJOIH4.js";var PiMessagesResponseError=class extends Error{constructor(message,code,diagnosticDetails){super(message),this.name="PiMessagesResponseError",this.code=code,this.diagnosticDetails=diagnosticDetails}};function parsePiMessagesErrorBody(body){try{let parsed=JSON.parse(body),error=parsed?.error;return parsed&&typeof error=="object"&&error!==null&&!Array.isArray(error)?parsed:void 0}catch{return}}function truncateDiagnosticString(value){return value.length>8192?`${value.slice(0,8192)}\u2026`:value}function formatPiMessagesResponseError(response,body,errorBody){let message=typeof errorBody?.error?.message=="string"?errorBody.error.message:void 0,code=typeof errorBody?.error?.code=="string"?errorBody.error.code:void 0,suffix=message??body,codeSuffix=code?` (${code})`:"";return`${response.status} ${response.statusText}: ${suffix}${codeSuffix}`}function createPiMessagesResponseError(model,url,response,body){let errorBody=parsePiMessagesErrorBody(body),code=typeof errorBody?.error?.code=="string"?errorBody.error.code:void 0;return new PiMessagesResponseError(formatPiMessagesResponseError(response,body,errorBody),code,{version:1,provider:model.provider,model:model.id,url:url.toString(),status:response.status,statusText:response.statusText,error:errorBody?.error,body:errorBody?void 0:truncateDiagnosticString(body),timestampMs:Date.now()})}function createEmptyUsage(){return{input:0,output:0,cacheRead:0,cacheWrite:0,totalTokens:0,cost:{input:0,output:0,cacheRead:0,cacheWrite:0,total:0}}}function appendRewriteDiagnostic(message,rewrite){rewrite&&appendAssistantMessageDiagnostic(message,{type:"pi_messages_rewrite",timestamp:Date.now(),details:{...rewrite}})}function createEventConverter(model){let partial={role:"assistant",content:[],api:model.api,provider:model.provider,model:model.id,usage:createEmptyUsage(),stopReason:"pending",timestamp:Date.now()},toolJson=new Map;return event=>{switch(event.type){case"done":return Object.assign(partial,{stopReason:event.reason,usage:event.usage,responseId:event.responseId}),appendRewriteDiagnostic(partial,event.rewrite),{type:"done",reason:event.reason,message:partial};case"error":return Object.assign(partial,{stopReason:event.reason,usage:event.usage,errorMessage:event.errorMessage,responseId:event.responseId}),appendRewriteDiagnostic(partial,event.rewrite),{type:"error",reason:event.reason,error:partial};case"start":break;case"text_start":partial.content[event.contentIndex]={type:"text",text:""};break;case"text_delta":partial.content[event.contentIndex].text+=event.delta;break;case"text_end":Object.assign(partial.content[event.contentIndex],{text:event.content,textSignature:event.contentSignature});break;case"thinking_start":partial.content[event.contentIndex]={type:"thinking",thinking:""};break;case"thinking_delta":partial.content[event.contentIndex].thinking+=event.delta;break;case"thinking_end":Object.assign(partial.content[event.contentIndex],{thinking:event.content,thinkingSignature:event.contentSignature,redacted:event.redacted});break;case"toolcall_start":partial.content[event.contentIndex]={type:"toolCall",id:event.id,name:event.toolName,arguments:{}},toolJson.set(event.contentIndex,"");break;case"toolcall_delta":{let json=`${toolJson.get(event.contentIndex)??""}${event.delta}`;toolJson.set(event.contentIndex,json),partial.content[event.contentIndex].arguments=parseStreamingJson(json);break}case"toolcall_end":return Object.assign(partial.content[event.contentIndex],event.toolCall),toolJson.delete(event.contentIndex),{type:"toolcall_end",contentIndex:event.contentIndex,toolCall:partial.content[event.contentIndex],partial}}return{...event,partial}}}async function*readPiMessagesEvents(stream2){let decoder=new TextDecoder,reader=stream2.getReader(),buffer="";try{for(;;){let{done,value}=await reader.read();buffer+=done?decoder.decode():decoder.decode(value,{stream:!0}),buffer=buffer.replace(/\r\n/g,`
+`);let split=buffer.indexOf(`
+
+`);for(;split!==-1;){let event=parsePiMessagesEvent(buffer.slice(0,split));event&&(yield event),buffer=buffer.slice(split+2),split=buffer.indexOf(`
+
+`)}if(done)break}if(buffer.trim()){let event=parsePiMessagesEvent(buffer);event&&(yield event)}}finally{reader.releaseLock()}}function parsePiMessagesEvent(raw){let data=raw.split(`
+`).find(line=>line.startsWith("data:"))?.slice(5).trim();return data&&data!=="[DONE]"?JSON.parse(data):void 0}function createErrorEvent(model,error,aborted){let reason=aborted?"aborted":"error",assistantMessage={role:"assistant",content:[],api:model.api,provider:model.provider,model:model.id,usage:createEmptyUsage(),stopReason:reason,errorMessage:error instanceof Error?error.message:String(error),timestamp:Date.now()};return!aborted&&error instanceof PiMessagesResponseError&&appendAssistantMessageDiagnostic(assistantMessage,createAssistantMessageDiagnostic("pi_messages_response_failure",error,error.diagnosticDetails)),{type:"error",reason,error:assistantMessage}}function resolveCacheRetention(cacheRetention,env){return cacheRetention||(getProviderEnvValue("PI_CACHE_RETENTION",env)==="long"?"long":void 0)}var stream=(model,context,options)=>{let eventStream=new AssistantMessageEventStream,convertEvent=createEventConverter(model);return(async()=>{try{let apiKey=options?.apiKey;if(!apiKey)throw new Error(`No API key provided for provider "${model.provider}"`);let url=new URL(`${model.baseUrl.replace(/\/+$/u,"")}/messages`);options?.debug&&url.searchParams.set("debug","1");let payload={model:model.id,context,options:{temperature:options?.temperature,maxTokens:options?.maxTokens,reasoning:options?.reasoning,cacheRetention:resolveCacheRetention(options?.cacheRetention,options?.env),sessionId:options?.sessionId,toolChoice:options?.toolChoice}},nextPayload=await options?.onPayload?.(payload,model);nextPayload!==void 0&&(payload=nextPayload);let response=await(options?.fetch??globalThis.fetch)(url,{method:"POST",headers:{authorization:`Bearer ${apiKey}`,accept:"text/event-stream","content-type":"application/json",...providerHeadersToRecord(options?.headers)},body:JSON.stringify(payload),signal:options?.signal});if(await options?.onResponse?.({status:response.status,headers:headersToRecord(response.headers)},model),!response.ok){let body=await response.text();throw createPiMessagesResponseError(model,url,response,body)}if(!response.body)throw new Error(`${model.provider} response has no body`);for await(let piEvent of readPiMessagesEvents(response.body)){let event=convertEvent(piEvent);if(eventStream.push(event),event.type==="done"||event.type==="error")return}throw new Error(`${model.provider} stream ended without a terminal event`)}catch(error){eventStream.push(createErrorEvent(model,error,options?.signal?.aborted??!1))}})(),eventStream},streamSimple=(model,context,options)=>{let extra=options;return stream(model,context,{...options,reasoning:options?.reasoning,toolChoice:options?.toolChoice,debug:extra?.debug})};export{PiMessagesResponseError,stream,streamSimple};

package/dist/bundle/chunks/promise-J5TGSM32.js

@@ -0,0 +1,2 @@
+import { createRequire as __piCreateRequire } from "node:module"; const require = __piCreateRequire(import.meta.url);
+import{__commonJS}from"./chunk-JXWJOIH4.js";var require_es_object_atoms=__commonJS({"node_modules/es-object-atoms/index.js"(exports,module){"use strict";module.exports=Object}});var require_es_errors=__commonJS({"node_modules/es-errors/index.js"(exports,module){"use strict";module.exports=Error}});var require_eval=__commonJS({"node_modules/es-errors/eval.js"(exports,module){"use strict";module.exports=EvalError}});var require_range=__commonJS({"node_modules/es-errors/range.js"(exports,module){"use strict";module.exports=RangeError}});var require_ref=__commonJS({"node_modules/es-errors/ref.js"(exports,module){"use strict";module.exports=ReferenceError}});var require_syntax=__commonJS({"node_modules/es-errors/syntax.js"(exports,module){"use strict";module.exports=SyntaxError}});var require_type=__commonJS({"node_modules/es-errors/type.js"(exports,module){"use strict";module.exports=TypeError}});var require_uri=__commonJS({"node_modules/es-errors/uri.js"(exports,module){"use strict";module.exports=URIError}});var require_abs=__commonJS({"node_modules/math-intrinsics/abs.js"(exports,module){"use strict";module.exports=Math.abs}});var require_floor=__commonJS({"node_modules/math-intrinsics/floor.js"(exports,module){"use strict";module.exports=Math.floor}});var require_max=__commonJS({"node_modules/math-intrinsics/max.js"(exports,module){"use strict";module.exports=Math.max}});var require_min=__commonJS({"node_modules/math-intrinsics/min.js"(exports,module){"use strict";module.exports=Math.min}});var require_pow=__commonJS({"node_modules/math-intrinsics/pow.js"(exports,module){"use strict";module.exports=Math.pow}});var require_round=__commonJS({"node_modules/math-intrinsics/round.js"(exports,module){"use strict";module.exports=Math.round}});var require_isNaN=__commonJS({"node_modules/math-intrinsics/isNaN.js"(exports,module){"use strict";module.exports=Number.isNaN||function(a){return a!==a}}});var require_sign=__commonJS({"node_modules/math-intrinsics/sign.js"(exports,module){"use strict";var $isNaN=require_isNaN();module.exports=function(number){return $isNaN(number)||number===0?number:number<0?-1:1}}});var require_gOPD=__commonJS({"node_modules/gopd/gOPD.js"(exports,module){"use strict";module.exports=Object.getOwnPropertyDescriptor}});var require_gopd=__commonJS({"node_modules/gopd/index.js"(exports,module){"use strict";var $gOPD=require_gOPD();if($gOPD)try{$gOPD([],"length")}catch{$gOPD=null}module.exports=$gOPD}});var require_es_define_property=__commonJS({"node_modules/es-define-property/index.js"(exports,module){"use strict";var $defineProperty=Object.defineProperty||!1;if($defineProperty)try{$defineProperty({},"a",{value:1})}catch{$defineProperty=!1}module.exports=$defineProperty}});var require_shams=__commonJS({"node_modules/has-symbols/shams.js"(exports,module){"use strict";module.exports=function(){if(typeof Symbol!="function"||typeof Object.getOwnPropertySymbols!="function")return!1;if(typeof Symbol.iterator=="symbol")return!0;var obj={},sym=Symbol("test"),symObj=Object(sym);if(typeof sym=="string"||Object.prototype.toString.call(sym)!=="[object Symbol]"||Object.prototype.toString.call(symObj)!=="[object Symbol]")return!1;var symVal=42;obj[sym]=symVal;for(var _ in obj)return!1;if(typeof Object.keys=="function"&&Object.keys(obj).length!==0||typeof Object.getOwnPropertyNames=="function"&&Object.getOwnPropertyNames(obj).length!==0)return!1;var syms=Object.getOwnPropertySymbols(obj);if(syms.length!==1||syms[0]!==sym||!Object.prototype.propertyIsEnumerable.call(obj,sym))return!1;if(typeof Object.getOwnPropertyDescriptor=="function"){var descriptor=Object.getOwnPropertyDescriptor(obj,sym);if(descriptor.value!==symVal||descriptor.enumerable!==!0)return!1}return!0}}});var require_has_symbols=__commonJS({"node_modules/has-symbols/index.js"(exports,module){"use strict";var origSymbol=typeof Symbol<"u"&&Symbol,hasSymbolSham=require_shams();module.exports=function(){return typeof origSymbol!="function"||typeof Symbol!="function"||typeof origSymbol("foo")!="symbol"||typeof Symbol("bar")!="symbol"?!1:hasSymbolSham()}}});var require_Reflect_getPrototypeOf=__commonJS({"node_modules/get-proto/Reflect.getPrototypeOf.js"(exports,module){"use strict";module.exports=typeof Reflect<"u"&&Reflect.getPrototypeOf||null}});var require_Object_getPrototypeOf=__commonJS({"node_modules/get-proto/Object.getPrototypeOf.js"(exports,module){"use strict";var $Object=require_es_object_atoms();module.exports=$Object.getPrototypeOf||null}});var require_implementation=__commonJS({"node_modules/function-bind/implementation.js"(exports,module){"use strict";var ERROR_MESSAGE="Function.prototype.bind called on incompatible ",toStr=Object.prototype.toString,max=Math.max,funcType="[object Function]",concatty=function(a,b){for(var arr=[],i=0;i<a.length;i+=1)arr[i]=a[i];for(var j=0;j<b.length;j+=1)arr[j+a.length]=b[j];return arr},slicy=function(arrLike,offset){for(var arr=[],i=offset||0,j=0;i<arrLike.length;i+=1,j+=1)arr[j]=arrLike[i];return arr},joiny=function(arr,joiner){for(var str="",i=0;i<arr.length;i+=1)str+=arr[i],i+1<arr.length&&(str+=joiner);return str};module.exports=function(that){var target=this;if(typeof target!="function"||toStr.apply(target)!==funcType)throw new TypeError(ERROR_MESSAGE+target);for(var args=slicy(arguments,1),bound,binder=function(){if(this instanceof bound){var result=target.apply(this,concatty(args,arguments));return Object(result)===result?result:this}return target.apply(that,concatty(args,arguments))},boundLength=max(0,target.length-args.length),boundArgs=[],i=0;i<boundLength;i++)boundArgs[i]="$"+i;if(bound=Function("binder","return function ("+joiny(boundArgs,",")+"){ return binder.apply(this,arguments); }")(binder),target.prototype){var Empty=function(){};Empty.prototype=target.prototype,bound.prototype=new Empty,Empty.prototype=null}return bound}}});var require_function_bind=__commonJS({"node_modules/function-bind/index.js"(exports,module){"use strict";var implementation=require_implementation();module.exports=Function.prototype.bind||implementation}});var require_functionCall=__commonJS({"node_modules/call-bind-apply-helpers/functionCall.js"(exports,module){"use strict";module.exports=Function.prototype.call}});var require_functionApply=__commonJS({"node_modules/call-bind-apply-helpers/functionApply.js"(exports,module){"use strict";module.exports=Function.prototype.apply}});var require_reflectApply=__commonJS({"node_modules/call-bind-apply-helpers/reflectApply.js"(exports,module){"use strict";module.exports=typeof Reflect<"u"&&Reflect&&Reflect.apply}});var require_actualApply=__commonJS({"node_modules/call-bind-apply-helpers/actualApply.js"(exports,module){"use strict";var bind=require_function_bind(),$apply=require_functionApply(),$call=require_functionCall(),$reflectApply=require_reflectApply();module.exports=$reflectApply||bind.call($call,$apply)}});var require_call_bind_apply_helpers=__commonJS({"node_modules/call-bind-apply-helpers/index.js"(exports,module){"use strict";var bind=require_function_bind(),$TypeError=require_type(),$call=require_functionCall(),$actualApply=require_actualApply();module.exports=function(args){if(args.length<1||typeof args[0]!="function")throw new $TypeError("a function is required");return $actualApply(bind,$call,args)}}});var require_get=__commonJS({"node_modules/dunder-proto/get.js"(exports,module){"use strict";var callBind=require_call_bind_apply_helpers(),gOPD=require_gopd(),hasProtoAccessor;try{hasProtoAccessor=[].__proto__===Array.prototype}catch(e){if(!e||typeof e!="object"||!("code"in e)||e.code!=="ERR_PROTO_ACCESS")throw e}var desc=!!hasProtoAccessor&&gOPD&&gOPD(Object.prototype,"__proto__"),$Object=Object,$getPrototypeOf=$Object.getPrototypeOf;module.exports=desc&&typeof desc.get=="function"?callBind([desc.get]):typeof $getPrototypeOf=="function"?function(value){return $getPrototypeOf(value==null?value:$Object(value))}:!1}});var require_get_proto=__commonJS({"node_modules/get-proto/index.js"(exports,module){"use strict";var reflectGetProto=require_Reflect_getPrototypeOf(),originalGetProto=require_Object_getPrototypeOf(),getDunderProto=require_get();module.exports=reflectGetProto?function(O){return reflectGetProto(O)}:originalGetProto?function(O){if(!O||typeof O!="object"&&typeof O!="function")throw new TypeError("getProto: not an object");return originalGetProto(O)}:getDunderProto?function(O){return getDunderProto(O)}:null}});var require_hasown=__commonJS({"node_modules/hasown/index.js"(exports,module){"use strict";var call=Function.prototype.call,$hasOwn=Object.prototype.hasOwnProperty,bind=require_function_bind();module.exports=bind.call(call,$hasOwn)}});var require_get_intrinsic=__commonJS({"node_modules/get-intrinsic/index.js"(exports,module){"use strict";var undefined2,$Object=require_es_object_atoms(),$Error=require_es_errors(),$EvalError=require_eval(),$RangeError=require_range(),$ReferenceError=require_ref(),$SyntaxError=require_syntax(),$TypeError=require_type(),$URIError=require_uri(),abs=require_abs(),floor=require_floor(),max=require_max(),min=require_min(),pow=require_pow(),round=require_round(),sign=require_sign(),$Function=Function,getEvalledConstructor=function(expressionSyntax){try{return $Function('"use strict"; return ('+expressionSyntax+").constructor;")()}catch{}},$gOPD=require_gopd(),$defineProperty=require_es_define_property(),throwTypeError=function(){throw new $TypeError},ThrowTypeError=$gOPD?(function(){try{return arguments.callee,throwTypeError}catch{try{return $gOPD(arguments,"callee").get}catch{return throwTypeError}}})():throwTypeError,hasSymbols=require_has_symbols()(),getProto=require_get_proto(),$ObjectGPO=require_Object_getPrototypeOf(),$ReflectGPO=require_Reflect_getPrototypeOf(),$apply=require_functionApply(),$call=require_functionCall(),needsEval={},TypedArray=typeof Uint8Array>"u"||!getProto?undefined2:getProto(Uint8Array),INTRINSICS={__proto__:null,"%AggregateError%":typeof AggregateError>"u"?undefined2:AggregateError,"%Array%":Array,"%ArrayBuffer%":typeof ArrayBuffer>"u"?undefined2:ArrayBuffer,"%ArrayIteratorPrototype%":hasSymbols&&getProto?getProto([][Symbol.iterator]()):undefined2,"%AsyncFromSyncIteratorPrototype%":undefined2,"%AsyncFunction%":needsEval,"%AsyncGenerator%":needsEval,"%AsyncGeneratorFunction%":needsEval,"%AsyncIteratorPrototype%":needsEval,"%Atomics%":typeof Atomics>"u"?undefined2:Atomics,"%BigInt%":typeof BigInt>"u"?undefined2:BigInt,"%BigInt64Array%":typeof BigInt64Array>"u"?undefined2:BigInt64Array,"%BigUint64Array%":typeof BigUint64Array>"u"?undefined2:BigUint64Array,"%Boolean%":Boolean,"%DataView%":typeof DataView>"u"?undefined2:DataView,"%Date%":Date,"%decodeURI%":decodeURI,"%decodeURIComponent%":decodeURIComponent,"%encodeURI%":encodeURI,"%encodeURIComponent%":encodeURIComponent,"%Error%":$Error,"%eval%":eval,"%EvalError%":$EvalError,"%Float16Array%":typeof Float16Array>"u"?undefined2:Float16Array,"%Float32Array%":typeof Float32Array>"u"?undefined2:Float32Array,"%Float64Array%":typeof Float64Array>"u"?undefined2:Float64Array,"%FinalizationRegistry%":typeof FinalizationRegistry>"u"?undefined2:FinalizationRegistry,"%Function%":$Function,"%GeneratorFunction%":needsEval,"%Int8Array%":typeof Int8Array>"u"?undefined2:Int8Array,"%Int16Array%":typeof Int16Array>"u"?undefined2:Int16Array,"%Int32Array%":typeof Int32Array>"u"?undefined2:Int32Array,"%isFinite%":isFinite,"%isNaN%":isNaN,"%IteratorPrototype%":hasSymbols&&getProto?getProto(getProto([][Symbol.iterator]())):undefined2,"%JSON%":typeof JSON=="object"?JSON:undefined2,"%Map%":typeof Map>"u"?undefined2:Map,"%MapIteratorPrototype%":typeof Map>"u"||!hasSymbols||!getProto?undefined2:getProto(new Map()[Symbol.iterator]()),"%Math%":Math,"%Number%":Number,"%Object%":$Object,"%Object.getOwnPropertyDescriptor%":$gOPD,"%parseFloat%":parseFloat,"%parseInt%":parseInt,"%Promise%":typeof Promise>"u"?undefined2:Promise,"%Proxy%":typeof Proxy>"u"?undefined2:Proxy,"%RangeError%":$RangeError,"%ReferenceError%":$ReferenceError,"%Reflect%":typeof Reflect>"u"?undefined2:Reflect,"%RegExp%":RegExp,"%Set%":typeof Set>"u"?undefined2:Set,"%SetIteratorPrototype%":typeof Set>"u"||!hasSymbols||!getProto?undefined2:getProto(new Set()[Symbol.iterator]()),"%SharedArrayBuffer%":typeof SharedArrayBuffer>"u"?undefined2:SharedArrayBuffer,"%String%":String,"%StringIteratorPrototype%":hasSymbols&&getProto?getProto(""[Symbol.iterator]()):undefined2,"%Symbol%":hasSymbols?Symbol:undefined2,"%SyntaxError%":$SyntaxError,"%ThrowTypeError%":ThrowTypeError,"%TypedArray%":TypedArray,"%TypeError%":$TypeError,"%Uint8Array%":typeof Uint8Array>"u"?undefined2:Uint8Array,"%Uint8ClampedArray%":typeof Uint8ClampedArray>"u"?undefined2:Uint8ClampedArray,"%Uint16Array%":typeof Uint16Array>"u"?undefined2:Uint16Array,"%Uint32Array%":typeof Uint32Array>"u"?undefined2:Uint32Array,"%URIError%":$URIError,"%WeakMap%":typeof WeakMap>"u"?undefined2:WeakMap,"%WeakRef%":typeof WeakRef>"u"?undefined2:WeakRef,"%WeakSet%":typeof WeakSet>"u"?undefined2:WeakSet,"%Function.prototype.call%":$call,"%Function.prototype.apply%":$apply,"%Object.defineProperty%":$defineProperty,"%Object.getPrototypeOf%":$ObjectGPO,"%Math.abs%":abs,"%Math.floor%":floor,"%Math.max%":max,"%Math.min%":min,"%Math.pow%":pow,"%Math.round%":round,"%Math.sign%":sign,"%Reflect.getPrototypeOf%":$ReflectGPO};if(getProto)try{null.error}catch(e){errorProto=getProto(getProto(e)),INTRINSICS["%Error.prototype%"]=errorProto}var errorProto,doEval=function doEval2(name){var value;if(name==="%AsyncFunction%")value=getEvalledConstructor("async function () {}");else if(name==="%GeneratorFunction%")value=getEvalledConstructor("function* () {}");else if(name==="%AsyncGeneratorFunction%")value=getEvalledConstructor("async function* () {}");else if(name==="%AsyncGenerator%"){var fn=doEval2("%AsyncGeneratorFunction%");fn&&(value=fn.prototype)}else if(name==="%AsyncIteratorPrototype%"){var gen=doEval2("%AsyncGenerator%");gen&&getProto&&(value=getProto(gen.prototype))}return INTRINSICS[name]=value,value},LEGACY_ALIASES={__proto__:null,"%ArrayBufferPrototype%":["ArrayBuffer","prototype"],"%ArrayPrototype%":["Array","prototype"],"%ArrayProto_entries%":["Array","prototype","entries"],"%ArrayProto_forEach%":["Array","prototype","forEach"],"%ArrayProto_keys%":["Array","prototype","keys"],"%ArrayProto_values%":["Array","prototype","values"],"%AsyncFunctionPrototype%":["AsyncFunction","prototype"],"%AsyncGenerator%":["AsyncGeneratorFunction","prototype"],"%AsyncGeneratorPrototype%":["AsyncGeneratorFunction","prototype","prototype"],"%BooleanPrototype%":["Boolean","prototype"],"%DataViewPrototype%":["DataView","prototype"],"%DatePrototype%":["Date","prototype"],"%ErrorPrototype%":["Error","prototype"],"%EvalErrorPrototype%":["EvalError","prototype"],"%Float32ArrayPrototype%":["Float32Array","prototype"],"%Float64ArrayPrototype%":["Float64Array","prototype"],"%FunctionPrototype%":["Function","prototype"],"%Generator%":["GeneratorFunction","prototype"],"%GeneratorPrototype%":["GeneratorFunction","prototype","prototype"],"%Int8ArrayPrototype%":["Int8Array","prototype"],"%Int16ArrayPrototype%":["Int16Array","prototype"],"%Int32ArrayPrototype%":["Int32Array","prototype"],"%JSONParse%":["JSON","parse"],"%JSONStringify%":["JSON","stringify"],"%MapPrototype%":["Map","prototype"],"%NumberPrototype%":["Number","prototype"],"%ObjectPrototype%":["Object","prototype"],"%ObjProto_toString%":["Object","prototype","toString"],"%ObjProto_valueOf%":["Object","prototype","valueOf"],"%PromisePrototype%":["Promise","prototype"],"%PromiseProto_then%":["Promise","prototype","then"],"%Promise_all%":["Promise","all"],"%Promise_reject%":["Promise","reject"],"%Promise_resolve%":["Promise","resolve"],"%RangeErrorPrototype%":["RangeError","prototype"],"%ReferenceErrorPrototype%":["ReferenceError","prototype"],"%RegExpPrototype%":["RegExp","prototype"],"%SetPrototype%":["Set","prototype"],"%SharedArrayBufferPrototype%":["SharedArrayBuffer","prototype"],"%StringPrototype%":["String","prototype"],"%SymbolPrototype%":["Symbol","prototype"],"%SyntaxErrorPrototype%":["SyntaxError","prototype"],"%TypedArrayPrototype%":["TypedArray","prototype"],"%TypeErrorPrototype%":["TypeError","prototype"],"%Uint8ArrayPrototype%":["Uint8Array","prototype"],"%Uint8ClampedArrayPrototype%":["Uint8ClampedArray","prototype"],"%Uint16ArrayPrototype%":["Uint16Array","prototype"],"%Uint32ArrayPrototype%":["Uint32Array","prototype"],"%URIErrorPrototype%":["URIError","prototype"],"%WeakMapPrototype%":["WeakMap","prototype"],"%WeakSetPrototype%":["WeakSet","prototype"]},bind=require_function_bind(),hasOwn=require_hasown(),$concat=bind.call($call,Array.prototype.concat),$spliceApply=bind.call($apply,Array.prototype.splice),$replace=bind.call($call,String.prototype.replace),$strSlice=bind.call($call,String.prototype.slice),$exec=bind.call($call,RegExp.prototype.exec),rePropName=/[^%.[\]]+|\[(?:(-?\d+(?:\.\d+)?)|(["'])((?:(?!\2)[^\\]|\\.)*?)\2)\]|(?=(?:\.|\[\])(?:\.|\[\]|%$))/g,reEscapeChar=/\\(\\)?/g,stringToPath=function(string){var first=$strSlice(string,0,1),last=$strSlice(string,-1);if(first==="%"&&last!=="%")throw new $SyntaxError("invalid intrinsic syntax, expected closing `%`");if(last==="%"&&first!=="%")throw new $SyntaxError("invalid intrinsic syntax, expected opening `%`");var result=[];return $replace(string,rePropName,function(match,number,quote,subString){result[result.length]=quote?$replace(subString,reEscapeChar,"$1"):number||match}),result},getBaseIntrinsic=function(name,allowMissing){var intrinsicName=name,alias;if(hasOwn(LEGACY_ALIASES,intrinsicName)&&(alias=LEGACY_ALIASES[intrinsicName],intrinsicName="%"+alias[0]+"%"),hasOwn(INTRINSICS,intrinsicName)){var value=INTRINSICS[intrinsicName];if(value===needsEval&&(value=doEval(intrinsicName)),typeof value>"u"&&!allowMissing)throw new $TypeError("intrinsic "+name+" exists, but is not available. Please file an issue!");return{alias,name:intrinsicName,value}}throw new $SyntaxError("intrinsic "+name+" does not exist!")};module.exports=function(name,allowMissing){if(typeof name!="string"||name.length===0)throw new $TypeError("intrinsic name must be a non-empty string");if(arguments.length>1&&typeof allowMissing!="boolean")throw new $TypeError('"allowMissing" argument must be a boolean');if($exec(/^%?[^%]*%?$/,name)===null)throw new $SyntaxError("`%` may not be present anywhere but at the beginning and end of the intrinsic name");var parts=stringToPath(name),intrinsicBaseName=parts.length>0?parts[0]:"",intrinsic=getBaseIntrinsic("%"+intrinsicBaseName+"%",allowMissing),intrinsicRealName=intrinsic.name,value=intrinsic.value,skipFurtherCaching=!1,alias=intrinsic.alias;alias&&(intrinsicBaseName=alias[0],$spliceApply(parts,$concat([0,1],alias)));for(var i=1,isOwn=!0;i<parts.length;i+=1){var part=parts[i],first=$strSlice(part,0,1),last=$strSlice(part,-1);if((first==='"'||first==="'"||first==="`"||last==='"'||last==="'"||last==="`")&&first!==last)throw new $SyntaxError("property names with quotes must have matching quotes");if((part==="constructor"||!isOwn)&&(skipFurtherCaching=!0),intrinsicBaseName+="."+part,intrinsicRealName="%"+intrinsicBaseName+"%",hasOwn(INTRINSICS,intrinsicRealName))value=INTRINSICS[intrinsicRealName];else if(value!=null){if(!(part in value)){if(!allowMissing)throw new $TypeError("base intrinsic for "+name+" exists, but the property is not available.");return}if($gOPD&&i+1>=parts.length){var desc=$gOPD(value,part);isOwn=!!desc,isOwn&&"get"in desc&&!("originalValue"in desc.get)?value=desc.get:value=value[part]}else isOwn=hasOwn(value,part),value=value[part];isOwn&&!skipFurtherCaching&&(INTRINSICS[intrinsicRealName]=value)}}return value}}});var require_define_data_property=__commonJS({"node_modules/define-data-property/index.js"(exports,module){"use strict";var $defineProperty=require_es_define_property(),$SyntaxError=require_syntax(),$TypeError=require_type(),gopd=require_gopd();module.exports=function(obj,property,value){if(!obj||typeof obj!="object"&&typeof obj!="function")throw new $TypeError("`obj` must be an object or a function`");if(typeof property!="string"&&typeof property!="symbol")throw new $TypeError("`property` must be a string or a symbol`");if(arguments.length>3&&typeof arguments[3]!="boolean"&&arguments[3]!==null)throw new $TypeError("`nonEnumerable`, if provided, must be a boolean or null");if(arguments.length>4&&typeof arguments[4]!="boolean"&&arguments[4]!==null)throw new $TypeError("`nonWritable`, if provided, must be a boolean or null");if(arguments.length>5&&typeof arguments[5]!="boolean"&&arguments[5]!==null)throw new $TypeError("`nonConfigurable`, if provided, must be a boolean or null");if(arguments.length>6&&typeof arguments[6]!="boolean")throw new $TypeError("`loose`, if provided, must be a boolean");var nonEnumerable=arguments.length>3?arguments[3]:null,nonWritable=arguments.length>4?arguments[4]:null,nonConfigurable=arguments.length>5?arguments[5]:null,loose=arguments.length>6?arguments[6]:!1,desc=!!gopd&&gopd(obj,property);if($defineProperty)$defineProperty(obj,property,{configurable:nonConfigurable===null&&desc?desc.configurable:!nonConfigurable,enumerable:nonEnumerable===null&&desc?desc.enumerable:!nonEnumerable,value,writable:nonWritable===null&&desc?desc.writable:!nonWritable});else if(loose||!nonEnumerable&&!nonWritable&&!nonConfigurable)obj[property]=value;else throw new $SyntaxError("This environment does not support defining a property as non-configurable, non-writable, or non-enumerable.")}}});var require_has_property_descriptors=__commonJS({"node_modules/has-property-descriptors/index.js"(exports,module){"use strict";var $defineProperty=require_es_define_property(),hasPropertyDescriptors=function(){return!!$defineProperty};hasPropertyDescriptors.hasArrayLengthDefineBug=function(){if(!$defineProperty)return null;try{return $defineProperty([],"length",{value:1}).length!==1}catch{return!0}};module.exports=hasPropertyDescriptors}});var require_set_function_length=__commonJS({"node_modules/set-function-length/index.js"(exports,module){"use strict";var GetIntrinsic=require_get_intrinsic(),define=require_define_data_property(),hasDescriptors=require_has_property_descriptors()(),gOPD=require_gopd(),$TypeError=require_type(),$floor=GetIntrinsic("%Math.floor%");module.exports=function(fn,length){if(typeof fn!="function")throw new $TypeError("`fn` is not a function");if(typeof length!="number"||length<0||length>4294967295||$floor(length)!==length)throw new $TypeError("`length` must be a positive 32-bit integer");var loose=arguments.length>2&&!!arguments[2],functionLengthIsConfigurable=!0,functionLengthIsWritable=!0;if("length"in fn&&gOPD){var desc=gOPD(fn,"length");desc&&!desc.configurable&&(functionLengthIsConfigurable=!1),desc&&!desc.writable&&(functionLengthIsWritable=!1)}return(functionLengthIsConfigurable||functionLengthIsWritable||!loose)&&(hasDescriptors?define(fn,"length",length,!0,!0):define(fn,"length",length)),fn}}});var require_applyBind=__commonJS({"node_modules/call-bind-apply-helpers/applyBind.js"(exports,module){"use strict";var bind=require_function_bind(),$apply=require_functionApply(),actualApply=require_actualApply();module.exports=function(){return actualApply(bind,$apply,arguments)}}});var require_call_bind=__commonJS({"node_modules/call-bind/index.js"(exports,module){"use strict";var setFunctionLength=require_set_function_length(),$defineProperty=require_es_define_property(),callBindBasic=require_call_bind_apply_helpers(),applyBind=require_applyBind();module.exports=function(originalFunction){var func=callBindBasic(arguments),adjustedLength=1+originalFunction.length-(arguments.length-1);return setFunctionLength(func,adjustedLength>0?adjustedLength:0,!0)};$defineProperty?$defineProperty(module.exports,"apply",{value:applyBind}):module.exports.apply=applyBind}});var require_isArguments=__commonJS({"node_modules/object-keys/isArguments.js"(exports,module){"use strict";var toStr=Object.prototype.toString;module.exports=function(value){var str=toStr.call(value),isArgs=str==="[object Arguments]";return isArgs||(isArgs=str!=="[object Array]"&&value!==null&&typeof value=="object"&&typeof value.length=="number"&&value.length>=0&&toStr.call(value.callee)==="[object Function]"),isArgs}}});var require_implementation2=__commonJS({"node_modules/object-keys/implementation.js"(exports,module){"use strict";var keysShim;Object.keys||(has=Object.prototype.hasOwnProperty,toStr=Object.prototype.toString,isArgs=require_isArguments(),isEnumerable=Object.prototype.propertyIsEnumerable,hasDontEnumBug=!isEnumerable.call({toString:null},"toString"),hasProtoEnumBug=isEnumerable.call(function(){},"prototype"),dontEnums=["toString","toLocaleString","valueOf","hasOwnProperty","isPrototypeOf","propertyIsEnumerable","constructor"],equalsConstructorPrototype=function(o){var ctor=o.constructor;return ctor&&ctor.prototype===o},excludedKeys={$applicationCache:!0,$console:!0,$external:!0,$frame:!0,$frameElement:!0,$frames:!0,$innerHeight:!0,$innerWidth:!0,$onmozfullscreenchange:!0,$onmozfullscreenerror:!0,$outerHeight:!0,$outerWidth:!0,$pageXOffset:!0,$pageYOffset:!0,$parent:!0,$scrollLeft:!0,$scrollTop:!0,$scrollX:!0,$scrollY:!0,$self:!0,$webkitIndexedDB:!0,$webkitStorageInfo:!0,$window:!0},hasAutomationEqualityBug=(function(){if(typeof window>"u")return!1;for(var k in window)try{if(!excludedKeys["$"+k]&&has.call(window,k)&&window[k]!==null&&typeof window[k]=="object")try{equalsConstructorPrototype(window[k])}catch{return!0}}catch{return!0}return!1})(),equalsConstructorPrototypeIfNotBuggy=function(o){if(typeof window>"u"||!hasAutomationEqualityBug)return equalsConstructorPrototype(o);try{return equalsConstructorPrototype(o)}catch{return!1}},keysShim=function(object){var isObject=object!==null&&typeof object=="object",isFunction=toStr.call(object)==="[object Function]",isArguments=isArgs(object),isString=isObject&&toStr.call(object)==="[object String]",theKeys=[];if(!isObject&&!isFunction&&!isArguments)throw new TypeError("Object.keys called on a non-object");var skipProto=hasProtoEnumBug&&isFunction;if(isString&&object.length>0&&!has.call(object,0))for(var i=0;i<object.length;++i)theKeys.push(String(i));if(isArguments&&object.length>0)for(var j=0;j<object.length;++j)theKeys.push(String(j));else for(var name in object)!(skipProto&&name==="prototype")&&has.call(object,name)&&theKeys.push(String(name));if(hasDontEnumBug)for(var skipConstructor=equalsConstructorPrototypeIfNotBuggy(object),k=0;k<dontEnums.length;++k)!(skipConstructor&&dontEnums[k]==="constructor")&&has.call(object,dontEnums[k])&&theKeys.push(dontEnums[k]);return theKeys});var has,toStr,isArgs,isEnumerable,hasDontEnumBug,hasProtoEnumBug,dontEnums,equalsConstructorPrototype,excludedKeys,hasAutomationEqualityBug,equalsConstructorPrototypeIfNotBuggy;module.exports=keysShim}});var require_object_keys=__commonJS({"node_modules/object-keys/index.js"(exports,module){"use strict";var slice=Array.prototype.slice,isArgs=require_isArguments(),origKeys=Object.keys,keysShim=origKeys?function(o){return origKeys(o)}:require_implementation2(),originalKeys=Object.keys;keysShim.shim=function(){if(Object.keys){var keysWorksWithArguments=(function(){var args=Object.keys(arguments);return args&&args.length===arguments.length})(1,2);keysWorksWithArguments||(Object.keys=function(object){return isArgs(object)?originalKeys(slice.call(object)):originalKeys(object)})}else Object.keys=keysShim;return Object.keys||keysShim};module.exports=keysShim}});var require_define_properties=__commonJS({"node_modules/define-properties/index.js"(exports,module){"use strict";var keys=require_object_keys(),hasSymbols=typeof Symbol=="function"&&typeof Symbol("foo")=="symbol",toStr=Object.prototype.toString,concat=Array.prototype.concat,defineDataProperty=require_define_data_property(),isFunction=function(fn){return typeof fn=="function"&&toStr.call(fn)==="[object Function]"},supportsDescriptors=require_has_property_descriptors()(),defineProperty=function(object,name,value,predicate){if(name in object){if(predicate===!0){if(object[name]===value)return}else if(!isFunction(predicate)||!predicate())return}supportsDescriptors?defineDataProperty(object,name,value,!0):defineDataProperty(object,name,value)},defineProperties=function(object,map){var predicates=arguments.length>2?arguments[2]:{},props=keys(map);hasSymbols&&(props=concat.call(props,Object.getOwnPropertySymbols(map)));for(var i=0;i<props.length;i+=1)defineProperty(object,props[i],map[props[i]],predicates[props[i]])};defineProperties.supportsDescriptors=!!supportsDescriptors;module.exports=defineProperties}});var require_call_bound=__commonJS({"node_modules/call-bound/index.js"(exports,module){"use strict";var GetIntrinsic=require_get_intrinsic(),callBindBasic=require_call_bind_apply_helpers(),$indexOf=callBindBasic([GetIntrinsic("%String.prototype.indexOf%")]);module.exports=function(name,allowMissing){var intrinsic=GetIntrinsic(name,!!allowMissing);return typeof intrinsic=="function"&&$indexOf(name,".prototype.")>-1?callBindBasic([intrinsic]):intrinsic}}});var require_IsArray=__commonJS({"node_modules/es-abstract/helpers/IsArray.js"(exports,module){"use strict";var GetIntrinsic=require_get_intrinsic(),$Array=GetIntrinsic("%Array%"),toStr=!$Array.isArray&&require_call_bound()("Object.prototype.toString");module.exports=$Array.isArray||function(argument){return toStr(argument)==="[object Array]"}}});var require_IsArray2=__commonJS({"node_modules/es-abstract/2025/IsArray.js"(exports,module){"use strict";module.exports=require_IsArray()}});var require_Call=__commonJS({"node_modules/es-abstract/2025/Call.js"(exports,module){"use strict";var GetIntrinsic=require_get_intrinsic(),callBound=require_call_bound(),$TypeError=require_type(),IsArray=require_IsArray2(),$apply=GetIntrinsic("%Reflect.apply%",!0)||callBound("Function.prototype.apply");module.exports=function(F,V){var argumentsList=arguments.length>2?arguments[2]:[];if(!IsArray(argumentsList))throw new $TypeError("Assertion failed: optional `argumentsList`, if provided, must be a List");return $apply(F,V,argumentsList)}}});var require_is_callable=__commonJS({"node_modules/is-callable/index.js"(exports,module){"use strict";var fnToStr=Function.prototype.toString,reflectApply=typeof Reflect=="object"&&Reflect!==null&&Reflect.apply,badArrayLike,isCallableMarker;if(typeof reflectApply=="function"&&typeof Object.defineProperty=="function")try{badArrayLike=Object.defineProperty({},"length",{get:function(){throw isCallableMarker}}),isCallableMarker={},reflectApply(function(){throw 42},null,badArrayLike)}catch(_){_!==isCallableMarker&&(reflectApply=null)}else reflectApply=null;var constructorRegex=/^\s*class\b/,isES6ClassFn=function(value){try{var fnStr=fnToStr.call(value);return constructorRegex.test(fnStr)}catch{return!1}},tryFunctionObject=function(value){try{return isES6ClassFn(value)?!1:(fnToStr.call(value),!0)}catch{return!1}},toStr=Object.prototype.toString,objectClass="[object Object]",fnClass="[object Function]",genClass="[object GeneratorFunction]",ddaClass="[object HTMLAllCollection]",ddaClass2="[object HTML document.all class]",ddaClass3="[object HTMLCollection]",hasToStringTag=typeof Symbol=="function"&&!!Symbol.toStringTag,isIE68=!(0 in[,]),isDDA=function(){return!1};typeof document=="object"&&(all=document.all,toStr.call(all)===toStr.call(document.all)&&(isDDA=function(value){if((isIE68||!value)&&(typeof value>"u"||typeof value=="object"))try{var str=toStr.call(value);return(str===ddaClass||str===ddaClass2||str===ddaClass3||str===objectClass)&&value("")==null}catch{}return!1}));var all;module.exports=reflectApply?function(value){if(isDDA(value))return!0;if(!value||typeof value!="function"&&typeof value!="object")return!1;try{reflectApply(value,null,badArrayLike)}catch(e){if(e!==isCallableMarker)return!1}return!isES6ClassFn(value)&&tryFunctionObject(value)}:function(value){if(isDDA(value))return!0;if(!value||typeof value!="function"&&typeof value!="object")return!1;if(hasToStringTag)return tryFunctionObject(value);if(isES6ClassFn(value))return!1;var strClass=toStr.call(value);return strClass!==fnClass&&strClass!==genClass&&!/^\[object HTML/.test(strClass)?!1:tryFunctionObject(value)}}});var require_IsCallable=__commonJS({"node_modules/es-abstract/2025/IsCallable.js"(exports,module){"use strict";module.exports=require_is_callable()}});var require_GetIntrinsic=__commonJS({"node_modules/es-abstract/GetIntrinsic.js"(exports,module){"use strict";module.exports=require_get_intrinsic()}});var require_isObject=__commonJS({"node_modules/es-object-atoms/isObject.js"(exports,module){"use strict";module.exports=function(x){return!!x&&(typeof x=="function"||typeof x=="object")}}});var require_property_descriptor=__commonJS({"node_modules/es-abstract/helpers/records/property-descriptor.js"(exports,module){"use strict";var $TypeError=require_type(),hasOwn=require_hasown(),allowed={__proto__:null,"[[Configurable]]":!0,"[[Enumerable]]":!0,"[[Get]]":!0,"[[Set]]":!0,"[[Value]]":!0,"[[Writable]]":!0};module.exports=function(Desc){if(!Desc||typeof Desc!="object")return!1;for(var key in Desc)if(hasOwn(Desc,key)&&!allowed[key])return!1;var isData=hasOwn(Desc,"[[Value]]")||hasOwn(Desc,"[[Writable]]"),IsAccessor=hasOwn(Desc,"[[Get]]")||hasOwn(Desc,"[[Set]]");if(isData&&IsAccessor)throw new $TypeError("Property Descriptors may not be both accessor and data descriptors");return!0}}});var require_DefineOwnProperty=__commonJS({"node_modules/es-abstract/helpers/DefineOwnProperty.js"(exports,module){"use strict";var hasPropertyDescriptors=require_has_property_descriptors(),$defineProperty=require_es_define_property(),hasArrayLengthDefineBug=hasPropertyDescriptors.hasArrayLengthDefineBug(),isArray=hasArrayLengthDefineBug&&require_IsArray(),callBound=require_call_bound(),$isEnumerable=callBound("Object.prototype.propertyIsEnumerable");module.exports=function(IsDataDescriptor,SameValue,FromPropertyDescriptor,O,P,desc){if(!$defineProperty){if(!IsDataDescriptor(desc)||!desc["[[Configurable]]"]||!desc["[[Writable]]"]||P in O&&$isEnumerable(O,P)!==!!desc["[[Enumerable]]"])return!1;var V=desc["[[Value]]"];return O[P]=V,SameValue(O[P],V)}return hasArrayLengthDefineBug&&P==="length"&&"[[Value]]"in desc&&isArray(O)&&O.length!==desc["[[Value]]"]?(O.length=desc["[[Value]]"],O.length===desc["[[Value]]"]):($defineProperty(O,P,FromPropertyDescriptor(desc)),!0)}}});var require_fromPropertyDescriptor=__commonJS({"node_modules/es-abstract/helpers/fromPropertyDescriptor.js"(exports,module){"use strict";module.exports=function(Desc){if(typeof Desc>"u")return Desc;var obj={};return"[[Value]]"in Desc&&(obj.value=Desc["[[Value]]"]),"[[Writable]]"in Desc&&(obj.writable=!!Desc["[[Writable]]"]),"[[Get]]"in Desc&&(obj.get=Desc["[[Get]]"]),"[[Set]]"in Desc&&(obj.set=Desc["[[Set]]"]),"[[Enumerable]]"in Desc&&(obj.enumerable=!!Desc["[[Enumerable]]"]),"[[Configurable]]"in Desc&&(obj.configurable=!!Desc["[[Configurable]]"]),obj}}});var require_FromPropertyDescriptor=__commonJS({"node_modules/es-abstract/2025/FromPropertyDescriptor.js"(exports,module){"use strict";var $TypeError=require_type(),isPropertyDescriptor=require_property_descriptor(),fromPropertyDescriptor=require_fromPropertyDescriptor();module.exports=function(Desc){if(typeof Desc<"u"&&!isPropertyDescriptor(Desc))throw new $TypeError("Assertion failed: `Desc` must be a Property Descriptor");return fromPropertyDescriptor(Desc)}}});var require_IsDataDescriptor=__commonJS({"node_modules/es-abstract/2025/IsDataDescriptor.js"(exports,module){"use strict";var $TypeError=require_type(),hasOwn=require_hasown(),isPropertyDescriptor=require_property_descriptor();module.exports=function(Desc){if(typeof Desc>"u")return!1;if(!isPropertyDescriptor(Desc))throw new $TypeError("Assertion failed: `Desc` must be a Property Descriptor");return!(!hasOwn(Desc,"[[Value]]")&&!hasOwn(Desc,"[[Writable]]"))}}});var require_isPropertyKey=__commonJS({"node_modules/es-abstract/helpers/isPropertyKey.js"(exports,module){"use strict";module.exports=function(argument){return typeof argument=="string"||typeof argument=="symbol"}}});var require_SameValue=__commonJS({"node_modules/es-abstract/2025/SameValue.js"(exports,module){"use strict";var $isNaN=require_isNaN();module.exports=function(x,y){return x===y?x===0?1/x===1/y:!0:$isNaN(x)&&$isNaN(y)}}});var require_ToBoolean=__commonJS({"node_modules/es-abstract/2025/ToBoolean.js"(exports,module){"use strict";module.exports=function(value){return!!value}}});var require_ToPropertyDescriptor=__commonJS({"node_modules/es-abstract/2025/ToPropertyDescriptor.js"(exports,module){"use strict";var hasOwn=require_hasown(),$TypeError=require_type(),isObject=require_isObject(),IsCallable=require_IsCallable(),ToBoolean=require_ToBoolean();module.exports=function(Obj){if(!isObject(Obj))throw new $TypeError("ToPropertyDescriptor requires an object");var desc={};if(hasOwn(Obj,"enumerable")&&(desc["[[Enumerable]]"]=ToBoolean(Obj.enumerable)),hasOwn(Obj,"configurable")&&(desc["[[Configurable]]"]=ToBoolean(Obj.configurable)),hasOwn(Obj,"value")&&(desc["[[Value]]"]=Obj.value),hasOwn(Obj,"writable")&&(desc["[[Writable]]"]=ToBoolean(Obj.writable)),hasOwn(Obj,"get")){var getter=Obj.get;if(typeof getter<"u"&&!IsCallable(getter))throw new $TypeError("getter must be a function");desc["[[Get]]"]=getter}if(hasOwn(Obj,"set")){var setter=Obj.set;if(typeof setter<"u"&&!IsCallable(setter))throw new $TypeError("setter must be a function");desc["[[Set]]"]=setter}if((hasOwn(desc,"[[Get]]")||hasOwn(desc,"[[Set]]"))&&(hasOwn(desc,"[[Value]]")||hasOwn(desc,"[[Writable]]")))throw new $TypeError("Invalid property descriptor. Cannot both specify accessors and a value or writable attribute");return desc}}});var require_DefinePropertyOrThrow=__commonJS({"node_modules/es-abstract/2025/DefinePropertyOrThrow.js"(exports,module){"use strict";var $TypeError=require_type(),isObject=require_isObject(),isPropertyDescriptor=require_property_descriptor(),DefineOwnProperty=require_DefineOwnProperty(),FromPropertyDescriptor=require_FromPropertyDescriptor(),IsDataDescriptor=require_IsDataDescriptor(),isPropertyKey=require_isPropertyKey(),SameValue=require_SameValue(),ToPropertyDescriptor=require_ToPropertyDescriptor();module.exports=function(O,P,desc){if(!isObject(O))throw new $TypeError("Assertion failed: Type(O) is not Object");if(!isPropertyKey(P))throw new $TypeError("Assertion failed: P is not a Property Key");var Desc=isPropertyDescriptor(desc)?desc:ToPropertyDescriptor(desc);if(!isPropertyDescriptor(Desc))throw new $TypeError("Assertion failed: Desc is not a valid Property Descriptor");return DefineOwnProperty(IsDataDescriptor,SameValue,FromPropertyDescriptor,O,P,Desc)}}});var require_IsConstructor=__commonJS({"node_modules/es-abstract/2025/IsConstructor.js"(exports,module){"use strict";var GetIntrinsic=require_GetIntrinsic(),$construct=GetIntrinsic("%Reflect.construct%",!0),DefinePropertyOrThrow=require_DefinePropertyOrThrow();try{DefinePropertyOrThrow({},"",{"[[Get]]":function(){}})}catch{DefinePropertyOrThrow=null}DefinePropertyOrThrow&&$construct?(isConstructorMarker={},badArrayLike={},DefinePropertyOrThrow(badArrayLike,"length",{"[[Get]]":function(){throw isConstructorMarker},"[[Enumerable]]":!0}),module.exports=function(argument){try{$construct(argument,badArrayLike)}catch(err){return err===isConstructorMarker}}):module.exports=function(argument){return typeof argument=="function"&&!!argument.prototype};var isConstructorMarker,badArrayLike}});var require_NewPromiseCapability=__commonJS({"node_modules/es-abstract/2025/NewPromiseCapability.js"(exports,module){"use strict";var $TypeError=require_type(),IsCallable=require_IsCallable(),IsConstructor=require_IsConstructor();module.exports=function(C){if(!IsConstructor(C))throw new $TypeError("C must be a constructor");var resolvingFunctions={"[[Resolve]]":void 0,"[[Reject]]":void 0},promise=new C(function(resolve,reject){if(typeof resolvingFunctions["[[Resolve]]"]<"u"||typeof resolvingFunctions["[[Reject]]"]<"u")throw new $TypeError("executor has already been called");resolvingFunctions["[[Resolve]]"]=resolve,resolvingFunctions["[[Reject]]"]=reject});if(!IsCallable(resolvingFunctions["[[Resolve]]"])||!IsCallable(resolvingFunctions["[[Reject]]"]))throw new $TypeError("executor must provide valid resolve and reject functions");return{"[[Promise]]":promise,"[[Resolve]]":resolvingFunctions["[[Resolve]]"],"[[Reject]]":resolvingFunctions["[[Reject]]"]}}}});var require_isObject2=__commonJS({"node_modules/es-abstract/helpers/isObject.js"(exports,module){"use strict";module.exports=require_isObject()}});var require_functions_have_names=__commonJS({"node_modules/functions-have-names/index.js"(exports,module){"use strict";var functionsHaveNames=function(){return typeof function(){}.name=="string"},gOPD=Object.getOwnPropertyDescriptor;if(gOPD)try{gOPD([],"length")}catch{gOPD=null}functionsHaveNames.functionsHaveConfigurableNames=function(){if(!functionsHaveNames()||!gOPD)return!1;var desc=gOPD(function(){},"name");return!!desc&&!!desc.configurable};var $bind=Function.prototype.bind;functionsHaveNames.boundFunctionsHaveNames=function(){return functionsHaveNames()&&typeof $bind=="function"&&function(){}.bind().name!==""};module.exports=functionsHaveNames}});var require_set_function_name=__commonJS({"node_modules/set-function-name/index.js"(exports,module){"use strict";var define=require_define_data_property(),hasDescriptors=require_has_property_descriptors()(),functionsHaveConfigurableNames=require_functions_have_names().functionsHaveConfigurableNames(),$TypeError=require_type();module.exports=function(fn,name){if(typeof fn!="function")throw new $TypeError("`fn` is not a function");var loose=arguments.length>2&&!!arguments[2];return(!loose||functionsHaveConfigurableNames)&&(hasDescriptors?define(fn,"name",name,!0,!0):define(fn,"name",name)),fn}}});var require_callBound=__commonJS({"node_modules/call-bind/callBound.js"(exports,module){"use strict";var GetIntrinsic=require_get_intrinsic(),callBind=require_call_bind(),$indexOf=callBind(GetIntrinsic("String.prototype.indexOf"));module.exports=function(name,allowMissing){var intrinsic=GetIntrinsic(name,!!allowMissing);return typeof intrinsic=="function"&&$indexOf(name,".prototype.")>-1?callBind(intrinsic):intrinsic}}});var require_implementation3=__commonJS({"node_modules/promise.try/implementation.js"(exports,module){"use strict";var Call=require_Call(),NewPromiseCapability=require_NewPromiseCapability(),isObject=require_isObject2(),setFunctionName=require_set_function_name(),$TypeError=require_type(),callBound=require_callBound(),$slice=callBound("Array.prototype.slice");module.exports=setFunctionName(function(callbackfn){var C=this;if(!isObject(C))throw new $TypeError("receiver must be an object");var promiseCapability=NewPromiseCapability(C),args=arguments.length>1?$slice(arguments,1):[];try{var status=Call(callbackfn,void 0,args);Call(promiseCapability["[[Resolve]]"],void 0,[status])}catch(e){Call(promiseCapability["[[Reject]]"],void 0,[e])}return promiseCapability["[[Promise]]"]},"try",!0)}});var require_requirePromise=__commonJS({"node_modules/promise.try/requirePromise.js"(exports,module){"use strict";module.exports=function(){if(typeof Promise!="function")throw new TypeError("`Promise.try` requires a global `Promise` be available.")}}});var require_polyfill=__commonJS({"node_modules/promise.try/polyfill.js"(exports,module){"use strict";var requirePromise=require_requirePromise(),implementation=require_implementation3();module.exports=function(){return requirePromise(),typeof Promise.try=="function"?Promise.try:implementation}}});var require_shim=__commonJS({"node_modules/promise.try/shim.js"(exports,module){"use strict";var requirePromise=require_requirePromise(),getPolyfill=require_polyfill(),define=require_define_properties();module.exports=function(){requirePromise();var polyfill=getPolyfill();return define(Promise,{try:polyfill},{try:function(){return Promise.try!==polyfill}}),polyfill}}});var require_promise=__commonJS({"node_modules/promise.try/index.js"(exports,module){var callBind=require_call_bind(),define=require_define_properties(),implementation=require_implementation3(),getPolyfill=require_polyfill(),shim=require_shim(),requirePromise=require_requirePromise(),bound=callBind.apply(getPolyfill()),promiseTry=function(fn){return requirePromise(),bound(typeof this>"u"?Promise:this,arguments)};define(promiseTry,{getPolyfill,implementation,shim});module.exports=promiseTry}});export default require_promise();

package/dist/bundle/chunks/radius.js

@@ -0,0 +1,75 @@
+import { createRequire as __piCreateRequire } from "node:module"; const require = __piCreateRequire(import.meta.url);
+function normalizeRadiusGatewayUrl(value){return(/^https?:\/\//iu.test(value)?value:`https://${value}`).replace(/\/+$/u,"")}var CANCEL_MESSAGE="Login cancelled",TIMEOUT_MESSAGE="Device flow timed out",SLOW_DOWN_TIMEOUT_MESSAGE="Device flow timed out after one or more slow_down responses. This is often caused by clock drift in WSL or VM environments. Please sync or restart the VM clock and try again.";function abortableSleep(ms,signal,cancelMessage){return new Promise((resolve,reject)=>{if(signal.aborted){reject(new Error(cancelMessage));return}let onAbort=()=>{clearTimeout(timeout),reject(new Error(cancelMessage))},timeout=setTimeout(()=>{signal.removeEventListener("abort",onAbort),resolve()},ms);signal.addEventListener("abort",onAbort,{once:!0})})}async function pollOAuthDeviceCodeFlow(options){let deadline=typeof options.expiresInSeconds=="number"?Date.now()+options.expiresInSeconds*1e3:Number.POSITIVE_INFINITY,intervalMs=Math.max(1e3,Math.floor((options.intervalSeconds??5)*1e3)),slowDownResponses=0;if(options.waitBeforeFirstPoll){let remainingMs=deadline-Date.now();remainingMs>0&&await abortableSleep(Math.min(intervalMs,remainingMs),options.signal,CANCEL_MESSAGE)}for(;Date.now()<deadline;){if(options.signal.aborted)throw new Error(CANCEL_MESSAGE);let result=await options.poll();if(result.status==="complete")return result.value;if(result.status==="failed")throw new Error(result.message);result.status==="slow_down"&&(slowDownResponses+=1,intervalMs=typeof result.intervalSeconds=="number"&&Number.isFinite(result.intervalSeconds)&&result.intervalSeconds>0?Math.max(1e3,Math.floor(result.intervalSeconds*1e3)):Math.max(1e3,intervalMs+5e3));let remainingMs=deadline-Date.now();if(remainingMs<=0)break;await abortableSleep(Math.min(intervalMs,remainingMs),options.signal,CANCEL_MESSAGE)}throw new Error(slowDownResponses>0?SLOW_DOWN_TIMEOUT_MESSAGE:TIMEOUT_MESSAGE)}var LOGO_SVG='<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 800 800" aria-hidden="true"><path fill="#fff" fill-rule="evenodd" d="M165.29 165.29 H517.36 V400 H400 V517.36 H282.65 V634.72 H165.29 Z M282.65 282.65 V400 H400 V282.65 Z"/><path fill="#fff" d="M517.36 400 H634.72 V634.72 H517.36 Z"/></svg>';function escapeHtml(value){return value.replaceAll("&","&amp;").replaceAll("<","&lt;").replaceAll(">","&gt;").replaceAll('"',"&quot;").replaceAll("'","&#39;")}function renderPage(options){let title=escapeHtml(options.title),heading=escapeHtml(options.heading),message=escapeHtml(options.message),details=options.details?escapeHtml(options.details):void 0;return`<!doctype html>
+<html lang="en">
+<head>
+  <meta charset="utf-8" />
+  <meta name="viewport" content="width=device-width, initial-scale=1" />
+  <title>${title}</title>
+  <style>
+    :root {
+      --text: #fafafa;
+      --text-dim: #a1a1aa;
+      --page-bg: #09090b;
+      --font-sans: ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, "Noto Sans", sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji";
+      --font-mono: ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace;
+    }
+    * { box-sizing: border-box; }
+    html { color-scheme: dark; }
+    body {
+      margin: 0;
+      min-height: 100vh;
+      display: flex;
+      align-items: center;
+      justify-content: center;
+      padding: 24px;
+      background: var(--page-bg);
+      color: var(--text);
+      font-family: var(--font-sans);
+      text-align: center;
+    }
+    main {
+      width: 100%;
+      max-width: 560px;
+      display: flex;
+      flex-direction: column;
+      align-items: center;
+      justify-content: center;
+    }
+    .logo {
+      width: 72px;
+      height: 72px;
+      display: block;
+      margin-bottom: 24px;
+    }
+    h1 {
+      margin: 0 0 10px;
+      font-size: 28px;
+      line-height: 1.15;
+      font-weight: 650;
+      color: var(--text);
+    }
+    p {
+      margin: 0;
+      line-height: 1.7;
+      color: var(--text-dim);
+      font-size: 15px;
+    }
+    .details {
+      margin-top: 16px;
+      font-family: var(--font-mono);
+      font-size: 13px;
+      color: var(--text-dim);
+      white-space: pre-wrap;
+      word-break: break-word;
+    }
+  </style>
+</head>
+<body>
+  <main>
+    <div class="logo">${LOGO_SVG}</div>
+    <h1>${heading}</h1>
+    <p>${message}</p>
+    ${details?`<div class="details">${details}</div>`:""}
+  </main>
+</body>
+</html>`}function oauthSuccessHtml(message){return renderPage({title:"Authentication successful",heading:"Authentication successful",message})}function oauthErrorHtml(message,details){return renderPage({title:"Authentication failed",heading:"Authentication failed",message,details})}function base64urlEncode(bytes){let binary="";for(let byte of bytes)binary+=String.fromCharCode(byte);return btoa(binary).replace(/\+/g,"-").replace(/\//g,"_").replace(/=/g,"")}async function generatePKCE(){let verifierBytes=new Uint8Array(32);crypto.getRandomValues(verifierBytes);let verifier=base64urlEncode(verifierBytes),data=new TextEncoder().encode(verifier),hashBuffer=await crypto.subtle.digest("SHA-256",data),challenge=base64urlEncode(new Uint8Array(hashBuffer));return{verifier,challenge}}var _http=null;typeof process<"u"&&(process.versions?.node||process.versions?.bun)&&import("node:http").then(m=>{_http=m});var CALLBACK_HOST="127.0.0.1",CALLBACK_PORT=1456,CALLBACK_PATH="/oauth/callback",REDIRECT_URI=`http://${CALLBACK_HOST}:${CALLBACK_PORT}${CALLBACK_PATH}`,TOKEN_EXPIRY_SKEW_MS=6e4,LOGIN_METHOD_BROWSER="browser",LOGIN_METHOD_DEVICE_CODE="device-code",OAUTH_CLIENT_ID="pi-gateway",OAUTH_SCOPE="gateway offline_access",OAUTH_DEVICE_CODE_GRANT_TYPE="urn:ietf:params:oauth:grant-type:device_code";async function loadRadiusOAuthDiscovery(gateway,signal){let response=await fetch(new URL("/v1/oauth",gateway),{headers:{accept:"application/json"},signal});if(!response.ok)throw new Error(`Could not load Radius OAuth config from ${gateway}: ${response.status} ${await response.text()}`);let discovery=await response.json();if(typeof discovery.authorizationEndpoint!="string")throw new Error(`Invalid Radius OAuth config from ${gateway}`);return{authorizationEndpoint:discovery.authorizationEndpoint}}var OAuthResponseError=class extends Error{constructor(status,oauthError,description,message){let detail=oauthError?description?`${oauthError}: ${description}`:oauthError:description||String(status);super(`${message}: ${detail}`),this.status=status,this.oauthError=oauthError}};async function readOAuthResponseError(response,message){let text=await response.text().catch(()=>""),oauthError,description;if(text)try{let data=JSON.parse(text);oauthError=typeof data.error=="string"?data.error:void 0,description=typeof data.error_description=="string"?data.error_description:void 0}catch{description=text}return new OAuthResponseError(response.status,oauthError,description,message)}async function requestOAuthToken(gateway,body,signal){let response;try{response=await fetch(new URL("/v1/oauth/token",gateway),{method:"POST",headers:{accept:"application/json","content-type":"application/x-www-form-urlencoded"},body,signal})}catch(error){throw signal.aborted?new Error("Login cancelled"):error}if(!response.ok)throw await readOAuthResponseError(response,"Radius OAuth token request failed");let data=await response.json();return{type:"oauth",access:data.access_token,refresh:data.refresh_token,expires:Date.now()+data.expires_in*1e3-TOKEN_EXPIRY_SKEW_MS,scope:data.scope}}function startOAuthCallbackServer(expectedState,signal){if(!_http)throw new Error("Radius OAuth is only available in Node.js environments");let settle=()=>{},settled=!1,wait=new Promise(resolve=>{settle=resolve}),finish=code=>{settled||(settled=!0,signal.removeEventListener("abort",onAbort),settle(code))},onAbort=()=>finish(null);signal.addEventListener("abort",onAbort,{once:!0});let sendPage=(response,status,html)=>{response.statusCode=status,response.setHeader("content-type","text/html; charset=utf-8"),response.end(html)},server=_http.createServer((request,response)=>{let url=new URL(request.url??"/",REDIRECT_URI);if(url.pathname!==CALLBACK_PATH){sendPage(response,404,oauthErrorHtml("Callback route not found."));return}if(url.searchParams.get("state")!==expectedState){sendPage(response,400,oauthErrorHtml("OAuth state mismatch."));return}let error=url.searchParams.get("error");if(error){sendPage(response,400,oauthErrorHtml(url.searchParams.get("error_description")??error)),finish(null);return}let code=url.searchParams.get("code");if(!code){sendPage(response,400,oauthErrorHtml("Missing authorization code."));return}sendPage(response,200,oauthSuccessHtml("Signed in to Radius. You may now close this page.")),finish(code)});return new Promise(resolve=>{server.listen(CALLBACK_PORT,CALLBACK_HOST,()=>{resolve({waitForCode:()=>wait,close:()=>{finish(null),server.close()}})}).once("error",()=>{finish(null),resolve({waitForCode:async()=>null,close:()=>{}})})})}async function loginWithBrowser(gateway,authorizationEndpoint,interaction){let{verifier,challenge}=await generatePKCE(),state=crypto.randomUUID(),authorizeUrl=new URL(authorizationEndpoint);authorizeUrl.search=new URLSearchParams({response_type:"code",client_id:OAUTH_CLIENT_ID,redirect_uri:REDIRECT_URI,scope:OAUTH_SCOPE,code_challenge:challenge,code_challenge_method:"S256",handoff:"url",state}).toString();let callbackServer=await startOAuthCallbackServer(state,interaction.signal);interaction.notify({type:"progress",message:`Listening for OAuth callback on ${REDIRECT_URI}`}),interaction.notify({type:"auth_url",url:authorizeUrl.toString(),instructions:"Continue in your browser."});try{let code=await callbackServer.waitForCode();if(!code)throw interaction.signal.aborted?new Error("Login cancelled"):new Error("OAuth callback did not complete.");return await requestOAuthToken(gateway,new URLSearchParams({grant_type:"authorization_code",client_id:OAUTH_CLIENT_ID,redirect_uri:REDIRECT_URI,code,code_verifier:verifier}),interaction.signal)}finally{callbackServer.close()}}async function requestDeviceAuthorization(gateway,signal){let response;try{response=await fetch(new URL("/v1/oauth/device",gateway),{method:"POST",headers:{accept:"application/json","content-type":"application/x-www-form-urlencoded"},body:new URLSearchParams({client_id:OAUTH_CLIENT_ID,scope:OAUTH_SCOPE}),signal})}catch(error){throw signal.aborted?new Error("Login cancelled"):error}if(!response.ok)throw await readOAuthResponseError(response,"Radius OAuth device authorization failed");let data=await response.json();if(!data.device_code||!data.user_code||!data.verification_uri||!data.expires_in)throw new Error("Radius OAuth device authorization response is missing required fields");return{device_code:data.device_code,user_code:data.user_code,verification_uri:data.verification_uri,expires_in:data.expires_in,interval:data.interval}}async function loginWithDeviceCode(gateway,interaction){let device=await requestDeviceAuthorization(gateway,interaction.signal);return interaction.notify({type:"device_code",userCode:device.user_code,verificationUri:device.verification_uri,intervalSeconds:device.interval,expiresInSeconds:device.expires_in}),pollOAuthDeviceCodeFlow({intervalSeconds:device.interval,expiresInSeconds:device.expires_in,signal:interaction.signal,poll:async()=>{try{return{status:"complete",value:await requestOAuthToken(gateway,new URLSearchParams({grant_type:OAUTH_DEVICE_CODE_GRANT_TYPE,client_id:OAUTH_CLIENT_ID,device_code:device.device_code}),interaction.signal)}}catch(error){if(!(error instanceof OAuthResponseError))throw error;switch(error.oauthError){case"authorization_pending":return{status:"pending"};case"slow_down":return{status:"slow_down"};case"expired_token":return{status:"failed",message:"Device authorization expired."};case"access_denied":return{status:"failed",message:"Device authorization was denied."};default:throw error}}}})}function createRadiusOAuth(options){let gateway=normalizeRadiusGatewayUrl(options.gateway);return{name:options.name,async login(interaction){let loginMethod=await interaction.prompt({type:"select",message:`Sign in to ${options.name}:`,options:[{id:LOGIN_METHOD_BROWSER,label:"Sign in with browser (recommended)"},{id:LOGIN_METHOD_DEVICE_CODE,label:"Sign in with device code (when signing in from another device)"}]});if(loginMethod===LOGIN_METHOD_DEVICE_CODE)return loginWithDeviceCode(gateway,interaction);if(loginMethod===LOGIN_METHOD_BROWSER){let discovery=await loadRadiusOAuthDiscovery(gateway,interaction.signal);return loginWithBrowser(gateway,discovery.authorizationEndpoint,interaction)}throw new Error(`Unknown ${options.name} sign-in method: ${loginMethod}`)},async refresh(credential,signal){return await requestOAuthToken(gateway,new URLSearchParams({grant_type:"refresh_token",client_id:OAUTH_CLIENT_ID,refresh_token:credential.refresh}),signal)},async toAuth(credential){return{apiKey:credential.access}}}}export{createRadiusOAuth};

package/dist/bundle/chunks/src-QKGKDFSU.js

@@ -0,0 +1,4 @@
+import { createRequire as __piCreateRequire } from "node:module"; const require = __piCreateRequire(import.meta.url);
+import{FormData,blobFrom,blobFromSync,fetch_blob_default,fileFrom,fileFromSync,file_default,formDataToBlob,init_esm_min,init_fetch_blob,init_from}from"./chunk-LVVZS2NO.js";import{__esm}from"./chunk-JXWJOIH4.js";function dataUriToBuffer(uri){if(!/^data:/i.test(uri))throw new TypeError('`uri` does not appear to be a Data URI (must begin with "data:")');uri=uri.replace(/\r?\n/g,"");let firstComma=uri.indexOf(",");if(firstComma===-1||firstComma<=4)throw new TypeError("malformed data: URI");let meta=uri.substring(5,firstComma).split(";"),charset="",base64=!1,type=meta[0]||"text/plain",typeFull=type;for(let i=1;i<meta.length;i++)meta[i]==="base64"?base64=!0:meta[i]&&(typeFull+=`;${meta[i]}`,meta[i].indexOf("charset=")===0&&(charset=meta[i].substring(8)));!meta[0]&&!charset.length&&(typeFull+=";charset=US-ASCII",charset="US-ASCII");let encoding=base64?"base64":"ascii",data=unescape(uri.substring(firstComma+1)),buffer=Buffer.from(data,encoding);return buffer.type=type,buffer.typeFull=typeFull,buffer.charset=charset,buffer}var dist_default,init_dist=__esm({"node_modules/data-uri-to-buffer/dist/index.js"(){dist_default=dataUriToBuffer}});var FetchBaseError,init_base=__esm({"node_modules/node-fetch/src/errors/base.js"(){FetchBaseError=class extends Error{constructor(message,type){super(message),Error.captureStackTrace(this,this.constructor),this.type=type}get name(){return this.constructor.name}get[Symbol.toStringTag](){return this.constructor.name}}}});var FetchError,init_fetch_error=__esm({"node_modules/node-fetch/src/errors/fetch-error.js"(){init_base();FetchError=class extends FetchBaseError{constructor(message,type,systemError){super(message,type),systemError&&(this.code=this.errno=systemError.code,this.erroredSysCall=systemError.syscall)}}}});var NAME,isURLSearchParameters,isBlob,isAbortSignal,isDomainOrSubdomain,isSameProtocol,init_is=__esm({"node_modules/node-fetch/src/utils/is.js"(){NAME=Symbol.toStringTag,isURLSearchParameters=object=>typeof object=="object"&&typeof object.append=="function"&&typeof object.delete=="function"&&typeof object.get=="function"&&typeof object.getAll=="function"&&typeof object.has=="function"&&typeof object.set=="function"&&typeof object.sort=="function"&&object[NAME]==="URLSearchParams",isBlob=object=>object&&typeof object=="object"&&typeof object.arrayBuffer=="function"&&typeof object.type=="string"&&typeof object.stream=="function"&&typeof object.constructor=="function"&&/^(Blob|File)$/.test(object[NAME]),isAbortSignal=object=>typeof object=="object"&&(object[NAME]==="AbortSignal"||object[NAME]==="EventTarget"),isDomainOrSubdomain=(destination,original)=>{let orig=new URL(original).hostname,dest=new URL(destination).hostname;return orig===dest||orig.endsWith(`.${dest}`)},isSameProtocol=(destination,original)=>{let orig=new URL(original).protocol,dest=new URL(destination).protocol;return orig===dest}}});import Stream,{PassThrough}from"node:stream";import{types,deprecate,promisify}from"node:util";import{Buffer as Buffer2}from"node:buffer";async function consumeBody(data){if(data[INTERNALS].disturbed)throw new TypeError(`body used already for: ${data.url}`);if(data[INTERNALS].disturbed=!0,data[INTERNALS].error)throw data[INTERNALS].error;let{body}=data;if(body===null)return Buffer2.alloc(0);if(!(body instanceof Stream))return Buffer2.alloc(0);let accum=[],accumBytes=0;try{for await(let chunk of body){if(data.size>0&&accumBytes+chunk.length>data.size){let error=new FetchError(`content size at ${data.url} over limit: ${data.size}`,"max-size");throw body.destroy(error),error}accumBytes+=chunk.length,accum.push(chunk)}}catch(error){throw error instanceof FetchBaseError?error:new FetchError(`Invalid response body while trying to fetch ${data.url}: ${error.message}`,"system",error)}if(body.readableEnded===!0||body._readableState.ended===!0)try{return accum.every(c=>typeof c=="string")?Buffer2.from(accum.join("")):Buffer2.concat(accum,accumBytes)}catch(error){throw new FetchError(`Could not create Buffer from response body for ${data.url}: ${error.message}`,"system",error)}else throw new FetchError(`Premature close of server response while trying to fetch ${data.url}`)}var pipeline,INTERNALS,Body,clone,getNonSpecFormDataBoundary,extractContentType,getTotalBytes,writeToStream,init_body=__esm({"node_modules/node-fetch/src/body.js"(){init_fetch_blob();init_esm_min();init_fetch_error();init_base();init_is();pipeline=promisify(Stream.pipeline),INTERNALS=Symbol("Body internals"),Body=class{constructor(body,{size=0}={}){let boundary=null;body===null?body=null:isURLSearchParameters(body)?body=Buffer2.from(body.toString()):isBlob(body)||Buffer2.isBuffer(body)||(types.isAnyArrayBuffer(body)?body=Buffer2.from(body):ArrayBuffer.isView(body)?body=Buffer2.from(body.buffer,body.byteOffset,body.byteLength):body instanceof Stream||(body instanceof FormData?(body=formDataToBlob(body),boundary=body.type.split("=")[1]):body=Buffer2.from(String(body))));let stream=body;Buffer2.isBuffer(body)?stream=Stream.Readable.from(body):isBlob(body)&&(stream=Stream.Readable.from(body.stream())),this[INTERNALS]={body,stream,boundary,disturbed:!1,error:null},this.size=size,body instanceof Stream&&body.on("error",error_=>{let error=error_ instanceof FetchBaseError?error_:new FetchError(`Invalid response body while trying to fetch ${this.url}: ${error_.message}`,"system",error_);this[INTERNALS].error=error})}get body(){return this[INTERNALS].stream}get bodyUsed(){return this[INTERNALS].disturbed}async arrayBuffer(){let{buffer,byteOffset,byteLength}=await consumeBody(this);return buffer.slice(byteOffset,byteOffset+byteLength)}async formData(){let ct=this.headers.get("content-type");if(ct.startsWith("application/x-www-form-urlencoded")){let formData=new FormData,parameters=new URLSearchParams(await this.text());for(let[name,value]of parameters)formData.append(name,value);return formData}let{toFormData}=await import("./multipart-parser-FMGQ7342.js");return toFormData(this.body,ct)}async blob(){let ct=this.headers&&this.headers.get("content-type")||this[INTERNALS].body&&this[INTERNALS].body.type||"",buf=await this.arrayBuffer();return new fetch_blob_default([buf],{type:ct})}async json(){let text=await this.text();return JSON.parse(text)}async text(){let buffer=await consumeBody(this);return new TextDecoder().decode(buffer)}buffer(){return consumeBody(this)}};Body.prototype.buffer=deprecate(Body.prototype.buffer,"Please use 'response.arrayBuffer()' instead of 'response.buffer()'","node-fetch#buffer");Object.defineProperties(Body.prototype,{body:{enumerable:!0},bodyUsed:{enumerable:!0},arrayBuffer:{enumerable:!0},blob:{enumerable:!0},json:{enumerable:!0},text:{enumerable:!0},data:{get:deprecate(()=>{},"data doesn't exist, use json(), text(), arrayBuffer(), or body instead","https://github.com/node-fetch/node-fetch/issues/1000 (response)")}});clone=(instance,highWaterMark)=>{let p1,p2,{body}=instance[INTERNALS];if(instance.bodyUsed)throw new Error("cannot clone body after it is used");return body instanceof Stream&&typeof body.getBoundary!="function"&&(p1=new PassThrough({highWaterMark}),p2=new PassThrough({highWaterMark}),body.pipe(p1),body.pipe(p2),instance[INTERNALS].stream=p1,body=p2),body},getNonSpecFormDataBoundary=deprecate(body=>body.getBoundary(),"form-data doesn't follow the spec and requires special treatment. Use alternative package","https://github.com/node-fetch/node-fetch/issues/1167"),extractContentType=(body,request)=>body===null?null:typeof body=="string"?"text/plain;charset=UTF-8":isURLSearchParameters(body)?"application/x-www-form-urlencoded;charset=UTF-8":isBlob(body)?body.type||null:Buffer2.isBuffer(body)||types.isAnyArrayBuffer(body)||ArrayBuffer.isView(body)?null:body instanceof FormData?`multipart/form-data; boundary=${request[INTERNALS].boundary}`:body&&typeof body.getBoundary=="function"?`multipart/form-data;boundary=${getNonSpecFormDataBoundary(body)}`:body instanceof Stream?null:"text/plain;charset=UTF-8",getTotalBytes=request=>{let{body}=request[INTERNALS];return body===null?0:isBlob(body)?body.size:Buffer2.isBuffer(body)?body.length:body&&typeof body.getLengthSync=="function"&&body.hasKnownLength&&body.hasKnownLength()?body.getLengthSync():null},writeToStream=async(dest,{body})=>{body===null?dest.end():await pipeline(body,dest)}}});import{types as types2}from"node:util";import http from"node:http";function fromRawHeaders(headers=[]){return new Headers(headers.reduce((result,value,index,array)=>(index%2===0&&result.push(array.slice(index,index+2)),result),[]).filter(([name,value])=>{try{return validateHeaderName(name),validateHeaderValue(name,String(value)),!0}catch{return!1}}))}var validateHeaderName,validateHeaderValue,Headers,init_headers=__esm({"node_modules/node-fetch/src/headers.js"(){validateHeaderName=typeof http.validateHeaderName=="function"?http.validateHeaderName:name=>{if(!/^[\^`\-\w!#$%&'*+.|~]+$/.test(name)){let error=new TypeError(`Header name must be a valid HTTP token [${name}]`);throw Object.defineProperty(error,"code",{value:"ERR_INVALID_HTTP_TOKEN"}),error}},validateHeaderValue=typeof http.validateHeaderValue=="function"?http.validateHeaderValue:(name,value)=>{if(/[^\t\u0020-\u007E\u0080-\u00FF]/.test(value)){let error=new TypeError(`Invalid character in header content ["${name}"]`);throw Object.defineProperty(error,"code",{value:"ERR_INVALID_CHAR"}),error}},Headers=class _Headers extends URLSearchParams{constructor(init){let result=[];if(init instanceof _Headers){let raw=init.raw();for(let[name,values]of Object.entries(raw))result.push(...values.map(value=>[name,value]))}else if(init!=null)if(typeof init=="object"&&!types2.isBoxedPrimitive(init)){let method=init[Symbol.iterator];if(method==null)result.push(...Object.entries(init));else{if(typeof method!="function")throw new TypeError("Header pairs must be iterable");result=[...init].map(pair=>{if(typeof pair!="object"||types2.isBoxedPrimitive(pair))throw new TypeError("Each header pair must be an iterable object");return[...pair]}).map(pair=>{if(pair.length!==2)throw new TypeError("Each header pair must be a name/value tuple");return[...pair]})}}else throw new TypeError("Failed to construct 'Headers': The provided value is not of type '(sequence<sequence<ByteString>> or record<ByteString, ByteString>)");return result=result.length>0?result.map(([name,value])=>(validateHeaderName(name),validateHeaderValue(name,String(value)),[String(name).toLowerCase(),String(value)])):void 0,super(result),new Proxy(this,{get(target,p,receiver){switch(p){case"append":case"set":return(name,value)=>(validateHeaderName(name),validateHeaderValue(name,String(value)),URLSearchParams.prototype[p].call(target,String(name).toLowerCase(),String(value)));case"delete":case"has":case"getAll":return name=>(validateHeaderName(name),URLSearchParams.prototype[p].call(target,String(name).toLowerCase()));case"keys":return()=>(target.sort(),new Set(URLSearchParams.prototype.keys.call(target)).keys());default:return Reflect.get(target,p,receiver)}}})}get[Symbol.toStringTag](){return this.constructor.name}toString(){return Object.prototype.toString.call(this)}get(name){let values=this.getAll(name);if(values.length===0)return null;let value=values.join(", ");return/^content-encoding$/i.test(name)&&(value=value.toLowerCase()),value}forEach(callback,thisArg=void 0){for(let name of this.keys())Reflect.apply(callback,thisArg,[this.get(name),name,this])}*values(){for(let name of this.keys())yield this.get(name)}*entries(){for(let name of this.keys())yield[name,this.get(name)]}[Symbol.iterator](){return this.entries()}raw(){return[...this.keys()].reduce((result,key)=>(result[key]=this.getAll(key),result),{})}[Symbol.for("nodejs.util.inspect.custom")](){return[...this.keys()].reduce((result,key)=>{let values=this.getAll(key);return key==="host"?result[key]=values[0]:result[key]=values.length>1?values:values[0],result},{})}};Object.defineProperties(Headers.prototype,["get","entries","forEach","values"].reduce((result,property)=>(result[property]={enumerable:!0},result),{}))}});var redirectStatus,isRedirect,init_is_redirect=__esm({"node_modules/node-fetch/src/utils/is-redirect.js"(){redirectStatus=new Set([301,302,303,307,308]),isRedirect=code=>redirectStatus.has(code)}});var INTERNALS2,Response,init_response=__esm({"node_modules/node-fetch/src/response.js"(){init_headers();init_body();init_is_redirect();INTERNALS2=Symbol("Response internals"),Response=class _Response extends Body{constructor(body=null,options={}){super(body,options);let status=options.status!=null?options.status:200,headers=new Headers(options.headers);if(body!==null&&!headers.has("Content-Type")){let contentType=extractContentType(body,this);contentType&&headers.append("Content-Type",contentType)}this[INTERNALS2]={type:"default",url:options.url,status,statusText:options.statusText||"",headers,counter:options.counter,highWaterMark:options.highWaterMark}}get type(){return this[INTERNALS2].type}get url(){return this[INTERNALS2].url||""}get status(){return this[INTERNALS2].status}get ok(){return this[INTERNALS2].status>=200&&this[INTERNALS2].status<300}get redirected(){return this[INTERNALS2].counter>0}get statusText(){return this[INTERNALS2].statusText}get headers(){return this[INTERNALS2].headers}get highWaterMark(){return this[INTERNALS2].highWaterMark}clone(){return new _Response(clone(this,this.highWaterMark),{type:this.type,url:this.url,status:this.status,statusText:this.statusText,headers:this.headers,ok:this.ok,redirected:this.redirected,size:this.size,highWaterMark:this.highWaterMark})}static redirect(url,status=302){if(!isRedirect(status))throw new RangeError('Failed to execute "redirect" on "response": Invalid status code');return new _Response(null,{headers:{location:new URL(url).toString()},status})}static error(){let response=new _Response(null,{status:0,statusText:""});return response[INTERNALS2].type="error",response}static json(data=void 0,init={}){let body=JSON.stringify(data);if(body===void 0)throw new TypeError("data is not JSON serializable");let headers=new Headers(init&&init.headers);return headers.has("content-type")||headers.set("content-type","application/json"),new _Response(body,{...init,headers})}get[Symbol.toStringTag](){return"Response"}};Object.defineProperties(Response.prototype,{type:{enumerable:!0},url:{enumerable:!0},status:{enumerable:!0},ok:{enumerable:!0},redirected:{enumerable:!0},statusText:{enumerable:!0},headers:{enumerable:!0},clone:{enumerable:!0}})}});var getSearch,init_get_search=__esm({"node_modules/node-fetch/src/utils/get-search.js"(){getSearch=parsedURL=>{if(parsedURL.search)return parsedURL.search;let lastOffset=parsedURL.href.length-1,hash=parsedURL.hash||(parsedURL.href[lastOffset]==="#"?"#":"");return parsedURL.href[lastOffset-hash.length]==="?"?"?":""}}});import{isIP}from"node:net";function stripURLForUseAsAReferrer(url,originOnly=!1){return url==null||(url=new URL(url),/^(about|blob|data):$/.test(url.protocol))?"no-referrer":(url.username="",url.password="",url.hash="",originOnly&&(url.pathname="",url.search=""),url)}function validateReferrerPolicy(referrerPolicy){if(!ReferrerPolicy.has(referrerPolicy))throw new TypeError(`Invalid referrerPolicy: ${referrerPolicy}`);return referrerPolicy}function isOriginPotentiallyTrustworthy(url){if(/^(http|ws)s:$/.test(url.protocol))return!0;let hostIp=url.host.replace(/(^\[)|(]$)/g,""),hostIPVersion=isIP(hostIp);return hostIPVersion===4&&/^127\./.test(hostIp)||hostIPVersion===6&&/^(((0+:){7})|(::(0+:){0,6}))0*1$/.test(hostIp)?!0:url.host==="localhost"||url.host.endsWith(".localhost")?!1:url.protocol==="file:"}function isUrlPotentiallyTrustworthy(url){return/^about:(blank|srcdoc)$/.test(url)||url.protocol==="data:"||/^(blob|filesystem):$/.test(url.protocol)?!0:isOriginPotentiallyTrustworthy(url)}function determineRequestsReferrer(request,{referrerURLCallback,referrerOriginCallback}={}){if(request.referrer==="no-referrer"||request.referrerPolicy==="")return null;let policy=request.referrerPolicy;if(request.referrer==="about:client")return"no-referrer";let referrerSource=request.referrer,referrerURL=stripURLForUseAsAReferrer(referrerSource),referrerOrigin=stripURLForUseAsAReferrer(referrerSource,!0);referrerURL.toString().length>4096&&(referrerURL=referrerOrigin),referrerURLCallback&&(referrerURL=referrerURLCallback(referrerURL)),referrerOriginCallback&&(referrerOrigin=referrerOriginCallback(referrerOrigin));let currentURL=new URL(request.url);switch(policy){case"no-referrer":return"no-referrer";case"origin":return referrerOrigin;case"unsafe-url":return referrerURL;case"strict-origin":return isUrlPotentiallyTrustworthy(referrerURL)&&!isUrlPotentiallyTrustworthy(currentURL)?"no-referrer":referrerOrigin.toString();case"strict-origin-when-cross-origin":return referrerURL.origin===currentURL.origin?referrerURL:isUrlPotentiallyTrustworthy(referrerURL)&&!isUrlPotentiallyTrustworthy(currentURL)?"no-referrer":referrerOrigin;case"same-origin":return referrerURL.origin===currentURL.origin?referrerURL:"no-referrer";case"origin-when-cross-origin":return referrerURL.origin===currentURL.origin?referrerURL:referrerOrigin;case"no-referrer-when-downgrade":return isUrlPotentiallyTrustworthy(referrerURL)&&!isUrlPotentiallyTrustworthy(currentURL)?"no-referrer":referrerURL;default:throw new TypeError(`Invalid referrerPolicy: ${policy}`)}}function parseReferrerPolicyFromHeader(headers){let policyTokens=(headers.get("referrer-policy")||"").split(/[,\s]+/),policy="";for(let token of policyTokens)token&&ReferrerPolicy.has(token)&&(policy=token);return policy}var ReferrerPolicy,DEFAULT_REFERRER_POLICY,init_referrer=__esm({"node_modules/node-fetch/src/utils/referrer.js"(){ReferrerPolicy=new Set(["","no-referrer","no-referrer-when-downgrade","same-origin","origin","strict-origin","origin-when-cross-origin","strict-origin-when-cross-origin","unsafe-url"]),DEFAULT_REFERRER_POLICY="strict-origin-when-cross-origin"}});import{format as formatUrl}from"node:url";import{deprecate as deprecate2}from"node:util";var INTERNALS3,isRequest,doBadDataWarn,Request,getNodeRequestOptions,init_request=__esm({"node_modules/node-fetch/src/request.js"(){init_headers();init_body();init_is();init_get_search();init_referrer();INTERNALS3=Symbol("Request internals"),isRequest=object=>typeof object=="object"&&typeof object[INTERNALS3]=="object",doBadDataWarn=deprecate2(()=>{},".data is not a valid RequestInit property, use .body instead","https://github.com/node-fetch/node-fetch/issues/1000 (request)"),Request=class _Request extends Body{constructor(input,init={}){let parsedURL;if(isRequest(input)?parsedURL=new URL(input.url):(parsedURL=new URL(input),input={}),parsedURL.username!==""||parsedURL.password!=="")throw new TypeError(`${parsedURL} is an url with embedded credentials.`);let method=init.method||input.method||"GET";if(/^(delete|get|head|options|post|put)$/i.test(method)&&(method=method.toUpperCase()),!isRequest(init)&&"data"in init&&doBadDataWarn(),(init.body!=null||isRequest(input)&&input.body!==null)&&(method==="GET"||method==="HEAD"))throw new TypeError("Request with GET/HEAD method cannot have body");let inputBody=init.body?init.body:isRequest(input)&&input.body!==null?clone(input):null;super(inputBody,{size:init.size||input.size||0});let headers=new Headers(init.headers||input.headers||{});if(inputBody!==null&&!headers.has("Content-Type")){let contentType=extractContentType(inputBody,this);contentType&&headers.set("Content-Type",contentType)}let signal=isRequest(input)?input.signal:null;if("signal"in init&&(signal=init.signal),signal!=null&&!isAbortSignal(signal))throw new TypeError("Expected signal to be an instanceof AbortSignal or EventTarget");let referrer=init.referrer==null?input.referrer:init.referrer;if(referrer==="")referrer="no-referrer";else if(referrer){let parsedReferrer=new URL(referrer);referrer=/^about:(\/\/)?client$/.test(parsedReferrer)?"client":parsedReferrer}else referrer=void 0;this[INTERNALS3]={method,redirect:init.redirect||input.redirect||"follow",headers,parsedURL,signal,referrer},this.follow=init.follow===void 0?input.follow===void 0?20:input.follow:init.follow,this.compress=init.compress===void 0?input.compress===void 0?!0:input.compress:init.compress,this.counter=init.counter||input.counter||0,this.agent=init.agent||input.agent,this.highWaterMark=init.highWaterMark||input.highWaterMark||16384,this.insecureHTTPParser=init.insecureHTTPParser||input.insecureHTTPParser||!1,this.referrerPolicy=init.referrerPolicy||input.referrerPolicy||""}get method(){return this[INTERNALS3].method}get url(){return formatUrl(this[INTERNALS3].parsedURL)}get headers(){return this[INTERNALS3].headers}get redirect(){return this[INTERNALS3].redirect}get signal(){return this[INTERNALS3].signal}get referrer(){if(this[INTERNALS3].referrer==="no-referrer")return"";if(this[INTERNALS3].referrer==="client")return"about:client";if(this[INTERNALS3].referrer)return this[INTERNALS3].referrer.toString()}get referrerPolicy(){return this[INTERNALS3].referrerPolicy}set referrerPolicy(referrerPolicy){this[INTERNALS3].referrerPolicy=validateReferrerPolicy(referrerPolicy)}clone(){return new _Request(this)}get[Symbol.toStringTag](){return"Request"}};Object.defineProperties(Request.prototype,{method:{enumerable:!0},url:{enumerable:!0},headers:{enumerable:!0},redirect:{enumerable:!0},clone:{enumerable:!0},signal:{enumerable:!0},referrer:{enumerable:!0},referrerPolicy:{enumerable:!0}});getNodeRequestOptions=request=>{let{parsedURL}=request[INTERNALS3],headers=new Headers(request[INTERNALS3].headers);headers.has("Accept")||headers.set("Accept","*/*");let contentLengthValue=null;if(request.body===null&&/^(post|put)$/i.test(request.method)&&(contentLengthValue="0"),request.body!==null){let totalBytes=getTotalBytes(request);typeof totalBytes=="number"&&!Number.isNaN(totalBytes)&&(contentLengthValue=String(totalBytes))}contentLengthValue&&headers.set("Content-Length",contentLengthValue),request.referrerPolicy===""&&(request.referrerPolicy=DEFAULT_REFERRER_POLICY),request.referrer&&request.referrer!=="no-referrer"?request[INTERNALS3].referrer=determineRequestsReferrer(request):request[INTERNALS3].referrer="no-referrer",request[INTERNALS3].referrer instanceof URL&&headers.set("Referer",request.referrer),headers.has("User-Agent")||headers.set("User-Agent","node-fetch"),request.compress&&!headers.has("Accept-Encoding")&&headers.set("Accept-Encoding","gzip, deflate, br");let{agent}=request;typeof agent=="function"&&(agent=agent(parsedURL));let search=getSearch(parsedURL),options={path:parsedURL.pathname+search,method:request.method,headers:headers[Symbol.for("nodejs.util.inspect.custom")](),insecureHTTPParser:request.insecureHTTPParser,agent};return{parsedURL,options}}}});var AbortError,init_abort_error=__esm({"node_modules/node-fetch/src/errors/abort-error.js"(){init_base();AbortError=class extends FetchBaseError{constructor(message,type="aborted"){super(message,type)}}}});import http2 from"node:http";import https from"node:https";import zlib from"node:zlib";import Stream2,{PassThrough as PassThrough2,pipeline as pump}from"node:stream";import{Buffer as Buffer3}from"node:buffer";async function fetch(url,options_){return new Promise((resolve,reject)=>{let request=new Request(url,options_),{parsedURL,options}=getNodeRequestOptions(request);if(!supportedSchemas.has(parsedURL.protocol))throw new TypeError(`node-fetch cannot load ${url}. URL scheme "${parsedURL.protocol.replace(/:$/,"")}" is not supported.`);if(parsedURL.protocol==="data:"){let data=dist_default(request.url),response2=new Response(data,{headers:{"Content-Type":data.typeFull}});resolve(response2);return}let send=(parsedURL.protocol==="https:"?https:http2).request,{signal}=request,response=null,abort=()=>{let error=new AbortError("The operation was aborted.");reject(error),request.body&&request.body instanceof Stream2.Readable&&request.body.destroy(error),!(!response||!response.body)&&response.body.emit("error",error)};if(signal&&signal.aborted){abort();return}let abortAndFinalize=()=>{abort(),finalize()},request_=send(parsedURL.toString(),options);signal&&signal.addEventListener("abort",abortAndFinalize);let finalize=()=>{request_.abort(),signal&&signal.removeEventListener("abort",abortAndFinalize)};request_.on("error",error=>{reject(new FetchError(`request to ${request.url} failed, reason: ${error.message}`,"system",error)),finalize()}),fixResponseChunkedTransferBadEnding(request_,error=>{response&&response.body&&response.body.destroy(error)}),process.version<"v14"&&request_.on("socket",s=>{let endedWithEventsCount;s.prependListener("end",()=>{endedWithEventsCount=s._eventsCount}),s.prependListener("close",hadError=>{if(response&&endedWithEventsCount<s._eventsCount&&!hadError){let error=new Error("Premature close");error.code="ERR_STREAM_PREMATURE_CLOSE",response.body.emit("error",error)}})}),request_.on("response",response_=>{request_.setTimeout(0);let headers=fromRawHeaders(response_.rawHeaders);if(isRedirect(response_.statusCode)){let location=headers.get("Location"),locationURL=null;try{locationURL=location===null?null:new URL(location,request.url)}catch{if(request.redirect!=="manual"){reject(new FetchError(`uri requested responds with an invalid redirect URL: ${location}`,"invalid-redirect")),finalize();return}}switch(request.redirect){case"error":reject(new FetchError(`uri requested responds with a redirect, redirect mode is set to error: ${request.url}`,"no-redirect")),finalize();return;case"manual":break;case"follow":{if(locationURL===null)break;if(request.counter>=request.follow){reject(new FetchError(`maximum redirect reached at: ${request.url}`,"max-redirect")),finalize();return}let requestOptions={headers:new Headers(request.headers),follow:request.follow,counter:request.counter+1,agent:request.agent,compress:request.compress,method:request.method,body:clone(request),signal:request.signal,size:request.size,referrer:request.referrer,referrerPolicy:request.referrerPolicy};if(!isDomainOrSubdomain(request.url,locationURL)||!isSameProtocol(request.url,locationURL))for(let name of["authorization","www-authenticate","cookie","cookie2"])requestOptions.headers.delete(name);if(response_.statusCode!==303&&request.body&&options_.body instanceof Stream2.Readable){reject(new FetchError("Cannot follow redirect with body being a readable stream","unsupported-redirect")),finalize();return}(response_.statusCode===303||(response_.statusCode===301||response_.statusCode===302)&&request.method==="POST")&&(requestOptions.method="GET",requestOptions.body=void 0,requestOptions.headers.delete("content-length"));let responseReferrerPolicy=parseReferrerPolicyFromHeader(headers);responseReferrerPolicy&&(requestOptions.referrerPolicy=responseReferrerPolicy),resolve(fetch(new Request(locationURL,requestOptions))),finalize();return}default:return reject(new TypeError(`Redirect option '${request.redirect}' is not a valid value of RequestRedirect`))}}signal&&response_.once("end",()=>{signal.removeEventListener("abort",abortAndFinalize)});let body=pump(response_,new PassThrough2,error=>{error&&reject(error)});process.version<"v12.10"&&response_.on("aborted",abortAndFinalize);let responseOptions={url:request.url,status:response_.statusCode,statusText:response_.statusMessage,headers,size:request.size,counter:request.counter,highWaterMark:request.highWaterMark},codings=headers.get("Content-Encoding");if(!request.compress||request.method==="HEAD"||codings===null||response_.statusCode===204||response_.statusCode===304){response=new Response(body,responseOptions),resolve(response);return}let zlibOptions={flush:zlib.Z_SYNC_FLUSH,finishFlush:zlib.Z_SYNC_FLUSH};if(codings==="gzip"||codings==="x-gzip"){body=pump(body,zlib.createGunzip(zlibOptions),error=>{error&&reject(error)}),response=new Response(body,responseOptions),resolve(response);return}if(codings==="deflate"||codings==="x-deflate"){let raw=pump(response_,new PassThrough2,error=>{error&&reject(error)});raw.once("data",chunk=>{(chunk[0]&15)===8?body=pump(body,zlib.createInflate(),error=>{error&&reject(error)}):body=pump(body,zlib.createInflateRaw(),error=>{error&&reject(error)}),response=new Response(body,responseOptions),resolve(response)}),raw.once("end",()=>{response||(response=new Response(body,responseOptions),resolve(response))});return}if(codings==="br"){body=pump(body,zlib.createBrotliDecompress(),error=>{error&&reject(error)}),response=new Response(body,responseOptions),resolve(response);return}response=new Response(body,responseOptions),resolve(response)}),writeToStream(request_,request).catch(reject)})}function fixResponseChunkedTransferBadEnding(request,errorCallback){let LAST_CHUNK=Buffer3.from(`0\r
+\r
+`),isChunkedTransfer=!1,properLastChunkReceived=!1,previousChunk;request.on("response",response=>{let{headers}=response;isChunkedTransfer=headers["transfer-encoding"]==="chunked"&&!headers["content-length"]}),request.on("socket",socket=>{let onSocketClose=()=>{if(isChunkedTransfer&&!properLastChunkReceived){let error=new Error("Premature close");error.code="ERR_STREAM_PREMATURE_CLOSE",errorCallback(error)}},onData=buf=>{properLastChunkReceived=Buffer3.compare(buf.slice(-5),LAST_CHUNK)===0,!properLastChunkReceived&&previousChunk&&(properLastChunkReceived=Buffer3.compare(previousChunk.slice(-3),LAST_CHUNK.slice(0,3))===0&&Buffer3.compare(buf.slice(-2),LAST_CHUNK.slice(3))===0),previousChunk=buf};socket.prependListener("close",onSocketClose),socket.on("data",onData),request.on("close",()=>{socket.removeListener("close",onSocketClose),socket.removeListener("data",onData)})})}var supportedSchemas,init_src=__esm({"node_modules/node-fetch/src/index.js"(){init_dist();init_body();init_response();init_headers();init_request();init_fetch_error();init_abort_error();init_is_redirect();init_esm_min();init_is();init_referrer();init_from();supportedSchemas=new Set(["data:","http:","https:"])}});init_src();export{AbortError,fetch_blob_default as Blob,FetchError,file_default as File,FormData,Headers,Request,Response,blobFrom,blobFromSync,fetch as default,fileFrom,fileFromSync,isRedirect};

package/dist/bundle/chunks/undici-D6ABF53Q.js

@@ -0,0 +1,2 @@
+import { createRequire as __piCreateRequire } from "node:module"; const require = __piCreateRequire(import.meta.url);
+import{require_undici}from"./chunk-CBHC6EL7.js";import"./chunk-JXWJOIH4.js";export default require_undici();

package/dist/bundle/chunks/webapi-AFS5FDJJ.js

@@ -0,0 +1,5 @@
+import { createRequire as __piCreateRequire } from "node:module"; const require = __piCreateRequire(import.meta.url);
+import{__export}from"./chunk-JXWJOIH4.js";var encoder=new TextEncoder,decoder=new TextDecoder,strictDecoder=new TextDecoder("utf-8",{fatal:!0}),MAX_INT32=2**32;function concat(...buffers){let size=buffers.reduce((acc,{length})=>acc+length,0),buf=new Uint8Array(size),i=0;for(let buffer of buffers)buf.set(buffer,i),i+=buffer.length;return buf}function writeUInt32BE(buf,value,offset){if(value<0||value>=MAX_INT32)throw new RangeError(`value must be >= 0 and <= ${MAX_INT32-1}. Received ${value}`);buf.set([value>>>24,value>>>16,value>>>8,value&255],offset)}function uint64be(value){let high=Math.floor(value/MAX_INT32),low=value%MAX_INT32,buf=new Uint8Array(8);return writeUInt32BE(buf,high,0),writeUInt32BE(buf,low,4),buf}function uint32be(value){let buf=new Uint8Array(4);return writeUInt32BE(buf,value),buf}function encode(string){let bytes=new Uint8Array(string.length);for(let i=0;i<string.length;i++){let code=string.charCodeAt(i);if(code>127)throw new TypeError("non-ASCII string encountered in encode()");bytes[i]=code}return bytes}var unusable=(name,prop="algorithm.name")=>new TypeError(`CryptoKey does not support this operation, its ${prop} must be ${name}`);function checkUsage(key,usage){if(usage&&!key.usages.includes(usage))throw new TypeError(`CryptoKey does not support this operation, its usages must include ${usage}.`)}function checkModulusLength(alg,key){let{modulusLength}=key.algorithm;if(typeof modulusLength!="number"||modulusLength<2048)throw new TypeError(`${alg} requires key modulusLength to be 2048 bits or larger`)}function checkCryptoKey(key,expected,usage){let algorithm=key.algorithm;if(algorithm.name!==expected.name)throw unusable(expected.name);if(expected.hash&&algorithm.hash?.name!==expected.hash)throw unusable(expected.hash,"algorithm.hash");if(expected.namedCurve&&algorithm.namedCurve!==expected.namedCurve)throw unusable(expected.namedCurve,"algorithm.namedCurve");if(expected.length!==void 0&&algorithm.length!==expected.length)throw unusable(expected.length,"algorithm.length");checkUsage(key,usage)}function message(msg,actual,...types){if(types.length>2){let last=types.pop();msg+=`one of type ${types.join(", ")}, or ${last}.`}else types.length===2?msg+=`one of type ${types[0]} or ${types[1]}.`:msg+=`of type ${types[0]}.`;return actual==null?msg+=` Received ${actual}`:typeof actual=="function"&&actual.name?msg+=` Received function ${actual.name}`:typeof actual=="object"&&actual!=null&&actual.constructor?.name&&(msg+=` Received an instance of ${actual.constructor.name}`),msg}var invalidKeyInput=(actual,...types)=>message("Key must be ",actual,...types),withAlg=(alg,actual,...types)=>message(`Key for the ${alg} algorithm must be `,actual,...types);var errors_exports={};__export(errors_exports,{JOSEAlgNotAllowed:()=>JOSEAlgNotAllowed,JOSEError:()=>JOSEError,JOSENotSupported:()=>JOSENotSupported,JWEDecryptionFailed:()=>JWEDecryptionFailed,JWEInvalid:()=>JWEInvalid,JWKInvalid:()=>JWKInvalid,JWKSInvalid:()=>JWKSInvalid,JWKSMultipleMatchingKeys:()=>JWKSMultipleMatchingKeys,JWKSNoMatchingKey:()=>JWKSNoMatchingKey,JWKSTimeout:()=>JWKSTimeout,JWSInvalid:()=>JWSInvalid,JWSSignatureVerificationFailed:()=>JWSSignatureVerificationFailed,JWTClaimValidationFailed:()=>JWTClaimValidationFailed,JWTExpired:()=>JWTExpired,JWTInvalid:()=>JWTInvalid});var JOSEError=class extends Error{static code="ERR_JOSE_GENERIC";code="ERR_JOSE_GENERIC";constructor(message2,options){super(message2,options),this.name=this.constructor.name,Error.captureStackTrace?.(this,this.constructor)}},JWTClaimValidationFailed=class extends JOSEError{static code="ERR_JWT_CLAIM_VALIDATION_FAILED";code="ERR_JWT_CLAIM_VALIDATION_FAILED";claim;reason;payload;constructor(message2,payload,claim="unspecified",reason="unspecified"){super(message2,{cause:{claim,reason,payload}}),this.claim=claim,this.reason=reason,this.payload=payload}},JWTExpired=class extends JOSEError{static code="ERR_JWT_EXPIRED";code="ERR_JWT_EXPIRED";claim;reason;payload;constructor(message2,payload,claim="unspecified",reason="unspecified"){super(message2,{cause:{claim,reason,payload}}),this.claim=claim,this.reason=reason,this.payload=payload}},JOSEAlgNotAllowed=class extends JOSEError{static code="ERR_JOSE_ALG_NOT_ALLOWED";code="ERR_JOSE_ALG_NOT_ALLOWED"},JOSENotSupported=class extends JOSEError{static code="ERR_JOSE_NOT_SUPPORTED";code="ERR_JOSE_NOT_SUPPORTED"},JWEDecryptionFailed=class extends JOSEError{static code="ERR_JWE_DECRYPTION_FAILED";code="ERR_JWE_DECRYPTION_FAILED";constructor(message2="decryption operation failed",options){super(message2,options)}},JWEInvalid=class extends JOSEError{static code="ERR_JWE_INVALID";code="ERR_JWE_INVALID"},JWSInvalid=class extends JOSEError{static code="ERR_JWS_INVALID";code="ERR_JWS_INVALID"},JWTInvalid=class extends JOSEError{static code="ERR_JWT_INVALID";code="ERR_JWT_INVALID"},JWKInvalid=class extends JOSEError{static code="ERR_JWK_INVALID";code="ERR_JWK_INVALID"},JWKSInvalid=class extends JOSEError{static code="ERR_JWKS_INVALID";code="ERR_JWKS_INVALID"},JWKSNoMatchingKey=class extends JOSEError{static code="ERR_JWKS_NO_MATCHING_KEY";code="ERR_JWKS_NO_MATCHING_KEY";constructor(message2="no applicable key found in the JSON Web Key Set",options){super(message2,options)}},JWKSMultipleMatchingKeys=class extends JOSEError{[Symbol.asyncIterator]=async function*(){};static code="ERR_JWKS_MULTIPLE_MATCHING_KEYS";code="ERR_JWKS_MULTIPLE_MATCHING_KEYS";constructor(message2="multiple matching keys found in the JSON Web Key Set",options){super(message2,options)}},JWKSTimeout=class extends JOSEError{static code="ERR_JWKS_TIMEOUT";code="ERR_JWKS_TIMEOUT";constructor(message2="request timed out",options){super(message2,options)}},JWSSignatureVerificationFailed=class extends JOSEError{static code="ERR_JWS_SIGNATURE_VERIFICATION_FAILED";code="ERR_JWS_SIGNATURE_VERIFICATION_FAILED";constructor(message2="signature verification failed",options){super(message2,options)}};function assertCryptoKey(key){if(!isCryptoKey(key))throw new Error("CryptoKey instance expected")}var isCryptoKey=key=>{if(key?.[Symbol.toStringTag]==="CryptoKey")return!0;try{return key instanceof CryptoKey}catch{return!1}},isKeyObject=key=>key?.[Symbol.toStringTag]==="KeyObject",isKeyLike=key=>isCryptoKey(key)||isKeyObject(key);var generateCek=enc=>crypto.getRandomValues(new Uint8Array(enc.cekBits>>3));function checkCekLength(cek,expected){let actual=cek.byteLength<<3;if(actual!==expected)throw new JWEInvalid(`Invalid Content Encryption Key length. Expected ${expected} bits, got ${actual} bits`)}var generateIv=enc=>crypto.getRandomValues(new Uint8Array(enc.ivBits>>3));function checkIvLength(enc,iv){if(iv.length<<3!==enc.ivBits)throw new JWEInvalid("Invalid Initialization Vector length")}async function cbcKeySetup(enc,cek,usage){if(!(cek instanceof Uint8Array))throw new TypeError(invalidKeyInput(cek,"Uint8Array"));let keySize=enc.cekBits>>1,encKey=await crypto.subtle.importKey("raw",cek.subarray(keySize>>3),"AES-CBC",!1,[usage]),macKey=await crypto.subtle.importKey("raw",cek.subarray(0,keySize>>3),{hash:`SHA-${keySize<<1}`,name:"HMAC"},!1,["sign"]);return[encKey,macKey,keySize]}async function cbcHmacTag(macKey,macData,keySize){return new Uint8Array((await crypto.subtle.sign("HMAC",macKey,macData)).slice(0,keySize>>3))}async function cbcEncrypt(enc,plaintext,cek,iv,aad){let[encKey,macKey,keySize]=await cbcKeySetup(enc,cek,"encrypt"),ciphertext=new Uint8Array(await crypto.subtle.encrypt({iv,name:"AES-CBC"},encKey,plaintext)),macData=concat(aad,iv,ciphertext,uint64be(aad.length*8)),tag2=await cbcHmacTag(macKey,macData,keySize);return{ciphertext,tag:tag2,iv}}async function timingSafeEqual(a,b){let algorithm={name:"HMAC",hash:"SHA-256"},key=await crypto.subtle.generateKey(algorithm,!1,["sign","verify"]),aHmac=await crypto.subtle.sign(algorithm,key,a);return crypto.subtle.verify(algorithm,key,aHmac,b)}async function cbcDecrypt(enc,cek,ciphertext,iv,tag2,aad){let[encKey,macKey,keySize]=await cbcKeySetup(enc,cek,"decrypt"),macData=concat(aad,iv,ciphertext,uint64be(aad.length*8)),expectedTag=await cbcHmacTag(macKey,macData,keySize),macCheckPassed;try{macCheckPassed=await timingSafeEqual(tag2,expectedTag)}catch{}if(!macCheckPassed)throw new JWEDecryptionFailed;let plaintext;try{plaintext=new Uint8Array(await crypto.subtle.decrypt({iv,name:"AES-CBC"},encKey,ciphertext))}catch{}if(!plaintext)throw new JWEDecryptionFailed;return plaintext}async function gcmEncrypt(enc,plaintext,cek,iv,aad){let encKey=cek instanceof Uint8Array?await crypto.subtle.importKey("raw",cek,"AES-GCM",!1,["encrypt"]):(checkCryptoKey(cek,enc.subtle,"encrypt"),cek),encrypted=new Uint8Array(await crypto.subtle.encrypt({additionalData:aad,iv,name:"AES-GCM",tagLength:128},encKey,plaintext)),tag2=encrypted.slice(-16);return{ciphertext:encrypted.slice(0,-16),tag:tag2,iv}}async function gcmDecrypt(enc,cek,ciphertext,iv,tag2,aad){let encKey=cek instanceof Uint8Array?await crypto.subtle.importKey("raw",cek,"AES-GCM",!1,["decrypt"]):(checkCryptoKey(cek,enc.subtle,"decrypt"),cek);try{return new Uint8Array(await crypto.subtle.decrypt({additionalData:aad,iv,name:"AES-GCM",tagLength:128},encKey,concat(ciphertext,tag2)))}catch{throw new JWEDecryptionFailed}}async function encrypt(enc,plaintext,cek,iv,aad){if(!isCryptoKey(cek)&&!(cek instanceof Uint8Array))throw new TypeError(invalidKeyInput(cek,"CryptoKey","KeyObject","Uint8Array","JSON Web Key"));return iv?checkIvLength(enc,iv):iv=generateIv(enc),cek instanceof Uint8Array&&checkCekLength(cek,enc.cekBits),enc.cbc?cbcEncrypt(enc,plaintext,cek,iv,aad):gcmEncrypt(enc,plaintext,cek,iv,aad)}async function decrypt(enc,cek,ciphertext,iv,tag2,aad){if(!isCryptoKey(cek)&&!(cek instanceof Uint8Array))throw new TypeError(invalidKeyInput(cek,"CryptoKey","KeyObject","Uint8Array","JSON Web Key"));if(!iv)throw new JWEInvalid("JWE Initialization Vector missing");if(!tag2)throw new JWEInvalid("JWE Authentication Tag missing");return checkIvLength(enc,iv),cek instanceof Uint8Array&&checkCekLength(cek,enc.cekBits),enc.cbc?cbcDecrypt(enc,cek,ciphertext,iv,tag2,aad):gcmDecrypt(enc,cek,ciphertext,iv,tag2,aad)}var base64url_exports={};__export(base64url_exports,{decode:()=>decode,encode:()=>encode2});function encodeBase64(input){if(Uint8Array.prototype.toBase64)return input.toBase64();let CHUNK_SIZE=32768,arr=[];for(let i=0;i<input.length;i+=CHUNK_SIZE)arr.push(String.fromCharCode.apply(null,input.subarray(i,i+CHUNK_SIZE)));return btoa(arr.join(""))}function decodeBase64(encoded){if(Uint8Array.fromBase64)return Uint8Array.fromBase64(encoded);let binary=atob(encoded),bytes=new Uint8Array(binary.length);for(let i=0;i<binary.length;i++)bytes[i]=binary.charCodeAt(i);return bytes}var invalid="The input to be decoded is not correctly encoded.";function decode(input){if(Uint8Array.fromBase64)try{return Uint8Array.fromBase64(typeof input=="string"?input:decoder.decode(input),{alphabet:"base64url"})}catch(cause){throw new TypeError(invalid,{cause})}let encoded=input;if(encoded instanceof Uint8Array&&(encoded=decoder.decode(encoded)),encoded.includes("+")||encoded.includes("/"))throw new TypeError(invalid);encoded=encoded.replace(/-/g,"+").replace(/_/g,"/");try{return decodeBase64(encoded)}catch{throw new TypeError(invalid)}}function encode2(input){let unencoded=input;return typeof unencoded=="string"&&(unencoded=encoder.encode(unencoded)),Uint8Array.prototype.toBase64?unencoded.toBase64({alphabet:"base64url",omitPadding:!0}):encodeBase64(unencoded).replace(/=/g,"").replace(/\+/g,"-").replace(/\//g,"_")}function isObject(input){if(typeof input!="object"||input===null||Object.prototype.toString.call(input)!=="[object Object]")return!1;let prototype=Object.getPrototypeOf(input);if(prototype===null)return!0;let proto=prototype;for(;Object.getPrototypeOf(proto)!==null;)proto=Object.getPrototypeOf(proto);return prototype===proto}function isDisjoint(...headers){let parameters=new Set;for(let header of headers)if(header)for(let parameter of Object.keys(header)){if(parameters.has(parameter))return!1;parameters.add(parameter)}return!0}var isJWK=key=>isObject(key)&&typeof key.kty=="string",isPrivateJWK=key=>key.kty!=="oct"&&(key.kty==="AKP"&&typeof key.priv=="string"||typeof key.d=="string"),isPublicJWK=key=>key.kty!=="oct"&&key.d===void 0&&key.priv===void 0,isSecretJWK=key=>key.kty==="oct"&&typeof key.k=="string";var unprotected=Symbol();function assertNotSet(value,name){if(value)throw new TypeError(`${name} can only be called once`)}function decodeBase64url(value,label,ErrorClass){try{return decode(value)}catch{throw new ErrorClass(`Failed to base64url decode the ${label}`)}}function encodeBase64url(value,label,ErrorClass){try{return encode(value)}catch{throw new ErrorClass(`The ${label} is not a valid base64url string`)}}async function digest(algorithm,data){let subtleDigest=`SHA-${algorithm.slice(-3)}`;return new Uint8Array(await crypto.subtle.digest(subtleDigest,data))}function parseJoseHeader(b64,ErrorClass,message2){let parsed;try{parsed=JSON.parse(strictDecoder.decode(decode(b64)))}catch{throw new ErrorClass(message2)}if(!isObject(parsed))throw new ErrorClass(message2);return parsed}async function jwkToKey(entry,jwk){if(jwk.kty==="RSA"&&"oth"in jwk&&jwk.oth!==void 0)throw new JOSENotSupported('RSA JWK "oth" (Other Primes Info) Parameter value is not supported');if(!entry.kty.includes(jwk.kty))throw new JOSENotSupported('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');let algorithm=entry.resolve?.({kty:jwk.kty,crv:jwk.crv})??entry.subtle,isPrivate=!!(jwk.d||jwk.priv),keyData={...jwk};return keyData.kty!=="AKP"&&delete keyData.alg,delete keyData.use,crypto.subtle.importKey("jwk",keyData,algorithm,jwk.ext??!isPrivate,jwk.key_ops??entry.usages[isPrivate?1:0])}var tag=key=>key[Symbol.toStringTag],jwkMatchesOp=(entry,key,usage)=>{let{alg}=entry;if(key.use!==void 0){let expected=usage==="sign"||usage==="verify"?"sig":"enc";if(key.use!==expected)throw new TypeError(`Invalid key for this operation, its "use" must be "${expected}" when present`)}if(key.alg!==void 0&&key.alg!==alg)throw new TypeError(`Invalid key for this operation, its "alg" must be "${alg}" when present`);if(Array.isArray(key.key_ops)){let expectedKeyOp=usage==="encrypt"||usage==="decrypt"?entry.ops?.[usage==="encrypt"?0:1]:usage;if(expectedKeyOp&&!key.key_ops.includes(expectedKeyOp))throw new TypeError(`Invalid key for this operation, its "key_ops" must include "${expectedKeyOp}" when present`)}};function checkKeyType(entry,key,usage){let{alg,secret}=entry,privateKey=usage==="decrypt"||usage==="sign";if(secret&&key instanceof Uint8Array)return[BYTES,key];if(isJWK(key)){if(secret?!isSecretJWK(key):!(privateKey?isPrivateJWK(key):isPublicJWK(key)))throw new TypeError(secret?'JSON Web Key for symmetric algorithms must have JWK "kty" (Key Type) equal to "oct" and the JWK "k" (Key Value) present':`JSON Web Key for this operation must be a ${privateKey?"private":"public"} JWK`);return jwkMatchesOp(entry,key,usage),[JWK,key]}if(!isKeyLike(key))throw new TypeError(secret?withAlg(alg,key,"CryptoKey","KeyObject","JSON Web Key","Uint8Array"):withAlg(alg,key,"CryptoKey","KeyObject","JSON Web Key"));if(secret){if(key.type!=="secret")throw new TypeError(`${tag(key)} instances for symmetric algorithms must be of type "secret"`)}else{if(key.type==="secret")throw new TypeError(`${tag(key)} instances for asymmetric algorithms must not be of type "secret"`);let expectedType=privateKey?"private":"public";if((key.type==="public"||key.type==="private")&&key.type!==expectedType){let operation=usage==="sign"?"signing":usage==="verify"?"verifying":`${usage.slice(0,-1)}tion`;throw new TypeError(`${tag(key)} instances for asymmetric algorithm ${operation} must be of type "${expectedType}"`)}}return isCryptoKey(key)?[CRYPTO,key]:[KEYOBJECT,key]}var BYTES=0,CRYPTO=1,KEYOBJECT=2,JWK=3,cache,nist={__proto__:null,prime256v1:"P-256",secp384r1:"P-384",secp521r1:"P-521"};function cached(key,alg,value){cache||=new WeakMap;let entry=cache.get(key);return value&&(entry?entry[alg]=value:cache.set(key,{__proto__:null,[alg]:value})),value??entry?.[alg]}var handleJWK=async(key,jwk,entry)=>cached(key,entry.alg)??cached(key,entry.alg,await jwkToKey(entry,{...jwk,alg:entry.alg})),handleKeyObject=(keyObject,entry)=>{let hit=cached(keyObject,entry.alg);if(hit)return hit;let isPublic=keyObject.type==="public",usages=entry.usages[isPublic?0:1],{asymmetricKeyType}=keyObject,crv=nist[keyObject.asymmetricKeyDetails?.namedCurve],params=entry.resolve?.({crv,asymmetricKeyType})??entry.subtle;return cached(keyObject,entry.alg,keyObject.toCryptoKey(params,isPublic,usages))};async function prepareKey(entry,key,usage){let tagged=checkKeyType(entry,key,usage);switch(tagged[0]){case BYTES:case CRYPTO:return tagged[1];case JWK:{let key2=tagged[1];if(key2.k)return decode(key2.k);if(!Object.isFrozen(key2)){let{key_ops}=key2;Array.isArray(key_ops)&&Object.freeze(key_ops),Object.freeze(key2)}return handleJWK(key2,key2,entry)}case KEYOBJECT:{let keyObject=tagged[1];return keyObject.type==="secret"?keyObject.export():"toCryptoKey"in keyObject&&typeof keyObject.toCryptoKey=="function"?handleKeyObject(keyObject,entry):handleJWK(keyObject,keyObject.export({format:"jwk"}),entry)}}}function table(entries){let out={__proto__:null};for(let alg in entries)out[alg]={...entries[alg],alg};return out}var wrap=[["encrypt","wrapKey"],["decrypt","unwrapKey"]],derive=[[],["deriveBits"]],none=[[],[]];function rsaes(bits){return{kty:["RSA"],subtle:{name:"RSA-OAEP",hash:`SHA-${bits}`},usages:wrap,ops:["wrapKey","unwrapKey"]}}function ecdh(){return{kty:["EC","OKP"],subtle:{name:"ECDH"},resolve:({kty,crv,asymmetricKeyType})=>{if(crv==="X25519"||asymmetricKeyType==="x25519")return{name:"X25519"};if(kty==="OKP")throw new JOSENotSupported('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');return{name:"ECDH",namedCurve:crv}},usages:derive,ops:[void 0,"deriveBits"]}}function aeskw(bits,gcm=!1){return{kty:["oct"],secret:!0,subtle:{name:gcm?"AES-GCM":"AES-KW",length:bits},usages:none,ops:gcm?["encrypt","decrypt"]:["wrapKey","unwrapKey"]}}function pbes2(){return{kty:["oct"],secret:!0,subtle:{name:"PBKDF2"},usages:none,ops:["deriveBits","deriveBits"]}}var JWE=table({dir:{kty:["oct"],secret:!0,subtle:{name:"AES-GCM"},usages:none,ops:["encrypt","decrypt"]},"RSA-OAEP":rsaes(1),"RSA-OAEP-256":rsaes(256),"RSA-OAEP-384":rsaes(384),"RSA-OAEP-512":rsaes(512),"ECDH-ES":ecdh(),"ECDH-ES+A128KW":ecdh(),"ECDH-ES+A192KW":ecdh(),"ECDH-ES+A256KW":ecdh(),A128KW:aeskw(128),A192KW:aeskw(192),A256KW:aeskw(256),A128GCMKW:aeskw(128,!0),A192GCMKW:aeskw(192,!0),A256GCMKW:aeskw(256,!0),"PBES2-HS256+A128KW":pbes2(),"PBES2-HS384+A192KW":pbes2(),"PBES2-HS512+A256KW":pbes2()}),contentOps=["encrypt","decrypt"];function contentEncryption(bits,cbc=!1){return{kty:["oct"],secret:!0,subtle:{name:cbc?"AES-CBC":"AES-GCM",length:bits},usages:none,ops:contentOps,cekBits:bits,ivBits:cbc?128:96,cbc}}var ENC=table({A128GCM:contentEncryption(128),A192GCM:contentEncryption(192),A256GCM:contentEncryption(256),"A128CBC-HS256":contentEncryption(256,!0),"A192CBC-HS384":contentEncryption(384,!0),"A256CBC-HS512":contentEncryption(512,!0)});function unsupported(parameter,name){throw new JOSENotSupported(`Invalid or unsupported "${parameter}" (JWE ${name}) header value`)}function jweAlgorithm(alg){return(typeof alg=="string"?JWE[alg]:void 0)??unsupported("alg","Algorithm")}function jweEncryption(enc){return(typeof enc=="string"?ENC[enc]:void 0)??unsupported("enc","Encryption Algorithm")}function checkEcdhCryptoKey(key,usage){if(key.algorithm.name!=="ECDH"&&key.algorithm.name!=="X25519")throw new TypeError("CryptoKey does not support this operation, its algorithm.name must be ECDH or X25519");checkUsage(key,usage)}async function aeskwCryptoKey(key,alg,usage){let expected=jweAlgorithm(alg).subtle,cryptoKey=key instanceof Uint8Array?await crypto.subtle.importKey("raw",key,"AES-KW",!0,[usage]):key;return checkCryptoKey(cryptoKey,expected,usage),cryptoKey}async function aeskwWrap(alg,key,cek){let cryptoKey=await aeskwCryptoKey(key,alg,"wrapKey"),cryptoKeyCek=await crypto.subtle.importKey("raw",cek,{hash:"SHA-256",name:"HMAC"},!0,["sign"]);return new Uint8Array(await crypto.subtle.wrapKey("raw",cryptoKeyCek,cryptoKey,"AES-KW"))}async function aeskwUnwrap(alg,key,encryptedKey){let cryptoKey=await aeskwCryptoKey(key,alg,"unwrapKey"),cryptoKeyCek=await crypto.subtle.unwrapKey("raw",encryptedKey,cryptoKey,"AES-KW",{hash:"SHA-256",name:"HMAC"},!0,["sign"]);return new Uint8Array(await crypto.subtle.exportKey("raw",cryptoKeyCek))}function checkRsaKey(alg,key,usage){checkCryptoKey(key,jweAlgorithm(alg).subtle,usage),checkModulusLength(alg,key)}function pbes2CryptoKey(key,alg){return key instanceof Uint8Array?crypto.subtle.importKey("raw",key,"PBKDF2",!1,["deriveBits"]):(checkCryptoKey(key,jweAlgorithm(alg).subtle,"deriveBits"),key)}async function deriveKey(p2s,alg,p2c,key){if(!(p2s instanceof Uint8Array)||p2s.length<8)throw new JWEInvalid("PBES2 Salt Input must be 8 or more octets");if(!Number.isSafeInteger(p2c)||Math.sign(p2c)!==1)throw new JWEInvalid("PBES2 Count Input must be a positive integer");let salt=concat(encode(alg),Uint8Array.of(0),p2s),keylen=parseInt(alg.slice(13,16),10),subtleAlg={hash:`SHA-${alg.slice(8,11)}`,iterations:p2c,name:"PBKDF2",salt},cryptoKey=await pbes2CryptoKey(key,alg);return new Uint8Array(await crypto.subtle.deriveBits(subtleAlg,cryptoKey,keylen))}function lengthAndInput(input){return concat(uint32be(input.length),input)}async function concatKdf(Z,L,OtherInfo){let dkLen=L>>3,hashLen=32,reps=Math.ceil(dkLen/hashLen),dk=new Uint8Array(reps*hashLen);for(let i=1;i<=reps;i++){let hashResult=await digest("sha256",concat(uint32be(i),Z,OtherInfo));dk.set(hashResult,(i-1)*hashLen)}return dk.slice(0,dkLen)}async function ecdhesDeriveKey(publicKey,privateKey,algorithm,keyLength,apu=new Uint8Array,apv=new Uint8Array){checkEcdhCryptoKey(publicKey),checkEcdhCryptoKey(privateKey,"deriveBits");let otherInfo=concat(lengthAndInput(encode(algorithm)),lengthAndInput(apu),lengthAndInput(apv),uint32be(keyLength)),Z=new Uint8Array(await crypto.subtle.deriveBits({name:publicKey.algorithm.name,public:publicKey},privateKey,publicKey.algorithm.name==="X25519"?256:Math.ceil(parseInt(publicKey.algorithm.namedCurve.slice(-3),10)/8)<<3));return concatKdf(Z,keyLength,otherInfo)}function assertEcdhKey(key){assertCryptoKey(key);let curve=key.algorithm.namedCurve;if(curve!=="P-256"&&curve!=="P-384"&&curve!=="P-521"&&key.algorithm.name!=="X25519")throw new JOSENotSupported("ECDH with the provided key is not allowed or not supported by your javascript runtime")}function assertEncryptedKey(encryptedKey){if(encryptedKey===void 0)throw new JWEInvalid("JWE Encrypted Key missing")}function assertNoEncryptedKey(encryptedKey){if(encryptedKey!==void 0)throw new JWEInvalid("Encountered unexpected JWE Encrypted Key")}async function decryptKeyManagement(alg,enc,key,encryptedKey,joseHeader,options){let entry=jweAlgorithm(alg);if(alg==="dir")return assertNoEncryptedKey(encryptedKey),key;switch(entry.subtle.name){case"ECDH":{if(alg==="ECDH-ES"&&assertNoEncryptedKey(encryptedKey),!isObject(joseHeader.epk))throw new JWEInvalid('JOSE Header "epk" (Ephemeral Public Key) missing or invalid');assertEcdhKey(key);let epk=await jwkToKey(entry,joseHeader.epk),partyUInfo,partyVInfo;if(joseHeader.apu!==void 0){if(typeof joseHeader.apu!="string")throw new JWEInvalid('JOSE Header "apu" (Agreement PartyUInfo) invalid');partyUInfo=decodeBase64url(joseHeader.apu,"apu",JWEInvalid)}if(joseHeader.apv!==void 0){if(typeof joseHeader.apv!="string")throw new JWEInvalid('JOSE Header "apv" (Agreement PartyVInfo) invalid');partyVInfo=decodeBase64url(joseHeader.apv,"apv",JWEInvalid)}let sharedSecret=await ecdhesDeriveKey(epk,key,alg==="ECDH-ES"?enc.alg:alg,alg==="ECDH-ES"?enc.cekBits:parseInt(alg.slice(-5,-2),10),partyUInfo,partyVInfo);return alg==="ECDH-ES"?sharedSecret:(assertEncryptedKey(encryptedKey),aeskwUnwrap(alg.slice(-6),sharedSecret,encryptedKey))}case"RSA-OAEP":return assertEncryptedKey(encryptedKey),assertCryptoKey(key),checkRsaKey(alg,key,"decrypt"),new Uint8Array(await crypto.subtle.decrypt("RSA-OAEP",key,encryptedKey));case"PBKDF2":{if(assertEncryptedKey(encryptedKey),typeof joseHeader.p2c!="number")throw new JWEInvalid('JOSE Header "p2c" (PBES2 Count) missing or invalid');let p2cLimit=options?.maxPBES2Count||1e4;if(joseHeader.p2c>p2cLimit)throw new JWEInvalid('JOSE Header "p2c" (PBES2 Count) out is of acceptable bounds');if(typeof joseHeader.p2s!="string")throw new JWEInvalid('JOSE Header "p2s" (PBES2 Salt) missing or invalid');let p2s=decodeBase64url(joseHeader.p2s,"p2s",JWEInvalid),derived=await deriveKey(p2s,alg,joseHeader.p2c,key);return aeskwUnwrap(alg.slice(-6),derived,encryptedKey)}case"AES-KW":return assertEncryptedKey(encryptedKey),aeskwUnwrap(alg,key,encryptedKey);case"AES-GCM":{if(assertEncryptedKey(encryptedKey),typeof joseHeader.iv!="string")throw new JWEInvalid('JOSE Header "iv" (Initialization Vector) missing or invalid');if(typeof joseHeader.tag!="string")throw new JWEInvalid('JOSE Header "tag" (Authentication Tag) missing or invalid');let iv;iv=decodeBase64url(joseHeader.iv,"iv",JWEInvalid);let tag2;return tag2=decodeBase64url(joseHeader.tag,"tag",JWEInvalid),decrypt(jweEncryption(alg.slice(0,-2)),key,encryptedKey,iv,tag2,new Uint8Array)}}}async function encryptKeyManagement(alg,enc,key,providedCek,providedParameters={}){let encryptedKey,parameters,cek,entry=jweAlgorithm(alg);if(alg==="dir")return[key,void 0,void 0];switch(entry.subtle.name){case"ECDH":{assertEcdhKey(key);let{apu,apv}=providedParameters,ephemeralKey;providedParameters.epk?ephemeralKey=await prepareKey(entry,providedParameters.epk,"decrypt"):ephemeralKey=(await crypto.subtle.generateKey(key.algorithm,!0,["deriveBits"])).privateKey;let subtle=crypto.subtle,exportableEpk=ephemeralKey;if(!exportableEpk.extractable){if(typeof subtle.getPublicKey!="function")throw new TypeError('CryptoKey for "epk" must be extractable');exportableEpk=await subtle.getPublicKey(ephemeralKey,[])}let{x,y,crv,kty}=await subtle.exportKey("jwk",exportableEpk),sharedSecret=await ecdhesDeriveKey(key,ephemeralKey,alg==="ECDH-ES"?enc.alg:alg,alg==="ECDH-ES"?enc.cekBits:parseInt(alg.slice(-5,-2),10),apu,apv);if(parameters={epk:{x,crv,kty}},kty==="EC"&&(parameters.epk.y=y),apu&&(parameters.apu=encode2(apu)),apv&&(parameters.apv=encode2(apv)),alg==="ECDH-ES"){cek=sharedSecret;break}cek=providedCek||generateCek(enc);let kwAlg=alg.slice(-6);encryptedKey=await aeskwWrap(kwAlg,sharedSecret,cek);break}case"RSA-OAEP":{cek=providedCek||generateCek(enc),assertCryptoKey(key),checkRsaKey(alg,key,"encrypt"),encryptedKey=new Uint8Array(await crypto.subtle.encrypt("RSA-OAEP",key,cek));break}case"PBKDF2":{cek=providedCek||generateCek(enc);let{p2c=2048,p2s=crypto.getRandomValues(new Uint8Array(16))}=providedParameters,derived=await deriveKey(p2s,alg,p2c,key);encryptedKey=await aeskwWrap(alg.slice(-6),derived,cek),parameters={p2c,p2s:encode2(p2s)};break}case"AES-KW":{cek=providedCek||generateCek(enc),encryptedKey=await aeskwWrap(alg,key,cek);break}case"AES-GCM":{cek=providedCek||generateCek(enc);let{iv}=providedParameters,wrapped=await encrypt(jweEncryption(alg.slice(0,-2)),cek,key,iv,new Uint8Array);encryptedKey=wrapped.ciphertext,parameters={iv:encode2(wrapped.iv),tag:encode2(wrapped.tag)};break}}return[cek,encryptedKey,parameters]}var JWS_RECOGNIZED={__proto__:null,b64:!0},JWE_RECOGNIZED={__proto__:null};function validateAlgorithms(option,algorithms){if(algorithms!==void 0&&(!Array.isArray(algorithms)||algorithms.some(s=>typeof s!="string")))throw new TypeError(`"${option}" option must be an array of strings`);if(algorithms)return new Set(algorithms)}function validateCritDuplicates(Err,protectedHeader){let{crit}=protectedHeader??{};if(Array.isArray(crit)&&new Set(crit).size!==crit.length)throw new Err('"crit" (Critical) Header Parameter MUST NOT contain duplicate values')}function validateCrit(Err,recognizedDefault,recognizedOption,protectedHeader,joseHeader){if(joseHeader.crit!==void 0&&protectedHeader?.crit===void 0)throw new Err('"crit" (Critical) Header Parameter MUST be integrity protected');if(!protectedHeader||protectedHeader.crit===void 0)return[];if(!Array.isArray(protectedHeader.crit)||protectedHeader.crit.length===0||protectedHeader.crit.some(input=>typeof input!="string"||input.length===0))throw new Err('"crit" (Critical) Header Parameter MUST be an array of non-empty strings when present');let recognized=recognizedOption===void 0?recognizedDefault:{__proto__:null,...recognizedOption,...recognizedDefault};for(let parameter of protectedHeader.crit){if(!(parameter in recognized))throw new JOSENotSupported(`Extension Header Parameter "${parameter}" is not recognized`);if(!Object.hasOwn(joseHeader,parameter)||joseHeader[parameter]===void 0)throw new Err(`Extension Header Parameter "${parameter}" is missing`);if(recognized[parameter]&&(!Object.hasOwn(protectedHeader,parameter)||protectedHeader[parameter]===void 0))throw new Err(`Extension Header Parameter "${parameter}" MUST be integrity protected`)}return protectedHeader.crit}function supported(name){if(typeof globalThis[name]>"u")throw new JOSENotSupported(`JWE "zip" (Compression Algorithm) Header Parameter requires the ${name} API.`)}async function compress(input){supported("CompressionStream");let cs=new CompressionStream("deflate-raw"),writer=cs.writable.getWriter();writer.write(input).catch(()=>{}),writer.close().catch(()=>{});let chunks=[],reader=cs.readable.getReader();for(;;){let{value,done}=await reader.read();if(done)break;chunks.push(value)}return concat(...chunks)}async function decompress(input,maxLength){supported("DecompressionStream");let ds=new DecompressionStream("deflate-raw"),writer=ds.writable.getWriter();writer.write(input).catch(()=>{}),writer.close().catch(()=>{});let chunks=[],length=0,reader=ds.readable.getReader();for(;;){let{value,done}=await reader.read();if(done)break;if(chunks.push(value),length+=value.byteLength,maxLength!==1/0&&length>maxLength)throw new JWEInvalid("Decompressed plaintext exceeded the configured limit")}return concat(...chunks)}function checkShared(jwe){let{ciphertext,protected:encodedProtected,unprotected:unprotected2}=jwe;if(jwe.iv!==void 0&&typeof jwe.iv!="string")throw new JWEInvalid("JWE Initialization Vector incorrect type");if(typeof ciphertext!="string")throw new JWEInvalid("JWE Ciphertext missing or incorrect type");if(jwe.tag!==void 0&&typeof jwe.tag!="string")throw new JWEInvalid("JWE Authentication Tag incorrect type");if(encodedProtected!==void 0&&typeof encodedProtected!="string")throw new JWEInvalid("JWE Protected Header incorrect type");if(jwe.aad!==void 0&&typeof jwe.aad!="string")throw new JWEInvalid("JWE AAD incorrect type");if(unprotected2!==void 0&&!isObject(unprotected2))throw new JWEInvalid("JWE Shared Unprotected Header incorrect type")}function checkRecipient(jwe){let{encrypted_key:encryptedKey,header}=jwe;if(encryptedKey!==void 0&&typeof encryptedKey!="string")throw new JWEInvalid("JWE Encrypted Key incorrect type");if(header!==void 0&&!isObject(header))throw new JWEInvalid("JWE Per-Recipient Unprotected Header incorrect type");if(jwe.protected===void 0&&header===void 0&&jwe.unprotected===void 0)throw new JWEInvalid("JOSE Header missing")}function shareJWE(jwe){let{protected:encodedProtected,ciphertext,iv,tag:tag2,aad}=jwe,parsedProt;encodedProtected&&(parsedProt=parseJoseHeader(encodedProtected,JWEInvalid,"JWE Protected Header is invalid"));let protectedHeader=encodedProtected!==void 0?encode(encodedProtected):new Uint8Array;return[parsedProt,decodeBase64url(ciphertext,"ciphertext",JWEInvalid),iv!==void 0?decodeBase64url(iv,"iv",JWEInvalid):void 0,tag2!==void 0?decodeBase64url(tag2,"tag",JWEInvalid):void 0,aad!==void 0?concat(protectedHeader,encode("."),encodeBase64url(aad,"aad",JWEInvalid)):protectedHeader]}function decryptResult(jwe,decrypted){let[plaintext,parsedProt,key,resolvedKey]=decrypted,{protected:encodedProtected,aad,unprotected:unprotected2,header}=jwe,result={plaintext};return encodedProtected!==void 0&&(result.protectedHeader=parsedProt),aad!==void 0&&(result.additionalAuthenticatedData=decodeBase64url(aad,"aad",JWEInvalid)),unprotected2!==void 0&&(result.sharedUnprotectedHeader=unprotected2),header!==void 0&&(result.unprotectedHeader=header),resolvedKey?{...result,key}:result}function prepareDecrypt(options){return[options&&validateAlgorithms("keyManagementAlgorithms",options.keyManagementAlgorithms),options&&validateAlgorithms("contentEncryptionAlgorithms",options.contentEncryptionAlgorithms),options]}async function decryptRecipient(jwe,token,shared,key){let[keyManagementAlgorithms,contentEncryptionAlgorithms,options]=shared,[parsedProt,ciphertext,iv,tag2,additionalData]=token,{encrypted_key:encodedKey,header,unprotected:unprotected2}=jwe,joseHeader;if(header!==void 0||unprotected2!==void 0){if(!isDisjoint(parsedProt,header,unprotected2))throw new JWEInvalid("JWE Protected, JWE Unprotected Header, and JWE Per-Recipient Unprotected Header Parameter names must be disjoint");joseHeader={...parsedProt,...header,...unprotected2}}else joseHeader=parsedProt??{};if(validateCrit(JWEInvalid,JWE_RECOGNIZED,options?.crit,parsedProt,joseHeader),joseHeader.zip!==void 0&&joseHeader.zip!=="DEF")throw new JOSENotSupported('Unsupported JWE "zip" (Compression Algorithm) Header Parameter value.');if(joseHeader.zip!==void 0&&!parsedProt?.zip)throw new JWEInvalid('JWE "zip" (Compression Algorithm) Header Parameter MUST be in a protected header.');let{alg,enc}=joseHeader;if(typeof alg!="string"||!alg)throw new JWEInvalid("missing JWE Algorithm (alg) in JWE Header");if(typeof enc!="string"||!enc)throw new JWEInvalid("missing JWE Encryption Algorithm (enc) in JWE Header");if(keyManagementAlgorithms&&!keyManagementAlgorithms.has(alg)||!keyManagementAlgorithms&&alg.startsWith("PBES2"))throw new JOSEAlgNotAllowed('"alg" (Algorithm) Header Parameter value not allowed');if(contentEncryptionAlgorithms&&!contentEncryptionAlgorithms.has(enc))throw new JOSEAlgNotAllowed('"enc" (Encryption Algorithm) Header Parameter value not allowed');let encEntry=jweEncryption(enc),encryptedKey;encodedKey!==void 0&&(encryptedKey=decodeBase64url(encodedKey,"encrypted_key",JWEInvalid));let resolvedKey=!1;typeof key=="function"&&(key=await key(parsedProt,jwe),resolvedKey=!0);let algEntry=jweAlgorithm(alg),k=await prepareKey(alg==="dir"?encEntry:algEntry,key,"decrypt"),cek;try{cek=await decryptKeyManagement(alg,encEntry,k,encryptedKey,joseHeader,options)}catch(err){if(err instanceof TypeError||err instanceof JWEInvalid||err instanceof JOSENotSupported)throw err;cek=generateCek(encEntry)}let plaintext=await decrypt(encEntry,cek,ciphertext,iv,tag2,additionalData);if(joseHeader.zip==="DEF"){let maxDecompressedLength=options?.maxDecompressedLength??25e4;if(maxDecompressedLength===0)throw new JOSENotSupported('JWE "zip" (Compression Algorithm) Header Parameter is not supported.');if(maxDecompressedLength!==1/0&&(!Number.isSafeInteger(maxDecompressedLength)||maxDecompressedLength<1))throw new TypeError("maxDecompressedLength must be 0, a positive safe integer, or Infinity");plaintext=await decompress(plaintext,maxDecompressedLength).catch(cause=>{throw cause instanceof JWEInvalid?cause:new JWEInvalid("Failed to decompress plaintext",{cause})})}return[plaintext,parsedProt,k,resolvedKey]}async function decryptJWE(jwe,shared,key){return decryptRecipient(jwe,shareJWE(jwe),shared,key)}async function decryptCompact(jwe,shared,key){if(jwe instanceof Uint8Array&&(jwe=decoder.decode(jwe)),typeof jwe!="string")throw new JWEInvalid("Compact JWE must be a string or Uint8Array");let{0:protectedHeader,1:encryptedKey,2:iv,3:ciphertext,4:tag2,length}=jwe.split(".");if(length!==5)throw new JWEInvalid("Invalid Compact JWE");return decryptJWE({ciphertext,iv:iv||void 0,protected:protectedHeader,tag:tag2||void 0,encrypted_key:encryptedKey||void 0},shared,key)}async function compactDecrypt(jwe,key,options){let decrypted=await decryptCompact(jwe,prepareDecrypt(options),key),result={plaintext:decrypted[0],protectedHeader:decrypted[1]};return typeof key=="function"?{...result,key:decrypted[2]}:result}async function flattenedDecrypt(jwe,key,options){if(!isObject(jwe))throw new JWEInvalid("Flattened JWE must be an object");return checkShared(jwe),checkRecipient(jwe),decryptResult(jwe,await decryptJWE(jwe,prepareDecrypt(options),key))}async function generalDecrypt(jwe,key,options){if(!isObject(jwe))throw new JWEInvalid("General JWE must be an object");if(!Array.isArray(jwe.recipients)||!jwe.recipients.every(isObject))throw new JWEInvalid("JWE Recipients missing or incorrect type");if(!jwe.recipients.length)throw new JWEInvalid("JWE Recipients has no members");let shared,token;try{checkShared(jwe),shared=prepareDecrypt(options),token=shareJWE(jwe)}catch{throw new JWEDecryptionFailed}if(jwe.recipients.length>1)for(let{header}of jwe.recipients){let alg=token[0]?.alg??header?.alg??jwe.unprotected?.alg;if(alg==="dir"||alg==="ECDH-ES")throw new JWEInvalid(`"${alg}" alg may only have a single recipient`)}for(let recipient of jwe.recipients)try{let flattened={aad:jwe.aad,ciphertext:jwe.ciphertext,encrypted_key:recipient.encrypted_key,header:recipient.header,iv:jwe.iv,protected:jwe.protected,tag:jwe.tag,unprotected:jwe.unprotected};return checkRecipient(flattened),decryptResult(flattened,await decryptRecipient(flattened,token,shared,key))}catch{}throw new JWEDecryptionFailed}function checkEncryptHeaders(input){let[,protectedHeader,unprotectedHeader,sharedUnprotectedHeader,,,,,crit]=input;if(!isDisjoint(protectedHeader,unprotectedHeader,sharedUnprotectedHeader))throw new JWEInvalid("JWE Protected, JWE Shared Unprotected and JWE Per-Recipient Header Parameter names must be disjoint");let joseHeader={...protectedHeader,...unprotectedHeader,...sharedUnprotectedHeader};if(validateCrit(JWEInvalid,JWE_RECOGNIZED,crit,protectedHeader,joseHeader),joseHeader.zip!==void 0&&joseHeader.zip!=="DEF")throw new JOSENotSupported('Unsupported JWE "zip" (Compression Algorithm) Header Parameter value.');if(joseHeader.zip!==void 0&&!protectedHeader?.zip)throw new JWEInvalid('JWE "zip" (Compression Algorithm) Header Parameter MUST be in a protected header.');let{alg,enc}=joseHeader;if(typeof alg!="string"||!alg)throw new JWEInvalid('JWE "alg" (Algorithm) Header Parameter missing or invalid');if(typeof enc!="string"||!enc)throw new JWEInvalid('JWE "enc" (Encryption Algorithm) Header Parameter missing or invalid');return[joseHeader,alg,enc,jweEncryption(enc)]}async function encryptJWE(input,checked,key){let[joseHeader,alg,,encEntry]=checked,[inputPlaintext,inputProtectedHeader,inputUnprotectedHeader,sharedUnprotectedHeader,aad,providedCek,inputIv,keyManagementParameters,,unprotectedParameters]=input,protectedHeader=inputProtectedHeader,unprotectedHeader=inputUnprotectedHeader;if(providedCek&&(alg==="dir"||alg==="ECDH-ES"))throw new TypeError(`setContentEncryptionKey cannot be called with JWE "alg" (Algorithm) Header ${alg}`);let algEntry=jweAlgorithm(alg),k=await prepareKey(alg==="dir"?encEntry:algEntry,key,"encrypt"),[cek,encryptedKey,parameters]=await encryptKeyManagement(alg,encEntry,k,providedCek,keyManagementParameters);parameters&&(unprotectedParameters?unprotectedHeader=unprotectedHeader?{...unprotectedHeader,...parameters}:parameters:protectedHeader=protectedHeader?{...protectedHeader,...parameters}:parameters);let protectedHeaderS,protectedHeaderB;protectedHeader?(protectedHeaderS=encode2(JSON.stringify(protectedHeader)),protectedHeaderB=encode(protectedHeaderS)):(protectedHeaderS="",protectedHeaderB=new Uint8Array);let additionalData,aadMember;aad?.byteLength?(aadMember=encode2(aad),additionalData=concat(protectedHeaderB,encode("."),encode(aadMember))):additionalData=protectedHeaderB;let plaintext=inputPlaintext;joseHeader.zip==="DEF"&&(plaintext=await compress(plaintext).catch(cause=>{throw new JWEInvalid("Failed to compress plaintext",{cause})}));let{ciphertext,tag:tag2,iv}=await encrypt(encEntry,plaintext,cek,inputIv,additionalData),jwe={ciphertext:encode2(ciphertext)};return iv&&(jwe.iv=encode2(iv)),tag2&&(jwe.tag=encode2(tag2)),encryptedKey&&(jwe.encrypted_key=encode2(encryptedKey)),aadMember&&(jwe.aad=aadMember),protectedHeader&&(jwe.protected=protectedHeaderS),sharedUnprotectedHeader&&(jwe.unprotected=sharedUnprotectedHeader),unprotectedHeader&&(jwe.header=unprotectedHeader),jwe}async function createJWE(input,key){return encryptJWE(input,checkEncryptHeaders(input),key)}var FlattenedEncrypt=class{#plaintext;#protectedHeader;#sharedUnprotectedHeader;#unprotectedHeader;#aad;#cek;#iv;#keyManagementParameters;constructor(plaintext){if(!(plaintext instanceof Uint8Array))throw new TypeError("plaintext must be an instance of Uint8Array");this.#plaintext=plaintext}setKeyManagementParameters(parameters){return assertNotSet(this.#keyManagementParameters,"setKeyManagementParameters"),this.#keyManagementParameters=parameters,this}setProtectedHeader(protectedHeader){return assertNotSet(this.#protectedHeader,"setProtectedHeader"),this.#protectedHeader=protectedHeader,this}setSharedUnprotectedHeader(sharedUnprotectedHeader){return assertNotSet(this.#sharedUnprotectedHeader,"setSharedUnprotectedHeader"),this.#sharedUnprotectedHeader=sharedUnprotectedHeader,this}setUnprotectedHeader(unprotectedHeader){return assertNotSet(this.#unprotectedHeader,"setUnprotectedHeader"),this.#unprotectedHeader=unprotectedHeader,this}setAdditionalAuthenticatedData(aad){return this.#aad=aad,this}setContentEncryptionKey(cek){return assertNotSet(this.#cek,"setContentEncryptionKey"),this.#cek=cek,this}setInitializationVector(iv){return assertNotSet(this.#iv,"setInitializationVector"),this.#iv=iv,this}async encrypt(key,options){if(!this.#protectedHeader&&!this.#unprotectedHeader&&!this.#sharedUnprotectedHeader)throw new JWEInvalid("either setProtectedHeader, setUnprotectedHeader, or sharedUnprotectedHeader must be called before #encrypt()");return validateCritDuplicates(JWEInvalid,this.#protectedHeader),createJWE([this.#plaintext,this.#protectedHeader,this.#unprotectedHeader,this.#sharedUnprotectedHeader,this.#aad,this.#cek,this.#iv,this.#keyManagementParameters,options?.crit,options?unprotected in options:!1],key)}};var IndividualRecipient=class{#parent;state;constructor(enc,key,crit){this.#parent=enc,this.state=[void 0,void 0,key,crit]}setUnprotectedHeader(unprotectedHeader){return assertNotSet(this.state[0],"setUnprotectedHeader"),this.state[0]=unprotectedHeader,this}setKeyManagementParameters(parameters){return assertNotSet(this.state[1],"setKeyManagementParameters"),this.state[1]=parameters,this}addRecipient(...args){return this.#parent.addRecipient(...args)}encrypt(...args){return this.#parent.encrypt(...args)}done(){return this.#parent}};function copyOptionalMembers(flattened,jwe,recipient){let{aad,protected:protectedHeader,unprotected:unprotected2,header}=flattened;aad&&(jwe.aad=aad),protectedHeader&&(jwe.protected=protectedHeader),unprotected2&&(jwe.unprotected=unprotected2),header&&(recipient.header=header)}var GeneralEncrypt=class{#plaintext;#recipients=[];#protectedHeader;#unprotectedHeader;#aad;constructor(plaintext){this.#plaintext=plaintext}addRecipient(key,options){let recipient=new IndividualRecipient(this,key,options?.crit);return this.#recipients.push(recipient),recipient}setProtectedHeader(protectedHeader){return assertNotSet(this.#protectedHeader,"setProtectedHeader"),this.#protectedHeader=protectedHeader,this}setSharedUnprotectedHeader(sharedUnprotectedHeader){return assertNotSet(this.#unprotectedHeader,"setSharedUnprotectedHeader"),this.#unprotectedHeader=sharedUnprotectedHeader,this}setAdditionalAuthenticatedData(aad){return this.#aad=aad,this}async encrypt(){if(!this.#recipients.length)throw new JWEInvalid("at least one recipient must be added");if(!(this.#plaintext instanceof Uint8Array))throw new TypeError("plaintext must be an instance of Uint8Array");if(this.#recipients.length===1){let[recipient]=this.#recipients,[unprotectedHeader,keyManagementParameters,key,crit]=recipient.state,flattened=await new FlattenedEncrypt(this.#plaintext).setAdditionalAuthenticatedData(this.#aad).setProtectedHeader(this.#protectedHeader).setSharedUnprotectedHeader(this.#unprotectedHeader).setUnprotectedHeader(unprotectedHeader).setKeyManagementParameters(keyManagementParameters).encrypt(key,{crit}),jwe2={ciphertext:flattened.ciphertext,iv:flattened.iv,recipients:[{}],tag:flattened.tag};return flattened.encrypted_key&&(jwe2.recipients[0].encrypted_key=flattened.encrypted_key),copyOptionalMembers(flattened,jwe2,jwe2.recipients[0]),jwe2}validateCritDuplicates(JWEInvalid,this.#protectedHeader);let enc,inputs=[],checked=[];for(let i=0;i<this.#recipients.length;i++){let recipient=this.#recipients[i],[unprotectedHeader,keyManagementParameters,,crit]=recipient.state,input=[this.#plaintext,this.#protectedHeader,unprotectedHeader,this.#unprotectedHeader,this.#aad,void 0,void 0,keyManagementParameters,crit,!0],headers=checkEncryptHeaders(input);if(inputs.push(input),checked.push(headers),headers[1]==="dir"||headers[1]==="ECDH-ES")throw new JWEInvalid(`"${headers[1]}" alg may only have a single recipient`);if(!enc)enc=headers[2];else if(enc!==headers[2])throw new JWEInvalid('JWE "enc" (Encryption Algorithm) Header Parameter must be the same for all recipients')}let cek=generateCek(checked[0][3]),jwe={ciphertext:"",recipients:[]};for(let i=0;i<this.#recipients.length;i++){let recipient=this.#recipients[i],[unprotectedHeader,keyManagementParameters,key]=recipient.state,target={};if(jwe.recipients.push(target),i===0){inputs[0][5]=cek;let flattened=await encryptJWE(inputs[0],checked[0],key);jwe.ciphertext=flattened.ciphertext,jwe.iv=flattened.iv,jwe.tag=flattened.tag,target.encrypted_key=flattened.encrypted_key,copyOptionalMembers(flattened,jwe,target);continue}let[,alg,,encEntry]=checked[i],k=await prepareKey(jweAlgorithm(alg),key,"encrypt"),[,encryptedKey,parameters]=await encryptKeyManagement(alg,encEntry,k,cek,keyManagementParameters);target.encrypted_key=encode2(encryptedKey),(unprotectedHeader||parameters)&&(target.header={...unprotectedHeader,...parameters})}return jwe}};async function getSigKey(entry,key,usage){return key instanceof Uint8Array?crypto.subtle.importKey("raw",key,entry.subtle,!1,[usage]):(checkCryptoKey(key,entry.subtle,usage),entry.minRsaBits&&checkModulusLength(entry.alg,key),key)}async function sign(entry,key,data){let cryptoKey=await getSigKey(entry,key,"sign"),signature=await crypto.subtle.sign(entry.signing,cryptoKey,data);return new Uint8Array(signature)}async function verify(entry,key,signature,data){let cryptoKey=await getSigKey(entry,key,"verify");try{return await crypto.subtle.verify(entry.signing,cryptoKey,signature,data)}catch{return!1}}var sig=[["verify"],["sign"]];function hmac(bits){let subtle={name:"HMAC",hash:`SHA-${bits}`};return{kty:["oct"],secret:!0,subtle,signing:subtle,usages:sig}}function rsa(bits,saltLength){let subtle={name:saltLength?"RSA-PSS":"RSASSA-PKCS1-v1_5",hash:`SHA-${bits}`};return{kty:["RSA"],subtle,signing:saltLength?{...subtle,saltLength}:subtle,usages:sig,minRsaBits:2048}}function ecdsa(crv,bits){return{kty:["EC"],crv,subtle:{name:"ECDSA",namedCurve:crv},signing:{name:"ECDSA",hash:`SHA-${bits}`},usages:sig}}function eddsa(){let subtle={name:"Ed25519"};return{kty:["OKP"],crv:"Ed25519",subtle,signing:subtle,usages:sig}}function mldsa(bits){let subtle={name:`ML-DSA-${bits}`};return{kty:["AKP"],subtle,signing:subtle,usages:sig}}var JWS=table({HS256:hmac(256),HS384:hmac(384),HS512:hmac(512),RS256:rsa(256),RS384:rsa(384),RS512:rsa(512),PS256:rsa(256,32),PS384:rsa(384,48),PS512:rsa(512,64),ES256:ecdsa("P-256",256),ES384:ecdsa("P-384",384),ES512:ecdsa("P-521",512),EdDSA:eddsa(),Ed25519:eddsa(),"ML-DSA-44":mldsa(44),"ML-DSA-65":mldsa(65),"ML-DSA-87":mldsa(87)});function jwsAlgorithm(alg){let entry=typeof alg=="string"?JWS[alg]:void 0;if(!entry)throw new JOSENotSupported(`alg ${alg} is not supported either by JOSE or your javascript runtime`);return entry}function verifyResult(jws,verified){let[payload,parsedProt,,key,resolvedKey]=verified,result={payload};return jws.protected!==void 0&&(result.protectedHeader=parsedProt),jws.header!==void 0&&(result.unprotectedHeader=jws.header),resolvedKey?{...result,key}:result}function prepareVerify(options){return[options&&validateAlgorithms("algorithms",options.algorithms),options?.crit]}async function verifySignature(jws,shared,key){let{protected:encodedProtected,header,payload:inputPayload}=jws,parsedProt={};encodedProtected&&(parsedProt=parseJoseHeader(encodedProtected,JWSInvalid,"JWS Protected Header is invalid"));let joseHeader;if(header!==void 0){if(!isDisjoint(parsedProt,header))throw new JWSInvalid("JWS Protected and JWS Unprotected Header Parameter names must be disjoint");joseHeader={...parsedProt,...header}}else joseHeader=parsedProt;let extensions=validateCrit(JWSInvalid,JWS_RECOGNIZED,shared[1],parsedProt,joseHeader),b64=!0;if(extensions.includes("b64")&&(b64=parsedProt.b64,typeof b64!="boolean"))throw new JWSInvalid('The "b64" (base64url-encode payload) Header Parameter must be a boolean');let{alg}=joseHeader;if(typeof alg!="string"||!alg)throw new JWSInvalid('JWS "alg" (Algorithm) Header Parameter missing or invalid');if(shared[0]&&!shared[0].has(alg))throw new JOSEAlgNotAllowed('"alg" (Algorithm) Header Parameter value not allowed');if(b64){if(typeof inputPayload!="string")throw new JWSInvalid("JWS Payload must be a string")}else if(typeof inputPayload!="string"&&!(inputPayload instanceof Uint8Array))throw new JWSInvalid("JWS Payload must be a string or an Uint8Array instance");let resolvedKey=!1;typeof key=="function"&&(key=await key(parsedProt,jws),resolvedKey=!0);let entry=jwsAlgorithm(alg),data=concat(encodedProtected!==void 0?encode(encodedProtected):new Uint8Array,encode("."),typeof inputPayload=="string"?b64?shared[2]??=encodeBase64url(inputPayload,"payload",JWSInvalid):encoder.encode(inputPayload):inputPayload),signature=decodeBase64url(jws.signature,"signature",JWSInvalid),k=await prepareKey(entry,key,"verify");if(!await verify(entry,k,signature,data))throw new JWSSignatureVerificationFailed;let payload;return b64?payload=decodeBase64url(inputPayload,"payload",JWSInvalid):typeof inputPayload=="string"?payload=encoder.encode(inputPayload):payload=inputPayload,[payload,parsedProt,b64,k,resolvedKey]}async function verifyCompact(jws,shared,key){if(jws instanceof Uint8Array&&(jws=decoder.decode(jws)),typeof jws!="string")throw new JWSInvalid("Compact JWS must be a string or Uint8Array");let{0:protectedHeader,1:payload,2:signature,length}=jws.split(".");if(length!==3)throw new JWSInvalid("Invalid Compact JWS");return verifySignature({payload,protected:protectedHeader,signature},shared,key)}async function compactVerify(jws,key,options){let verified=await verifyCompact(jws,prepareVerify(options),key),result={payload:verified[0],protectedHeader:verified[1]};return typeof key=="function"?{...result,key:verified[3]}:result}async function flattenedVerify(jws,key,options){if(!isObject(jws))throw new JWSInvalid("Flattened JWS must be an object");if(jws.protected===void 0&&jws.header===void 0)throw new JWSInvalid('Flattened JWS must have either of the "protected" or "header" members');if(jws.protected!==void 0&&typeof jws.protected!="string")throw new JWSInvalid("JWS Protected Header incorrect type");if(jws.payload===void 0)throw new JWSInvalid("JWS Payload missing");if(typeof jws.signature!="string")throw new JWSInvalid("JWS Signature missing or incorrect type");if(jws.header!==void 0&&!isObject(jws.header))throw new JWSInvalid("JWS Unprotected Header incorrect type");return verifyResult(jws,await verifySignature(jws,prepareVerify(options),key))}async function generalVerify(jws,key,options){if(!isObject(jws))throw new JWSInvalid("General JWS must be an object");let{signatures,payload}=jws;if(!Array.isArray(signatures)||!signatures.every(isObject))throw new JWSInvalid("JWS Signatures missing or incorrect type");let shared;try{if(payload===void 0)throw new Error;shared=prepareVerify(options)}catch{throw new JWSSignatureVerificationFailed}for(let signature of signatures)try{let{protected:encodedProtected,header,signature:encodedSignature}=signature;if(encodedProtected===void 0&&header===void 0)throw new Error;if(encodedProtected!==void 0&&typeof encodedProtected!="string")throw new Error;if(typeof encodedSignature!="string")throw new Error;if(header!==void 0&&!isObject(header))throw new Error;return verifyResult(signature,await verifySignature({header,payload,protected:encodedProtected,signature:encodedSignature},shared,key))}catch{}throw new JWSSignatureVerificationFailed}var epoch=date=>Math.floor(date.getTime()/1e3),multipliers={s:1,m:60,h:3600,d:86400,w:604800,y:31557600},REGEX=/^(\+|\-)? ?(\d+|\d+\.\d+) ?(seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|weeks?|w|years?|yrs?|y)(?: (ago|from now))?$/i,checkFailed="check_failed";function secs(str){let matched=REGEX.exec(str);if(!matched||matched[4]&&matched[1])throw new TypeError("Invalid time period format");let value=parseFloat(matched[2]),numericDate2=Math.round(value*multipliers[matched[3][0].toLowerCase()]);return matched[1]==="-"||matched[4]==="ago"?-numericDate2:numericDate2}function validateInput(label,input){if(!Number.isFinite(input))throw new TypeError(`Invalid ${label} input`);return input}function numericDate(value,label){return typeof value=="number"?validateInput(label,value):value instanceof Date?validateInput(label,epoch(value)):epoch(new Date)+secs(value)}var normalizeTyp=value=>value.includes("/")?value.toLowerCase():`application/${value.toLowerCase()}`,checkAudiencePresence=(audPayload,audOption)=>typeof audPayload=="string"?audOption.includes(audPayload):Array.isArray(audPayload)?audOption.some(aud=>audPayload.includes(aud)):!1;function validateNumericDate(payload,claim,required=!1){let value=payload[claim];if(!(value===void 0&&!required)){if(typeof value!="number")throw new JWTClaimValidationFailed(`"${claim}" claim must be a number`,payload,claim,"invalid");return value}}function unexpectedClaim(payload,claim){throw new JWTClaimValidationFailed(`unexpected "${claim}" claim value`,payload,claim,checkFailed)}function validateClaimsSet(protectedHeader,encodedPayload,options={}){let payload;try{payload=JSON.parse(strictDecoder.decode(encodedPayload))}catch{}if(!isObject(payload))throw new JWTInvalid("JWT Claims Set must be a top-level JSON object");let{typ}=options;if(typ&&(typeof protectedHeader.typ!="string"||normalizeTyp(protectedHeader.typ)!==normalizeTyp(typ)))throw new JWTClaimValidationFailed('unexpected "typ" JWT header value',payload,"typ",checkFailed);let{requiredClaims=[],issuer,subject,audience,maxTokenAge}=options,presenceCheck=[...requiredClaims];maxTokenAge!==void 0&&presenceCheck.push("iat"),audience!==void 0&&presenceCheck.push("aud"),subject!==void 0&&presenceCheck.push("sub"),issuer!==void 0&&presenceCheck.push("iss");for(let claim of new Set(presenceCheck.reverse()))if(!Object.hasOwn(payload,claim))throw new JWTClaimValidationFailed(`missing required "${claim}" claim`,payload,claim,"missing");issuer!==void 0&&!(Array.isArray(issuer)?issuer:[issuer]).includes(payload.iss)&&unexpectedClaim(payload,"iss"),subject!==void 0&&payload.sub!==subject&&unexpectedClaim(payload,"sub"),audience!==void 0&&!checkAudiencePresence(payload.aud,typeof audience=="string"?[audience]:audience)&&unexpectedClaim(payload,"aud");let{clockTolerance}=options,tolerance=0;if(typeof clockTolerance=="string")tolerance=secs(clockTolerance);else if(clockTolerance!==void 0){if(typeof clockTolerance!="number")throw new TypeError("Invalid clockTolerance option type");tolerance=clockTolerance}validateInput("clockTolerance option",tolerance);let{currentDate}=options,now=validateInput("currentDate option",epoch(currentDate||new Date)),iat=validateNumericDate(payload,"iat",maxTokenAge!==void 0),nbf=validateNumericDate(payload,"nbf");if(nbf!==void 0&&nbf>now+tolerance)throw new JWTClaimValidationFailed('"nbf" claim timestamp check failed',payload,"nbf",checkFailed);let exp=validateNumericDate(payload,"exp");if(exp!==void 0&&exp<=now-tolerance)throw new JWTExpired('"exp" claim timestamp check failed',payload,"exp",checkFailed);if(maxTokenAge!==void 0){let age=now-iat,max=typeof maxTokenAge=="number"?maxTokenAge:secs(maxTokenAge);if(age-tolerance>max)throw new JWTExpired('"iat" claim timestamp check failed (too far in the past)',payload,"iat",checkFailed);if(age<0-tolerance)throw new JWTClaimValidationFailed('"iat" claim timestamp check failed (it should be in the past)',payload,"iat",checkFailed)}return payload}var JWTClaimsBuilder=class{#payload;constructor(payload){if(!isObject(payload))throw new TypeError("JWT Claims Set MUST be an object");this.#payload=structuredClone(payload)}data(){return encoder.encode(JSON.stringify(this.#payload))}get iss(){return this.#payload.iss}set iss(value){this.#payload.iss=value}get sub(){return this.#payload.sub}set sub(value){this.#payload.sub=value}get aud(){return this.#payload.aud}set aud(value){this.#payload.aud=value}set jti(value){this.#payload.jti=value}set nbf(value){this.#payload.nbf=numericDate(value,"setNotBefore")}set exp(value){this.#payload.exp=numericDate(value,"setExpirationTime")}set iat(value){value===void 0?this.#payload.iat=epoch(new Date):typeof value=="string"?this.#payload.iat=validateInput("setIssuedAt",epoch(new Date)+secs(value)):this.#payload.iat=numericDate(value,"setIssuedAt")}};async function jwtVerify(jwt,key,options){let verified=await verifyCompact(jwt,prepareVerify(options),key);if(!verified[2])throw new JWTInvalid("JWTs MUST NOT use unencoded payload");let result={payload:validateClaimsSet(verified[1],verified[0],options),protectedHeader:verified[1]};return typeof key=="function"?{...result,key:verified[3]}:result}async function jwtDecrypt(jwt,key,options){let decrypted=await decryptCompact(jwt,prepareDecrypt(options),key),protectedHeader=decrypted[1],payload=validateClaimsSet(protectedHeader,decrypted[0],options);if(protectedHeader.iss!==void 0&&protectedHeader.iss!==payload.iss)throw new JWTClaimValidationFailed('replicated "iss" claim header parameter mismatch',payload,"iss","mismatch");if(protectedHeader.sub!==void 0&&protectedHeader.sub!==payload.sub)throw new JWTClaimValidationFailed('replicated "sub" claim header parameter mismatch',payload,"sub","mismatch");if(protectedHeader.aud!==void 0&&JSON.stringify(protectedHeader.aud)!==JSON.stringify(payload.aud))throw new JWTClaimValidationFailed('replicated "aud" claim header parameter mismatch',payload,"aud","mismatch");let result={payload,protectedHeader};return typeof key=="function"?{...result,key:decrypted[2]}:result}var CompactEncrypt=class{#flattened;constructor(plaintext){this.#flattened=new FlattenedEncrypt(plaintext)}setContentEncryptionKey(cek){return this.#flattened.setContentEncryptionKey(cek),this}setInitializationVector(iv){return this.#flattened.setInitializationVector(iv),this}setProtectedHeader(protectedHeader){return this.#flattened.setProtectedHeader(protectedHeader),this}setKeyManagementParameters(parameters){return this.#flattened.setKeyManagementParameters(parameters),this}async encrypt(key,options){let jwe=await this.#flattened.encrypt(key,options);return[jwe.protected,jwe.encrypted_key,jwe.iv,jwe.ciphertext,jwe.tag].join(".")}};function unencodedPayload(protectedHeader){return protectedHeader?.b64===!1&&Array.isArray(protectedHeader.crit)&&protectedHeader.crit.includes("b64")}async function createSignature(input,key){let{protectedHeader,unprotectedHeader}=input;if(!protectedHeader&&!unprotectedHeader)throw new JWSInvalid("either setProtectedHeader or setUnprotectedHeader must be called before #sign()");if(!isDisjoint(protectedHeader,unprotectedHeader))throw new JWSInvalid("JWS Protected and JWS Unprotected Header Parameter names must be disjoint");let joseHeader={...protectedHeader,...unprotectedHeader};validateCritDuplicates(JWSInvalid,protectedHeader);let extensions=validateCrit(JWSInvalid,JWS_RECOGNIZED,input.crit,protectedHeader,joseHeader),b64=!0;if(extensions.includes("b64")&&(b64=protectedHeader.b64,typeof b64!="boolean"))throw new JWSInvalid('The "b64" (base64url-encode payload) Header Parameter must be a boolean');let{alg}=joseHeader;if(typeof alg!="string"||!alg)throw new JWSInvalid('JWS "alg" (Algorithm) Header Parameter missing or invalid');let entry=jwsAlgorithm(alg),payloadS,payloadB;if(b64){let encoded=input.encoded??=[];encoded[0]??=encode2(input.payload),encoded[1]??=encode(encoded[0]),payloadS=encoded[0],payloadB=encoded[1]}else payloadB=input.payload,payloadS="";let protectedHeaderString,protectedHeaderBytes;protectedHeader?(protectedHeaderString=encode2(JSON.stringify(protectedHeader)),protectedHeaderBytes=encode(protectedHeaderString)):(protectedHeaderString="",protectedHeaderBytes=new Uint8Array);let data=concat(protectedHeaderBytes,encode("."),payloadB),k=await prepareKey(entry,key,"sign"),signature=await sign(entry,k,data),jws={signature:encode2(signature),payload:payloadS};return protectedHeader&&(jws.protected=protectedHeaderString),unprotectedHeader&&(jws.header=unprotectedHeader),jws}var FlattenedSign=class{#payload;#protectedHeader;#unprotectedHeader;constructor(payload){if(!(payload instanceof Uint8Array))throw new TypeError("payload must be an instance of Uint8Array");this.#payload=payload}setProtectedHeader(protectedHeader){return assertNotSet(this.#protectedHeader,"setProtectedHeader"),this.#protectedHeader=protectedHeader,this}setUnprotectedHeader(unprotectedHeader){return assertNotSet(this.#unprotectedHeader,"setUnprotectedHeader"),this.#unprotectedHeader=unprotectedHeader,this}async sign(key,options){return createSignature({payload:this.#payload,protectedHeader:this.#protectedHeader,unprotectedHeader:this.#unprotectedHeader,crit:options?.crit},key)}};var CompactSign=class{#flattened;#protectedHeader;constructor(payload){this.#flattened=new FlattenedSign(payload)}setProtectedHeader(protectedHeader){return this.#flattened.setProtectedHeader(protectedHeader),this.#protectedHeader=protectedHeader,this}async sign(key,options){if(unencodedPayload(this.#protectedHeader))throw new TypeError("use the flattened module for creating JWS with b64: false");let jws=await this.#flattened.sign(key,options);return`${jws.protected}.${jws.payload}.${jws.signature}`}};var IndividualSignature=class{#parent;state;constructor(sig2,key,options){this.#parent=sig2,this.state=[void 0,void 0,key,options?.crit]}setProtectedHeader(protectedHeader){return assertNotSet(this.state[0],"setProtectedHeader"),this.state[0]=protectedHeader,this}setUnprotectedHeader(unprotectedHeader){return assertNotSet(this.state[1],"setUnprotectedHeader"),this.state[1]=unprotectedHeader,this}addSignature(...args){return this.#parent.addSignature(...args)}sign(...args){return this.#parent.sign(...args)}done(){return this.#parent}},GeneralSign=class{#payload;#signatures=[];constructor(payload){this.#payload=payload}addSignature(key,options){let signature=new IndividualSignature(this,key,options);return this.#signatures.push(signature),signature}async sign(){if(!this.#signatures.length)throw new JWSInvalid("at least one signature must be added");if(!(this.#payload instanceof Uint8Array))throw new TypeError("payload must be an instance of Uint8Array");let jws={signatures:[],payload:""},encoded=[];for(let i=0;i<this.#signatures.length;i++){let signature=this.#signatures[i],[protectedHeader,unprotectedHeader,key,crit]=signature.state,{payload,...rest}=await createSignature({payload:this.#payload,protectedHeader,unprotectedHeader,crit,encoded},key);if(i===0)jws.payload=payload;else if(jws.payload!==payload)throw new JWSInvalid("inconsistent use of JWS Unencoded Payload (RFC7797)");jws.signatures.push(rest)}return jws}};var SignJWT=class{#protectedHeader;#jwt;constructor(payload={}){this.#jwt=new JWTClaimsBuilder(payload)}setIssuer(issuer){return this.#jwt.iss=issuer,this}setSubject(subject){return this.#jwt.sub=subject,this}setAudience(audience){return this.#jwt.aud=audience,this}setJti(jwtId){return this.#jwt.jti=jwtId,this}setNotBefore(input){return this.#jwt.nbf=input,this}setExpirationTime(input){return this.#jwt.exp=input,this}setIssuedAt(input){return this.#jwt.iat=input,this}setProtectedHeader(protectedHeader){return this.#protectedHeader=protectedHeader,this}async sign(key,options){let sig2=new CompactSign(this.#jwt.data());if(sig2.setProtectedHeader(this.#protectedHeader),unencodedPayload(this.#protectedHeader))throw new JWTInvalid("JWTs MUST NOT use unencoded payload");return sig2.sign(key,options)}};var EncryptJWT=class{#cek;#iv;#keyManagementParameters;#protectedHeader;#replicateIssuerAsHeader;#replicateSubjectAsHeader;#replicateAudienceAsHeader;#jwt;constructor(payload={}){this.#jwt=new JWTClaimsBuilder(payload)}setIssuer(issuer){return this.#jwt.iss=issuer,this}setSubject(subject){return this.#jwt.sub=subject,this}setAudience(audience){return this.#jwt.aud=audience,this}setJti(jwtId){return this.#jwt.jti=jwtId,this}setNotBefore(input){return this.#jwt.nbf=input,this}setExpirationTime(input){return this.#jwt.exp=input,this}setIssuedAt(input){return this.#jwt.iat=input,this}setProtectedHeader(protectedHeader){return assertNotSet(this.#protectedHeader,"setProtectedHeader"),this.#protectedHeader=protectedHeader,this}setKeyManagementParameters(parameters){return assertNotSet(this.#keyManagementParameters,"setKeyManagementParameters"),this.#keyManagementParameters=parameters,this}setContentEncryptionKey(cek){return assertNotSet(this.#cek,"setContentEncryptionKey"),this.#cek=cek,this}setInitializationVector(iv){return assertNotSet(this.#iv,"setInitializationVector"),this.#iv=iv,this}replicateIssuerAsHeader(){return this.#replicateIssuerAsHeader=!0,this}replicateSubjectAsHeader(){return this.#replicateSubjectAsHeader=!0,this}replicateAudienceAsHeader(){return this.#replicateAudienceAsHeader=!0,this}async encrypt(key,options){let enc=new CompactEncrypt(this.#jwt.data());return this.#protectedHeader&&(this.#replicateIssuerAsHeader||this.#replicateSubjectAsHeader||this.#replicateAudienceAsHeader)&&(this.#protectedHeader={...this.#protectedHeader,iss:this.#replicateIssuerAsHeader?this.#jwt.iss:void 0,sub:this.#replicateSubjectAsHeader?this.#jwt.sub:void 0,aud:this.#replicateAudienceAsHeader?this.#jwt.aud:void 0}),enc.setProtectedHeader(this.#protectedHeader),this.#iv&&enc.setInitializationVector(this.#iv),this.#cek&&enc.setContentEncryptionKey(this.#cek),this.#keyManagementParameters&&enc.setKeyManagementParameters(this.#keyManagementParameters),enc.encrypt(key,options)}};var algArgument='"alg" (Algorithm)';function unsupportedAlg(source='JWK "alg" (Algorithm) Parameter'){throw new JOSENotSupported(`Invalid or unsupported ${source} value`)}function keyAlgorithm(alg,source){return(typeof alg=="string"?JWS[alg]??JWE[alg]:void 0)??unsupportedAlg(source)}var formatPEM=(b64,descriptor)=>{let newlined=(b64.match(/.{1,64}/g)||[]).join(`
+`);return`-----BEGIN ${descriptor}-----
+${newlined}
+-----END ${descriptor}-----`},genericExport=async(keyType,keyFormat,key)=>{if(isKeyObject(key)){if(key.type!==keyType)throw new TypeError(`key is not a ${keyType} key`);return key.export({format:"pem",type:keyFormat})}if(!isCryptoKey(key))throw new TypeError(invalidKeyInput(key,"CryptoKey","KeyObject"));if(!key.extractable)throw new TypeError("CryptoKey is not extractable");if(key.type!==keyType)throw new TypeError(`key is not a ${keyType} key`);return formatPEM(encodeBase64(new Uint8Array(await crypto.subtle.exportKey(keyFormat,key))),`${keyType.toUpperCase()} KEY`)},toSPKI=key=>genericExport("public","spki",key),toPKCS8=key=>genericExport("private","pkcs8",key),bytesEqual=(a,b)=>{if(a.byteLength!==b.length)return!1;for(let i=0;i<a.byteLength;i++)if(a[i]!==b[i])return!1;return!0},createASN1State=data=>({data,pos:0}),readByte=state=>{let byte=state.data[state.pos++];if(byte===void 0)throw new Error("Unexpected end of ASN.1 input");return byte},parseLength=state=>{let first=readByte(state);if(first&128){let lengthOfLen=first&127,length=0;for(let i=0;i<lengthOfLen;i++)length=length<<8|readByte(state);return length}return first},skipElement=(state,count=1)=>{for(;count-- >0;){state.pos++;let length=parseLength(state);state.pos+=length}},expectTag=(state,expectedTag,errorMessage)=>{if(readByte(state)!==expectedTag)throw new Error(errorMessage)},getSubarray=(state,length)=>{if(length<0||state.pos+length>state.data.length)throw new Error("Unexpected end of ASN.1 input");let result=state.data.subarray(state.pos,state.pos+length);return state.pos+=length,result},parseAlgorithmOID=state=>{expectTag(state,6,"Expected algorithm OID");let oidLen=parseLength(state);return getSubarray(state,oidLen)};function parseKeyHeader(state,keyFormat){if(expectTag(state,48,`Invalid ${keyFormat==="spki"?"SPKI":"PKCS#8"} structure`),parseLength(state),keyFormat==="pkcs8"){expectTag(state,2,"Expected version field");let length=parseLength(state);state.pos+=length}expectTag(state,48,"Expected algorithm identifier"),parseLength(state)}var parseECAlgorithmIdentifier=state=>{let algOid=parseAlgorithmOID(state);if(bytesEqual(algOid,[43,101,110]))return"X25519";if(!bytesEqual(algOid,[42,134,72,206,61,2,1]))throw new Error("Unsupported key algorithm");expectTag(state,6,"Expected curve OID");let curveOidLen=parseLength(state),curveOid=getSubarray(state,curveOidLen);if(bytesEqual(curveOid,[42,134,72,206,61,3,1,7]))return"P-256";if(bytesEqual(curveOid,[43,129,4,0,34]))return"P-384";if(bytesEqual(curveOid,[43,129,4,0,35]))return"P-521";throw new Error("Unsupported named curve")},genericImport=async(keyFormat,keyData,alg,options)=>{let entry=keyAlgorithm(alg,algArgument);entry.secret&&unsupportedAlg(algArgument);let isPublic=keyFormat==="spki",algorithm;if(entry.resolve)try{let state=createASN1State(keyData);parseKeyHeader(state,keyFormat),algorithm=entry.resolve({crv:parseECAlgorithmIdentifier(state)})}catch{throw new JOSENotSupported("Invalid or unsupported key format")}else algorithm=entry.subtle;return crypto.subtle.importKey(keyFormat,keyData,algorithm,options?.extractable??isPublic,entry.usages[isPublic?0:1])},processPEMData=(pem,pattern)=>decodeBase64(pem.replace(pattern,"")),fromPKCS8=(pem,alg,options)=>{let keyData=processPEMData(pem,/(?:-----(?:BEGIN|END) PRIVATE KEY-----|\s)/g);return genericImport("pkcs8",keyData,alg,options)},fromSPKI=(pem,alg,options)=>{let keyData=processPEMData(pem,/(?:-----(?:BEGIN|END) PUBLIC KEY-----|\s)/g);return genericImport("spki",keyData,alg,options)};function spkiFromX509(buf){let state=createASN1State(buf);expectTag(state,48,"Invalid certificate structure"),parseLength(state),expectTag(state,48,"Invalid tbsCertificate structure"),parseLength(state),buf[state.pos]===160?skipElement(state,6):skipElement(state,5);let spkiStart=state.pos;expectTag(state,48,"Invalid SPKI structure");let spkiContentLen=parseLength(state);return buf.subarray(spkiStart,spkiStart+spkiContentLen+(state.pos-spkiStart))}var fromX509=(pem,alg,options)=>{let spki;try{let certificate=processPEMData(pem,/(?:-----(?:BEGIN|END) CERTIFICATE-----|\s)/g);spki=spkiFromX509(certificate)}catch(cause){throw new TypeError("Failed to parse the X.509 certificate",{cause})}return genericImport("spki",spki,alg,options)};function omitUndefinedProperties(jwk){return Object.fromEntries(Object.entries(jwk).filter(([,value])=>value!==void 0))}async function keyToJWK(key){if(isKeyObject(key))if(key.type==="secret")key=key.export();else return key.export({format:"jwk"});if(key instanceof Uint8Array)return{kty:"oct",k:encode2(key)};if(!isCryptoKey(key))throw new TypeError(invalidKeyInput(key,"CryptoKey","KeyObject","Uint8Array"));if(!key.extractable)throw new TypeError("non-extractable CryptoKey cannot be exported as a JWK");let{ext,key_ops,alg,use,...jwk}=omitUndefinedProperties(await crypto.subtle.exportKey("jwk",key));return jwk.kty==="AKP"&&(jwk.alg=alg),jwk}function exportSPKI(key){return toSPKI(key)}function exportPKCS8(key){return toPKCS8(key)}function exportJWK(key){return keyToJWK(key)}var check=(value,description)=>{if(typeof value!="string"||!value)throw new JWKInvalid(`${description} missing or invalid`)};async function calculateJwkThumbprint(key,digestAlgorithm){let jwk;if(isJWK(key))jwk=key;else if(isKeyLike(key))jwk=await exportJWK(key);else throw new TypeError(invalidKeyInput(key,"CryptoKey","KeyObject","JSON Web Key"));if(digestAlgorithm??="sha256",digestAlgorithm!=="sha256"&&digestAlgorithm!=="sha384"&&digestAlgorithm!=="sha512")throw new TypeError('digestAlgorithm must one of "sha256", "sha384", or "sha512"');let components;switch(jwk.kty){case"AKP":check(jwk.alg,'"alg" (Algorithm) Parameter'),check(jwk.pub,'"pub" (Public key) Parameter'),components={alg:jwk.alg,kty:jwk.kty,pub:jwk.pub};break;case"EC":check(jwk.crv,'"crv" (Curve) Parameter'),check(jwk.x,'"x" (X Coordinate) Parameter'),check(jwk.y,'"y" (Y Coordinate) Parameter'),components={crv:jwk.crv,kty:jwk.kty,x:jwk.x,y:jwk.y};break;case"OKP":check(jwk.crv,'"crv" (Subtype of Key Pair) Parameter'),check(jwk.x,'"x" (Public Key) Parameter'),components={crv:jwk.crv,kty:jwk.kty,x:jwk.x};break;case"RSA":check(jwk.e,'"e" (Exponent) Parameter'),check(jwk.n,'"n" (Modulus) Parameter'),components={e:jwk.e,kty:jwk.kty,n:jwk.n};break;case"oct":check(jwk.k,'"k" (Key Value) Parameter'),components={k:jwk.k,kty:jwk.kty};break;default:throw new JOSENotSupported('"kty" (Key Type) Parameter missing or unsupported')}let data=encode(JSON.stringify(components));return encode2(await digest(digestAlgorithm,data))}async function calculateJwkThumbprintUri(key,digestAlgorithm){digestAlgorithm??="sha256";let thumbprint=await calculateJwkThumbprint(key,digestAlgorithm);return`urn:ietf:params:oauth:jwk-thumbprint:sha-${digestAlgorithm.slice(-3)}:${thumbprint}`}async function EmbeddedJWK(protectedHeader,token){let joseHeader={...protectedHeader,...token?.header};if(!isObject(joseHeader.jwk))throw new JWSInvalid('"jwk" (JSON Web Key) Header Parameter must be a JSON object');let entry=jwsAlgorithm(joseHeader.alg),key=await jwkToKey(entry,{...joseHeader.jwk,ext:!0});if(key.type!=="public")throw new JWSInvalid('"jwk" (JSON Web Key) Header Parameter must be a public key');return key}function signatureAlgorithm(alg){let entry=typeof alg=="string"?JWS[alg]:void 0;if(!entry||entry.secret)throw new JOSENotSupported('Unsupported "alg" value for a JSON Web Key Set');return entry}function isJWKSLike(jwks){if(!jwks||typeof jwks!="object")return!1;let{keys}=jwks;return Array.isArray(keys)&&keys.every(isObject)}var LocalJWKSetImpl=class{#jwks;#cached=new WeakMap;constructor(jwks){if(!isJWKSLike(jwks))throw new JWKSInvalid("JSON Web Key Set malformed");this.#jwks=structuredClone(jwks)}jwks(){return this.#jwks}async getKey(protectedHeader,token){let{alg,kid}={...protectedHeader,...token?.header},entry=signatureAlgorithm(alg),candidates=this.#jwks.keys.filter(jwk2=>entry.kty.includes(jwk2.kty)&&(typeof kid!="string"||kid===jwk2.kid)&&(!(typeof jwk2.alg=="string"||jwk2.kty==="AKP")||alg===jwk2.alg)&&(typeof jwk2.use!="string"||jwk2.use==="sig")&&(!Array.isArray(jwk2.key_ops)||jwk2.key_ops.includes("verify"))&&(!entry.crv||jwk2.crv===entry.crv)),{0:jwk,length}=candidates;if(length===0)throw new JWKSNoMatchingKey;if(length!==1){let error=new JWKSMultipleMatchingKeys,_cached=this.#cached;throw error[Symbol.asyncIterator]=async function*(){for(let jwk2 of candidates)try{yield await importWithAlgCache(_cached,jwk2,entry)}catch{}},error}return importWithAlgCache(this.#cached,jwk,entry)}};async function importWithAlgCache(cache2,jwk,entry){let cached2=cache2.get(jwk)||cache2.set(jwk,{__proto__:null}).get(jwk);if(cached2[entry.alg]===void 0){let key=await jwkToKey(entry,{...jwk,alg:entry.alg,ext:!0});if(key.type!=="public")throw new JWKSInvalid("JSON Web Key Set members must be public keys");cached2[entry.alg]=key}return cached2[entry.alg]}function createLocalJWKSet(jwks){let set=new LocalJWKSetImpl(jwks),localJWKSet=async(protectedHeader,token)=>set.getKey(protectedHeader,token);return Object.defineProperty(localJWKSet,"jwks",{value:()=>structuredClone(set.jwks())}),localJWKSet}function isCloudflareWorkers(){return typeof WebSocketPair<"u"||typeof navigator<"u"&&navigator.userAgent==="Cloudflare-Workers"||typeof EdgeRuntime<"u"&&EdgeRuntime==="vercel"}var USER_AGENT;(typeof navigator>"u"||!navigator.userAgent?.startsWith?.("Mozilla/5.0 "))&&(USER_AGENT="jose/v6.2.8");var customFetch=Symbol();async function fetchJwks(url,headers,signal,fetchImpl=fetch){let response=await fetchImpl(url,{method:"GET",signal,redirect:"manual",headers}).catch(err=>{throw err.name==="TimeoutError"?new JWKSTimeout:err});if(response.status!==200)throw new JOSEError("Expected 200 OK from the JSON Web Key Set HTTP response");try{return await response.json()}catch{throw new JOSEError("Failed to parse the JSON Web Key Set HTTP response as JSON")}}var jwksCache=Symbol();function isFreshJwksCache(input,cacheMaxAge){return!(typeof input!="object"||input===null||!("uat"in input)||typeof input.uat!="number"||Date.now()-input.uat>=cacheMaxAge||!("jwks"in input)||!isObject(input.jwks)||!Array.isArray(input.jwks.keys)||!Array.prototype.every.call(input.jwks.keys,isObject))}var RemoteJWKSetImpl=class{#url;#timeoutDuration;#cooldownDuration;#cacheMaxAge;#jwksTimestamp;#pendingFetch;#headers;#customFetch;#local;#cache;constructor(url,options){if(!(url instanceof URL))throw new TypeError("url must be an instance of URL");this.#url=new URL(url.href);let opts=options??{};this.#timeoutDuration=typeof opts.timeoutDuration=="number"?opts.timeoutDuration:5e3,this.#cooldownDuration=typeof opts.cooldownDuration=="number"?opts.cooldownDuration:3e4,this.#cacheMaxAge=typeof opts.cacheMaxAge=="number"?opts.cacheMaxAge:6e5,this.#headers=new Headers(opts.headers),USER_AGENT&&!this.#headers.has("User-Agent")&&this.#headers.set("User-Agent",USER_AGENT),this.#headers.has("accept")||(this.#headers.set("accept","application/json"),this.#headers.append("accept","application/jwk-set+json")),this.#customFetch=opts[customFetch];let cache2=opts[jwksCache];cache2!==void 0&&(this.#cache=cache2,isFreshJwksCache(cache2,this.#cacheMaxAge)&&(this.#jwksTimestamp=this.#cache.uat,this.#local=createLocalJWKSet(this.#cache.jwks)))}pendingFetch(){return!!this.#pendingFetch}#validFor(duration){return typeof this.#jwksTimestamp=="number"&&Date.now()<this.#jwksTimestamp+duration}coolingDown(){return this.#validFor(this.#cooldownDuration)}fresh(){return this.#validFor(this.#cacheMaxAge)}jwks(){return this.#local?.jwks()}async getKey(protectedHeader,token){(!this.#local||!this.fresh())&&await this.reload();try{return await this.#local(protectedHeader,token)}catch(err){if(err instanceof JWKSNoMatchingKey&&this.coolingDown()===!1)return await this.reload(),this.#local(protectedHeader,token);throw err}}async reload(){this.#pendingFetch&&isCloudflareWorkers()&&(this.#pendingFetch=void 0),this.#pendingFetch||=fetchJwks(this.#url.href,this.#headers,AbortSignal.timeout(this.#timeoutDuration),this.#customFetch).then(json=>{this.#local=createLocalJWKSet(json),this.#cache&&(this.#cache.uat=Date.now(),this.#cache.jwks=json),this.#jwksTimestamp=Date.now()}).finally(()=>{this.#pendingFetch=void 0}),await this.#pendingFetch}};function createRemoteJWKSet(url,options){let set=new RemoteJWKSetImpl(url,options),remoteJWKSet=async(protectedHeader,token)=>set.getKey(protectedHeader,token);return Object.defineProperties(remoteJWKSet,{coolingDown:{get:()=>set.coolingDown(),enumerable:!0},fresh:{get:()=>set.fresh(),enumerable:!0},reload:{value:()=>set.reload(),enumerable:!0},reloading:{get:()=>set.pendingFetch(),enumerable:!0},jwks:{value:()=>set.jwks(),enumerable:!0}}),remoteJWKSet}var UnsecuredJWT=class{#jwt;constructor(payload={}){this.#jwt=new JWTClaimsBuilder(payload)}encode(){let header=encode2(JSON.stringify({alg:"none"})),payload=encode2(this.#jwt.data());return`${header}.${payload}.`}setIssuer(issuer){return this.#jwt.iss=issuer,this}setSubject(subject){return this.#jwt.sub=subject,this}setAudience(audience){return this.#jwt.aud=audience,this}setJti(jwtId){return this.#jwt.jti=jwtId,this}setNotBefore(input){return this.#jwt.nbf=input,this}setExpirationTime(input){return this.#jwt.exp=input,this}setIssuedAt(input){return this.#jwt.iat=input,this}static decode(jwt,options){if(typeof jwt!="string")throw new JWTInvalid("Unsecured JWT must be a string");let{0:encodedHeader,1:encodedPayload,2:signature,length}=jwt.split(".");if(length!==3||signature!=="")throw new JWTInvalid("Invalid Unsecured JWT");let header;try{if(header=JSON.parse(strictDecoder.decode(decode(encodedHeader))),header.alg!=="none")throw new Error}catch{throw new JWTInvalid("Invalid Unsecured JWT")}return{payload:validateClaimsSet(header,decodeBase64url(encodedPayload,"payload",JWTInvalid),options),header}}};async function importSPKI(spki,alg,options){if(typeof spki!="string"||spki.indexOf("-----BEGIN PUBLIC KEY-----")!==0)throw new TypeError('"spki" must be SPKI formatted string');return fromSPKI(spki,alg,options)}async function importX509(x509,alg,options){if(typeof x509!="string"||x509.indexOf("-----BEGIN CERTIFICATE-----")!==0)throw new TypeError('"x509" must be X.509 formatted string');return fromX509(x509,alg,options)}async function importPKCS8(pkcs8,alg,options){if(typeof pkcs8!="string"||pkcs8.indexOf("-----BEGIN PRIVATE KEY-----")!==0)throw new TypeError('"pkcs8" must be PKCS#8 formatted string');return fromPKCS8(pkcs8,alg,options)}async function importJWK(jwk,alg,options){if(!isObject(jwk))throw new TypeError("JWK must be an object");alg??=jwk.alg;let ext=options?.extractable??jwk.ext;if(jwk.kty!=="oct"&&!alg)throw new TypeError('"alg" argument is required when "jwk.alg" is not present');switch(jwk.kty){case"oct":if(typeof jwk.k!="string"||!jwk.k)throw new TypeError('missing "k" (Key Value) Parameter value');return decode(jwk.k);case"RSA":return jwkToKey(keyAlgorithm(alg),{...jwk,alg,ext});case"AKP":{if(typeof jwk.alg!="string"||!jwk.alg)throw new TypeError('missing "alg" (Algorithm) Parameter value');if(alg!==void 0&&alg!==jwk.alg)throw new TypeError("JWK alg and alg option value mismatch");return jwkToKey(keyAlgorithm(jwk.alg),{...jwk,ext})}case"EC":case"OKP":return jwkToKey(keyAlgorithm(alg),{...jwk,alg,ext});default:throw new JOSENotSupported('Unsupported "kty" (Key Type) Parameter value')}}function decodeProtectedHeader(token){let protectedB64u;if(typeof token=="string"){let parts=token.split(".");(parts.length===3||parts.length===5)&&([protectedB64u]=parts)}else if(typeof token=="object"&&token)if("protected"in token)protectedB64u=token.protected;else throw new TypeError("Token does not contain a Protected Header");let invalid2="Invalid Token or Protected Header formatting";if(typeof protectedB64u!="string"||!protectedB64u)throw new TypeError(invalid2);return parseJoseHeader(protectedB64u,TypeError,invalid2)}function decodeJwt(jwt){if(typeof jwt!="string")throw new JWTInvalid("JWTs must use Compact JWS serialization, JWT must be a string");let{1:payload,length}=jwt.split(".");if(length===5)throw new JWTInvalid("Only JWTs using Compact JWS serialization can be decoded");if(length!==3)throw new JWTInvalid("Invalid JWT");if(!payload)throw new JWTInvalid("JWTs must contain a payload");let decoded;try{decoded=decode(payload)}catch{throw new JWTInvalid("Failed to base64url decode the payload")}let result;try{result=JSON.parse(strictDecoder.decode(decoded))}catch{throw new JWTInvalid("Failed to parse the decoded payload as JSON")}if(!isObject(result))throw new JWTInvalid("Invalid JWT Claims Set");return result}function getModulusLengthOption(options){let modulusLength=options?.modulusLength??2048;if(typeof modulusLength!="number"||modulusLength<2048)throw new JOSENotSupported("Invalid or unsupported modulusLength option provided, 2048 bits or larger keys must be used");return modulusLength}async function generateKeyPair(alg,options){let entry=keyAlgorithm(alg,algArgument);entry.secret&&unsupportedAlg(algArgument);let algorithm;if(entry.resolve){let crv=options?.crv??"P-256";switch(crv){case"P-256":case"P-384":case"P-521":algorithm={name:"ECDH",namedCurve:crv};break;case"X25519":algorithm={name:"X25519"};break;default:throw new JOSENotSupported("Invalid or unsupported crv option provided, supported values are P-256, P-384, P-521, and X25519")}}else{if(entry.crv!==void 0&&options?.crv!==void 0&&options.crv!==entry.crv)throw new JOSENotSupported(`Invalid or unsupported crv option provided, the only supported value for ${alg} is ${entry.crv}`);algorithm=entry.kty[0]==="RSA"?{...entry.subtle,publicExponent:Uint8Array.of(1,0,1),modulusLength:getModulusLengthOption(options)}:entry.subtle}return crypto.subtle.generateKey(algorithm,options?.extractable??!1,[...entry.usages[1],...entry.usages[0]])}async function generateSecret(alg,options){let length,algorithm,keyUsages;switch(alg){case"HS256":case"HS384":case"HS512":length=parseInt(alg.slice(-3),10),algorithm={name:"HMAC",hash:`SHA-${length}`,length},keyUsages=["sign","verify"];break;case"A128CBC-HS256":case"A192CBC-HS384":case"A256CBC-HS512":return length=parseInt(alg.slice(-3),10),crypto.getRandomValues(new Uint8Array(length>>3));case"A128KW":case"A192KW":case"A256KW":length=parseInt(alg.slice(1,4),10),algorithm={name:"AES-KW",length},keyUsages=["wrapKey","unwrapKey"];break;case"A128GCMKW":case"A192GCMKW":case"A256GCMKW":case"A128GCM":case"A192GCM":case"A256GCM":length=parseInt(alg.slice(1,4),10),algorithm={name:"AES-GCM",length},keyUsages=["encrypt","decrypt"];break;default:unsupportedAlg(algArgument)}return crypto.subtle.generateKey(algorithm,options?.extractable??!1,keyUsages)}var cryptoRuntime="WebCryptoAPI";export{CompactEncrypt,CompactSign,EmbeddedJWK,EncryptJWT,FlattenedEncrypt,FlattenedSign,GeneralEncrypt,GeneralSign,SignJWT,UnsecuredJWT,base64url_exports as base64url,calculateJwkThumbprint,calculateJwkThumbprintUri,compactDecrypt,compactVerify,createLocalJWKSet,createRemoteJWKSet,cryptoRuntime,customFetch,decodeJwt,decodeProtectedHeader,errors_exports as errors,exportJWK,exportPKCS8,exportSPKI,flattenedDecrypt,flattenedVerify,generalDecrypt,generalVerify,generateKeyPair,generateSecret,importJWK,importPKCS8,importSPKI,importX509,jwksCache,jwtDecrypt,jwtVerify};

package/dist/bundle/chunks/xai.js

@@ -0,0 +1,2 @@
+import { createRequire as __piCreateRequire } from "node:module"; const require = __piCreateRequire(import.meta.url);
+var CANCEL_MESSAGE="Login cancelled",TIMEOUT_MESSAGE="Device flow timed out",SLOW_DOWN_TIMEOUT_MESSAGE="Device flow timed out after one or more slow_down responses. This is often caused by clock drift in WSL or VM environments. Please sync or restart the VM clock and try again.";function abortableSleep(ms,signal,cancelMessage){return new Promise((resolve,reject)=>{if(signal.aborted){reject(new Error(cancelMessage));return}let onAbort=()=>{clearTimeout(timeout),reject(new Error(cancelMessage))},timeout=setTimeout(()=>{signal.removeEventListener("abort",onAbort),resolve()},ms);signal.addEventListener("abort",onAbort,{once:!0})})}async function pollOAuthDeviceCodeFlow(options){let deadline=typeof options.expiresInSeconds=="number"?Date.now()+options.expiresInSeconds*1e3:Number.POSITIVE_INFINITY,intervalMs=Math.max(1e3,Math.floor((options.intervalSeconds??5)*1e3)),slowDownResponses=0;if(options.waitBeforeFirstPoll){let remainingMs=deadline-Date.now();remainingMs>0&&await abortableSleep(Math.min(intervalMs,remainingMs),options.signal,CANCEL_MESSAGE)}for(;Date.now()<deadline;){if(options.signal.aborted)throw new Error(CANCEL_MESSAGE);let result=await options.poll();if(result.status==="complete")return result.value;if(result.status==="failed")throw new Error(result.message);result.status==="slow_down"&&(slowDownResponses+=1,intervalMs=typeof result.intervalSeconds=="number"&&Number.isFinite(result.intervalSeconds)&&result.intervalSeconds>0?Math.max(1e3,Math.floor(result.intervalSeconds*1e3)):Math.max(1e3,intervalMs+5e3));let remainingMs=deadline-Date.now();if(remainingMs<=0)break;await abortableSleep(Math.min(intervalMs,remainingMs),options.signal,CANCEL_MESSAGE)}throw new Error(slowDownResponses>0?SLOW_DOWN_TIMEOUT_MESSAGE:TIMEOUT_MESSAGE)}var XAI_CLIENT_ID="b1a00492-073a-47ea-816f-4c329264a828",XAI_SCOPE="openid profile email offline_access grok-cli:access api:access",XAI_DEVICE_CODE_URL="https://auth.x.ai/oauth2/device/code",XAI_TOKEN_URL="https://auth.x.ai/oauth2/token",REFRESH_SKEW_MS=300*1e3,DEFAULT_TOKEN_LIFETIME_SECONDS=3600;function requiredString(body,field){let value=body[field];if(typeof value!="string"||value.length===0)throw new Error(`Invalid xAI OAuth response field: ${field}`);return value}function positiveNumber(body,field){let value=body[field];if(typeof value!="number"||!Number.isFinite(value)||value<=0)throw new Error(`Invalid xAI OAuth response field: ${field}`);return value}function validateVerificationUri(raw){let url;try{url=new URL(raw)}catch{throw new Error("Untrusted verification URI in xAI OAuth response")}if(url.protocol!=="https:")throw new Error("Untrusted verification URI in xAI OAuth response");return url.href}async function postForm(url,fields,signal){let response;try{response=await fetch(url,{method:"POST",headers:{Accept:"application/json","Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(fields),signal})}catch(error){throw signal.aborted?new Error("Login cancelled"):error}let body;try{let parsed=await response.json();body=parsed&&typeof parsed=="object"&&!Array.isArray(parsed)?parsed:{}}catch{throw signal.aborted?new Error("Login cancelled"):new Error(`xAI OAuth returned invalid JSON (HTTP ${response.status})`)}return{ok:response.ok,status:response.status,body}}function requestFailure(action,response){let error=typeof response.body.error=="string"?response.body.error:void 0,description=typeof response.body.error_description=="string"?response.body.error_description:void 0,detail=[error,description].filter(Boolean).join(": ");return new Error(`xAI OAuth ${action} failed (HTTP ${response.status})${detail?`: ${detail}`:""}`)}function parseDeviceCode(body){let interval=body.interval,intervalSeconds=typeof interval=="number"&&Number.isFinite(interval)&&interval>0?interval:void 0,verificationUriComplete=typeof body.verification_uri_complete=="string"&&body.verification_uri_complete.length>0?validateVerificationUri(body.verification_uri_complete):void 0;return{deviceCode:requiredString(body,"device_code"),userCode:requiredString(body,"user_code"),verificationUri:validateVerificationUri(requiredString(body,"verification_uri")),verificationUriComplete,intervalSeconds,expiresInSeconds:positiveNumber(body,"expires_in")}}function credentialsFromTokenResponse(body,previousRefreshToken){let access=requiredString(body,"access_token"),refresh=body.refresh_token===void 0&&previousRefreshToken?previousRefreshToken:requiredString(body,"refresh_token"),expiresInSeconds=body.expires_in===void 0?DEFAULT_TOKEN_LIFETIME_SECONDS:positiveNumber(body,"expires_in");return{type:"oauth",access,refresh,expires:Date.now()+expiresInSeconds*1e3-REFRESH_SKEW_MS}}async function requestDeviceCode(signal){let response=await postForm(XAI_DEVICE_CODE_URL,{client_id:XAI_CLIENT_ID,scope:XAI_SCOPE,referrer:"pi"},signal);if(!response.ok)throw requestFailure("device authorization",response);return parseDeviceCode(response.body)}async function pollForTokens(device,signal){return pollOAuthDeviceCodeFlow({intervalSeconds:device.intervalSeconds,expiresInSeconds:device.expiresInSeconds,waitBeforeFirstPoll:!0,signal,poll:async()=>{let response=await postForm(XAI_TOKEN_URL,{grant_type:"urn:ietf:params:oauth:grant-type:device_code",client_id:XAI_CLIENT_ID,device_code:device.deviceCode},signal);if(response.ok)return{status:"complete",value:credentialsFromTokenResponse(response.body)};let error=response.body.error;if(error==="authorization_pending")return{status:"pending"};if(error==="slow_down"){let interval=response.body.interval;return{status:"slow_down",intervalSeconds:typeof interval=="number"?interval:void 0}}return error==="access_denied"||error==="authorization_denied"?{status:"failed",message:"xAI device authorization was denied"}:error==="expired_token"?{status:"failed",message:"xAI device code expired"}:{status:"failed",message:requestFailure("device token polling",response).message}}})}async function loginXai(interaction){let device=await requestDeviceCode(interaction.signal);return interaction.notify({type:"device_code",userCode:device.userCode,verificationUri:device.verificationUriComplete??device.verificationUri,intervalSeconds:device.intervalSeconds,expiresInSeconds:device.expiresInSeconds}),pollForTokens(device,interaction.signal)}async function refreshXaiToken(refreshToken,signal){let response=await postForm(XAI_TOKEN_URL,{grant_type:"refresh_token",client_id:XAI_CLIENT_ID,refresh_token:refreshToken},signal);if(!response.ok)throw requestFailure("token refresh",response);return credentialsFromTokenResponse(response.body,refreshToken)}var xaiOAuth={name:"xAI (Grok/X subscription)",isSubscription:!0,loginLabel:"Sign in with SuperGrok or X Premium",login:loginXai,refresh:(credential,signal)=>refreshXaiToken(credential.refresh,signal),async toAuth(credential){return{apiKey:credential.access}}};export{xaiOAuth};

package/dist/bundle/cli.js

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+import { createRequire as __piCreateRequire } from "node:module"; const require = __piCreateRequire(import.meta.url);
+import{configureHttpDispatcher,main}from"./chunks/chunk-HNVPY4LZ.js";import{APP_NAME,ENV_PREFIX}from"./chunks/chunk-ARF4OE6X.js";import"./chunks/chunk-MA4UUCYX.js";import"./chunks/chunk-JUUC5AZY.js";import"./chunks/chunk-SGTGQNNP.js";import"./chunks/chunk-ECWELYBH.js";import"./chunks/chunk-3D3G2X5U.js";import"./chunks/chunk-CBHC6EL7.js";import"./chunks/chunk-7DDKXS2Q.js";import"./chunks/chunk-D7XAASZM.js";import"./chunks/chunk-WJZ4KLGL.js";import"./chunks/chunk-72KO4OMP.js";import"./chunks/chunk-JXWJOIH4.js";process.title=APP_NAME;process.env[`${ENV_PREFIX}_CODING_AGENT`]="true";process.emitWarning=(()=>{});configureHttpDispatcher();main(process.argv.slice(2));