@kiauth/web-sdk 1.0.0

package/dist/kiauth-sdk.min.js

@@ -0,0 +1,3692 @@
+(function (global, factory) {
+    typeof exports === 'object' && typeof module !== 'undefined' ? module.exports = factory() :
+    typeof define === 'function' && define.amd ? define(factory) :
+    (global = typeof globalThis !== 'undefined' ? globalThis : global || self, global.KiauthSDK = factory());
+})(this, (function () { 'use strict';
+
+    class KiauthApi {
+        constructor(config) {
+            this.baseUrl = KiauthApi.resolveBaseUrl(config);
+        }
+        // Resolve the backend API base. An explicit config.baseUrl always wins so a
+        // developer can point the SDK at the live backend (api.kiauth.com (the branded backend host)
+        // mapped) or a self-hosted instance; otherwise fall back to env defaults.
+        static resolveBaseUrl(config) {
+            if (config.baseUrl) {
+                const trimmed = config.baseUrl.replace(/\/+$/, '');
+                return /\/api\/v\d+$/.test(trimmed) ? trimmed : `${trimmed}/api/v1`;
+            }
+            if (config.environment === 'production') {
+                return 'https://api.kiauth.com/api/v1';
+            }
+            // Sandbox/dev: talk to a locally running backend.
+            return 'http://localhost:3000/api/v1';
+        }
+        getBaseUrl() {
+            return this.baseUrl;
+        }
+        // Default 8s (not 2s): a backend on a cold start / slow network must not be
+        // mistaken for "offline". The on-click re-check passes a longer timeout still.
+        async healthCheck(timeoutMs = 8000) {
+            try {
+                const controller = new AbortController();
+                const id = setTimeout(() => controller.abort(), timeoutMs);
+                const res = await fetch(`${this.baseUrl}/auth/health`, {
+                    method: 'GET',
+                    headers: { 'Accept': 'application/json' },
+                    signal: controller.signal
+                });
+                clearTimeout(id);
+                return res.ok;
+            }
+            catch {
+                return false;
+            }
+        }
+        async initiateSession(clientId, scopes, redirectUri, codeChallenge) {
+            const res = await fetch(`${this.baseUrl}/auth/initiate`, {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/json',
+                    'Accept': 'application/json'
+                },
+                body: JSON.stringify({
+                    clientId,
+                    scopes,
+                    redirectUri,
+                    // PKCE challenge for public clients (omitted for confidential clients).
+                    ...(codeChallenge ? { codeChallenge, codeChallengeMethod: 'S256' } : {})
+                })
+            });
+            if (!res.ok) {
+                const err = await res.json().catch(() => ({}));
+                throw { code: err.code || 'INITIATE_FAILED', message: err.message || 'Failed to initiate login session.' };
+            }
+            return res.json();
+        }
+        // Poll a QR session's status. On APPROVED the backend also returns the one-time
+        // authCode, so the SDK can complete the exchange even if the WebSocket event
+        // never arrived (proxy/cold-network). Mirrors the dev-portal's polling flow.
+        async getSessionStatus(sessionId) {
+            try {
+                const res = await fetch(`${this.baseUrl}/auth/session/${sessionId}`, {
+                    method: 'GET',
+                    headers: { 'Accept': 'application/json' }
+                });
+                if (!res.ok)
+                    return { status: 'UNKNOWN', authCode: null };
+                const data = await res.json();
+                return { status: data.status || 'UNKNOWN', authCode: data.authCode || null };
+            }
+            catch {
+                return { status: 'UNKNOWN', authCode: null };
+            }
+        }
+        /**
+         * Exchange the authorization code for tokens. Public clients pass
+         * { codeVerifier } (PKCE); confidential clients pass { clientSecret }.
+         */
+        async exchangeToken(code, clientId, credentials) {
+            const res = await fetch(`${this.baseUrl}/auth/token`, {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/json',
+                    'Accept': 'application/json'
+                },
+                body: JSON.stringify({
+                    grantType: 'authorization_code',
+                    code,
+                    clientId,
+                    ...(credentials.codeVerifier ? { codeVerifier: credentials.codeVerifier } : {}),
+                    ...(credentials.clientSecret ? { clientSecret: credentials.clientSecret } : {})
+                })
+            });
+            if (!res.ok) {
+                const err = await res.json().catch(() => ({}));
+                throw { code: err.code || 'TOKEN_EXCHANGE_FAILED', message: err.message || 'Failed to exchange authorization code.' };
+            }
+            return res.json();
+        }
+        async verifyToken(token) {
+            const res = await fetch(`${this.baseUrl}/auth/verify`, {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/json',
+                    'Accept': 'application/json'
+                },
+                body: JSON.stringify({ token })
+            });
+            if (!res.ok) {
+                return { valid: false };
+            }
+            return res.json();
+        }
+        async reportSession(clientId, clientSecret, options) {
+            const creds = btoa(`${clientId}:${clientSecret}`);
+            const res = await fetch(`${this.baseUrl}/sessions/bridge`, {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/json',
+                    'Authorization': `Basic ${creds}`,
+                    'Accept': 'application/json'
+                },
+                body: JSON.stringify(options)
+            });
+            if (!res.ok) {
+                const err = await res.json().catch(() => ({}));
+                throw { code: err.code || 'REPORT_SESSION_FAILED', message: err.message || 'Failed to report session bridge.' };
+            }
+            return res.json();
+        }
+        async reportBatchSessions(clientId, clientSecret, kiauthUserToken, sessions) {
+            const creds = btoa(`${clientId}:${clientSecret}`);
+            const res = await fetch(`${this.baseUrl}/sessions/bridge/batch`, {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/json',
+                    'Authorization': `Basic ${creds}`,
+                    'Accept': 'application/json'
+                },
+                body: JSON.stringify({ kiauthUserToken, sessions })
+            });
+            if (!res.ok) {
+                const err = await res.json().catch(() => ({}));
+                throw { code: err.code || 'REPORT_BATCH_FAILED', message: err.message || 'Failed to report batch session bridge.' };
+            }
+            return res.json();
+        }
+        // Email-keyed login reporting ("claim on first sighting"). Use this when you do NOT
+        // have a kiauthUserToken — e.g. a user logged in with their own email/password/Google
+        // and you want it to appear in their Kiauth app. If the user is already linked we show
+        // it immediately; if not, Kiauth asks them "was this you?" to link or revoke.
+        // Always resolves on a 2xx (Kiauth never reveals whether the email is a Kiauth user).
+        // Requires a VERIFIED business + clientSecret → must run on your backend, never the browser.
+        async reportSessionByEmail(clientId, clientSecret, options) {
+            const creds = btoa(`${clientId}:${clientSecret}`);
+            const res = await fetch(`${this.baseUrl}/sessions/bridge/by-email`, {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/json',
+                    'Authorization': `Basic ${creds}`,
+                    'Accept': 'application/json'
+                },
+                body: JSON.stringify(options)
+            });
+            if (!res.ok) {
+                const err = await res.json().catch(() => ({}));
+                throw { code: err.code || 'REPORT_BY_EMAIL_FAILED', message: err.message || 'Failed to report session by email.' };
+            }
+            return res.json();
+        }
+        // RP-initiated logout. Ends a Kiauth session the RP owns when the user logs out
+        // on the RP's own site, so the Kiauth app reflects it as revoked. Identify the
+        // session by accessToken (native SSO), sessionId, or externalSessionId (bridged).
+        // Requires clientSecret → must run on the developer's backend, never the browser.
+        async endSession(clientId, clientSecret, opts) {
+            const creds = btoa(`${clientId}:${clientSecret}`);
+            const res = await fetch(`${this.baseUrl}/sessions/bridge/end`, {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/json',
+                    'Authorization': `Basic ${creds}`,
+                    'Accept': 'application/json'
+                },
+                body: JSON.stringify(opts)
+            });
+            if (!res.ok) {
+                const err = await res.json().catch(() => ({}));
+                throw { code: err.code || 'END_SESSION_FAILED', message: err.message || 'Failed to end session.' };
+            }
+            return res.json();
+        }
+    }
+
+    class KiauthWebsocket {
+        constructor(serverUrl) {
+            this.serverUrl = serverUrl;
+            this.ws = null;
+            this.pingIntervalId = null;
+            this.reconnectTimeoutId = null;
+            this.reconnectAttempts = 0;
+            this.maxReconnectAttempts = 5;
+            this.isIntentionalDisconnect = false;
+        }
+        connect(channelId, onAuthComplete, onError) {
+            this.isIntentionalDisconnect = false;
+            // Parse HTTP url to WS url using URL object to extract correct host
+            const urlObj = new URL(this.serverUrl);
+            const wsProtocol = urlObj.protocol.startsWith('https') ? 'wss' : 'ws';
+            const wsUrl = `${wsProtocol}://${urlObj.host}/socket.io/?EIO=4&transport=websocket`;
+            try {
+                this.ws = new WebSocket(wsUrl);
+            }
+            catch (err) {
+                onError({ code: 'WEBSOCKET_ERROR', message: 'Failed to initialize WebSocket client.' });
+                return;
+            }
+            this.ws.onopen = () => {
+                this.reconnectAttempts = 0;
+            };
+            this.ws.onmessage = (event) => {
+                const data = event.data;
+                if (typeof data !== 'string')
+                    return;
+                // Handle Engine.io packet types:
+                // 0: Open (handshake JSON)
+                // 2: Ping
+                // 3: Pong
+                // 4: Message
+                // 40: Socket.io Connect
+                // 42: Socket.io Event message
+                if (data.startsWith('0')) {
+                    try {
+                        const handshake = JSON.parse(data.substring(1));
+                        const pingInterval = handshake.pingInterval || 25000;
+                        // Start client-initiated ping (Engine.io v4)
+                        this.startPinging(pingInterval);
+                        // Join channel in default namespace
+                        if (this.ws && this.ws.readyState === WebSocket.OPEN) {
+                            // First send namespace connect (not strictly required but standard in socket.io client)
+                            this.ws.send('40');
+                            // Join our specific QR channel
+                            this.ws.send(`42["join_channel","${channelId}"]`);
+                        }
+                    }
+                    catch (e) {
+                        // Handshake parse failed
+                    }
+                }
+                else if (data.startsWith('42')) {
+                    try {
+                        const payload = JSON.parse(data.substring(2));
+                        if (Array.isArray(payload)) {
+                            const [eventName, eventData] = payload;
+                            if (eventName === 'auth_complete' && eventData) {
+                                this.disconnect();
+                                onAuthComplete(eventData);
+                            }
+                        }
+                    }
+                    catch (e) {
+                        // Message parsing failed
+                    }
+                }
+            };
+            this.ws.onclose = (event) => {
+                this.stopPinging();
+                if (!this.isIntentionalDisconnect) {
+                    this.attemptReconnect(channelId, onAuthComplete, onError);
+                }
+            };
+            this.ws.onerror = (err) => {
+                // Socket error
+            };
+        }
+        startPinging(interval) {
+            this.stopPinging();
+            this.pingIntervalId = setInterval(() => {
+                if (this.ws && this.ws.readyState === WebSocket.OPEN) {
+                    this.ws.send('2'); // Ping packet type in Engine.io
+                }
+            }, interval);
+        }
+        stopPinging() {
+            if (this.pingIntervalId) {
+                clearInterval(this.pingIntervalId);
+                this.pingIntervalId = null;
+            }
+        }
+        attemptReconnect(channelId, onAuthComplete, onError) {
+            if (this.reconnectAttempts >= this.maxReconnectAttempts) {
+                onError({ code: 'WEBSOCKET_DISCONNECTED', message: 'WebSocket connection lost permanently.' });
+                return;
+            }
+            this.reconnectAttempts++;
+            const delay = Math.min(1000 * Math.pow(2, this.reconnectAttempts), 10000);
+            this.reconnectTimeoutId = setTimeout(() => {
+                this.connect(channelId, onAuthComplete, onError);
+            }, delay);
+        }
+        disconnect() {
+            this.isIntentionalDisconnect = true;
+            this.stopPinging();
+            if (this.reconnectTimeoutId) {
+                clearTimeout(this.reconnectTimeoutId);
+                this.reconnectTimeoutId = null;
+            }
+            if (this.ws) {
+                this.ws.close();
+                this.ws = null;
+            }
+        }
+    }
+
+    function getDefaultExportFromCjs (x) {
+    	return x && x.__esModule && Object.prototype.hasOwnProperty.call(x, 'default') ? x['default'] : x;
+    }
+
+    var qrcode$1 = {exports: {}};
+
+    (function (module, exports) {
+    	//---------------------------------------------------------------------
+    	//
+    	// QR Code Generator for JavaScript
+    	//
+    	// Copyright (c) 2009 Kazuhiko Arase
+    	//
+    	// URL: http://www.d-project.com/
+    	//
+    	// Licensed under the MIT license:
+    	//  http://www.opensource.org/licenses/mit-license.php
+    	//
+    	// The word 'QR Code' is registered trademark of
+    	// DENSO WAVE INCORPORATED
+    	//  http://www.denso-wave.com/qrcode/faqpatent-e.html
+    	//
+    	//---------------------------------------------------------------------
+
+    	var qrcode = function() {
+
+    	  //---------------------------------------------------------------------
+    	  // qrcode
+    	  //---------------------------------------------------------------------
+
+    	  /**
+    	   * qrcode
+    	   * @param typeNumber 1 to 40
+    	   * @param errorCorrectionLevel 'L','M','Q','H'
+    	   */
+    	  var qrcode = function(typeNumber, errorCorrectionLevel) {
+
+    	    var PAD0 = 0xEC;
+    	    var PAD1 = 0x11;
+
+    	    var _typeNumber = typeNumber;
+    	    var _errorCorrectionLevel = QRErrorCorrectionLevel[errorCorrectionLevel];
+    	    var _modules = null;
+    	    var _moduleCount = 0;
+    	    var _dataCache = null;
+    	    var _dataList = [];
+
+    	    var _this = {};
+
+    	    var makeImpl = function(test, maskPattern) {
+
+    	      _moduleCount = _typeNumber * 4 + 17;
+    	      _modules = function(moduleCount) {
+    	        var modules = new Array(moduleCount);
+    	        for (var row = 0; row < moduleCount; row += 1) {
+    	          modules[row] = new Array(moduleCount);
+    	          for (var col = 0; col < moduleCount; col += 1) {
+    	            modules[row][col] = null;
+    	          }
+    	        }
+    	        return modules;
+    	      }(_moduleCount);
+
+    	      setupPositionProbePattern(0, 0);
+    	      setupPositionProbePattern(_moduleCount - 7, 0);
+    	      setupPositionProbePattern(0, _moduleCount - 7);
+    	      setupPositionAdjustPattern();
+    	      setupTimingPattern();
+    	      setupTypeInfo(test, maskPattern);
+
+    	      if (_typeNumber >= 7) {
+    	        setupTypeNumber(test);
+    	      }
+
+    	      if (_dataCache == null) {
+    	        _dataCache = createData(_typeNumber, _errorCorrectionLevel, _dataList);
+    	      }
+
+    	      mapData(_dataCache, maskPattern);
+    	    };
+
+    	    var setupPositionProbePattern = function(row, col) {
+
+    	      for (var r = -1; r <= 7; r += 1) {
+
+    	        if (row + r <= -1 || _moduleCount <= row + r) continue;
+
+    	        for (var c = -1; c <= 7; c += 1) {
+
+    	          if (col + c <= -1 || _moduleCount <= col + c) continue;
+
+    	          if ( (0 <= r && r <= 6 && (c == 0 || c == 6) )
+    	              || (0 <= c && c <= 6 && (r == 0 || r == 6) )
+    	              || (2 <= r && r <= 4 && 2 <= c && c <= 4) ) {
+    	            _modules[row + r][col + c] = true;
+    	          } else {
+    	            _modules[row + r][col + c] = false;
+    	          }
+    	        }
+    	      }
+    	    };
+
+    	    var getBestMaskPattern = function() {
+
+    	      var minLostPoint = 0;
+    	      var pattern = 0;
+
+    	      for (var i = 0; i < 8; i += 1) {
+
+    	        makeImpl(true, i);
+
+    	        var lostPoint = QRUtil.getLostPoint(_this);
+
+    	        if (i == 0 || minLostPoint > lostPoint) {
+    	          minLostPoint = lostPoint;
+    	          pattern = i;
+    	        }
+    	      }
+
+    	      return pattern;
+    	    };
+
+    	    var setupTimingPattern = function() {
+
+    	      for (var r = 8; r < _moduleCount - 8; r += 1) {
+    	        if (_modules[r][6] != null) {
+    	          continue;
+    	        }
+    	        _modules[r][6] = (r % 2 == 0);
+    	      }
+
+    	      for (var c = 8; c < _moduleCount - 8; c += 1) {
+    	        if (_modules[6][c] != null) {
+    	          continue;
+    	        }
+    	        _modules[6][c] = (c % 2 == 0);
+    	      }
+    	    };
+
+    	    var setupPositionAdjustPattern = function() {
+
+    	      var pos = QRUtil.getPatternPosition(_typeNumber);
+
+    	      for (var i = 0; i < pos.length; i += 1) {
+
+    	        for (var j = 0; j < pos.length; j += 1) {
+
+    	          var row = pos[i];
+    	          var col = pos[j];
+
+    	          if (_modules[row][col] != null) {
+    	            continue;
+    	          }
+
+    	          for (var r = -2; r <= 2; r += 1) {
+
+    	            for (var c = -2; c <= 2; c += 1) {
+
+    	              if (r == -2 || r == 2 || c == -2 || c == 2
+    	                  || (r == 0 && c == 0) ) {
+    	                _modules[row + r][col + c] = true;
+    	              } else {
+    	                _modules[row + r][col + c] = false;
+    	              }
+    	            }
+    	          }
+    	        }
+    	      }
+    	    };
+
+    	    var setupTypeNumber = function(test) {
+
+    	      var bits = QRUtil.getBCHTypeNumber(_typeNumber);
+
+    	      for (var i = 0; i < 18; i += 1) {
+    	        var mod = (!test && ( (bits >> i) & 1) == 1);
+    	        _modules[Math.floor(i / 3)][i % 3 + _moduleCount - 8 - 3] = mod;
+    	      }
+
+    	      for (var i = 0; i < 18; i += 1) {
+    	        var mod = (!test && ( (bits >> i) & 1) == 1);
+    	        _modules[i % 3 + _moduleCount - 8 - 3][Math.floor(i / 3)] = mod;
+    	      }
+    	    };
+
+    	    var setupTypeInfo = function(test, maskPattern) {
+
+    	      var data = (_errorCorrectionLevel << 3) | maskPattern;
+    	      var bits = QRUtil.getBCHTypeInfo(data);
+
+    	      // vertical
+    	      for (var i = 0; i < 15; i += 1) {
+
+    	        var mod = (!test && ( (bits >> i) & 1) == 1);
+
+    	        if (i < 6) {
+    	          _modules[i][8] = mod;
+    	        } else if (i < 8) {
+    	          _modules[i + 1][8] = mod;
+    	        } else {
+    	          _modules[_moduleCount - 15 + i][8] = mod;
+    	        }
+    	      }
+
+    	      // horizontal
+    	      for (var i = 0; i < 15; i += 1) {
+
+    	        var mod = (!test && ( (bits >> i) & 1) == 1);
+
+    	        if (i < 8) {
+    	          _modules[8][_moduleCount - i - 1] = mod;
+    	        } else if (i < 9) {
+    	          _modules[8][15 - i - 1 + 1] = mod;
+    	        } else {
+    	          _modules[8][15 - i - 1] = mod;
+    	        }
+    	      }
+
+    	      // fixed module
+    	      _modules[_moduleCount - 8][8] = (!test);
+    	    };
+
+    	    var mapData = function(data, maskPattern) {
+
+    	      var inc = -1;
+    	      var row = _moduleCount - 1;
+    	      var bitIndex = 7;
+    	      var byteIndex = 0;
+    	      var maskFunc = QRUtil.getMaskFunction(maskPattern);
+
+    	      for (var col = _moduleCount - 1; col > 0; col -= 2) {
+
+    	        if (col == 6) col -= 1;
+
+    	        while (true) {
+
+    	          for (var c = 0; c < 2; c += 1) {
+
+    	            if (_modules[row][col - c] == null) {
+
+    	              var dark = false;
+
+    	              if (byteIndex < data.length) {
+    	                dark = ( ( (data[byteIndex] >>> bitIndex) & 1) == 1);
+    	              }
+
+    	              var mask = maskFunc(row, col - c);
+
+    	              if (mask) {
+    	                dark = !dark;
+    	              }
+
+    	              _modules[row][col - c] = dark;
+    	              bitIndex -= 1;
+
+    	              if (bitIndex == -1) {
+    	                byteIndex += 1;
+    	                bitIndex = 7;
+    	              }
+    	            }
+    	          }
+
+    	          row += inc;
+
+    	          if (row < 0 || _moduleCount <= row) {
+    	            row -= inc;
+    	            inc = -inc;
+    	            break;
+    	          }
+    	        }
+    	      }
+    	    };
+
+    	    var createBytes = function(buffer, rsBlocks) {
+
+    	      var offset = 0;
+
+    	      var maxDcCount = 0;
+    	      var maxEcCount = 0;
+
+    	      var dcdata = new Array(rsBlocks.length);
+    	      var ecdata = new Array(rsBlocks.length);
+
+    	      for (var r = 0; r < rsBlocks.length; r += 1) {
+
+    	        var dcCount = rsBlocks[r].dataCount;
+    	        var ecCount = rsBlocks[r].totalCount - dcCount;
+
+    	        maxDcCount = Math.max(maxDcCount, dcCount);
+    	        maxEcCount = Math.max(maxEcCount, ecCount);
+
+    	        dcdata[r] = new Array(dcCount);
+
+    	        for (var i = 0; i < dcdata[r].length; i += 1) {
+    	          dcdata[r][i] = 0xff & buffer.getBuffer()[i + offset];
+    	        }
+    	        offset += dcCount;
+
+    	        var rsPoly = QRUtil.getErrorCorrectPolynomial(ecCount);
+    	        var rawPoly = qrPolynomial(dcdata[r], rsPoly.getLength() - 1);
+
+    	        var modPoly = rawPoly.mod(rsPoly);
+    	        ecdata[r] = new Array(rsPoly.getLength() - 1);
+    	        for (var i = 0; i < ecdata[r].length; i += 1) {
+    	          var modIndex = i + modPoly.getLength() - ecdata[r].length;
+    	          ecdata[r][i] = (modIndex >= 0)? modPoly.getAt(modIndex) : 0;
+    	        }
+    	      }
+
+    	      var totalCodeCount = 0;
+    	      for (var i = 0; i < rsBlocks.length; i += 1) {
+    	        totalCodeCount += rsBlocks[i].totalCount;
+    	      }
+
+    	      var data = new Array(totalCodeCount);
+    	      var index = 0;
+
+    	      for (var i = 0; i < maxDcCount; i += 1) {
+    	        for (var r = 0; r < rsBlocks.length; r += 1) {
+    	          if (i < dcdata[r].length) {
+    	            data[index] = dcdata[r][i];
+    	            index += 1;
+    	          }
+    	        }
+    	      }
+
+    	      for (var i = 0; i < maxEcCount; i += 1) {
+    	        for (var r = 0; r < rsBlocks.length; r += 1) {
+    	          if (i < ecdata[r].length) {
+    	            data[index] = ecdata[r][i];
+    	            index += 1;
+    	          }
+    	        }
+    	      }
+
+    	      return data;
+    	    };
+
+    	    var createData = function(typeNumber, errorCorrectionLevel, dataList) {
+
+    	      var rsBlocks = QRRSBlock.getRSBlocks(typeNumber, errorCorrectionLevel);
+
+    	      var buffer = qrBitBuffer();
+
+    	      for (var i = 0; i < dataList.length; i += 1) {
+    	        var data = dataList[i];
+    	        buffer.put(data.getMode(), 4);
+    	        buffer.put(data.getLength(), QRUtil.getLengthInBits(data.getMode(), typeNumber) );
+    	        data.write(buffer);
+    	      }
+
+    	      // calc num max data.
+    	      var totalDataCount = 0;
+    	      for (var i = 0; i < rsBlocks.length; i += 1) {
+    	        totalDataCount += rsBlocks[i].dataCount;
+    	      }
+
+    	      if (buffer.getLengthInBits() > totalDataCount * 8) {
+    	        throw 'code length overflow. ('
+    	          + buffer.getLengthInBits()
+    	          + '>'
+    	          + totalDataCount * 8
+    	          + ')';
+    	      }
+
+    	      // end code
+    	      if (buffer.getLengthInBits() + 4 <= totalDataCount * 8) {
+    	        buffer.put(0, 4);
+    	      }
+
+    	      // padding
+    	      while (buffer.getLengthInBits() % 8 != 0) {
+    	        buffer.putBit(false);
+    	      }
+
+    	      // padding
+    	      while (true) {
+
+    	        if (buffer.getLengthInBits() >= totalDataCount * 8) {
+    	          break;
+    	        }
+    	        buffer.put(PAD0, 8);
+
+    	        if (buffer.getLengthInBits() >= totalDataCount * 8) {
+    	          break;
+    	        }
+    	        buffer.put(PAD1, 8);
+    	      }
+
+    	      return createBytes(buffer, rsBlocks);
+    	    };
+
+    	    _this.addData = function(data, mode) {
+
+    	      mode = mode || 'Byte';
+
+    	      var newData = null;
+
+    	      switch(mode) {
+    	      case 'Numeric' :
+    	        newData = qrNumber(data);
+    	        break;
+    	      case 'Alphanumeric' :
+    	        newData = qrAlphaNum(data);
+    	        break;
+    	      case 'Byte' :
+    	        newData = qr8BitByte(data);
+    	        break;
+    	      case 'Kanji' :
+    	        newData = qrKanji(data);
+    	        break;
+    	      default :
+    	        throw 'mode:' + mode;
+    	      }
+
+    	      _dataList.push(newData);
+    	      _dataCache = null;
+    	    };
+
+    	    _this.isDark = function(row, col) {
+    	      if (row < 0 || _moduleCount <= row || col < 0 || _moduleCount <= col) {
+    	        throw row + ',' + col;
+    	      }
+    	      return _modules[row][col];
+    	    };
+
+    	    _this.getModuleCount = function() {
+    	      return _moduleCount;
+    	    };
+
+    	    _this.make = function() {
+    	      if (_typeNumber < 1) {
+    	        var typeNumber = 1;
+
+    	        for (; typeNumber < 40; typeNumber++) {
+    	          var rsBlocks = QRRSBlock.getRSBlocks(typeNumber, _errorCorrectionLevel);
+    	          var buffer = qrBitBuffer();
+
+    	          for (var i = 0; i < _dataList.length; i++) {
+    	            var data = _dataList[i];
+    	            buffer.put(data.getMode(), 4);
+    	            buffer.put(data.getLength(), QRUtil.getLengthInBits(data.getMode(), typeNumber) );
+    	            data.write(buffer);
+    	          }
+
+    	          var totalDataCount = 0;
+    	          for (var i = 0; i < rsBlocks.length; i++) {
+    	            totalDataCount += rsBlocks[i].dataCount;
+    	          }
+
+    	          if (buffer.getLengthInBits() <= totalDataCount * 8) {
+    	            break;
+    	          }
+    	        }
+
+    	        _typeNumber = typeNumber;
+    	      }
+
+    	      makeImpl(false, getBestMaskPattern() );
+    	    };
+
+    	    _this.createTableTag = function(cellSize, margin) {
+
+    	      cellSize = cellSize || 2;
+    	      margin = (typeof margin == 'undefined')? cellSize * 4 : margin;
+
+    	      var qrHtml = '';
+
+    	      qrHtml += '<table style="';
+    	      qrHtml += ' border-width: 0px; border-style: none;';
+    	      qrHtml += ' border-collapse: collapse;';
+    	      qrHtml += ' padding: 0px; margin: ' + margin + 'px;';
+    	      qrHtml += '">';
+    	      qrHtml += '<tbody>';
+
+    	      for (var r = 0; r < _this.getModuleCount(); r += 1) {
+
+    	        qrHtml += '<tr>';
+
+    	        for (var c = 0; c < _this.getModuleCount(); c += 1) {
+    	          qrHtml += '<td style="';
+    	          qrHtml += ' border-width: 0px; border-style: none;';
+    	          qrHtml += ' border-collapse: collapse;';
+    	          qrHtml += ' padding: 0px; margin: 0px;';
+    	          qrHtml += ' width: ' + cellSize + 'px;';
+    	          qrHtml += ' height: ' + cellSize + 'px;';
+    	          qrHtml += ' background-color: ';
+    	          qrHtml += _this.isDark(r, c)? '#000000' : '#ffffff';
+    	          qrHtml += ';';
+    	          qrHtml += '"/>';
+    	        }
+
+    	        qrHtml += '</tr>';
+    	      }
+
+    	      qrHtml += '</tbody>';
+    	      qrHtml += '</table>';
+
+    	      return qrHtml;
+    	    };
+
+    	    _this.createSvgTag = function(cellSize, margin, alt, title) {
+
+    	      var opts = {};
+    	      if (typeof arguments[0] == 'object') {
+    	        // Called by options.
+    	        opts = arguments[0];
+    	        // overwrite cellSize and margin.
+    	        cellSize = opts.cellSize;
+    	        margin = opts.margin;
+    	        alt = opts.alt;
+    	        title = opts.title;
+    	      }
+
+    	      cellSize = cellSize || 2;
+    	      margin = (typeof margin == 'undefined')? cellSize * 4 : margin;
+
+    	      // Compose alt property surrogate
+    	      alt = (typeof alt === 'string') ? {text: alt} : alt || {};
+    	      alt.text = alt.text || null;
+    	      alt.id = (alt.text) ? alt.id || 'qrcode-description' : null;
+
+    	      // Compose title property surrogate
+    	      title = (typeof title === 'string') ? {text: title} : title || {};
+    	      title.text = title.text || null;
+    	      title.id = (title.text) ? title.id || 'qrcode-title' : null;
+
+    	      var size = _this.getModuleCount() * cellSize + margin * 2;
+    	      var c, mc, r, mr, qrSvg='', rect;
+
+    	      rect = 'l' + cellSize + ',0 0,' + cellSize +
+    	        ' -' + cellSize + ',0 0,-' + cellSize + 'z ';
+
+    	      qrSvg += '<svg version="1.1" xmlns="http://www.w3.org/2000/svg"';
+    	      qrSvg += !opts.scalable ? ' width="' + size + 'px" height="' + size + 'px"' : '';
+    	      qrSvg += ' viewBox="0 0 ' + size + ' ' + size + '" ';
+    	      qrSvg += ' preserveAspectRatio="xMinYMin meet"';
+    	      qrSvg += (title.text || alt.text) ? ' role="img" aria-labelledby="' +
+    	          escapeXml([title.id, alt.id].join(' ').trim() ) + '"' : '';
+    	      qrSvg += '>';
+    	      qrSvg += (title.text) ? '<title id="' + escapeXml(title.id) + '">' +
+    	          escapeXml(title.text) + '</title>' : '';
+    	      qrSvg += (alt.text) ? '<description id="' + escapeXml(alt.id) + '">' +
+    	          escapeXml(alt.text) + '</description>' : '';
+    	      qrSvg += '<rect width="100%" height="100%" fill="white" cx="0" cy="0"/>';
+    	      qrSvg += '<path d="';
+
+    	      for (r = 0; r < _this.getModuleCount(); r += 1) {
+    	        mr = r * cellSize + margin;
+    	        for (c = 0; c < _this.getModuleCount(); c += 1) {
+    	          if (_this.isDark(r, c) ) {
+    	            mc = c*cellSize+margin;
+    	            qrSvg += 'M' + mc + ',' + mr + rect;
+    	          }
+    	        }
+    	      }
+
+    	      qrSvg += '" stroke="transparent" fill="black"/>';
+    	      qrSvg += '</svg>';
+
+    	      return qrSvg;
+    	    };
+
+    	    _this.createDataURL = function(cellSize, margin) {
+
+    	      cellSize = cellSize || 2;
+    	      margin = (typeof margin == 'undefined')? cellSize * 4 : margin;
+
+    	      var size = _this.getModuleCount() * cellSize + margin * 2;
+    	      var min = margin;
+    	      var max = size - margin;
+
+    	      return createDataURL(size, size, function(x, y) {
+    	        if (min <= x && x < max && min <= y && y < max) {
+    	          var c = Math.floor( (x - min) / cellSize);
+    	          var r = Math.floor( (y - min) / cellSize);
+    	          return _this.isDark(r, c)? 0 : 1;
+    	        } else {
+    	          return 1;
+    	        }
+    	      } );
+    	    };
+
+    	    _this.createImgTag = function(cellSize, margin, alt) {
+
+    	      cellSize = cellSize || 2;
+    	      margin = (typeof margin == 'undefined')? cellSize * 4 : margin;
+
+    	      var size = _this.getModuleCount() * cellSize + margin * 2;
+
+    	      var img = '';
+    	      img += '<img';
+    	      img += '\u0020src="';
+    	      img += _this.createDataURL(cellSize, margin);
+    	      img += '"';
+    	      img += '\u0020width="';
+    	      img += size;
+    	      img += '"';
+    	      img += '\u0020height="';
+    	      img += size;
+    	      img += '"';
+    	      if (alt) {
+    	        img += '\u0020alt="';
+    	        img += escapeXml(alt);
+    	        img += '"';
+    	      }
+    	      img += '/>';
+
+    	      return img;
+    	    };
+
+    	    var escapeXml = function(s) {
+    	      var escaped = '';
+    	      for (var i = 0; i < s.length; i += 1) {
+    	        var c = s.charAt(i);
+    	        switch(c) {
+    	        case '<': escaped += '&lt;'; break;
+    	        case '>': escaped += '&gt;'; break;
+    	        case '&': escaped += '&amp;'; break;
+    	        case '"': escaped += '&quot;'; break;
+    	        default : escaped += c; break;
+    	        }
+    	      }
+    	      return escaped;
+    	    };
+
+    	    var _createHalfASCII = function(margin) {
+    	      var cellSize = 1;
+    	      margin = (typeof margin == 'undefined')? cellSize * 2 : margin;
+
+    	      var size = _this.getModuleCount() * cellSize + margin * 2;
+    	      var min = margin;
+    	      var max = size - margin;
+
+    	      var y, x, r1, r2, p;
+
+    	      var blocks = {
+    	        '██': '█',
+    	        '█ ': '▀',
+    	        ' █': '▄',
+    	        '  ': ' '
+    	      };
+
+    	      var blocksLastLineNoMargin = {
+    	        '██': '▀',
+    	        '█ ': '▀',
+    	        ' █': ' ',
+    	        '  ': ' '
+    	      };
+
+    	      var ascii = '';
+    	      for (y = 0; y < size; y += 2) {
+    	        r1 = Math.floor((y - min) / cellSize);
+    	        r2 = Math.floor((y + 1 - min) / cellSize);
+    	        for (x = 0; x < size; x += 1) {
+    	          p = '█';
+
+    	          if (min <= x && x < max && min <= y && y < max && _this.isDark(r1, Math.floor((x - min) / cellSize))) {
+    	            p = ' ';
+    	          }
+
+    	          if (min <= x && x < max && min <= y+1 && y+1 < max && _this.isDark(r2, Math.floor((x - min) / cellSize))) {
+    	            p += ' ';
+    	          }
+    	          else {
+    	            p += '█';
+    	          }
+
+    	          // Output 2 characters per pixel, to create full square. 1 character per pixels gives only half width of square.
+    	          ascii += (margin < 1 && y+1 >= max) ? blocksLastLineNoMargin[p] : blocks[p];
+    	        }
+
+    	        ascii += '\n';
+    	      }
+
+    	      if (size % 2 && margin > 0) {
+    	        return ascii.substring(0, ascii.length - size - 1) + Array(size+1).join('▀');
+    	      }
+
+    	      return ascii.substring(0, ascii.length-1);
+    	    };
+
+    	    _this.createASCII = function(cellSize, margin) {
+    	      cellSize = cellSize || 1;
+
+    	      if (cellSize < 2) {
+    	        return _createHalfASCII(margin);
+    	      }
+
+    	      cellSize -= 1;
+    	      margin = (typeof margin == 'undefined')? cellSize * 2 : margin;
+
+    	      var size = _this.getModuleCount() * cellSize + margin * 2;
+    	      var min = margin;
+    	      var max = size - margin;
+
+    	      var y, x, r, p;
+
+    	      var white = Array(cellSize+1).join('██');
+    	      var black = Array(cellSize+1).join('  ');
+
+    	      var ascii = '';
+    	      var line = '';
+    	      for (y = 0; y < size; y += 1) {
+    	        r = Math.floor( (y - min) / cellSize);
+    	        line = '';
+    	        for (x = 0; x < size; x += 1) {
+    	          p = 1;
+
+    	          if (min <= x && x < max && min <= y && y < max && _this.isDark(r, Math.floor((x - min) / cellSize))) {
+    	            p = 0;
+    	          }
+
+    	          // Output 2 characters per pixel, to create full square. 1 character per pixels gives only half width of square.
+    	          line += p ? white : black;
+    	        }
+
+    	        for (r = 0; r < cellSize; r += 1) {
+    	          ascii += line + '\n';
+    	        }
+    	      }
+
+    	      return ascii.substring(0, ascii.length-1);
+    	    };
+
+    	    _this.renderTo2dContext = function(context, cellSize) {
+    	      cellSize = cellSize || 2;
+    	      var length = _this.getModuleCount();
+    	      for (var row = 0; row < length; row++) {
+    	        for (var col = 0; col < length; col++) {
+    	          context.fillStyle = _this.isDark(row, col) ? 'black' : 'white';
+    	          context.fillRect(row * cellSize, col * cellSize, cellSize, cellSize);
+    	        }
+    	      }
+    	    };
+
+    	    return _this;
+    	  };
+
+    	  //---------------------------------------------------------------------
+    	  // qrcode.stringToBytes
+    	  //---------------------------------------------------------------------
+
+    	  qrcode.stringToBytesFuncs = {
+    	    'default' : function(s) {
+    	      var bytes = [];
+    	      for (var i = 0; i < s.length; i += 1) {
+    	        var c = s.charCodeAt(i);
+    	        bytes.push(c & 0xff);
+    	      }
+    	      return bytes;
+    	    }
+    	  };
+
+    	  qrcode.stringToBytes = qrcode.stringToBytesFuncs['default'];
+
+    	  //---------------------------------------------------------------------
+    	  // qrcode.createStringToBytes
+    	  //---------------------------------------------------------------------
+
+    	  /**
+    	   * @param unicodeData base64 string of byte array.
+    	   * [16bit Unicode],[16bit Bytes], ...
+    	   * @param numChars
+    	   */
+    	  qrcode.createStringToBytes = function(unicodeData, numChars) {
+
+    	    // create conversion map.
+
+    	    var unicodeMap = function() {
+
+    	      var bin = base64DecodeInputStream(unicodeData);
+    	      var read = function() {
+    	        var b = bin.read();
+    	        if (b == -1) throw 'eof';
+    	        return b;
+    	      };
+
+    	      var count = 0;
+    	      var unicodeMap = {};
+    	      while (true) {
+    	        var b0 = bin.read();
+    	        if (b0 == -1) break;
+    	        var b1 = read();
+    	        var b2 = read();
+    	        var b3 = read();
+    	        var k = String.fromCharCode( (b0 << 8) | b1);
+    	        var v = (b2 << 8) | b3;
+    	        unicodeMap[k] = v;
+    	        count += 1;
+    	      }
+    	      if (count != numChars) {
+    	        throw count + ' != ' + numChars;
+    	      }
+
+    	      return unicodeMap;
+    	    }();
+
+    	    var unknownChar = '?'.charCodeAt(0);
+
+    	    return function(s) {
+    	      var bytes = [];
+    	      for (var i = 0; i < s.length; i += 1) {
+    	        var c = s.charCodeAt(i);
+    	        if (c < 128) {
+    	          bytes.push(c);
+    	        } else {
+    	          var b = unicodeMap[s.charAt(i)];
+    	          if (typeof b == 'number') {
+    	            if ( (b & 0xff) == b) {
+    	              // 1byte
+    	              bytes.push(b);
+    	            } else {
+    	              // 2bytes
+    	              bytes.push(b >>> 8);
+    	              bytes.push(b & 0xff);
+    	            }
+    	          } else {
+    	            bytes.push(unknownChar);
+    	          }
+    	        }
+    	      }
+    	      return bytes;
+    	    };
+    	  };
+
+    	  //---------------------------------------------------------------------
+    	  // QRMode
+    	  //---------------------------------------------------------------------
+
+    	  var QRMode = {
+    	    MODE_NUMBER :    1 << 0,
+    	    MODE_ALPHA_NUM : 1 << 1,
+    	    MODE_8BIT_BYTE : 1 << 2,
+    	    MODE_KANJI :     1 << 3
+    	  };
+
+    	  //---------------------------------------------------------------------
+    	  // QRErrorCorrectionLevel
+    	  //---------------------------------------------------------------------
+
+    	  var QRErrorCorrectionLevel = {
+    	    L : 1,
+    	    M : 0,
+    	    Q : 3,
+    	    H : 2
+    	  };
+
+    	  //---------------------------------------------------------------------
+    	  // QRMaskPattern
+    	  //---------------------------------------------------------------------
+
+    	  var QRMaskPattern = {
+    	    PATTERN000 : 0,
+    	    PATTERN001 : 1,
+    	    PATTERN010 : 2,
+    	    PATTERN011 : 3,
+    	    PATTERN100 : 4,
+    	    PATTERN101 : 5,
+    	    PATTERN110 : 6,
+    	    PATTERN111 : 7
+    	  };
+
+    	  //---------------------------------------------------------------------
+    	  // QRUtil
+    	  //---------------------------------------------------------------------
+
+    	  var QRUtil = function() {
+
+    	    var PATTERN_POSITION_TABLE = [
+    	      [],
+    	      [6, 18],
+    	      [6, 22],
+    	      [6, 26],
+    	      [6, 30],
+    	      [6, 34],
+    	      [6, 22, 38],
+    	      [6, 24, 42],
+    	      [6, 26, 46],
+    	      [6, 28, 50],
+    	      [6, 30, 54],
+    	      [6, 32, 58],
+    	      [6, 34, 62],
+    	      [6, 26, 46, 66],
+    	      [6, 26, 48, 70],
+    	      [6, 26, 50, 74],
+    	      [6, 30, 54, 78],
+    	      [6, 30, 56, 82],
+    	      [6, 30, 58, 86],
+    	      [6, 34, 62, 90],
+    	      [6, 28, 50, 72, 94],
+    	      [6, 26, 50, 74, 98],
+    	      [6, 30, 54, 78, 102],
+    	      [6, 28, 54, 80, 106],
+    	      [6, 32, 58, 84, 110],
+    	      [6, 30, 58, 86, 114],
+    	      [6, 34, 62, 90, 118],
+    	      [6, 26, 50, 74, 98, 122],
+    	      [6, 30, 54, 78, 102, 126],
+    	      [6, 26, 52, 78, 104, 130],
+    	      [6, 30, 56, 82, 108, 134],
+    	      [6, 34, 60, 86, 112, 138],
+    	      [6, 30, 58, 86, 114, 142],
+    	      [6, 34, 62, 90, 118, 146],
+    	      [6, 30, 54, 78, 102, 126, 150],
+    	      [6, 24, 50, 76, 102, 128, 154],
+    	      [6, 28, 54, 80, 106, 132, 158],
+    	      [6, 32, 58, 84, 110, 136, 162],
+    	      [6, 26, 54, 82, 110, 138, 166],
+    	      [6, 30, 58, 86, 114, 142, 170]
+    	    ];
+    	    var G15 = (1 << 10) | (1 << 8) | (1 << 5) | (1 << 4) | (1 << 2) | (1 << 1) | (1 << 0);
+    	    var G18 = (1 << 12) | (1 << 11) | (1 << 10) | (1 << 9) | (1 << 8) | (1 << 5) | (1 << 2) | (1 << 0);
+    	    var G15_MASK = (1 << 14) | (1 << 12) | (1 << 10) | (1 << 4) | (1 << 1);
+
+    	    var _this = {};
+
+    	    var getBCHDigit = function(data) {
+    	      var digit = 0;
+    	      while (data != 0) {
+    	        digit += 1;
+    	        data >>>= 1;
+    	      }
+    	      return digit;
+    	    };
+
+    	    _this.getBCHTypeInfo = function(data) {
+    	      var d = data << 10;
+    	      while (getBCHDigit(d) - getBCHDigit(G15) >= 0) {
+    	        d ^= (G15 << (getBCHDigit(d) - getBCHDigit(G15) ) );
+    	      }
+    	      return ( (data << 10) | d) ^ G15_MASK;
+    	    };
+
+    	    _this.getBCHTypeNumber = function(data) {
+    	      var d = data << 12;
+    	      while (getBCHDigit(d) - getBCHDigit(G18) >= 0) {
+    	        d ^= (G18 << (getBCHDigit(d) - getBCHDigit(G18) ) );
+    	      }
+    	      return (data << 12) | d;
+    	    };
+
+    	    _this.getPatternPosition = function(typeNumber) {
+    	      return PATTERN_POSITION_TABLE[typeNumber - 1];
+    	    };
+
+    	    _this.getMaskFunction = function(maskPattern) {
+
+    	      switch (maskPattern) {
+
+    	      case QRMaskPattern.PATTERN000 :
+    	        return function(i, j) { return (i + j) % 2 == 0; };
+    	      case QRMaskPattern.PATTERN001 :
+    	        return function(i, j) { return i % 2 == 0; };
+    	      case QRMaskPattern.PATTERN010 :
+    	        return function(i, j) { return j % 3 == 0; };
+    	      case QRMaskPattern.PATTERN011 :
+    	        return function(i, j) { return (i + j) % 3 == 0; };
+    	      case QRMaskPattern.PATTERN100 :
+    	        return function(i, j) { return (Math.floor(i / 2) + Math.floor(j / 3) ) % 2 == 0; };
+    	      case QRMaskPattern.PATTERN101 :
+    	        return function(i, j) { return (i * j) % 2 + (i * j) % 3 == 0; };
+    	      case QRMaskPattern.PATTERN110 :
+    	        return function(i, j) { return ( (i * j) % 2 + (i * j) % 3) % 2 == 0; };
+    	      case QRMaskPattern.PATTERN111 :
+    	        return function(i, j) { return ( (i * j) % 3 + (i + j) % 2) % 2 == 0; };
+
+    	      default :
+    	        throw 'bad maskPattern:' + maskPattern;
+    	      }
+    	    };
+
+    	    _this.getErrorCorrectPolynomial = function(errorCorrectLength) {
+    	      var a = qrPolynomial([1], 0);
+    	      for (var i = 0; i < errorCorrectLength; i += 1) {
+    	        a = a.multiply(qrPolynomial([1, QRMath.gexp(i)], 0) );
+    	      }
+    	      return a;
+    	    };
+
+    	    _this.getLengthInBits = function(mode, type) {
+
+    	      if (1 <= type && type < 10) {
+
+    	        // 1 - 9
+
+    	        switch(mode) {
+    	        case QRMode.MODE_NUMBER    : return 10;
+    	        case QRMode.MODE_ALPHA_NUM : return 9;
+    	        case QRMode.MODE_8BIT_BYTE : return 8;
+    	        case QRMode.MODE_KANJI     : return 8;
+    	        default :
+    	          throw 'mode:' + mode;
+    	        }
+
+    	      } else if (type < 27) {
+
+    	        // 10 - 26
+
+    	        switch(mode) {
+    	        case QRMode.MODE_NUMBER    : return 12;
+    	        case QRMode.MODE_ALPHA_NUM : return 11;
+    	        case QRMode.MODE_8BIT_BYTE : return 16;
+    	        case QRMode.MODE_KANJI     : return 10;
+    	        default :
+    	          throw 'mode:' + mode;
+    	        }
+
+    	      } else if (type < 41) {
+
+    	        // 27 - 40
+
+    	        switch(mode) {
+    	        case QRMode.MODE_NUMBER    : return 14;
+    	        case QRMode.MODE_ALPHA_NUM : return 13;
+    	        case QRMode.MODE_8BIT_BYTE : return 16;
+    	        case QRMode.MODE_KANJI     : return 12;
+    	        default :
+    	          throw 'mode:' + mode;
+    	        }
+
+    	      } else {
+    	        throw 'type:' + type;
+    	      }
+    	    };
+
+    	    _this.getLostPoint = function(qrcode) {
+
+    	      var moduleCount = qrcode.getModuleCount();
+
+    	      var lostPoint = 0;
+
+    	      // LEVEL1
+
+    	      for (var row = 0; row < moduleCount; row += 1) {
+    	        for (var col = 0; col < moduleCount; col += 1) {
+
+    	          var sameCount = 0;
+    	          var dark = qrcode.isDark(row, col);
+
+    	          for (var r = -1; r <= 1; r += 1) {
+
+    	            if (row + r < 0 || moduleCount <= row + r) {
+    	              continue;
+    	            }
+
+    	            for (var c = -1; c <= 1; c += 1) {
+
+    	              if (col + c < 0 || moduleCount <= col + c) {
+    	                continue;
+    	              }
+
+    	              if (r == 0 && c == 0) {
+    	                continue;
+    	              }
+
+    	              if (dark == qrcode.isDark(row + r, col + c) ) {
+    	                sameCount += 1;
+    	              }
+    	            }
+    	          }
+
+    	          if (sameCount > 5) {
+    	            lostPoint += (3 + sameCount - 5);
+    	          }
+    	        }
+    	      }
+    	      // LEVEL2
+
+    	      for (var row = 0; row < moduleCount - 1; row += 1) {
+    	        for (var col = 0; col < moduleCount - 1; col += 1) {
+    	          var count = 0;
+    	          if (qrcode.isDark(row, col) ) count += 1;
+    	          if (qrcode.isDark(row + 1, col) ) count += 1;
+    	          if (qrcode.isDark(row, col + 1) ) count += 1;
+    	          if (qrcode.isDark(row + 1, col + 1) ) count += 1;
+    	          if (count == 0 || count == 4) {
+    	            lostPoint += 3;
+    	          }
+    	        }
+    	      }
+
+    	      // LEVEL3
+
+    	      for (var row = 0; row < moduleCount; row += 1) {
+    	        for (var col = 0; col < moduleCount - 6; col += 1) {
+    	          if (qrcode.isDark(row, col)
+    	              && !qrcode.isDark(row, col + 1)
+    	              &&  qrcode.isDark(row, col + 2)
+    	              &&  qrcode.isDark(row, col + 3)
+    	              &&  qrcode.isDark(row, col + 4)
+    	              && !qrcode.isDark(row, col + 5)
+    	              &&  qrcode.isDark(row, col + 6) ) {
+    	            lostPoint += 40;
+    	          }
+    	        }
+    	      }
+
+    	      for (var col = 0; col < moduleCount; col += 1) {
+    	        for (var row = 0; row < moduleCount - 6; row += 1) {
+    	          if (qrcode.isDark(row, col)
+    	              && !qrcode.isDark(row + 1, col)
+    	              &&  qrcode.isDark(row + 2, col)
+    	              &&  qrcode.isDark(row + 3, col)
+    	              &&  qrcode.isDark(row + 4, col)
+    	              && !qrcode.isDark(row + 5, col)
+    	              &&  qrcode.isDark(row + 6, col) ) {
+    	            lostPoint += 40;
+    	          }
+    	        }
+    	      }
+
+    	      // LEVEL4
+
+    	      var darkCount = 0;
+
+    	      for (var col = 0; col < moduleCount; col += 1) {
+    	        for (var row = 0; row < moduleCount; row += 1) {
+    	          if (qrcode.isDark(row, col) ) {
+    	            darkCount += 1;
+    	          }
+    	        }
+    	      }
+
+    	      var ratio = Math.abs(100 * darkCount / moduleCount / moduleCount - 50) / 5;
+    	      lostPoint += ratio * 10;
+
+    	      return lostPoint;
+    	    };
+
+    	    return _this;
+    	  }();
+
+    	  //---------------------------------------------------------------------
+    	  // QRMath
+    	  //---------------------------------------------------------------------
+
+    	  var QRMath = function() {
+
+    	    var EXP_TABLE = new Array(256);
+    	    var LOG_TABLE = new Array(256);
+
+    	    // initialize tables
+    	    for (var i = 0; i < 8; i += 1) {
+    	      EXP_TABLE[i] = 1 << i;
+    	    }
+    	    for (var i = 8; i < 256; i += 1) {
+    	      EXP_TABLE[i] = EXP_TABLE[i - 4]
+    	        ^ EXP_TABLE[i - 5]
+    	        ^ EXP_TABLE[i - 6]
+    	        ^ EXP_TABLE[i - 8];
+    	    }
+    	    for (var i = 0; i < 255; i += 1) {
+    	      LOG_TABLE[EXP_TABLE[i] ] = i;
+    	    }
+
+    	    var _this = {};
+
+    	    _this.glog = function(n) {
+
+    	      if (n < 1) {
+    	        throw 'glog(' + n + ')';
+    	      }
+
+    	      return LOG_TABLE[n];
+    	    };
+
+    	    _this.gexp = function(n) {
+
+    	      while (n < 0) {
+    	        n += 255;
+    	      }
+
+    	      while (n >= 256) {
+    	        n -= 255;
+    	      }
+
+    	      return EXP_TABLE[n];
+    	    };
+
+    	    return _this;
+    	  }();
+
+    	  //---------------------------------------------------------------------
+    	  // qrPolynomial
+    	  //---------------------------------------------------------------------
+
+    	  function qrPolynomial(num, shift) {
+
+    	    if (typeof num.length == 'undefined') {
+    	      throw num.length + '/' + shift;
+    	    }
+
+    	    var _num = function() {
+    	      var offset = 0;
+    	      while (offset < num.length && num[offset] == 0) {
+    	        offset += 1;
+    	      }
+    	      var _num = new Array(num.length - offset + shift);
+    	      for (var i = 0; i < num.length - offset; i += 1) {
+    	        _num[i] = num[i + offset];
+    	      }
+    	      return _num;
+    	    }();
+
+    	    var _this = {};
+
+    	    _this.getAt = function(index) {
+    	      return _num[index];
+    	    };
+
+    	    _this.getLength = function() {
+    	      return _num.length;
+    	    };
+
+    	    _this.multiply = function(e) {
+
+    	      var num = new Array(_this.getLength() + e.getLength() - 1);
+
+    	      for (var i = 0; i < _this.getLength(); i += 1) {
+    	        for (var j = 0; j < e.getLength(); j += 1) {
+    	          num[i + j] ^= QRMath.gexp(QRMath.glog(_this.getAt(i) ) + QRMath.glog(e.getAt(j) ) );
+    	        }
+    	      }
+
+    	      return qrPolynomial(num, 0);
+    	    };
+
+    	    _this.mod = function(e) {
+
+    	      if (_this.getLength() - e.getLength() < 0) {
+    	        return _this;
+    	      }
+
+    	      var ratio = QRMath.glog(_this.getAt(0) ) - QRMath.glog(e.getAt(0) );
+
+    	      var num = new Array(_this.getLength() );
+    	      for (var i = 0; i < _this.getLength(); i += 1) {
+    	        num[i] = _this.getAt(i);
+    	      }
+
+    	      for (var i = 0; i < e.getLength(); i += 1) {
+    	        num[i] ^= QRMath.gexp(QRMath.glog(e.getAt(i) ) + ratio);
+    	      }
+
+    	      // recursive call
+    	      return qrPolynomial(num, 0).mod(e);
+    	    };
+
+    	    return _this;
+    	  }
+    	  //---------------------------------------------------------------------
+    	  // QRRSBlock
+    	  //---------------------------------------------------------------------
+
+    	  var QRRSBlock = function() {
+
+    	    var RS_BLOCK_TABLE = [
+
+    	      // L
+    	      // M
+    	      // Q
+    	      // H
+
+    	      // 1
+    	      [1, 26, 19],
+    	      [1, 26, 16],
+    	      [1, 26, 13],
+    	      [1, 26, 9],
+
+    	      // 2
+    	      [1, 44, 34],
+    	      [1, 44, 28],
+    	      [1, 44, 22],
+    	      [1, 44, 16],
+
+    	      // 3
+    	      [1, 70, 55],
+    	      [1, 70, 44],
+    	      [2, 35, 17],
+    	      [2, 35, 13],
+
+    	      // 4
+    	      [1, 100, 80],
+    	      [2, 50, 32],
+    	      [2, 50, 24],
+    	      [4, 25, 9],
+
+    	      // 5
+    	      [1, 134, 108],
+    	      [2, 67, 43],
+    	      [2, 33, 15, 2, 34, 16],
+    	      [2, 33, 11, 2, 34, 12],
+
+    	      // 6
+    	      [2, 86, 68],
+    	      [4, 43, 27],
+    	      [4, 43, 19],
+    	      [4, 43, 15],
+
+    	      // 7
+    	      [2, 98, 78],
+    	      [4, 49, 31],
+    	      [2, 32, 14, 4, 33, 15],
+    	      [4, 39, 13, 1, 40, 14],
+
+    	      // 8
+    	      [2, 121, 97],
+    	      [2, 60, 38, 2, 61, 39],
+    	      [4, 40, 18, 2, 41, 19],
+    	      [4, 40, 14, 2, 41, 15],
+
+    	      // 9
+    	      [2, 146, 116],
+    	      [3, 58, 36, 2, 59, 37],
+    	      [4, 36, 16, 4, 37, 17],
+    	      [4, 36, 12, 4, 37, 13],
+
+    	      // 10
+    	      [2, 86, 68, 2, 87, 69],
+    	      [4, 69, 43, 1, 70, 44],
+    	      [6, 43, 19, 2, 44, 20],
+    	      [6, 43, 15, 2, 44, 16],
+
+    	      // 11
+    	      [4, 101, 81],
+    	      [1, 80, 50, 4, 81, 51],
+    	      [4, 50, 22, 4, 51, 23],
+    	      [3, 36, 12, 8, 37, 13],
+
+    	      // 12
+    	      [2, 116, 92, 2, 117, 93],
+    	      [6, 58, 36, 2, 59, 37],
+    	      [4, 46, 20, 6, 47, 21],
+    	      [7, 42, 14, 4, 43, 15],
+
+    	      // 13
+    	      [4, 133, 107],
+    	      [8, 59, 37, 1, 60, 38],
+    	      [8, 44, 20, 4, 45, 21],
+    	      [12, 33, 11, 4, 34, 12],
+
+    	      // 14
+    	      [3, 145, 115, 1, 146, 116],
+    	      [4, 64, 40, 5, 65, 41],
+    	      [11, 36, 16, 5, 37, 17],
+    	      [11, 36, 12, 5, 37, 13],
+
+    	      // 15
+    	      [5, 109, 87, 1, 110, 88],
+    	      [5, 65, 41, 5, 66, 42],
+    	      [5, 54, 24, 7, 55, 25],
+    	      [11, 36, 12, 7, 37, 13],
+
+    	      // 16
+    	      [5, 122, 98, 1, 123, 99],
+    	      [7, 73, 45, 3, 74, 46],
+    	      [15, 43, 19, 2, 44, 20],
+    	      [3, 45, 15, 13, 46, 16],
+
+    	      // 17
+    	      [1, 135, 107, 5, 136, 108],
+    	      [10, 74, 46, 1, 75, 47],
+    	      [1, 50, 22, 15, 51, 23],
+    	      [2, 42, 14, 17, 43, 15],
+
+    	      // 18
+    	      [5, 150, 120, 1, 151, 121],
+    	      [9, 69, 43, 4, 70, 44],
+    	      [17, 50, 22, 1, 51, 23],
+    	      [2, 42, 14, 19, 43, 15],
+
+    	      // 19
+    	      [3, 141, 113, 4, 142, 114],
+    	      [3, 70, 44, 11, 71, 45],
+    	      [17, 47, 21, 4, 48, 22],
+    	      [9, 39, 13, 16, 40, 14],
+
+    	      // 20
+    	      [3, 135, 107, 5, 136, 108],
+    	      [3, 67, 41, 13, 68, 42],
+    	      [15, 54, 24, 5, 55, 25],
+    	      [15, 43, 15, 10, 44, 16],
+
+    	      // 21
+    	      [4, 144, 116, 4, 145, 117],
+    	      [17, 68, 42],
+    	      [17, 50, 22, 6, 51, 23],
+    	      [19, 46, 16, 6, 47, 17],
+
+    	      // 22
+    	      [2, 139, 111, 7, 140, 112],
+    	      [17, 74, 46],
+    	      [7, 54, 24, 16, 55, 25],
+    	      [34, 37, 13],
+
+    	      // 23
+    	      [4, 151, 121, 5, 152, 122],
+    	      [4, 75, 47, 14, 76, 48],
+    	      [11, 54, 24, 14, 55, 25],
+    	      [16, 45, 15, 14, 46, 16],
+
+    	      // 24
+    	      [6, 147, 117, 4, 148, 118],
+    	      [6, 73, 45, 14, 74, 46],
+    	      [11, 54, 24, 16, 55, 25],
+    	      [30, 46, 16, 2, 47, 17],
+
+    	      // 25
+    	      [8, 132, 106, 4, 133, 107],
+    	      [8, 75, 47, 13, 76, 48],
+    	      [7, 54, 24, 22, 55, 25],
+    	      [22, 45, 15, 13, 46, 16],
+
+    	      // 26
+    	      [10, 142, 114, 2, 143, 115],
+    	      [19, 74, 46, 4, 75, 47],
+    	      [28, 50, 22, 6, 51, 23],
+    	      [33, 46, 16, 4, 47, 17],
+
+    	      // 27
+    	      [8, 152, 122, 4, 153, 123],
+    	      [22, 73, 45, 3, 74, 46],
+    	      [8, 53, 23, 26, 54, 24],
+    	      [12, 45, 15, 28, 46, 16],
+
+    	      // 28
+    	      [3, 147, 117, 10, 148, 118],
+    	      [3, 73, 45, 23, 74, 46],
+    	      [4, 54, 24, 31, 55, 25],
+    	      [11, 45, 15, 31, 46, 16],
+
+    	      // 29
+    	      [7, 146, 116, 7, 147, 117],
+    	      [21, 73, 45, 7, 74, 46],
+    	      [1, 53, 23, 37, 54, 24],
+    	      [19, 45, 15, 26, 46, 16],
+
+    	      // 30
+    	      [5, 145, 115, 10, 146, 116],
+    	      [19, 75, 47, 10, 76, 48],
+    	      [15, 54, 24, 25, 55, 25],
+    	      [23, 45, 15, 25, 46, 16],
+
+    	      // 31
+    	      [13, 145, 115, 3, 146, 116],
+    	      [2, 74, 46, 29, 75, 47],
+    	      [42, 54, 24, 1, 55, 25],
+    	      [23, 45, 15, 28, 46, 16],
+
+    	      // 32
+    	      [17, 145, 115],
+    	      [10, 74, 46, 23, 75, 47],
+    	      [10, 54, 24, 35, 55, 25],
+    	      [19, 45, 15, 35, 46, 16],
+
+    	      // 33
+    	      [17, 145, 115, 1, 146, 116],
+    	      [14, 74, 46, 21, 75, 47],
+    	      [29, 54, 24, 19, 55, 25],
+    	      [11, 45, 15, 46, 46, 16],
+
+    	      // 34
+    	      [13, 145, 115, 6, 146, 116],
+    	      [14, 74, 46, 23, 75, 47],
+    	      [44, 54, 24, 7, 55, 25],
+    	      [59, 46, 16, 1, 47, 17],
+
+    	      // 35
+    	      [12, 151, 121, 7, 152, 122],
+    	      [12, 75, 47, 26, 76, 48],
+    	      [39, 54, 24, 14, 55, 25],
+    	      [22, 45, 15, 41, 46, 16],
+
+    	      // 36
+    	      [6, 151, 121, 14, 152, 122],
+    	      [6, 75, 47, 34, 76, 48],
+    	      [46, 54, 24, 10, 55, 25],
+    	      [2, 45, 15, 64, 46, 16],
+
+    	      // 37
+    	      [17, 152, 122, 4, 153, 123],
+    	      [29, 74, 46, 14, 75, 47],
+    	      [49, 54, 24, 10, 55, 25],
+    	      [24, 45, 15, 46, 46, 16],
+
+    	      // 38
+    	      [4, 152, 122, 18, 153, 123],
+    	      [13, 74, 46, 32, 75, 47],
+    	      [48, 54, 24, 14, 55, 25],
+    	      [42, 45, 15, 32, 46, 16],
+
+    	      // 39
+    	      [20, 147, 117, 4, 148, 118],
+    	      [40, 75, 47, 7, 76, 48],
+    	      [43, 54, 24, 22, 55, 25],
+    	      [10, 45, 15, 67, 46, 16],
+
+    	      // 40
+    	      [19, 148, 118, 6, 149, 119],
+    	      [18, 75, 47, 31, 76, 48],
+    	      [34, 54, 24, 34, 55, 25],
+    	      [20, 45, 15, 61, 46, 16]
+    	    ];
+
+    	    var qrRSBlock = function(totalCount, dataCount) {
+    	      var _this = {};
+    	      _this.totalCount = totalCount;
+    	      _this.dataCount = dataCount;
+    	      return _this;
+    	    };
+
+    	    var _this = {};
+
+    	    var getRsBlockTable = function(typeNumber, errorCorrectionLevel) {
+
+    	      switch(errorCorrectionLevel) {
+    	      case QRErrorCorrectionLevel.L :
+    	        return RS_BLOCK_TABLE[(typeNumber - 1) * 4 + 0];
+    	      case QRErrorCorrectionLevel.M :
+    	        return RS_BLOCK_TABLE[(typeNumber - 1) * 4 + 1];
+    	      case QRErrorCorrectionLevel.Q :
+    	        return RS_BLOCK_TABLE[(typeNumber - 1) * 4 + 2];
+    	      case QRErrorCorrectionLevel.H :
+    	        return RS_BLOCK_TABLE[(typeNumber - 1) * 4 + 3];
+    	      default :
+    	        return undefined;
+    	      }
+    	    };
+
+    	    _this.getRSBlocks = function(typeNumber, errorCorrectionLevel) {
+
+    	      var rsBlock = getRsBlockTable(typeNumber, errorCorrectionLevel);
+
+    	      if (typeof rsBlock == 'undefined') {
+    	        throw 'bad rs block @ typeNumber:' + typeNumber +
+    	            '/errorCorrectionLevel:' + errorCorrectionLevel;
+    	      }
+
+    	      var length = rsBlock.length / 3;
+
+    	      var list = [];
+
+    	      for (var i = 0; i < length; i += 1) {
+
+    	        var count = rsBlock[i * 3 + 0];
+    	        var totalCount = rsBlock[i * 3 + 1];
+    	        var dataCount = rsBlock[i * 3 + 2];
+
+    	        for (var j = 0; j < count; j += 1) {
+    	          list.push(qrRSBlock(totalCount, dataCount) );
+    	        }
+    	      }
+
+    	      return list;
+    	    };
+
+    	    return _this;
+    	  }();
+
+    	  //---------------------------------------------------------------------
+    	  // qrBitBuffer
+    	  //---------------------------------------------------------------------
+
+    	  var qrBitBuffer = function() {
+
+    	    var _buffer = [];
+    	    var _length = 0;
+
+    	    var _this = {};
+
+    	    _this.getBuffer = function() {
+    	      return _buffer;
+    	    };
+
+    	    _this.getAt = function(index) {
+    	      var bufIndex = Math.floor(index / 8);
+    	      return ( (_buffer[bufIndex] >>> (7 - index % 8) ) & 1) == 1;
+    	    };
+
+    	    _this.put = function(num, length) {
+    	      for (var i = 0; i < length; i += 1) {
+    	        _this.putBit( ( (num >>> (length - i - 1) ) & 1) == 1);
+    	      }
+    	    };
+
+    	    _this.getLengthInBits = function() {
+    	      return _length;
+    	    };
+
+    	    _this.putBit = function(bit) {
+
+    	      var bufIndex = Math.floor(_length / 8);
+    	      if (_buffer.length <= bufIndex) {
+    	        _buffer.push(0);
+    	      }
+
+    	      if (bit) {
+    	        _buffer[bufIndex] |= (0x80 >>> (_length % 8) );
+    	      }
+
+    	      _length += 1;
+    	    };
+
+    	    return _this;
+    	  };
+
+    	  //---------------------------------------------------------------------
+    	  // qrNumber
+    	  //---------------------------------------------------------------------
+
+    	  var qrNumber = function(data) {
+
+    	    var _mode = QRMode.MODE_NUMBER;
+    	    var _data = data;
+
+    	    var _this = {};
+
+    	    _this.getMode = function() {
+    	      return _mode;
+    	    };
+
+    	    _this.getLength = function(buffer) {
+    	      return _data.length;
+    	    };
+
+    	    _this.write = function(buffer) {
+
+    	      var data = _data;
+
+    	      var i = 0;
+
+    	      while (i + 2 < data.length) {
+    	        buffer.put(strToNum(data.substring(i, i + 3) ), 10);
+    	        i += 3;
+    	      }
+
+    	      if (i < data.length) {
+    	        if (data.length - i == 1) {
+    	          buffer.put(strToNum(data.substring(i, i + 1) ), 4);
+    	        } else if (data.length - i == 2) {
+    	          buffer.put(strToNum(data.substring(i, i + 2) ), 7);
+    	        }
+    	      }
+    	    };
+
+    	    var strToNum = function(s) {
+    	      var num = 0;
+    	      for (var i = 0; i < s.length; i += 1) {
+    	        num = num * 10 + chatToNum(s.charAt(i) );
+    	      }
+    	      return num;
+    	    };
+
+    	    var chatToNum = function(c) {
+    	      if ('0' <= c && c <= '9') {
+    	        return c.charCodeAt(0) - '0'.charCodeAt(0);
+    	      }
+    	      throw 'illegal char :' + c;
+    	    };
+
+    	    return _this;
+    	  };
+
+    	  //---------------------------------------------------------------------
+    	  // qrAlphaNum
+    	  //---------------------------------------------------------------------
+
+    	  var qrAlphaNum = function(data) {
+
+    	    var _mode = QRMode.MODE_ALPHA_NUM;
+    	    var _data = data;
+
+    	    var _this = {};
+
+    	    _this.getMode = function() {
+    	      return _mode;
+    	    };
+
+    	    _this.getLength = function(buffer) {
+    	      return _data.length;
+    	    };
+
+    	    _this.write = function(buffer) {
+
+    	      var s = _data;
+
+    	      var i = 0;
+
+    	      while (i + 1 < s.length) {
+    	        buffer.put(
+    	          getCode(s.charAt(i) ) * 45 +
+    	          getCode(s.charAt(i + 1) ), 11);
+    	        i += 2;
+    	      }
+
+    	      if (i < s.length) {
+    	        buffer.put(getCode(s.charAt(i) ), 6);
+    	      }
+    	    };
+
+    	    var getCode = function(c) {
+
+    	      if ('0' <= c && c <= '9') {
+    	        return c.charCodeAt(0) - '0'.charCodeAt(0);
+    	      } else if ('A' <= c && c <= 'Z') {
+    	        return c.charCodeAt(0) - 'A'.charCodeAt(0) + 10;
+    	      } else {
+    	        switch (c) {
+    	        case ' ' : return 36;
+    	        case '$' : return 37;
+    	        case '%' : return 38;
+    	        case '*' : return 39;
+    	        case '+' : return 40;
+    	        case '-' : return 41;
+    	        case '.' : return 42;
+    	        case '/' : return 43;
+    	        case ':' : return 44;
+    	        default :
+    	          throw 'illegal char :' + c;
+    	        }
+    	      }
+    	    };
+
+    	    return _this;
+    	  };
+
+    	  //---------------------------------------------------------------------
+    	  // qr8BitByte
+    	  //---------------------------------------------------------------------
+
+    	  var qr8BitByte = function(data) {
+
+    	    var _mode = QRMode.MODE_8BIT_BYTE;
+    	    var _bytes = qrcode.stringToBytes(data);
+
+    	    var _this = {};
+
+    	    _this.getMode = function() {
+    	      return _mode;
+    	    };
+
+    	    _this.getLength = function(buffer) {
+    	      return _bytes.length;
+    	    };
+
+    	    _this.write = function(buffer) {
+    	      for (var i = 0; i < _bytes.length; i += 1) {
+    	        buffer.put(_bytes[i], 8);
+    	      }
+    	    };
+
+    	    return _this;
+    	  };
+
+    	  //---------------------------------------------------------------------
+    	  // qrKanji
+    	  //---------------------------------------------------------------------
+
+    	  var qrKanji = function(data) {
+
+    	    var _mode = QRMode.MODE_KANJI;
+
+    	    var stringToBytes = qrcode.stringToBytesFuncs['SJIS'];
+    	    if (!stringToBytes) {
+    	      throw 'sjis not supported.';
+    	    }
+    	    !function(c, code) {
+    	      // self test for sjis support.
+    	      var test = stringToBytes(c);
+    	      if (test.length != 2 || ( (test[0] << 8) | test[1]) != code) {
+    	        throw 'sjis not supported.';
+    	      }
+    	    }('\u53cb', 0x9746);
+
+    	    var _bytes = stringToBytes(data);
+
+    	    var _this = {};
+
+    	    _this.getMode = function() {
+    	      return _mode;
+    	    };
+
+    	    _this.getLength = function(buffer) {
+    	      return ~~(_bytes.length / 2);
+    	    };
+
+    	    _this.write = function(buffer) {
+
+    	      var data = _bytes;
+
+    	      var i = 0;
+
+    	      while (i + 1 < data.length) {
+
+    	        var c = ( (0xff & data[i]) << 8) | (0xff & data[i + 1]);
+
+    	        if (0x8140 <= c && c <= 0x9FFC) {
+    	          c -= 0x8140;
+    	        } else if (0xE040 <= c && c <= 0xEBBF) {
+    	          c -= 0xC140;
+    	        } else {
+    	          throw 'illegal char at ' + (i + 1) + '/' + c;
+    	        }
+
+    	        c = ( (c >>> 8) & 0xff) * 0xC0 + (c & 0xff);
+
+    	        buffer.put(c, 13);
+
+    	        i += 2;
+    	      }
+
+    	      if (i < data.length) {
+    	        throw 'illegal char at ' + (i + 1);
+    	      }
+    	    };
+
+    	    return _this;
+    	  };
+
+    	  //=====================================================================
+    	  // GIF Support etc.
+    	  //
+
+    	  //---------------------------------------------------------------------
+    	  // byteArrayOutputStream
+    	  //---------------------------------------------------------------------
+
+    	  var byteArrayOutputStream = function() {
+
+    	    var _bytes = [];
+
+    	    var _this = {};
+
+    	    _this.writeByte = function(b) {
+    	      _bytes.push(b & 0xff);
+    	    };
+
+    	    _this.writeShort = function(i) {
+    	      _this.writeByte(i);
+    	      _this.writeByte(i >>> 8);
+    	    };
+
+    	    _this.writeBytes = function(b, off, len) {
+    	      off = off || 0;
+    	      len = len || b.length;
+    	      for (var i = 0; i < len; i += 1) {
+    	        _this.writeByte(b[i + off]);
+    	      }
+    	    };
+
+    	    _this.writeString = function(s) {
+    	      for (var i = 0; i < s.length; i += 1) {
+    	        _this.writeByte(s.charCodeAt(i) );
+    	      }
+    	    };
+
+    	    _this.toByteArray = function() {
+    	      return _bytes;
+    	    };
+
+    	    _this.toString = function() {
+    	      var s = '';
+    	      s += '[';
+    	      for (var i = 0; i < _bytes.length; i += 1) {
+    	        if (i > 0) {
+    	          s += ',';
+    	        }
+    	        s += _bytes[i];
+    	      }
+    	      s += ']';
+    	      return s;
+    	    };
+
+    	    return _this;
+    	  };
+
+    	  //---------------------------------------------------------------------
+    	  // base64EncodeOutputStream
+    	  //---------------------------------------------------------------------
+
+    	  var base64EncodeOutputStream = function() {
+
+    	    var _buffer = 0;
+    	    var _buflen = 0;
+    	    var _length = 0;
+    	    var _base64 = '';
+
+    	    var _this = {};
+
+    	    var writeEncoded = function(b) {
+    	      _base64 += String.fromCharCode(encode(b & 0x3f) );
+    	    };
+
+    	    var encode = function(n) {
+    	      if (n < 0) ; else if (n < 26) {
+    	        return 0x41 + n;
+    	      } else if (n < 52) {
+    	        return 0x61 + (n - 26);
+    	      } else if (n < 62) {
+    	        return 0x30 + (n - 52);
+    	      } else if (n == 62) {
+    	        return 0x2b;
+    	      } else if (n == 63) {
+    	        return 0x2f;
+    	      }
+    	      throw 'n:' + n;
+    	    };
+
+    	    _this.writeByte = function(n) {
+
+    	      _buffer = (_buffer << 8) | (n & 0xff);
+    	      _buflen += 8;
+    	      _length += 1;
+
+    	      while (_buflen >= 6) {
+    	        writeEncoded(_buffer >>> (_buflen - 6) );
+    	        _buflen -= 6;
+    	      }
+    	    };
+
+    	    _this.flush = function() {
+
+    	      if (_buflen > 0) {
+    	        writeEncoded(_buffer << (6 - _buflen) );
+    	        _buffer = 0;
+    	        _buflen = 0;
+    	      }
+
+    	      if (_length % 3 != 0) {
+    	        // padding
+    	        var padlen = 3 - _length % 3;
+    	        for (var i = 0; i < padlen; i += 1) {
+    	          _base64 += '=';
+    	        }
+    	      }
+    	    };
+
+    	    _this.toString = function() {
+    	      return _base64;
+    	    };
+
+    	    return _this;
+    	  };
+
+    	  //---------------------------------------------------------------------
+    	  // base64DecodeInputStream
+    	  //---------------------------------------------------------------------
+
+    	  var base64DecodeInputStream = function(str) {
+
+    	    var _str = str;
+    	    var _pos = 0;
+    	    var _buffer = 0;
+    	    var _buflen = 0;
+
+    	    var _this = {};
+
+    	    _this.read = function() {
+
+    	      while (_buflen < 8) {
+
+    	        if (_pos >= _str.length) {
+    	          if (_buflen == 0) {
+    	            return -1;
+    	          }
+    	          throw 'unexpected end of file./' + _buflen;
+    	        }
+
+    	        var c = _str.charAt(_pos);
+    	        _pos += 1;
+
+    	        if (c == '=') {
+    	          _buflen = 0;
+    	          return -1;
+    	        } else if (c.match(/^\s$/) ) {
+    	          // ignore if whitespace.
+    	          continue;
+    	        }
+
+    	        _buffer = (_buffer << 6) | decode(c.charCodeAt(0) );
+    	        _buflen += 6;
+    	      }
+
+    	      var n = (_buffer >>> (_buflen - 8) ) & 0xff;
+    	      _buflen -= 8;
+    	      return n;
+    	    };
+
+    	    var decode = function(c) {
+    	      if (0x41 <= c && c <= 0x5a) {
+    	        return c - 0x41;
+    	      } else if (0x61 <= c && c <= 0x7a) {
+    	        return c - 0x61 + 26;
+    	      } else if (0x30 <= c && c <= 0x39) {
+    	        return c - 0x30 + 52;
+    	      } else if (c == 0x2b) {
+    	        return 62;
+    	      } else if (c == 0x2f) {
+    	        return 63;
+    	      } else {
+    	        throw 'c:' + c;
+    	      }
+    	    };
+
+    	    return _this;
+    	  };
+
+    	  //---------------------------------------------------------------------
+    	  // gifImage (B/W)
+    	  //---------------------------------------------------------------------
+
+    	  var gifImage = function(width, height) {
+
+    	    var _width = width;
+    	    var _height = height;
+    	    var _data = new Array(width * height);
+
+    	    var _this = {};
+
+    	    _this.setPixel = function(x, y, pixel) {
+    	      _data[y * _width + x] = pixel;
+    	    };
+
+    	    _this.write = function(out) {
+
+    	      //---------------------------------
+    	      // GIF Signature
+
+    	      out.writeString('GIF87a');
+
+    	      //---------------------------------
+    	      // Screen Descriptor
+
+    	      out.writeShort(_width);
+    	      out.writeShort(_height);
+
+    	      out.writeByte(0x80); // 2bit
+    	      out.writeByte(0);
+    	      out.writeByte(0);
+
+    	      //---------------------------------
+    	      // Global Color Map
+
+    	      // black
+    	      out.writeByte(0x00);
+    	      out.writeByte(0x00);
+    	      out.writeByte(0x00);
+
+    	      // white
+    	      out.writeByte(0xff);
+    	      out.writeByte(0xff);
+    	      out.writeByte(0xff);
+
+    	      //---------------------------------
+    	      // Image Descriptor
+
+    	      out.writeString(',');
+    	      out.writeShort(0);
+    	      out.writeShort(0);
+    	      out.writeShort(_width);
+    	      out.writeShort(_height);
+    	      out.writeByte(0);
+
+    	      //---------------------------------
+    	      // Local Color Map
+
+    	      //---------------------------------
+    	      // Raster Data
+
+    	      var lzwMinCodeSize = 2;
+    	      var raster = getLZWRaster(lzwMinCodeSize);
+
+    	      out.writeByte(lzwMinCodeSize);
+
+    	      var offset = 0;
+
+    	      while (raster.length - offset > 255) {
+    	        out.writeByte(255);
+    	        out.writeBytes(raster, offset, 255);
+    	        offset += 255;
+    	      }
+
+    	      out.writeByte(raster.length - offset);
+    	      out.writeBytes(raster, offset, raster.length - offset);
+    	      out.writeByte(0x00);
+
+    	      //---------------------------------
+    	      // GIF Terminator
+    	      out.writeString(';');
+    	    };
+
+    	    var bitOutputStream = function(out) {
+
+    	      var _out = out;
+    	      var _bitLength = 0;
+    	      var _bitBuffer = 0;
+
+    	      var _this = {};
+
+    	      _this.write = function(data, length) {
+
+    	        if ( (data >>> length) != 0) {
+    	          throw 'length over';
+    	        }
+
+    	        while (_bitLength + length >= 8) {
+    	          _out.writeByte(0xff & ( (data << _bitLength) | _bitBuffer) );
+    	          length -= (8 - _bitLength);
+    	          data >>>= (8 - _bitLength);
+    	          _bitBuffer = 0;
+    	          _bitLength = 0;
+    	        }
+
+    	        _bitBuffer = (data << _bitLength) | _bitBuffer;
+    	        _bitLength = _bitLength + length;
+    	      };
+
+    	      _this.flush = function() {
+    	        if (_bitLength > 0) {
+    	          _out.writeByte(_bitBuffer);
+    	        }
+    	      };
+
+    	      return _this;
+    	    };
+
+    	    var getLZWRaster = function(lzwMinCodeSize) {
+
+    	      var clearCode = 1 << lzwMinCodeSize;
+    	      var endCode = (1 << lzwMinCodeSize) + 1;
+    	      var bitLength = lzwMinCodeSize + 1;
+
+    	      // Setup LZWTable
+    	      var table = lzwTable();
+
+    	      for (var i = 0; i < clearCode; i += 1) {
+    	        table.add(String.fromCharCode(i) );
+    	      }
+    	      table.add(String.fromCharCode(clearCode) );
+    	      table.add(String.fromCharCode(endCode) );
+
+    	      var byteOut = byteArrayOutputStream();
+    	      var bitOut = bitOutputStream(byteOut);
+
+    	      // clear code
+    	      bitOut.write(clearCode, bitLength);
+
+    	      var dataIndex = 0;
+
+    	      var s = String.fromCharCode(_data[dataIndex]);
+    	      dataIndex += 1;
+
+    	      while (dataIndex < _data.length) {
+
+    	        var c = String.fromCharCode(_data[dataIndex]);
+    	        dataIndex += 1;
+
+    	        if (table.contains(s + c) ) {
+
+    	          s = s + c;
+
+    	        } else {
+
+    	          bitOut.write(table.indexOf(s), bitLength);
+
+    	          if (table.size() < 0xfff) {
+
+    	            if (table.size() == (1 << bitLength) ) {
+    	              bitLength += 1;
+    	            }
+
+    	            table.add(s + c);
+    	          }
+
+    	          s = c;
+    	        }
+    	      }
+
+    	      bitOut.write(table.indexOf(s), bitLength);
+
+    	      // end code
+    	      bitOut.write(endCode, bitLength);
+
+    	      bitOut.flush();
+
+    	      return byteOut.toByteArray();
+    	    };
+
+    	    var lzwTable = function() {
+
+    	      var _map = {};
+    	      var _size = 0;
+
+    	      var _this = {};
+
+    	      _this.add = function(key) {
+    	        if (_this.contains(key) ) {
+    	          throw 'dup key:' + key;
+    	        }
+    	        _map[key] = _size;
+    	        _size += 1;
+    	      };
+
+    	      _this.size = function() {
+    	        return _size;
+    	      };
+
+    	      _this.indexOf = function(key) {
+    	        return _map[key];
+    	      };
+
+    	      _this.contains = function(key) {
+    	        return typeof _map[key] != 'undefined';
+    	      };
+
+    	      return _this;
+    	    };
+
+    	    return _this;
+    	  };
+
+    	  var createDataURL = function(width, height, getPixel) {
+    	    var gif = gifImage(width, height);
+    	    for (var y = 0; y < height; y += 1) {
+    	      for (var x = 0; x < width; x += 1) {
+    	        gif.setPixel(x, y, getPixel(x, y) );
+    	      }
+    	    }
+
+    	    var b = byteArrayOutputStream();
+    	    gif.write(b);
+
+    	    var base64 = base64EncodeOutputStream();
+    	    var bytes = b.toByteArray();
+    	    for (var i = 0; i < bytes.length; i += 1) {
+    	      base64.writeByte(bytes[i]);
+    	    }
+    	    base64.flush();
+
+    	    return 'data:image/gif;base64,' + base64;
+    	  };
+
+    	  //---------------------------------------------------------------------
+    	  // returns qrcode function.
+
+    	  return qrcode;
+    	}();
+
+    	// multibyte support
+    	!function() {
+
+    	  qrcode.stringToBytesFuncs['UTF-8'] = function(s) {
+    	    // http://stackoverflow.com/questions/18729405/how-to-convert-utf8-string-to-byte-array
+    	    function toUTF8Array(str) {
+    	      var utf8 = [];
+    	      for (var i=0; i < str.length; i++) {
+    	        var charcode = str.charCodeAt(i);
+    	        if (charcode < 0x80) utf8.push(charcode);
+    	        else if (charcode < 0x800) {
+    	          utf8.push(0xc0 | (charcode >> 6),
+    	              0x80 | (charcode & 0x3f));
+    	        }
+    	        else if (charcode < 0xd800 || charcode >= 0xe000) {
+    	          utf8.push(0xe0 | (charcode >> 12),
+    	              0x80 | ((charcode>>6) & 0x3f),
+    	              0x80 | (charcode & 0x3f));
+    	        }
+    	        // surrogate pair
+    	        else {
+    	          i++;
+    	          // UTF-16 encodes 0x10000-0x10FFFF by
+    	          // subtracting 0x10000 and splitting the
+    	          // 20 bits of 0x0-0xFFFFF into two halves
+    	          charcode = 0x10000 + (((charcode & 0x3ff)<<10)
+    	            | (str.charCodeAt(i) & 0x3ff));
+    	          utf8.push(0xf0 | (charcode >>18),
+    	              0x80 | ((charcode>>12) & 0x3f),
+    	              0x80 | ((charcode>>6) & 0x3f),
+    	              0x80 | (charcode & 0x3f));
+    	        }
+    	      }
+    	      return utf8;
+    	    }
+    	    return toUTF8Array(s);
+    	  };
+
+    	}();
+
+    	(function (factory) {
+    	  {
+    	      module.exports = factory();
+    	  }
+    	}(function () {
+    	    return qrcode;
+    	})); 
+    } (qrcode$1));
+
+    var qrcodeExports = qrcode$1.exports;
+    var qrcode = /*@__PURE__*/getDefaultExportFromCjs(qrcodeExports);
+
+    class QrModal {
+        constructor() {
+            this.dialog = null;
+            this.timerInterval = null;
+        }
+        show(sessionId, qrData, expiresIn, // in seconds
+        onRefresh, onCancel) {
+            this.close();
+            // 1. Create dialog element
+            this.dialog = document.createElement('dialog');
+            this.dialog.className = 'kiauth-dialog';
+            this.dialog.setAttribute('closedby', 'any');
+            this.dialog.setAttribute('aria-labelledby', 'kiauth-dialog-title');
+            // 2. Generate QR code image source using qrcode-generator
+            let qrImgHtml = '';
+            try {
+                const qr = qrcode(0, 'M');
+                qr.addData(qrData);
+                qr.make();
+                qrImgHtml = qr.createImgTag(5, 0); // cellSize=5, margin=0
+            }
+            catch (e) {
+                qrImgHtml = '<div style="color:red;padding:20px;">Failed to render QR code</div>';
+            }
+            // 3. Setup deep link for mobile devices
+            const deepLink = `https://www.kiauth.com/auth?sid=${sessionId}`;
+            this.dialog.innerHTML = `
+      <div class="kiauth-modal-content">
+        <div class="kiauth-header">
+          <h2 id="kiauth-dialog-title" class="kiauth-title">Login with <span>Kiauth</span></h2>
+          <button class="kiauth-close-btn" type="button" aria-label="Close dialog">&times;</button>
+        </div>
+
+        <div class="kiauth-qr-container">
+          <div class="kiauth-qr-img-wrapper">${qrImgHtml}</div>
+          <div class="kiauth-qr-expired">
+            <span style="font-weight: 600; font-size: 16px; margin-bottom: 6px; color:#ff4f4f;">Session Expired</span>
+            <span style="font-size: 12px; opacity: 0.8; margin-bottom: 12px; line-height: 1.4;">For security, QR codes expire.</span>
+            <button class="kiauth-btn-refresh" type="button">Refresh Code</button>
+          </div>
+        </div>
+
+        <div class="kiauth-instructions">
+          Scan this QR code with the <strong>Kiauth mobile app</strong> to log in securely.
+        </div>
+
+        <div class="kiauth-timer">
+          Code expires in <span class="kiauth-countdown-val">05:00</span>
+        </div>
+
+        <div class="kiauth-divider"></div>
+
+        <div class="kiauth-mobile-direct">
+          <a href="${deepLink}" class="kiauth-btn-direct">Open on mobile instead</a>
+        </div>
+      </div>
+    `;
+            // Apply classes to the generated img element
+            const imgEl = this.dialog.querySelector('img');
+            if (imgEl) {
+                imgEl.className = 'kiauth-qr-img';
+                imgEl.alt = 'Kiauth QR Code';
+            }
+            document.body.appendChild(this.dialog);
+            this.dialog.showModal();
+            // 4. Event Listener bindings
+            const closeBtn = this.dialog.querySelector('.kiauth-close-btn');
+            closeBtn?.addEventListener('click', () => {
+                this.close();
+                onCancel();
+            });
+            const refreshBtn = this.dialog.querySelector('.kiauth-btn-refresh');
+            refreshBtn?.addEventListener('click', () => {
+                this.close();
+                onRefresh();
+            });
+            this.dialog.addEventListener('cancel', () => {
+                this.close();
+                onCancel();
+            });
+            // 5. Light-dismiss fallback for unsupported browsers
+            if (!('closedBy' in HTMLDialogElement.prototype)) {
+                this.dialog.addEventListener('click', (event) => {
+                    if (!this.dialog || event.target !== this.dialog)
+                        return;
+                    const rect = this.dialog.getBoundingClientRect();
+                    const isDialogContent = (rect.top <= event.clientY &&
+                        event.clientY <= rect.top + rect.height &&
+                        rect.left <= event.clientX &&
+                        event.clientX <= rect.left + rect.width);
+                    if (!isDialogContent) {
+                        this.close();
+                        onCancel();
+                    }
+                });
+            }
+            // 6. Countdown Timer Logic
+            let secondsLeft = expiresIn;
+            const timerValEl = this.dialog.querySelector('.kiauth-countdown-val');
+            const expiredOverlayEl = this.dialog.querySelector('.kiauth-qr-expired');
+            const updateTimer = () => {
+                if (secondsLeft <= 0) {
+                    clearInterval(this.timerInterval);
+                    if (timerValEl)
+                        timerValEl.textContent = 'Expired';
+                    if (expiredOverlayEl)
+                        expiredOverlayEl.classList.add('active');
+                    return;
+                }
+                const mins = Math.floor(secondsLeft / 60);
+                const secs = secondsLeft % 60;
+                if (timerValEl) {
+                    timerValEl.textContent = `${String(mins).padStart(2, '0')}:${String(secs).padStart(2, '0')}`;
+                }
+                secondsLeft--;
+            };
+            updateTimer();
+            this.timerInterval = setInterval(updateTimer, 1000);
+        }
+        close() {
+            if (this.timerInterval) {
+                clearInterval(this.timerInterval);
+                this.timerInterval = null;
+            }
+            if (this.dialog) {
+                try {
+                    if (this.dialog.hasAttribute('open')) {
+                        this.dialog.close();
+                    }
+                }
+                catch (e) {
+                    // ignore errors if already closed
+                }
+                this.dialog.remove();
+                this.dialog = null;
+            }
+        }
+    }
+
+    /** Escapes user-supplied text before interpolating into innerHTML (SDK-02 / XSS). */
+    function escapeHtml(value) {
+        return String(value)
+            .replace(/&/g, '&amp;')
+            .replace(/</g, '&lt;')
+            .replace(/>/g, '&gt;')
+            .replace(/"/g, '&quot;')
+            .replace(/'/g, '&#39;');
+    }
+    class OtpFallback {
+        constructor(container, callbacks, apiBaseUrl) {
+            this.callbacks = callbacks;
+            this.apiBaseUrl = apiBaseUrl;
+            this.container = container;
+        }
+        show() {
+            this.renderPhoneForm();
+        }
+        renderPhoneForm() {
+            this.container.innerHTML = `
+      <div class="kiauth-fallback-container">
+        <div class="kiauth-header">
+          <h2 class="kiauth-title">OTP Fallback</h2>
+          <button class="kiauth-close-btn" type="button" aria-label="Close dialog">&times;</button>
+        </div>
+        
+        <p style="font-size: 14px; opacity: 0.8; margin-bottom: 20px; text-align: center; line-height: 1.4;">
+          Kiauth QR login is offline. Log in with your verified phone number instead.
+        </p>
+
+        <div class="kiauth-input-group">
+          <label class="kiauth-input-label">Phone Number</label>
+          <input type="tel" class="kiauth-input kiauth-phone-input" placeholder="e.g. +91 99999 99999" value="+91 ">
+        </div>
+
+        <div class="kiauth-error-message" style="color: #ff4f4f; font-size: 13px; margin-bottom: 12px; display: none; text-align: center;"></div>
+
+        <button class="kiauth-btn-direct kiauth-btn-send-otp" type="button" style="width: 100%;">
+          Send OTP
+        </button>
+      </div>
+    `;
+            const closeBtn = this.container.querySelector('.kiauth-close-btn');
+            closeBtn?.addEventListener('click', () => {
+                this.callbacks.onCancel?.();
+            });
+            const phoneInput = this.container.querySelector('.kiauth-phone-input');
+            const sendBtn = this.container.querySelector('.kiauth-btn-send-otp');
+            const errorEl = this.container.querySelector('.kiauth-error-message');
+            // Focus phone input field
+            setTimeout(() => phoneInput.focus(), 100);
+            sendBtn.addEventListener('click', async () => {
+                const phone = phoneInput.value.trim();
+                if (!phone || phone === '+91' || phone.length < 8) {
+                    errorEl.textContent = 'Please enter a valid phone number.';
+                    errorEl.style.display = 'block';
+                    return;
+                }
+                sendBtn.disabled = true;
+                sendBtn.innerHTML = '<span class="kiauth-spinner"></span>';
+                errorEl.style.display = 'none';
+                try {
+                    let transactionId = '';
+                    if (this.callbacks.onOtpSend) {
+                        const res = await this.callbacks.onOtpSend(phone);
+                        transactionId = typeof res === 'string' ? res : res?.transactionId || '';
+                    }
+                    else {
+                        // Call backend identity service
+                        const res = await fetch(`${this.apiBaseUrl}/identity/register/phone`, {
+                            method: 'POST',
+                            headers: {
+                                'Content-Type': 'application/json',
+                                'Accept': 'application/json'
+                            },
+                            body: JSON.stringify({ phoneNumber: phone })
+                        });
+                        const data = await res.json();
+                        if (!res.ok) {
+                            throw new Error(data.message || 'Failed to send OTP.');
+                        }
+                        transactionId = data.userId;
+                    }
+                    this.renderOtpForm(phone, transactionId);
+                }
+                catch (err) {
+                    sendBtn.disabled = false;
+                    sendBtn.textContent = 'Send OTP';
+                    errorEl.textContent = err.message || 'Error sending OTP.';
+                    errorEl.style.display = 'block';
+                }
+            });
+        }
+        renderOtpForm(phone, transactionId) {
+            this.container.innerHTML = `
+      <div class="kiauth-fallback-container">
+        <div class="kiauth-header">
+          <h2 class="kiauth-title">Enter OTP</h2>
+          <button class="kiauth-close-btn" type="button" aria-label="Close dialog">&times;</button>
+        </div>
+
+        <p style="font-size: 14px; opacity: 0.8; margin-bottom: 20px; text-align: center;">
+          An OTP has been sent to <strong>${escapeHtml(phone)}</strong>.
+        </p>
+
+        <div class="kiauth-otp-inputs">
+          <input type="text" pattern="[0-9]*" inputmode="numeric" maxlength="1" class="kiauth-otp-box" data-index="0">
+          <input type="text" pattern="[0-9]*" inputmode="numeric" maxlength="1" class="kiauth-otp-box" data-index="1" disabled>
+          <input type="text" pattern="[0-9]*" inputmode="numeric" maxlength="1" class="kiauth-otp-box" data-index="2" disabled>
+          <input type="text" pattern="[0-9]*" inputmode="numeric" maxlength="1" class="kiauth-otp-box" data-index="3" disabled>
+          <input type="text" pattern="[0-9]*" inputmode="numeric" maxlength="1" class="kiauth-otp-box" data-index="4" disabled>
+          <input type="text" pattern="[0-9]*" inputmode="numeric" maxlength="1" class="kiauth-otp-box" data-index="5" disabled>
+        </div>
+
+        <div class="kiauth-error-message" style="color: #ff4f4f; font-size: 13px; margin-bottom: 12px; display: none; text-align: center;"></div>
+
+        <button class="kiauth-btn-direct kiauth-btn-verify-otp" type="button" style="width: 100%;" disabled>
+          Verify
+        </button>
+
+        <button class="kiauth-btn-refresh" type="button" style="background: transparent; color: rgba(255, 255, 255, 0.5); font-size: 13px; width: 100%; margin-top: 12px;">
+          ← Back to Phone
+        </button>
+      </div>
+    `;
+            const closeBtn = this.container.querySelector('.kiauth-close-btn');
+            closeBtn?.addEventListener('click', () => {
+                this.callbacks.onCancel?.();
+            });
+            const backBtn = this.container.querySelector('.kiauth-btn-refresh');
+            backBtn?.addEventListener('click', () => {
+                this.renderPhoneForm();
+            });
+            const otpBoxes = this.container.querySelectorAll('.kiauth-otp-box');
+            const verifyBtn = this.container.querySelector('.kiauth-btn-verify-otp');
+            const errorEl = this.container.querySelector('.kiauth-error-message');
+            // Auto-focus first digit
+            setTimeout(() => otpBoxes[0].focus(), 100);
+            const getOtpValue = () => Array.from(otpBoxes).map(b => b.value).join('');
+            const otpContainer = this.container.querySelector('.kiauth-otp-inputs');
+            otpContainer?.addEventListener('paste', (e) => {
+                e.preventDefault();
+                const pastedData = e.clipboardData?.getData('text') || '';
+                const digits = pastedData.replace(/\D/g, '').slice(0, 6);
+                if (digits.length > 0) {
+                    otpBoxes.forEach((box, i) => {
+                        if (digits[i]) {
+                            box.value = digits[i];
+                            box.removeAttribute('disabled');
+                            if (i < 5) {
+                                otpBoxes[i + 1].removeAttribute('disabled');
+                            }
+                        }
+                    });
+                    const focusIndex = Math.min(digits.length, 5);
+                    otpBoxes[focusIndex].focus();
+                    const otp = getOtpValue();
+                    if (otp.length === 6) {
+                        verifyBtn.removeAttribute('disabled');
+                        verifyBtn.click();
+                    }
+                }
+            });
+            otpBoxes.forEach((box, idx) => {
+                box.addEventListener('input', () => {
+                    const val = box.value;
+                    if (!/^[0-9]$/.test(val)) {
+                        box.value = '';
+                        return;
+                    }
+                    if (idx < 5) {
+                        const nextBox = otpBoxes[idx + 1];
+                        nextBox.removeAttribute('disabled');
+                        nextBox.focus();
+                    }
+                    const otp = getOtpValue();
+                    if (otp.length === 6) {
+                        verifyBtn.removeAttribute('disabled');
+                    }
+                });
+                box.addEventListener('keydown', (e) => {
+                    if (e.key === 'Backspace' && box.value === '') {
+                        if (idx > 0) {
+                            const prevBox = otpBoxes[idx - 1];
+                            prevBox.focus();
+                            prevBox.value = '';
+                            verifyBtn.setAttribute('disabled', 'true');
+                        }
+                    }
+                });
+            });
+            verifyBtn.addEventListener('click', async () => {
+                const otp = getOtpValue();
+                if (otp.length !== 6)
+                    return;
+                verifyBtn.disabled = true;
+                verifyBtn.innerHTML = '<span class="kiauth-spinner"></span>';
+                errorEl.style.display = 'none';
+                try {
+                    let user = null;
+                    if (this.callbacks.onOtpVerify) {
+                        user = await this.callbacks.onOtpVerify(phone, otp, transactionId);
+                    }
+                    else {
+                        // Call backend verify OTP
+                        const res = await fetch(`${this.apiBaseUrl}/identity/register/verify-otp`, {
+                            method: 'POST',
+                            headers: {
+                                'Content-Type': 'application/json',
+                                'Accept': 'application/json'
+                            },
+                            body: JSON.stringify({ userId: transactionId, otp })
+                        });
+                        const data = await res.json();
+                        if (!res.ok) {
+                            throw new Error(data.message || 'OTP verification failed.');
+                        }
+                        // Build a mock user object representing the verified identity session
+                        user = {
+                            name: 'OTP Verified User',
+                            email: null,
+                            kiauth_verified: true,
+                            userToken: `fallback_token_${transactionId}`,
+                            verificationExpiry: new Date(Date.now() + 24 * 60 * 60 * 1000).toISOString()
+                        };
+                    }
+                    this.callbacks.onSuccess(user);
+                }
+                catch (err) {
+                    verifyBtn.disabled = false;
+                    verifyBtn.textContent = 'Verify';
+                    errorEl.textContent = err.message || 'Invalid OTP. Please try again.';
+                    errorEl.style.display = 'block';
+                }
+            });
+        }
+    }
+
+    class KiauthButton {
+        render(selector, options) {
+            const container = document.querySelector(selector);
+            if (!container) {
+                console.error(`KiauthSDK: Element with selector "${selector}" not found.`);
+                return;
+            }
+            const button = document.createElement('button');
+            button.type = 'button';
+            const theme = options.theme || 'purple';
+            const size = options.size || 'medium';
+            button.className = `kiauth-login-button kiauth-btn-${theme} kiauth-btn-${size}`;
+            // White-label overrides (applied as inline styles so they win over the preset
+            // theme classes; omitting them keeps the default themed look = backward compatible).
+            if (options.color) {
+                button.style.background = options.color;
+                button.style.borderColor = options.color;
+            }
+            if (options.textColor)
+                button.style.color = options.textColor;
+            if (options.fullWidth)
+                button.style.width = '100%';
+            if (options.shape) {
+                const radius = options.shape === 'pill' ? '999px' : options.shape === 'square' ? '4px' : '10px';
+                button.style.borderRadius = radius;
+            }
+            const text = options.text || 'Login with Kiauth';
+            const showLogo = options.logo !== false; // default true
+            // Premium logo icon (lock / identity shield). Suppressed when logo:false.
+            const logoSvg = showLogo
+                ? `<svg width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round" style="display:inline-block; vertical-align:middle;">
+          <rect x="3" y="11" width="18" height="11" rx="2" ry="2"></rect>
+          <path d="M7 11V7a5 5 0 0 1 10 0v4"></path>
+        </svg>`
+                : '';
+            button.innerHTML = `${logoSvg}<span style="${showLogo ? 'margin-left: 8px;' : ''}">${text}</span>`;
+            button.addEventListener('click', (e) => {
+                e.preventDefault();
+                options.onClick();
+            });
+            container.innerHTML = '';
+            container.appendChild(button);
+        }
+    }
+
+    const CSS_STYLES = `
+  @import url('https://fonts.googleapis.com/css2?family=Outfit:wght@300;400;500;600;700&display=swap');
+
+  :root {
+    --kiauth-purple: #534ab7;
+    --kiauth-purple-hover: #423a9c;
+    --kiauth-bg-dark: #0f0c1b;
+    --kiauth-border-dark: rgba(255, 255, 255, 0.1);
+    --kiauth-glass: rgba(15, 12, 27, 0.7);
+    --kiauth-glow: rgba(83, 74, 183, 0.3);
+  }
+
+  .kiauth-dialog {
+    border: none;
+    border-radius: 20px;
+    padding: 0;
+    background: var(--kiauth-bg-dark);
+    box-shadow: 0 20px 50px rgba(0, 0, 0, 0.5), 0 0 0 1px var(--kiauth-border-dark), 0 0 30px var(--kiauth-glow);
+    max-width: 420px;
+    width: 90%;
+    color: #ffffff;
+    font-family: 'Outfit', -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, sans-serif;
+    overflow: hidden;
+    outline: none;
+    opacity: 0;
+    transform: scale(0.9);
+    transition: opacity 0.3s cubic-bezier(0.16, 1, 0.3, 1), transform 0.3s cubic-bezier(0.16, 1, 0.3, 1);
+  }
+
+  .kiauth-dialog[open] {
+    opacity: 1;
+    transform: scale(1);
+  }
+
+  .kiauth-dialog::backdrop {
+    background: rgba(10, 8, 20, 0.75);
+    backdrop-filter: blur(12px);
+    opacity: 0;
+    transition: opacity 0.3s ease;
+  }
+
+  .kiauth-dialog[open]::backdrop {
+    opacity: 1;
+  }
+
+  .kiauth-modal-content {
+    padding: 32px 24px;
+    display: flex;
+    flex-direction: column;
+    align-items: center;
+    text-align: center;
+  }
+
+  .kiauth-header {
+    display: flex;
+    justify-content: space-between;
+    align-items: center;
+    width: 100%;
+    margin-bottom: 24px;
+  }
+
+  .kiauth-title {
+    font-size: 22px;
+    font-weight: 600;
+    color: #ffffff;
+    margin: 0;
+    letter-spacing: -0.5px;
+    display: flex;
+    align-items: center;
+    gap: 8px;
+  }
+
+  .kiauth-title span {
+    color: var(--kiauth-purple);
+    font-weight: 700;
+  }
+
+  .kiauth-close-btn {
+    background: transparent;
+    border: none;
+    color: rgba(255, 255, 255, 0.5);
+    font-size: 24px;
+    cursor: pointer;
+    line-height: 1;
+    padding: 4px;
+    transition: color 0.2s;
+  }
+
+  .kiauth-close-btn:hover {
+    color: #ffffff;
+  }
+
+  .kiauth-qr-container {
+    background: #ffffff;
+    padding: 16px;
+    border-radius: 16px;
+    margin-bottom: 20px;
+    box-shadow: 0 8px 30px rgba(0, 0, 0, 0.3);
+    position: relative;
+    display: flex;
+    justify-content: center;
+    align-items: center;
+    width: 220px;
+    height: 220px;
+  }
+
+  .kiauth-qr-img {
+    width: 200px;
+    height: 200px;
+    display: block;
+  }
+
+  .kiauth-qr-expired {
+    position: absolute;
+    top: 0;
+    left: 0;
+    right: 0;
+    bottom: 0;
+    background: rgba(15, 12, 27, 0.95);
+    backdrop-filter: blur(4px);
+    border-radius: 16px;
+    display: flex;
+    flex-direction: column;
+    justify-content: center;
+    align-items: center;
+    color: #ffffff;
+    opacity: 0;
+    pointer-events: none;
+    transition: opacity 0.3s;
+    padding: 16px;
+  }
+
+  .kiauth-qr-expired.active {
+    opacity: 1;
+    pointer-events: auto;
+  }
+
+  .kiauth-btn-refresh {
+    background: var(--kiauth-purple);
+    color: #ffffff;
+    border: none;
+    padding: 10px 20px;
+    border-radius: 8px;
+    font-weight: 500;
+    cursor: pointer;
+    margin-top: 12px;
+    font-family: inherit;
+    transition: background 0.2s;
+  }
+
+  .kiauth-btn-refresh:hover {
+    background: var(--kiauth-purple-hover);
+  }
+
+  .kiauth-instructions {
+    font-size: 14px;
+    color: rgba(255, 255, 255, 0.7);
+    margin-bottom: 24px;
+    line-height: 1.5;
+  }
+
+  .kiauth-timer {
+    font-size: 13px;
+    color: rgba(255, 255, 255, 0.4);
+    margin-bottom: 20px;
+  }
+
+  .kiauth-timer span {
+    color: var(--kiauth-purple);
+    font-weight: 600;
+  }
+
+  .kiauth-divider {
+    width: 100%;
+    height: 1px;
+    background: var(--kiauth-border-dark);
+    margin: 20px 0;
+  }
+
+  .kiauth-mobile-direct {
+    display: flex;
+    flex-direction: column;
+    gap: 12px;
+    width: 100%;
+  }
+
+  .kiauth-btn-direct {
+    background: var(--kiauth-purple);
+    color: #ffffff;
+    border: none;
+    padding: 14px;
+    border-radius: 12px;
+    font-size: 16px;
+    font-weight: 600;
+    cursor: pointer;
+    font-family: inherit;
+    text-decoration: none;
+    display: inline-block;
+    transition: background 0.2s, transform 0.1s;
+    box-shadow: 0 4px 12px var(--kiauth-glow);
+  }
+
+  .kiauth-btn-direct:hover {
+    background: var(--kiauth-purple-hover);
+  }
+
+  .kiauth-btn-direct:active {
+    transform: scale(0.98);
+  }
+
+  /* Button Renderers */
+  .kiauth-login-button {
+    display: inline-flex;
+    align-items: center;
+    justify-content: center;
+    gap: 10px;
+    font-family: 'Outfit', sans-serif;
+    font-weight: 600;
+    border-radius: 10px;
+    cursor: pointer;
+    transition: all 0.2s ease;
+    border: 1px solid transparent;
+    user-select: none;
+  }
+
+  .kiauth-btn-purple {
+    background-color: var(--kiauth-purple);
+    color: #ffffff;
+  }
+  .kiauth-btn-purple:hover {
+    background-color: var(--kiauth-purple-hover);
+  }
+
+  .kiauth-btn-white {
+    background-color: #ffffff;
+    color: #0f0c1b;
+    border-color: rgba(0, 0, 0, 0.1);
+  }
+  .kiauth-btn-white:hover {
+    background-color: #f5f5f7;
+  }
+
+  .kiauth-btn-dark {
+    background-color: #0f0c1b;
+    color: #ffffff;
+    border-color: var(--kiauth-border-dark);
+  }
+  .kiauth-btn-dark:hover {
+    background-color: #1a1530;
+  }
+
+  .kiauth-btn-small {
+    padding: 8px 16px;
+    font-size: 13px;
+  }
+  .kiauth-btn-medium {
+    padding: 12px 24px;
+    font-size: 15px;
+  }
+  .kiauth-btn-large {
+    padding: 16px 32px;
+    font-size: 17px;
+  }
+
+  /* Fallback Form */
+  .kiauth-fallback-container {
+    width: 100%;
+    display: flex;
+    flex-direction: column;
+    align-items: center;
+  }
+
+  .kiauth-input-group {
+    width: 100%;
+    margin-bottom: 16px;
+    text-align: left;
+  }
+
+  .kiauth-input-label {
+    display: block;
+    font-size: 12px;
+    font-weight: 500;
+    color: rgba(255, 255, 255, 0.5);
+    margin-bottom: 6px;
+    text-transform: uppercase;
+    letter-spacing: 0.5px;
+  }
+
+  .kiauth-input {
+    width: 100%;
+    background: rgba(255, 255, 255, 0.05);
+    border: 1px solid var(--kiauth-border-dark);
+    padding: 12px;
+    border-radius: 8px;
+    color: #ffffff;
+    font-family: inherit;
+    font-size: 15px;
+    box-sizing: border-box;
+    transition: border-color 0.2s, box-shadow 0.2s;
+  }
+
+  .kiauth-input:focus {
+    outline: none;
+    border-color: var(--kiauth-purple);
+    box-shadow: 0 0 10px var(--kiauth-glow);
+  }
+
+  .kiauth-otp-inputs {
+    display: flex;
+    justify-content: space-between;
+    gap: 8px;
+    margin: 16px 0;
+    width: 100%;
+  }
+
+  .kiauth-otp-box {
+    width: 45px;
+    height: 45px;
+    background: rgba(255, 255, 255, 0.05);
+    border: 1px solid var(--kiauth-border-dark);
+    border-radius: 8px;
+    text-align: center;
+    color: #ffffff;
+    font-size: 20px;
+    font-weight: 600;
+    transition: border-color 0.2s;
+  }
+
+  .kiauth-otp-box:focus {
+    outline: none;
+    border-color: var(--kiauth-purple);
+    box-shadow: 0 0 10px var(--kiauth-glow);
+  }
+
+  .kiauth-spinner {
+    border: 2px solid rgba(255, 255, 255, 0.1);
+    width: 18px;
+    height: 18px;
+    border-radius: 50%;
+    border-left-color: #ffffff;
+    animation: spin 0.8s linear infinite;
+    display: inline-block;
+  }
+
+  @keyframes spin {
+    0% { transform: rotate(0deg); }
+    100% { transform: rotate(360deg); }
+  }
+`;
+    function injectStyles() {
+        const id = 'kiauth-sdk-styles';
+        if (document.getElementById(id))
+            return;
+        const style = document.createElement('style');
+        style.id = id;
+        style.textContent = CSS_STYLES;
+        document.head.appendChild(style);
+    }
+
+    /**
+     * PKCE (RFC 7636) helpers for public/browser clients, so the SDK never needs a
+     * confidential clientSecret in the browser. Uses the Web Crypto API.
+     */
+    function base64UrlEncode(bytes) {
+        let str = '';
+        for (let i = 0; i < bytes.length; i++) {
+            str += String.fromCharCode(bytes[i]);
+        }
+        return btoa(str).replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
+    }
+    /** Cryptographically-random code_verifier (43 chars, base64url of 32 bytes). */
+    function generateCodeVerifier() {
+        const arr = new Uint8Array(32);
+        crypto.getRandomValues(arr);
+        return base64UrlEncode(arr);
+    }
+    /** code_challenge = BASE64URL(SHA256(code_verifier)). */
+    async function generateCodeChallenge(verifier) {
+        const data = new TextEncoder().encode(verifier);
+        const digest = await crypto.subtle.digest('SHA-256', data);
+        return base64UrlEncode(new Uint8Array(digest));
+    }
+
+    class KiauthSDK {
+        constructor(config) {
+            this.config = config;
+            this.isFallbackMode = false;
+            this.healthCheckIntervalId = null;
+            this.pollIntervalId = null;
+            this.completed = false;
+            if (typeof window !== 'undefined' && config.clientSecret) {
+                console.warn('[Kiauth] CRITICAL SECURITY WARNING: clientSecret is configured in the browser environment. This leaks your clientSecret to all visitors. Omit clientSecret and use the default PKCE flow in the browser.');
+            }
+            this.api = new KiauthApi(config);
+            this.socket = new KiauthWebsocket(this.api.getBaseUrl());
+            this.modal = new QrModal();
+            this.buttonRenderer = new KiauthButton();
+            // Inject the premium styles automatically into the head
+            if (typeof document !== 'undefined') {
+                injectStyles();
+            }
+            // Start background health checking to determine when to fallback silently
+            this.startHealthCheck();
+        }
+        startHealthCheck() {
+            const runCheck = async () => {
+                const isHealthy = await this.api.healthCheck();
+                this.isFallbackMode = !isHealthy;
+            };
+            runCheck();
+            this.healthCheckIntervalId = setInterval(runCheck, 30000); // Check every 30 seconds
+        }
+        renderButton(selector, options) {
+            this.buttonRenderer.render(selector, {
+                text: options.text,
+                theme: options.theme,
+                size: options.size,
+                color: options.color,
+                textColor: options.textColor,
+                shape: options.shape,
+                fullWidth: options.fullWidth,
+                logo: options.logo,
+                onClick: () => {
+                    this.startLogin({
+                        onSuccess: options.onSuccess,
+                        onError: options.onError,
+                        onCancel: options.onCancel
+                    });
+                }
+            });
+        }
+        async startLogin(options) {
+            // Don't trust a stale background health result (e.g. one slow/cold-start
+            // check). Re-verify with a longer timeout before deciding to fall back, so a
+            // backend that's just waking up still serves the real Kiauth flow.
+            if (this.isFallbackMode) {
+                const healthyNow = await this.api.healthCheck(15000);
+                this.isFallbackMode = !healthyNow;
+                if (!healthyNow) {
+                    this.triggerOtpFallback(options);
+                    return;
+                }
+            }
+            try {
+                this.completed = false;
+                this.stopPolling();
+                // 0. PKCE for public (browser) clients — the secure default. We only fall
+                // back to a confidential clientSecret if one was explicitly configured
+                // (discouraged in the browser).
+                const usePkce = !this.config.clientSecret;
+                let codeVerifier;
+                let codeChallenge;
+                if (usePkce) {
+                    codeVerifier = generateCodeVerifier();
+                    codeChallenge = await generateCodeChallenge(codeVerifier);
+                }
+                // 1. Initiate QR session on the backend
+                const session = await this.api.initiateSession(this.config.clientId, this.config.scopes, this.config.redirectUri, codeChallenge);
+                const isMobile = typeof navigator !== 'undefined' &&
+                    /Android|iPhone|iPad|iPod/i.test(navigator.userAgent);
+                // 2. Open QR code modal
+                this.modal.show(session.sessionId, session.qrData, session.expiresIn, 
+                // On Refresh click
+                () => {
+                    this.modal.close();
+                    this.startLogin(options);
+                }, 
+                // On Cancel click
+                () => {
+                    this.socket.disconnect();
+                    this.stopPolling();
+                    options.onCancel?.();
+                });
+                // 3. If mobile, attempt auto deep link redirect
+                if (isMobile) {
+                    window.location.href = `https://www.kiauth.com/auth?sid=${session.sessionId}`;
+                }
+                // Shared completion: exchange the code and fire onSuccess exactly once,
+                // whether approval arrived via the WebSocket or via HTTP polling.
+                const finish = async (code) => {
+                    if (this.completed)
+                        return;
+                    this.completed = true;
+                    this.stopPolling();
+                    this.socket.disconnect();
+                    this.modal.close();
+                    try {
+                        if (!usePkce) {
+                            console.warn('[Kiauth] Using clientSecret in the browser is insecure. Omit clientSecret to use the default PKCE flow.');
+                        }
+                        const tokenResponse = await this.api.exchangeToken(code, this.config.clientId, usePkce ? { codeVerifier } : { clientSecret: this.config.clientSecret });
+                        options.onSuccess(tokenResponse.user);
+                    }
+                    catch (exchangeErr) {
+                        options.onError({
+                            code: exchangeErr.code || 'EXCHANGE_FAILED',
+                            message: exchangeErr.message || 'Failed to complete authentication exchange.'
+                        });
+                    }
+                };
+                // 4a. Real-time path: WebSocket auth_complete (fast when it connects).
+                this.socket.connect(session.channelId, (authData) => finish(authData.code), () => {
+                    // Socket loss is non-fatal: the poller below is the reliable path,
+                    // so we do NOT drop to OTP here.
+                });
+                // 4b. Reliable path: poll session status until APPROVED. This works through
+                // proxies / cold networks where the WS event may never arrive (it's the same
+                // mechanism the dev portal uses successfully).
+                this.startPolling(session.sessionId, session.expiresIn, finish);
+            }
+            catch (err) {
+                this.modal.close();
+                if (err.code === 'KIAUTH_OFFLINE' || this.isFallbackMode) {
+                    this.triggerOtpFallback(options);
+                }
+                else {
+                    options.onError({
+                        code: err.code || 'LOGIN_INITIATE_FAILED',
+                        message: err.message || 'Login initiation failed.'
+                    });
+                }
+            }
+        }
+        // Poll the QR session until it's APPROVED, then complete via the shared finish().
+        startPolling(sessionId, expiresInSec, finish) {
+            this.stopPolling();
+            const deadline = Date.now() + (expiresInSec || 300) * 1000;
+            let consecutiveErrors = 0;
+            this.pollIntervalId = setInterval(async () => {
+                if (this.completed || Date.now() > deadline) {
+                    this.stopPolling();
+                    return;
+                }
+                try {
+                    const { status, authCode } = await this.api.getSessionStatus(sessionId);
+                    consecutiveErrors = 0;
+                    if (status === 'APPROVED' && authCode) {
+                        finish(authCode);
+                    }
+                    else if (status === 'EXPIRED' || status === 'USED') {
+                        this.stopPolling();
+                    }
+                }
+                catch (err) {
+                    consecutiveErrors++;
+                    const isExpiredOrNotFound = err && (err.statusCode === 404 || err.statusCode === 410 || err.code === 'SESSION_EXPIRED');
+                    if (isExpiredOrNotFound || consecutiveErrors >= 5) {
+                        this.stopPolling();
+                    }
+                }
+            }, 3000);
+        }
+        stopPolling() {
+            if (this.pollIntervalId) {
+                clearInterval(this.pollIntervalId);
+                this.pollIntervalId = null;
+            }
+        }
+        triggerOtpFallback(options) {
+            // Show empty dialog container to render OTP fallback view inside
+            const dialog = document.createElement('dialog');
+            dialog.className = 'kiauth-dialog';
+            dialog.setAttribute('closedby', 'any');
+            dialog.setAttribute('aria-labelledby', 'kiauth-dialog-title');
+            document.body.appendChild(dialog);
+            dialog.showModal();
+            const cleanUp = () => {
+                dialog.close();
+                dialog.remove();
+            };
+            const fallback = new OtpFallback(dialog, {
+                onSuccess: (user) => {
+                    cleanUp();
+                    options.onSuccess(user);
+                },
+                onError: (err) => {
+                    cleanUp();
+                    options.onError(err);
+                },
+                onCancel: () => {
+                    cleanUp();
+                    options.onCancel?.();
+                }
+            }, this.api.getBaseUrl());
+            fallback.show();
+        }
+        async verifyToken(token) {
+            return this.api.verifyToken(token);
+        }
+        async reportSession(options) {
+            if (typeof window !== 'undefined') {
+                throw new Error('reportSession cannot be called in the browser environment to prevent client-side exposure of clientSecret. Run this method on your backend server only.');
+            }
+            if (!this.config.clientSecret) {
+                throw new Error('clientSecret is required to call reportSession.');
+            }
+            return this.api.reportSession(this.config.clientId, this.config.clientSecret, options);
+        }
+        async reportBatchSessions(kiauthUserToken, sessions) {
+            if (typeof window !== 'undefined') {
+                throw new Error('reportBatchSessions cannot be called in the browser environment to prevent client-side exposure of clientSecret. Run this method on your backend server only.');
+            }
+            if (!this.config.clientSecret) {
+                throw new Error('clientSecret is required to call reportBatchSessions.');
+            }
+            return this.api.reportBatchSessions(this.config.clientId, this.config.clientSecret, kiauthUserToken, sessions);
+        }
+        // Email-keyed login reporting ("claim on first sighting"). Use when you don't have a
+        // kiauthUserToken — e.g. the user signed in with their own email/password/Google and you
+        // want it shown in their Kiauth app. Requires a VERIFIED business + clientSecret — call
+        // this from your backend, never the browser.
+        async reportSessionByEmail(options) {
+            if (typeof window !== 'undefined') {
+                throw new Error('reportSessionByEmail cannot be called in the browser environment to prevent client-side exposure of clientSecret. Run this method on your backend server only.');
+            }
+            if (!this.config.clientSecret) {
+                throw new Error('clientSecret is required to call reportSessionByEmail (run this on your backend).');
+            }
+            return this.api.reportSessionByEmail(this.config.clientId, this.config.clientSecret, options);
+        }
+        // RP-initiated logout. Call this from your backend when the user logs out of
+        // your site so the Kiauth app shows the session as revoked. Requires
+        // clientSecret — never expose this in the browser.
+        async logout(opts) {
+            if (typeof window !== 'undefined') {
+                throw new Error('logout cannot be called in the browser environment to prevent client-side exposure of clientSecret. Run this method on your backend server only.');
+            }
+            if (!this.config.clientSecret) {
+                throw new Error('clientSecret is required to call logout (run this on your backend).');
+            }
+            return this.api.endSession(this.config.clientId, this.config.clientSecret, opts);
+        }
+        destroy() {
+            if (this.healthCheckIntervalId) {
+                clearInterval(this.healthCheckIntervalId);
+                this.healthCheckIntervalId = null;
+            }
+            this.socket.disconnect();
+            this.modal.close();
+        }
+    }
+
+    return KiauthSDK;
+
+}));
+//# sourceMappingURL=kiauth-sdk.min.js.map