@kiauth/web-sdk 1.0.0

package/dist/kiauth-sdk.js

@@ -0,0 +1,3684 @@
+class KiauthApi {
+    constructor(config) {
+        this.baseUrl = KiauthApi.resolveBaseUrl(config);
+    }
+    // Resolve the backend API base. An explicit config.baseUrl always wins so a
+    // developer can point the SDK at the live backend (api.kiauth.com (the branded backend host)
+    // mapped) or a self-hosted instance; otherwise fall back to env defaults.
+    static resolveBaseUrl(config) {
+        if (config.baseUrl) {
+            const trimmed = config.baseUrl.replace(/\/+$/, '');
+            return /\/api\/v\d+$/.test(trimmed) ? trimmed : `${trimmed}/api/v1`;
+        }
+        if (config.environment === 'production') {
+            return 'https://api.kiauth.com/api/v1';
+        }
+        // Sandbox/dev: talk to a locally running backend.
+        return 'http://localhost:3000/api/v1';
+    }
+    getBaseUrl() {
+        return this.baseUrl;
+    }
+    // Default 8s (not 2s): a backend on a cold start / slow network must not be
+    // mistaken for "offline". The on-click re-check passes a longer timeout still.
+    async healthCheck(timeoutMs = 8000) {
+        try {
+            const controller = new AbortController();
+            const id = setTimeout(() => controller.abort(), timeoutMs);
+            const res = await fetch(`${this.baseUrl}/auth/health`, {
+                method: 'GET',
+                headers: { 'Accept': 'application/json' },
+                signal: controller.signal
+            });
+            clearTimeout(id);
+            return res.ok;
+        }
+        catch {
+            return false;
+        }
+    }
+    async initiateSession(clientId, scopes, redirectUri, codeChallenge) {
+        const res = await fetch(`${this.baseUrl}/auth/initiate`, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+                'Accept': 'application/json'
+            },
+            body: JSON.stringify({
+                clientId,
+                scopes,
+                redirectUri,
+                // PKCE challenge for public clients (omitted for confidential clients).
+                ...(codeChallenge ? { codeChallenge, codeChallengeMethod: 'S256' } : {})
+            })
+        });
+        if (!res.ok) {
+            const err = await res.json().catch(() => ({}));
+            throw { code: err.code || 'INITIATE_FAILED', message: err.message || 'Failed to initiate login session.' };
+        }
+        return res.json();
+    }
+    // Poll a QR session's status. On APPROVED the backend also returns the one-time
+    // authCode, so the SDK can complete the exchange even if the WebSocket event
+    // never arrived (proxy/cold-network). Mirrors the dev-portal's polling flow.
+    async getSessionStatus(sessionId) {
+        try {
+            const res = await fetch(`${this.baseUrl}/auth/session/${sessionId}`, {
+                method: 'GET',
+                headers: { 'Accept': 'application/json' }
+            });
+            if (!res.ok)
+                return { status: 'UNKNOWN', authCode: null };
+            const data = await res.json();
+            return { status: data.status || 'UNKNOWN', authCode: data.authCode || null };
+        }
+        catch {
+            return { status: 'UNKNOWN', authCode: null };
+        }
+    }
+    /**
+     * Exchange the authorization code for tokens. Public clients pass
+     * { codeVerifier } (PKCE); confidential clients pass { clientSecret }.
+     */
+    async exchangeToken(code, clientId, credentials) {
+        const res = await fetch(`${this.baseUrl}/auth/token`, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+                'Accept': 'application/json'
+            },
+            body: JSON.stringify({
+                grantType: 'authorization_code',
+                code,
+                clientId,
+                ...(credentials.codeVerifier ? { codeVerifier: credentials.codeVerifier } : {}),
+                ...(credentials.clientSecret ? { clientSecret: credentials.clientSecret } : {})
+            })
+        });
+        if (!res.ok) {
+            const err = await res.json().catch(() => ({}));
+            throw { code: err.code || 'TOKEN_EXCHANGE_FAILED', message: err.message || 'Failed to exchange authorization code.' };
+        }
+        return res.json();
+    }
+    async verifyToken(token) {
+        const res = await fetch(`${this.baseUrl}/auth/verify`, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+                'Accept': 'application/json'
+            },
+            body: JSON.stringify({ token })
+        });
+        if (!res.ok) {
+            return { valid: false };
+        }
+        return res.json();
+    }
+    async reportSession(clientId, clientSecret, options) {
+        const creds = btoa(`${clientId}:${clientSecret}`);
+        const res = await fetch(`${this.baseUrl}/sessions/bridge`, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+                'Authorization': `Basic ${creds}`,
+                'Accept': 'application/json'
+            },
+            body: JSON.stringify(options)
+        });
+        if (!res.ok) {
+            const err = await res.json().catch(() => ({}));
+            throw { code: err.code || 'REPORT_SESSION_FAILED', message: err.message || 'Failed to report session bridge.' };
+        }
+        return res.json();
+    }
+    async reportBatchSessions(clientId, clientSecret, kiauthUserToken, sessions) {
+        const creds = btoa(`${clientId}:${clientSecret}`);
+        const res = await fetch(`${this.baseUrl}/sessions/bridge/batch`, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+                'Authorization': `Basic ${creds}`,
+                'Accept': 'application/json'
+            },
+            body: JSON.stringify({ kiauthUserToken, sessions })
+        });
+        if (!res.ok) {
+            const err = await res.json().catch(() => ({}));
+            throw { code: err.code || 'REPORT_BATCH_FAILED', message: err.message || 'Failed to report batch session bridge.' };
+        }
+        return res.json();
+    }
+    // Email-keyed login reporting ("claim on first sighting"). Use this when you do NOT
+    // have a kiauthUserToken — e.g. a user logged in with their own email/password/Google
+    // and you want it to appear in their Kiauth app. If the user is already linked we show
+    // it immediately; if not, Kiauth asks them "was this you?" to link or revoke.
+    // Always resolves on a 2xx (Kiauth never reveals whether the email is a Kiauth user).
+    // Requires a VERIFIED business + clientSecret → must run on your backend, never the browser.
+    async reportSessionByEmail(clientId, clientSecret, options) {
+        const creds = btoa(`${clientId}:${clientSecret}`);
+        const res = await fetch(`${this.baseUrl}/sessions/bridge/by-email`, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+                'Authorization': `Basic ${creds}`,
+                'Accept': 'application/json'
+            },
+            body: JSON.stringify(options)
+        });
+        if (!res.ok) {
+            const err = await res.json().catch(() => ({}));
+            throw { code: err.code || 'REPORT_BY_EMAIL_FAILED', message: err.message || 'Failed to report session by email.' };
+        }
+        return res.json();
+    }
+    // RP-initiated logout. Ends a Kiauth session the RP owns when the user logs out
+    // on the RP's own site, so the Kiauth app reflects it as revoked. Identify the
+    // session by accessToken (native SSO), sessionId, or externalSessionId (bridged).
+    // Requires clientSecret → must run on the developer's backend, never the browser.
+    async endSession(clientId, clientSecret, opts) {
+        const creds = btoa(`${clientId}:${clientSecret}`);
+        const res = await fetch(`${this.baseUrl}/sessions/bridge/end`, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+                'Authorization': `Basic ${creds}`,
+                'Accept': 'application/json'
+            },
+            body: JSON.stringify(opts)
+        });
+        if (!res.ok) {
+            const err = await res.json().catch(() => ({}));
+            throw { code: err.code || 'END_SESSION_FAILED', message: err.message || 'Failed to end session.' };
+        }
+        return res.json();
+    }
+}
+
+class KiauthWebsocket {
+    constructor(serverUrl) {
+        this.serverUrl = serverUrl;
+        this.ws = null;
+        this.pingIntervalId = null;
+        this.reconnectTimeoutId = null;
+        this.reconnectAttempts = 0;
+        this.maxReconnectAttempts = 5;
+        this.isIntentionalDisconnect = false;
+    }
+    connect(channelId, onAuthComplete, onError) {
+        this.isIntentionalDisconnect = false;
+        // Parse HTTP url to WS url using URL object to extract correct host
+        const urlObj = new URL(this.serverUrl);
+        const wsProtocol = urlObj.protocol.startsWith('https') ? 'wss' : 'ws';
+        const wsUrl = `${wsProtocol}://${urlObj.host}/socket.io/?EIO=4&transport=websocket`;
+        try {
+            this.ws = new WebSocket(wsUrl);
+        }
+        catch (err) {
+            onError({ code: 'WEBSOCKET_ERROR', message: 'Failed to initialize WebSocket client.' });
+            return;
+        }
+        this.ws.onopen = () => {
+            this.reconnectAttempts = 0;
+        };
+        this.ws.onmessage = (event) => {
+            const data = event.data;
+            if (typeof data !== 'string')
+                return;
+            // Handle Engine.io packet types:
+            // 0: Open (handshake JSON)
+            // 2: Ping
+            // 3: Pong
+            // 4: Message
+            // 40: Socket.io Connect
+            // 42: Socket.io Event message
+            if (data.startsWith('0')) {
+                try {
+                    const handshake = JSON.parse(data.substring(1));
+                    const pingInterval = handshake.pingInterval || 25000;
+                    // Start client-initiated ping (Engine.io v4)
+                    this.startPinging(pingInterval);
+                    // Join channel in default namespace
+                    if (this.ws && this.ws.readyState === WebSocket.OPEN) {
+                        // First send namespace connect (not strictly required but standard in socket.io client)
+                        this.ws.send('40');
+                        // Join our specific QR channel
+                        this.ws.send(`42["join_channel","${channelId}"]`);
+                    }
+                }
+                catch (e) {
+                    // Handshake parse failed
+                }
+            }
+            else if (data.startsWith('42')) {
+                try {
+                    const payload = JSON.parse(data.substring(2));
+                    if (Array.isArray(payload)) {
+                        const [eventName, eventData] = payload;
+                        if (eventName === 'auth_complete' && eventData) {
+                            this.disconnect();
+                            onAuthComplete(eventData);
+                        }
+                    }
+                }
+                catch (e) {
+                    // Message parsing failed
+                }
+            }
+        };
+        this.ws.onclose = (event) => {
+            this.stopPinging();
+            if (!this.isIntentionalDisconnect) {
+                this.attemptReconnect(channelId, onAuthComplete, onError);
+            }
+        };
+        this.ws.onerror = (err) => {
+            // Socket error
+        };
+    }
+    startPinging(interval) {
+        this.stopPinging();
+        this.pingIntervalId = setInterval(() => {
+            if (this.ws && this.ws.readyState === WebSocket.OPEN) {
+                this.ws.send('2'); // Ping packet type in Engine.io
+            }
+        }, interval);
+    }
+    stopPinging() {
+        if (this.pingIntervalId) {
+            clearInterval(this.pingIntervalId);
+            this.pingIntervalId = null;
+        }
+    }
+    attemptReconnect(channelId, onAuthComplete, onError) {
+        if (this.reconnectAttempts >= this.maxReconnectAttempts) {
+            onError({ code: 'WEBSOCKET_DISCONNECTED', message: 'WebSocket connection lost permanently.' });
+            return;
+        }
+        this.reconnectAttempts++;
+        const delay = Math.min(1000 * Math.pow(2, this.reconnectAttempts), 10000);
+        this.reconnectTimeoutId = setTimeout(() => {
+            this.connect(channelId, onAuthComplete, onError);
+        }, delay);
+    }
+    disconnect() {
+        this.isIntentionalDisconnect = true;
+        this.stopPinging();
+        if (this.reconnectTimeoutId) {
+            clearTimeout(this.reconnectTimeoutId);
+            this.reconnectTimeoutId = null;
+        }
+        if (this.ws) {
+            this.ws.close();
+            this.ws = null;
+        }
+    }
+}
+
+function getDefaultExportFromCjs (x) {
+	return x && x.__esModule && Object.prototype.hasOwnProperty.call(x, 'default') ? x['default'] : x;
+}
+
+var qrcode$1 = {exports: {}};
+
+(function (module, exports) {
+	//---------------------------------------------------------------------
+	//
+	// QR Code Generator for JavaScript
+	//
+	// Copyright (c) 2009 Kazuhiko Arase
+	//
+	// URL: http://www.d-project.com/
+	//
+	// Licensed under the MIT license:
+	//  http://www.opensource.org/licenses/mit-license.php
+	//
+	// The word 'QR Code' is registered trademark of
+	// DENSO WAVE INCORPORATED
+	//  http://www.denso-wave.com/qrcode/faqpatent-e.html
+	//
+	//---------------------------------------------------------------------
+
+	var qrcode = function() {
+
+	  //---------------------------------------------------------------------
+	  // qrcode
+	  //---------------------------------------------------------------------
+
+	  /**
+	   * qrcode
+	   * @param typeNumber 1 to 40
+	   * @param errorCorrectionLevel 'L','M','Q','H'
+	   */
+	  var qrcode = function(typeNumber, errorCorrectionLevel) {
+
+	    var PAD0 = 0xEC;
+	    var PAD1 = 0x11;
+
+	    var _typeNumber = typeNumber;
+	    var _errorCorrectionLevel = QRErrorCorrectionLevel[errorCorrectionLevel];
+	    var _modules = null;
+	    var _moduleCount = 0;
+	    var _dataCache = null;
+	    var _dataList = [];
+
+	    var _this = {};
+
+	    var makeImpl = function(test, maskPattern) {
+
+	      _moduleCount = _typeNumber * 4 + 17;
+	      _modules = function(moduleCount) {
+	        var modules = new Array(moduleCount);
+	        for (var row = 0; row < moduleCount; row += 1) {
+	          modules[row] = new Array(moduleCount);
+	          for (var col = 0; col < moduleCount; col += 1) {
+	            modules[row][col] = null;
+	          }
+	        }
+	        return modules;
+	      }(_moduleCount);
+
+	      setupPositionProbePattern(0, 0);
+	      setupPositionProbePattern(_moduleCount - 7, 0);
+	      setupPositionProbePattern(0, _moduleCount - 7);
+	      setupPositionAdjustPattern();
+	      setupTimingPattern();
+	      setupTypeInfo(test, maskPattern);
+
+	      if (_typeNumber >= 7) {
+	        setupTypeNumber(test);
+	      }
+
+	      if (_dataCache == null) {
+	        _dataCache = createData(_typeNumber, _errorCorrectionLevel, _dataList);
+	      }
+
+	      mapData(_dataCache, maskPattern);
+	    };
+
+	    var setupPositionProbePattern = function(row, col) {
+
+	      for (var r = -1; r <= 7; r += 1) {
+
+	        if (row + r <= -1 || _moduleCount <= row + r) continue;
+
+	        for (var c = -1; c <= 7; c += 1) {
+
+	          if (col + c <= -1 || _moduleCount <= col + c) continue;
+
+	          if ( (0 <= r && r <= 6 && (c == 0 || c == 6) )
+	              || (0 <= c && c <= 6 && (r == 0 || r == 6) )
+	              || (2 <= r && r <= 4 && 2 <= c && c <= 4) ) {
+	            _modules[row + r][col + c] = true;
+	          } else {
+	            _modules[row + r][col + c] = false;
+	          }
+	        }
+	      }
+	    };
+
+	    var getBestMaskPattern = function() {
+
+	      var minLostPoint = 0;
+	      var pattern = 0;
+
+	      for (var i = 0; i < 8; i += 1) {
+
+	        makeImpl(true, i);
+
+	        var lostPoint = QRUtil.getLostPoint(_this);
+
+	        if (i == 0 || minLostPoint > lostPoint) {
+	          minLostPoint = lostPoint;
+	          pattern = i;
+	        }
+	      }
+
+	      return pattern;
+	    };
+
+	    var setupTimingPattern = function() {
+
+	      for (var r = 8; r < _moduleCount - 8; r += 1) {
+	        if (_modules[r][6] != null) {
+	          continue;
+	        }
+	        _modules[r][6] = (r % 2 == 0);
+	      }
+
+	      for (var c = 8; c < _moduleCount - 8; c += 1) {
+	        if (_modules[6][c] != null) {
+	          continue;
+	        }
+	        _modules[6][c] = (c % 2 == 0);
+	      }
+	    };
+
+	    var setupPositionAdjustPattern = function() {
+
+	      var pos = QRUtil.getPatternPosition(_typeNumber);
+
+	      for (var i = 0; i < pos.length; i += 1) {
+
+	        for (var j = 0; j < pos.length; j += 1) {
+
+	          var row = pos[i];
+	          var col = pos[j];
+
+	          if (_modules[row][col] != null) {
+	            continue;
+	          }
+
+	          for (var r = -2; r <= 2; r += 1) {
+
+	            for (var c = -2; c <= 2; c += 1) {
+
+	              if (r == -2 || r == 2 || c == -2 || c == 2
+	                  || (r == 0 && c == 0) ) {
+	                _modules[row + r][col + c] = true;
+	              } else {
+	                _modules[row + r][col + c] = false;
+	              }
+	            }
+	          }
+	        }
+	      }
+	    };
+
+	    var setupTypeNumber = function(test) {
+
+	      var bits = QRUtil.getBCHTypeNumber(_typeNumber);
+
+	      for (var i = 0; i < 18; i += 1) {
+	        var mod = (!test && ( (bits >> i) & 1) == 1);
+	        _modules[Math.floor(i / 3)][i % 3 + _moduleCount - 8 - 3] = mod;
+	      }
+
+	      for (var i = 0; i < 18; i += 1) {
+	        var mod = (!test && ( (bits >> i) & 1) == 1);
+	        _modules[i % 3 + _moduleCount - 8 - 3][Math.floor(i / 3)] = mod;
+	      }
+	    };
+
+	    var setupTypeInfo = function(test, maskPattern) {
+
+	      var data = (_errorCorrectionLevel << 3) | maskPattern;
+	      var bits = QRUtil.getBCHTypeInfo(data);
+
+	      // vertical
+	      for (var i = 0; i < 15; i += 1) {
+
+	        var mod = (!test && ( (bits >> i) & 1) == 1);
+
+	        if (i < 6) {
+	          _modules[i][8] = mod;
+	        } else if (i < 8) {
+	          _modules[i + 1][8] = mod;
+	        } else {
+	          _modules[_moduleCount - 15 + i][8] = mod;
+	        }
+	      }
+
+	      // horizontal
+	      for (var i = 0; i < 15; i += 1) {
+
+	        var mod = (!test && ( (bits >> i) & 1) == 1);
+
+	        if (i < 8) {
+	          _modules[8][_moduleCount - i - 1] = mod;
+	        } else if (i < 9) {
+	          _modules[8][15 - i - 1 + 1] = mod;
+	        } else {
+	          _modules[8][15 - i - 1] = mod;
+	        }
+	      }
+
+	      // fixed module
+	      _modules[_moduleCount - 8][8] = (!test);
+	    };
+
+	    var mapData = function(data, maskPattern) {
+
+	      var inc = -1;
+	      var row = _moduleCount - 1;
+	      var bitIndex = 7;
+	      var byteIndex = 0;
+	      var maskFunc = QRUtil.getMaskFunction(maskPattern);
+
+	      for (var col = _moduleCount - 1; col > 0; col -= 2) {
+
+	        if (col == 6) col -= 1;
+
+	        while (true) {
+
+	          for (var c = 0; c < 2; c += 1) {
+
+	            if (_modules[row][col - c] == null) {
+
+	              var dark = false;
+
+	              if (byteIndex < data.length) {
+	                dark = ( ( (data[byteIndex] >>> bitIndex) & 1) == 1);
+	              }
+
+	              var mask = maskFunc(row, col - c);
+
+	              if (mask) {
+	                dark = !dark;
+	              }
+
+	              _modules[row][col - c] = dark;
+	              bitIndex -= 1;
+
+	              if (bitIndex == -1) {
+	                byteIndex += 1;
+	                bitIndex = 7;
+	              }
+	            }
+	          }
+
+	          row += inc;
+
+	          if (row < 0 || _moduleCount <= row) {
+	            row -= inc;
+	            inc = -inc;
+	            break;
+	          }
+	        }
+	      }
+	    };
+
+	    var createBytes = function(buffer, rsBlocks) {
+
+	      var offset = 0;
+
+	      var maxDcCount = 0;
+	      var maxEcCount = 0;
+
+	      var dcdata = new Array(rsBlocks.length);
+	      var ecdata = new Array(rsBlocks.length);
+
+	      for (var r = 0; r < rsBlocks.length; r += 1) {
+
+	        var dcCount = rsBlocks[r].dataCount;
+	        var ecCount = rsBlocks[r].totalCount - dcCount;
+
+	        maxDcCount = Math.max(maxDcCount, dcCount);
+	        maxEcCount = Math.max(maxEcCount, ecCount);
+
+	        dcdata[r] = new Array(dcCount);
+
+	        for (var i = 0; i < dcdata[r].length; i += 1) {
+	          dcdata[r][i] = 0xff & buffer.getBuffer()[i + offset];
+	        }
+	        offset += dcCount;
+
+	        var rsPoly = QRUtil.getErrorCorrectPolynomial(ecCount);
+	        var rawPoly = qrPolynomial(dcdata[r], rsPoly.getLength() - 1);
+
+	        var modPoly = rawPoly.mod(rsPoly);
+	        ecdata[r] = new Array(rsPoly.getLength() - 1);
+	        for (var i = 0; i < ecdata[r].length; i += 1) {
+	          var modIndex = i + modPoly.getLength() - ecdata[r].length;
+	          ecdata[r][i] = (modIndex >= 0)? modPoly.getAt(modIndex) : 0;
+	        }
+	      }
+
+	      var totalCodeCount = 0;
+	      for (var i = 0; i < rsBlocks.length; i += 1) {
+	        totalCodeCount += rsBlocks[i].totalCount;
+	      }
+
+	      var data = new Array(totalCodeCount);
+	      var index = 0;
+
+	      for (var i = 0; i < maxDcCount; i += 1) {
+	        for (var r = 0; r < rsBlocks.length; r += 1) {
+	          if (i < dcdata[r].length) {
+	            data[index] = dcdata[r][i];
+	            index += 1;
+	          }
+	        }
+	      }
+
+	      for (var i = 0; i < maxEcCount; i += 1) {
+	        for (var r = 0; r < rsBlocks.length; r += 1) {
+	          if (i < ecdata[r].length) {
+	            data[index] = ecdata[r][i];
+	            index += 1;
+	          }
+	        }
+	      }
+
+	      return data;
+	    };
+
+	    var createData = function(typeNumber, errorCorrectionLevel, dataList) {
+
+	      var rsBlocks = QRRSBlock.getRSBlocks(typeNumber, errorCorrectionLevel);
+
+	      var buffer = qrBitBuffer();
+
+	      for (var i = 0; i < dataList.length; i += 1) {
+	        var data = dataList[i];
+	        buffer.put(data.getMode(), 4);
+	        buffer.put(data.getLength(), QRUtil.getLengthInBits(data.getMode(), typeNumber) );
+	        data.write(buffer);
+	      }
+
+	      // calc num max data.
+	      var totalDataCount = 0;
+	      for (var i = 0; i < rsBlocks.length; i += 1) {
+	        totalDataCount += rsBlocks[i].dataCount;
+	      }
+
+	      if (buffer.getLengthInBits() > totalDataCount * 8) {
+	        throw 'code length overflow. ('
+	          + buffer.getLengthInBits()
+	          + '>'
+	          + totalDataCount * 8
+	          + ')';
+	      }
+
+	      // end code
+	      if (buffer.getLengthInBits() + 4 <= totalDataCount * 8) {
+	        buffer.put(0, 4);
+	      }
+
+	      // padding
+	      while (buffer.getLengthInBits() % 8 != 0) {
+	        buffer.putBit(false);
+	      }
+
+	      // padding
+	      while (true) {
+
+	        if (buffer.getLengthInBits() >= totalDataCount * 8) {
+	          break;
+	        }
+	        buffer.put(PAD0, 8);
+
+	        if (buffer.getLengthInBits() >= totalDataCount * 8) {
+	          break;
+	        }
+	        buffer.put(PAD1, 8);
+	      }
+
+	      return createBytes(buffer, rsBlocks);
+	    };
+
+	    _this.addData = function(data, mode) {
+
+	      mode = mode || 'Byte';
+
+	      var newData = null;
+
+	      switch(mode) {
+	      case 'Numeric' :
+	        newData = qrNumber(data);
+	        break;
+	      case 'Alphanumeric' :
+	        newData = qrAlphaNum(data);
+	        break;
+	      case 'Byte' :
+	        newData = qr8BitByte(data);
+	        break;
+	      case 'Kanji' :
+	        newData = qrKanji(data);
+	        break;
+	      default :
+	        throw 'mode:' + mode;
+	      }
+
+	      _dataList.push(newData);
+	      _dataCache = null;
+	    };
+
+	    _this.isDark = function(row, col) {
+	      if (row < 0 || _moduleCount <= row || col < 0 || _moduleCount <= col) {
+	        throw row + ',' + col;
+	      }
+	      return _modules[row][col];
+	    };
+
+	    _this.getModuleCount = function() {
+	      return _moduleCount;
+	    };
+
+	    _this.make = function() {
+	      if (_typeNumber < 1) {
+	        var typeNumber = 1;
+
+	        for (; typeNumber < 40; typeNumber++) {
+	          var rsBlocks = QRRSBlock.getRSBlocks(typeNumber, _errorCorrectionLevel);
+	          var buffer = qrBitBuffer();
+
+	          for (var i = 0; i < _dataList.length; i++) {
+	            var data = _dataList[i];
+	            buffer.put(data.getMode(), 4);
+	            buffer.put(data.getLength(), QRUtil.getLengthInBits(data.getMode(), typeNumber) );
+	            data.write(buffer);
+	          }
+
+	          var totalDataCount = 0;
+	          for (var i = 0; i < rsBlocks.length; i++) {
+	            totalDataCount += rsBlocks[i].dataCount;
+	          }
+
+	          if (buffer.getLengthInBits() <= totalDataCount * 8) {
+	            break;
+	          }
+	        }
+
+	        _typeNumber = typeNumber;
+	      }
+
+	      makeImpl(false, getBestMaskPattern() );
+	    };
+
+	    _this.createTableTag = function(cellSize, margin) {
+
+	      cellSize = cellSize || 2;
+	      margin = (typeof margin == 'undefined')? cellSize * 4 : margin;
+
+	      var qrHtml = '';
+
+	      qrHtml += '<table style="';
+	      qrHtml += ' border-width: 0px; border-style: none;';
+	      qrHtml += ' border-collapse: collapse;';
+	      qrHtml += ' padding: 0px; margin: ' + margin + 'px;';
+	      qrHtml += '">';
+	      qrHtml += '<tbody>';
+
+	      for (var r = 0; r < _this.getModuleCount(); r += 1) {
+
+	        qrHtml += '<tr>';
+
+	        for (var c = 0; c < _this.getModuleCount(); c += 1) {
+	          qrHtml += '<td style="';
+	          qrHtml += ' border-width: 0px; border-style: none;';
+	          qrHtml += ' border-collapse: collapse;';
+	          qrHtml += ' padding: 0px; margin: 0px;';
+	          qrHtml += ' width: ' + cellSize + 'px;';
+	          qrHtml += ' height: ' + cellSize + 'px;';
+	          qrHtml += ' background-color: ';
+	          qrHtml += _this.isDark(r, c)? '#000000' : '#ffffff';
+	          qrHtml += ';';
+	          qrHtml += '"/>';
+	        }
+
+	        qrHtml += '</tr>';
+	      }
+
+	      qrHtml += '</tbody>';
+	      qrHtml += '</table>';
+
+	      return qrHtml;
+	    };
+
+	    _this.createSvgTag = function(cellSize, margin, alt, title) {
+
+	      var opts = {};
+	      if (typeof arguments[0] == 'object') {
+	        // Called by options.
+	        opts = arguments[0];
+	        // overwrite cellSize and margin.
+	        cellSize = opts.cellSize;
+	        margin = opts.margin;
+	        alt = opts.alt;
+	        title = opts.title;
+	      }
+
+	      cellSize = cellSize || 2;
+	      margin = (typeof margin == 'undefined')? cellSize * 4 : margin;
+
+	      // Compose alt property surrogate
+	      alt = (typeof alt === 'string') ? {text: alt} : alt || {};
+	      alt.text = alt.text || null;
+	      alt.id = (alt.text) ? alt.id || 'qrcode-description' : null;
+
+	      // Compose title property surrogate
+	      title = (typeof title === 'string') ? {text: title} : title || {};
+	      title.text = title.text || null;
+	      title.id = (title.text) ? title.id || 'qrcode-title' : null;
+
+	      var size = _this.getModuleCount() * cellSize + margin * 2;
+	      var c, mc, r, mr, qrSvg='', rect;
+
+	      rect = 'l' + cellSize + ',0 0,' + cellSize +
+	        ' -' + cellSize + ',0 0,-' + cellSize + 'z ';
+
+	      qrSvg += '<svg version="1.1" xmlns="http://www.w3.org/2000/svg"';
+	      qrSvg += !opts.scalable ? ' width="' + size + 'px" height="' + size + 'px"' : '';
+	      qrSvg += ' viewBox="0 0 ' + size + ' ' + size + '" ';
+	      qrSvg += ' preserveAspectRatio="xMinYMin meet"';
+	      qrSvg += (title.text || alt.text) ? ' role="img" aria-labelledby="' +
+	          escapeXml([title.id, alt.id].join(' ').trim() ) + '"' : '';
+	      qrSvg += '>';
+	      qrSvg += (title.text) ? '<title id="' + escapeXml(title.id) + '">' +
+	          escapeXml(title.text) + '</title>' : '';
+	      qrSvg += (alt.text) ? '<description id="' + escapeXml(alt.id) + '">' +
+	          escapeXml(alt.text) + '</description>' : '';
+	      qrSvg += '<rect width="100%" height="100%" fill="white" cx="0" cy="0"/>';
+	      qrSvg += '<path d="';
+
+	      for (r = 0; r < _this.getModuleCount(); r += 1) {
+	        mr = r * cellSize + margin;
+	        for (c = 0; c < _this.getModuleCount(); c += 1) {
+	          if (_this.isDark(r, c) ) {
+	            mc = c*cellSize+margin;
+	            qrSvg += 'M' + mc + ',' + mr + rect;
+	          }
+	        }
+	      }
+
+	      qrSvg += '" stroke="transparent" fill="black"/>';
+	      qrSvg += '</svg>';
+
+	      return qrSvg;
+	    };
+
+	    _this.createDataURL = function(cellSize, margin) {
+
+	      cellSize = cellSize || 2;
+	      margin = (typeof margin == 'undefined')? cellSize * 4 : margin;
+
+	      var size = _this.getModuleCount() * cellSize + margin * 2;
+	      var min = margin;
+	      var max = size - margin;
+
+	      return createDataURL(size, size, function(x, y) {
+	        if (min <= x && x < max && min <= y && y < max) {
+	          var c = Math.floor( (x - min) / cellSize);
+	          var r = Math.floor( (y - min) / cellSize);
+	          return _this.isDark(r, c)? 0 : 1;
+	        } else {
+	          return 1;
+	        }
+	      } );
+	    };
+
+	    _this.createImgTag = function(cellSize, margin, alt) {
+
+	      cellSize = cellSize || 2;
+	      margin = (typeof margin == 'undefined')? cellSize * 4 : margin;
+
+	      var size = _this.getModuleCount() * cellSize + margin * 2;
+
+	      var img = '';
+	      img += '<img';
+	      img += '\u0020src="';
+	      img += _this.createDataURL(cellSize, margin);
+	      img += '"';
+	      img += '\u0020width="';
+	      img += size;
+	      img += '"';
+	      img += '\u0020height="';
+	      img += size;
+	      img += '"';
+	      if (alt) {
+	        img += '\u0020alt="';
+	        img += escapeXml(alt);
+	        img += '"';
+	      }
+	      img += '/>';
+
+	      return img;
+	    };
+
+	    var escapeXml = function(s) {
+	      var escaped = '';
+	      for (var i = 0; i < s.length; i += 1) {
+	        var c = s.charAt(i);
+	        switch(c) {
+	        case '<': escaped += '&lt;'; break;
+	        case '>': escaped += '&gt;'; break;
+	        case '&': escaped += '&amp;'; break;
+	        case '"': escaped += '&quot;'; break;
+	        default : escaped += c; break;
+	        }
+	      }
+	      return escaped;
+	    };
+
+	    var _createHalfASCII = function(margin) {
+	      var cellSize = 1;
+	      margin = (typeof margin == 'undefined')? cellSize * 2 : margin;
+
+	      var size = _this.getModuleCount() * cellSize + margin * 2;
+	      var min = margin;
+	      var max = size - margin;
+
+	      var y, x, r1, r2, p;
+
+	      var blocks = {
+	        '██': '█',
+	        '█ ': '▀',
+	        ' █': '▄',
+	        '  ': ' '
+	      };
+
+	      var blocksLastLineNoMargin = {
+	        '██': '▀',
+	        '█ ': '▀',
+	        ' █': ' ',
+	        '  ': ' '
+	      };
+
+	      var ascii = '';
+	      for (y = 0; y < size; y += 2) {
+	        r1 = Math.floor((y - min) / cellSize);
+	        r2 = Math.floor((y + 1 - min) / cellSize);
+	        for (x = 0; x < size; x += 1) {
+	          p = '█';
+
+	          if (min <= x && x < max && min <= y && y < max && _this.isDark(r1, Math.floor((x - min) / cellSize))) {
+	            p = ' ';
+	          }
+
+	          if (min <= x && x < max && min <= y+1 && y+1 < max && _this.isDark(r2, Math.floor((x - min) / cellSize))) {
+	            p += ' ';
+	          }
+	          else {
+	            p += '█';
+	          }
+
+	          // Output 2 characters per pixel, to create full square. 1 character per pixels gives only half width of square.
+	          ascii += (margin < 1 && y+1 >= max) ? blocksLastLineNoMargin[p] : blocks[p];
+	        }
+
+	        ascii += '\n';
+	      }
+
+	      if (size % 2 && margin > 0) {
+	        return ascii.substring(0, ascii.length - size - 1) + Array(size+1).join('▀');
+	      }
+
+	      return ascii.substring(0, ascii.length-1);
+	    };
+
+	    _this.createASCII = function(cellSize, margin) {
+	      cellSize = cellSize || 1;
+
+	      if (cellSize < 2) {
+	        return _createHalfASCII(margin);
+	      }
+
+	      cellSize -= 1;
+	      margin = (typeof margin == 'undefined')? cellSize * 2 : margin;
+
+	      var size = _this.getModuleCount() * cellSize + margin * 2;
+	      var min = margin;
+	      var max = size - margin;
+
+	      var y, x, r, p;
+
+	      var white = Array(cellSize+1).join('██');
+	      var black = Array(cellSize+1).join('  ');
+
+	      var ascii = '';
+	      var line = '';
+	      for (y = 0; y < size; y += 1) {
+	        r = Math.floor( (y - min) / cellSize);
+	        line = '';
+	        for (x = 0; x < size; x += 1) {
+	          p = 1;
+
+	          if (min <= x && x < max && min <= y && y < max && _this.isDark(r, Math.floor((x - min) / cellSize))) {
+	            p = 0;
+	          }
+
+	          // Output 2 characters per pixel, to create full square. 1 character per pixels gives only half width of square.
+	          line += p ? white : black;
+	        }
+
+	        for (r = 0; r < cellSize; r += 1) {
+	          ascii += line + '\n';
+	        }
+	      }
+
+	      return ascii.substring(0, ascii.length-1);
+	    };
+
+	    _this.renderTo2dContext = function(context, cellSize) {
+	      cellSize = cellSize || 2;
+	      var length = _this.getModuleCount();
+	      for (var row = 0; row < length; row++) {
+	        for (var col = 0; col < length; col++) {
+	          context.fillStyle = _this.isDark(row, col) ? 'black' : 'white';
+	          context.fillRect(row * cellSize, col * cellSize, cellSize, cellSize);
+	        }
+	      }
+	    };
+
+	    return _this;
+	  };
+
+	  //---------------------------------------------------------------------
+	  // qrcode.stringToBytes
+	  //---------------------------------------------------------------------
+
+	  qrcode.stringToBytesFuncs = {
+	    'default' : function(s) {
+	      var bytes = [];
+	      for (var i = 0; i < s.length; i += 1) {
+	        var c = s.charCodeAt(i);
+	        bytes.push(c & 0xff);
+	      }
+	      return bytes;
+	    }
+	  };
+
+	  qrcode.stringToBytes = qrcode.stringToBytesFuncs['default'];
+
+	  //---------------------------------------------------------------------
+	  // qrcode.createStringToBytes
+	  //---------------------------------------------------------------------
+
+	  /**
+	   * @param unicodeData base64 string of byte array.
+	   * [16bit Unicode],[16bit Bytes], ...
+	   * @param numChars
+	   */
+	  qrcode.createStringToBytes = function(unicodeData, numChars) {
+
+	    // create conversion map.
+
+	    var unicodeMap = function() {
+
+	      var bin = base64DecodeInputStream(unicodeData);
+	      var read = function() {
+	        var b = bin.read();
+	        if (b == -1) throw 'eof';
+	        return b;
+	      };
+
+	      var count = 0;
+	      var unicodeMap = {};
+	      while (true) {
+	        var b0 = bin.read();
+	        if (b0 == -1) break;
+	        var b1 = read();
+	        var b2 = read();
+	        var b3 = read();
+	        var k = String.fromCharCode( (b0 << 8) | b1);
+	        var v = (b2 << 8) | b3;
+	        unicodeMap[k] = v;
+	        count += 1;
+	      }
+	      if (count != numChars) {
+	        throw count + ' != ' + numChars;
+	      }
+
+	      return unicodeMap;
+	    }();
+
+	    var unknownChar = '?'.charCodeAt(0);
+
+	    return function(s) {
+	      var bytes = [];
+	      for (var i = 0; i < s.length; i += 1) {
+	        var c = s.charCodeAt(i);
+	        if (c < 128) {
+	          bytes.push(c);
+	        } else {
+	          var b = unicodeMap[s.charAt(i)];
+	          if (typeof b == 'number') {
+	            if ( (b & 0xff) == b) {
+	              // 1byte
+	              bytes.push(b);
+	            } else {
+	              // 2bytes
+	              bytes.push(b >>> 8);
+	              bytes.push(b & 0xff);
+	            }
+	          } else {
+	            bytes.push(unknownChar);
+	          }
+	        }
+	      }
+	      return bytes;
+	    };
+	  };
+
+	  //---------------------------------------------------------------------
+	  // QRMode
+	  //---------------------------------------------------------------------
+
+	  var QRMode = {
+	    MODE_NUMBER :    1 << 0,
+	    MODE_ALPHA_NUM : 1 << 1,
+	    MODE_8BIT_BYTE : 1 << 2,
+	    MODE_KANJI :     1 << 3
+	  };
+
+	  //---------------------------------------------------------------------
+	  // QRErrorCorrectionLevel
+	  //---------------------------------------------------------------------
+
+	  var QRErrorCorrectionLevel = {
+	    L : 1,
+	    M : 0,
+	    Q : 3,
+	    H : 2
+	  };
+
+	  //---------------------------------------------------------------------
+	  // QRMaskPattern
+	  //---------------------------------------------------------------------
+
+	  var QRMaskPattern = {
+	    PATTERN000 : 0,
+	    PATTERN001 : 1,
+	    PATTERN010 : 2,
+	    PATTERN011 : 3,
+	    PATTERN100 : 4,
+	    PATTERN101 : 5,
+	    PATTERN110 : 6,
+	    PATTERN111 : 7
+	  };
+
+	  //---------------------------------------------------------------------
+	  // QRUtil
+	  //---------------------------------------------------------------------
+
+	  var QRUtil = function() {
+
+	    var PATTERN_POSITION_TABLE = [
+	      [],
+	      [6, 18],
+	      [6, 22],
+	      [6, 26],
+	      [6, 30],
+	      [6, 34],
+	      [6, 22, 38],
+	      [6, 24, 42],
+	      [6, 26, 46],
+	      [6, 28, 50],
+	      [6, 30, 54],
+	      [6, 32, 58],
+	      [6, 34, 62],
+	      [6, 26, 46, 66],
+	      [6, 26, 48, 70],
+	      [6, 26, 50, 74],
+	      [6, 30, 54, 78],
+	      [6, 30, 56, 82],
+	      [6, 30, 58, 86],
+	      [6, 34, 62, 90],
+	      [6, 28, 50, 72, 94],
+	      [6, 26, 50, 74, 98],
+	      [6, 30, 54, 78, 102],
+	      [6, 28, 54, 80, 106],
+	      [6, 32, 58, 84, 110],
+	      [6, 30, 58, 86, 114],
+	      [6, 34, 62, 90, 118],
+	      [6, 26, 50, 74, 98, 122],
+	      [6, 30, 54, 78, 102, 126],
+	      [6, 26, 52, 78, 104, 130],
+	      [6, 30, 56, 82, 108, 134],
+	      [6, 34, 60, 86, 112, 138],
+	      [6, 30, 58, 86, 114, 142],
+	      [6, 34, 62, 90, 118, 146],
+	      [6, 30, 54, 78, 102, 126, 150],
+	      [6, 24, 50, 76, 102, 128, 154],
+	      [6, 28, 54, 80, 106, 132, 158],
+	      [6, 32, 58, 84, 110, 136, 162],
+	      [6, 26, 54, 82, 110, 138, 166],
+	      [6, 30, 58, 86, 114, 142, 170]
+	    ];
+	    var G15 = (1 << 10) | (1 << 8) | (1 << 5) | (1 << 4) | (1 << 2) | (1 << 1) | (1 << 0);
+	    var G18 = (1 << 12) | (1 << 11) | (1 << 10) | (1 << 9) | (1 << 8) | (1 << 5) | (1 << 2) | (1 << 0);
+	    var G15_MASK = (1 << 14) | (1 << 12) | (1 << 10) | (1 << 4) | (1 << 1);
+
+	    var _this = {};
+
+	    var getBCHDigit = function(data) {
+	      var digit = 0;
+	      while (data != 0) {
+	        digit += 1;
+	        data >>>= 1;
+	      }
+	      return digit;
+	    };
+
+	    _this.getBCHTypeInfo = function(data) {
+	      var d = data << 10;
+	      while (getBCHDigit(d) - getBCHDigit(G15) >= 0) {
+	        d ^= (G15 << (getBCHDigit(d) - getBCHDigit(G15) ) );
+	      }
+	      return ( (data << 10) | d) ^ G15_MASK;
+	    };
+
+	    _this.getBCHTypeNumber = function(data) {
+	      var d = data << 12;
+	      while (getBCHDigit(d) - getBCHDigit(G18) >= 0) {
+	        d ^= (G18 << (getBCHDigit(d) - getBCHDigit(G18) ) );
+	      }
+	      return (data << 12) | d;
+	    };
+
+	    _this.getPatternPosition = function(typeNumber) {
+	      return PATTERN_POSITION_TABLE[typeNumber - 1];
+	    };
+
+	    _this.getMaskFunction = function(maskPattern) {
+
+	      switch (maskPattern) {
+
+	      case QRMaskPattern.PATTERN000 :
+	        return function(i, j) { return (i + j) % 2 == 0; };
+	      case QRMaskPattern.PATTERN001 :
+	        return function(i, j) { return i % 2 == 0; };
+	      case QRMaskPattern.PATTERN010 :
+	        return function(i, j) { return j % 3 == 0; };
+	      case QRMaskPattern.PATTERN011 :
+	        return function(i, j) { return (i + j) % 3 == 0; };
+	      case QRMaskPattern.PATTERN100 :
+	        return function(i, j) { return (Math.floor(i / 2) + Math.floor(j / 3) ) % 2 == 0; };
+	      case QRMaskPattern.PATTERN101 :
+	        return function(i, j) { return (i * j) % 2 + (i * j) % 3 == 0; };
+	      case QRMaskPattern.PATTERN110 :
+	        return function(i, j) { return ( (i * j) % 2 + (i * j) % 3) % 2 == 0; };
+	      case QRMaskPattern.PATTERN111 :
+	        return function(i, j) { return ( (i * j) % 3 + (i + j) % 2) % 2 == 0; };
+
+	      default :
+	        throw 'bad maskPattern:' + maskPattern;
+	      }
+	    };
+
+	    _this.getErrorCorrectPolynomial = function(errorCorrectLength) {
+	      var a = qrPolynomial([1], 0);
+	      for (var i = 0; i < errorCorrectLength; i += 1) {
+	        a = a.multiply(qrPolynomial([1, QRMath.gexp(i)], 0) );
+	      }
+	      return a;
+	    };
+
+	    _this.getLengthInBits = function(mode, type) {
+
+	      if (1 <= type && type < 10) {
+
+	        // 1 - 9
+
+	        switch(mode) {
+	        case QRMode.MODE_NUMBER    : return 10;
+	        case QRMode.MODE_ALPHA_NUM : return 9;
+	        case QRMode.MODE_8BIT_BYTE : return 8;
+	        case QRMode.MODE_KANJI     : return 8;
+	        default :
+	          throw 'mode:' + mode;
+	        }
+
+	      } else if (type < 27) {
+
+	        // 10 - 26
+
+	        switch(mode) {
+	        case QRMode.MODE_NUMBER    : return 12;
+	        case QRMode.MODE_ALPHA_NUM : return 11;
+	        case QRMode.MODE_8BIT_BYTE : return 16;
+	        case QRMode.MODE_KANJI     : return 10;
+	        default :
+	          throw 'mode:' + mode;
+	        }
+
+	      } else if (type < 41) {
+
+	        // 27 - 40
+
+	        switch(mode) {
+	        case QRMode.MODE_NUMBER    : return 14;
+	        case QRMode.MODE_ALPHA_NUM : return 13;
+	        case QRMode.MODE_8BIT_BYTE : return 16;
+	        case QRMode.MODE_KANJI     : return 12;
+	        default :
+	          throw 'mode:' + mode;
+	        }
+
+	      } else {
+	        throw 'type:' + type;
+	      }
+	    };
+
+	    _this.getLostPoint = function(qrcode) {
+
+	      var moduleCount = qrcode.getModuleCount();
+
+	      var lostPoint = 0;
+
+	      // LEVEL1
+
+	      for (var row = 0; row < moduleCount; row += 1) {
+	        for (var col = 0; col < moduleCount; col += 1) {
+
+	          var sameCount = 0;
+	          var dark = qrcode.isDark(row, col);
+
+	          for (var r = -1; r <= 1; r += 1) {
+
+	            if (row + r < 0 || moduleCount <= row + r) {
+	              continue;
+	            }
+
+	            for (var c = -1; c <= 1; c += 1) {
+
+	              if (col + c < 0 || moduleCount <= col + c) {
+	                continue;
+	              }
+
+	              if (r == 0 && c == 0) {
+	                continue;
+	              }
+
+	              if (dark == qrcode.isDark(row + r, col + c) ) {
+	                sameCount += 1;
+	              }
+	            }
+	          }
+
+	          if (sameCount > 5) {
+	            lostPoint += (3 + sameCount - 5);
+	          }
+	        }
+	      }
+	      // LEVEL2
+
+	      for (var row = 0; row < moduleCount - 1; row += 1) {
+	        for (var col = 0; col < moduleCount - 1; col += 1) {
+	          var count = 0;
+	          if (qrcode.isDark(row, col) ) count += 1;
+	          if (qrcode.isDark(row + 1, col) ) count += 1;
+	          if (qrcode.isDark(row, col + 1) ) count += 1;
+	          if (qrcode.isDark(row + 1, col + 1) ) count += 1;
+	          if (count == 0 || count == 4) {
+	            lostPoint += 3;
+	          }
+	        }
+	      }
+
+	      // LEVEL3
+
+	      for (var row = 0; row < moduleCount; row += 1) {
+	        for (var col = 0; col < moduleCount - 6; col += 1) {
+	          if (qrcode.isDark(row, col)
+	              && !qrcode.isDark(row, col + 1)
+	              &&  qrcode.isDark(row, col + 2)
+	              &&  qrcode.isDark(row, col + 3)
+	              &&  qrcode.isDark(row, col + 4)
+	              && !qrcode.isDark(row, col + 5)
+	              &&  qrcode.isDark(row, col + 6) ) {
+	            lostPoint += 40;
+	          }
+	        }
+	      }
+
+	      for (var col = 0; col < moduleCount; col += 1) {
+	        for (var row = 0; row < moduleCount - 6; row += 1) {
+	          if (qrcode.isDark(row, col)
+	              && !qrcode.isDark(row + 1, col)
+	              &&  qrcode.isDark(row + 2, col)
+	              &&  qrcode.isDark(row + 3, col)
+	              &&  qrcode.isDark(row + 4, col)
+	              && !qrcode.isDark(row + 5, col)
+	              &&  qrcode.isDark(row + 6, col) ) {
+	            lostPoint += 40;
+	          }
+	        }
+	      }
+
+	      // LEVEL4
+
+	      var darkCount = 0;
+
+	      for (var col = 0; col < moduleCount; col += 1) {
+	        for (var row = 0; row < moduleCount; row += 1) {
+	          if (qrcode.isDark(row, col) ) {
+	            darkCount += 1;
+	          }
+	        }
+	      }
+
+	      var ratio = Math.abs(100 * darkCount / moduleCount / moduleCount - 50) / 5;
+	      lostPoint += ratio * 10;
+
+	      return lostPoint;
+	    };
+
+	    return _this;
+	  }();
+
+	  //---------------------------------------------------------------------
+	  // QRMath
+	  //---------------------------------------------------------------------
+
+	  var QRMath = function() {
+
+	    var EXP_TABLE = new Array(256);
+	    var LOG_TABLE = new Array(256);
+
+	    // initialize tables
+	    for (var i = 0; i < 8; i += 1) {
+	      EXP_TABLE[i] = 1 << i;
+	    }
+	    for (var i = 8; i < 256; i += 1) {
+	      EXP_TABLE[i] = EXP_TABLE[i - 4]
+	        ^ EXP_TABLE[i - 5]
+	        ^ EXP_TABLE[i - 6]
+	        ^ EXP_TABLE[i - 8];
+	    }
+	    for (var i = 0; i < 255; i += 1) {
+	      LOG_TABLE[EXP_TABLE[i] ] = i;
+	    }
+
+	    var _this = {};
+
+	    _this.glog = function(n) {
+
+	      if (n < 1) {
+	        throw 'glog(' + n + ')';
+	      }
+
+	      return LOG_TABLE[n];
+	    };
+
+	    _this.gexp = function(n) {
+
+	      while (n < 0) {
+	        n += 255;
+	      }
+
+	      while (n >= 256) {
+	        n -= 255;
+	      }
+
+	      return EXP_TABLE[n];
+	    };
+
+	    return _this;
+	  }();
+
+	  //---------------------------------------------------------------------
+	  // qrPolynomial
+	  //---------------------------------------------------------------------
+
+	  function qrPolynomial(num, shift) {
+
+	    if (typeof num.length == 'undefined') {
+	      throw num.length + '/' + shift;
+	    }
+
+	    var _num = function() {
+	      var offset = 0;
+	      while (offset < num.length && num[offset] == 0) {
+	        offset += 1;
+	      }
+	      var _num = new Array(num.length - offset + shift);
+	      for (var i = 0; i < num.length - offset; i += 1) {
+	        _num[i] = num[i + offset];
+	      }
+	      return _num;
+	    }();
+
+	    var _this = {};
+
+	    _this.getAt = function(index) {
+	      return _num[index];
+	    };
+
+	    _this.getLength = function() {
+	      return _num.length;
+	    };
+
+	    _this.multiply = function(e) {
+
+	      var num = new Array(_this.getLength() + e.getLength() - 1);
+
+	      for (var i = 0; i < _this.getLength(); i += 1) {
+	        for (var j = 0; j < e.getLength(); j += 1) {
+	          num[i + j] ^= QRMath.gexp(QRMath.glog(_this.getAt(i) ) + QRMath.glog(e.getAt(j) ) );
+	        }
+	      }
+
+	      return qrPolynomial(num, 0);
+	    };
+
+	    _this.mod = function(e) {
+
+	      if (_this.getLength() - e.getLength() < 0) {
+	        return _this;
+	      }
+
+	      var ratio = QRMath.glog(_this.getAt(0) ) - QRMath.glog(e.getAt(0) );
+
+	      var num = new Array(_this.getLength() );
+	      for (var i = 0; i < _this.getLength(); i += 1) {
+	        num[i] = _this.getAt(i);
+	      }
+
+	      for (var i = 0; i < e.getLength(); i += 1) {
+	        num[i] ^= QRMath.gexp(QRMath.glog(e.getAt(i) ) + ratio);
+	      }
+
+	      // recursive call
+	      return qrPolynomial(num, 0).mod(e);
+	    };
+
+	    return _this;
+	  }
+	  //---------------------------------------------------------------------
+	  // QRRSBlock
+	  //---------------------------------------------------------------------
+
+	  var QRRSBlock = function() {
+
+	    var RS_BLOCK_TABLE = [
+
+	      // L
+	      // M
+	      // Q
+	      // H
+
+	      // 1
+	      [1, 26, 19],
+	      [1, 26, 16],
+	      [1, 26, 13],
+	      [1, 26, 9],
+
+	      // 2
+	      [1, 44, 34],
+	      [1, 44, 28],
+	      [1, 44, 22],
+	      [1, 44, 16],
+
+	      // 3
+	      [1, 70, 55],
+	      [1, 70, 44],
+	      [2, 35, 17],
+	      [2, 35, 13],
+
+	      // 4
+	      [1, 100, 80],
+	      [2, 50, 32],
+	      [2, 50, 24],
+	      [4, 25, 9],
+
+	      // 5
+	      [1, 134, 108],
+	      [2, 67, 43],
+	      [2, 33, 15, 2, 34, 16],
+	      [2, 33, 11, 2, 34, 12],
+
+	      // 6
+	      [2, 86, 68],
+	      [4, 43, 27],
+	      [4, 43, 19],
+	      [4, 43, 15],
+
+	      // 7
+	      [2, 98, 78],
+	      [4, 49, 31],
+	      [2, 32, 14, 4, 33, 15],
+	      [4, 39, 13, 1, 40, 14],
+
+	      // 8
+	      [2, 121, 97],
+	      [2, 60, 38, 2, 61, 39],
+	      [4, 40, 18, 2, 41, 19],
+	      [4, 40, 14, 2, 41, 15],
+
+	      // 9
+	      [2, 146, 116],
+	      [3, 58, 36, 2, 59, 37],
+	      [4, 36, 16, 4, 37, 17],
+	      [4, 36, 12, 4, 37, 13],
+
+	      // 10
+	      [2, 86, 68, 2, 87, 69],
+	      [4, 69, 43, 1, 70, 44],
+	      [6, 43, 19, 2, 44, 20],
+	      [6, 43, 15, 2, 44, 16],
+
+	      // 11
+	      [4, 101, 81],
+	      [1, 80, 50, 4, 81, 51],
+	      [4, 50, 22, 4, 51, 23],
+	      [3, 36, 12, 8, 37, 13],
+
+	      // 12
+	      [2, 116, 92, 2, 117, 93],
+	      [6, 58, 36, 2, 59, 37],
+	      [4, 46, 20, 6, 47, 21],
+	      [7, 42, 14, 4, 43, 15],
+
+	      // 13
+	      [4, 133, 107],
+	      [8, 59, 37, 1, 60, 38],
+	      [8, 44, 20, 4, 45, 21],
+	      [12, 33, 11, 4, 34, 12],
+
+	      // 14
+	      [3, 145, 115, 1, 146, 116],
+	      [4, 64, 40, 5, 65, 41],
+	      [11, 36, 16, 5, 37, 17],
+	      [11, 36, 12, 5, 37, 13],
+
+	      // 15
+	      [5, 109, 87, 1, 110, 88],
+	      [5, 65, 41, 5, 66, 42],
+	      [5, 54, 24, 7, 55, 25],
+	      [11, 36, 12, 7, 37, 13],
+
+	      // 16
+	      [5, 122, 98, 1, 123, 99],
+	      [7, 73, 45, 3, 74, 46],
+	      [15, 43, 19, 2, 44, 20],
+	      [3, 45, 15, 13, 46, 16],
+
+	      // 17
+	      [1, 135, 107, 5, 136, 108],
+	      [10, 74, 46, 1, 75, 47],
+	      [1, 50, 22, 15, 51, 23],
+	      [2, 42, 14, 17, 43, 15],
+
+	      // 18
+	      [5, 150, 120, 1, 151, 121],
+	      [9, 69, 43, 4, 70, 44],
+	      [17, 50, 22, 1, 51, 23],
+	      [2, 42, 14, 19, 43, 15],
+
+	      // 19
+	      [3, 141, 113, 4, 142, 114],
+	      [3, 70, 44, 11, 71, 45],
+	      [17, 47, 21, 4, 48, 22],
+	      [9, 39, 13, 16, 40, 14],
+
+	      // 20
+	      [3, 135, 107, 5, 136, 108],
+	      [3, 67, 41, 13, 68, 42],
+	      [15, 54, 24, 5, 55, 25],
+	      [15, 43, 15, 10, 44, 16],
+
+	      // 21
+	      [4, 144, 116, 4, 145, 117],
+	      [17, 68, 42],
+	      [17, 50, 22, 6, 51, 23],
+	      [19, 46, 16, 6, 47, 17],
+
+	      // 22
+	      [2, 139, 111, 7, 140, 112],
+	      [17, 74, 46],
+	      [7, 54, 24, 16, 55, 25],
+	      [34, 37, 13],
+
+	      // 23
+	      [4, 151, 121, 5, 152, 122],
+	      [4, 75, 47, 14, 76, 48],
+	      [11, 54, 24, 14, 55, 25],
+	      [16, 45, 15, 14, 46, 16],
+
+	      // 24
+	      [6, 147, 117, 4, 148, 118],
+	      [6, 73, 45, 14, 74, 46],
+	      [11, 54, 24, 16, 55, 25],
+	      [30, 46, 16, 2, 47, 17],
+
+	      // 25
+	      [8, 132, 106, 4, 133, 107],
+	      [8, 75, 47, 13, 76, 48],
+	      [7, 54, 24, 22, 55, 25],
+	      [22, 45, 15, 13, 46, 16],
+
+	      // 26
+	      [10, 142, 114, 2, 143, 115],
+	      [19, 74, 46, 4, 75, 47],
+	      [28, 50, 22, 6, 51, 23],
+	      [33, 46, 16, 4, 47, 17],
+
+	      // 27
+	      [8, 152, 122, 4, 153, 123],
+	      [22, 73, 45, 3, 74, 46],
+	      [8, 53, 23, 26, 54, 24],
+	      [12, 45, 15, 28, 46, 16],
+
+	      // 28
+	      [3, 147, 117, 10, 148, 118],
+	      [3, 73, 45, 23, 74, 46],
+	      [4, 54, 24, 31, 55, 25],
+	      [11, 45, 15, 31, 46, 16],
+
+	      // 29
+	      [7, 146, 116, 7, 147, 117],
+	      [21, 73, 45, 7, 74, 46],
+	      [1, 53, 23, 37, 54, 24],
+	      [19, 45, 15, 26, 46, 16],
+
+	      // 30
+	      [5, 145, 115, 10, 146, 116],
+	      [19, 75, 47, 10, 76, 48],
+	      [15, 54, 24, 25, 55, 25],
+	      [23, 45, 15, 25, 46, 16],
+
+	      // 31
+	      [13, 145, 115, 3, 146, 116],
+	      [2, 74, 46, 29, 75, 47],
+	      [42, 54, 24, 1, 55, 25],
+	      [23, 45, 15, 28, 46, 16],
+
+	      // 32
+	      [17, 145, 115],
+	      [10, 74, 46, 23, 75, 47],
+	      [10, 54, 24, 35, 55, 25],
+	      [19, 45, 15, 35, 46, 16],
+
+	      // 33
+	      [17, 145, 115, 1, 146, 116],
+	      [14, 74, 46, 21, 75, 47],
+	      [29, 54, 24, 19, 55, 25],
+	      [11, 45, 15, 46, 46, 16],
+
+	      // 34
+	      [13, 145, 115, 6, 146, 116],
+	      [14, 74, 46, 23, 75, 47],
+	      [44, 54, 24, 7, 55, 25],
+	      [59, 46, 16, 1, 47, 17],
+
+	      // 35
+	      [12, 151, 121, 7, 152, 122],
+	      [12, 75, 47, 26, 76, 48],
+	      [39, 54, 24, 14, 55, 25],
+	      [22, 45, 15, 41, 46, 16],
+
+	      // 36
+	      [6, 151, 121, 14, 152, 122],
+	      [6, 75, 47, 34, 76, 48],
+	      [46, 54, 24, 10, 55, 25],
+	      [2, 45, 15, 64, 46, 16],
+
+	      // 37
+	      [17, 152, 122, 4, 153, 123],
+	      [29, 74, 46, 14, 75, 47],
+	      [49, 54, 24, 10, 55, 25],
+	      [24, 45, 15, 46, 46, 16],
+
+	      // 38
+	      [4, 152, 122, 18, 153, 123],
+	      [13, 74, 46, 32, 75, 47],
+	      [48, 54, 24, 14, 55, 25],
+	      [42, 45, 15, 32, 46, 16],
+
+	      // 39
+	      [20, 147, 117, 4, 148, 118],
+	      [40, 75, 47, 7, 76, 48],
+	      [43, 54, 24, 22, 55, 25],
+	      [10, 45, 15, 67, 46, 16],
+
+	      // 40
+	      [19, 148, 118, 6, 149, 119],
+	      [18, 75, 47, 31, 76, 48],
+	      [34, 54, 24, 34, 55, 25],
+	      [20, 45, 15, 61, 46, 16]
+	    ];
+
+	    var qrRSBlock = function(totalCount, dataCount) {
+	      var _this = {};
+	      _this.totalCount = totalCount;
+	      _this.dataCount = dataCount;
+	      return _this;
+	    };
+
+	    var _this = {};
+
+	    var getRsBlockTable = function(typeNumber, errorCorrectionLevel) {
+
+	      switch(errorCorrectionLevel) {
+	      case QRErrorCorrectionLevel.L :
+	        return RS_BLOCK_TABLE[(typeNumber - 1) * 4 + 0];
+	      case QRErrorCorrectionLevel.M :
+	        return RS_BLOCK_TABLE[(typeNumber - 1) * 4 + 1];
+	      case QRErrorCorrectionLevel.Q :
+	        return RS_BLOCK_TABLE[(typeNumber - 1) * 4 + 2];
+	      case QRErrorCorrectionLevel.H :
+	        return RS_BLOCK_TABLE[(typeNumber - 1) * 4 + 3];
+	      default :
+	        return undefined;
+	      }
+	    };
+
+	    _this.getRSBlocks = function(typeNumber, errorCorrectionLevel) {
+
+	      var rsBlock = getRsBlockTable(typeNumber, errorCorrectionLevel);
+
+	      if (typeof rsBlock == 'undefined') {
+	        throw 'bad rs block @ typeNumber:' + typeNumber +
+	            '/errorCorrectionLevel:' + errorCorrectionLevel;
+	      }
+
+	      var length = rsBlock.length / 3;
+
+	      var list = [];
+
+	      for (var i = 0; i < length; i += 1) {
+
+	        var count = rsBlock[i * 3 + 0];
+	        var totalCount = rsBlock[i * 3 + 1];
+	        var dataCount = rsBlock[i * 3 + 2];
+
+	        for (var j = 0; j < count; j += 1) {
+	          list.push(qrRSBlock(totalCount, dataCount) );
+	        }
+	      }
+
+	      return list;
+	    };
+
+	    return _this;
+	  }();
+
+	  //---------------------------------------------------------------------
+	  // qrBitBuffer
+	  //---------------------------------------------------------------------
+
+	  var qrBitBuffer = function() {
+
+	    var _buffer = [];
+	    var _length = 0;
+
+	    var _this = {};
+
+	    _this.getBuffer = function() {
+	      return _buffer;
+	    };
+
+	    _this.getAt = function(index) {
+	      var bufIndex = Math.floor(index / 8);
+	      return ( (_buffer[bufIndex] >>> (7 - index % 8) ) & 1) == 1;
+	    };
+
+	    _this.put = function(num, length) {
+	      for (var i = 0; i < length; i += 1) {
+	        _this.putBit( ( (num >>> (length - i - 1) ) & 1) == 1);
+	      }
+	    };
+
+	    _this.getLengthInBits = function() {
+	      return _length;
+	    };
+
+	    _this.putBit = function(bit) {
+
+	      var bufIndex = Math.floor(_length / 8);
+	      if (_buffer.length <= bufIndex) {
+	        _buffer.push(0);
+	      }
+
+	      if (bit) {
+	        _buffer[bufIndex] |= (0x80 >>> (_length % 8) );
+	      }
+
+	      _length += 1;
+	    };
+
+	    return _this;
+	  };
+
+	  //---------------------------------------------------------------------
+	  // qrNumber
+	  //---------------------------------------------------------------------
+
+	  var qrNumber = function(data) {
+
+	    var _mode = QRMode.MODE_NUMBER;
+	    var _data = data;
+
+	    var _this = {};
+
+	    _this.getMode = function() {
+	      return _mode;
+	    };
+
+	    _this.getLength = function(buffer) {
+	      return _data.length;
+	    };
+
+	    _this.write = function(buffer) {
+
+	      var data = _data;
+
+	      var i = 0;
+
+	      while (i + 2 < data.length) {
+	        buffer.put(strToNum(data.substring(i, i + 3) ), 10);
+	        i += 3;
+	      }
+
+	      if (i < data.length) {
+	        if (data.length - i == 1) {
+	          buffer.put(strToNum(data.substring(i, i + 1) ), 4);
+	        } else if (data.length - i == 2) {
+	          buffer.put(strToNum(data.substring(i, i + 2) ), 7);
+	        }
+	      }
+	    };
+
+	    var strToNum = function(s) {
+	      var num = 0;
+	      for (var i = 0; i < s.length; i += 1) {
+	        num = num * 10 + chatToNum(s.charAt(i) );
+	      }
+	      return num;
+	    };
+
+	    var chatToNum = function(c) {
+	      if ('0' <= c && c <= '9') {
+	        return c.charCodeAt(0) - '0'.charCodeAt(0);
+	      }
+	      throw 'illegal char :' + c;
+	    };
+
+	    return _this;
+	  };
+
+	  //---------------------------------------------------------------------
+	  // qrAlphaNum
+	  //---------------------------------------------------------------------
+
+	  var qrAlphaNum = function(data) {
+
+	    var _mode = QRMode.MODE_ALPHA_NUM;
+	    var _data = data;
+
+	    var _this = {};
+
+	    _this.getMode = function() {
+	      return _mode;
+	    };
+
+	    _this.getLength = function(buffer) {
+	      return _data.length;
+	    };
+
+	    _this.write = function(buffer) {
+
+	      var s = _data;
+
+	      var i = 0;
+
+	      while (i + 1 < s.length) {
+	        buffer.put(
+	          getCode(s.charAt(i) ) * 45 +
+	          getCode(s.charAt(i + 1) ), 11);
+	        i += 2;
+	      }
+
+	      if (i < s.length) {
+	        buffer.put(getCode(s.charAt(i) ), 6);
+	      }
+	    };
+
+	    var getCode = function(c) {
+
+	      if ('0' <= c && c <= '9') {
+	        return c.charCodeAt(0) - '0'.charCodeAt(0);
+	      } else if ('A' <= c && c <= 'Z') {
+	        return c.charCodeAt(0) - 'A'.charCodeAt(0) + 10;
+	      } else {
+	        switch (c) {
+	        case ' ' : return 36;
+	        case '$' : return 37;
+	        case '%' : return 38;
+	        case '*' : return 39;
+	        case '+' : return 40;
+	        case '-' : return 41;
+	        case '.' : return 42;
+	        case '/' : return 43;
+	        case ':' : return 44;
+	        default :
+	          throw 'illegal char :' + c;
+	        }
+	      }
+	    };
+
+	    return _this;
+	  };
+
+	  //---------------------------------------------------------------------
+	  // qr8BitByte
+	  //---------------------------------------------------------------------
+
+	  var qr8BitByte = function(data) {
+
+	    var _mode = QRMode.MODE_8BIT_BYTE;
+	    var _bytes = qrcode.stringToBytes(data);
+
+	    var _this = {};
+
+	    _this.getMode = function() {
+	      return _mode;
+	    };
+
+	    _this.getLength = function(buffer) {
+	      return _bytes.length;
+	    };
+
+	    _this.write = function(buffer) {
+	      for (var i = 0; i < _bytes.length; i += 1) {
+	        buffer.put(_bytes[i], 8);
+	      }
+	    };
+
+	    return _this;
+	  };
+
+	  //---------------------------------------------------------------------
+	  // qrKanji
+	  //---------------------------------------------------------------------
+
+	  var qrKanji = function(data) {
+
+	    var _mode = QRMode.MODE_KANJI;
+
+	    var stringToBytes = qrcode.stringToBytesFuncs['SJIS'];
+	    if (!stringToBytes) {
+	      throw 'sjis not supported.';
+	    }
+	    !function(c, code) {
+	      // self test for sjis support.
+	      var test = stringToBytes(c);
+	      if (test.length != 2 || ( (test[0] << 8) | test[1]) != code) {
+	        throw 'sjis not supported.';
+	      }
+	    }('\u53cb', 0x9746);
+
+	    var _bytes = stringToBytes(data);
+
+	    var _this = {};
+
+	    _this.getMode = function() {
+	      return _mode;
+	    };
+
+	    _this.getLength = function(buffer) {
+	      return ~~(_bytes.length / 2);
+	    };
+
+	    _this.write = function(buffer) {
+
+	      var data = _bytes;
+
+	      var i = 0;
+
+	      while (i + 1 < data.length) {
+
+	        var c = ( (0xff & data[i]) << 8) | (0xff & data[i + 1]);
+
+	        if (0x8140 <= c && c <= 0x9FFC) {
+	          c -= 0x8140;
+	        } else if (0xE040 <= c && c <= 0xEBBF) {
+	          c -= 0xC140;
+	        } else {
+	          throw 'illegal char at ' + (i + 1) + '/' + c;
+	        }
+
+	        c = ( (c >>> 8) & 0xff) * 0xC0 + (c & 0xff);
+
+	        buffer.put(c, 13);
+
+	        i += 2;
+	      }
+
+	      if (i < data.length) {
+	        throw 'illegal char at ' + (i + 1);
+	      }
+	    };
+
+	    return _this;
+	  };
+
+	  //=====================================================================
+	  // GIF Support etc.
+	  //
+
+	  //---------------------------------------------------------------------
+	  // byteArrayOutputStream
+	  //---------------------------------------------------------------------
+
+	  var byteArrayOutputStream = function() {
+
+	    var _bytes = [];
+
+	    var _this = {};
+
+	    _this.writeByte = function(b) {
+	      _bytes.push(b & 0xff);
+	    };
+
+	    _this.writeShort = function(i) {
+	      _this.writeByte(i);
+	      _this.writeByte(i >>> 8);
+	    };
+
+	    _this.writeBytes = function(b, off, len) {
+	      off = off || 0;
+	      len = len || b.length;
+	      for (var i = 0; i < len; i += 1) {
+	        _this.writeByte(b[i + off]);
+	      }
+	    };
+
+	    _this.writeString = function(s) {
+	      for (var i = 0; i < s.length; i += 1) {
+	        _this.writeByte(s.charCodeAt(i) );
+	      }
+	    };
+
+	    _this.toByteArray = function() {
+	      return _bytes;
+	    };
+
+	    _this.toString = function() {
+	      var s = '';
+	      s += '[';
+	      for (var i = 0; i < _bytes.length; i += 1) {
+	        if (i > 0) {
+	          s += ',';
+	        }
+	        s += _bytes[i];
+	      }
+	      s += ']';
+	      return s;
+	    };
+
+	    return _this;
+	  };
+
+	  //---------------------------------------------------------------------
+	  // base64EncodeOutputStream
+	  //---------------------------------------------------------------------
+
+	  var base64EncodeOutputStream = function() {
+
+	    var _buffer = 0;
+	    var _buflen = 0;
+	    var _length = 0;
+	    var _base64 = '';
+
+	    var _this = {};
+
+	    var writeEncoded = function(b) {
+	      _base64 += String.fromCharCode(encode(b & 0x3f) );
+	    };
+
+	    var encode = function(n) {
+	      if (n < 0) ; else if (n < 26) {
+	        return 0x41 + n;
+	      } else if (n < 52) {
+	        return 0x61 + (n - 26);
+	      } else if (n < 62) {
+	        return 0x30 + (n - 52);
+	      } else if (n == 62) {
+	        return 0x2b;
+	      } else if (n == 63) {
+	        return 0x2f;
+	      }
+	      throw 'n:' + n;
+	    };
+
+	    _this.writeByte = function(n) {
+
+	      _buffer = (_buffer << 8) | (n & 0xff);
+	      _buflen += 8;
+	      _length += 1;
+
+	      while (_buflen >= 6) {
+	        writeEncoded(_buffer >>> (_buflen - 6) );
+	        _buflen -= 6;
+	      }
+	    };
+
+	    _this.flush = function() {
+
+	      if (_buflen > 0) {
+	        writeEncoded(_buffer << (6 - _buflen) );
+	        _buffer = 0;
+	        _buflen = 0;
+	      }
+
+	      if (_length % 3 != 0) {
+	        // padding
+	        var padlen = 3 - _length % 3;
+	        for (var i = 0; i < padlen; i += 1) {
+	          _base64 += '=';
+	        }
+	      }
+	    };
+
+	    _this.toString = function() {
+	      return _base64;
+	    };
+
+	    return _this;
+	  };
+
+	  //---------------------------------------------------------------------
+	  // base64DecodeInputStream
+	  //---------------------------------------------------------------------
+
+	  var base64DecodeInputStream = function(str) {
+
+	    var _str = str;
+	    var _pos = 0;
+	    var _buffer = 0;
+	    var _buflen = 0;
+
+	    var _this = {};
+
+	    _this.read = function() {
+
+	      while (_buflen < 8) {
+
+	        if (_pos >= _str.length) {
+	          if (_buflen == 0) {
+	            return -1;
+	          }
+	          throw 'unexpected end of file./' + _buflen;
+	        }
+
+	        var c = _str.charAt(_pos);
+	        _pos += 1;
+
+	        if (c == '=') {
+	          _buflen = 0;
+	          return -1;
+	        } else if (c.match(/^\s$/) ) {
+	          // ignore if whitespace.
+	          continue;
+	        }
+
+	        _buffer = (_buffer << 6) | decode(c.charCodeAt(0) );
+	        _buflen += 6;
+	      }
+
+	      var n = (_buffer >>> (_buflen - 8) ) & 0xff;
+	      _buflen -= 8;
+	      return n;
+	    };
+
+	    var decode = function(c) {
+	      if (0x41 <= c && c <= 0x5a) {
+	        return c - 0x41;
+	      } else if (0x61 <= c && c <= 0x7a) {
+	        return c - 0x61 + 26;
+	      } else if (0x30 <= c && c <= 0x39) {
+	        return c - 0x30 + 52;
+	      } else if (c == 0x2b) {
+	        return 62;
+	      } else if (c == 0x2f) {
+	        return 63;
+	      } else {
+	        throw 'c:' + c;
+	      }
+	    };
+
+	    return _this;
+	  };
+
+	  //---------------------------------------------------------------------
+	  // gifImage (B/W)
+	  //---------------------------------------------------------------------
+
+	  var gifImage = function(width, height) {
+
+	    var _width = width;
+	    var _height = height;
+	    var _data = new Array(width * height);
+
+	    var _this = {};
+
+	    _this.setPixel = function(x, y, pixel) {
+	      _data[y * _width + x] = pixel;
+	    };
+
+	    _this.write = function(out) {
+
+	      //---------------------------------
+	      // GIF Signature
+
+	      out.writeString('GIF87a');
+
+	      //---------------------------------
+	      // Screen Descriptor
+
+	      out.writeShort(_width);
+	      out.writeShort(_height);
+
+	      out.writeByte(0x80); // 2bit
+	      out.writeByte(0);
+	      out.writeByte(0);
+
+	      //---------------------------------
+	      // Global Color Map
+
+	      // black
+	      out.writeByte(0x00);
+	      out.writeByte(0x00);
+	      out.writeByte(0x00);
+
+	      // white
+	      out.writeByte(0xff);
+	      out.writeByte(0xff);
+	      out.writeByte(0xff);
+
+	      //---------------------------------
+	      // Image Descriptor
+
+	      out.writeString(',');
+	      out.writeShort(0);
+	      out.writeShort(0);
+	      out.writeShort(_width);
+	      out.writeShort(_height);
+	      out.writeByte(0);
+
+	      //---------------------------------
+	      // Local Color Map
+
+	      //---------------------------------
+	      // Raster Data
+
+	      var lzwMinCodeSize = 2;
+	      var raster = getLZWRaster(lzwMinCodeSize);
+
+	      out.writeByte(lzwMinCodeSize);
+
+	      var offset = 0;
+
+	      while (raster.length - offset > 255) {
+	        out.writeByte(255);
+	        out.writeBytes(raster, offset, 255);
+	        offset += 255;
+	      }
+
+	      out.writeByte(raster.length - offset);
+	      out.writeBytes(raster, offset, raster.length - offset);
+	      out.writeByte(0x00);
+
+	      //---------------------------------
+	      // GIF Terminator
+	      out.writeString(';');
+	    };
+
+	    var bitOutputStream = function(out) {
+
+	      var _out = out;
+	      var _bitLength = 0;
+	      var _bitBuffer = 0;
+
+	      var _this = {};
+
+	      _this.write = function(data, length) {
+
+	        if ( (data >>> length) != 0) {
+	          throw 'length over';
+	        }
+
+	        while (_bitLength + length >= 8) {
+	          _out.writeByte(0xff & ( (data << _bitLength) | _bitBuffer) );
+	          length -= (8 - _bitLength);
+	          data >>>= (8 - _bitLength);
+	          _bitBuffer = 0;
+	          _bitLength = 0;
+	        }
+
+	        _bitBuffer = (data << _bitLength) | _bitBuffer;
+	        _bitLength = _bitLength + length;
+	      };
+
+	      _this.flush = function() {
+	        if (_bitLength > 0) {
+	          _out.writeByte(_bitBuffer);
+	        }
+	      };
+
+	      return _this;
+	    };
+
+	    var getLZWRaster = function(lzwMinCodeSize) {
+
+	      var clearCode = 1 << lzwMinCodeSize;
+	      var endCode = (1 << lzwMinCodeSize) + 1;
+	      var bitLength = lzwMinCodeSize + 1;
+
+	      // Setup LZWTable
+	      var table = lzwTable();
+
+	      for (var i = 0; i < clearCode; i += 1) {
+	        table.add(String.fromCharCode(i) );
+	      }
+	      table.add(String.fromCharCode(clearCode) );
+	      table.add(String.fromCharCode(endCode) );
+
+	      var byteOut = byteArrayOutputStream();
+	      var bitOut = bitOutputStream(byteOut);
+
+	      // clear code
+	      bitOut.write(clearCode, bitLength);
+
+	      var dataIndex = 0;
+
+	      var s = String.fromCharCode(_data[dataIndex]);
+	      dataIndex += 1;
+
+	      while (dataIndex < _data.length) {
+
+	        var c = String.fromCharCode(_data[dataIndex]);
+	        dataIndex += 1;
+
+	        if (table.contains(s + c) ) {
+
+	          s = s + c;
+
+	        } else {
+
+	          bitOut.write(table.indexOf(s), bitLength);
+
+	          if (table.size() < 0xfff) {
+
+	            if (table.size() == (1 << bitLength) ) {
+	              bitLength += 1;
+	            }
+
+	            table.add(s + c);
+	          }
+
+	          s = c;
+	        }
+	      }
+
+	      bitOut.write(table.indexOf(s), bitLength);
+
+	      // end code
+	      bitOut.write(endCode, bitLength);
+
+	      bitOut.flush();
+
+	      return byteOut.toByteArray();
+	    };
+
+	    var lzwTable = function() {
+
+	      var _map = {};
+	      var _size = 0;
+
+	      var _this = {};
+
+	      _this.add = function(key) {
+	        if (_this.contains(key) ) {
+	          throw 'dup key:' + key;
+	        }
+	        _map[key] = _size;
+	        _size += 1;
+	      };
+
+	      _this.size = function() {
+	        return _size;
+	      };
+
+	      _this.indexOf = function(key) {
+	        return _map[key];
+	      };
+
+	      _this.contains = function(key) {
+	        return typeof _map[key] != 'undefined';
+	      };
+
+	      return _this;
+	    };
+
+	    return _this;
+	  };
+
+	  var createDataURL = function(width, height, getPixel) {
+	    var gif = gifImage(width, height);
+	    for (var y = 0; y < height; y += 1) {
+	      for (var x = 0; x < width; x += 1) {
+	        gif.setPixel(x, y, getPixel(x, y) );
+	      }
+	    }
+
+	    var b = byteArrayOutputStream();
+	    gif.write(b);
+
+	    var base64 = base64EncodeOutputStream();
+	    var bytes = b.toByteArray();
+	    for (var i = 0; i < bytes.length; i += 1) {
+	      base64.writeByte(bytes[i]);
+	    }
+	    base64.flush();
+
+	    return 'data:image/gif;base64,' + base64;
+	  };
+
+	  //---------------------------------------------------------------------
+	  // returns qrcode function.
+
+	  return qrcode;
+	}();
+
+	// multibyte support
+	!function() {
+
+	  qrcode.stringToBytesFuncs['UTF-8'] = function(s) {
+	    // http://stackoverflow.com/questions/18729405/how-to-convert-utf8-string-to-byte-array
+	    function toUTF8Array(str) {
+	      var utf8 = [];
+	      for (var i=0; i < str.length; i++) {
+	        var charcode = str.charCodeAt(i);
+	        if (charcode < 0x80) utf8.push(charcode);
+	        else if (charcode < 0x800) {
+	          utf8.push(0xc0 | (charcode >> 6),
+	              0x80 | (charcode & 0x3f));
+	        }
+	        else if (charcode < 0xd800 || charcode >= 0xe000) {
+	          utf8.push(0xe0 | (charcode >> 12),
+	              0x80 | ((charcode>>6) & 0x3f),
+	              0x80 | (charcode & 0x3f));
+	        }
+	        // surrogate pair
+	        else {
+	          i++;
+	          // UTF-16 encodes 0x10000-0x10FFFF by
+	          // subtracting 0x10000 and splitting the
+	          // 20 bits of 0x0-0xFFFFF into two halves
+	          charcode = 0x10000 + (((charcode & 0x3ff)<<10)
+	            | (str.charCodeAt(i) & 0x3ff));
+	          utf8.push(0xf0 | (charcode >>18),
+	              0x80 | ((charcode>>12) & 0x3f),
+	              0x80 | ((charcode>>6) & 0x3f),
+	              0x80 | (charcode & 0x3f));
+	        }
+	      }
+	      return utf8;
+	    }
+	    return toUTF8Array(s);
+	  };
+
+	}();
+
+	(function (factory) {
+	  {
+	      module.exports = factory();
+	  }
+	}(function () {
+	    return qrcode;
+	})); 
+} (qrcode$1));
+
+var qrcodeExports = qrcode$1.exports;
+var qrcode = /*@__PURE__*/getDefaultExportFromCjs(qrcodeExports);
+
+class QrModal {
+    constructor() {
+        this.dialog = null;
+        this.timerInterval = null;
+    }
+    show(sessionId, qrData, expiresIn, // in seconds
+    onRefresh, onCancel) {
+        this.close();
+        // 1. Create dialog element
+        this.dialog = document.createElement('dialog');
+        this.dialog.className = 'kiauth-dialog';
+        this.dialog.setAttribute('closedby', 'any');
+        this.dialog.setAttribute('aria-labelledby', 'kiauth-dialog-title');
+        // 2. Generate QR code image source using qrcode-generator
+        let qrImgHtml = '';
+        try {
+            const qr = qrcode(0, 'M');
+            qr.addData(qrData);
+            qr.make();
+            qrImgHtml = qr.createImgTag(5, 0); // cellSize=5, margin=0
+        }
+        catch (e) {
+            qrImgHtml = '<div style="color:red;padding:20px;">Failed to render QR code</div>';
+        }
+        // 3. Setup deep link for mobile devices
+        const deepLink = `https://www.kiauth.com/auth?sid=${sessionId}`;
+        this.dialog.innerHTML = `
+      <div class="kiauth-modal-content">
+        <div class="kiauth-header">
+          <h2 id="kiauth-dialog-title" class="kiauth-title">Login with <span>Kiauth</span></h2>
+          <button class="kiauth-close-btn" type="button" aria-label="Close dialog">&times;</button>
+        </div>
+
+        <div class="kiauth-qr-container">
+          <div class="kiauth-qr-img-wrapper">${qrImgHtml}</div>
+          <div class="kiauth-qr-expired">
+            <span style="font-weight: 600; font-size: 16px; margin-bottom: 6px; color:#ff4f4f;">Session Expired</span>
+            <span style="font-size: 12px; opacity: 0.8; margin-bottom: 12px; line-height: 1.4;">For security, QR codes expire.</span>
+            <button class="kiauth-btn-refresh" type="button">Refresh Code</button>
+          </div>
+        </div>
+
+        <div class="kiauth-instructions">
+          Scan this QR code with the <strong>Kiauth mobile app</strong> to log in securely.
+        </div>
+
+        <div class="kiauth-timer">
+          Code expires in <span class="kiauth-countdown-val">05:00</span>
+        </div>
+
+        <div class="kiauth-divider"></div>
+
+        <div class="kiauth-mobile-direct">
+          <a href="${deepLink}" class="kiauth-btn-direct">Open on mobile instead</a>
+        </div>
+      </div>
+    `;
+        // Apply classes to the generated img element
+        const imgEl = this.dialog.querySelector('img');
+        if (imgEl) {
+            imgEl.className = 'kiauth-qr-img';
+            imgEl.alt = 'Kiauth QR Code';
+        }
+        document.body.appendChild(this.dialog);
+        this.dialog.showModal();
+        // 4. Event Listener bindings
+        const closeBtn = this.dialog.querySelector('.kiauth-close-btn');
+        closeBtn?.addEventListener('click', () => {
+            this.close();
+            onCancel();
+        });
+        const refreshBtn = this.dialog.querySelector('.kiauth-btn-refresh');
+        refreshBtn?.addEventListener('click', () => {
+            this.close();
+            onRefresh();
+        });
+        this.dialog.addEventListener('cancel', () => {
+            this.close();
+            onCancel();
+        });
+        // 5. Light-dismiss fallback for unsupported browsers
+        if (!('closedBy' in HTMLDialogElement.prototype)) {
+            this.dialog.addEventListener('click', (event) => {
+                if (!this.dialog || event.target !== this.dialog)
+                    return;
+                const rect = this.dialog.getBoundingClientRect();
+                const isDialogContent = (rect.top <= event.clientY &&
+                    event.clientY <= rect.top + rect.height &&
+                    rect.left <= event.clientX &&
+                    event.clientX <= rect.left + rect.width);
+                if (!isDialogContent) {
+                    this.close();
+                    onCancel();
+                }
+            });
+        }
+        // 6. Countdown Timer Logic
+        let secondsLeft = expiresIn;
+        const timerValEl = this.dialog.querySelector('.kiauth-countdown-val');
+        const expiredOverlayEl = this.dialog.querySelector('.kiauth-qr-expired');
+        const updateTimer = () => {
+            if (secondsLeft <= 0) {
+                clearInterval(this.timerInterval);
+                if (timerValEl)
+                    timerValEl.textContent = 'Expired';
+                if (expiredOverlayEl)
+                    expiredOverlayEl.classList.add('active');
+                return;
+            }
+            const mins = Math.floor(secondsLeft / 60);
+            const secs = secondsLeft % 60;
+            if (timerValEl) {
+                timerValEl.textContent = `${String(mins).padStart(2, '0')}:${String(secs).padStart(2, '0')}`;
+            }
+            secondsLeft--;
+        };
+        updateTimer();
+        this.timerInterval = setInterval(updateTimer, 1000);
+    }
+    close() {
+        if (this.timerInterval) {
+            clearInterval(this.timerInterval);
+            this.timerInterval = null;
+        }
+        if (this.dialog) {
+            try {
+                if (this.dialog.hasAttribute('open')) {
+                    this.dialog.close();
+                }
+            }
+            catch (e) {
+                // ignore errors if already closed
+            }
+            this.dialog.remove();
+            this.dialog = null;
+        }
+    }
+}
+
+/** Escapes user-supplied text before interpolating into innerHTML (SDK-02 / XSS). */
+function escapeHtml(value) {
+    return String(value)
+        .replace(/&/g, '&amp;')
+        .replace(/</g, '&lt;')
+        .replace(/>/g, '&gt;')
+        .replace(/"/g, '&quot;')
+        .replace(/'/g, '&#39;');
+}
+class OtpFallback {
+    constructor(container, callbacks, apiBaseUrl) {
+        this.callbacks = callbacks;
+        this.apiBaseUrl = apiBaseUrl;
+        this.container = container;
+    }
+    show() {
+        this.renderPhoneForm();
+    }
+    renderPhoneForm() {
+        this.container.innerHTML = `
+      <div class="kiauth-fallback-container">
+        <div class="kiauth-header">
+          <h2 class="kiauth-title">OTP Fallback</h2>
+          <button class="kiauth-close-btn" type="button" aria-label="Close dialog">&times;</button>
+        </div>
+        
+        <p style="font-size: 14px; opacity: 0.8; margin-bottom: 20px; text-align: center; line-height: 1.4;">
+          Kiauth QR login is offline. Log in with your verified phone number instead.
+        </p>
+
+        <div class="kiauth-input-group">
+          <label class="kiauth-input-label">Phone Number</label>
+          <input type="tel" class="kiauth-input kiauth-phone-input" placeholder="e.g. +91 99999 99999" value="+91 ">
+        </div>
+
+        <div class="kiauth-error-message" style="color: #ff4f4f; font-size: 13px; margin-bottom: 12px; display: none; text-align: center;"></div>
+
+        <button class="kiauth-btn-direct kiauth-btn-send-otp" type="button" style="width: 100%;">
+          Send OTP
+        </button>
+      </div>
+    `;
+        const closeBtn = this.container.querySelector('.kiauth-close-btn');
+        closeBtn?.addEventListener('click', () => {
+            this.callbacks.onCancel?.();
+        });
+        const phoneInput = this.container.querySelector('.kiauth-phone-input');
+        const sendBtn = this.container.querySelector('.kiauth-btn-send-otp');
+        const errorEl = this.container.querySelector('.kiauth-error-message');
+        // Focus phone input field
+        setTimeout(() => phoneInput.focus(), 100);
+        sendBtn.addEventListener('click', async () => {
+            const phone = phoneInput.value.trim();
+            if (!phone || phone === '+91' || phone.length < 8) {
+                errorEl.textContent = 'Please enter a valid phone number.';
+                errorEl.style.display = 'block';
+                return;
+            }
+            sendBtn.disabled = true;
+            sendBtn.innerHTML = '<span class="kiauth-spinner"></span>';
+            errorEl.style.display = 'none';
+            try {
+                let transactionId = '';
+                if (this.callbacks.onOtpSend) {
+                    const res = await this.callbacks.onOtpSend(phone);
+                    transactionId = typeof res === 'string' ? res : res?.transactionId || '';
+                }
+                else {
+                    // Call backend identity service
+                    const res = await fetch(`${this.apiBaseUrl}/identity/register/phone`, {
+                        method: 'POST',
+                        headers: {
+                            'Content-Type': 'application/json',
+                            'Accept': 'application/json'
+                        },
+                        body: JSON.stringify({ phoneNumber: phone })
+                    });
+                    const data = await res.json();
+                    if (!res.ok) {
+                        throw new Error(data.message || 'Failed to send OTP.');
+                    }
+                    transactionId = data.userId;
+                }
+                this.renderOtpForm(phone, transactionId);
+            }
+            catch (err) {
+                sendBtn.disabled = false;
+                sendBtn.textContent = 'Send OTP';
+                errorEl.textContent = err.message || 'Error sending OTP.';
+                errorEl.style.display = 'block';
+            }
+        });
+    }
+    renderOtpForm(phone, transactionId) {
+        this.container.innerHTML = `
+      <div class="kiauth-fallback-container">
+        <div class="kiauth-header">
+          <h2 class="kiauth-title">Enter OTP</h2>
+          <button class="kiauth-close-btn" type="button" aria-label="Close dialog">&times;</button>
+        </div>
+
+        <p style="font-size: 14px; opacity: 0.8; margin-bottom: 20px; text-align: center;">
+          An OTP has been sent to <strong>${escapeHtml(phone)}</strong>.
+        </p>
+
+        <div class="kiauth-otp-inputs">
+          <input type="text" pattern="[0-9]*" inputmode="numeric" maxlength="1" class="kiauth-otp-box" data-index="0">
+          <input type="text" pattern="[0-9]*" inputmode="numeric" maxlength="1" class="kiauth-otp-box" data-index="1" disabled>
+          <input type="text" pattern="[0-9]*" inputmode="numeric" maxlength="1" class="kiauth-otp-box" data-index="2" disabled>
+          <input type="text" pattern="[0-9]*" inputmode="numeric" maxlength="1" class="kiauth-otp-box" data-index="3" disabled>
+          <input type="text" pattern="[0-9]*" inputmode="numeric" maxlength="1" class="kiauth-otp-box" data-index="4" disabled>
+          <input type="text" pattern="[0-9]*" inputmode="numeric" maxlength="1" class="kiauth-otp-box" data-index="5" disabled>
+        </div>
+
+        <div class="kiauth-error-message" style="color: #ff4f4f; font-size: 13px; margin-bottom: 12px; display: none; text-align: center;"></div>
+
+        <button class="kiauth-btn-direct kiauth-btn-verify-otp" type="button" style="width: 100%;" disabled>
+          Verify
+        </button>
+
+        <button class="kiauth-btn-refresh" type="button" style="background: transparent; color: rgba(255, 255, 255, 0.5); font-size: 13px; width: 100%; margin-top: 12px;">
+          ← Back to Phone
+        </button>
+      </div>
+    `;
+        const closeBtn = this.container.querySelector('.kiauth-close-btn');
+        closeBtn?.addEventListener('click', () => {
+            this.callbacks.onCancel?.();
+        });
+        const backBtn = this.container.querySelector('.kiauth-btn-refresh');
+        backBtn?.addEventListener('click', () => {
+            this.renderPhoneForm();
+        });
+        const otpBoxes = this.container.querySelectorAll('.kiauth-otp-box');
+        const verifyBtn = this.container.querySelector('.kiauth-btn-verify-otp');
+        const errorEl = this.container.querySelector('.kiauth-error-message');
+        // Auto-focus first digit
+        setTimeout(() => otpBoxes[0].focus(), 100);
+        const getOtpValue = () => Array.from(otpBoxes).map(b => b.value).join('');
+        const otpContainer = this.container.querySelector('.kiauth-otp-inputs');
+        otpContainer?.addEventListener('paste', (e) => {
+            e.preventDefault();
+            const pastedData = e.clipboardData?.getData('text') || '';
+            const digits = pastedData.replace(/\D/g, '').slice(0, 6);
+            if (digits.length > 0) {
+                otpBoxes.forEach((box, i) => {
+                    if (digits[i]) {
+                        box.value = digits[i];
+                        box.removeAttribute('disabled');
+                        if (i < 5) {
+                            otpBoxes[i + 1].removeAttribute('disabled');
+                        }
+                    }
+                });
+                const focusIndex = Math.min(digits.length, 5);
+                otpBoxes[focusIndex].focus();
+                const otp = getOtpValue();
+                if (otp.length === 6) {
+                    verifyBtn.removeAttribute('disabled');
+                    verifyBtn.click();
+                }
+            }
+        });
+        otpBoxes.forEach((box, idx) => {
+            box.addEventListener('input', () => {
+                const val = box.value;
+                if (!/^[0-9]$/.test(val)) {
+                    box.value = '';
+                    return;
+                }
+                if (idx < 5) {
+                    const nextBox = otpBoxes[idx + 1];
+                    nextBox.removeAttribute('disabled');
+                    nextBox.focus();
+                }
+                const otp = getOtpValue();
+                if (otp.length === 6) {
+                    verifyBtn.removeAttribute('disabled');
+                }
+            });
+            box.addEventListener('keydown', (e) => {
+                if (e.key === 'Backspace' && box.value === '') {
+                    if (idx > 0) {
+                        const prevBox = otpBoxes[idx - 1];
+                        prevBox.focus();
+                        prevBox.value = '';
+                        verifyBtn.setAttribute('disabled', 'true');
+                    }
+                }
+            });
+        });
+        verifyBtn.addEventListener('click', async () => {
+            const otp = getOtpValue();
+            if (otp.length !== 6)
+                return;
+            verifyBtn.disabled = true;
+            verifyBtn.innerHTML = '<span class="kiauth-spinner"></span>';
+            errorEl.style.display = 'none';
+            try {
+                let user = null;
+                if (this.callbacks.onOtpVerify) {
+                    user = await this.callbacks.onOtpVerify(phone, otp, transactionId);
+                }
+                else {
+                    // Call backend verify OTP
+                    const res = await fetch(`${this.apiBaseUrl}/identity/register/verify-otp`, {
+                        method: 'POST',
+                        headers: {
+                            'Content-Type': 'application/json',
+                            'Accept': 'application/json'
+                        },
+                        body: JSON.stringify({ userId: transactionId, otp })
+                    });
+                    const data = await res.json();
+                    if (!res.ok) {
+                        throw new Error(data.message || 'OTP verification failed.');
+                    }
+                    // Build a mock user object representing the verified identity session
+                    user = {
+                        name: 'OTP Verified User',
+                        email: null,
+                        kiauth_verified: true,
+                        userToken: `fallback_token_${transactionId}`,
+                        verificationExpiry: new Date(Date.now() + 24 * 60 * 60 * 1000).toISOString()
+                    };
+                }
+                this.callbacks.onSuccess(user);
+            }
+            catch (err) {
+                verifyBtn.disabled = false;
+                verifyBtn.textContent = 'Verify';
+                errorEl.textContent = err.message || 'Invalid OTP. Please try again.';
+                errorEl.style.display = 'block';
+            }
+        });
+    }
+}
+
+class KiauthButton {
+    render(selector, options) {
+        const container = document.querySelector(selector);
+        if (!container) {
+            console.error(`KiauthSDK: Element with selector "${selector}" not found.`);
+            return;
+        }
+        const button = document.createElement('button');
+        button.type = 'button';
+        const theme = options.theme || 'purple';
+        const size = options.size || 'medium';
+        button.className = `kiauth-login-button kiauth-btn-${theme} kiauth-btn-${size}`;
+        // White-label overrides (applied as inline styles so they win over the preset
+        // theme classes; omitting them keeps the default themed look = backward compatible).
+        if (options.color) {
+            button.style.background = options.color;
+            button.style.borderColor = options.color;
+        }
+        if (options.textColor)
+            button.style.color = options.textColor;
+        if (options.fullWidth)
+            button.style.width = '100%';
+        if (options.shape) {
+            const radius = options.shape === 'pill' ? '999px' : options.shape === 'square' ? '4px' : '10px';
+            button.style.borderRadius = radius;
+        }
+        const text = options.text || 'Login with Kiauth';
+        const showLogo = options.logo !== false; // default true
+        // Premium logo icon (lock / identity shield). Suppressed when logo:false.
+        const logoSvg = showLogo
+            ? `<svg width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round" style="display:inline-block; vertical-align:middle;">
+          <rect x="3" y="11" width="18" height="11" rx="2" ry="2"></rect>
+          <path d="M7 11V7a5 5 0 0 1 10 0v4"></path>
+        </svg>`
+            : '';
+        button.innerHTML = `${logoSvg}<span style="${showLogo ? 'margin-left: 8px;' : ''}">${text}</span>`;
+        button.addEventListener('click', (e) => {
+            e.preventDefault();
+            options.onClick();
+        });
+        container.innerHTML = '';
+        container.appendChild(button);
+    }
+}
+
+const CSS_STYLES = `
+  @import url('https://fonts.googleapis.com/css2?family=Outfit:wght@300;400;500;600;700&display=swap');
+
+  :root {
+    --kiauth-purple: #534ab7;
+    --kiauth-purple-hover: #423a9c;
+    --kiauth-bg-dark: #0f0c1b;
+    --kiauth-border-dark: rgba(255, 255, 255, 0.1);
+    --kiauth-glass: rgba(15, 12, 27, 0.7);
+    --kiauth-glow: rgba(83, 74, 183, 0.3);
+  }
+
+  .kiauth-dialog {
+    border: none;
+    border-radius: 20px;
+    padding: 0;
+    background: var(--kiauth-bg-dark);
+    box-shadow: 0 20px 50px rgba(0, 0, 0, 0.5), 0 0 0 1px var(--kiauth-border-dark), 0 0 30px var(--kiauth-glow);
+    max-width: 420px;
+    width: 90%;
+    color: #ffffff;
+    font-family: 'Outfit', -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, sans-serif;
+    overflow: hidden;
+    outline: none;
+    opacity: 0;
+    transform: scale(0.9);
+    transition: opacity 0.3s cubic-bezier(0.16, 1, 0.3, 1), transform 0.3s cubic-bezier(0.16, 1, 0.3, 1);
+  }
+
+  .kiauth-dialog[open] {
+    opacity: 1;
+    transform: scale(1);
+  }
+
+  .kiauth-dialog::backdrop {
+    background: rgba(10, 8, 20, 0.75);
+    backdrop-filter: blur(12px);
+    opacity: 0;
+    transition: opacity 0.3s ease;
+  }
+
+  .kiauth-dialog[open]::backdrop {
+    opacity: 1;
+  }
+
+  .kiauth-modal-content {
+    padding: 32px 24px;
+    display: flex;
+    flex-direction: column;
+    align-items: center;
+    text-align: center;
+  }
+
+  .kiauth-header {
+    display: flex;
+    justify-content: space-between;
+    align-items: center;
+    width: 100%;
+    margin-bottom: 24px;
+  }
+
+  .kiauth-title {
+    font-size: 22px;
+    font-weight: 600;
+    color: #ffffff;
+    margin: 0;
+    letter-spacing: -0.5px;
+    display: flex;
+    align-items: center;
+    gap: 8px;
+  }
+
+  .kiauth-title span {
+    color: var(--kiauth-purple);
+    font-weight: 700;
+  }
+
+  .kiauth-close-btn {
+    background: transparent;
+    border: none;
+    color: rgba(255, 255, 255, 0.5);
+    font-size: 24px;
+    cursor: pointer;
+    line-height: 1;
+    padding: 4px;
+    transition: color 0.2s;
+  }
+
+  .kiauth-close-btn:hover {
+    color: #ffffff;
+  }
+
+  .kiauth-qr-container {
+    background: #ffffff;
+    padding: 16px;
+    border-radius: 16px;
+    margin-bottom: 20px;
+    box-shadow: 0 8px 30px rgba(0, 0, 0, 0.3);
+    position: relative;
+    display: flex;
+    justify-content: center;
+    align-items: center;
+    width: 220px;
+    height: 220px;
+  }
+
+  .kiauth-qr-img {
+    width: 200px;
+    height: 200px;
+    display: block;
+  }
+
+  .kiauth-qr-expired {
+    position: absolute;
+    top: 0;
+    left: 0;
+    right: 0;
+    bottom: 0;
+    background: rgba(15, 12, 27, 0.95);
+    backdrop-filter: blur(4px);
+    border-radius: 16px;
+    display: flex;
+    flex-direction: column;
+    justify-content: center;
+    align-items: center;
+    color: #ffffff;
+    opacity: 0;
+    pointer-events: none;
+    transition: opacity 0.3s;
+    padding: 16px;
+  }
+
+  .kiauth-qr-expired.active {
+    opacity: 1;
+    pointer-events: auto;
+  }
+
+  .kiauth-btn-refresh {
+    background: var(--kiauth-purple);
+    color: #ffffff;
+    border: none;
+    padding: 10px 20px;
+    border-radius: 8px;
+    font-weight: 500;
+    cursor: pointer;
+    margin-top: 12px;
+    font-family: inherit;
+    transition: background 0.2s;
+  }
+
+  .kiauth-btn-refresh:hover {
+    background: var(--kiauth-purple-hover);
+  }
+
+  .kiauth-instructions {
+    font-size: 14px;
+    color: rgba(255, 255, 255, 0.7);
+    margin-bottom: 24px;
+    line-height: 1.5;
+  }
+
+  .kiauth-timer {
+    font-size: 13px;
+    color: rgba(255, 255, 255, 0.4);
+    margin-bottom: 20px;
+  }
+
+  .kiauth-timer span {
+    color: var(--kiauth-purple);
+    font-weight: 600;
+  }
+
+  .kiauth-divider {
+    width: 100%;
+    height: 1px;
+    background: var(--kiauth-border-dark);
+    margin: 20px 0;
+  }
+
+  .kiauth-mobile-direct {
+    display: flex;
+    flex-direction: column;
+    gap: 12px;
+    width: 100%;
+  }
+
+  .kiauth-btn-direct {
+    background: var(--kiauth-purple);
+    color: #ffffff;
+    border: none;
+    padding: 14px;
+    border-radius: 12px;
+    font-size: 16px;
+    font-weight: 600;
+    cursor: pointer;
+    font-family: inherit;
+    text-decoration: none;
+    display: inline-block;
+    transition: background 0.2s, transform 0.1s;
+    box-shadow: 0 4px 12px var(--kiauth-glow);
+  }
+
+  .kiauth-btn-direct:hover {
+    background: var(--kiauth-purple-hover);
+  }
+
+  .kiauth-btn-direct:active {
+    transform: scale(0.98);
+  }
+
+  /* Button Renderers */
+  .kiauth-login-button {
+    display: inline-flex;
+    align-items: center;
+    justify-content: center;
+    gap: 10px;
+    font-family: 'Outfit', sans-serif;
+    font-weight: 600;
+    border-radius: 10px;
+    cursor: pointer;
+    transition: all 0.2s ease;
+    border: 1px solid transparent;
+    user-select: none;
+  }
+
+  .kiauth-btn-purple {
+    background-color: var(--kiauth-purple);
+    color: #ffffff;
+  }
+  .kiauth-btn-purple:hover {
+    background-color: var(--kiauth-purple-hover);
+  }
+
+  .kiauth-btn-white {
+    background-color: #ffffff;
+    color: #0f0c1b;
+    border-color: rgba(0, 0, 0, 0.1);
+  }
+  .kiauth-btn-white:hover {
+    background-color: #f5f5f7;
+  }
+
+  .kiauth-btn-dark {
+    background-color: #0f0c1b;
+    color: #ffffff;
+    border-color: var(--kiauth-border-dark);
+  }
+  .kiauth-btn-dark:hover {
+    background-color: #1a1530;
+  }
+
+  .kiauth-btn-small {
+    padding: 8px 16px;
+    font-size: 13px;
+  }
+  .kiauth-btn-medium {
+    padding: 12px 24px;
+    font-size: 15px;
+  }
+  .kiauth-btn-large {
+    padding: 16px 32px;
+    font-size: 17px;
+  }
+
+  /* Fallback Form */
+  .kiauth-fallback-container {
+    width: 100%;
+    display: flex;
+    flex-direction: column;
+    align-items: center;
+  }
+
+  .kiauth-input-group {
+    width: 100%;
+    margin-bottom: 16px;
+    text-align: left;
+  }
+
+  .kiauth-input-label {
+    display: block;
+    font-size: 12px;
+    font-weight: 500;
+    color: rgba(255, 255, 255, 0.5);
+    margin-bottom: 6px;
+    text-transform: uppercase;
+    letter-spacing: 0.5px;
+  }
+
+  .kiauth-input {
+    width: 100%;
+    background: rgba(255, 255, 255, 0.05);
+    border: 1px solid var(--kiauth-border-dark);
+    padding: 12px;
+    border-radius: 8px;
+    color: #ffffff;
+    font-family: inherit;
+    font-size: 15px;
+    box-sizing: border-box;
+    transition: border-color 0.2s, box-shadow 0.2s;
+  }
+
+  .kiauth-input:focus {
+    outline: none;
+    border-color: var(--kiauth-purple);
+    box-shadow: 0 0 10px var(--kiauth-glow);
+  }
+
+  .kiauth-otp-inputs {
+    display: flex;
+    justify-content: space-between;
+    gap: 8px;
+    margin: 16px 0;
+    width: 100%;
+  }
+
+  .kiauth-otp-box {
+    width: 45px;
+    height: 45px;
+    background: rgba(255, 255, 255, 0.05);
+    border: 1px solid var(--kiauth-border-dark);
+    border-radius: 8px;
+    text-align: center;
+    color: #ffffff;
+    font-size: 20px;
+    font-weight: 600;
+    transition: border-color 0.2s;
+  }
+
+  .kiauth-otp-box:focus {
+    outline: none;
+    border-color: var(--kiauth-purple);
+    box-shadow: 0 0 10px var(--kiauth-glow);
+  }
+
+  .kiauth-spinner {
+    border: 2px solid rgba(255, 255, 255, 0.1);
+    width: 18px;
+    height: 18px;
+    border-radius: 50%;
+    border-left-color: #ffffff;
+    animation: spin 0.8s linear infinite;
+    display: inline-block;
+  }
+
+  @keyframes spin {
+    0% { transform: rotate(0deg); }
+    100% { transform: rotate(360deg); }
+  }
+`;
+function injectStyles() {
+    const id = 'kiauth-sdk-styles';
+    if (document.getElementById(id))
+        return;
+    const style = document.createElement('style');
+    style.id = id;
+    style.textContent = CSS_STYLES;
+    document.head.appendChild(style);
+}
+
+/**
+ * PKCE (RFC 7636) helpers for public/browser clients, so the SDK never needs a
+ * confidential clientSecret in the browser. Uses the Web Crypto API.
+ */
+function base64UrlEncode(bytes) {
+    let str = '';
+    for (let i = 0; i < bytes.length; i++) {
+        str += String.fromCharCode(bytes[i]);
+    }
+    return btoa(str).replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
+}
+/** Cryptographically-random code_verifier (43 chars, base64url of 32 bytes). */
+function generateCodeVerifier() {
+    const arr = new Uint8Array(32);
+    crypto.getRandomValues(arr);
+    return base64UrlEncode(arr);
+}
+/** code_challenge = BASE64URL(SHA256(code_verifier)). */
+async function generateCodeChallenge(verifier) {
+    const data = new TextEncoder().encode(verifier);
+    const digest = await crypto.subtle.digest('SHA-256', data);
+    return base64UrlEncode(new Uint8Array(digest));
+}
+
+class KiauthSDK {
+    constructor(config) {
+        this.config = config;
+        this.isFallbackMode = false;
+        this.healthCheckIntervalId = null;
+        this.pollIntervalId = null;
+        this.completed = false;
+        if (typeof window !== 'undefined' && config.clientSecret) {
+            console.warn('[Kiauth] CRITICAL SECURITY WARNING: clientSecret is configured in the browser environment. This leaks your clientSecret to all visitors. Omit clientSecret and use the default PKCE flow in the browser.');
+        }
+        this.api = new KiauthApi(config);
+        this.socket = new KiauthWebsocket(this.api.getBaseUrl());
+        this.modal = new QrModal();
+        this.buttonRenderer = new KiauthButton();
+        // Inject the premium styles automatically into the head
+        if (typeof document !== 'undefined') {
+            injectStyles();
+        }
+        // Start background health checking to determine when to fallback silently
+        this.startHealthCheck();
+    }
+    startHealthCheck() {
+        const runCheck = async () => {
+            const isHealthy = await this.api.healthCheck();
+            this.isFallbackMode = !isHealthy;
+        };
+        runCheck();
+        this.healthCheckIntervalId = setInterval(runCheck, 30000); // Check every 30 seconds
+    }
+    renderButton(selector, options) {
+        this.buttonRenderer.render(selector, {
+            text: options.text,
+            theme: options.theme,
+            size: options.size,
+            color: options.color,
+            textColor: options.textColor,
+            shape: options.shape,
+            fullWidth: options.fullWidth,
+            logo: options.logo,
+            onClick: () => {
+                this.startLogin({
+                    onSuccess: options.onSuccess,
+                    onError: options.onError,
+                    onCancel: options.onCancel
+                });
+            }
+        });
+    }
+    async startLogin(options) {
+        // Don't trust a stale background health result (e.g. one slow/cold-start
+        // check). Re-verify with a longer timeout before deciding to fall back, so a
+        // backend that's just waking up still serves the real Kiauth flow.
+        if (this.isFallbackMode) {
+            const healthyNow = await this.api.healthCheck(15000);
+            this.isFallbackMode = !healthyNow;
+            if (!healthyNow) {
+                this.triggerOtpFallback(options);
+                return;
+            }
+        }
+        try {
+            this.completed = false;
+            this.stopPolling();
+            // 0. PKCE for public (browser) clients — the secure default. We only fall
+            // back to a confidential clientSecret if one was explicitly configured
+            // (discouraged in the browser).
+            const usePkce = !this.config.clientSecret;
+            let codeVerifier;
+            let codeChallenge;
+            if (usePkce) {
+                codeVerifier = generateCodeVerifier();
+                codeChallenge = await generateCodeChallenge(codeVerifier);
+            }
+            // 1. Initiate QR session on the backend
+            const session = await this.api.initiateSession(this.config.clientId, this.config.scopes, this.config.redirectUri, codeChallenge);
+            const isMobile = typeof navigator !== 'undefined' &&
+                /Android|iPhone|iPad|iPod/i.test(navigator.userAgent);
+            // 2. Open QR code modal
+            this.modal.show(session.sessionId, session.qrData, session.expiresIn, 
+            // On Refresh click
+            () => {
+                this.modal.close();
+                this.startLogin(options);
+            }, 
+            // On Cancel click
+            () => {
+                this.socket.disconnect();
+                this.stopPolling();
+                options.onCancel?.();
+            });
+            // 3. If mobile, attempt auto deep link redirect
+            if (isMobile) {
+                window.location.href = `https://www.kiauth.com/auth?sid=${session.sessionId}`;
+            }
+            // Shared completion: exchange the code and fire onSuccess exactly once,
+            // whether approval arrived via the WebSocket or via HTTP polling.
+            const finish = async (code) => {
+                if (this.completed)
+                    return;
+                this.completed = true;
+                this.stopPolling();
+                this.socket.disconnect();
+                this.modal.close();
+                try {
+                    if (!usePkce) {
+                        console.warn('[Kiauth] Using clientSecret in the browser is insecure. Omit clientSecret to use the default PKCE flow.');
+                    }
+                    const tokenResponse = await this.api.exchangeToken(code, this.config.clientId, usePkce ? { codeVerifier } : { clientSecret: this.config.clientSecret });
+                    options.onSuccess(tokenResponse.user);
+                }
+                catch (exchangeErr) {
+                    options.onError({
+                        code: exchangeErr.code || 'EXCHANGE_FAILED',
+                        message: exchangeErr.message || 'Failed to complete authentication exchange.'
+                    });
+                }
+            };
+            // 4a. Real-time path: WebSocket auth_complete (fast when it connects).
+            this.socket.connect(session.channelId, (authData) => finish(authData.code), () => {
+                // Socket loss is non-fatal: the poller below is the reliable path,
+                // so we do NOT drop to OTP here.
+            });
+            // 4b. Reliable path: poll session status until APPROVED. This works through
+            // proxies / cold networks where the WS event may never arrive (it's the same
+            // mechanism the dev portal uses successfully).
+            this.startPolling(session.sessionId, session.expiresIn, finish);
+        }
+        catch (err) {
+            this.modal.close();
+            if (err.code === 'KIAUTH_OFFLINE' || this.isFallbackMode) {
+                this.triggerOtpFallback(options);
+            }
+            else {
+                options.onError({
+                    code: err.code || 'LOGIN_INITIATE_FAILED',
+                    message: err.message || 'Login initiation failed.'
+                });
+            }
+        }
+    }
+    // Poll the QR session until it's APPROVED, then complete via the shared finish().
+    startPolling(sessionId, expiresInSec, finish) {
+        this.stopPolling();
+        const deadline = Date.now() + (expiresInSec || 300) * 1000;
+        let consecutiveErrors = 0;
+        this.pollIntervalId = setInterval(async () => {
+            if (this.completed || Date.now() > deadline) {
+                this.stopPolling();
+                return;
+            }
+            try {
+                const { status, authCode } = await this.api.getSessionStatus(sessionId);
+                consecutiveErrors = 0;
+                if (status === 'APPROVED' && authCode) {
+                    finish(authCode);
+                }
+                else if (status === 'EXPIRED' || status === 'USED') {
+                    this.stopPolling();
+                }
+            }
+            catch (err) {
+                consecutiveErrors++;
+                const isExpiredOrNotFound = err && (err.statusCode === 404 || err.statusCode === 410 || err.code === 'SESSION_EXPIRED');
+                if (isExpiredOrNotFound || consecutiveErrors >= 5) {
+                    this.stopPolling();
+                }
+            }
+        }, 3000);
+    }
+    stopPolling() {
+        if (this.pollIntervalId) {
+            clearInterval(this.pollIntervalId);
+            this.pollIntervalId = null;
+        }
+    }
+    triggerOtpFallback(options) {
+        // Show empty dialog container to render OTP fallback view inside
+        const dialog = document.createElement('dialog');
+        dialog.className = 'kiauth-dialog';
+        dialog.setAttribute('closedby', 'any');
+        dialog.setAttribute('aria-labelledby', 'kiauth-dialog-title');
+        document.body.appendChild(dialog);
+        dialog.showModal();
+        const cleanUp = () => {
+            dialog.close();
+            dialog.remove();
+        };
+        const fallback = new OtpFallback(dialog, {
+            onSuccess: (user) => {
+                cleanUp();
+                options.onSuccess(user);
+            },
+            onError: (err) => {
+                cleanUp();
+                options.onError(err);
+            },
+            onCancel: () => {
+                cleanUp();
+                options.onCancel?.();
+            }
+        }, this.api.getBaseUrl());
+        fallback.show();
+    }
+    async verifyToken(token) {
+        return this.api.verifyToken(token);
+    }
+    async reportSession(options) {
+        if (typeof window !== 'undefined') {
+            throw new Error('reportSession cannot be called in the browser environment to prevent client-side exposure of clientSecret. Run this method on your backend server only.');
+        }
+        if (!this.config.clientSecret) {
+            throw new Error('clientSecret is required to call reportSession.');
+        }
+        return this.api.reportSession(this.config.clientId, this.config.clientSecret, options);
+    }
+    async reportBatchSessions(kiauthUserToken, sessions) {
+        if (typeof window !== 'undefined') {
+            throw new Error('reportBatchSessions cannot be called in the browser environment to prevent client-side exposure of clientSecret. Run this method on your backend server only.');
+        }
+        if (!this.config.clientSecret) {
+            throw new Error('clientSecret is required to call reportBatchSessions.');
+        }
+        return this.api.reportBatchSessions(this.config.clientId, this.config.clientSecret, kiauthUserToken, sessions);
+    }
+    // Email-keyed login reporting ("claim on first sighting"). Use when you don't have a
+    // kiauthUserToken — e.g. the user signed in with their own email/password/Google and you
+    // want it shown in their Kiauth app. Requires a VERIFIED business + clientSecret — call
+    // this from your backend, never the browser.
+    async reportSessionByEmail(options) {
+        if (typeof window !== 'undefined') {
+            throw new Error('reportSessionByEmail cannot be called in the browser environment to prevent client-side exposure of clientSecret. Run this method on your backend server only.');
+        }
+        if (!this.config.clientSecret) {
+            throw new Error('clientSecret is required to call reportSessionByEmail (run this on your backend).');
+        }
+        return this.api.reportSessionByEmail(this.config.clientId, this.config.clientSecret, options);
+    }
+    // RP-initiated logout. Call this from your backend when the user logs out of
+    // your site so the Kiauth app shows the session as revoked. Requires
+    // clientSecret — never expose this in the browser.
+    async logout(opts) {
+        if (typeof window !== 'undefined') {
+            throw new Error('logout cannot be called in the browser environment to prevent client-side exposure of clientSecret. Run this method on your backend server only.');
+        }
+        if (!this.config.clientSecret) {
+            throw new Error('clientSecret is required to call logout (run this on your backend).');
+        }
+        return this.api.endSession(this.config.clientId, this.config.clientSecret, opts);
+    }
+    destroy() {
+        if (this.healthCheckIntervalId) {
+            clearInterval(this.healthCheckIntervalId);
+            this.healthCheckIntervalId = null;
+        }
+        this.socket.disconnect();
+        this.modal.close();
+    }
+}
+
+export { KiauthSDK };
+//# sourceMappingURL=kiauth-sdk.js.map