@liflig/cdk-cloudfront-auth 1.9.0 → 1.9.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/check-auth/index.js +4 -4
- package/dist/generate-secret/index.js +1 -1
- package/dist/http-headers/index.js +2 -2
- package/dist/parse-auth/index.js +13 -13
- package/dist/refresh-auth/index.js +13 -13
- package/dist/sign-out/index.js +6 -6
- package/lib/handlers/util/axios.js +1 -3
- package/lib/handlers/util/jwt.js +1 -2
- package/lib/handlers/util/logger.js +1 -4
- package/package.json +1 -1
package/dist/check-auth/index.js
CHANGED
|
@@ -1,10 +1,10 @@
|
|
|
1
|
-
var VW=Object.create;var{getPrototypeOf:MW,defineProperty:Ft,getOwnPropertyNames:th,getOwnPropertyDescriptor:
|
|
1
|
+
var VW=Object.create;var{getPrototypeOf:MW,defineProperty:Ft,getOwnPropertyNames:th,getOwnPropertyDescriptor:NW}=Object,ch=Object.prototype.hasOwnProperty;function uh(t){return this[t]}var TW,eW,kt=(t,c,u)=>{var r=t!=null&&typeof t==="object";if(r){var n=c?TW??=new WeakMap:eW??=new WeakMap,f=n.get(t);if(f)return f}u=t!=null?VW(MW(t)):{};let d=c||!t||!t.__esModule?Ft(u,"default",{value:t,enumerable:!0}):u;for(let h of th(t))if(!ch.call(d,h))Ft(d,h,{get:uh.bind(t,h),enumerable:!0});if(r)n.set(t,d);return d},DW=(t)=>{var c=(ad??=new WeakMap).get(t),u;if(c)return c;if(c=Ft({},"__esModule",{value:!0}),t&&typeof t==="object"||typeof t==="function"){for(var r of th(t))if(!ch.call(c,r))Ft(c,r,{get:uh.bind(t,r),enumerable:!(u=NW(t,r))||u.enumerable})}return ad.set(t,c),c},ad,K=(t,c)=>()=>(c||t((c={exports:{}}).exports,c),c.exports);var bW=(t)=>t;function jW(t,c){this[t]=bW.bind(null,c)}var pW=(t,c)=>{for(var u in c)Ft(t,u,{get:c[u],enumerable:!0,configurable:!0,set:jW.bind(c,u)})};var vr=K((C1)=>{Object.defineProperty(C1,"__esModule",{value:!0});C1.parseCookie=dh;C1.parse=dh;C1.stringifyCookie=BW;C1.stringifySetCookie=ec;C1.serialize=ec;C1.parseSetCookie=FW;C1.stringifySetCookie=ec;C1.serialize=ec;var nh=/^[\u0021-\u003A\u003C\u003E-\u007E]+$/,fh=/^[\u0021-\u003A\u003C-\u007E]*$/,xW=/^([.]?[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?)([.][a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?)*$/i,LW=/^[\u0020-\u003A\u003D-\u007E]*$/,sW=/^-?\d+$/,mW=Object.prototype.toString,gW=(()=>{let t=function(){};return t.prototype=Object.create(null),t})();function dh(t,c){let u=new gW,r=t.length;if(r<2)return u;let n=c?.decode||hh,f=0;do{let d=pr(t,f,r);if(d===-1)break;let h=jr(t,f,r);if(d>h){f=t.lastIndexOf(";",d-1)+1;continue}let q=e1(t,f,d);if(u[q]===void 0)u[q]=n(e1(t,d+1,h));f=h+1}while(f<r);return u}function BW(t,c){let u=c?.encode||encodeURIComponent,r=[];for(let n of Object.keys(t)){let f=t[n];if(f===void 0)continue;if(!nh.test(n))throw TypeError(`cookie name is invalid: ${n}`);let d=u(f);if(!fh.test(d))throw TypeError(`cookie val is invalid: ${f}`);r.push(`${n}=${d}`)}return r.join("; ")}function ec(t,c,u){let r=typeof t==="object"?t:{...u,name:t,value:String(c)},f=(typeof c==="object"?c:u)?.encode||encodeURIComponent;if(!nh.test(r.name))throw TypeError(`argument name is invalid: ${r.name}`);let d=r.value?f(r.value):"";if(!fh.test(d))throw TypeError(`argument val is invalid: ${r.value}`);let h=r.name+"="+d;if(r.maxAge!==void 0){if(!Number.isInteger(r.maxAge))throw TypeError(`option maxAge is invalid: ${r.maxAge}`);h+="; Max-Age="+r.maxAge}if(r.domain){if(!xW.test(r.domain))throw TypeError(`option domain is invalid: ${r.domain}`);h+="; Domain="+r.domain}if(r.path){if(!LW.test(r.path))throw TypeError(`option path is invalid: ${r.path}`);h+="; Path="+r.path}if(r.expires){if(!kW(r.expires)||!Number.isFinite(r.expires.valueOf()))throw TypeError(`option expires is invalid: ${r.expires}`);h+="; Expires="+r.expires.toUTCString()}if(r.httpOnly)h+="; HttpOnly";if(r.secure)h+="; Secure";if(r.partitioned)h+="; Partitioned";if(r.priority)switch(typeof r.priority==="string"?r.priority.toLowerCase():void 0){case"low":h+="; Priority=Low";break;case"medium":h+="; Priority=Medium";break;case"high":h+="; Priority=High";break;default:throw TypeError(`option priority is invalid: ${r.priority}`)}if(r.sameSite)switch(typeof r.sameSite==="string"?r.sameSite.toLowerCase():r.sameSite){case!0:case"strict":h+="; SameSite=Strict";break;case"lax":h+="; SameSite=Lax";break;case"none":h+="; SameSite=None";break;default:throw TypeError(`option sameSite is invalid: ${r.sameSite}`)}return h}function FW(t,c){let u=c?.decode||hh,r=t.length,n=jr(t,0,r),f=pr(t,0,n),d=f===-1?{name:"",value:u(e1(t,0,n))}:{name:e1(t,0,f),value:u(e1(t,f+1,n))},h=n+1;while(h<r){let q=jr(t,h,r),_=pr(t,h,q),W=_===-1?e1(t,h,q):e1(t,h,_),J=_===-1?void 0:e1(t,_+1,q);switch(W.toLowerCase()){case"httponly":d.httpOnly=!0;break;case"secure":d.secure=!0;break;case"partitioned":d.partitioned=!0;break;case"domain":d.domain=J;break;case"path":d.path=J;break;case"max-age":if(J&&sW.test(J))d.maxAge=Number(J);break;case"expires":if(!J)break;let $=new Date(J);if(Number.isFinite($.valueOf()))d.expires=$;break;case"priority":if(!J)break;let w=J.toLowerCase();if(w==="low"||w==="medium"||w==="high")d.priority=w;break;case"samesite":if(!J)break;let P=J.toLowerCase();if(P==="lax"||P==="strict"||P==="none")d.sameSite=P;break}h=q+1}return d}function jr(t,c,u){let r=t.indexOf(";",c);return r===-1?u:r}function pr(t,c,u){let r=t.indexOf("=",c);return r<u?r:-1}function e1(t,c,u){let r=c,n=u;do{let f=t.charCodeAt(r);if(f!==32&&f!==9)break}while(++r<n);while(n>r){let f=t.charCodeAt(n-1);if(f!==32&&f!==9)break;n--}return t.slice(r,n)}function hh(t){if(t.indexOf("%")===-1)return t;try{return decodeURIComponent(t)}catch(c){return t}}function kW(t){return mW.call(t)==="[object Date]"}});var Jt=K((gr,Ph)=>{/*! safe-buffer. MIT License. Feross Aboukhadijeh <https://feross.org/opensource> */var bc=require("buffer"),O1=bc.Buffer;function $h(t,c){for(var u in t)c[u]=t[u]}if(O1.from&&O1.alloc&&O1.allocUnsafe&&O1.allocUnsafeSlow)Ph.exports=bc;else $h(bc,gr),gr.Buffer=U1;function U1(t,c,u){return O1(t,c,u)}U1.prototype=Object.create(O1.prototype);$h(O1,U1);U1.from=function(t,c,u){if(typeof t==="number")throw TypeError("Argument must not be a number");return O1(t,c,u)};U1.alloc=function(t,c,u){if(typeof t!=="number")throw TypeError("Argument must be a number");var r=O1(t);if(c!==void 0)if(typeof u==="string")r.fill(c,u);else r.fill(c);else r.fill(0);return r};U1.allocUnsafe=function(t){if(typeof t!=="number")throw TypeError("Argument must be a number");return O1(t)};U1.allocUnsafeSlow=function(t){if(typeof t!=="number")throw TypeError("Argument must be a number");return bc.SlowBuffer(t)}});var Br=K((ZZ,Ah)=>{var jc=Jt().Buffer,aW=require("stream"),tJ=require("util");function pc(t){if(this.buffer=null,this.writable=!0,this.readable=!0,!t)return this.buffer=jc.alloc(0),this;if(typeof t.pipe==="function")return this.buffer=jc.alloc(0),t.pipe(this),this;if(t.length||typeof t==="object")return this.buffer=t,this.writable=!1,process.nextTick(function(){this.emit("end",t),this.readable=!1,this.emit("close")}.bind(this)),this;throw TypeError("Unexpected data type ("+typeof t+")")}tJ.inherits(pc,aW);pc.prototype.write=function(c){this.buffer=jc.concat([this.buffer,jc.from(c)]),this.emit("data",c)};pc.prototype.end=function(c){if(c)this.write(c);this.emit("end",c),this.emit("close"),this.writable=!1,this.readable=!1};Ah.exports=pc});var Sh=K((XZ,yh)=>{function Fr(t){var c=(t/8|0)+(t%8===0?0:1);return c}var cJ={ES256:Fr(256),ES384:Fr(384),ES512:Fr(521)};function uJ(t){var c=cJ[t];if(c)return c;throw Error('Unknown algorithm "'+t+'"')}yh.exports=uJ});var Xh=K((EZ,Zh)=>{var vc=Jt().Buffer,Ch=Sh(),xc=128,Oh=0,rJ=32,nJ=16,fJ=2,Gh=nJ|rJ|Oh<<6,Lc=fJ|Oh<<6;function dJ(t){return t.replace(/=/g,"").replace(/\+/g,"-").replace(/\//g,"_")}function Ih(t){if(vc.isBuffer(t))return t;else if(typeof t==="string")return vc.from(t,"base64");throw TypeError("ECDSA signature must be a Base64 string or a Buffer")}function hJ(t,c){t=Ih(t);var u=Ch(c),r=u+1,n=t.length,f=0;if(t[f++]!==Gh)throw Error('Could not find expected "seq"');var d=t[f++];if(d===(xc|1))d=t[f++];if(n-f<d)throw Error('"seq" specified length of "'+d+'", only "'+(n-f)+'" remaining');if(t[f++]!==Lc)throw Error('Could not find expected "int" for "r"');var h=t[f++];if(n-f-2<h)throw Error('"r" specified length of "'+h+'", only "'+(n-f-2)+'" available');if(r<h)throw Error('"r" specified length of "'+h+'", max of "'+r+'" is acceptable');var q=f;if(f+=h,t[f++]!==Lc)throw Error('Could not find expected "int" for "s"');var _=t[f++];if(n-f!==_)throw Error('"s" specified length of "'+_+'", expected "'+(n-f)+'"');if(r<_)throw Error('"s" specified length of "'+_+'", max of "'+r+'" is acceptable');var W=f;if(f+=_,f!==n)throw Error('Expected to consume entire buffer, but "'+(n-f)+'" bytes remain');var J=u-h,$=u-_,w=vc.allocUnsafe(J+h+$+_);for(f=0;f<J;++f)w[f]=0;t.copy(w,f,q+Math.max(-J,0),q+h),f=u;for(var P=f;f<P+$;++f)w[f]=0;return t.copy(w,f,W+Math.max(-$,0),W+_),w=w.toString("base64"),w=dJ(w),w}function Hh(t,c,u){var r=0;while(c+r<u&&t[c+r]===0)++r;var n=t[c+r]>=xc;if(n)--r;return r}function qJ(t,c){t=Ih(t);var u=Ch(c),r=t.length;if(r!==u*2)throw TypeError('"'+c+'" signatures must be "'+u*2+'" bytes, saw "'+r+'"');var n=Hh(t,0,u),f=Hh(t,u,t.length),d=u-n,h=u-f,q=2+d+1+1+h,_=q<xc,W=vc.allocUnsafe((_?2:3)+q),J=0;if(W[J++]=Gh,_)W[J++]=q;else W[J++]=xc|1,W[J++]=q&255;if(W[J++]=Lc,W[J++]=d,n<0)W[J++]=0,J+=t.copy(W,J,0,u);else J+=t.copy(W,J,n,u);if(W[J++]=Lc,W[J++]=h,f<0)W[J++]=0,t.copy(W,J,u);else t.copy(W,J,u+f);return W}Zh.exports={derToJose:hJ,joseToDer:qJ}});var Yh=K((YZ,Eh)=>{var ot=require("buffer").Buffer,kr=require("buffer").SlowBuffer;Eh.exports=sc;function sc(t,c){if(!ot.isBuffer(t)||!ot.isBuffer(c))return!1;if(t.length!==c.length)return!1;var u=0;for(var r=0;r<t.length;r++)u|=t[r]^c[r];return u===0}sc.install=function(){ot.prototype.equal=kr.prototype.equal=function(c){return sc(this,c)}};var _J=ot.prototype.equal,KJ=kr.prototype.equal;sc.restore=function(){ot.prototype.equal=_J,kr.prototype.equal=KJ}});var Qr=K((zZ,Dh)=>{var $t=Jt().Buffer,u1=require("crypto"),ih=Xh(),zh=require("util"),WJ=`"%s" is not a valid algorithm.
|
|
2
2
|
Supported algorithms are:
|
|
3
|
-
"HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "PS256", "PS384", "PS512", "ES256", "ES384", "ES512" and "none".`,Ut="secret must be a string or buffer",wt="key must be a string or a buffer",JJ="key must be a string, a buffer or an object",Ur=typeof u1.createPublicKey==="function";if(Ur)wt+=" or a KeyObject",Ut+="or a KeyObject";function Rh(t){if($t.isBuffer(t))return;if(typeof t==="string")return;if(!Ur)throw w1(wt);if(typeof t!=="object")throw w1(wt);if(typeof t.type!=="string")throw w1(wt);if(typeof t.asymmetricKeyType!=="string")throw w1(wt);if(typeof t.export!=="function")throw w1(wt)}function Vh(t){if($t.isBuffer(t))return;if(typeof t==="string")return;if(typeof t==="object")return;throw w1(JJ)}function wJ(t){if($t.isBuffer(t))return;if(typeof t==="string")return t;if(!Ur)throw w1(Ut);if(typeof t!=="object")throw w1(Ut);if(t.type!=="secret")throw w1(Ut);if(typeof t.export!=="function")throw w1(Ut)}function lr(t){return t.replace(/=/g,"").replace(/\+/g,"-").replace(/\//g,"_")}function Mh(t){t=t.toString();var c=4-t.length%4;if(c!==4)for(var u=0;u<c;++u)t+="=";return t.replace(/\-/g,"+").replace(/_/g,"/")}function w1(t){var c=[].slice.call(arguments,1),u=ih.format.bind(ih,t).apply(null,c);return TypeError(u)}function $J(t){return $t.isBuffer(t)||typeof t==="string"}function lt(t){if(!$J(t))t=JSON.stringify(t);return t}function eh(t){return function(u,r){wJ(r),u=lt(u);var n=u1.createHmac("sha"+t,r),f=(n.update(u),n.digest("base64"));return lr(f)}}var or,PJ="timingSafeEqual"in u1?function(c,u){if(c.byteLength!==u.byteLength)return!1;return u1.timingSafeEqual(c,u)}:function(c,u){if(!or)or=Yh();return or(c,u)};function AJ(t){return function(u,r,n){var f=eh(t)(u,n);return PJ($t.from(r),$t.from(f))}}function Nh(t){return function(u,r){Vh(r),u=lt(u);var n=u1.createSign("RSA-SHA"+t),f=(n.update(u),n.sign(r,"base64"));return lr(f)}}function Th(t){return function(u,r,n){Rh(n),u=lt(u),r=Mh(r);var f=u1.createVerify("RSA-SHA"+t);return f.update(u),f.verify(n,r,"base64")}}function yJ(t){return function(u,r){Vh(r),u=lt(u);var n=u1.createSign("RSA-SHA"+t),f=(n.update(u),n.sign({key:r,padding:u1.constants.RSA_PKCS1_PSS_PADDING,saltLength:u1.constants.RSA_PSS_SALTLEN_DIGEST},"base64"));return lr(f)}}function SJ(t){return function(u,r,n){Rh(n),u=lt(u),r=Mh(r);var f=u1.createVerify("RSA-SHA"+t);return f.update(u),f.verify({key:n,padding:u1.constants.RSA_PKCS1_PSS_PADDING,saltLength:u1.constants.RSA_PSS_SALTLEN_DIGEST},r,"base64")}}function HJ(t){var c=Nh(t);return function(){var r=c.apply(null,arguments);return r=zh.derToJose(r,"ES"+t),r}}function CJ(t){var c=Th(t);return function(r,n,f){n=zh.joseToDer(n,"ES"+t).toString("base64");var d=c(r,n,f);return d}}function OJ(){return function(){return""}}function GJ(){return function(c,u){return u===""}}Dh.exports=function(c){var u={hs:eh,rs:Nh,ps:yJ,es:HJ,none:OJ},r={hs:AJ,rs:Th,ps:SJ,es:CJ,none:GJ},n=c.match(/^(RS|PS|ES|HS)(256|384|512)$|^(none)$/);if(!n)throw w1(WJ,c);var f=(n[1]||n[3]).toLowerCase(),d=n[2];return{sign:u[f](d),verify:r[f](d)}}});var ar=K((zZ,bh)=>{var IJ=require("buffer").Buffer;bh.exports=function(c){if(typeof c==="string")return c;if(typeof c==="number"||IJ.isBuffer(c))return c.toString();return JSON.stringify(c)}});var sh=K((RZ,Lh)=>{var ZJ=Jt().Buffer,jh=Br(),XJ=Qr(),EJ=require("stream"),ph=ar(),tn=require("util");function vh(t,c){return ZJ.from(t,c).toString("base64").replace(/=/g,"").replace(/\+/g,"-").replace(/\//g,"_")}function YJ(t,c,u){u=u||"utf8";var r=vh(ph(t),"binary"),n=vh(ph(c),u);return tn.format("%s.%s",r,n)}function xh(t){var{header:c,payload:u}=t,r=t.secret||t.privateKey,n=t.encoding,f=XJ(c.alg),d=YJ(c,u,n),h=f.sign(d,r);return tn.format("%s.%s",d,h)}function mc(t){var c=t.secret;if(c=c==null?t.privateKey:c,c=c==null?t.key:c,/^hs/i.test(t.header.alg)===!0&&c==null)throw TypeError("secret must be a string or buffer or a KeyObject");var u=new jh(c);this.readable=!0,this.header=t.header,this.encoding=t.encoding,this.secret=this.privateKey=this.key=u,this.payload=new jh(t.payload),this.secret.once("close",function(){if(!this.payload.writable&&this.readable)this.sign()}.bind(this)),this.payload.once("close",function(){if(!this.secret.writable&&this.readable)this.sign()}.bind(this))}tn.inherits(mc,EJ);mc.prototype.sign=function(){try{var c=xh({header:this.header,payload:this.payload.buffer,secret:this.secret.buffer,encoding:this.encoding});return this.emit("done",c),this.emit("data",c),this.emit("end"),this.readable=!1,c}catch(u){this.readable=!1,this.emit("error",u),this.emit("close")}};mc.sign=xh;Lh.exports=mc});var ah=K((VZ,Qh)=>{var gh=Jt().Buffer,mh=Br(),iJ=Qr(),zJ=require("stream"),Bh=ar(),RJ=require("util"),VJ=/^[a-zA-Z0-9\-_]+?\.[a-zA-Z0-9\-_]+?\.([a-zA-Z0-9\-_]+)?$/;function MJ(t){return Object.prototype.toString.call(t)==="[object Object]"}function eJ(t){if(MJ(t))return t;try{return JSON.parse(t)}catch(c){return}}function Fh(t){var c=t.split(".",1)[0];return eJ(gh.from(c,"base64").toString("binary"))}function NJ(t){return t.split(".",2).join(".")}function kh(t){return t.split(".")[2]}function TJ(t,c){c=c||"utf8";var u=t.split(".")[1];return gh.from(u,"base64").toString(c)}function oh(t){return VJ.test(t)&&!!Fh(t)}function Uh(t,c,u){if(!c){var r=Error("Missing algorithm parameter for jws.verify");throw r.code="MISSING_ALGORITHM",r}t=Bh(t);var n=kh(t),f=NJ(t),d=iJ(c);return d.verify(f,n,u)}function lh(t,c){if(c=c||{},t=Bh(t),!oh(t))return null;var u=Fh(t);if(!u)return null;var r=TJ(t);if(u.typ==="JWT"||c.json)r=JSON.parse(r,c.encoding);return{header:u,payload:r,signature:kh(t)}}function Pt(t){t=t||{};var c=t.secret;if(c=c==null?t.publicKey:c,c=c==null?t.key:c,/^hs/i.test(t.algorithm)===!0&&c==null)throw TypeError("secret must be a string or buffer or a KeyObject");var u=new mh(c);this.readable=!0,this.algorithm=t.algorithm,this.encoding=t.encoding,this.secret=this.publicKey=this.key=u,this.signature=new mh(t.signature),this.secret.once("close",function(){if(!this.signature.writable&&this.readable)this.verify()}.bind(this)),this.signature.once("close",function(){if(!this.secret.writable&&this.readable)this.verify()}.bind(this))}RJ.inherits(Pt,zJ);Pt.prototype.verify=function(){try{var c=Uh(this.signature.buffer,this.algorithm,this.key.buffer),u=lh(this.signature.buffer,this.encoding);return this.emit("done",c,u),this.emit("data",c),this.emit("end"),this.readable=!1,c}catch(r){this.readable=!1,this.emit("error",r),this.emit("close")}};Pt.decode=lh;Pt.isValid=oh;Pt.verify=Uh;Qh.exports=Pt});var Bc=K((D1)=>{var tq=sh(),gc=ah(),DJ=["HS256","HS384","HS512","RS256","RS384","RS512","PS256","PS384","PS512","ES256","ES384","ES512"];D1.ALGORITHMS=DJ;D1.sign=tq.sign;D1.verify=gc.verify;D1.decode=gc.decode;D1.isValid=gc.isValid;D1.createSign=function(c){return new tq(c)};D1.createVerify=function(c){return new gc(c)}});var cn=K((eZ,cq)=>{var bJ=Bc();cq.exports=function(t,c){c=c||{};var u=bJ.decode(t,c);if(!u)return null;var r=u.payload;if(typeof r==="string")try{var n=JSON.parse(r);if(n!==null&&typeof n==="object")r=n}catch(f){}if(c.complete===!0)return{header:u.header,payload:r,signature:u.signature};return r}});var Qt=K((NZ,uq)=>{var Fc=function(t,c){if(Error.call(this,t),Error.captureStackTrace)Error.captureStackTrace(this,this.constructor);if(this.name="JsonWebTokenError",this.message=t,c)this.inner=c};Fc.prototype=Object.create(Error.prototype);Fc.prototype.constructor=Fc;uq.exports=Fc});var un=K((TZ,nq)=>{var rq=Qt(),kc=function(t,c){rq.call(this,t),this.name="NotBeforeError",this.date=c};kc.prototype=Object.create(rq.prototype);kc.prototype.constructor=kc;nq.exports=kc});var rn=K((DZ,dq)=>{var fq=Qt(),oc=function(t,c){fq.call(this,t),this.name="TokenExpiredError",this.expiredAt=c};oc.prototype=Object.create(fq.prototype);oc.prototype.constructor=oc;dq.exports=oc});var nn=K((bZ,hq)=>{var At=1000,yt=At*60,St=yt*60,l1=St*24,jJ=l1*7,pJ=l1*365.25;hq.exports=function(t,c){c=c||{};var u=typeof t;if(u==="string"&&t.length>0)return vJ(t);else if(u==="number"&&isFinite(t))return c.long?LJ(t):xJ(t);throw Error("val is not a non-empty string or a valid number. val="+JSON.stringify(t))};function vJ(t){if(t=String(t),t.length>100)return;var c=/^(-?(?:\d+)?\.?\d+) *(milliseconds?|msecs?|ms|seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|weeks?|w|years?|yrs?|y)?$/i.exec(t);if(!c)return;var u=parseFloat(c[1]),r=(c[2]||"ms").toLowerCase();switch(r){case"years":case"year":case"yrs":case"yr":case"y":return u*pJ;case"weeks":case"week":case"w":return u*jJ;case"days":case"day":case"d":return u*l1;case"hours":case"hour":case"hrs":case"hr":case"h":return u*St;case"minutes":case"minute":case"mins":case"min":case"m":return u*yt;case"seconds":case"second":case"secs":case"sec":case"s":return u*At;case"milliseconds":case"millisecond":case"msecs":case"msec":case"ms":return u;default:return}}function xJ(t){var c=Math.abs(t);if(c>=l1)return Math.round(t/l1)+"d";if(c>=St)return Math.round(t/St)+"h";if(c>=yt)return Math.round(t/yt)+"m";if(c>=At)return Math.round(t/At)+"s";return t+"ms"}function LJ(t){var c=Math.abs(t);if(c>=l1)return Uc(t,c,l1,"day");if(c>=St)return Uc(t,c,St,"hour");if(c>=yt)return Uc(t,c,yt,"minute");if(c>=At)return Uc(t,c,At,"second");return t+" ms"}function Uc(t,c,u,r){var n=c>=u*1.5;return Math.round(t/u)+" "+r+(n?"s":"")}});var fn=K((jZ,qq)=>{var sJ=nn();qq.exports=function(t,c){var u=c||Math.floor(Date.now()/1000);if(typeof t==="string"){var r=sJ(t);if(typeof r>"u")return;return Math.floor(u+r/1000)}else if(typeof t==="number")return u+t;else return}});var at=K((pZ,_q)=>{var mJ=Number.MAX_SAFE_INTEGER||9007199254740991,gJ=["major","premajor","minor","preminor","patch","prepatch","prerelease"];_q.exports={MAX_LENGTH:256,MAX_SAFE_COMPONENT_LENGTH:16,MAX_SAFE_BUILD_LENGTH:250,MAX_SAFE_INTEGER:mJ,RELEASE_TYPES:gJ,SEMVER_SPEC_VERSION:"2.0.0",FLAG_INCLUDE_PRERELEASE:1,FLAG_LOOSE:2}});var tc=K((vZ,Kq)=>{var BJ=typeof process==="object"&&process.env&&process.env.NODE_DEBUG&&/\bsemver\b/i.test(process.env.NODE_DEBUG)?(...t)=>console.error("SEMVER",...t):()=>{};Kq.exports=BJ});var Ht=K((G1,Wq)=>{var{MAX_SAFE_COMPONENT_LENGTH:dn,MAX_SAFE_BUILD_LENGTH:FJ,MAX_LENGTH:kJ}=at(),oJ=tc();G1=Wq.exports={};var UJ=G1.re=[],lJ=G1.safeRe=[],S=G1.src=[],QJ=G1.safeSrc=[],H=G1.t={},aJ=0,hn="[a-zA-Z0-9-]",t5=[["\\s",1],["\\d",kJ],[hn,FJ]],c5=(t)=>{for(let[c,u]of t5)t=t.split(`${c}*`).join(`${c}{0,${u}}`).split(`${c}+`).join(`${c}{1,${u}}`);return t},I=(t,c,u)=>{let r=c5(c),n=aJ++;oJ(t,n,c),H[t]=n,S[n]=c,QJ[n]=r,UJ[n]=new RegExp(c,u?"g":void 0),lJ[n]=new RegExp(r,u?"g":void 0)};I("NUMERICIDENTIFIER","0|[1-9]\\d*");I("NUMERICIDENTIFIERLOOSE","\\d+");I("NONNUMERICIDENTIFIER",`\\d*[a-zA-Z-]${hn}*`);I("MAINVERSION",`(${S[H.NUMERICIDENTIFIER]})\\.(${S[H.NUMERICIDENTIFIER]})\\.(${S[H.NUMERICIDENTIFIER]})`);I("MAINVERSIONLOOSE",`(${S[H.NUMERICIDENTIFIERLOOSE]})\\.(${S[H.NUMERICIDENTIFIERLOOSE]})\\.(${S[H.NUMERICIDENTIFIERLOOSE]})`);I("PRERELEASEIDENTIFIER",`(?:${S[H.NONNUMERICIDENTIFIER]}|${S[H.NUMERICIDENTIFIER]})`);I("PRERELEASEIDENTIFIERLOOSE",`(?:${S[H.NONNUMERICIDENTIFIER]}|${S[H.NUMERICIDENTIFIERLOOSE]})`);I("PRERELEASE",`(?:-(${S[H.PRERELEASEIDENTIFIER]}(?:\\.${S[H.PRERELEASEIDENTIFIER]})*))`);I("PRERELEASELOOSE",`(?:-?(${S[H.PRERELEASEIDENTIFIERLOOSE]}(?:\\.${S[H.PRERELEASEIDENTIFIERLOOSE]})*))`);I("BUILDIDENTIFIER",`${hn}+`);I("BUILD",`(?:\\+(${S[H.BUILDIDENTIFIER]}(?:\\.${S[H.BUILDIDENTIFIER]})*))`);I("FULLPLAIN",`v?${S[H.MAINVERSION]}${S[H.PRERELEASE]}?${S[H.BUILD]}?`);I("FULL",`^${S[H.FULLPLAIN]}$`);I("LOOSEPLAIN",`[v=\\s]*${S[H.MAINVERSIONLOOSE]}${S[H.PRERELEASELOOSE]}?${S[H.BUILD]}?`);I("LOOSE",`^${S[H.LOOSEPLAIN]}$`);I("GTLT","((?:<|>)?=?)");I("XRANGEIDENTIFIERLOOSE",`${S[H.NUMERICIDENTIFIERLOOSE]}|x|X|\\*`);I("XRANGEIDENTIFIER",`${S[H.NUMERICIDENTIFIER]}|x|X|\\*`);I("XRANGEPLAIN",`[v=\\s]*(${S[H.XRANGEIDENTIFIER]})(?:\\.(${S[H.XRANGEIDENTIFIER]})(?:\\.(${S[H.XRANGEIDENTIFIER]})(?:${S[H.PRERELEASE]})?${S[H.BUILD]}?)?)?`);I("XRANGEPLAINLOOSE",`[v=\\s]*(${S[H.XRANGEIDENTIFIERLOOSE]})(?:\\.(${S[H.XRANGEIDENTIFIERLOOSE]})(?:\\.(${S[H.XRANGEIDENTIFIERLOOSE]})(?:${S[H.PRERELEASELOOSE]})?${S[H.BUILD]}?)?)?`);I("XRANGE",`^${S[H.GTLT]}\\s*${S[H.XRANGEPLAIN]}$`);I("XRANGELOOSE",`^${S[H.GTLT]}\\s*${S[H.XRANGEPLAINLOOSE]}$`);I("COERCEPLAIN",`(^|[^\\d])(\\d{1,${dn}})(?:\\.(\\d{1,${dn}}))?(?:\\.(\\d{1,${dn}}))?`);I("COERCE",`${S[H.COERCEPLAIN]}(?:$|[^\\d])`);I("COERCEFULL",S[H.COERCEPLAIN]+`(?:${S[H.PRERELEASE]})?(?:${S[H.BUILD]})?(?:$|[^\\d])`);I("COERCERTL",S[H.COERCE],!0);I("COERCERTLFULL",S[H.COERCEFULL],!0);I("LONETILDE","(?:~>?)");I("TILDETRIM",`(\\s*)${S[H.LONETILDE]}\\s+`,!0);G1.tildeTrimReplace="$1~";I("TILDE",`^${S[H.LONETILDE]}${S[H.XRANGEPLAIN]}$`);I("TILDELOOSE",`^${S[H.LONETILDE]}${S[H.XRANGEPLAINLOOSE]}$`);I("LONECARET","(?:\\^)");I("CARETTRIM",`(\\s*)${S[H.LONECARET]}\\s+`,!0);G1.caretTrimReplace="$1^";I("CARET",`^${S[H.LONECARET]}${S[H.XRANGEPLAIN]}$`);I("CARETLOOSE",`^${S[H.LONECARET]}${S[H.XRANGEPLAINLOOSE]}$`);I("COMPARATORLOOSE",`^${S[H.GTLT]}\\s*(${S[H.LOOSEPLAIN]})$|^$`);I("COMPARATOR",`^${S[H.GTLT]}\\s*(${S[H.FULLPLAIN]})$|^$`);I("COMPARATORTRIM",`(\\s*)${S[H.GTLT]}\\s*(${S[H.LOOSEPLAIN]}|${S[H.XRANGEPLAIN]})`,!0);G1.comparatorTrimReplace="$1$2$3";I("HYPHENRANGE",`^\\s*(${S[H.XRANGEPLAIN]})\\s+-\\s+(${S[H.XRANGEPLAIN]})\\s*$`);I("HYPHENRANGELOOSE",`^\\s*(${S[H.XRANGEPLAINLOOSE]})\\s+-\\s+(${S[H.XRANGEPLAINLOOSE]})\\s*$`);I("STAR","(<|>)?=?\\s*\\*");I("GTE0","^\\s*>=\\s*0\\.0\\.0\\s*$");I("GTE0PRE","^\\s*>=\\s*0\\.0\\.0-0\\s*$")});var lc=K((xZ,Jq)=>{var u5=Object.freeze({loose:!0}),r5=Object.freeze({}),n5=(t)=>{if(!t)return r5;if(typeof t!=="object")return u5;return t};Jq.exports=n5});var qn=K((LZ,Pq)=>{var wq=/^[0-9]+$/,$q=(t,c)=>{if(typeof t==="number"&&typeof c==="number")return t===c?0:t<c?-1:1;let u=wq.test(t),r=wq.test(c);if(u&&r)t=+t,c=+c;return t===c?0:u&&!r?-1:r&&!u?1:t<c?-1:1},f5=(t,c)=>$q(c,t);Pq.exports={compareIdentifiers:$q,rcompareIdentifiers:f5}});var g=K((sZ,yq)=>{var Qc=tc(),{MAX_LENGTH:Aq,MAX_SAFE_INTEGER:ac}=at(),{safeRe:tu,t:cu}=Ht(),d5=lc(),{compareIdentifiers:_n}=qn();class $1{constructor(t,c){if(c=d5(c),t instanceof $1)if(t.loose===!!c.loose&&t.includePrerelease===!!c.includePrerelease)return t;else t=t.version;else if(typeof t!=="string")throw TypeError(`Invalid version. Must be a string. Got type "${typeof t}".`);if(t.length>Aq)throw TypeError(`version is longer than ${Aq} characters`);Qc("SemVer",t,c),this.options=c,this.loose=!!c.loose,this.includePrerelease=!!c.includePrerelease;let u=t.trim().match(c.loose?tu[cu.LOOSE]:tu[cu.FULL]);if(!u)throw TypeError(`Invalid Version: ${t}`);if(this.raw=t,this.major=+u[1],this.minor=+u[2],this.patch=+u[3],this.major>ac||this.major<0)throw TypeError("Invalid major version");if(this.minor>ac||this.minor<0)throw TypeError("Invalid minor version");if(this.patch>ac||this.patch<0)throw TypeError("Invalid patch version");if(!u[4])this.prerelease=[];else this.prerelease=u[4].split(".").map((r)=>{if(/^[0-9]+$/.test(r)){let n=+r;if(n>=0&&n<ac)return n}return r});this.build=u[5]?u[5].split("."):[],this.format()}format(){if(this.version=`${this.major}.${this.minor}.${this.patch}`,this.prerelease.length)this.version+=`-${this.prerelease.join(".")}`;return this.version}toString(){return this.version}compare(t){if(Qc("SemVer.compare",this.version,this.options,t),!(t instanceof $1)){if(typeof t==="string"&&t===this.version)return 0;t=new $1(t,this.options)}if(t.version===this.version)return 0;return this.compareMain(t)||this.comparePre(t)}compareMain(t){if(!(t instanceof $1))t=new $1(t,this.options);if(this.major<t.major)return-1;if(this.major>t.major)return 1;if(this.minor<t.minor)return-1;if(this.minor>t.minor)return 1;if(this.patch<t.patch)return-1;if(this.patch>t.patch)return 1;return 0}comparePre(t){if(!(t instanceof $1))t=new $1(t,this.options);if(this.prerelease.length&&!t.prerelease.length)return-1;else if(!this.prerelease.length&&t.prerelease.length)return 1;else if(!this.prerelease.length&&!t.prerelease.length)return 0;let c=0;do{let u=this.prerelease[c],r=t.prerelease[c];if(Qc("prerelease compare",c,u,r),u===void 0&&r===void 0)return 0;else if(r===void 0)return 1;else if(u===void 0)return-1;else if(u===r)continue;else return _n(u,r)}while(++c)}compareBuild(t){if(!(t instanceof $1))t=new $1(t,this.options);let c=0;do{let u=this.build[c],r=t.build[c];if(Qc("build compare",c,u,r),u===void 0&&r===void 0)return 0;else if(r===void 0)return 1;else if(u===void 0)return-1;else if(u===r)continue;else return _n(u,r)}while(++c)}inc(t,c,u){if(t.startsWith("pre")){if(!c&&u===!1)throw Error("invalid increment argument: identifier is empty");if(c){let r=`-${c}`.match(this.options.loose?tu[cu.PRERELEASELOOSE]:tu[cu.PRERELEASE]);if(!r||r[1]!==c)throw Error(`invalid identifier: ${c}`)}}switch(t){case"premajor":this.prerelease.length=0,this.patch=0,this.minor=0,this.major++,this.inc("pre",c,u);break;case"preminor":this.prerelease.length=0,this.patch=0,this.minor++,this.inc("pre",c,u);break;case"prepatch":this.prerelease.length=0,this.inc("patch",c,u),this.inc("pre",c,u);break;case"prerelease":if(this.prerelease.length===0)this.inc("patch",c,u);this.inc("pre",c,u);break;case"release":if(this.prerelease.length===0)throw Error(`version ${this.raw} is not a prerelease`);this.prerelease.length=0;break;case"major":if(this.minor!==0||this.patch!==0||this.prerelease.length===0)this.major++;this.minor=0,this.patch=0,this.prerelease=[];break;case"minor":if(this.patch!==0||this.prerelease.length===0)this.minor++;this.patch=0,this.prerelease=[];break;case"patch":if(this.prerelease.length===0)this.patch++;this.prerelease=[];break;case"pre":{let r=Number(u)?1:0;if(this.prerelease.length===0)this.prerelease=[r];else{let n=this.prerelease.length;while(--n>=0)if(typeof this.prerelease[n]==="number")this.prerelease[n]++,n=-2;if(n===-1){if(c===this.prerelease.join(".")&&u===!1)throw Error("invalid increment argument: identifier already exists");this.prerelease.push(r)}}if(c){let n=[c,r];if(u===!1)n=[c];if(_n(this.prerelease[0],c)===0){if(isNaN(this.prerelease[1]))this.prerelease=n}else this.prerelease=n}break}default:throw Error(`invalid increment argument: ${t}`)}if(this.raw=this.format(),this.build.length)this.raw+=`+${this.build.join(".")}`;return this}}yq.exports=$1});var Q1=K((mZ,Hq)=>{var Sq=g(),h5=(t,c,u=!1)=>{if(t instanceof Sq)return t;try{return new Sq(t,c)}catch(r){if(!u)return null;throw r}};Hq.exports=h5});var Oq=K((gZ,Cq)=>{var q5=Q1(),_5=(t,c)=>{let u=q5(t,c);return u?u.version:null};Cq.exports=_5});var Iq=K((BZ,Gq)=>{var K5=Q1(),W5=(t,c)=>{let u=K5(t.trim().replace(/^[=v]+/,""),c);return u?u.version:null};Gq.exports=W5});var Eq=K((FZ,Xq)=>{var Zq=g(),J5=(t,c,u,r,n)=>{if(typeof u==="string")n=r,r=u,u=void 0;try{return new Zq(t instanceof Zq?t.version:t,u).inc(c,r,n).version}catch(f){return null}};Xq.exports=J5});var zq=K((kZ,iq)=>{var Yq=Q1(),w5=(t,c)=>{let u=Yq(t,null,!0),r=Yq(c,null,!0),n=u.compare(r);if(n===0)return null;let f=n>0,d=f?u:r,h=f?r:u,q=!!d.prerelease.length;if(!!h.prerelease.length&&!q){if(!h.patch&&!h.minor)return"major";if(h.compareMain(d)===0){if(h.minor&&!h.patch)return"minor";return"patch"}}let W=q?"pre":"";if(u.major!==r.major)return W+"major";if(u.minor!==r.minor)return W+"minor";if(u.patch!==r.patch)return W+"patch";return"prerelease"};iq.exports=w5});var Vq=K((oZ,Rq)=>{var $5=g(),P5=(t,c)=>new $5(t,c).major;Rq.exports=P5});var eq=K((UZ,Mq)=>{var A5=g(),y5=(t,c)=>new A5(t,c).minor;Mq.exports=y5});var Tq=K((lZ,Nq)=>{var S5=g(),H5=(t,c)=>new S5(t,c).patch;Nq.exports=H5});var bq=K((QZ,Dq)=>{var C5=Q1(),O5=(t,c)=>{let u=C5(t,c);return u&&u.prerelease.length?u.prerelease:null};Dq.exports=O5});var r1=K((aZ,pq)=>{var jq=g(),G5=(t,c,u)=>new jq(t,u).compare(new jq(c,u));pq.exports=G5});var xq=K((tX,vq)=>{var I5=r1(),Z5=(t,c,u)=>I5(c,t,u);vq.exports=Z5});var sq=K((cX,Lq)=>{var X5=r1(),E5=(t,c)=>X5(t,c,!0);Lq.exports=E5});var uu=K((uX,gq)=>{var mq=g(),Y5=(t,c,u)=>{let r=new mq(t,u),n=new mq(c,u);return r.compare(n)||r.compareBuild(n)};gq.exports=Y5});var Fq=K((rX,Bq)=>{var i5=uu(),z5=(t,c)=>t.sort((u,r)=>i5(u,r,c));Bq.exports=z5});var oq=K((nX,kq)=>{var R5=uu(),V5=(t,c)=>t.sort((u,r)=>R5(r,u,c));kq.exports=V5});var cc=K((fX,Uq)=>{var M5=r1(),e5=(t,c,u)=>M5(t,c,u)>0;Uq.exports=e5});var ru=K((dX,lq)=>{var N5=r1(),T5=(t,c,u)=>N5(t,c,u)<0;lq.exports=T5});var Kn=K((hX,Qq)=>{var D5=r1(),b5=(t,c,u)=>D5(t,c,u)===0;Qq.exports=b5});var Wn=K((qX,aq)=>{var j5=r1(),p5=(t,c,u)=>j5(t,c,u)!==0;aq.exports=p5});var nu=K((_X,t0)=>{var v5=r1(),x5=(t,c,u)=>v5(t,c,u)>=0;t0.exports=x5});var fu=K((KX,c0)=>{var L5=r1(),s5=(t,c,u)=>L5(t,c,u)<=0;c0.exports=s5});var Jn=K((WX,u0)=>{var m5=Kn(),g5=Wn(),B5=cc(),F5=nu(),k5=ru(),o5=fu(),U5=(t,c,u,r)=>{switch(c){case"===":if(typeof t==="object")t=t.version;if(typeof u==="object")u=u.version;return t===u;case"!==":if(typeof t==="object")t=t.version;if(typeof u==="object")u=u.version;return t!==u;case"":case"=":case"==":return m5(t,u,r);case"!=":return g5(t,u,r);case">":return B5(t,u,r);case">=":return F5(t,u,r);case"<":return k5(t,u,r);case"<=":return o5(t,u,r);default:throw TypeError(`Invalid operator: ${c}`)}};u0.exports=U5});var n0=K((JX,r0)=>{var l5=g(),Q5=Q1(),{safeRe:du,t:hu}=Ht(),a5=(t,c)=>{if(t instanceof l5)return t;if(typeof t==="number")t=String(t);if(typeof t!=="string")return null;c=c||{};let u=null;if(!c.rtl)u=t.match(c.includePrerelease?du[hu.COERCEFULL]:du[hu.COERCE]);else{let q=c.includePrerelease?du[hu.COERCERTLFULL]:du[hu.COERCERTL],_;while((_=q.exec(t))&&(!u||u.index+u[0].length!==t.length)){if(!u||_.index+_[0].length!==u.index+u[0].length)u=_;q.lastIndex=_.index+_[1].length+_[2].length}q.lastIndex=-1}if(u===null)return null;let r=u[2],n=u[3]||"0",f=u[4]||"0",d=c.includePrerelease&&u[5]?`-${u[5]}`:"",h=c.includePrerelease&&u[6]?`+${u[6]}`:"";return Q5(`${r}.${n}.${f}${d}${h}`,c)};r0.exports=a5});var h0=K((wX,d0)=>{class f0{constructor(){this.max=1000,this.map=new Map}get(t){let c=this.map.get(t);if(c===void 0)return;else return this.map.delete(t),this.map.set(t,c),c}delete(t){return this.map.delete(t)}set(t,c){if(!this.delete(t)&&c!==void 0){if(this.map.size>=this.max){let r=this.map.keys().next().value;this.delete(r)}this.map.set(t,c)}return this}}d0.exports=f0});var n1=K(($X,W0)=>{var tw=/\s+/g;class uc{constructor(t,c){if(c=uw(c),t instanceof uc)if(t.loose===!!c.loose&&t.includePrerelease===!!c.includePrerelease)return t;else return new uc(t.raw,c);if(t instanceof wn)return this.raw=t.value,this.set=[[t]],this.formatted=void 0,this;if(this.options=c,this.loose=!!c.loose,this.includePrerelease=!!c.includePrerelease,this.raw=t.trim().replace(tw," "),this.set=this.raw.split("||").map((u)=>this.parseRange(u.trim())).filter((u)=>u.length),!this.set.length)throw TypeError(`Invalid SemVer Range: ${this.raw}`);if(this.set.length>1){let u=this.set[0];if(this.set=this.set.filter((r)=>!_0(r[0])),this.set.length===0)this.set=[u];else if(this.set.length>1){for(let r of this.set)if(r.length===1&&_w(r[0])){this.set=[r];break}}}this.formatted=void 0}get range(){if(this.formatted===void 0){this.formatted="";for(let t=0;t<this.set.length;t++){if(t>0)this.formatted+="||";let c=this.set[t];for(let u=0;u<c.length;u++){if(u>0)this.formatted+=" ";this.formatted+=c[u].toString().trim()}}}return this.formatted}format(){return this.range}toString(){return this.range}parseRange(t){let u=((this.options.includePrerelease&&hw)|(this.options.loose&&qw))+":"+t,r=q0.get(u);if(r)return r;let n=this.options.loose,f=n?k[B.HYPHENRANGELOOSE]:k[B.HYPHENRANGE];t=t.replace(f,Hw(this.options.includePrerelease)),V("hyphen replace",t),t=t.replace(k[B.COMPARATORTRIM],nw),V("comparator trim",t),t=t.replace(k[B.TILDETRIM],fw),V("tilde trim",t),t=t.replace(k[B.CARETTRIM],dw),V("caret trim",t);let d=t.split(" ").map((W)=>Kw(W,this.options)).join(" ").split(/\s+/).map((W)=>Sw(W,this.options));if(n)d=d.filter((W)=>{return V("loose invalid filter",W,this.options),!!W.match(k[B.COMPARATORLOOSE])});V("range list",d);let h=new Map,q=d.map((W)=>new wn(W,this.options));for(let W of q){if(_0(W))return[W];h.set(W.value,W)}if(h.size>1&&h.has(""))h.delete("");let _=[...h.values()];return q0.set(u,_),_}intersects(t,c){if(!(t instanceof uc))throw TypeError("a Range is required");return this.set.some((u)=>{return K0(u,c)&&t.set.some((r)=>{return K0(r,c)&&u.every((n)=>{return r.every((f)=>{return n.intersects(f,c)})})})})}test(t){if(!t)return!1;if(typeof t==="string")try{t=new rw(t,this.options)}catch(c){return!1}for(let c=0;c<this.set.length;c++)if(Cw(this.set[c],t,this.options))return!0;return!1}}W0.exports=uc;var cw=h0(),q0=new cw,uw=lc(),wn=rc(),V=tc(),rw=g(),{safeRe:k,t:B,comparatorTrimReplace:nw,tildeTrimReplace:fw,caretTrimReplace:dw}=Ht(),{FLAG_INCLUDE_PRERELEASE:hw,FLAG_LOOSE:qw}=at(),_0=(t)=>t.value==="<0.0.0-0",_w=(t)=>t.value==="",K0=(t,c)=>{let u=!0,r=t.slice(),n=r.pop();while(u&&r.length)u=r.every((f)=>{return n.intersects(f,c)}),n=r.pop();return u},Kw=(t,c)=>{return t=t.replace(k[B.BUILD],""),V("comp",t,c),t=ww(t,c),V("caret",t),t=Ww(t,c),V("tildes",t),t=Pw(t,c),V("xrange",t),t=yw(t,c),V("stars",t),t},o=(t)=>!t||t.toLowerCase()==="x"||t==="*",Ww=(t,c)=>{return t.trim().split(/\s+/).map((u)=>Jw(u,c)).join(" ")},Jw=(t,c)=>{let u=c.loose?k[B.TILDELOOSE]:k[B.TILDE];return t.replace(u,(r,n,f,d,h)=>{V("tilde",t,r,n,f,d,h);let q;if(o(n))q="";else if(o(f))q=`>=${n}.0.0 <${+n+1}.0.0-0`;else if(o(d))q=`>=${n}.${f}.0 <${n}.${+f+1}.0-0`;else if(h)V("replaceTilde pr",h),q=`>=${n}.${f}.${d}-${h} <${n}.${+f+1}.0-0`;else q=`>=${n}.${f}.${d} <${n}.${+f+1}.0-0`;return V("tilde return",q),q})},ww=(t,c)=>{return t.trim().split(/\s+/).map((u)=>$w(u,c)).join(" ")},$w=(t,c)=>{V("caret",t,c);let u=c.loose?k[B.CARETLOOSE]:k[B.CARET],r=c.includePrerelease?"-0":"";return t.replace(u,(n,f,d,h,q)=>{V("caret",t,n,f,d,h,q);let _;if(o(f))_="";else if(o(d))_=`>=${f}.0.0${r} <${+f+1}.0.0-0`;else if(o(h))if(f==="0")_=`>=${f}.${d}.0${r} <${f}.${+d+1}.0-0`;else _=`>=${f}.${d}.0${r} <${+f+1}.0.0-0`;else if(q)if(V("replaceCaret pr",q),f==="0")if(d==="0")_=`>=${f}.${d}.${h}-${q} <${f}.${d}.${+h+1}-0`;else _=`>=${f}.${d}.${h}-${q} <${f}.${+d+1}.0-0`;else _=`>=${f}.${d}.${h}-${q} <${+f+1}.0.0-0`;else if(V("no pr"),f==="0")if(d==="0")_=`>=${f}.${d}.${h}${r} <${f}.${d}.${+h+1}-0`;else _=`>=${f}.${d}.${h}${r} <${f}.${+d+1}.0-0`;else _=`>=${f}.${d}.${h} <${+f+1}.0.0-0`;return V("caret return",_),_})},Pw=(t,c)=>{return V("replaceXRanges",t,c),t.split(/\s+/).map((u)=>Aw(u,c)).join(" ")},Aw=(t,c)=>{t=t.trim();let u=c.loose?k[B.XRANGELOOSE]:k[B.XRANGE];return t.replace(u,(r,n,f,d,h,q)=>{V("xRange",t,r,n,f,d,h,q);let _=o(f),W=_||o(d),J=W||o(h),$=J;if(n==="="&&$)n="";if(q=c.includePrerelease?"-0":"",_)if(n===">"||n==="<")r="<0.0.0-0";else r="*";else if(n&&$){if(W)d=0;if(h=0,n===">")if(n=">=",W)f=+f+1,d=0,h=0;else d=+d+1,h=0;else if(n==="<=")if(n="<",W)f=+f+1;else d=+d+1;if(n==="<")q="-0";r=`${n+f}.${d}.${h}${q}`}else if(W)r=`>=${f}.0.0${q} <${+f+1}.0.0-0`;else if(J)r=`>=${f}.${d}.0${q} <${f}.${+d+1}.0-0`;return V("xRange return",r),r})},yw=(t,c)=>{return V("replaceStars",t,c),t.trim().replace(k[B.STAR],"")},Sw=(t,c)=>{return V("replaceGTE0",t,c),t.trim().replace(k[c.includePrerelease?B.GTE0PRE:B.GTE0],"")},Hw=(t)=>(c,u,r,n,f,d,h,q,_,W,J,$)=>{if(o(r))u="";else if(o(n))u=`>=${r}.0.0${t?"-0":""}`;else if(o(f))u=`>=${r}.${n}.0${t?"-0":""}`;else if(d)u=`>=${u}`;else u=`>=${u}${t?"-0":""}`;if(o(_))q="";else if(o(W))q=`<${+_+1}.0.0-0`;else if(o(J))q=`<${_}.${+W+1}.0-0`;else if($)q=`<=${_}.${W}.${J}-${$}`;else if(t)q=`<${_}.${W}.${+J+1}-0`;else q=`<=${q}`;return`${u} ${q}`.trim()},Cw=(t,c,u)=>{for(let r=0;r<t.length;r++)if(!t[r].test(c))return!1;if(c.prerelease.length&&!u.includePrerelease){for(let r=0;r<t.length;r++){if(V(t[r].semver),t[r].semver===wn.ANY)continue;if(t[r].semver.prerelease.length>0){let n=t[r].semver;if(n.major===c.major&&n.minor===c.minor&&n.patch===c.patch)return!0}}return!1}return!0}});var rc=K((PX,y0)=>{var nc=Symbol("SemVer ANY");class qu{static get ANY(){return nc}constructor(t,c){if(c=J0(c),t instanceof qu)if(t.loose===!!c.loose)return t;else t=t.value;if(t=t.trim().split(/\s+/).join(" "),Pn("comparator",t,c),this.options=c,this.loose=!!c.loose,this.parse(t),this.semver===nc)this.value="";else this.value=this.operator+this.semver.version;Pn("comp",this)}parse(t){let c=this.options.loose?w0[$0.COMPARATORLOOSE]:w0[$0.COMPARATOR],u=t.match(c);if(!u)throw TypeError(`Invalid comparator: ${t}`);if(this.operator=u[1]!==void 0?u[1]:"",this.operator==="=")this.operator="";if(!u[2])this.semver=nc;else this.semver=new P0(u[2],this.options.loose)}toString(){return this.value}test(t){if(Pn("Comparator.test",t,this.options.loose),this.semver===nc||t===nc)return!0;if(typeof t==="string")try{t=new P0(t,this.options)}catch(c){return!1}return $n(t,this.operator,this.semver,this.options)}intersects(t,c){if(!(t instanceof qu))throw TypeError("a Comparator is required");if(this.operator===""){if(this.value==="")return!0;return new A0(t.value,c).test(this.value)}else if(t.operator===""){if(t.value==="")return!0;return new A0(this.value,c).test(t.semver)}if(c=J0(c),c.includePrerelease&&(this.value==="<0.0.0-0"||t.value==="<0.0.0-0"))return!1;if(!c.includePrerelease&&(this.value.startsWith("<0.0.0")||t.value.startsWith("<0.0.0")))return!1;if(this.operator.startsWith(">")&&t.operator.startsWith(">"))return!0;if(this.operator.startsWith("<")&&t.operator.startsWith("<"))return!0;if(this.semver.version===t.semver.version&&this.operator.includes("=")&&t.operator.includes("="))return!0;if($n(this.semver,"<",t.semver,c)&&this.operator.startsWith(">")&&t.operator.startsWith("<"))return!0;if($n(this.semver,">",t.semver,c)&&this.operator.startsWith("<")&&t.operator.startsWith(">"))return!0;return!1}}y0.exports=qu;var J0=lc(),{safeRe:w0,t:$0}=Ht(),$n=Jn(),Pn=tc(),P0=g(),A0=n1()});var fc=K((AX,S0)=>{var Ow=n1(),Gw=(t,c,u)=>{try{c=new Ow(c,u)}catch(r){return!1}return c.test(t)};S0.exports=Gw});var C0=K((yX,H0)=>{var Iw=n1(),Zw=(t,c)=>new Iw(t,c).set.map((u)=>u.map((r)=>r.value).join(" ").trim().split(" "));H0.exports=Zw});var G0=K((SX,O0)=>{var Xw=g(),Ew=n1(),Yw=(t,c,u)=>{let r=null,n=null,f=null;try{f=new Ew(c,u)}catch(d){return null}return t.forEach((d)=>{if(f.test(d)){if(!r||n.compare(d)===-1)r=d,n=new Xw(r,u)}}),r};O0.exports=Yw});var Z0=K((HX,I0)=>{var iw=g(),zw=n1(),Rw=(t,c,u)=>{let r=null,n=null,f=null;try{f=new zw(c,u)}catch(d){return null}return t.forEach((d)=>{if(f.test(d)){if(!r||n.compare(d)===1)r=d,n=new iw(r,u)}}),r};I0.exports=Rw});var Y0=K((CX,E0)=>{var An=g(),Vw=n1(),X0=cc(),Mw=(t,c)=>{t=new Vw(t,c);let u=new An("0.0.0");if(t.test(u))return u;if(u=new An("0.0.0-0"),t.test(u))return u;u=null;for(let r=0;r<t.set.length;++r){let n=t.set[r],f=null;if(n.forEach((d)=>{let h=new An(d.semver.version);switch(d.operator){case">":if(h.prerelease.length===0)h.patch++;else h.prerelease.push(0);h.raw=h.format();case"":case">=":if(!f||X0(h,f))f=h;break;case"<":case"<=":break;default:throw Error(`Unexpected operation: ${d.operator}`)}}),f&&(!u||X0(u,f)))u=f}if(u&&t.test(u))return u;return null};E0.exports=Mw});var z0=K((OX,i0)=>{var ew=n1(),Nw=(t,c)=>{try{return new ew(t,c).range||"*"}catch(u){return null}};i0.exports=Nw});var _u=K((GX,e0)=>{var Tw=g(),M0=rc(),{ANY:Dw}=M0,bw=n1(),jw=fc(),R0=cc(),V0=ru(),pw=fu(),vw=nu(),xw=(t,c,u,r)=>{t=new Tw(t,r),c=new bw(c,r);let n,f,d,h,q;switch(u){case">":n=R0,f=pw,d=V0,h=">",q=">=";break;case"<":n=V0,f=vw,d=R0,h="<",q="<=";break;default:throw TypeError('Must provide a hilo val of "<" or ">"')}if(jw(t,c,r))return!1;for(let _=0;_<c.set.length;++_){let W=c.set[_],J=null,$=null;if(W.forEach((w)=>{if(w.semver===Dw)w=new M0(">=0.0.0");if(J=J||w,$=$||w,n(w.semver,J.semver,r))J=w;else if(d(w.semver,$.semver,r))$=w}),J.operator===h||J.operator===q)return!1;if((!$.operator||$.operator===h)&&f(t,$.semver))return!1;else if($.operator===q&&d(t,$.semver))return!1}return!0};e0.exports=xw});var T0=K((IX,N0)=>{var Lw=_u(),sw=(t,c,u)=>Lw(t,c,">",u);N0.exports=sw});var b0=K((ZX,D0)=>{var mw=_u(),gw=(t,c,u)=>mw(t,c,"<",u);D0.exports=gw});var v0=K((XX,p0)=>{var j0=n1(),Bw=(t,c,u)=>{return t=new j0(t,u),c=new j0(c,u),t.intersects(c,u)};p0.exports=Bw});var L0=K((EX,x0)=>{var Fw=fc(),kw=r1();x0.exports=(t,c,u)=>{let r=[],n=null,f=null,d=t.sort((W,J)=>kw(W,J,u));for(let W of d)if(Fw(W,c,u)){if(f=W,!n)n=W}else{if(f)r.push([n,f]);f=null,n=null}if(n)r.push([n,null]);let h=[];for(let[W,J]of r)if(W===J)h.push(W);else if(!J&&W===d[0])h.push("*");else if(!J)h.push(`>=${W}`);else if(W===d[0])h.push(`<=${J}`);else h.push(`${W} - ${J}`);let q=h.join(" || "),_=typeof c.raw==="string"?c.raw:String(c);return q.length<_.length?q:c}});var k0=K((YX,F0)=>{var s0=n1(),Sn=rc(),{ANY:yn}=Sn,dc=fc(),Hn=r1(),ow=(t,c,u={})=>{if(t===c)return!0;t=new s0(t,u),c=new s0(c,u);let r=!1;t:for(let n of t.set){for(let f of c.set){let d=lw(n,f,u);if(r=r||d!==null,d)continue t}if(r)return!1}return!0},Uw=[new Sn(">=0.0.0-0")],m0=[new Sn(">=0.0.0")],lw=(t,c,u)=>{if(t===c)return!0;if(t.length===1&&t[0].semver===yn)if(c.length===1&&c[0].semver===yn)return!0;else if(u.includePrerelease)t=Uw;else t=m0;if(c.length===1&&c[0].semver===yn)if(u.includePrerelease)return!0;else c=m0;let r=new Set,n,f;for(let w of t)if(w.operator===">"||w.operator===">=")n=g0(n,w,u);else if(w.operator==="<"||w.operator==="<=")f=B0(f,w,u);else r.add(w.semver);if(r.size>1)return null;let d;if(n&&f){if(d=Hn(n.semver,f.semver,u),d>0)return null;else if(d===0&&(n.operator!==">="||f.operator!=="<="))return null}for(let w of r){if(n&&!dc(w,String(n),u))return null;if(f&&!dc(w,String(f),u))return null;for(let P of c)if(!dc(w,String(P),u))return!1;return!0}let h,q,_,W,J=f&&!u.includePrerelease&&f.semver.prerelease.length?f.semver:!1,$=n&&!u.includePrerelease&&n.semver.prerelease.length?n.semver:!1;if(J&&J.prerelease.length===1&&f.operator==="<"&&J.prerelease[0]===0)J=!1;for(let w of c){if(W=W||w.operator===">"||w.operator===">=",_=_||w.operator==="<"||w.operator==="<=",n){if($){if(w.semver.prerelease&&w.semver.prerelease.length&&w.semver.major===$.major&&w.semver.minor===$.minor&&w.semver.patch===$.patch)$=!1}if(w.operator===">"||w.operator===">="){if(h=g0(n,w,u),h===w&&h!==n)return!1}else if(n.operator===">="&&!dc(n.semver,String(w),u))return!1}if(f){if(J){if(w.semver.prerelease&&w.semver.prerelease.length&&w.semver.major===J.major&&w.semver.minor===J.minor&&w.semver.patch===J.patch)J=!1}if(w.operator==="<"||w.operator==="<="){if(q=B0(f,w,u),q===w&&q!==f)return!1}else if(f.operator==="<="&&!dc(f.semver,String(w),u))return!1}if(!w.operator&&(f||n)&&d!==0)return!1}if(n&&_&&!f&&d!==0)return!1;if(f&&W&&!n&&d!==0)return!1;if($||J)return!1;return!0},g0=(t,c,u)=>{if(!t)return c;let r=Hn(t.semver,c.semver,u);return r>0?t:r<0?c:c.operator===">"&&t.operator===">="?c:t},B0=(t,c,u)=>{if(!t)return c;let r=Hn(t.semver,c.semver,u);return r<0?t:r>0?c:c.operator==="<"&&t.operator==="<="?c:t};F0.exports=ow});var Ku=K((iX,l0)=>{var Cn=Ht(),o0=at(),Qw=g(),U0=qn(),aw=Q1(),t$=Oq(),c$=Iq(),u$=Eq(),r$=zq(),n$=Vq(),f$=eq(),d$=Tq(),h$=bq(),q$=r1(),_$=xq(),K$=sq(),W$=uu(),J$=Fq(),w$=oq(),$$=cc(),P$=ru(),A$=Kn(),y$=Wn(),S$=nu(),H$=fu(),C$=Jn(),O$=n0(),G$=rc(),I$=n1(),Z$=fc(),X$=C0(),E$=G0(),Y$=Z0(),i$=Y0(),z$=z0(),R$=_u(),V$=T0(),M$=b0(),e$=v0(),N$=L0(),T$=k0();l0.exports={parse:aw,valid:t$,clean:c$,inc:u$,diff:r$,major:n$,minor:f$,patch:d$,prerelease:h$,compare:q$,rcompare:_$,compareLoose:K$,compareBuild:W$,sort:J$,rsort:w$,gt:$$,lt:P$,eq:A$,neq:y$,gte:S$,lte:H$,cmp:C$,coerce:O$,Comparator:G$,Range:I$,satisfies:Z$,toComparators:X$,maxSatisfying:E$,minSatisfying:Y$,minVersion:i$,validRange:z$,outside:R$,gtr:V$,ltr:M$,intersects:e$,simplifyRange:N$,subset:T$,SemVer:Qw,re:Cn.re,src:Cn.src,tokens:Cn.t,SEMVER_SPEC_VERSION:o0.SEMVER_SPEC_VERSION,RELEASE_TYPES:o0.RELEASE_TYPES,compareIdentifiers:U0.compareIdentifiers,rcompareIdentifiers:U0.rcompareIdentifiers}});var a0=K((zX,Q0)=>{var D$=Ku();Q0.exports=D$.satisfies(process.version,">=15.7.0")});var c6=K((RX,t6)=>{var b$=Ku();t6.exports=b$.satisfies(process.version,">=16.9.0")});var On=K((VX,u6)=>{var j$=a0(),p$=c6(),v$={ec:["ES256","ES384","ES512"],rsa:["RS256","PS256","RS384","PS384","RS512","PS512"],"rsa-pss":["PS256","PS384","PS512"]},x$={ES256:"prime256v1",ES384:"secp384r1",ES512:"secp521r1"};u6.exports=function(t,c){if(!t||!c)return;let u=c.asymmetricKeyType;if(!u)return;let r=v$[u];if(!r)throw Error(`Unknown key type "${u}".`);if(!r.includes(t))throw Error(`"alg" parameter for "${u}" key type must be one of: ${r.join(", ")}.`);if(j$)switch(u){case"ec":let n=c.asymmetricKeyDetails.namedCurve,f=x$[t];if(n!==f)throw Error(`"alg" parameter "${t}" requires curve "${f}".`);break;case"rsa-pss":if(p$){let d=parseInt(t.slice(-3),10),{hashAlgorithm:h,mgf1HashAlgorithm:q,saltLength:_}=c.asymmetricKeyDetails;if(h!==`sha${d}`||q!==h)throw Error(`Invalid key for this operation, its RSA-PSS parameters do not meet the requirements of "alg" ${t}.`);if(_!==void 0&&_>d>>3)throw Error(`Invalid key for this operation, its RSA-PSS parameter saltLength does not meet the requirements of "alg" ${t}.`)}break}}});var Gn=K((MX,r6)=>{var L$=Ku();r6.exports=L$.satisfies(process.version,"^6.12.0 || >=8.0.0")});var d6=K((eX,f6)=>{var i=Qt(),s$=un(),n6=rn(),m$=cn(),g$=fn(),B$=On(),F$=Gn(),k$=Bc(),{KeyObject:o$,createSecretKey:U$,createPublicKey:l$}=require("crypto"),In=["RS256","RS384","RS512"],Q$=["ES256","ES384","ES512"],Zn=["RS256","RS384","RS512"],a$=["HS256","HS384","HS512"];if(F$)In.splice(In.length,0,"PS256","PS384","PS512"),Zn.splice(Zn.length,0,"PS256","PS384","PS512");f6.exports=function(t,c,u,r){if(typeof u==="function"&&!r)r=u,u={};if(!u)u={};u=Object.assign({},u);let n;if(r)n=r;else n=function(W,J){if(W)throw W;return J};if(u.clockTimestamp&&typeof u.clockTimestamp!=="number")return n(new i("clockTimestamp must be a number"));if(u.nonce!==void 0&&(typeof u.nonce!=="string"||u.nonce.trim()===""))return n(new i("nonce must be a non-empty string"));if(u.allowInvalidAsymmetricKeyTypes!==void 0&&typeof u.allowInvalidAsymmetricKeyTypes!=="boolean")return n(new i("allowInvalidAsymmetricKeyTypes must be a boolean"));let f=u.clockTimestamp||Math.floor(Date.now()/1000);if(!t)return n(new i("jwt must be provided"));if(typeof t!=="string")return n(new i("jwt must be a string"));let d=t.split(".");if(d.length!==3)return n(new i("jwt malformed"));let h;try{h=m$(t,{complete:!0})}catch(W){return n(W)}if(!h)return n(new i("invalid token"));let q=h.header,_;if(typeof c==="function"){if(!r)return n(new i("verify must be called asynchronous if secret or public key is provided as a callback"));_=c}else _=function(W,J){return J(null,c)};return _(q,function(W,J){if(W)return n(new i("error in secret or public key callback: "+W.message));let $=d[2].trim()!=="";if(!$&&J)return n(new i("jwt signature is required"));if($&&!J)return n(new i("secret or public key must be provided"));if(!$&&!u.algorithms)return n(new i('please specify "none" in "algorithms" to verify unsigned tokens'));if(J!=null&&!(J instanceof o$))try{J=l$(J)}catch(A){try{J=U$(typeof J==="string"?Buffer.from(J):J)}catch(G){return n(new i("secretOrPublicKey is not valid key material"))}}if(!u.algorithms)if(J.type==="secret")u.algorithms=a$;else if(["rsa","rsa-pss"].includes(J.asymmetricKeyType))u.algorithms=Zn;else if(J.asymmetricKeyType==="ec")u.algorithms=Q$;else u.algorithms=In;if(u.algorithms.indexOf(h.header.alg)===-1)return n(new i("invalid algorithm"));if(q.alg.startsWith("HS")&&J.type!=="secret")return n(new i(`secretOrPublicKey must be a symmetric key when using ${q.alg}`));else if(/^(?:RS|PS|ES)/.test(q.alg)&&J.type!=="public")return n(new i(`secretOrPublicKey must be an asymmetric key when using ${q.alg}`));if(!u.allowInvalidAsymmetricKeyTypes)try{B$(q.alg,J)}catch(A){return n(A)}let w;try{w=k$.verify(t,h.header.alg,J)}catch(A){return n(A)}if(!w)return n(new i("invalid signature"));let P=h.payload;if(typeof P.nbf<"u"&&!u.ignoreNotBefore){if(typeof P.nbf!=="number")return n(new i("invalid nbf value"));if(P.nbf>f+(u.clockTolerance||0))return n(new s$("jwt not active",new Date(P.nbf*1000)))}if(typeof P.exp<"u"&&!u.ignoreExpiration){if(typeof P.exp!=="number")return n(new i("invalid exp value"));if(f>=P.exp+(u.clockTolerance||0))return n(new n6("jwt expired",new Date(P.exp*1000)))}if(u.audience){let A=Array.isArray(u.audience)?u.audience:[u.audience];if(!(Array.isArray(P.aud)?P.aud:[P.aud]).some(function(E){return A.some(function(O){return O instanceof RegExp?O.test(E):O===E})}))return n(new i("jwt audience invalid. expected: "+A.join(" or ")))}if(u.issuer){if(typeof u.issuer==="string"&&P.iss!==u.issuer||Array.isArray(u.issuer)&&u.issuer.indexOf(P.iss)===-1)return n(new i("jwt issuer invalid. expected: "+u.issuer))}if(u.subject){if(P.sub!==u.subject)return n(new i("jwt subject invalid. expected: "+u.subject))}if(u.jwtid){if(P.jti!==u.jwtid)return n(new i("jwt jwtid invalid. expected: "+u.jwtid))}if(u.nonce){if(P.nonce!==u.nonce)return n(new i("jwt nonce invalid. expected: "+u.nonce))}if(u.maxAge){if(typeof P.iat!=="number")return n(new i("iat required when maxAge is specified"));let A=g$(u.maxAge,P.iat);if(typeof A>"u")return n(new i('"maxAge" should be a number of seconds or string representing a timespan eg: "1d", "20h", 60'));if(f>=A+(u.clockTolerance||0))return n(new n6("maxAge exceeded",new Date(A*1000)))}if(u.complete===!0){let A=h.signature;return n(null,{header:q,payload:P,signature:A})}return n(null,P)})}});var J6=K((NX,W6)=>{var h6=1/0,_6=9007199254740991,tP=179769313486231570000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000,q6=NaN,cP="[object Arguments]",uP="[object Function]",rP="[object GeneratorFunction]",nP="[object String]",fP="[object Symbol]",dP=/^\s+|\s+$/g,hP=/^[-+]0x[0-9a-f]+$/i,qP=/^0b[01]+$/i,_P=/^0o[0-7]+$/i,KP=/^(?:0|[1-9]\d*)$/,WP=parseInt;function JP(t,c){var u=-1,r=t?t.length:0,n=Array(r);while(++u<r)n[u]=c(t[u],u,t);return n}function wP(t,c,u,r){var n=t.length,f=u+(r?1:-1);while(r?f--:++f<n)if(c(t[f],f,t))return f;return-1}function $P(t,c,u){if(c!==c)return wP(t,PP,u);var r=u-1,n=t.length;while(++r<n)if(t[r]===c)return r;return-1}function PP(t){return t!==t}function AP(t,c){var u=-1,r=Array(t);while(++u<t)r[u]=c(u);return r}function yP(t,c){return JP(c,function(u){return t[u]})}function SP(t,c){return function(u){return t(c(u))}}var Wu=Object.prototype,En=Wu.hasOwnProperty,Ju=Wu.toString,HP=Wu.propertyIsEnumerable,CP=SP(Object.keys,Object),OP=Math.max;function GP(t,c){var u=K6(t)||YP(t)?AP(t.length,String):[],r=u.length,n=!!r;for(var f in t)if((c||En.call(t,f))&&!(n&&(f=="length"||ZP(f,r))))u.push(f);return u}function IP(t){if(!XP(t))return CP(t);var c=[];for(var u in Object(t))if(En.call(t,u)&&u!="constructor")c.push(u);return c}function ZP(t,c){return c=c==null?_6:c,!!c&&(typeof t=="number"||KP.test(t))&&(t>-1&&t%1==0&&t<c)}function XP(t){var c=t&&t.constructor,u=typeof c=="function"&&c.prototype||Wu;return t===u}function EP(t,c,u,r){t=Yn(t)?t:bP(t),u=u&&!r?NP(u):0;var n=t.length;if(u<0)u=OP(n+u,0);return VP(t)?u<=n&&t.indexOf(c,u)>-1:!!n&&$P(t,c,u)>-1}function YP(t){return iP(t)&&En.call(t,"callee")&&(!HP.call(t,"callee")||Ju.call(t)==cP)}var K6=Array.isArray;function Yn(t){return t!=null&&RP(t.length)&&!zP(t)}function iP(t){return zn(t)&&Yn(t)}function zP(t){var c=Xn(t)?Ju.call(t):"";return c==uP||c==rP}function RP(t){return typeof t=="number"&&t>-1&&t%1==0&&t<=_6}function Xn(t){var c=typeof t;return!!t&&(c=="object"||c=="function")}function zn(t){return!!t&&typeof t=="object"}function VP(t){return typeof t=="string"||!K6(t)&&zn(t)&&Ju.call(t)==nP}function MP(t){return typeof t=="symbol"||zn(t)&&Ju.call(t)==fP}function eP(t){if(!t)return t===0?t:0;if(t=TP(t),t===h6||t===-h6){var c=t<0?-1:1;return c*tP}return t===t?t:0}function NP(t){var c=eP(t),u=c%1;return c===c?u?c-u:c:0}function TP(t){if(typeof t=="number")return t;if(MP(t))return q6;if(Xn(t)){var c=typeof t.valueOf=="function"?t.valueOf():t;t=Xn(c)?c+"":c}if(typeof t!="string")return t===0?t:+t;t=t.replace(dP,"");var u=qP.test(t);return u||_P.test(t)?WP(t.slice(2),u?2:8):hP.test(t)?q6:+t}function DP(t){return Yn(t)?GP(t):IP(t)}function bP(t){return t?yP(t,DP(t)):[]}W6.exports=EP});var $6=K((TX,w6)=>{var jP="[object Boolean]",pP=Object.prototype,vP=pP.toString;function xP(t){return t===!0||t===!1||LP(t)&&vP.call(t)==jP}function LP(t){return!!t&&typeof t=="object"}w6.exports=xP});var H6=K((DX,S6)=>{var P6=1/0,sP=179769313486231570000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000,A6=NaN,mP="[object Symbol]",gP=/^\s+|\s+$/g,BP=/^[-+]0x[0-9a-f]+$/i,FP=/^0b[01]+$/i,kP=/^0o[0-7]+$/i,oP=parseInt,UP=Object.prototype,lP=UP.toString;function QP(t){return typeof t=="number"&&t==uA(t)}function y6(t){var c=typeof t;return!!t&&(c=="object"||c=="function")}function aP(t){return!!t&&typeof t=="object"}function tA(t){return typeof t=="symbol"||aP(t)&&lP.call(t)==mP}function cA(t){if(!t)return t===0?t:0;if(t=rA(t),t===P6||t===-P6){var c=t<0?-1:1;return c*sP}return t===t?t:0}function uA(t){var c=cA(t),u=c%1;return c===c?u?c-u:c:0}function rA(t){if(typeof t=="number")return t;if(tA(t))return A6;if(y6(t)){var c=typeof t.valueOf=="function"?t.valueOf():t;t=y6(c)?c+"":c}if(typeof t!="string")return t===0?t:+t;t=t.replace(gP,"");var u=FP.test(t);return u||kP.test(t)?oP(t.slice(2),u?2:8):BP.test(t)?A6:+t}S6.exports=QP});var O6=K((bX,C6)=>{var nA="[object Number]",fA=Object.prototype,dA=fA.toString;function hA(t){return!!t&&typeof t=="object"}function qA(t){return typeof t=="number"||hA(t)&&dA.call(t)==nA}C6.exports=qA});var X6=K((jX,Z6)=>{var _A="[object Object]";function KA(t){var c=!1;if(t!=null&&typeof t.toString!="function")try{c=!!(t+"")}catch(u){}return c}function WA(t,c){return function(u){return t(c(u))}}var JA=Function.prototype,G6=Object.prototype,I6=JA.toString,wA=G6.hasOwnProperty,$A=I6.call(Object),PA=G6.toString,AA=WA(Object.getPrototypeOf,Object);function yA(t){return!!t&&typeof t=="object"}function SA(t){if(!yA(t)||PA.call(t)!=_A||KA(t))return!1;var c=AA(t);if(c===null)return!0;var u=wA.call(c,"constructor")&&c.constructor;return typeof u=="function"&&u instanceof u&&I6.call(u)==$A}Z6.exports=SA});var Y6=K((pX,E6)=>{var HA="[object String]",CA=Object.prototype,OA=CA.toString,GA=Array.isArray;function IA(t){return!!t&&typeof t=="object"}function ZA(t){return typeof t=="string"||!GA(t)&&IA(t)&&OA.call(t)==HA}E6.exports=ZA});var M6=K((vX,V6)=>{var XA="Expected a function",i6=1/0,EA=179769313486231570000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000,z6=NaN,YA="[object Symbol]",iA=/^\s+|\s+$/g,zA=/^[-+]0x[0-9a-f]+$/i,RA=/^0b[01]+$/i,VA=/^0o[0-7]+$/i,MA=parseInt,eA=Object.prototype,NA=eA.toString;function TA(t,c){var u;if(typeof c!="function")throw TypeError(XA);return t=vA(t),function(){if(--t>0)u=c.apply(this,arguments);if(t<=1)c=void 0;return u}}function DA(t){return TA(2,t)}function R6(t){var c=typeof t;return!!t&&(c=="object"||c=="function")}function bA(t){return!!t&&typeof t=="object"}function jA(t){return typeof t=="symbol"||bA(t)&&NA.call(t)==YA}function pA(t){if(!t)return t===0?t:0;if(t=xA(t),t===i6||t===-i6){var c=t<0?-1:1;return c*EA}return t===t?t:0}function vA(t){var c=pA(t),u=c%1;return c===c?u?c-u:c:0}function xA(t){if(typeof t=="number")return t;if(jA(t))return z6;if(R6(t)){var c=typeof t.valueOf=="function"?t.valueOf():t;t=R6(c)?c+"":c}if(typeof t!="string")return t===0?t:+t;t=t.replace(iA,"");var u=RA.test(t);return u||VA.test(t)?MA(t.slice(2),u?2:8):zA.test(t)?z6:+t}V6.exports=DA});var x6=K((xX,v6)=>{var e6=fn(),LA=Gn(),sA=On(),N6=Bc(),mA=J6(),wu=$6(),T6=H6(),Rn=O6(),b6=X6(),b1=Y6(),gA=M6(),{KeyObject:BA,createSecretKey:FA,createPrivateKey:kA}=require("crypto"),j6=["RS256","RS384","RS512","ES256","ES384","ES512","HS256","HS384","HS512","none"];if(LA)j6.splice(3,0,"PS256","PS384","PS512");var oA={expiresIn:{isValid:function(t){return T6(t)||b1(t)&&t},message:'"expiresIn" should be a number of seconds or string representing a timespan'},notBefore:{isValid:function(t){return T6(t)||b1(t)&&t},message:'"notBefore" should be a number of seconds or string representing a timespan'},audience:{isValid:function(t){return b1(t)||Array.isArray(t)},message:'"audience" must be a string or array'},algorithm:{isValid:mA.bind(null,j6),message:'"algorithm" must be a valid string enum value'},header:{isValid:b6,message:'"header" must be an object'},encoding:{isValid:b1,message:'"encoding" must be a string'},issuer:{isValid:b1,message:'"issuer" must be a string'},subject:{isValid:b1,message:'"subject" must be a string'},jwtid:{isValid:b1,message:'"jwtid" must be a string'},noTimestamp:{isValid:wu,message:'"noTimestamp" must be a boolean'},keyid:{isValid:b1,message:'"keyid" must be a string'},mutatePayload:{isValid:wu,message:'"mutatePayload" must be a boolean'},allowInsecureKeySizes:{isValid:wu,message:'"allowInsecureKeySizes" must be a boolean'},allowInvalidAsymmetricKeyTypes:{isValid:wu,message:'"allowInvalidAsymmetricKeyTypes" must be a boolean'}},UA={iat:{isValid:Rn,message:'"iat" should be a number of seconds'},exp:{isValid:Rn,message:'"exp" should be a number of seconds'},nbf:{isValid:Rn,message:'"nbf" should be a number of seconds'}};function p6(t,c,u,r){if(!b6(u))throw Error('Expected "'+r+'" to be a plain object.');Object.keys(u).forEach(function(n){let f=t[n];if(!f){if(!c)throw Error('"'+n+'" is not allowed in "'+r+'"');return}if(!f.isValid(u[n]))throw Error(f.message)})}function lA(t){return p6(oA,!1,t,"options")}function QA(t){return p6(UA,!0,t,"payload")}var D6={audience:"aud",issuer:"iss",subject:"sub",jwtid:"jti"},aA=["expiresIn","notBefore","noTimestamp","audience","issuer","subject","jwtid"];v6.exports=function(t,c,u,r){if(typeof u==="function")r=u,u={};else u=u||{};let n=typeof t==="object"&&!Buffer.isBuffer(t),f=Object.assign({alg:u.algorithm||"HS256",typ:n?"JWT":void 0,kid:u.keyid},u.header);function d(_){if(r)return r(_);throw _}if(!c&&u.algorithm!=="none")return d(Error("secretOrPrivateKey must have a value"));if(c!=null&&!(c instanceof BA))try{c=kA(c)}catch(_){try{c=FA(typeof c==="string"?Buffer.from(c):c)}catch(W){return d(Error("secretOrPrivateKey is not valid key material"))}}if(f.alg.startsWith("HS")&&c.type!=="secret")return d(Error(`secretOrPrivateKey must be a symmetric key when using ${f.alg}`));else if(/^(?:RS|PS|ES)/.test(f.alg)){if(c.type!=="private")return d(Error(`secretOrPrivateKey must be an asymmetric key when using ${f.alg}`));if(!u.allowInsecureKeySizes&&!f.alg.startsWith("ES")&&c.asymmetricKeyDetails!==void 0&&c.asymmetricKeyDetails.modulusLength<2048)return d(Error(`secretOrPrivateKey has a minimum key size of 2048 bits for ${f.alg}`))}if(typeof t>"u")return d(Error("payload is required"));else if(n){try{QA(t)}catch(_){return d(_)}if(!u.mutatePayload)t=Object.assign({},t)}else{let _=aA.filter(function(W){return typeof u[W]<"u"});if(_.length>0)return d(Error("invalid "+_.join(",")+" option for "+typeof t+" payload"))}if(typeof t.exp<"u"&&typeof u.expiresIn<"u")return d(Error('Bad "options.expiresIn" option the payload already has an "exp" property.'));if(typeof t.nbf<"u"&&typeof u.notBefore<"u")return d(Error('Bad "options.notBefore" option the payload already has an "nbf" property.'));try{lA(u)}catch(_){return d(_)}if(!u.allowInvalidAsymmetricKeyTypes)try{sA(f.alg,c)}catch(_){return d(_)}let h=t.iat||Math.floor(Date.now()/1000);if(u.noTimestamp)delete t.iat;else if(n)t.iat=h;if(typeof u.notBefore<"u"){try{t.nbf=e6(u.notBefore,h)}catch(_){return d(_)}if(typeof t.nbf>"u")return d(Error('"notBefore" should be a number of seconds or string representing a timespan eg: "1d", "20h", 60'))}if(typeof u.expiresIn<"u"&&typeof t==="object"){try{t.exp=e6(u.expiresIn,h)}catch(_){return d(_)}if(typeof t.exp>"u")return d(Error('"expiresIn" should be a number of seconds or string representing a timespan eg: "1d", "20h", 60'))}Object.keys(D6).forEach(function(_){let W=D6[_];if(typeof u[_]<"u"){if(typeof t[W]<"u")return d(Error('Bad "options.'+_+'" option. The payload already has an "'+W+'" property.'));t[W]=u[_]}});let q=u.encoding||"utf8";if(typeof r==="function")r=r&&gA(r),N6.createSign({header:f,privateKey:c,payload:t,encoding:q}).once("error",r).once("done",function(_){if(!u.allowInsecureKeySizes&&/^(?:RS|PS)/.test(f.alg)&&_.length<256)return r(Error(`secretOrPrivateKey has a minimum key size of 2048 bits for ${f.alg}`));r(null,_)});else{let _=N6.sign({header:f,payload:t,secret:c,encoding:q});if(!u.allowInsecureKeySizes&&/^(?:RS|PS)/.test(f.alg)&&_.length<256)throw Error(`secretOrPrivateKey has a minimum key size of 2048 bits for ${f.alg}`);return _}}});var s6=K((LX,L6)=>{L6.exports={decode:cn(),verify:d6(),sign:x6(),JsonWebTokenError:Qt(),NotBeforeError:un(),TokenExpiredError:rn()}});var Vn=K((sX,m6)=>{function t3(t){u.debug=u,u.default=u,u.coerce=q,u.disable=d,u.enable=n,u.enabled=h,u.humanize=nn(),u.destroy=_,Object.keys(t).forEach((W)=>{u[W]=t[W]}),u.names=[],u.skips=[],u.formatters={};function c(W){let J=0;for(let $=0;$<W.length;$++)J=(J<<5)-J+W.charCodeAt($),J|=0;return u.colors[Math.abs(J)%u.colors.length]}u.selectColor=c;function u(W){let J,$=null,w,P;function A(...G){if(!A.enabled)return;let Z=A,E=Number(new Date),O=E-(J||E);if(Z.diff=O,Z.prev=J,Z.curr=E,J=E,G[0]=u.coerce(G[0]),typeof G[0]!=="string")G.unshift("%O");let D=0;G[0]=G[0].replace(/%([a-zA-Z%])/g,(c1,N1)=>{if(c1==="%%")return"%";D++;let o1=u.formatters[N1];if(typeof o1==="function"){let Mc=G[D];c1=o1.call(Z,Mc),G.splice(D,1),D--}return c1}),u.formatArgs.call(Z,G),(Z.log||u.log).apply(Z,G)}if(A.namespace=W,A.useColors=u.useColors(),A.color=u.selectColor(W),A.extend=r,A.destroy=u.destroy,Object.defineProperty(A,"enabled",{enumerable:!0,configurable:!1,get:()=>{if($!==null)return $;if(w!==u.namespaces)w=u.namespaces,P=u.enabled(W);return P},set:(G)=>{$=G}}),typeof u.init==="function")u.init(A);return A}function r(W,J){let $=u(this.namespace+(typeof J>"u"?":":J)+W);return $.log=this.log,$}function n(W){u.save(W),u.namespaces=W,u.names=[],u.skips=[];let J=(typeof W==="string"?W:"").trim().replace(/\s+/g,",").split(",").filter(Boolean);for(let $ of J)if($[0]==="-")u.skips.push($.slice(1));else u.names.push($)}function f(W,J){let $=0,w=0,P=-1,A=0;while($<W.length)if(w<J.length&&(J[w]===W[$]||J[w]==="*"))if(J[w]==="*")P=w,A=$,w++;else $++,w++;else if(P!==-1)w=P+1,A++,$=A;else return!1;while(w<J.length&&J[w]==="*")w++;return w===J.length}function d(){let W=[...u.names,...u.skips.map((J)=>"-"+J)].join(",");return u.enable(""),W}function h(W){for(let J of u.skips)if(f(W,J))return!1;for(let J of u.names)if(f(W,J))return!0;return!1}function q(W){if(W instanceof Error)return W.stack||W.message;return W}function _(){console.warn("Instance method `debug.destroy()` is deprecated and no longer does anything. It will be removed in the next major version of `debug`.")}return u.enable(u.load()),u}m6.exports=t3});var g6=K((U,$u)=>{U.formatArgs=u3;U.save=r3;U.load=n3;U.useColors=c3;U.storage=f3();U.destroy=(()=>{let t=!1;return()=>{if(!t)t=!0,console.warn("Instance method `debug.destroy()` is deprecated and no longer does anything. It will be removed in the next major version of `debug`.")}})();U.colors=["#0000CC","#0000FF","#0033CC","#0033FF","#0066CC","#0066FF","#0099CC","#0099FF","#00CC00","#00CC33","#00CC66","#00CC99","#00CCCC","#00CCFF","#3300CC","#3300FF","#3333CC","#3333FF","#3366CC","#3366FF","#3399CC","#3399FF","#33CC00","#33CC33","#33CC66","#33CC99","#33CCCC","#33CCFF","#6600CC","#6600FF","#6633CC","#6633FF","#66CC00","#66CC33","#9900CC","#9900FF","#9933CC","#9933FF","#99CC00","#99CC33","#CC0000","#CC0033","#CC0066","#CC0099","#CC00CC","#CC00FF","#CC3300","#CC3333","#CC3366","#CC3399","#CC33CC","#CC33FF","#CC6600","#CC6633","#CC9900","#CC9933","#CCCC00","#CCCC33","#FF0000","#FF0033","#FF0066","#FF0099","#FF00CC","#FF00FF","#FF3300","#FF3333","#FF3366","#FF3399","#FF33CC","#FF33FF","#FF6600","#FF6633","#FF9900","#FF9933","#FFCC00","#FFCC33"];function c3(){if(typeof window<"u"&&window.process&&(window.process.type==="renderer"||window.process.__nwjs))return!0;if(typeof navigator<"u"&&navigator.userAgent&&navigator.userAgent.toLowerCase().match(/(edge|trident)\/(\d+)/))return!1;let t;return typeof document<"u"&&document.documentElement&&document.documentElement.style&&document.documentElement.style.WebkitAppearance||typeof window<"u"&&window.console&&(window.console.firebug||window.console.exception&&window.console.table)||typeof navigator<"u"&&navigator.userAgent&&(t=navigator.userAgent.toLowerCase().match(/firefox\/(\d+)/))&&parseInt(t[1],10)>=31||typeof navigator<"u"&&navigator.userAgent&&navigator.userAgent.toLowerCase().match(/applewebkit\/(\d+)/)}function u3(t){if(t[0]=(this.useColors?"%c":"")+this.namespace+(this.useColors?" %c":" ")+t[0]+(this.useColors?"%c ":" ")+"+"+$u.exports.humanize(this.diff),!this.useColors)return;let c="color: "+this.color;t.splice(1,0,c,"color: inherit");let u=0,r=0;t[0].replace(/%[a-zA-Z%]/g,(n)=>{if(n==="%%")return;if(u++,n==="%c")r=u}),t.splice(r,0,c)}U.log=console.debug||console.log||(()=>{});function r3(t){try{if(t)U.storage.setItem("debug",t);else U.storage.removeItem("debug")}catch(c){}}function n3(){let t;try{t=U.storage.getItem("debug")||U.storage.getItem("DEBUG")}catch(c){}if(!t&&typeof process<"u"&&"env"in process)t=process.env.DEBUG;return t}function f3(){try{return localStorage}catch(t){}}$u.exports=Vn()(U);var{formatters:d3}=$u.exports;d3.j=function(t){try{return JSON.stringify(t)}catch(c){return"[UnexpectedJSONParseError]: "+c.message}}});var F6=K((mX,B6)=>{B6.exports=(t,c=process.argv)=>{let u=t.startsWith("-")?"":t.length===1?"-":"--",r=c.indexOf(u+t),n=c.indexOf("--");return r!==-1&&(n===-1||r<n)}});var U6=K((gX,o6)=>{var h3=require("os"),k6=require("tty"),f1=F6(),{env:b}=process,j1;if(f1("no-color")||f1("no-colors")||f1("color=false")||f1("color=never"))j1=0;else if(f1("color")||f1("colors")||f1("color=true")||f1("color=always"))j1=1;if("FORCE_COLOR"in b)if(b.FORCE_COLOR==="true")j1=1;else if(b.FORCE_COLOR==="false")j1=0;else j1=b.FORCE_COLOR.length===0?1:Math.min(parseInt(b.FORCE_COLOR,10),3);function Mn(t){if(t===0)return!1;return{level:t,hasBasic:!0,has256:t>=2,has16m:t>=3}}function en(t,c){if(j1===0)return 0;if(f1("color=16m")||f1("color=full")||f1("color=truecolor"))return 3;if(f1("color=256"))return 2;if(t&&!c&&j1===void 0)return 0;let u=j1||0;if(b.TERM==="dumb")return u;if(process.platform==="win32"){let r=h3.release().split(".");if(Number(r[0])>=10&&Number(r[2])>=10586)return Number(r[2])>=14931?3:2;return 1}if("CI"in b){if(["TRAVIS","CIRCLECI","APPVEYOR","GITLAB_CI","GITHUB_ACTIONS","BUILDKITE"].some((r)=>(r in b))||b.CI_NAME==="codeship")return 1;return u}if("TEAMCITY_VERSION"in b)return/^(9\.(0*[1-9]\d*)\.|\d{2,}\.)/.test(b.TEAMCITY_VERSION)?1:0;if(b.COLORTERM==="truecolor")return 3;if("TERM_PROGRAM"in b){let r=parseInt((b.TERM_PROGRAM_VERSION||"").split(".")[0],10);switch(b.TERM_PROGRAM){case"iTerm.app":return r>=3?3:2;case"Apple_Terminal":return 2}}if(/-256(color)?$/i.test(b.TERM))return 2;if(/^screen|^xterm|^vt100|^vt220|^rxvt|color|ansi|cygwin|linux/i.test(b.TERM))return 1;if("COLORTERM"in b)return 1;return u}function q3(t){let c=en(t,t&&t.isTTY);return Mn(c)}o6.exports={supportsColor:q3,stdout:Mn(en(!0,k6.isatty(1))),stderr:Mn(en(!0,k6.isatty(2)))}});var Q6=K((j,Au)=>{var _3=require("tty"),Pu=require("util");j.init=A3;j.log=w3;j.formatArgs=W3;j.save=$3;j.load=P3;j.useColors=K3;j.destroy=Pu.deprecate(()=>{},"Instance method `debug.destroy()` is deprecated and no longer does anything. It will be removed in the next major version of `debug`.");j.colors=[6,2,3,4,5,1];try{let t=U6();if(t&&(t.stderr||t).level>=2)j.colors=[20,21,26,27,32,33,38,39,40,41,42,43,44,45,56,57,62,63,68,69,74,75,76,77,78,79,80,81,92,93,98,99,112,113,128,129,134,135,148,149,160,161,162,163,164,165,166,167,168,169,170,171,172,173,178,179,184,185,196,197,198,199,200,201,202,203,204,205,206,207,208,209,214,215,220,221]}catch(t){}j.inspectOpts=Object.keys(process.env).filter((t)=>{return/^debug_/i.test(t)}).reduce((t,c)=>{let u=c.substring(6).toLowerCase().replace(/_([a-z])/g,(n,f)=>{return f.toUpperCase()}),r=process.env[c];if(/^(yes|on|true|enabled)$/i.test(r))r=!0;else if(/^(no|off|false|disabled)$/i.test(r))r=!1;else if(r==="null")r=null;else r=Number(r);return t[u]=r,t},{});function K3(){return"colors"in j.inspectOpts?Boolean(j.inspectOpts.colors):_3.isatty(process.stderr.fd)}function W3(t){let{namespace:c,useColors:u}=this;if(u){let r=this.color,n="\x1B[3"+(r<8?r:"8;5;"+r),f=` ${n};1m${c} \x1B[0m`;t[0]=f+t[0].split(`
|
|
3
|
+
"HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "PS256", "PS384", "PS512", "ES256", "ES384", "ES512" and "none".`,Ut="secret must be a string or buffer",wt="key must be a string or a buffer",JJ="key must be a string, a buffer or an object",Ur=typeof u1.createPublicKey==="function";if(Ur)wt+=" or a KeyObject",Ut+="or a KeyObject";function Rh(t){if($t.isBuffer(t))return;if(typeof t==="string")return;if(!Ur)throw w1(wt);if(typeof t!=="object")throw w1(wt);if(typeof t.type!=="string")throw w1(wt);if(typeof t.asymmetricKeyType!=="string")throw w1(wt);if(typeof t.export!=="function")throw w1(wt)}function Vh(t){if($t.isBuffer(t))return;if(typeof t==="string")return;if(typeof t==="object")return;throw w1(JJ)}function wJ(t){if($t.isBuffer(t))return;if(typeof t==="string")return t;if(!Ur)throw w1(Ut);if(typeof t!=="object")throw w1(Ut);if(t.type!=="secret")throw w1(Ut);if(typeof t.export!=="function")throw w1(Ut)}function lr(t){return t.replace(/=/g,"").replace(/\+/g,"-").replace(/\//g,"_")}function Mh(t){t=t.toString();var c=4-t.length%4;if(c!==4)for(var u=0;u<c;++u)t+="=";return t.replace(/\-/g,"+").replace(/_/g,"/")}function w1(t){var c=[].slice.call(arguments,1),u=zh.format.bind(zh,t).apply(null,c);return TypeError(u)}function $J(t){return $t.isBuffer(t)||typeof t==="string"}function lt(t){if(!$J(t))t=JSON.stringify(t);return t}function Nh(t){return function(u,r){wJ(r),u=lt(u);var n=u1.createHmac("sha"+t,r),f=(n.update(u),n.digest("base64"));return lr(f)}}var or,PJ="timingSafeEqual"in u1?function(c,u){if(c.byteLength!==u.byteLength)return!1;return u1.timingSafeEqual(c,u)}:function(c,u){if(!or)or=Yh();return or(c,u)};function AJ(t){return function(u,r,n){var f=Nh(t)(u,n);return PJ($t.from(r),$t.from(f))}}function Th(t){return function(u,r){Vh(r),u=lt(u);var n=u1.createSign("RSA-SHA"+t),f=(n.update(u),n.sign(r,"base64"));return lr(f)}}function eh(t){return function(u,r,n){Rh(n),u=lt(u),r=Mh(r);var f=u1.createVerify("RSA-SHA"+t);return f.update(u),f.verify(n,r,"base64")}}function yJ(t){return function(u,r){Vh(r),u=lt(u);var n=u1.createSign("RSA-SHA"+t),f=(n.update(u),n.sign({key:r,padding:u1.constants.RSA_PKCS1_PSS_PADDING,saltLength:u1.constants.RSA_PSS_SALTLEN_DIGEST},"base64"));return lr(f)}}function SJ(t){return function(u,r,n){Rh(n),u=lt(u),r=Mh(r);var f=u1.createVerify("RSA-SHA"+t);return f.update(u),f.verify({key:n,padding:u1.constants.RSA_PKCS1_PSS_PADDING,saltLength:u1.constants.RSA_PSS_SALTLEN_DIGEST},r,"base64")}}function HJ(t){var c=Th(t);return function(){var r=c.apply(null,arguments);return r=ih.derToJose(r,"ES"+t),r}}function CJ(t){var c=eh(t);return function(r,n,f){n=ih.joseToDer(n,"ES"+t).toString("base64");var d=c(r,n,f);return d}}function OJ(){return function(){return""}}function GJ(){return function(c,u){return u===""}}Dh.exports=function(c){var u={hs:Nh,rs:Th,ps:yJ,es:HJ,none:OJ},r={hs:AJ,rs:eh,ps:SJ,es:CJ,none:GJ},n=c.match(/^(RS|PS|ES|HS)(256|384|512)$|^(none)$/);if(!n)throw w1(WJ,c);var f=(n[1]||n[3]).toLowerCase(),d=n[2];return{sign:u[f](d),verify:r[f](d)}}});var ar=K((iZ,bh)=>{var IJ=require("buffer").Buffer;bh.exports=function(c){if(typeof c==="string")return c;if(typeof c==="number"||IJ.isBuffer(c))return c.toString();return JSON.stringify(c)}});var sh=K((RZ,Lh)=>{var ZJ=Jt().Buffer,jh=Br(),XJ=Qr(),EJ=require("stream"),ph=ar(),tn=require("util");function vh(t,c){return ZJ.from(t,c).toString("base64").replace(/=/g,"").replace(/\+/g,"-").replace(/\//g,"_")}function YJ(t,c,u){u=u||"utf8";var r=vh(ph(t),"binary"),n=vh(ph(c),u);return tn.format("%s.%s",r,n)}function xh(t){var{header:c,payload:u}=t,r=t.secret||t.privateKey,n=t.encoding,f=XJ(c.alg),d=YJ(c,u,n),h=f.sign(d,r);return tn.format("%s.%s",d,h)}function mc(t){var c=t.secret;if(c=c==null?t.privateKey:c,c=c==null?t.key:c,/^hs/i.test(t.header.alg)===!0&&c==null)throw TypeError("secret must be a string or buffer or a KeyObject");var u=new jh(c);this.readable=!0,this.header=t.header,this.encoding=t.encoding,this.secret=this.privateKey=this.key=u,this.payload=new jh(t.payload),this.secret.once("close",function(){if(!this.payload.writable&&this.readable)this.sign()}.bind(this)),this.payload.once("close",function(){if(!this.secret.writable&&this.readable)this.sign()}.bind(this))}tn.inherits(mc,EJ);mc.prototype.sign=function(){try{var c=xh({header:this.header,payload:this.payload.buffer,secret:this.secret.buffer,encoding:this.encoding});return this.emit("done",c),this.emit("data",c),this.emit("end"),this.readable=!1,c}catch(u){this.readable=!1,this.emit("error",u),this.emit("close")}};mc.sign=xh;Lh.exports=mc});var ah=K((VZ,Qh)=>{var gh=Jt().Buffer,mh=Br(),zJ=Qr(),iJ=require("stream"),Bh=ar(),RJ=require("util"),VJ=/^[a-zA-Z0-9\-_]+?\.[a-zA-Z0-9\-_]+?\.([a-zA-Z0-9\-_]+)?$/;function MJ(t){return Object.prototype.toString.call(t)==="[object Object]"}function NJ(t){if(MJ(t))return t;try{return JSON.parse(t)}catch(c){return}}function Fh(t){var c=t.split(".",1)[0];return NJ(gh.from(c,"base64").toString("binary"))}function TJ(t){return t.split(".",2).join(".")}function kh(t){return t.split(".")[2]}function eJ(t,c){c=c||"utf8";var u=t.split(".")[1];return gh.from(u,"base64").toString(c)}function oh(t){return VJ.test(t)&&!!Fh(t)}function Uh(t,c,u){if(!c){var r=Error("Missing algorithm parameter for jws.verify");throw r.code="MISSING_ALGORITHM",r}t=Bh(t);var n=kh(t),f=TJ(t),d=zJ(c);return d.verify(f,n,u)}function lh(t,c){if(c=c||{},t=Bh(t),!oh(t))return null;var u=Fh(t);if(!u)return null;var r=eJ(t);if(u.typ==="JWT"||c.json)r=JSON.parse(r,c.encoding);return{header:u,payload:r,signature:kh(t)}}function Pt(t){t=t||{};var c=t.secret;if(c=c==null?t.publicKey:c,c=c==null?t.key:c,/^hs/i.test(t.algorithm)===!0&&c==null)throw TypeError("secret must be a string or buffer or a KeyObject");var u=new mh(c);this.readable=!0,this.algorithm=t.algorithm,this.encoding=t.encoding,this.secret=this.publicKey=this.key=u,this.signature=new mh(t.signature),this.secret.once("close",function(){if(!this.signature.writable&&this.readable)this.verify()}.bind(this)),this.signature.once("close",function(){if(!this.secret.writable&&this.readable)this.verify()}.bind(this))}RJ.inherits(Pt,iJ);Pt.prototype.verify=function(){try{var c=Uh(this.signature.buffer,this.algorithm,this.key.buffer),u=lh(this.signature.buffer,this.encoding);return this.emit("done",c,u),this.emit("data",c),this.emit("end"),this.readable=!1,c}catch(r){this.readable=!1,this.emit("error",r),this.emit("close")}};Pt.decode=lh;Pt.isValid=oh;Pt.verify=Uh;Qh.exports=Pt});var Bc=K((D1)=>{var tq=sh(),gc=ah(),DJ=["HS256","HS384","HS512","RS256","RS384","RS512","PS256","PS384","PS512","ES256","ES384","ES512"];D1.ALGORITHMS=DJ;D1.sign=tq.sign;D1.verify=gc.verify;D1.decode=gc.decode;D1.isValid=gc.isValid;D1.createSign=function(c){return new tq(c)};D1.createVerify=function(c){return new gc(c)}});var cn=K((NZ,cq)=>{var bJ=Bc();cq.exports=function(t,c){c=c||{};var u=bJ.decode(t,c);if(!u)return null;var r=u.payload;if(typeof r==="string")try{var n=JSON.parse(r);if(n!==null&&typeof n==="object")r=n}catch(f){}if(c.complete===!0)return{header:u.header,payload:r,signature:u.signature};return r}});var Qt=K((TZ,uq)=>{var Fc=function(t,c){if(Error.call(this,t),Error.captureStackTrace)Error.captureStackTrace(this,this.constructor);if(this.name="JsonWebTokenError",this.message=t,c)this.inner=c};Fc.prototype=Object.create(Error.prototype);Fc.prototype.constructor=Fc;uq.exports=Fc});var un=K((eZ,nq)=>{var rq=Qt(),kc=function(t,c){rq.call(this,t),this.name="NotBeforeError",this.date=c};kc.prototype=Object.create(rq.prototype);kc.prototype.constructor=kc;nq.exports=kc});var rn=K((DZ,dq)=>{var fq=Qt(),oc=function(t,c){fq.call(this,t),this.name="TokenExpiredError",this.expiredAt=c};oc.prototype=Object.create(fq.prototype);oc.prototype.constructor=oc;dq.exports=oc});var nn=K((bZ,hq)=>{var At=1000,yt=At*60,St=yt*60,l1=St*24,jJ=l1*7,pJ=l1*365.25;hq.exports=function(t,c){c=c||{};var u=typeof t;if(u==="string"&&t.length>0)return vJ(t);else if(u==="number"&&isFinite(t))return c.long?LJ(t):xJ(t);throw Error("val is not a non-empty string or a valid number. val="+JSON.stringify(t))};function vJ(t){if(t=String(t),t.length>100)return;var c=/^(-?(?:\d+)?\.?\d+) *(milliseconds?|msecs?|ms|seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|weeks?|w|years?|yrs?|y)?$/i.exec(t);if(!c)return;var u=parseFloat(c[1]),r=(c[2]||"ms").toLowerCase();switch(r){case"years":case"year":case"yrs":case"yr":case"y":return u*pJ;case"weeks":case"week":case"w":return u*jJ;case"days":case"day":case"d":return u*l1;case"hours":case"hour":case"hrs":case"hr":case"h":return u*St;case"minutes":case"minute":case"mins":case"min":case"m":return u*yt;case"seconds":case"second":case"secs":case"sec":case"s":return u*At;case"milliseconds":case"millisecond":case"msecs":case"msec":case"ms":return u;default:return}}function xJ(t){var c=Math.abs(t);if(c>=l1)return Math.round(t/l1)+"d";if(c>=St)return Math.round(t/St)+"h";if(c>=yt)return Math.round(t/yt)+"m";if(c>=At)return Math.round(t/At)+"s";return t+"ms"}function LJ(t){var c=Math.abs(t);if(c>=l1)return Uc(t,c,l1,"day");if(c>=St)return Uc(t,c,St,"hour");if(c>=yt)return Uc(t,c,yt,"minute");if(c>=At)return Uc(t,c,At,"second");return t+" ms"}function Uc(t,c,u,r){var n=c>=u*1.5;return Math.round(t/u)+" "+r+(n?"s":"")}});var fn=K((jZ,qq)=>{var sJ=nn();qq.exports=function(t,c){var u=c||Math.floor(Date.now()/1000);if(typeof t==="string"){var r=sJ(t);if(typeof r>"u")return;return Math.floor(u+r/1000)}else if(typeof t==="number")return u+t;else return}});var at=K((pZ,_q)=>{var mJ=Number.MAX_SAFE_INTEGER||9007199254740991,gJ=["major","premajor","minor","preminor","patch","prepatch","prerelease"];_q.exports={MAX_LENGTH:256,MAX_SAFE_COMPONENT_LENGTH:16,MAX_SAFE_BUILD_LENGTH:250,MAX_SAFE_INTEGER:mJ,RELEASE_TYPES:gJ,SEMVER_SPEC_VERSION:"2.0.0",FLAG_INCLUDE_PRERELEASE:1,FLAG_LOOSE:2}});var tc=K((vZ,Kq)=>{var BJ=typeof process==="object"&&process.env&&process.env.NODE_DEBUG&&/\bsemver\b/i.test(process.env.NODE_DEBUG)?(...t)=>console.error("SEMVER",...t):()=>{};Kq.exports=BJ});var Ht=K((G1,Wq)=>{var{MAX_SAFE_COMPONENT_LENGTH:dn,MAX_SAFE_BUILD_LENGTH:FJ,MAX_LENGTH:kJ}=at(),oJ=tc();G1=Wq.exports={};var UJ=G1.re=[],lJ=G1.safeRe=[],S=G1.src=[],QJ=G1.safeSrc=[],H=G1.t={},aJ=0,hn="[a-zA-Z0-9-]",t5=[["\\s",1],["\\d",kJ],[hn,FJ]],c5=(t)=>{for(let[c,u]of t5)t=t.split(`${c}*`).join(`${c}{0,${u}}`).split(`${c}+`).join(`${c}{1,${u}}`);return t},I=(t,c,u)=>{let r=c5(c),n=aJ++;oJ(t,n,c),H[t]=n,S[n]=c,QJ[n]=r,UJ[n]=new RegExp(c,u?"g":void 0),lJ[n]=new RegExp(r,u?"g":void 0)};I("NUMERICIDENTIFIER","0|[1-9]\\d*");I("NUMERICIDENTIFIERLOOSE","\\d+");I("NONNUMERICIDENTIFIER",`\\d*[a-zA-Z-]${hn}*`);I("MAINVERSION",`(${S[H.NUMERICIDENTIFIER]})\\.(${S[H.NUMERICIDENTIFIER]})\\.(${S[H.NUMERICIDENTIFIER]})`);I("MAINVERSIONLOOSE",`(${S[H.NUMERICIDENTIFIERLOOSE]})\\.(${S[H.NUMERICIDENTIFIERLOOSE]})\\.(${S[H.NUMERICIDENTIFIERLOOSE]})`);I("PRERELEASEIDENTIFIER",`(?:${S[H.NONNUMERICIDENTIFIER]}|${S[H.NUMERICIDENTIFIER]})`);I("PRERELEASEIDENTIFIERLOOSE",`(?:${S[H.NONNUMERICIDENTIFIER]}|${S[H.NUMERICIDENTIFIERLOOSE]})`);I("PRERELEASE",`(?:-(${S[H.PRERELEASEIDENTIFIER]}(?:\\.${S[H.PRERELEASEIDENTIFIER]})*))`);I("PRERELEASELOOSE",`(?:-?(${S[H.PRERELEASEIDENTIFIERLOOSE]}(?:\\.${S[H.PRERELEASEIDENTIFIERLOOSE]})*))`);I("BUILDIDENTIFIER",`${hn}+`);I("BUILD",`(?:\\+(${S[H.BUILDIDENTIFIER]}(?:\\.${S[H.BUILDIDENTIFIER]})*))`);I("FULLPLAIN",`v?${S[H.MAINVERSION]}${S[H.PRERELEASE]}?${S[H.BUILD]}?`);I("FULL",`^${S[H.FULLPLAIN]}$`);I("LOOSEPLAIN",`[v=\\s]*${S[H.MAINVERSIONLOOSE]}${S[H.PRERELEASELOOSE]}?${S[H.BUILD]}?`);I("LOOSE",`^${S[H.LOOSEPLAIN]}$`);I("GTLT","((?:<|>)?=?)");I("XRANGEIDENTIFIERLOOSE",`${S[H.NUMERICIDENTIFIERLOOSE]}|x|X|\\*`);I("XRANGEIDENTIFIER",`${S[H.NUMERICIDENTIFIER]}|x|X|\\*`);I("XRANGEPLAIN",`[v=\\s]*(${S[H.XRANGEIDENTIFIER]})(?:\\.(${S[H.XRANGEIDENTIFIER]})(?:\\.(${S[H.XRANGEIDENTIFIER]})(?:${S[H.PRERELEASE]})?${S[H.BUILD]}?)?)?`);I("XRANGEPLAINLOOSE",`[v=\\s]*(${S[H.XRANGEIDENTIFIERLOOSE]})(?:\\.(${S[H.XRANGEIDENTIFIERLOOSE]})(?:\\.(${S[H.XRANGEIDENTIFIERLOOSE]})(?:${S[H.PRERELEASELOOSE]})?${S[H.BUILD]}?)?)?`);I("XRANGE",`^${S[H.GTLT]}\\s*${S[H.XRANGEPLAIN]}$`);I("XRANGELOOSE",`^${S[H.GTLT]}\\s*${S[H.XRANGEPLAINLOOSE]}$`);I("COERCEPLAIN",`(^|[^\\d])(\\d{1,${dn}})(?:\\.(\\d{1,${dn}}))?(?:\\.(\\d{1,${dn}}))?`);I("COERCE",`${S[H.COERCEPLAIN]}(?:$|[^\\d])`);I("COERCEFULL",S[H.COERCEPLAIN]+`(?:${S[H.PRERELEASE]})?(?:${S[H.BUILD]})?(?:$|[^\\d])`);I("COERCERTL",S[H.COERCE],!0);I("COERCERTLFULL",S[H.COERCEFULL],!0);I("LONETILDE","(?:~>?)");I("TILDETRIM",`(\\s*)${S[H.LONETILDE]}\\s+`,!0);G1.tildeTrimReplace="$1~";I("TILDE",`^${S[H.LONETILDE]}${S[H.XRANGEPLAIN]}$`);I("TILDELOOSE",`^${S[H.LONETILDE]}${S[H.XRANGEPLAINLOOSE]}$`);I("LONECARET","(?:\\^)");I("CARETTRIM",`(\\s*)${S[H.LONECARET]}\\s+`,!0);G1.caretTrimReplace="$1^";I("CARET",`^${S[H.LONECARET]}${S[H.XRANGEPLAIN]}$`);I("CARETLOOSE",`^${S[H.LONECARET]}${S[H.XRANGEPLAINLOOSE]}$`);I("COMPARATORLOOSE",`^${S[H.GTLT]}\\s*(${S[H.LOOSEPLAIN]})$|^$`);I("COMPARATOR",`^${S[H.GTLT]}\\s*(${S[H.FULLPLAIN]})$|^$`);I("COMPARATORTRIM",`(\\s*)${S[H.GTLT]}\\s*(${S[H.LOOSEPLAIN]}|${S[H.XRANGEPLAIN]})`,!0);G1.comparatorTrimReplace="$1$2$3";I("HYPHENRANGE",`^\\s*(${S[H.XRANGEPLAIN]})\\s+-\\s+(${S[H.XRANGEPLAIN]})\\s*$`);I("HYPHENRANGELOOSE",`^\\s*(${S[H.XRANGEPLAINLOOSE]})\\s+-\\s+(${S[H.XRANGEPLAINLOOSE]})\\s*$`);I("STAR","(<|>)?=?\\s*\\*");I("GTE0","^\\s*>=\\s*0\\.0\\.0\\s*$");I("GTE0PRE","^\\s*>=\\s*0\\.0\\.0-0\\s*$")});var lc=K((xZ,Jq)=>{var u5=Object.freeze({loose:!0}),r5=Object.freeze({}),n5=(t)=>{if(!t)return r5;if(typeof t!=="object")return u5;return t};Jq.exports=n5});var qn=K((LZ,Pq)=>{var wq=/^[0-9]+$/,$q=(t,c)=>{if(typeof t==="number"&&typeof c==="number")return t===c?0:t<c?-1:1;let u=wq.test(t),r=wq.test(c);if(u&&r)t=+t,c=+c;return t===c?0:u&&!r?-1:r&&!u?1:t<c?-1:1},f5=(t,c)=>$q(c,t);Pq.exports={compareIdentifiers:$q,rcompareIdentifiers:f5}});var g=K((sZ,yq)=>{var Qc=tc(),{MAX_LENGTH:Aq,MAX_SAFE_INTEGER:ac}=at(),{safeRe:tu,t:cu}=Ht(),d5=lc(),{compareIdentifiers:_n}=qn();class $1{constructor(t,c){if(c=d5(c),t instanceof $1)if(t.loose===!!c.loose&&t.includePrerelease===!!c.includePrerelease)return t;else t=t.version;else if(typeof t!=="string")throw TypeError(`Invalid version. Must be a string. Got type "${typeof t}".`);if(t.length>Aq)throw TypeError(`version is longer than ${Aq} characters`);Qc("SemVer",t,c),this.options=c,this.loose=!!c.loose,this.includePrerelease=!!c.includePrerelease;let u=t.trim().match(c.loose?tu[cu.LOOSE]:tu[cu.FULL]);if(!u)throw TypeError(`Invalid Version: ${t}`);if(this.raw=t,this.major=+u[1],this.minor=+u[2],this.patch=+u[3],this.major>ac||this.major<0)throw TypeError("Invalid major version");if(this.minor>ac||this.minor<0)throw TypeError("Invalid minor version");if(this.patch>ac||this.patch<0)throw TypeError("Invalid patch version");if(!u[4])this.prerelease=[];else this.prerelease=u[4].split(".").map((r)=>{if(/^[0-9]+$/.test(r)){let n=+r;if(n>=0&&n<ac)return n}return r});this.build=u[5]?u[5].split("."):[],this.format()}format(){if(this.version=`${this.major}.${this.minor}.${this.patch}`,this.prerelease.length)this.version+=`-${this.prerelease.join(".")}`;return this.version}toString(){return this.version}compare(t){if(Qc("SemVer.compare",this.version,this.options,t),!(t instanceof $1)){if(typeof t==="string"&&t===this.version)return 0;t=new $1(t,this.options)}if(t.version===this.version)return 0;return this.compareMain(t)||this.comparePre(t)}compareMain(t){if(!(t instanceof $1))t=new $1(t,this.options);if(this.major<t.major)return-1;if(this.major>t.major)return 1;if(this.minor<t.minor)return-1;if(this.minor>t.minor)return 1;if(this.patch<t.patch)return-1;if(this.patch>t.patch)return 1;return 0}comparePre(t){if(!(t instanceof $1))t=new $1(t,this.options);if(this.prerelease.length&&!t.prerelease.length)return-1;else if(!this.prerelease.length&&t.prerelease.length)return 1;else if(!this.prerelease.length&&!t.prerelease.length)return 0;let c=0;do{let u=this.prerelease[c],r=t.prerelease[c];if(Qc("prerelease compare",c,u,r),u===void 0&&r===void 0)return 0;else if(r===void 0)return 1;else if(u===void 0)return-1;else if(u===r)continue;else return _n(u,r)}while(++c)}compareBuild(t){if(!(t instanceof $1))t=new $1(t,this.options);let c=0;do{let u=this.build[c],r=t.build[c];if(Qc("build compare",c,u,r),u===void 0&&r===void 0)return 0;else if(r===void 0)return 1;else if(u===void 0)return-1;else if(u===r)continue;else return _n(u,r)}while(++c)}inc(t,c,u){if(t.startsWith("pre")){if(!c&&u===!1)throw Error("invalid increment argument: identifier is empty");if(c){let r=`-${c}`.match(this.options.loose?tu[cu.PRERELEASELOOSE]:tu[cu.PRERELEASE]);if(!r||r[1]!==c)throw Error(`invalid identifier: ${c}`)}}switch(t){case"premajor":this.prerelease.length=0,this.patch=0,this.minor=0,this.major++,this.inc("pre",c,u);break;case"preminor":this.prerelease.length=0,this.patch=0,this.minor++,this.inc("pre",c,u);break;case"prepatch":this.prerelease.length=0,this.inc("patch",c,u),this.inc("pre",c,u);break;case"prerelease":if(this.prerelease.length===0)this.inc("patch",c,u);this.inc("pre",c,u);break;case"release":if(this.prerelease.length===0)throw Error(`version ${this.raw} is not a prerelease`);this.prerelease.length=0;break;case"major":if(this.minor!==0||this.patch!==0||this.prerelease.length===0)this.major++;this.minor=0,this.patch=0,this.prerelease=[];break;case"minor":if(this.patch!==0||this.prerelease.length===0)this.minor++;this.patch=0,this.prerelease=[];break;case"patch":if(this.prerelease.length===0)this.patch++;this.prerelease=[];break;case"pre":{let r=Number(u)?1:0;if(this.prerelease.length===0)this.prerelease=[r];else{let n=this.prerelease.length;while(--n>=0)if(typeof this.prerelease[n]==="number")this.prerelease[n]++,n=-2;if(n===-1){if(c===this.prerelease.join(".")&&u===!1)throw Error("invalid increment argument: identifier already exists");this.prerelease.push(r)}}if(c){let n=[c,r];if(u===!1)n=[c];if(_n(this.prerelease[0],c)===0){if(isNaN(this.prerelease[1]))this.prerelease=n}else this.prerelease=n}break}default:throw Error(`invalid increment argument: ${t}`)}if(this.raw=this.format(),this.build.length)this.raw+=`+${this.build.join(".")}`;return this}}yq.exports=$1});var Q1=K((mZ,Hq)=>{var Sq=g(),h5=(t,c,u=!1)=>{if(t instanceof Sq)return t;try{return new Sq(t,c)}catch(r){if(!u)return null;throw r}};Hq.exports=h5});var Oq=K((gZ,Cq)=>{var q5=Q1(),_5=(t,c)=>{let u=q5(t,c);return u?u.version:null};Cq.exports=_5});var Iq=K((BZ,Gq)=>{var K5=Q1(),W5=(t,c)=>{let u=K5(t.trim().replace(/^[=v]+/,""),c);return u?u.version:null};Gq.exports=W5});var Eq=K((FZ,Xq)=>{var Zq=g(),J5=(t,c,u,r,n)=>{if(typeof u==="string")n=r,r=u,u=void 0;try{return new Zq(t instanceof Zq?t.version:t,u).inc(c,r,n).version}catch(f){return null}};Xq.exports=J5});var iq=K((kZ,zq)=>{var Yq=Q1(),w5=(t,c)=>{let u=Yq(t,null,!0),r=Yq(c,null,!0),n=u.compare(r);if(n===0)return null;let f=n>0,d=f?u:r,h=f?r:u,q=!!d.prerelease.length;if(!!h.prerelease.length&&!q){if(!h.patch&&!h.minor)return"major";if(h.compareMain(d)===0){if(h.minor&&!h.patch)return"minor";return"patch"}}let W=q?"pre":"";if(u.major!==r.major)return W+"major";if(u.minor!==r.minor)return W+"minor";if(u.patch!==r.patch)return W+"patch";return"prerelease"};zq.exports=w5});var Vq=K((oZ,Rq)=>{var $5=g(),P5=(t,c)=>new $5(t,c).major;Rq.exports=P5});var Nq=K((UZ,Mq)=>{var A5=g(),y5=(t,c)=>new A5(t,c).minor;Mq.exports=y5});var eq=K((lZ,Tq)=>{var S5=g(),H5=(t,c)=>new S5(t,c).patch;Tq.exports=H5});var bq=K((QZ,Dq)=>{var C5=Q1(),O5=(t,c)=>{let u=C5(t,c);return u&&u.prerelease.length?u.prerelease:null};Dq.exports=O5});var r1=K((aZ,pq)=>{var jq=g(),G5=(t,c,u)=>new jq(t,u).compare(new jq(c,u));pq.exports=G5});var xq=K((tX,vq)=>{var I5=r1(),Z5=(t,c,u)=>I5(c,t,u);vq.exports=Z5});var sq=K((cX,Lq)=>{var X5=r1(),E5=(t,c)=>X5(t,c,!0);Lq.exports=E5});var uu=K((uX,gq)=>{var mq=g(),Y5=(t,c,u)=>{let r=new mq(t,u),n=new mq(c,u);return r.compare(n)||r.compareBuild(n)};gq.exports=Y5});var Fq=K((rX,Bq)=>{var z5=uu(),i5=(t,c)=>t.sort((u,r)=>z5(u,r,c));Bq.exports=i5});var oq=K((nX,kq)=>{var R5=uu(),V5=(t,c)=>t.sort((u,r)=>R5(r,u,c));kq.exports=V5});var cc=K((fX,Uq)=>{var M5=r1(),N5=(t,c,u)=>M5(t,c,u)>0;Uq.exports=N5});var ru=K((dX,lq)=>{var T5=r1(),e5=(t,c,u)=>T5(t,c,u)<0;lq.exports=e5});var Kn=K((hX,Qq)=>{var D5=r1(),b5=(t,c,u)=>D5(t,c,u)===0;Qq.exports=b5});var Wn=K((qX,aq)=>{var j5=r1(),p5=(t,c,u)=>j5(t,c,u)!==0;aq.exports=p5});var nu=K((_X,t0)=>{var v5=r1(),x5=(t,c,u)=>v5(t,c,u)>=0;t0.exports=x5});var fu=K((KX,c0)=>{var L5=r1(),s5=(t,c,u)=>L5(t,c,u)<=0;c0.exports=s5});var Jn=K((WX,u0)=>{var m5=Kn(),g5=Wn(),B5=cc(),F5=nu(),k5=ru(),o5=fu(),U5=(t,c,u,r)=>{switch(c){case"===":if(typeof t==="object")t=t.version;if(typeof u==="object")u=u.version;return t===u;case"!==":if(typeof t==="object")t=t.version;if(typeof u==="object")u=u.version;return t!==u;case"":case"=":case"==":return m5(t,u,r);case"!=":return g5(t,u,r);case">":return B5(t,u,r);case">=":return F5(t,u,r);case"<":return k5(t,u,r);case"<=":return o5(t,u,r);default:throw TypeError(`Invalid operator: ${c}`)}};u0.exports=U5});var n0=K((JX,r0)=>{var l5=g(),Q5=Q1(),{safeRe:du,t:hu}=Ht(),a5=(t,c)=>{if(t instanceof l5)return t;if(typeof t==="number")t=String(t);if(typeof t!=="string")return null;c=c||{};let u=null;if(!c.rtl)u=t.match(c.includePrerelease?du[hu.COERCEFULL]:du[hu.COERCE]);else{let q=c.includePrerelease?du[hu.COERCERTLFULL]:du[hu.COERCERTL],_;while((_=q.exec(t))&&(!u||u.index+u[0].length!==t.length)){if(!u||_.index+_[0].length!==u.index+u[0].length)u=_;q.lastIndex=_.index+_[1].length+_[2].length}q.lastIndex=-1}if(u===null)return null;let r=u[2],n=u[3]||"0",f=u[4]||"0",d=c.includePrerelease&&u[5]?`-${u[5]}`:"",h=c.includePrerelease&&u[6]?`+${u[6]}`:"";return Q5(`${r}.${n}.${f}${d}${h}`,c)};r0.exports=a5});var h0=K((wX,d0)=>{class f0{constructor(){this.max=1000,this.map=new Map}get(t){let c=this.map.get(t);if(c===void 0)return;else return this.map.delete(t),this.map.set(t,c),c}delete(t){return this.map.delete(t)}set(t,c){if(!this.delete(t)&&c!==void 0){if(this.map.size>=this.max){let r=this.map.keys().next().value;this.delete(r)}this.map.set(t,c)}return this}}d0.exports=f0});var n1=K(($X,W0)=>{var tw=/\s+/g;class uc{constructor(t,c){if(c=uw(c),t instanceof uc)if(t.loose===!!c.loose&&t.includePrerelease===!!c.includePrerelease)return t;else return new uc(t.raw,c);if(t instanceof wn)return this.raw=t.value,this.set=[[t]],this.formatted=void 0,this;if(this.options=c,this.loose=!!c.loose,this.includePrerelease=!!c.includePrerelease,this.raw=t.trim().replace(tw," "),this.set=this.raw.split("||").map((u)=>this.parseRange(u.trim())).filter((u)=>u.length),!this.set.length)throw TypeError(`Invalid SemVer Range: ${this.raw}`);if(this.set.length>1){let u=this.set[0];if(this.set=this.set.filter((r)=>!_0(r[0])),this.set.length===0)this.set=[u];else if(this.set.length>1){for(let r of this.set)if(r.length===1&&_w(r[0])){this.set=[r];break}}}this.formatted=void 0}get range(){if(this.formatted===void 0){this.formatted="";for(let t=0;t<this.set.length;t++){if(t>0)this.formatted+="||";let c=this.set[t];for(let u=0;u<c.length;u++){if(u>0)this.formatted+=" ";this.formatted+=c[u].toString().trim()}}}return this.formatted}format(){return this.range}toString(){return this.range}parseRange(t){let u=((this.options.includePrerelease&&hw)|(this.options.loose&&qw))+":"+t,r=q0.get(u);if(r)return r;let n=this.options.loose,f=n?k[B.HYPHENRANGELOOSE]:k[B.HYPHENRANGE];t=t.replace(f,Hw(this.options.includePrerelease)),V("hyphen replace",t),t=t.replace(k[B.COMPARATORTRIM],nw),V("comparator trim",t),t=t.replace(k[B.TILDETRIM],fw),V("tilde trim",t),t=t.replace(k[B.CARETTRIM],dw),V("caret trim",t);let d=t.split(" ").map((W)=>Kw(W,this.options)).join(" ").split(/\s+/).map((W)=>Sw(W,this.options));if(n)d=d.filter((W)=>{return V("loose invalid filter",W,this.options),!!W.match(k[B.COMPARATORLOOSE])});V("range list",d);let h=new Map,q=d.map((W)=>new wn(W,this.options));for(let W of q){if(_0(W))return[W];h.set(W.value,W)}if(h.size>1&&h.has(""))h.delete("");let _=[...h.values()];return q0.set(u,_),_}intersects(t,c){if(!(t instanceof uc))throw TypeError("a Range is required");return this.set.some((u)=>{return K0(u,c)&&t.set.some((r)=>{return K0(r,c)&&u.every((n)=>{return r.every((f)=>{return n.intersects(f,c)})})})})}test(t){if(!t)return!1;if(typeof t==="string")try{t=new rw(t,this.options)}catch(c){return!1}for(let c=0;c<this.set.length;c++)if(Cw(this.set[c],t,this.options))return!0;return!1}}W0.exports=uc;var cw=h0(),q0=new cw,uw=lc(),wn=rc(),V=tc(),rw=g(),{safeRe:k,t:B,comparatorTrimReplace:nw,tildeTrimReplace:fw,caretTrimReplace:dw}=Ht(),{FLAG_INCLUDE_PRERELEASE:hw,FLAG_LOOSE:qw}=at(),_0=(t)=>t.value==="<0.0.0-0",_w=(t)=>t.value==="",K0=(t,c)=>{let u=!0,r=t.slice(),n=r.pop();while(u&&r.length)u=r.every((f)=>{return n.intersects(f,c)}),n=r.pop();return u},Kw=(t,c)=>{return t=t.replace(k[B.BUILD],""),V("comp",t,c),t=ww(t,c),V("caret",t),t=Ww(t,c),V("tildes",t),t=Pw(t,c),V("xrange",t),t=yw(t,c),V("stars",t),t},o=(t)=>!t||t.toLowerCase()==="x"||t==="*",Ww=(t,c)=>{return t.trim().split(/\s+/).map((u)=>Jw(u,c)).join(" ")},Jw=(t,c)=>{let u=c.loose?k[B.TILDELOOSE]:k[B.TILDE];return t.replace(u,(r,n,f,d,h)=>{V("tilde",t,r,n,f,d,h);let q;if(o(n))q="";else if(o(f))q=`>=${n}.0.0 <${+n+1}.0.0-0`;else if(o(d))q=`>=${n}.${f}.0 <${n}.${+f+1}.0-0`;else if(h)V("replaceTilde pr",h),q=`>=${n}.${f}.${d}-${h} <${n}.${+f+1}.0-0`;else q=`>=${n}.${f}.${d} <${n}.${+f+1}.0-0`;return V("tilde return",q),q})},ww=(t,c)=>{return t.trim().split(/\s+/).map((u)=>$w(u,c)).join(" ")},$w=(t,c)=>{V("caret",t,c);let u=c.loose?k[B.CARETLOOSE]:k[B.CARET],r=c.includePrerelease?"-0":"";return t.replace(u,(n,f,d,h,q)=>{V("caret",t,n,f,d,h,q);let _;if(o(f))_="";else if(o(d))_=`>=${f}.0.0${r} <${+f+1}.0.0-0`;else if(o(h))if(f==="0")_=`>=${f}.${d}.0${r} <${f}.${+d+1}.0-0`;else _=`>=${f}.${d}.0${r} <${+f+1}.0.0-0`;else if(q)if(V("replaceCaret pr",q),f==="0")if(d==="0")_=`>=${f}.${d}.${h}-${q} <${f}.${d}.${+h+1}-0`;else _=`>=${f}.${d}.${h}-${q} <${f}.${+d+1}.0-0`;else _=`>=${f}.${d}.${h}-${q} <${+f+1}.0.0-0`;else if(V("no pr"),f==="0")if(d==="0")_=`>=${f}.${d}.${h}${r} <${f}.${d}.${+h+1}-0`;else _=`>=${f}.${d}.${h}${r} <${f}.${+d+1}.0-0`;else _=`>=${f}.${d}.${h} <${+f+1}.0.0-0`;return V("caret return",_),_})},Pw=(t,c)=>{return V("replaceXRanges",t,c),t.split(/\s+/).map((u)=>Aw(u,c)).join(" ")},Aw=(t,c)=>{t=t.trim();let u=c.loose?k[B.XRANGELOOSE]:k[B.XRANGE];return t.replace(u,(r,n,f,d,h,q)=>{V("xRange",t,r,n,f,d,h,q);let _=o(f),W=_||o(d),J=W||o(h),$=J;if(n==="="&&$)n="";if(q=c.includePrerelease?"-0":"",_)if(n===">"||n==="<")r="<0.0.0-0";else r="*";else if(n&&$){if(W)d=0;if(h=0,n===">")if(n=">=",W)f=+f+1,d=0,h=0;else d=+d+1,h=0;else if(n==="<=")if(n="<",W)f=+f+1;else d=+d+1;if(n==="<")q="-0";r=`${n+f}.${d}.${h}${q}`}else if(W)r=`>=${f}.0.0${q} <${+f+1}.0.0-0`;else if(J)r=`>=${f}.${d}.0${q} <${f}.${+d+1}.0-0`;return V("xRange return",r),r})},yw=(t,c)=>{return V("replaceStars",t,c),t.trim().replace(k[B.STAR],"")},Sw=(t,c)=>{return V("replaceGTE0",t,c),t.trim().replace(k[c.includePrerelease?B.GTE0PRE:B.GTE0],"")},Hw=(t)=>(c,u,r,n,f,d,h,q,_,W,J,$)=>{if(o(r))u="";else if(o(n))u=`>=${r}.0.0${t?"-0":""}`;else if(o(f))u=`>=${r}.${n}.0${t?"-0":""}`;else if(d)u=`>=${u}`;else u=`>=${u}${t?"-0":""}`;if(o(_))q="";else if(o(W))q=`<${+_+1}.0.0-0`;else if(o(J))q=`<${_}.${+W+1}.0-0`;else if($)q=`<=${_}.${W}.${J}-${$}`;else if(t)q=`<${_}.${W}.${+J+1}-0`;else q=`<=${q}`;return`${u} ${q}`.trim()},Cw=(t,c,u)=>{for(let r=0;r<t.length;r++)if(!t[r].test(c))return!1;if(c.prerelease.length&&!u.includePrerelease){for(let r=0;r<t.length;r++){if(V(t[r].semver),t[r].semver===wn.ANY)continue;if(t[r].semver.prerelease.length>0){let n=t[r].semver;if(n.major===c.major&&n.minor===c.minor&&n.patch===c.patch)return!0}}return!1}return!0}});var rc=K((PX,y0)=>{var nc=Symbol("SemVer ANY");class qu{static get ANY(){return nc}constructor(t,c){if(c=J0(c),t instanceof qu)if(t.loose===!!c.loose)return t;else t=t.value;if(t=t.trim().split(/\s+/).join(" "),Pn("comparator",t,c),this.options=c,this.loose=!!c.loose,this.parse(t),this.semver===nc)this.value="";else this.value=this.operator+this.semver.version;Pn("comp",this)}parse(t){let c=this.options.loose?w0[$0.COMPARATORLOOSE]:w0[$0.COMPARATOR],u=t.match(c);if(!u)throw TypeError(`Invalid comparator: ${t}`);if(this.operator=u[1]!==void 0?u[1]:"",this.operator==="=")this.operator="";if(!u[2])this.semver=nc;else this.semver=new P0(u[2],this.options.loose)}toString(){return this.value}test(t){if(Pn("Comparator.test",t,this.options.loose),this.semver===nc||t===nc)return!0;if(typeof t==="string")try{t=new P0(t,this.options)}catch(c){return!1}return $n(t,this.operator,this.semver,this.options)}intersects(t,c){if(!(t instanceof qu))throw TypeError("a Comparator is required");if(this.operator===""){if(this.value==="")return!0;return new A0(t.value,c).test(this.value)}else if(t.operator===""){if(t.value==="")return!0;return new A0(this.value,c).test(t.semver)}if(c=J0(c),c.includePrerelease&&(this.value==="<0.0.0-0"||t.value==="<0.0.0-0"))return!1;if(!c.includePrerelease&&(this.value.startsWith("<0.0.0")||t.value.startsWith("<0.0.0")))return!1;if(this.operator.startsWith(">")&&t.operator.startsWith(">"))return!0;if(this.operator.startsWith("<")&&t.operator.startsWith("<"))return!0;if(this.semver.version===t.semver.version&&this.operator.includes("=")&&t.operator.includes("="))return!0;if($n(this.semver,"<",t.semver,c)&&this.operator.startsWith(">")&&t.operator.startsWith("<"))return!0;if($n(this.semver,">",t.semver,c)&&this.operator.startsWith("<")&&t.operator.startsWith(">"))return!0;return!1}}y0.exports=qu;var J0=lc(),{safeRe:w0,t:$0}=Ht(),$n=Jn(),Pn=tc(),P0=g(),A0=n1()});var fc=K((AX,S0)=>{var Ow=n1(),Gw=(t,c,u)=>{try{c=new Ow(c,u)}catch(r){return!1}return c.test(t)};S0.exports=Gw});var C0=K((yX,H0)=>{var Iw=n1(),Zw=(t,c)=>new Iw(t,c).set.map((u)=>u.map((r)=>r.value).join(" ").trim().split(" "));H0.exports=Zw});var G0=K((SX,O0)=>{var Xw=g(),Ew=n1(),Yw=(t,c,u)=>{let r=null,n=null,f=null;try{f=new Ew(c,u)}catch(d){return null}return t.forEach((d)=>{if(f.test(d)){if(!r||n.compare(d)===-1)r=d,n=new Xw(r,u)}}),r};O0.exports=Yw});var Z0=K((HX,I0)=>{var zw=g(),iw=n1(),Rw=(t,c,u)=>{let r=null,n=null,f=null;try{f=new iw(c,u)}catch(d){return null}return t.forEach((d)=>{if(f.test(d)){if(!r||n.compare(d)===1)r=d,n=new zw(r,u)}}),r};I0.exports=Rw});var Y0=K((CX,E0)=>{var An=g(),Vw=n1(),X0=cc(),Mw=(t,c)=>{t=new Vw(t,c);let u=new An("0.0.0");if(t.test(u))return u;if(u=new An("0.0.0-0"),t.test(u))return u;u=null;for(let r=0;r<t.set.length;++r){let n=t.set[r],f=null;if(n.forEach((d)=>{let h=new An(d.semver.version);switch(d.operator){case">":if(h.prerelease.length===0)h.patch++;else h.prerelease.push(0);h.raw=h.format();case"":case">=":if(!f||X0(h,f))f=h;break;case"<":case"<=":break;default:throw Error(`Unexpected operation: ${d.operator}`)}}),f&&(!u||X0(u,f)))u=f}if(u&&t.test(u))return u;return null};E0.exports=Mw});var i0=K((OX,z0)=>{var Nw=n1(),Tw=(t,c)=>{try{return new Nw(t,c).range||"*"}catch(u){return null}};z0.exports=Tw});var _u=K((GX,N0)=>{var ew=g(),M0=rc(),{ANY:Dw}=M0,bw=n1(),jw=fc(),R0=cc(),V0=ru(),pw=fu(),vw=nu(),xw=(t,c,u,r)=>{t=new ew(t,r),c=new bw(c,r);let n,f,d,h,q;switch(u){case">":n=R0,f=pw,d=V0,h=">",q=">=";break;case"<":n=V0,f=vw,d=R0,h="<",q="<=";break;default:throw TypeError('Must provide a hilo val of "<" or ">"')}if(jw(t,c,r))return!1;for(let _=0;_<c.set.length;++_){let W=c.set[_],J=null,$=null;if(W.forEach((w)=>{if(w.semver===Dw)w=new M0(">=0.0.0");if(J=J||w,$=$||w,n(w.semver,J.semver,r))J=w;else if(d(w.semver,$.semver,r))$=w}),J.operator===h||J.operator===q)return!1;if((!$.operator||$.operator===h)&&f(t,$.semver))return!1;else if($.operator===q&&d(t,$.semver))return!1}return!0};N0.exports=xw});var e0=K((IX,T0)=>{var Lw=_u(),sw=(t,c,u)=>Lw(t,c,">",u);T0.exports=sw});var b0=K((ZX,D0)=>{var mw=_u(),gw=(t,c,u)=>mw(t,c,"<",u);D0.exports=gw});var v0=K((XX,p0)=>{var j0=n1(),Bw=(t,c,u)=>{return t=new j0(t,u),c=new j0(c,u),t.intersects(c,u)};p0.exports=Bw});var L0=K((EX,x0)=>{var Fw=fc(),kw=r1();x0.exports=(t,c,u)=>{let r=[],n=null,f=null,d=t.sort((W,J)=>kw(W,J,u));for(let W of d)if(Fw(W,c,u)){if(f=W,!n)n=W}else{if(f)r.push([n,f]);f=null,n=null}if(n)r.push([n,null]);let h=[];for(let[W,J]of r)if(W===J)h.push(W);else if(!J&&W===d[0])h.push("*");else if(!J)h.push(`>=${W}`);else if(W===d[0])h.push(`<=${J}`);else h.push(`${W} - ${J}`);let q=h.join(" || "),_=typeof c.raw==="string"?c.raw:String(c);return q.length<_.length?q:c}});var k0=K((YX,F0)=>{var s0=n1(),Sn=rc(),{ANY:yn}=Sn,dc=fc(),Hn=r1(),ow=(t,c,u={})=>{if(t===c)return!0;t=new s0(t,u),c=new s0(c,u);let r=!1;t:for(let n of t.set){for(let f of c.set){let d=lw(n,f,u);if(r=r||d!==null,d)continue t}if(r)return!1}return!0},Uw=[new Sn(">=0.0.0-0")],m0=[new Sn(">=0.0.0")],lw=(t,c,u)=>{if(t===c)return!0;if(t.length===1&&t[0].semver===yn)if(c.length===1&&c[0].semver===yn)return!0;else if(u.includePrerelease)t=Uw;else t=m0;if(c.length===1&&c[0].semver===yn)if(u.includePrerelease)return!0;else c=m0;let r=new Set,n,f;for(let w of t)if(w.operator===">"||w.operator===">=")n=g0(n,w,u);else if(w.operator==="<"||w.operator==="<=")f=B0(f,w,u);else r.add(w.semver);if(r.size>1)return null;let d;if(n&&f){if(d=Hn(n.semver,f.semver,u),d>0)return null;else if(d===0&&(n.operator!==">="||f.operator!=="<="))return null}for(let w of r){if(n&&!dc(w,String(n),u))return null;if(f&&!dc(w,String(f),u))return null;for(let P of c)if(!dc(w,String(P),u))return!1;return!0}let h,q,_,W,J=f&&!u.includePrerelease&&f.semver.prerelease.length?f.semver:!1,$=n&&!u.includePrerelease&&n.semver.prerelease.length?n.semver:!1;if(J&&J.prerelease.length===1&&f.operator==="<"&&J.prerelease[0]===0)J=!1;for(let w of c){if(W=W||w.operator===">"||w.operator===">=",_=_||w.operator==="<"||w.operator==="<=",n){if($){if(w.semver.prerelease&&w.semver.prerelease.length&&w.semver.major===$.major&&w.semver.minor===$.minor&&w.semver.patch===$.patch)$=!1}if(w.operator===">"||w.operator===">="){if(h=g0(n,w,u),h===w&&h!==n)return!1}else if(n.operator===">="&&!dc(n.semver,String(w),u))return!1}if(f){if(J){if(w.semver.prerelease&&w.semver.prerelease.length&&w.semver.major===J.major&&w.semver.minor===J.minor&&w.semver.patch===J.patch)J=!1}if(w.operator==="<"||w.operator==="<="){if(q=B0(f,w,u),q===w&&q!==f)return!1}else if(f.operator==="<="&&!dc(f.semver,String(w),u))return!1}if(!w.operator&&(f||n)&&d!==0)return!1}if(n&&_&&!f&&d!==0)return!1;if(f&&W&&!n&&d!==0)return!1;if($||J)return!1;return!0},g0=(t,c,u)=>{if(!t)return c;let r=Hn(t.semver,c.semver,u);return r>0?t:r<0?c:c.operator===">"&&t.operator===">="?c:t},B0=(t,c,u)=>{if(!t)return c;let r=Hn(t.semver,c.semver,u);return r<0?t:r>0?c:c.operator==="<"&&t.operator==="<="?c:t};F0.exports=ow});var Ku=K((zX,l0)=>{var Cn=Ht(),o0=at(),Qw=g(),U0=qn(),aw=Q1(),t$=Oq(),c$=Iq(),u$=Eq(),r$=iq(),n$=Vq(),f$=Nq(),d$=eq(),h$=bq(),q$=r1(),_$=xq(),K$=sq(),W$=uu(),J$=Fq(),w$=oq(),$$=cc(),P$=ru(),A$=Kn(),y$=Wn(),S$=nu(),H$=fu(),C$=Jn(),O$=n0(),G$=rc(),I$=n1(),Z$=fc(),X$=C0(),E$=G0(),Y$=Z0(),z$=Y0(),i$=i0(),R$=_u(),V$=e0(),M$=b0(),N$=v0(),T$=L0(),e$=k0();l0.exports={parse:aw,valid:t$,clean:c$,inc:u$,diff:r$,major:n$,minor:f$,patch:d$,prerelease:h$,compare:q$,rcompare:_$,compareLoose:K$,compareBuild:W$,sort:J$,rsort:w$,gt:$$,lt:P$,eq:A$,neq:y$,gte:S$,lte:H$,cmp:C$,coerce:O$,Comparator:G$,Range:I$,satisfies:Z$,toComparators:X$,maxSatisfying:E$,minSatisfying:Y$,minVersion:z$,validRange:i$,outside:R$,gtr:V$,ltr:M$,intersects:N$,simplifyRange:T$,subset:e$,SemVer:Qw,re:Cn.re,src:Cn.src,tokens:Cn.t,SEMVER_SPEC_VERSION:o0.SEMVER_SPEC_VERSION,RELEASE_TYPES:o0.RELEASE_TYPES,compareIdentifiers:U0.compareIdentifiers,rcompareIdentifiers:U0.rcompareIdentifiers}});var a0=K((iX,Q0)=>{var D$=Ku();Q0.exports=D$.satisfies(process.version,">=15.7.0")});var c6=K((RX,t6)=>{var b$=Ku();t6.exports=b$.satisfies(process.version,">=16.9.0")});var On=K((VX,u6)=>{var j$=a0(),p$=c6(),v$={ec:["ES256","ES384","ES512"],rsa:["RS256","PS256","RS384","PS384","RS512","PS512"],"rsa-pss":["PS256","PS384","PS512"]},x$={ES256:"prime256v1",ES384:"secp384r1",ES512:"secp521r1"};u6.exports=function(t,c){if(!t||!c)return;let u=c.asymmetricKeyType;if(!u)return;let r=v$[u];if(!r)throw Error(`Unknown key type "${u}".`);if(!r.includes(t))throw Error(`"alg" parameter for "${u}" key type must be one of: ${r.join(", ")}.`);if(j$)switch(u){case"ec":let n=c.asymmetricKeyDetails.namedCurve,f=x$[t];if(n!==f)throw Error(`"alg" parameter "${t}" requires curve "${f}".`);break;case"rsa-pss":if(p$){let d=parseInt(t.slice(-3),10),{hashAlgorithm:h,mgf1HashAlgorithm:q,saltLength:_}=c.asymmetricKeyDetails;if(h!==`sha${d}`||q!==h)throw Error(`Invalid key for this operation, its RSA-PSS parameters do not meet the requirements of "alg" ${t}.`);if(_!==void 0&&_>d>>3)throw Error(`Invalid key for this operation, its RSA-PSS parameter saltLength does not meet the requirements of "alg" ${t}.`)}break}}});var Gn=K((MX,r6)=>{var L$=Ku();r6.exports=L$.satisfies(process.version,"^6.12.0 || >=8.0.0")});var d6=K((NX,f6)=>{var z=Qt(),s$=un(),n6=rn(),m$=cn(),g$=fn(),B$=On(),F$=Gn(),k$=Bc(),{KeyObject:o$,createSecretKey:U$,createPublicKey:l$}=require("crypto"),In=["RS256","RS384","RS512"],Q$=["ES256","ES384","ES512"],Zn=["RS256","RS384","RS512"],a$=["HS256","HS384","HS512"];if(F$)In.splice(In.length,0,"PS256","PS384","PS512"),Zn.splice(Zn.length,0,"PS256","PS384","PS512");f6.exports=function(t,c,u,r){if(typeof u==="function"&&!r)r=u,u={};if(!u)u={};u=Object.assign({},u);let n;if(r)n=r;else n=function(W,J){if(W)throw W;return J};if(u.clockTimestamp&&typeof u.clockTimestamp!=="number")return n(new z("clockTimestamp must be a number"));if(u.nonce!==void 0&&(typeof u.nonce!=="string"||u.nonce.trim()===""))return n(new z("nonce must be a non-empty string"));if(u.allowInvalidAsymmetricKeyTypes!==void 0&&typeof u.allowInvalidAsymmetricKeyTypes!=="boolean")return n(new z("allowInvalidAsymmetricKeyTypes must be a boolean"));let f=u.clockTimestamp||Math.floor(Date.now()/1000);if(!t)return n(new z("jwt must be provided"));if(typeof t!=="string")return n(new z("jwt must be a string"));let d=t.split(".");if(d.length!==3)return n(new z("jwt malformed"));let h;try{h=m$(t,{complete:!0})}catch(W){return n(W)}if(!h)return n(new z("invalid token"));let q=h.header,_;if(typeof c==="function"){if(!r)return n(new z("verify must be called asynchronous if secret or public key is provided as a callback"));_=c}else _=function(W,J){return J(null,c)};return _(q,function(W,J){if(W)return n(new z("error in secret or public key callback: "+W.message));let $=d[2].trim()!=="";if(!$&&J)return n(new z("jwt signature is required"));if($&&!J)return n(new z("secret or public key must be provided"));if(!$&&!u.algorithms)return n(new z('please specify "none" in "algorithms" to verify unsigned tokens'));if(J!=null&&!(J instanceof o$))try{J=l$(J)}catch(A){try{J=U$(typeof J==="string"?Buffer.from(J):J)}catch(G){return n(new z("secretOrPublicKey is not valid key material"))}}if(!u.algorithms)if(J.type==="secret")u.algorithms=a$;else if(["rsa","rsa-pss"].includes(J.asymmetricKeyType))u.algorithms=Zn;else if(J.asymmetricKeyType==="ec")u.algorithms=Q$;else u.algorithms=In;if(u.algorithms.indexOf(h.header.alg)===-1)return n(new z("invalid algorithm"));if(q.alg.startsWith("HS")&&J.type!=="secret")return n(new z(`secretOrPublicKey must be a symmetric key when using ${q.alg}`));else if(/^(?:RS|PS|ES)/.test(q.alg)&&J.type!=="public")return n(new z(`secretOrPublicKey must be an asymmetric key when using ${q.alg}`));if(!u.allowInvalidAsymmetricKeyTypes)try{B$(q.alg,J)}catch(A){return n(A)}let w;try{w=k$.verify(t,h.header.alg,J)}catch(A){return n(A)}if(!w)return n(new z("invalid signature"));let P=h.payload;if(typeof P.nbf<"u"&&!u.ignoreNotBefore){if(typeof P.nbf!=="number")return n(new z("invalid nbf value"));if(P.nbf>f+(u.clockTolerance||0))return n(new s$("jwt not active",new Date(P.nbf*1000)))}if(typeof P.exp<"u"&&!u.ignoreExpiration){if(typeof P.exp!=="number")return n(new z("invalid exp value"));if(f>=P.exp+(u.clockTolerance||0))return n(new n6("jwt expired",new Date(P.exp*1000)))}if(u.audience){let A=Array.isArray(u.audience)?u.audience:[u.audience];if(!(Array.isArray(P.aud)?P.aud:[P.aud]).some(function(E){return A.some(function(O){return O instanceof RegExp?O.test(E):O===E})}))return n(new z("jwt audience invalid. expected: "+A.join(" or ")))}if(u.issuer){if(typeof u.issuer==="string"&&P.iss!==u.issuer||Array.isArray(u.issuer)&&u.issuer.indexOf(P.iss)===-1)return n(new z("jwt issuer invalid. expected: "+u.issuer))}if(u.subject){if(P.sub!==u.subject)return n(new z("jwt subject invalid. expected: "+u.subject))}if(u.jwtid){if(P.jti!==u.jwtid)return n(new z("jwt jwtid invalid. expected: "+u.jwtid))}if(u.nonce){if(P.nonce!==u.nonce)return n(new z("jwt nonce invalid. expected: "+u.nonce))}if(u.maxAge){if(typeof P.iat!=="number")return n(new z("iat required when maxAge is specified"));let A=g$(u.maxAge,P.iat);if(typeof A>"u")return n(new z('"maxAge" should be a number of seconds or string representing a timespan eg: "1d", "20h", 60'));if(f>=A+(u.clockTolerance||0))return n(new n6("maxAge exceeded",new Date(A*1000)))}if(u.complete===!0){let A=h.signature;return n(null,{header:q,payload:P,signature:A})}return n(null,P)})}});var J6=K((TX,W6)=>{var h6=1/0,_6=9007199254740991,tP=179769313486231570000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000,q6=NaN,cP="[object Arguments]",uP="[object Function]",rP="[object GeneratorFunction]",nP="[object String]",fP="[object Symbol]",dP=/^\s+|\s+$/g,hP=/^[-+]0x[0-9a-f]+$/i,qP=/^0b[01]+$/i,_P=/^0o[0-7]+$/i,KP=/^(?:0|[1-9]\d*)$/,WP=parseInt;function JP(t,c){var u=-1,r=t?t.length:0,n=Array(r);while(++u<r)n[u]=c(t[u],u,t);return n}function wP(t,c,u,r){var n=t.length,f=u+(r?1:-1);while(r?f--:++f<n)if(c(t[f],f,t))return f;return-1}function $P(t,c,u){if(c!==c)return wP(t,PP,u);var r=u-1,n=t.length;while(++r<n)if(t[r]===c)return r;return-1}function PP(t){return t!==t}function AP(t,c){var u=-1,r=Array(t);while(++u<t)r[u]=c(u);return r}function yP(t,c){return JP(c,function(u){return t[u]})}function SP(t,c){return function(u){return t(c(u))}}var Wu=Object.prototype,En=Wu.hasOwnProperty,Ju=Wu.toString,HP=Wu.propertyIsEnumerable,CP=SP(Object.keys,Object),OP=Math.max;function GP(t,c){var u=K6(t)||YP(t)?AP(t.length,String):[],r=u.length,n=!!r;for(var f in t)if((c||En.call(t,f))&&!(n&&(f=="length"||ZP(f,r))))u.push(f);return u}function IP(t){if(!XP(t))return CP(t);var c=[];for(var u in Object(t))if(En.call(t,u)&&u!="constructor")c.push(u);return c}function ZP(t,c){return c=c==null?_6:c,!!c&&(typeof t=="number"||KP.test(t))&&(t>-1&&t%1==0&&t<c)}function XP(t){var c=t&&t.constructor,u=typeof c=="function"&&c.prototype||Wu;return t===u}function EP(t,c,u,r){t=Yn(t)?t:bP(t),u=u&&!r?TP(u):0;var n=t.length;if(u<0)u=OP(n+u,0);return VP(t)?u<=n&&t.indexOf(c,u)>-1:!!n&&$P(t,c,u)>-1}function YP(t){return zP(t)&&En.call(t,"callee")&&(!HP.call(t,"callee")||Ju.call(t)==cP)}var K6=Array.isArray;function Yn(t){return t!=null&&RP(t.length)&&!iP(t)}function zP(t){return zn(t)&&Yn(t)}function iP(t){var c=Xn(t)?Ju.call(t):"";return c==uP||c==rP}function RP(t){return typeof t=="number"&&t>-1&&t%1==0&&t<=_6}function Xn(t){var c=typeof t;return!!t&&(c=="object"||c=="function")}function zn(t){return!!t&&typeof t=="object"}function VP(t){return typeof t=="string"||!K6(t)&&zn(t)&&Ju.call(t)==nP}function MP(t){return typeof t=="symbol"||zn(t)&&Ju.call(t)==fP}function NP(t){if(!t)return t===0?t:0;if(t=eP(t),t===h6||t===-h6){var c=t<0?-1:1;return c*tP}return t===t?t:0}function TP(t){var c=NP(t),u=c%1;return c===c?u?c-u:c:0}function eP(t){if(typeof t=="number")return t;if(MP(t))return q6;if(Xn(t)){var c=typeof t.valueOf=="function"?t.valueOf():t;t=Xn(c)?c+"":c}if(typeof t!="string")return t===0?t:+t;t=t.replace(dP,"");var u=qP.test(t);return u||_P.test(t)?WP(t.slice(2),u?2:8):hP.test(t)?q6:+t}function DP(t){return Yn(t)?GP(t):IP(t)}function bP(t){return t?yP(t,DP(t)):[]}W6.exports=EP});var $6=K((eX,w6)=>{var jP="[object Boolean]",pP=Object.prototype,vP=pP.toString;function xP(t){return t===!0||t===!1||LP(t)&&vP.call(t)==jP}function LP(t){return!!t&&typeof t=="object"}w6.exports=xP});var H6=K((DX,S6)=>{var P6=1/0,sP=179769313486231570000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000,A6=NaN,mP="[object Symbol]",gP=/^\s+|\s+$/g,BP=/^[-+]0x[0-9a-f]+$/i,FP=/^0b[01]+$/i,kP=/^0o[0-7]+$/i,oP=parseInt,UP=Object.prototype,lP=UP.toString;function QP(t){return typeof t=="number"&&t==uA(t)}function y6(t){var c=typeof t;return!!t&&(c=="object"||c=="function")}function aP(t){return!!t&&typeof t=="object"}function tA(t){return typeof t=="symbol"||aP(t)&&lP.call(t)==mP}function cA(t){if(!t)return t===0?t:0;if(t=rA(t),t===P6||t===-P6){var c=t<0?-1:1;return c*sP}return t===t?t:0}function uA(t){var c=cA(t),u=c%1;return c===c?u?c-u:c:0}function rA(t){if(typeof t=="number")return t;if(tA(t))return A6;if(y6(t)){var c=typeof t.valueOf=="function"?t.valueOf():t;t=y6(c)?c+"":c}if(typeof t!="string")return t===0?t:+t;t=t.replace(gP,"");var u=FP.test(t);return u||kP.test(t)?oP(t.slice(2),u?2:8):BP.test(t)?A6:+t}S6.exports=QP});var O6=K((bX,C6)=>{var nA="[object Number]",fA=Object.prototype,dA=fA.toString;function hA(t){return!!t&&typeof t=="object"}function qA(t){return typeof t=="number"||hA(t)&&dA.call(t)==nA}C6.exports=qA});var X6=K((jX,Z6)=>{var _A="[object Object]";function KA(t){var c=!1;if(t!=null&&typeof t.toString!="function")try{c=!!(t+"")}catch(u){}return c}function WA(t,c){return function(u){return t(c(u))}}var JA=Function.prototype,G6=Object.prototype,I6=JA.toString,wA=G6.hasOwnProperty,$A=I6.call(Object),PA=G6.toString,AA=WA(Object.getPrototypeOf,Object);function yA(t){return!!t&&typeof t=="object"}function SA(t){if(!yA(t)||PA.call(t)!=_A||KA(t))return!1;var c=AA(t);if(c===null)return!0;var u=wA.call(c,"constructor")&&c.constructor;return typeof u=="function"&&u instanceof u&&I6.call(u)==$A}Z6.exports=SA});var Y6=K((pX,E6)=>{var HA="[object String]",CA=Object.prototype,OA=CA.toString,GA=Array.isArray;function IA(t){return!!t&&typeof t=="object"}function ZA(t){return typeof t=="string"||!GA(t)&&IA(t)&&OA.call(t)==HA}E6.exports=ZA});var M6=K((vX,V6)=>{var XA="Expected a function",z6=1/0,EA=179769313486231570000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000,i6=NaN,YA="[object Symbol]",zA=/^\s+|\s+$/g,iA=/^[-+]0x[0-9a-f]+$/i,RA=/^0b[01]+$/i,VA=/^0o[0-7]+$/i,MA=parseInt,NA=Object.prototype,TA=NA.toString;function eA(t,c){var u;if(typeof c!="function")throw TypeError(XA);return t=vA(t),function(){if(--t>0)u=c.apply(this,arguments);if(t<=1)c=void 0;return u}}function DA(t){return eA(2,t)}function R6(t){var c=typeof t;return!!t&&(c=="object"||c=="function")}function bA(t){return!!t&&typeof t=="object"}function jA(t){return typeof t=="symbol"||bA(t)&&TA.call(t)==YA}function pA(t){if(!t)return t===0?t:0;if(t=xA(t),t===z6||t===-z6){var c=t<0?-1:1;return c*EA}return t===t?t:0}function vA(t){var c=pA(t),u=c%1;return c===c?u?c-u:c:0}function xA(t){if(typeof t=="number")return t;if(jA(t))return i6;if(R6(t)){var c=typeof t.valueOf=="function"?t.valueOf():t;t=R6(c)?c+"":c}if(typeof t!="string")return t===0?t:+t;t=t.replace(zA,"");var u=RA.test(t);return u||VA.test(t)?MA(t.slice(2),u?2:8):iA.test(t)?i6:+t}V6.exports=DA});var x6=K((xX,v6)=>{var N6=fn(),LA=Gn(),sA=On(),T6=Bc(),mA=J6(),wu=$6(),e6=H6(),Rn=O6(),b6=X6(),b1=Y6(),gA=M6(),{KeyObject:BA,createSecretKey:FA,createPrivateKey:kA}=require("crypto"),j6=["RS256","RS384","RS512","ES256","ES384","ES512","HS256","HS384","HS512","none"];if(LA)j6.splice(3,0,"PS256","PS384","PS512");var oA={expiresIn:{isValid:function(t){return e6(t)||b1(t)&&t},message:'"expiresIn" should be a number of seconds or string representing a timespan'},notBefore:{isValid:function(t){return e6(t)||b1(t)&&t},message:'"notBefore" should be a number of seconds or string representing a timespan'},audience:{isValid:function(t){return b1(t)||Array.isArray(t)},message:'"audience" must be a string or array'},algorithm:{isValid:mA.bind(null,j6),message:'"algorithm" must be a valid string enum value'},header:{isValid:b6,message:'"header" must be an object'},encoding:{isValid:b1,message:'"encoding" must be a string'},issuer:{isValid:b1,message:'"issuer" must be a string'},subject:{isValid:b1,message:'"subject" must be a string'},jwtid:{isValid:b1,message:'"jwtid" must be a string'},noTimestamp:{isValid:wu,message:'"noTimestamp" must be a boolean'},keyid:{isValid:b1,message:'"keyid" must be a string'},mutatePayload:{isValid:wu,message:'"mutatePayload" must be a boolean'},allowInsecureKeySizes:{isValid:wu,message:'"allowInsecureKeySizes" must be a boolean'},allowInvalidAsymmetricKeyTypes:{isValid:wu,message:'"allowInvalidAsymmetricKeyTypes" must be a boolean'}},UA={iat:{isValid:Rn,message:'"iat" should be a number of seconds'},exp:{isValid:Rn,message:'"exp" should be a number of seconds'},nbf:{isValid:Rn,message:'"nbf" should be a number of seconds'}};function p6(t,c,u,r){if(!b6(u))throw Error('Expected "'+r+'" to be a plain object.');Object.keys(u).forEach(function(n){let f=t[n];if(!f){if(!c)throw Error('"'+n+'" is not allowed in "'+r+'"');return}if(!f.isValid(u[n]))throw Error(f.message)})}function lA(t){return p6(oA,!1,t,"options")}function QA(t){return p6(UA,!0,t,"payload")}var D6={audience:"aud",issuer:"iss",subject:"sub",jwtid:"jti"},aA=["expiresIn","notBefore","noTimestamp","audience","issuer","subject","jwtid"];v6.exports=function(t,c,u,r){if(typeof u==="function")r=u,u={};else u=u||{};let n=typeof t==="object"&&!Buffer.isBuffer(t),f=Object.assign({alg:u.algorithm||"HS256",typ:n?"JWT":void 0,kid:u.keyid},u.header);function d(_){if(r)return r(_);throw _}if(!c&&u.algorithm!=="none")return d(Error("secretOrPrivateKey must have a value"));if(c!=null&&!(c instanceof BA))try{c=kA(c)}catch(_){try{c=FA(typeof c==="string"?Buffer.from(c):c)}catch(W){return d(Error("secretOrPrivateKey is not valid key material"))}}if(f.alg.startsWith("HS")&&c.type!=="secret")return d(Error(`secretOrPrivateKey must be a symmetric key when using ${f.alg}`));else if(/^(?:RS|PS|ES)/.test(f.alg)){if(c.type!=="private")return d(Error(`secretOrPrivateKey must be an asymmetric key when using ${f.alg}`));if(!u.allowInsecureKeySizes&&!f.alg.startsWith("ES")&&c.asymmetricKeyDetails!==void 0&&c.asymmetricKeyDetails.modulusLength<2048)return d(Error(`secretOrPrivateKey has a minimum key size of 2048 bits for ${f.alg}`))}if(typeof t>"u")return d(Error("payload is required"));else if(n){try{QA(t)}catch(_){return d(_)}if(!u.mutatePayload)t=Object.assign({},t)}else{let _=aA.filter(function(W){return typeof u[W]<"u"});if(_.length>0)return d(Error("invalid "+_.join(",")+" option for "+typeof t+" payload"))}if(typeof t.exp<"u"&&typeof u.expiresIn<"u")return d(Error('Bad "options.expiresIn" option the payload already has an "exp" property.'));if(typeof t.nbf<"u"&&typeof u.notBefore<"u")return d(Error('Bad "options.notBefore" option the payload already has an "nbf" property.'));try{lA(u)}catch(_){return d(_)}if(!u.allowInvalidAsymmetricKeyTypes)try{sA(f.alg,c)}catch(_){return d(_)}let h=t.iat||Math.floor(Date.now()/1000);if(u.noTimestamp)delete t.iat;else if(n)t.iat=h;if(typeof u.notBefore<"u"){try{t.nbf=N6(u.notBefore,h)}catch(_){return d(_)}if(typeof t.nbf>"u")return d(Error('"notBefore" should be a number of seconds or string representing a timespan eg: "1d", "20h", 60'))}if(typeof u.expiresIn<"u"&&typeof t==="object"){try{t.exp=N6(u.expiresIn,h)}catch(_){return d(_)}if(typeof t.exp>"u")return d(Error('"expiresIn" should be a number of seconds or string representing a timespan eg: "1d", "20h", 60'))}Object.keys(D6).forEach(function(_){let W=D6[_];if(typeof u[_]<"u"){if(typeof t[W]<"u")return d(Error('Bad "options.'+_+'" option. The payload already has an "'+W+'" property.'));t[W]=u[_]}});let q=u.encoding||"utf8";if(typeof r==="function")r=r&&gA(r),T6.createSign({header:f,privateKey:c,payload:t,encoding:q}).once("error",r).once("done",function(_){if(!u.allowInsecureKeySizes&&/^(?:RS|PS)/.test(f.alg)&&_.length<256)return r(Error(`secretOrPrivateKey has a minimum key size of 2048 bits for ${f.alg}`));r(null,_)});else{let _=T6.sign({header:f,payload:t,secret:c,encoding:q});if(!u.allowInsecureKeySizes&&/^(?:RS|PS)/.test(f.alg)&&_.length<256)throw Error(`secretOrPrivateKey has a minimum key size of 2048 bits for ${f.alg}`);return _}}});var s6=K((LX,L6)=>{L6.exports={decode:cn(),verify:d6(),sign:x6(),JsonWebTokenError:Qt(),NotBeforeError:un(),TokenExpiredError:rn()}});var Vn=K((sX,m6)=>{function t3(t){u.debug=u,u.default=u,u.coerce=q,u.disable=d,u.enable=n,u.enabled=h,u.humanize=nn(),u.destroy=_,Object.keys(t).forEach((W)=>{u[W]=t[W]}),u.names=[],u.skips=[],u.formatters={};function c(W){let J=0;for(let $=0;$<W.length;$++)J=(J<<5)-J+W.charCodeAt($),J|=0;return u.colors[Math.abs(J)%u.colors.length]}u.selectColor=c;function u(W){let J,$=null,w,P;function A(...G){if(!A.enabled)return;let Z=A,E=Number(new Date),O=E-(J||E);if(Z.diff=O,Z.prev=J,Z.curr=E,J=E,G[0]=u.coerce(G[0]),typeof G[0]!=="string")G.unshift("%O");let D=0;G[0]=G[0].replace(/%([a-zA-Z%])/g,(c1,T1)=>{if(c1==="%%")return"%";D++;let o1=u.formatters[T1];if(typeof o1==="function"){let Mc=G[D];c1=o1.call(Z,Mc),G.splice(D,1),D--}return c1}),u.formatArgs.call(Z,G),(Z.log||u.log).apply(Z,G)}if(A.namespace=W,A.useColors=u.useColors(),A.color=u.selectColor(W),A.extend=r,A.destroy=u.destroy,Object.defineProperty(A,"enabled",{enumerable:!0,configurable:!1,get:()=>{if($!==null)return $;if(w!==u.namespaces)w=u.namespaces,P=u.enabled(W);return P},set:(G)=>{$=G}}),typeof u.init==="function")u.init(A);return A}function r(W,J){let $=u(this.namespace+(typeof J>"u"?":":J)+W);return $.log=this.log,$}function n(W){u.save(W),u.namespaces=W,u.names=[],u.skips=[];let J=(typeof W==="string"?W:"").trim().replace(/\s+/g,",").split(",").filter(Boolean);for(let $ of J)if($[0]==="-")u.skips.push($.slice(1));else u.names.push($)}function f(W,J){let $=0,w=0,P=-1,A=0;while($<W.length)if(w<J.length&&(J[w]===W[$]||J[w]==="*"))if(J[w]==="*")P=w,A=$,w++;else $++,w++;else if(P!==-1)w=P+1,A++,$=A;else return!1;while(w<J.length&&J[w]==="*")w++;return w===J.length}function d(){let W=[...u.names,...u.skips.map((J)=>"-"+J)].join(",");return u.enable(""),W}function h(W){for(let J of u.skips)if(f(W,J))return!1;for(let J of u.names)if(f(W,J))return!0;return!1}function q(W){if(W instanceof Error)return W.stack||W.message;return W}function _(){console.warn("Instance method `debug.destroy()` is deprecated and no longer does anything. It will be removed in the next major version of `debug`.")}return u.enable(u.load()),u}m6.exports=t3});var g6=K((U,$u)=>{U.formatArgs=u3;U.save=r3;U.load=n3;U.useColors=c3;U.storage=f3();U.destroy=(()=>{let t=!1;return()=>{if(!t)t=!0,console.warn("Instance method `debug.destroy()` is deprecated and no longer does anything. It will be removed in the next major version of `debug`.")}})();U.colors=["#0000CC","#0000FF","#0033CC","#0033FF","#0066CC","#0066FF","#0099CC","#0099FF","#00CC00","#00CC33","#00CC66","#00CC99","#00CCCC","#00CCFF","#3300CC","#3300FF","#3333CC","#3333FF","#3366CC","#3366FF","#3399CC","#3399FF","#33CC00","#33CC33","#33CC66","#33CC99","#33CCCC","#33CCFF","#6600CC","#6600FF","#6633CC","#6633FF","#66CC00","#66CC33","#9900CC","#9900FF","#9933CC","#9933FF","#99CC00","#99CC33","#CC0000","#CC0033","#CC0066","#CC0099","#CC00CC","#CC00FF","#CC3300","#CC3333","#CC3366","#CC3399","#CC33CC","#CC33FF","#CC6600","#CC6633","#CC9900","#CC9933","#CCCC00","#CCCC33","#FF0000","#FF0033","#FF0066","#FF0099","#FF00CC","#FF00FF","#FF3300","#FF3333","#FF3366","#FF3399","#FF33CC","#FF33FF","#FF6600","#FF6633","#FF9900","#FF9933","#FFCC00","#FFCC33"];function c3(){if(typeof window<"u"&&window.process&&(window.process.type==="renderer"||window.process.__nwjs))return!0;if(typeof navigator<"u"&&navigator.userAgent&&navigator.userAgent.toLowerCase().match(/(edge|trident)\/(\d+)/))return!1;let t;return typeof document<"u"&&document.documentElement&&document.documentElement.style&&document.documentElement.style.WebkitAppearance||typeof window<"u"&&window.console&&(window.console.firebug||window.console.exception&&window.console.table)||typeof navigator<"u"&&navigator.userAgent&&(t=navigator.userAgent.toLowerCase().match(/firefox\/(\d+)/))&&parseInt(t[1],10)>=31||typeof navigator<"u"&&navigator.userAgent&&navigator.userAgent.toLowerCase().match(/applewebkit\/(\d+)/)}function u3(t){if(t[0]=(this.useColors?"%c":"")+this.namespace+(this.useColors?" %c":" ")+t[0]+(this.useColors?"%c ":" ")+"+"+$u.exports.humanize(this.diff),!this.useColors)return;let c="color: "+this.color;t.splice(1,0,c,"color: inherit");let u=0,r=0;t[0].replace(/%[a-zA-Z%]/g,(n)=>{if(n==="%%")return;if(u++,n==="%c")r=u}),t.splice(r,0,c)}U.log=console.debug||console.log||(()=>{});function r3(t){try{if(t)U.storage.setItem("debug",t);else U.storage.removeItem("debug")}catch(c){}}function n3(){let t;try{t=U.storage.getItem("debug")||U.storage.getItem("DEBUG")}catch(c){}if(!t&&typeof process<"u"&&"env"in process)t=process.env.DEBUG;return t}function f3(){try{return localStorage}catch(t){}}$u.exports=Vn()(U);var{formatters:d3}=$u.exports;d3.j=function(t){try{return JSON.stringify(t)}catch(c){return"[UnexpectedJSONParseError]: "+c.message}}});var F6=K((mX,B6)=>{B6.exports=(t,c=process.argv)=>{let u=t.startsWith("-")?"":t.length===1?"-":"--",r=c.indexOf(u+t),n=c.indexOf("--");return r!==-1&&(n===-1||r<n)}});var U6=K((gX,o6)=>{var h3=require("os"),k6=require("tty"),f1=F6(),{env:b}=process,j1;if(f1("no-color")||f1("no-colors")||f1("color=false")||f1("color=never"))j1=0;else if(f1("color")||f1("colors")||f1("color=true")||f1("color=always"))j1=1;if("FORCE_COLOR"in b)if(b.FORCE_COLOR==="true")j1=1;else if(b.FORCE_COLOR==="false")j1=0;else j1=b.FORCE_COLOR.length===0?1:Math.min(parseInt(b.FORCE_COLOR,10),3);function Mn(t){if(t===0)return!1;return{level:t,hasBasic:!0,has256:t>=2,has16m:t>=3}}function Nn(t,c){if(j1===0)return 0;if(f1("color=16m")||f1("color=full")||f1("color=truecolor"))return 3;if(f1("color=256"))return 2;if(t&&!c&&j1===void 0)return 0;let u=j1||0;if(b.TERM==="dumb")return u;if(process.platform==="win32"){let r=h3.release().split(".");if(Number(r[0])>=10&&Number(r[2])>=10586)return Number(r[2])>=14931?3:2;return 1}if("CI"in b){if(["TRAVIS","CIRCLECI","APPVEYOR","GITLAB_CI","GITHUB_ACTIONS","BUILDKITE"].some((r)=>(r in b))||b.CI_NAME==="codeship")return 1;return u}if("TEAMCITY_VERSION"in b)return/^(9\.(0*[1-9]\d*)\.|\d{2,}\.)/.test(b.TEAMCITY_VERSION)?1:0;if(b.COLORTERM==="truecolor")return 3;if("TERM_PROGRAM"in b){let r=parseInt((b.TERM_PROGRAM_VERSION||"").split(".")[0],10);switch(b.TERM_PROGRAM){case"iTerm.app":return r>=3?3:2;case"Apple_Terminal":return 2}}if(/-256(color)?$/i.test(b.TERM))return 2;if(/^screen|^xterm|^vt100|^vt220|^rxvt|color|ansi|cygwin|linux/i.test(b.TERM))return 1;if("COLORTERM"in b)return 1;return u}function q3(t){let c=Nn(t,t&&t.isTTY);return Mn(c)}o6.exports={supportsColor:q3,stdout:Mn(Nn(!0,k6.isatty(1))),stderr:Mn(Nn(!0,k6.isatty(2)))}});var Q6=K((j,Au)=>{var _3=require("tty"),Pu=require("util");j.init=A3;j.log=w3;j.formatArgs=W3;j.save=$3;j.load=P3;j.useColors=K3;j.destroy=Pu.deprecate(()=>{},"Instance method `debug.destroy()` is deprecated and no longer does anything. It will be removed in the next major version of `debug`.");j.colors=[6,2,3,4,5,1];try{let t=U6();if(t&&(t.stderr||t).level>=2)j.colors=[20,21,26,27,32,33,38,39,40,41,42,43,44,45,56,57,62,63,68,69,74,75,76,77,78,79,80,81,92,93,98,99,112,113,128,129,134,135,148,149,160,161,162,163,164,165,166,167,168,169,170,171,172,173,178,179,184,185,196,197,198,199,200,201,202,203,204,205,206,207,208,209,214,215,220,221]}catch(t){}j.inspectOpts=Object.keys(process.env).filter((t)=>{return/^debug_/i.test(t)}).reduce((t,c)=>{let u=c.substring(6).toLowerCase().replace(/_([a-z])/g,(n,f)=>{return f.toUpperCase()}),r=process.env[c];if(/^(yes|on|true|enabled)$/i.test(r))r=!0;else if(/^(no|off|false|disabled)$/i.test(r))r=!1;else if(r==="null")r=null;else r=Number(r);return t[u]=r,t},{});function K3(){return"colors"in j.inspectOpts?Boolean(j.inspectOpts.colors):_3.isatty(process.stderr.fd)}function W3(t){let{namespace:c,useColors:u}=this;if(u){let r=this.color,n="\x1B[3"+(r<8?r:"8;5;"+r),f=` ${n};1m${c} \x1B[0m`;t[0]=f+t[0].split(`
|
|
4
4
|
`).join(`
|
|
5
5
|
`+f),t.push(n+"m+"+Au.exports.humanize(this.diff)+"\x1B[0m")}else t[0]=J3()+c+" "+t[0]}function J3(){if(j.inspectOpts.hideDate)return"";return new Date().toISOString()+" "}function w3(...t){return process.stderr.write(Pu.formatWithOptions(j.inspectOpts,...t)+`
|
|
6
6
|
`)}function $3(t){if(t)process.env.DEBUG=t;else delete process.env.DEBUG}function P3(){return process.env.DEBUG}function A3(t){t.inspectOpts={};let c=Object.keys(j.inspectOpts);for(let u=0;u<c.length;u++)t.inspectOpts[c[u]]=j.inspectOpts[c[u]]}Au.exports=Vn()(j);var{formatters:l6}=Au.exports;l6.o=function(t){return this.inspectOpts.colors=this.useColors,Pu.inspect(t,this.inspectOpts).split(`
|
|
7
|
-
`).map((c)=>c.trim()).join(" ")};l6.O=function(t){return this.inspectOpts.colors=this.useColors,Pu.inspect(t,this.inspectOpts)}});var yu=K((BX,Nn)=>{if(typeof process>"u"||process.type==="renderer"||!1||process.__nwjs)Nn.exports=g6();else Nn.exports=Q6()});var Dn=K((Tn)=>{Object.defineProperty(Tn,"__esModule",{value:!0});var y3=require("crypto"),S3=(t,c)=>(0,y3.createHash)(t).update(c).digest();Tn.default=S3});var M=K((T)=>{Object.defineProperty(T,"__esModule",{value:!0});T.concatKdf=T.lengthAndInput=T.uint32be=T.uint64be=T.p2s=T.concat=T.decoder=T.encoder=void 0;var H3=Dn();T.encoder=new TextEncoder;T.decoder=new TextDecoder;var Su=4294967296;function jn(...t){let c=t.reduce((n,{length:f})=>n+f,0),u=new Uint8Array(c),r=0;return t.forEach((n)=>{u.set(n,r),r+=n.length}),u}T.concat=jn;function C3(t,c){return jn(T.encoder.encode(t),new Uint8Array([0]),c)}T.p2s=C3;function bn(t,c,u){if(c<0||c>=Su)throw RangeError(`value must be >= 0 and <= ${Su-1}. Received ${c}`);t.set([c>>>24,c>>>16,c>>>8,c&255],u)}function O3(t){let c=Math.floor(t/Su),u=t%Su,r=new Uint8Array(8);return bn(r,c,0),bn(r,u,4),r}T.uint64be=O3;function pn(t){let c=new Uint8Array(4);return bn(c,t),c}T.uint32be=pn;function G3(t){return jn(pn(t.length),t)}T.lengthAndInput=G3;async function I3(t,c,u){let r=Math.ceil((c>>3)/32),n=new Uint8Array(r*32);for(let f=0;f<r;f++){let d=new Uint8Array(4+t.length+u.length);d.set(pn(f+1)),d.set(t,4),d.set(u,4+t.length),n.set(await(0,H3.default)("sha256",d),f*32)}return n.slice(0,c>>3)}T.concatKdf=I3});var F=K((P1)=>{Object.defineProperty(P1,"__esModule",{value:!0});P1.decode=P1.encode=P1.encodeBase64=P1.decodeBase64=void 0;var Ct=require("buffer"),Z3=M(),a6;function X3(t){let c=t;if(c instanceof Uint8Array)c=Z3.decoder.decode(c);return c}if(Ct.Buffer.isEncoding("base64url"))P1.encode=a6=(t)=>Ct.Buffer.from(t).toString("base64url");else P1.encode=a6=(t)=>Ct.Buffer.from(t).toString("base64").replace(/=/g,"").replace(/\+/g,"-").replace(/\//g,"_");var E3=(t)=>Ct.Buffer.from(t,"base64");P1.decodeBase64=E3;var Y3=(t)=>Ct.Buffer.from(t).toString("base64");P1.encodeBase64=Y3;var i3=(t)=>Ct.Buffer.from(X3(t),"base64");P1.decode=i3});var C=K((X)=>{Object.defineProperty(X,"__esModule",{value:!0});X.JWSSignatureVerificationFailed=X.JWKSTimeout=X.JWKSMultipleMatchingKeys=X.JWKSNoMatchingKey=X.JWKSInvalid=X.JWKInvalid=X.JWTInvalid=X.JWSInvalid=X.JWEInvalid=X.JWEDecompressionFailed=X.JWEDecryptionFailed=X.JOSENotSupported=X.JOSEAlgNotAllowed=X.JWTExpired=X.JWTClaimValidationFailed=X.JOSEError=void 0;class x extends Error{static get code(){return"ERR_JOSE_GENERIC"}constructor(t){var c;super(t);this.code="ERR_JOSE_GENERIC",this.name=this.constructor.name,(c=Error.captureStackTrace)===null||c===void 0||c.call(Error,this,this.constructor)}}X.JOSEError=x;class t4 extends x{static get code(){return"ERR_JWT_CLAIM_VALIDATION_FAILED"}constructor(t,c="unspecified",u="unspecified"){super(t);this.code="ERR_JWT_CLAIM_VALIDATION_FAILED",this.claim=c,this.reason=u}}X.JWTClaimValidationFailed=t4;class c4 extends x{static get code(){return"ERR_JWT_EXPIRED"}constructor(t,c="unspecified",u="unspecified"){super(t);this.code="ERR_JWT_EXPIRED",this.claim=c,this.reason=u}}X.JWTExpired=c4;class u4 extends x{constructor(){super(...arguments);this.code="ERR_JOSE_ALG_NOT_ALLOWED"}static get code(){return"ERR_JOSE_ALG_NOT_ALLOWED"}}X.JOSEAlgNotAllowed=u4;class r4 extends x{constructor(){super(...arguments);this.code="ERR_JOSE_NOT_SUPPORTED"}static get code(){return"ERR_JOSE_NOT_SUPPORTED"}}X.JOSENotSupported=r4;class n4 extends x{constructor(){super(...arguments);this.code="ERR_JWE_DECRYPTION_FAILED",this.message="decryption operation failed"}static get code(){return"ERR_JWE_DECRYPTION_FAILED"}}X.JWEDecryptionFailed=n4;class f4 extends x{constructor(){super(...arguments);this.code="ERR_JWE_DECOMPRESSION_FAILED",this.message="decompression operation failed"}static get code(){return"ERR_JWE_DECOMPRESSION_FAILED"}}X.JWEDecompressionFailed=f4;class d4 extends x{constructor(){super(...arguments);this.code="ERR_JWE_INVALID"}static get code(){return"ERR_JWE_INVALID"}}X.JWEInvalid=d4;class h4 extends x{constructor(){super(...arguments);this.code="ERR_JWS_INVALID"}static get code(){return"ERR_JWS_INVALID"}}X.JWSInvalid=h4;class q4 extends x{constructor(){super(...arguments);this.code="ERR_JWT_INVALID"}static get code(){return"ERR_JWT_INVALID"}}X.JWTInvalid=q4;class _4 extends x{constructor(){super(...arguments);this.code="ERR_JWK_INVALID"}static get code(){return"ERR_JWK_INVALID"}}X.JWKInvalid=_4;class K4 extends x{constructor(){super(...arguments);this.code="ERR_JWKS_INVALID"}static get code(){return"ERR_JWKS_INVALID"}}X.JWKSInvalid=K4;class W4 extends x{constructor(){super(...arguments);this.code="ERR_JWKS_NO_MATCHING_KEY",this.message="no applicable key found in the JSON Web Key Set"}static get code(){return"ERR_JWKS_NO_MATCHING_KEY"}}X.JWKSNoMatchingKey=W4;class J4 extends x{constructor(){super(...arguments);this.code="ERR_JWKS_MULTIPLE_MATCHING_KEYS",this.message="multiple matching keys found in the JSON Web Key Set"}static get code(){return"ERR_JWKS_MULTIPLE_MATCHING_KEYS"}}X.JWKSMultipleMatchingKeys=J4;class w4 extends x{constructor(){super(...arguments);this.code="ERR_JWKS_TIMEOUT",this.message="request timed out"}static get code(){return"ERR_JWKS_TIMEOUT"}}X.JWKSTimeout=w4;class $4 extends x{constructor(){super(...arguments);this.code="ERR_JWS_SIGNATURE_VERIFICATION_FAILED",this.message="signature verification failed"}static get code(){return"ERR_JWS_SIGNATURE_VERIFICATION_FAILED"}}X.JWSSignatureVerificationFailed=$4});var hc=K((Hu)=>{Object.defineProperty(Hu,"__esModule",{value:!0});Hu.default=void 0;var z3=require("crypto");Object.defineProperty(Hu,"default",{enumerable:!0,get:function(){return z3.randomFillSync}})});var Cu=K((qc)=>{Object.defineProperty(qc,"__esModule",{value:!0});qc.bitLength=void 0;var R3=C(),V3=hc();function P4(t){switch(t){case"A128GCM":case"A128GCMKW":case"A192GCM":case"A192GCMKW":case"A256GCM":case"A256GCMKW":return 96;case"A128CBC-HS256":case"A192CBC-HS384":case"A256CBC-HS512":return 128;default:throw new R3.JOSENotSupported(`Unsupported JWE Algorithm: ${t}`)}}qc.bitLength=P4;qc.default=(t)=>(0,V3.default)(new Uint8Array(P4(t)>>3))});var xn=K((vn)=>{Object.defineProperty(vn,"__esModule",{value:!0});var M3=C(),e3=Cu(),N3=(t,c)=>{if(c.length<<3!==(0,e3.bitLength)(t))throw new M3.JWEInvalid("Invalid Initialization Vector length")};vn.default=N3});var d1=K((Ln)=>{Object.defineProperty(Ln,"__esModule",{value:!0});var T3=require("crypto"),A4=require("util");Ln.default=A4.types.isKeyObject?(t)=>A4.types.isKeyObject(t):(t)=>t!=null&&t instanceof T3.KeyObject});var gn=K((mn)=>{Object.defineProperty(mn,"__esModule",{value:!0});var sn=C(),D3=d1(),b3=(t,c)=>{let u;switch(t){case"A128CBC-HS256":case"A192CBC-HS384":case"A256CBC-HS512":u=parseInt(t.slice(-3),10);break;case"A128GCM":case"A192GCM":case"A256GCM":u=parseInt(t.slice(1,4),10);break;default:throw new sn.JOSENotSupported(`Content Encryption Algorithm ${t} is not supported either by JOSE or your javascript runtime`)}if(c instanceof Uint8Array){let r=c.byteLength<<3;if(r!==u)throw new sn.JWEInvalid(`Invalid Content Encryption Key length. Expected ${u} bits, got ${r} bits`);return}if((0,D3.default)(c)&&c.type==="secret"){let r=c.symmetricKeySize<<3;if(r!==u)throw new sn.JWEInvalid(`Invalid Content Encryption Key length. Expected ${u} bits, got ${r} bits`);return}throw TypeError("Invalid Content Encryption Key type")};mn.default=b3});var y4=K((Bn)=>{Object.defineProperty(Bn,"__esModule",{value:!0});var j3=require("crypto"),p3=j3.timingSafeEqual;Bn.default=p3});var kn=K((Fn)=>{Object.defineProperty(Fn,"__esModule",{value:!0});var v3=require("crypto"),S4=M();function x3(t,c,u,r,n,f){let d=(0,S4.concat)(t,c,u,(0,S4.uint64be)(t.length<<3)),h=(0,v3.createHmac)(`sha${r}`,n);return h.update(d),h.digest().slice(0,f>>3)}Fn.default=x3});var h1=K((_c)=>{Object.defineProperty(_c,"__esModule",{value:!0});_c.isCryptoKey=void 0;var L3=require("crypto"),H4=require("util"),s3=L3.webcrypto;_c.default=s3;_c.isCryptoKey=H4.types.isCryptoKey?(t)=>H4.types.isCryptoKey(t):(t)=>!1});var v1=K((Ot)=>{Object.defineProperty(Ot,"__esModule",{value:!0});Ot.checkEncCryptoKey=Ot.checkSigCryptoKey=void 0;function L(t,c="algorithm.name"){return TypeError(`CryptoKey does not support this operation, its ${c} must be ${t}`)}function p1(t,c){return t.name===c}function Ou(t){return parseInt(t.name.slice(4),10)}function m3(t){switch(t){case"ES256":return"P-256";case"ES384":return"P-384";case"ES512":return"P-521";default:throw Error("unreachable")}}function C4(t,c){if(c.length&&!c.some((u)=>t.usages.includes(u))){let u="CryptoKey does not support this operation, its usages must include ";if(c.length>2){let r=c.pop();u+=`one of ${c.join(", ")}, or ${r}.`}else if(c.length===2)u+=`one of ${c[0]} or ${c[1]}.`;else u+=`${c[0]}.`;throw TypeError(u)}}function g3(t,c,...u){switch(c){case"HS256":case"HS384":case"HS512":{if(!p1(t.algorithm,"HMAC"))throw L("HMAC");let r=parseInt(c.slice(2),10);if(Ou(t.algorithm.hash)!==r)throw L(`SHA-${r}`,"algorithm.hash");break}case"RS256":case"RS384":case"RS512":{if(!p1(t.algorithm,"RSASSA-PKCS1-v1_5"))throw L("RSASSA-PKCS1-v1_5");let r=parseInt(c.slice(2),10);if(Ou(t.algorithm.hash)!==r)throw L(`SHA-${r}`,"algorithm.hash");break}case"PS256":case"PS384":case"PS512":{if(!p1(t.algorithm,"RSA-PSS"))throw L("RSA-PSS");let r=parseInt(c.slice(2),10);if(Ou(t.algorithm.hash)!==r)throw L(`SHA-${r}`,"algorithm.hash");break}case"EdDSA":{if(t.algorithm.name!=="Ed25519"&&t.algorithm.name!=="Ed448")throw L("Ed25519 or Ed448");break}case"ES256":case"ES384":case"ES512":{if(!p1(t.algorithm,"ECDSA"))throw L("ECDSA");let r=m3(c);if(t.algorithm.namedCurve!==r)throw L(r,"algorithm.namedCurve");break}default:throw TypeError("CryptoKey does not support this operation")}C4(t,u)}Ot.checkSigCryptoKey=g3;function B3(t,c,...u){switch(c){case"A128GCM":case"A192GCM":case"A256GCM":{if(!p1(t.algorithm,"AES-GCM"))throw L("AES-GCM");let r=parseInt(c.slice(1,4),10);if(t.algorithm.length!==r)throw L(r,"algorithm.length");break}case"A128KW":case"A192KW":case"A256KW":{if(!p1(t.algorithm,"AES-KW"))throw L("AES-KW");let r=parseInt(c.slice(1,4),10);if(t.algorithm.length!==r)throw L(r,"algorithm.length");break}case"ECDH":{switch(t.algorithm.name){case"ECDH":case"X25519":case"X448":break;default:throw L("ECDH, X25519, or X448")}break}case"PBES2-HS256+A128KW":case"PBES2-HS384+A192KW":case"PBES2-HS512+A256KW":if(!p1(t.algorithm,"PBKDF2"))throw L("PBKDF2");break;case"RSA-OAEP":case"RSA-OAEP-256":case"RSA-OAEP-384":case"RSA-OAEP-512":{if(!p1(t.algorithm,"RSA-OAEP"))throw L("RSA-OAEP");let r=parseInt(c.slice(9),10)||1;if(Ou(t.algorithm.hash)!==r)throw L(`SHA-${r}`,"algorithm.hash");break}default:throw TypeError("CryptoKey does not support this operation")}C4(t,u)}Ot.checkEncCryptoKey=B3});var q1=K((Kc)=>{Object.defineProperty(Kc,"__esModule",{value:!0});Kc.withAlg=void 0;function O4(t,c,...u){if(u.length>2){let r=u.pop();t+=`one of type ${u.join(", ")}, or ${r}.`}else if(u.length===2)t+=`one of type ${u[0]} or ${u[1]}.`;else t+=`of type ${u[0]}.`;if(c==null)t+=` Received ${c}`;else if(typeof c==="function"&&c.name)t+=` Received function ${c.name}`;else if(typeof c==="object"&&c!=null){if(c.constructor&&c.constructor.name)t+=` Received an instance of ${c.constructor.name}`}return t}Kc.default=(t,...c)=>{return O4("Key must be ",t,...c)};function F3(t,c,...u){return O4(`Key for the ${t} algorithm must be `,c,...u)}Kc.withAlg=F3});var Gu=K((Un)=>{Object.defineProperty(Un,"__esModule",{value:!0});var k3=require("crypto"),on;Un.default=(t)=>{return on||(on=new Set((0,k3.getCiphers)())),on.has(t)}});var _1=K((Wc)=>{Object.defineProperty(Wc,"__esModule",{value:!0});Wc.types=void 0;var Iu=h1(),o3=d1();Wc.default=(t)=>(0,o3.default)(t)||(0,Iu.isCryptoKey)(t);var G4=["KeyObject"];Wc.types=G4;if(globalThis.CryptoKey||(Iu.default===null||Iu.default===void 0?void 0:Iu.default.CryptoKey))G4.push("CryptoKey")});var an=K((Qn)=>{Object.defineProperty(Qn,"__esModule",{value:!0});var ln=require("crypto"),U3=xn(),l3=gn(),Q3=M(),Gt=C(),a3=y4(),t9=kn(),c9=h1(),u9=v1(),I4=d1(),r9=q1(),Z4=Gu(),n9=_1();function f9(t,c,u,r,n,f){let d=parseInt(t.slice(1,4),10);if((0,I4.default)(c))c=c.export();let h=c.subarray(d>>3),q=c.subarray(0,d>>3),_=parseInt(t.slice(-3),10),W=`aes-${d}-cbc`;if(!(0,Z4.default)(W))throw new Gt.JOSENotSupported(`alg ${t} is not supported by your javascript runtime`);let J=(0,t9.default)(f,r,u,_,q,d),$;try{$=(0,a3.default)(n,J)}catch{}if(!$)throw new Gt.JWEDecryptionFailed;let w;try{let P=(0,ln.createDecipheriv)(W,h,r);w=(0,Q3.concat)(P.update(u),P.final())}catch{}if(!w)throw new Gt.JWEDecryptionFailed;return w}function d9(t,c,u,r,n,f){let h=`aes-${parseInt(t.slice(1,4),10)}-gcm`;if(!(0,Z4.default)(h))throw new Gt.JOSENotSupported(`alg ${t} is not supported by your javascript runtime`);try{let q=(0,ln.createDecipheriv)(h,c,r,{authTagLength:16});if(q.setAuthTag(n),f.byteLength)q.setAAD(f,{plaintextLength:u.length});let _=q.update(u);return q.final(),_}catch{throw new Gt.JWEDecryptionFailed}}var h9=(t,c,u,r,n,f)=>{let d;if((0,c9.isCryptoKey)(c))(0,u9.checkEncCryptoKey)(c,t,"decrypt"),d=ln.KeyObject.from(c);else if(c instanceof Uint8Array||(0,I4.default)(c))d=c;else throw TypeError((0,r9.default)(c,...n9.types,"Uint8Array"));switch((0,l3.default)(t,d),(0,U3.default)(t,r),t){case"A128CBC-HS256":case"A192CBC-HS384":case"A256CBC-HS512":return f9(t,d,u,r,n,f);case"A128GCM":case"A192GCM":case"A256GCM":return d9(t,d,u,r,n,f);default:throw new Gt.JOSENotSupported("Unsupported JWE Content Encryption Algorithm")}};Qn.default=h9});var tf=K((It)=>{Object.defineProperty(It,"__esModule",{value:!0});It.deflate=It.inflate=void 0;var X4=require("util"),E4=require("zlib"),q9=C(),_9=(0,X4.promisify)(E4.inflateRaw),K9=(0,X4.promisify)(E4.deflateRaw),W9=(t)=>_9(t,{maxOutputLength:250000}).catch(()=>{throw new q9.JWEDecompressionFailed});It.inflate=W9;var J9=(t)=>K9(t);It.deflate=J9});var Zt=K((cf)=>{Object.defineProperty(cf,"__esModule",{value:!0});var w9=(...t)=>{let c=t.filter(Boolean);if(c.length===0||c.length===1)return!0;let u;for(let r of c){let n=Object.keys(r);if(!u||u.size===0){u=new Set(n);continue}for(let f of n){if(u.has(f))return!1;u.add(f)}}return!0};cf.default=w9});var l=K((uf)=>{Object.defineProperty(uf,"__esModule",{value:!0});function $9(t){return typeof t==="object"&&t!==null}function P9(t){if(!$9(t)||Object.prototype.toString.call(t)!=="[object Object]")return!1;if(Object.getPrototypeOf(t)===null)return!0;let c=t;while(Object.getPrototypeOf(c)!==null)c=Object.getPrototypeOf(c);return Object.getPrototypeOf(t)===c}uf.default=P9});var Xu=K((Xt)=>{Object.defineProperty(Xt,"__esModule",{value:!0});Xt.unwrap=Xt.wrap=void 0;var Y4=require("buffer"),Zu=require("crypto"),i4=C(),z4=M(),A9=h1(),y9=v1(),S9=d1(),H9=q1(),R4=Gu(),C9=_1();function V4(t,c){if(t.symmetricKeySize<<3!==parseInt(c.slice(1,4),10))throw TypeError(`Invalid key size for alg: ${c}`)}function M4(t,c,u){if((0,S9.default)(t))return t;if(t instanceof Uint8Array)return(0,Zu.createSecretKey)(t);if((0,A9.isCryptoKey)(t))return(0,y9.checkEncCryptoKey)(t,c,u),Zu.KeyObject.from(t);throw TypeError((0,H9.default)(t,...C9.types,"Uint8Array"))}var O9=(t,c,u)=>{let n=`aes${parseInt(t.slice(1,4),10)}-wrap`;if(!(0,R4.default)(n))throw new i4.JOSENotSupported(`alg ${t} is not supported either by JOSE or your javascript runtime`);let f=M4(c,t,"wrapKey");V4(f,t);let d=(0,Zu.createCipheriv)(n,f,Y4.Buffer.alloc(8,166));return(0,z4.concat)(d.update(u),d.final())};Xt.wrap=O9;var G9=(t,c,u)=>{let n=`aes${parseInt(t.slice(1,4),10)}-wrap`;if(!(0,R4.default)(n))throw new i4.JOSENotSupported(`alg ${t} is not supported either by JOSE or your javascript runtime`);let f=M4(c,t,"unwrapKey");V4(f,t);let d=(0,Zu.createDecipheriv)(n,f,Y4.Buffer.alloc(8,166));return(0,z4.concat)(d.update(u),d.final())};Xt.unwrap=G9});var Jc=K((A1)=>{Object.defineProperty(A1,"__esModule",{value:!0});A1.setCurve=A1.weakMap=void 0;var Eu=require("buffer"),e4=require("crypto"),N4=C(),I9=h1(),Z9=d1(),X9=q1(),E9=_1(),Y9=Eu.Buffer.from([42,134,72,206,61,3,1,7]),i9=Eu.Buffer.from([43,129,4,0,34]),z9=Eu.Buffer.from([43,129,4,0,35]),R9=Eu.Buffer.from([43,129,4,0,10]);A1.weakMap=new WeakMap;var V9=(t)=>{switch(t){case"prime256v1":return"P-256";case"secp384r1":return"P-384";case"secp521r1":return"P-521";case"secp256k1":return"secp256k1";default:throw new N4.JOSENotSupported("Unsupported key curve for this operation")}},T4=(t,c)=>{var u;let r;if((0,I9.isCryptoKey)(t))r=e4.KeyObject.from(t);else if((0,Z9.default)(t))r=t;else throw TypeError((0,X9.default)(t,...E9.types));if(r.type==="secret")throw TypeError('only "private" or "public" type keys can be used for this operation');switch(r.asymmetricKeyType){case"ed25519":case"ed448":return`Ed${r.asymmetricKeyType.slice(2)}`;case"x25519":case"x448":return`X${r.asymmetricKeyType.slice(1)}`;case"ec":{if(A1.weakMap.has(r))return A1.weakMap.get(r);let n=(u=r.asymmetricKeyDetails)===null||u===void 0?void 0:u.namedCurve;if(!n&&r.type==="private")n=T4((0,e4.createPublicKey)(r),!0);else if(!n){let d=r.export({format:"der",type:"spki"}),h=d[1]<128?14:15,q=d[h],_=d.slice(h+1,h+1+q);if(_.equals(Y9))n="prime256v1";else if(_.equals(i9))n="secp384r1";else if(_.equals(z9))n="secp521r1";else if(_.equals(R9))n="secp256k1";else throw new N4.JOSENotSupported("Unsupported key curve for this operation")}if(c)return n;let f=V9(n);return A1.weakMap.set(r,f),f}default:throw TypeError("Invalid asymmetric key type for this operation")}};function M9(t,c){A1.weakMap.set(t,c)}A1.setCurve=M9;A1.default=T4});var qf=K((x1)=>{Object.defineProperty(x1,"__esModule",{value:!0});x1.ecdhAllowed=x1.generateEpk=x1.deriveKey=void 0;var wc=require("crypto"),e9=require("util"),b4=Jc(),a1=M(),N9=C(),nf=h1(),D4=v1(),ff=d1(),df=q1(),hf=_1(),rf=(0,e9.promisify)(wc.generateKeyPair);async function T9(t,c,u,r,n=new Uint8Array(0),f=new Uint8Array(0)){let d;if((0,nf.isCryptoKey)(t))(0,D4.checkEncCryptoKey)(t,"ECDH"),d=wc.KeyObject.from(t);else if((0,ff.default)(t))d=t;else throw TypeError((0,df.default)(t,...hf.types));let h;if((0,nf.isCryptoKey)(c))(0,D4.checkEncCryptoKey)(c,"ECDH","deriveBits"),h=wc.KeyObject.from(c);else if((0,ff.default)(c))h=c;else throw TypeError((0,df.default)(c,...hf.types));let q=(0,a1.concat)((0,a1.lengthAndInput)(a1.encoder.encode(u)),(0,a1.lengthAndInput)(n),(0,a1.lengthAndInput)(f),(0,a1.uint32be)(r)),_=(0,wc.diffieHellman)({privateKey:h,publicKey:d});return(0,a1.concatKdf)(_,r,q)}x1.deriveKey=T9;async function D9(t){let c;if((0,nf.isCryptoKey)(t))c=wc.KeyObject.from(t);else if((0,ff.default)(t))c=t;else throw TypeError((0,df.default)(t,...hf.types));switch(c.asymmetricKeyType){case"x25519":return rf("x25519");case"x448":return rf("x448");case"ec":{let u=(0,b4.default)(c);return rf("ec",{namedCurve:u})}default:throw new N9.JOSENotSupported("Invalid or unsupported EPK")}}x1.generateEpk=D9;var b9=(t)=>["P-256","P-384","P-521","X25519","X448"].includes((0,b4.default)(t));x1.ecdhAllowed=b9});var j4=K((_f)=>{Object.defineProperty(_f,"__esModule",{value:!0});var j9=C();function p9(t){if(!(t instanceof Uint8Array)||t.length<8)throw new j9.JWEInvalid("PBES2 Salt Input must be 8 or more octets")}_f.default=p9});var Kf=K((Et)=>{Object.defineProperty(Et,"__esModule",{value:!0});Et.decrypt=Et.encrypt=void 0;var v9=require("util"),p4=require("crypto"),x9=hc(),v4=M(),L9=F(),x4=Xu(),L4=j4(),s9=h1(),m9=v1(),g9=d1(),B9=q1(),F9=_1(),s4=(0,v9.promisify)(p4.pbkdf2);function m4(t,c){if((0,g9.default)(t))return t.export();if(t instanceof Uint8Array)return t;if((0,s9.isCryptoKey)(t))return(0,m9.checkEncCryptoKey)(t,c,"deriveBits","deriveKey"),p4.KeyObject.from(t).export();throw TypeError((0,B9.default)(t,...F9.types,"Uint8Array"))}var k9=async(t,c,u,r=2048,n=(0,x9.default)(new Uint8Array(16)))=>{(0,L4.default)(n);let f=(0,v4.p2s)(t,n),d=parseInt(t.slice(13,16),10)>>3,h=m4(c,t),q=await s4(h,f,r,d,`sha${t.slice(8,11)}`);return{encryptedKey:await(0,x4.wrap)(t.slice(-6),q,u),p2c:r,p2s:(0,L9.encode)(n)}};Et.encrypt=k9;var o9=async(t,c,u,r,n)=>{(0,L4.default)(n);let f=(0,v4.p2s)(t,n),d=parseInt(t.slice(13,16),10)>>3,h=m4(c,t),q=await s4(h,f,r,d,`sha${t.slice(8,11)}`);return(0,x4.unwrap)(t.slice(-6),q,u)};Et.decrypt=o9});var $c=K((y1)=>{Object.defineProperty(y1,"__esModule",{value:!0});y1.setModulusLength=y1.weakMap=void 0;y1.weakMap=new WeakMap;var Yu=(t,c)=>{let u=t.readUInt8(1);if((u&128)===0){if(c===0)return u;return Yu(t.subarray(2+u),c-1)}let r=u&127;u=0;for(let n=0;n<r;n++){u<<=8;let f=t.readUInt8(2+n);u|=f}if(c===0)return u;return Yu(t.subarray(2+u),c-1)},U9=(t,c)=>{let u=t.readUInt8(1);if((u&128)===0)return Yu(t.subarray(2),c);let r=u&127;return Yu(t.subarray(2+r),c)},l9=(t)=>{var c,u;if(y1.weakMap.has(t))return y1.weakMap.get(t);let r=(u=(c=t.asymmetricKeyDetails)===null||c===void 0?void 0:c.modulusLength)!==null&&u!==void 0?u:U9(t.export({format:"der",type:"pkcs1"}),t.type==="private"?1:0)-1<<3;return y1.weakMap.set(t,r),r},Q9=(t,c)=>{y1.weakMap.set(t,c)};y1.setModulusLength=Q9;y1.default=(t,c)=>{if(l9(t)<2048)throw TypeError(`${c} requires key modulusLength to be 2048 bits or larger`)}});var Wf=K((Yt)=>{Object.defineProperty(Yt,"__esModule",{value:!0});Yt.decrypt=Yt.encrypt=void 0;var Pc=require("crypto"),a9=$c(),ty=h1(),cy=v1(),uy=d1(),ry=q1(),ny=_1(),g4=(t,c)=>{if(t.asymmetricKeyType!=="rsa")throw TypeError("Invalid key for this operation, its asymmetricKeyType must be rsa");(0,a9.default)(t,c)},B4=(t)=>{switch(t){case"RSA-OAEP":case"RSA-OAEP-256":case"RSA-OAEP-384":case"RSA-OAEP-512":return Pc.constants.RSA_PKCS1_OAEP_PADDING;case"RSA1_5":return Pc.constants.RSA_PKCS1_PADDING;default:return}},F4=(t)=>{switch(t){case"RSA-OAEP":return"sha1";case"RSA-OAEP-256":return"sha256";case"RSA-OAEP-384":return"sha384";case"RSA-OAEP-512":return"sha512";default:return}};function k4(t,c,...u){if((0,uy.default)(t))return t;if((0,ty.isCryptoKey)(t))return(0,cy.checkEncCryptoKey)(t,c,...u),Pc.KeyObject.from(t);throw TypeError((0,ry.default)(t,...ny.types))}var fy=(t,c,u)=>{let r=B4(t),n=F4(t),f=k4(c,t,"wrapKey","encrypt");return g4(f,t),(0,Pc.publicEncrypt)({key:f,oaepHash:n,padding:r},u)};Yt.encrypt=fy;var dy=(t,c,u)=>{let r=B4(t),n=F4(t),f=k4(c,t,"unwrapKey","decrypt");return g4(f,t),(0,Pc.privateDecrypt)({key:f,oaepHash:n,padding:r},u)};Yt.decrypt=dy});var yc=K((Ac)=>{Object.defineProperty(Ac,"__esModule",{value:!0});Ac.bitLength=void 0;var hy=C(),qy=hc();function o4(t){switch(t){case"A128GCM":return 128;case"A192GCM":return 192;case"A256GCM":case"A128CBC-HS256":return 256;case"A192CBC-HS384":return 384;case"A256CBC-HS512":return 512;default:throw new hy.JOSENotSupported(`Unsupported JWE Algorithm: ${t}`)}}Ac.bitLength=o4;Ac.default=(t)=>(0,qy.default)(new Uint8Array(o4(t)>>3))});var zu=K((K1)=>{Object.defineProperty(K1,"__esModule",{value:!0});K1.fromX509=K1.fromSPKI=K1.fromPKCS8=K1.toPKCS8=K1.toSPKI=void 0;var iu=require("crypto"),U4=require("buffer"),_y=h1(),Ky=d1(),Wy=q1(),Jy=_1(),l4=(t,c,u)=>{let r;if((0,_y.isCryptoKey)(u)){if(!u.extractable)throw TypeError("CryptoKey is not extractable");r=iu.KeyObject.from(u)}else if((0,Ky.default)(u))r=u;else throw TypeError((0,Wy.default)(u,...Jy.types));if(r.type!==t)throw TypeError(`key is not a ${t} key`);return r.export({format:"pem",type:c})},wy=(t)=>{return l4("public","spki",t)};K1.toSPKI=wy;var $y=(t)=>{return l4("private","pkcs8",t)};K1.toPKCS8=$y;var Py=(t)=>(0,iu.createPrivateKey)({key:U4.Buffer.from(t.replace(/(?:-----(?:BEGIN|END) PRIVATE KEY-----|\s)/g,""),"base64"),type:"pkcs8",format:"der"});K1.fromPKCS8=Py;var Ay=(t)=>(0,iu.createPublicKey)({key:U4.Buffer.from(t.replace(/(?:-----(?:BEGIN|END) PUBLIC KEY-----|\s)/g,""),"base64"),type:"spki",format:"der"});K1.fromSPKI=Ay;var yy=(t)=>(0,iu.createPublicKey)({key:t,type:"spki",format:"pem"});K1.fromX509=yy});var a4=K((wf)=>{Object.defineProperty(wf,"__esModule",{value:!0});var N=require("buffer"),Sy=C(),Hy=2,Cy=3,Oy=4,Gy=48,Jf=N.Buffer.from([0]),Ru=N.Buffer.from([Hy]),Iy=N.Buffer.from([Cy]),Zy=N.Buffer.from([Gy]),Xy=N.Buffer.from([Oy]),L1=(t)=>{if(t<128)return N.Buffer.from([t]);let c=N.Buffer.alloc(5);c.writeUInt32BE(t,1);let u=1;while(c[u]===0)u++;return c[u-1]=128|5-u,c.slice(u-1)},Ey=new Map([["P-256",N.Buffer.from("06 08 2A 86 48 CE 3D 03 01 07".replace(/ /g,""),"hex")],["secp256k1",N.Buffer.from("06 05 2B 81 04 00 0A".replace(/ /g,""),"hex")],["P-384",N.Buffer.from("06 05 2B 81 04 00 22".replace(/ /g,""),"hex")],["P-521",N.Buffer.from("06 05 2B 81 04 00 23".replace(/ /g,""),"hex")],["ecPublicKey",N.Buffer.from("06 07 2A 86 48 CE 3D 02 01".replace(/ /g,""),"hex")],["X25519",N.Buffer.from("06 03 2B 65 6E".replace(/ /g,""),"hex")],["X448",N.Buffer.from("06 03 2B 65 6F".replace(/ /g,""),"hex")],["Ed25519",N.Buffer.from("06 03 2B 65 70".replace(/ /g,""),"hex")],["Ed448",N.Buffer.from("06 03 2B 65 71".replace(/ /g,""),"hex")]]);class Q4{constructor(){this.length=0,this.elements=[]}oidFor(t){let c=Ey.get(t);if(!c)throw new Sy.JOSENotSupported("Invalid or unsupported OID");this.elements.push(c),this.length+=c.length}zero(){this.elements.push(Ru,N.Buffer.from([1]),Jf),this.length+=3}one(){this.elements.push(Ru,N.Buffer.from([1]),N.Buffer.from([1])),this.length+=3}unsignedInteger(t){if(t[0]&128){let c=L1(t.length+1);this.elements.push(Ru,c,Jf,t),this.length+=2+c.length+t.length}else{let c=0;while(t[c]===0&&(t[c+1]&128)===0)c++;let u=L1(t.length-c);this.elements.push(Ru,L1(t.length-c),t.slice(c)),this.length+=1+u.length+t.length-c}}octStr(t){let c=L1(t.length);this.elements.push(Xy,L1(t.length),t),this.length+=1+c.length+t.length}bitStr(t){let c=L1(t.length+1);this.elements.push(Iy,L1(t.length+1),Jf,t),this.length+=1+c.length+t.length+1}add(t){this.elements.push(t),this.length+=t.length}end(t=Zy){let c=L1(this.length);return N.Buffer.concat([t,c,...this.elements],1+c.length+this.length)}}wf.default=Q4});var Sc=K((I1)=>{Object.defineProperty(I1,"__esModule",{value:!0});I1.jwkImport=I1.jwkExport=I1.rsaPssParams=I1.oneShotCallback=void 0;var[s1,Vu]=process.versions.node.split(".").map((t)=>parseInt(t,10));I1.oneShotCallback=s1>=16||s1===15&&Vu>=13;I1.rsaPssParams=!("electron"in process.versions)&&(s1>=17||s1===16&&Vu>=9);I1.jwkExport=s1>=16||s1===15&&Vu>=9;I1.jwkImport=s1>=16||s1===15&&Vu>=12});var c_=K(($f)=>{Object.defineProperty($f,"__esModule",{value:!0});var p=require("buffer"),z1=require("crypto"),Yy=F(),iy=C(),t_=Jc(),zy=$c(),S1=a4(),Ry=Sc(),Vy=(t)=>{if(Ry.jwkImport&&t.kty!=="oct")return t.d?(0,z1.createPrivateKey)({format:"jwk",key:t}):(0,z1.createPublicKey)({format:"jwk",key:t});switch(t.kty){case"oct":return(0,z1.createSecretKey)((0,Yy.decode)(t.k));case"RSA":{let c=new S1.default,u=t.d!==void 0,r=p.Buffer.from(t.n,"base64"),n=p.Buffer.from(t.e,"base64");if(u)c.zero(),c.unsignedInteger(r),c.unsignedInteger(n),c.unsignedInteger(p.Buffer.from(t.d,"base64")),c.unsignedInteger(p.Buffer.from(t.p,"base64")),c.unsignedInteger(p.Buffer.from(t.q,"base64")),c.unsignedInteger(p.Buffer.from(t.dp,"base64")),c.unsignedInteger(p.Buffer.from(t.dq,"base64")),c.unsignedInteger(p.Buffer.from(t.qi,"base64"));else c.unsignedInteger(r),c.unsignedInteger(n);let d={key:c.end(),format:"der",type:"pkcs1"},h=u?(0,z1.createPrivateKey)(d):(0,z1.createPublicKey)(d);return(0,zy.setModulusLength)(h,r.length<<3),h}case"EC":{let c=new S1.default,u=t.d!==void 0,r=p.Buffer.concat([p.Buffer.alloc(1,4),p.Buffer.from(t.x,"base64"),p.Buffer.from(t.y,"base64")]);if(u){c.zero();let h=new S1.default;h.oidFor("ecPublicKey"),h.oidFor(t.crv),c.add(h.end());let q=new S1.default;q.one(),q.octStr(p.Buffer.from(t.d,"base64"));let _=new S1.default;_.bitStr(r);let W=_.end(p.Buffer.from([161]));q.add(W);let J=q.end(),$=new S1.default;$.add(J);let w=$.end(p.Buffer.from([4]));c.add(w);let P=c.end(),A=(0,z1.createPrivateKey)({key:P,format:"der",type:"pkcs8"});return(0,t_.setCurve)(A,t.crv),A}let n=new S1.default;n.oidFor("ecPublicKey"),n.oidFor(t.crv),c.add(n.end()),c.bitStr(r);let f=c.end(),d=(0,z1.createPublicKey)({key:f,format:"der",type:"spki"});return(0,t_.setCurve)(d,t.crv),d}case"OKP":{let c=new S1.default;if(t.d!==void 0){c.zero();let f=new S1.default;f.oidFor(t.crv),c.add(f.end());let d=new S1.default;d.octStr(p.Buffer.from(t.d,"base64"));let h=d.end(p.Buffer.from([4]));c.add(h);let q=c.end();return(0,z1.createPrivateKey)({key:q,format:"der",type:"pkcs8"})}let r=new S1.default;r.oidFor(t.crv),c.add(r.end()),c.bitStr(p.Buffer.from(t.x,"base64"));let n=c.end();return(0,z1.createPublicKey)({key:n,format:"der",type:"spki"})}default:throw new iy.JOSENotSupported('Invalid or unsupported JWK "kty" (Key Type) Parameter value')}};$f.default=Vy});var Hc=K((Z1)=>{Object.defineProperty(Z1,"__esModule",{value:!0});Z1.importJWK=Z1.importPKCS8=Z1.importX509=Z1.importSPKI=void 0;var My=F(),Pf=zu(),u_=c_(),r_=C(),ey=l();async function Ny(t,c,u){if(typeof t!=="string"||t.indexOf("-----BEGIN PUBLIC KEY-----")!==0)throw TypeError('"spki" must be SPKI formatted string');return(0,Pf.fromSPKI)(t,c,u)}Z1.importSPKI=Ny;async function Ty(t,c,u){if(typeof t!=="string"||t.indexOf("-----BEGIN CERTIFICATE-----")!==0)throw TypeError('"x509" must be X.509 formatted string');return(0,Pf.fromX509)(t,c,u)}Z1.importX509=Ty;async function Dy(t,c,u){if(typeof t!=="string"||t.indexOf("-----BEGIN PRIVATE KEY-----")!==0)throw TypeError('"pkcs8" must be PKCS#8 formatted string');return(0,Pf.fromPKCS8)(t,c,u)}Z1.importPKCS8=Dy;async function by(t,c,u){var r;if(!(0,ey.default)(t))throw TypeError("JWK must be an object");switch(c||(c=t.alg),t.kty){case"oct":if(typeof t.k!=="string"||!t.k)throw TypeError('missing "k" (Key Value) Parameter value');if(u!==null&&u!==void 0||(u=t.ext!==!0),u)return(0,u_.default)({...t,alg:c,ext:(r=t.ext)!==null&&r!==void 0?r:!1});return(0,My.decode)(t.k);case"RSA":if(t.oth!==void 0)throw new r_.JOSENotSupported('RSA JWK "oth" (Other Primes Info) Parameter value is not supported');case"EC":case"OKP":return(0,u_.default)({...t,alg:c});default:throw new r_.JOSENotSupported('Unsupported "kty" (Key Type) Parameter value')}}Z1.importJWK=by});var Cc=K((Af)=>{Object.defineProperty(Af,"__esModule",{value:!0});var n_=q1(),X1=_1(),jy=(t,c)=>{if(c instanceof Uint8Array)return;if(!(0,X1.default)(c))throw TypeError((0,n_.withAlg)(t,c,...X1.types,"Uint8Array"));if(c.type!=="secret")throw TypeError(`${X1.types.join(" or ")} instances for symmetric algorithms must be of type "secret"`)},py=(t,c,u)=>{if(!(0,X1.default)(c))throw TypeError((0,n_.withAlg)(t,c,...X1.types));if(c.type==="secret")throw TypeError(`${X1.types.join(" or ")} instances for asymmetric algorithms must not be of type "secret"`);if(u==="sign"&&c.type==="public")throw TypeError(`${X1.types.join(" or ")} instances for asymmetric algorithm signing must be of type "private"`);if(u==="decrypt"&&c.type==="public")throw TypeError(`${X1.types.join(" or ")} instances for asymmetric algorithm decryption must be of type "private"`);if(c.algorithm&&u==="verify"&&c.type==="private")throw TypeError(`${X1.types.join(" or ")} instances for asymmetric algorithm verifying must be of type "public"`);if(c.algorithm&&u==="encrypt"&&c.type==="private")throw TypeError(`${X1.types.join(" or ")} instances for asymmetric algorithm encryption must be of type "public"`)},vy=(t,c,u)=>{if(t.startsWith("HS")||t==="dir"||t.startsWith("PBES2")||/^A\d{3}(?:GCM)?KW$/.test(t))jy(t,c);else py(t,c,u)};Af.default=vy});var Cf=K((Hf)=>{Object.defineProperty(Hf,"__esModule",{value:!0});var yf=require("crypto"),xy=xn(),Ly=gn(),sy=M(),my=kn(),gy=h1(),By=v1(),f_=d1(),Fy=q1(),Sf=C(),d_=Gu(),ky=_1();function oy(t,c,u,r,n){let f=parseInt(t.slice(1,4),10);if((0,f_.default)(u))u=u.export();let d=u.subarray(f>>3),h=u.subarray(0,f>>3),q=`aes-${f}-cbc`;if(!(0,d_.default)(q))throw new Sf.JOSENotSupported(`alg ${t} is not supported by your javascript runtime`);let _=(0,yf.createCipheriv)(q,d,r),W=(0,sy.concat)(_.update(c),_.final()),J=parseInt(t.slice(-3),10),$=(0,my.default)(n,r,W,J,h,f);return{ciphertext:W,tag:$}}function Uy(t,c,u,r,n){let d=`aes-${parseInt(t.slice(1,4),10)}-gcm`;if(!(0,d_.default)(d))throw new Sf.JOSENotSupported(`alg ${t} is not supported by your javascript runtime`);let h=(0,yf.createCipheriv)(d,u,r,{authTagLength:16});if(n.byteLength)h.setAAD(n,{plaintextLength:c.length});let q=h.update(c);h.final();let _=h.getAuthTag();return{ciphertext:q,tag:_}}var ly=(t,c,u,r,n)=>{let f;if((0,gy.isCryptoKey)(u))(0,By.checkEncCryptoKey)(u,t,"encrypt"),f=yf.KeyObject.from(u);else if(u instanceof Uint8Array||(0,f_.default)(u))f=u;else throw TypeError((0,Fy.default)(u,...ky.types,"Uint8Array"));switch((0,Ly.default)(t,f),(0,xy.default)(t,r),t){case"A128CBC-HS256":case"A192CBC-HS384":case"A256CBC-HS512":return oy(t,c,f,r,n);case"A128GCM":case"A192GCM":case"A256GCM":return Uy(t,c,f,r,n);default:throw new Sf.JOSENotSupported("Unsupported JWE Content Encryption Algorithm")}};Hf.default=ly});var Of=K((it)=>{Object.defineProperty(it,"__esModule",{value:!0});it.unwrap=it.wrap=void 0;var Qy=Cf(),ay=an(),tS=Cu(),h_=F();async function cS(t,c,u,r){let n=t.slice(0,7);r||(r=(0,tS.default)(n));let{ciphertext:f,tag:d}=await(0,Qy.default)(n,u,c,r,new Uint8Array(0));return{encryptedKey:f,iv:(0,h_.encode)(r),tag:(0,h_.encode)(d)}}it.wrap=cS;async function uS(t,c,u,r,n){let f=t.slice(0,7);return(0,ay.default)(f,c,u,r,n,new Uint8Array(0))}it.unwrap=uS});var K_=K((Gf)=>{Object.defineProperty(Gf,"__esModule",{value:!0});var q_=Xu(),__=qf(),rS=Kf(),nS=Wf(),Oc=F(),e=C(),fS=yc(),dS=Hc(),hS=Cc(),qS=l(),_S=Of();async function KS(t,c,u,r,n){switch((0,hS.default)(t,c,"decrypt"),t){case"dir":{if(u!==void 0)throw new e.JWEInvalid("Encountered unexpected JWE Encrypted Key");return c}case"ECDH-ES":if(u!==void 0)throw new e.JWEInvalid("Encountered unexpected JWE Encrypted Key");case"ECDH-ES+A128KW":case"ECDH-ES+A192KW":case"ECDH-ES+A256KW":{if(!(0,qS.default)(r.epk))throw new e.JWEInvalid('JOSE Header "epk" (Ephemeral Public Key) missing or invalid');if(!__.ecdhAllowed(c))throw new e.JOSENotSupported("ECDH with the provided key is not allowed or not supported by your javascript runtime");let f=await(0,dS.importJWK)(r.epk,t),d,h;if(r.apu!==void 0){if(typeof r.apu!=="string")throw new e.JWEInvalid('JOSE Header "apu" (Agreement PartyUInfo) invalid');try{d=(0,Oc.decode)(r.apu)}catch{throw new e.JWEInvalid("Failed to base64url decode the apu")}}if(r.apv!==void 0){if(typeof r.apv!=="string")throw new e.JWEInvalid('JOSE Header "apv" (Agreement PartyVInfo) invalid');try{h=(0,Oc.decode)(r.apv)}catch{throw new e.JWEInvalid("Failed to base64url decode the apv")}}let q=await __.deriveKey(f,c,t==="ECDH-ES"?r.enc:t,t==="ECDH-ES"?(0,fS.bitLength)(r.enc):parseInt(t.slice(-5,-2),10),d,h);if(t==="ECDH-ES")return q;if(u===void 0)throw new e.JWEInvalid("JWE Encrypted Key missing");return(0,q_.unwrap)(t.slice(-6),q,u)}case"RSA1_5":case"RSA-OAEP":case"RSA-OAEP-256":case"RSA-OAEP-384":case"RSA-OAEP-512":{if(u===void 0)throw new e.JWEInvalid("JWE Encrypted Key missing");return(0,nS.decrypt)(t,c,u)}case"PBES2-HS256+A128KW":case"PBES2-HS384+A192KW":case"PBES2-HS512+A256KW":{if(u===void 0)throw new e.JWEInvalid("JWE Encrypted Key missing");if(typeof r.p2c!=="number")throw new e.JWEInvalid('JOSE Header "p2c" (PBES2 Count) missing or invalid');let f=(n===null||n===void 0?void 0:n.maxPBES2Count)||1e4;if(r.p2c>f)throw new e.JWEInvalid('JOSE Header "p2c" (PBES2 Count) out is of acceptable bounds');if(typeof r.p2s!=="string")throw new e.JWEInvalid('JOSE Header "p2s" (PBES2 Salt) missing or invalid');let d;try{d=(0,Oc.decode)(r.p2s)}catch{throw new e.JWEInvalid("Failed to base64url decode the p2s")}return(0,rS.decrypt)(t,c,u,r.p2c,d)}case"A128KW":case"A192KW":case"A256KW":{if(u===void 0)throw new e.JWEInvalid("JWE Encrypted Key missing");return(0,q_.unwrap)(t,c,u)}case"A128GCMKW":case"A192GCMKW":case"A256GCMKW":{if(u===void 0)throw new e.JWEInvalid("JWE Encrypted Key missing");if(typeof r.iv!=="string")throw new e.JWEInvalid('JOSE Header "iv" (Initialization Vector) missing or invalid');if(typeof r.tag!=="string")throw new e.JWEInvalid('JOSE Header "tag" (Authentication Tag) missing or invalid');let f;try{f=(0,Oc.decode)(r.iv)}catch{throw new e.JWEInvalid("Failed to base64url decode the iv")}let d;try{d=(0,Oc.decode)(r.tag)}catch{throw new e.JWEInvalid("Failed to base64url decode the tag")}return(0,_S.unwrap)(t,c,u,f,d)}default:throw new e.JOSENotSupported('Invalid or unsupported "alg" (JWE Algorithm) header value')}}Gf.default=KS});var zt=K((If)=>{Object.defineProperty(If,"__esModule",{value:!0});var WS=C();function JS(t,c,u,r,n){if(n.crit!==void 0&&r.crit===void 0)throw new t('"crit" (Critical) Header Parameter MUST be integrity protected');if(!r||r.crit===void 0)return new Set;if(!Array.isArray(r.crit)||r.crit.length===0||r.crit.some((d)=>typeof d!=="string"||d.length===0))throw new t('"crit" (Critical) Header Parameter MUST be an array of non-empty strings when present');let f;if(u!==void 0)f=new Map([...Object.entries(u),...c.entries()]);else f=c;for(let d of r.crit){if(!f.has(d))throw new WS.JOSENotSupported(`Extension Header Parameter "${d}" is not recognized`);if(n[d]===void 0)throw new t(`Extension Header Parameter "${d}" is missing`);else if(f.get(d)&&r[d]===void 0)throw new t(`Extension Header Parameter "${d}" MUST be integrity protected`)}return new Set(r.crit)}If.default=JS});var Xf=K((Zf)=>{Object.defineProperty(Zf,"__esModule",{value:!0});var wS=(t,c)=>{if(c!==void 0&&(!Array.isArray(c)||c.some((u)=>typeof u!=="string")))throw TypeError(`"${t}" option must be an array of strings`);if(!c)return;return new Set(c)};Zf.default=wS});var eu=K((Mu)=>{Object.defineProperty(Mu,"__esModule",{value:!0});Mu.flattenedDecrypt=void 0;var Rt=F(),$S=an(),PS=tf(),z=C(),AS=Zt(),Ef=l(),yS=K_(),Gc=M(),SS=yc(),HS=zt(),W_=Xf();async function CS(t,c,u){var r;if(!(0,Ef.default)(t))throw new z.JWEInvalid("Flattened JWE must be an object");if(t.protected===void 0&&t.header===void 0&&t.unprotected===void 0)throw new z.JWEInvalid("JOSE Header missing");if(typeof t.iv!=="string")throw new z.JWEInvalid("JWE Initialization Vector missing or incorrect type");if(typeof t.ciphertext!=="string")throw new z.JWEInvalid("JWE Ciphertext missing or incorrect type");if(typeof t.tag!=="string")throw new z.JWEInvalid("JWE Authentication Tag missing or incorrect type");if(t.protected!==void 0&&typeof t.protected!=="string")throw new z.JWEInvalid("JWE Protected Header incorrect type");if(t.encrypted_key!==void 0&&typeof t.encrypted_key!=="string")throw new z.JWEInvalid("JWE Encrypted Key incorrect type");if(t.aad!==void 0&&typeof t.aad!=="string")throw new z.JWEInvalid("JWE AAD incorrect type");if(t.header!==void 0&&!(0,Ef.default)(t.header))throw new z.JWEInvalid("JWE Shared Unprotected Header incorrect type");if(t.unprotected!==void 0&&!(0,Ef.default)(t.unprotected))throw new z.JWEInvalid("JWE Per-Recipient Unprotected Header incorrect type");let n;if(t.protected)try{let D=(0,Rt.decode)(t.protected);n=JSON.parse(Gc.decoder.decode(D))}catch{throw new z.JWEInvalid("JWE Protected Header is invalid")}if(!(0,AS.default)(n,t.header,t.unprotected))throw new z.JWEInvalid("JWE Protected, JWE Unprotected Header, and JWE Per-Recipient Unprotected Header Parameter names must be disjoint");let f={...n,...t.header,...t.unprotected};if((0,HS.default)(z.JWEInvalid,new Map,u===null||u===void 0?void 0:u.crit,n,f),f.zip!==void 0){if(!n||!n.zip)throw new z.JWEInvalid('JWE "zip" (Compression Algorithm) Header MUST be integrity protected');if(f.zip!=="DEF")throw new z.JOSENotSupported('Unsupported JWE "zip" (Compression Algorithm) Header Parameter value')}let{alg:d,enc:h}=f;if(typeof d!=="string"||!d)throw new z.JWEInvalid("missing JWE Algorithm (alg) in JWE Header");if(typeof h!=="string"||!h)throw new z.JWEInvalid("missing JWE Encryption Algorithm (enc) in JWE Header");let q=u&&(0,W_.default)("keyManagementAlgorithms",u.keyManagementAlgorithms),_=u&&(0,W_.default)("contentEncryptionAlgorithms",u.contentEncryptionAlgorithms);if(q&&!q.has(d))throw new z.JOSEAlgNotAllowed('"alg" (Algorithm) Header Parameter not allowed');if(_&&!_.has(h))throw new z.JOSEAlgNotAllowed('"enc" (Encryption Algorithm) Header Parameter not allowed');let W;if(t.encrypted_key!==void 0)try{W=(0,Rt.decode)(t.encrypted_key)}catch{throw new z.JWEInvalid("Failed to base64url decode the encrypted_key")}let J=!1;if(typeof c==="function")c=await c(n,t),J=!0;let $;try{$=await(0,yS.default)(d,c,W,f,u)}catch(D){if(D instanceof TypeError||D instanceof z.JWEInvalid||D instanceof z.JOSENotSupported)throw D;$=(0,SS.default)(h)}let w,P;try{w=(0,Rt.decode)(t.iv)}catch{throw new z.JWEInvalid("Failed to base64url decode the iv")}try{P=(0,Rt.decode)(t.tag)}catch{throw new z.JWEInvalid("Failed to base64url decode the tag")}let A=Gc.encoder.encode((r=t.protected)!==null&&r!==void 0?r:""),G;if(t.aad!==void 0)G=(0,Gc.concat)(A,Gc.encoder.encode("."),Gc.encoder.encode(t.aad));else G=A;let Z;try{Z=(0,Rt.decode)(t.ciphertext)}catch{throw new z.JWEInvalid("Failed to base64url decode the ciphertext")}let E=await(0,$S.default)(h,$,Z,w,P,G);if(f.zip==="DEF")E=await((u===null||u===void 0?void 0:u.inflateRaw)||PS.inflate)(E);let O={plaintext:E};if(t.protected!==void 0)O.protectedHeader=n;if(t.aad!==void 0)try{O.additionalAuthenticatedData=(0,Rt.decode)(t.aad)}catch{throw new z.JWEInvalid("Failed to base64url decode the aad")}if(t.unprotected!==void 0)O.sharedUnprotectedHeader=t.unprotected;if(t.header!==void 0)O.unprotectedHeader=t.header;if(J)return{...O,key:c};return O}Mu.flattenedDecrypt=CS});var Yf=K((Nu)=>{Object.defineProperty(Nu,"__esModule",{value:!0});Nu.compactDecrypt=void 0;var OS=eu(),J_=C(),GS=M();async function IS(t,c,u){if(t instanceof Uint8Array)t=GS.decoder.decode(t);if(typeof t!=="string")throw new J_.JWEInvalid("Compact JWE must be a string or Uint8Array");let{0:r,1:n,2:f,3:d,4:h,length:q}=t.split(".");if(q!==5)throw new J_.JWEInvalid("Invalid Compact JWE");let _=await(0,OS.flattenedDecrypt)({ciphertext:d,iv:f||void 0,protected:r||void 0,tag:h||void 0,encrypted_key:n||void 0},c,u),W={plaintext:_.plaintext,protectedHeader:_.protectedHeader};if(typeof c==="function")return{...W,key:_.key};return W}Nu.compactDecrypt=IS});var $_=K((Du)=>{Object.defineProperty(Du,"__esModule",{value:!0});Du.generalDecrypt=void 0;var ZS=eu(),Tu=C(),w_=l();async function XS(t,c,u){if(!(0,w_.default)(t))throw new Tu.JWEInvalid("General JWE must be an object");if(!Array.isArray(t.recipients)||!t.recipients.every(w_.default))throw new Tu.JWEInvalid("JWE Recipients missing or incorrect type");if(!t.recipients.length)throw new Tu.JWEInvalid("JWE Recipients has no members");for(let r of t.recipients)try{return await(0,ZS.flattenedDecrypt)({aad:t.aad,ciphertext:t.ciphertext,encrypted_key:r.encrypted_key,header:r.header,iv:t.iv,protected:t.protected,tag:t.tag,unprotected:t.unprotected},c,u)}catch{}throw new Tu.JWEDecryptionFailed}Du.generalDecrypt=XS});var A_=K((zf)=>{Object.defineProperty(zf,"__esModule",{value:!0});var ES=2,YS=48;class P_{constructor(t){if(t[0]!==YS)throw TypeError();if(this.buffer=t,this.offset=1,this.decodeLength()!==t.length-this.offset)throw TypeError()}decodeLength(){let t=this.buffer[this.offset++];if(t&128){let c=t&-129;t=0;for(let u=0;u<c;u++)t=t<<8|this.buffer[this.offset+u];this.offset+=c}return t}unsignedInteger(){if(this.buffer[this.offset++]!==ES)throw TypeError();let t=this.decodeLength();if(this.buffer[this.offset]===0)this.offset++,t--;let c=this.buffer.slice(this.offset,this.offset+t);return this.offset+=t,c}end(){if(this.offset!==this.buffer.length)throw TypeError()}}zf.default=P_});var y_=K((Vf)=>{Object.defineProperty(Vf,"__esModule",{value:!0});var bu=require("crypto"),s=F(),iS=A_(),ju=C(),Rf=Jc(),zS=h1(),RS=d1(),VS=q1(),MS=_1(),eS=Sc(),pu=(t)=>{let c;if((0,zS.isCryptoKey)(t)){if(!t.extractable)throw TypeError("CryptoKey is not extractable");c=bu.KeyObject.from(t)}else if((0,RS.default)(t))c=t;else if(t instanceof Uint8Array)return{kty:"oct",k:(0,s.encode)(t)};else throw TypeError((0,VS.default)(t,...MS.types,"Uint8Array"));if(eS.jwkExport){if(c.type!=="secret"&&!["rsa","ec","ed25519","x25519","ed448","x448"].includes(c.asymmetricKeyType))throw new ju.JOSENotSupported("Unsupported key asymmetricKeyType");return c.export({format:"jwk"})}switch(c.type){case"secret":return{kty:"oct",k:(0,s.encode)(c.export())};case"private":case"public":switch(c.asymmetricKeyType){case"rsa":{let u=c.export({format:"der",type:"pkcs1"}),r=new iS.default(u);if(c.type==="private")r.unsignedInteger();let n=(0,s.encode)(r.unsignedInteger()),f=(0,s.encode)(r.unsignedInteger()),d;if(c.type==="private")d={d:(0,s.encode)(r.unsignedInteger()),p:(0,s.encode)(r.unsignedInteger()),q:(0,s.encode)(r.unsignedInteger()),dp:(0,s.encode)(r.unsignedInteger()),dq:(0,s.encode)(r.unsignedInteger()),qi:(0,s.encode)(r.unsignedInteger())};return r.end(),{kty:"RSA",n,e:f,...d}}case"ec":{let u=(0,Rf.default)(c),r,n,f;switch(u){case"secp256k1":r=64,n=33,f=-1;break;case"P-256":r=64,n=36,f=-1;break;case"P-384":r=96,n=35,f=-3;break;case"P-521":r=132,n=35,f=-3;break;default:throw new ju.JOSENotSupported("Unsupported curve")}if(c.type==="public"){let h=c.export({type:"spki",format:"der"});return{kty:"EC",crv:u,x:(0,s.encode)(h.subarray(-r,-r/2)),y:(0,s.encode)(h.subarray(-r/2))}}let d=c.export({type:"pkcs8",format:"der"});if(d.length<100)n+=f;return{...pu((0,bu.createPublicKey)(c)),d:(0,s.encode)(d.subarray(n,n+r/2))}}case"ed25519":case"x25519":{let u=(0,Rf.default)(c);if(c.type==="public"){let n=c.export({type:"spki",format:"der"});return{kty:"OKP",crv:u,x:(0,s.encode)(n.subarray(-32))}}let r=c.export({type:"pkcs8",format:"der"});return{...pu((0,bu.createPublicKey)(c)),d:(0,s.encode)(r.subarray(-32))}}case"ed448":case"x448":{let u=(0,Rf.default)(c);if(c.type==="public"){let n=c.export({type:"spki",format:"der"});return{kty:"OKP",crv:u,x:(0,s.encode)(n.subarray(u==="Ed448"?-57:-56))}}let r=c.export({type:"pkcs8",format:"der"});return{...pu((0,bu.createPublicKey)(c)),d:(0,s.encode)(r.subarray(u==="Ed448"?-57:-56))}}default:throw new ju.JOSENotSupported("Unsupported key asymmetricKeyType")}default:throw new ju.JOSENotSupported("Unsupported key type")}};Vf.default=pu});var Mf=K((m1)=>{Object.defineProperty(m1,"__esModule",{value:!0});m1.exportJWK=m1.exportPKCS8=m1.exportSPKI=void 0;var NS=zu(),TS=zu(),DS=y_();async function bS(t){return(0,NS.toSPKI)(t)}m1.exportSPKI=bS;async function jS(t){return(0,TS.toPKCS8)(t)}m1.exportPKCS8=jS;async function pS(t){return(0,DS.default)(t)}m1.exportJWK=pS});var Tf=K((Nf)=>{Object.defineProperty(Nf,"__esModule",{value:!0});var S_=Xu(),ef=qf(),vS=Kf(),xS=Wf(),H_=F(),Vt=yc(),C_=C(),LS=Mf(),sS=Cc(),mS=Of();async function gS(t,c,u,r,n={}){let f,d,h;switch((0,sS.default)(t,u,"encrypt"),t){case"dir":{h=u;break}case"ECDH-ES":case"ECDH-ES+A128KW":case"ECDH-ES+A192KW":case"ECDH-ES+A256KW":{if(!ef.ecdhAllowed(u))throw new C_.JOSENotSupported("ECDH with the provided key is not allowed or not supported by your javascript runtime");let{apu:q,apv:_}=n,{epk:W}=n;W||(W=(await ef.generateEpk(u)).privateKey);let{x:J,y:$,crv:w,kty:P}=await(0,LS.exportJWK)(W),A=await ef.deriveKey(u,W,t==="ECDH-ES"?c:t,t==="ECDH-ES"?(0,Vt.bitLength)(c):parseInt(t.slice(-5,-2),10),q,_);if(d={epk:{x:J,crv:w,kty:P}},P==="EC")d.epk.y=$;if(q)d.apu=(0,H_.encode)(q);if(_)d.apv=(0,H_.encode)(_);if(t==="ECDH-ES"){h=A;break}h=r||(0,Vt.default)(c);let G=t.slice(-6);f=await(0,S_.wrap)(G,A,h);break}case"RSA1_5":case"RSA-OAEP":case"RSA-OAEP-256":case"RSA-OAEP-384":case"RSA-OAEP-512":{h=r||(0,Vt.default)(c),f=await(0,xS.encrypt)(t,u,h);break}case"PBES2-HS256+A128KW":case"PBES2-HS384+A192KW":case"PBES2-HS512+A256KW":{h=r||(0,Vt.default)(c);let{p2c:q,p2s:_}=n;({encryptedKey:f,...d}=await(0,vS.encrypt)(t,u,h,q,_));break}case"A128KW":case"A192KW":case"A256KW":{h=r||(0,Vt.default)(c),f=await(0,S_.wrap)(t,u,h);break}case"A128GCMKW":case"A192GCMKW":case"A256GCMKW":{h=r||(0,Vt.default)(c);let{iv:q}=n;({encryptedKey:f,...d}=await(0,mS.wrap)(t,u,h,q));break}default:throw new C_.JOSENotSupported('Invalid or unsupported "alg" (JWE Algorithm) header value')}return{cek:h,encryptedKey:f,parameters:d}}Nf.default=gS});var vu=K((ct)=>{Object.defineProperty(ct,"__esModule",{value:!0});ct.FlattenedEncrypt=ct.unprotected=void 0;var Mt=F(),O_=Cf(),BS=tf(),FS=Cu(),kS=Tf(),tt=C(),oS=Zt(),et=M(),US=zt();ct.unprotected=Symbol();class G_{constructor(t){if(!(t instanceof Uint8Array))throw TypeError("plaintext must be an instance of Uint8Array");this._plaintext=t}setKeyManagementParameters(t){if(this._keyManagementParameters)throw TypeError("setKeyManagementParameters can only be called once");return this._keyManagementParameters=t,this}setProtectedHeader(t){if(this._protectedHeader)throw TypeError("setProtectedHeader can only be called once");return this._protectedHeader=t,this}setSharedUnprotectedHeader(t){if(this._sharedUnprotectedHeader)throw TypeError("setSharedUnprotectedHeader can only be called once");return this._sharedUnprotectedHeader=t,this}setUnprotectedHeader(t){if(this._unprotectedHeader)throw TypeError("setUnprotectedHeader can only be called once");return this._unprotectedHeader=t,this}setAdditionalAuthenticatedData(t){return this._aad=t,this}setContentEncryptionKey(t){if(this._cek)throw TypeError("setContentEncryptionKey can only be called once");return this._cek=t,this}setInitializationVector(t){if(this._iv)throw TypeError("setInitializationVector can only be called once");return this._iv=t,this}async encrypt(t,c){if(!this._protectedHeader&&!this._unprotectedHeader&&!this._sharedUnprotectedHeader)throw new tt.JWEInvalid("either setProtectedHeader, setUnprotectedHeader, or sharedUnprotectedHeader must be called before #encrypt()");if(!(0,oS.default)(this._protectedHeader,this._unprotectedHeader,this._sharedUnprotectedHeader))throw new tt.JWEInvalid("JWE Protected, JWE Shared Unprotected and JWE Per-Recipient Header Parameter names must be disjoint");let u={...this._protectedHeader,...this._unprotectedHeader,...this._sharedUnprotectedHeader};if((0,US.default)(tt.JWEInvalid,new Map,c===null||c===void 0?void 0:c.crit,this._protectedHeader,u),u.zip!==void 0){if(!this._protectedHeader||!this._protectedHeader.zip)throw new tt.JWEInvalid('JWE "zip" (Compression Algorithm) Header MUST be integrity protected');if(u.zip!=="DEF")throw new tt.JOSENotSupported('Unsupported JWE "zip" (Compression Algorithm) Header Parameter value')}let{alg:r,enc:n}=u;if(typeof r!=="string"||!r)throw new tt.JWEInvalid('JWE "alg" (Algorithm) Header Parameter missing or invalid');if(typeof n!=="string"||!n)throw new tt.JWEInvalid('JWE "enc" (Encryption Algorithm) Header Parameter missing or invalid');let f;if(r==="dir"){if(this._cek)throw TypeError("setContentEncryptionKey cannot be called when using Direct Encryption")}else if(r==="ECDH-ES"){if(this._cek)throw TypeError("setContentEncryptionKey cannot be called when using Direct Key Agreement")}let d;{let w;if({cek:d,encryptedKey:f,parameters:w}=await(0,kS.default)(r,n,t,this._cek,this._keyManagementParameters),w)if(c&&ct.unprotected in c)if(!this._unprotectedHeader)this.setUnprotectedHeader(w);else this._unprotectedHeader={...this._unprotectedHeader,...w};else if(!this._protectedHeader)this.setProtectedHeader(w);else this._protectedHeader={...this._protectedHeader,...w}}this._iv||(this._iv=(0,FS.default)(n));let h,q,_;if(this._protectedHeader)q=et.encoder.encode((0,Mt.encode)(JSON.stringify(this._protectedHeader)));else q=et.encoder.encode("");if(this._aad)_=(0,Mt.encode)(this._aad),h=(0,et.concat)(q,et.encoder.encode("."),et.encoder.encode(_));else h=q;let W,J;if(u.zip==="DEF"){let w=await((c===null||c===void 0?void 0:c.deflateRaw)||BS.deflate)(this._plaintext);({ciphertext:W,tag:J}=await(0,O_.default)(n,w,d,this._iv,h))}else({ciphertext:W,tag:J}=await(0,O_.default)(n,this._plaintext,d,this._iv,h));let $={ciphertext:(0,Mt.encode)(W),iv:(0,Mt.encode)(this._iv),tag:(0,Mt.encode)(J)};if(f)$.encrypted_key=(0,Mt.encode)(f);if(_)$.aad=_;if(this._protectedHeader)$.protected=et.decoder.decode(q);if(this._sharedUnprotectedHeader)$.unprotected=this._sharedUnprotectedHeader;if(this._unprotectedHeader)$.header=this._unprotectedHeader;return $}}ct.FlattenedEncrypt=G_});var X_=K((xu)=>{Object.defineProperty(xu,"__esModule",{value:!0});xu.GeneralEncrypt=void 0;var Df=vu(),g1=C(),lS=yc(),QS=Zt(),aS=Tf(),tH=F(),cH=zt();class I_{constructor(t,c,u){this.parent=t,this.key=c,this.options=u}setUnprotectedHeader(t){if(this.unprotectedHeader)throw TypeError("setUnprotectedHeader can only be called once");return this.unprotectedHeader=t,this}addRecipient(...t){return this.parent.addRecipient(...t)}encrypt(...t){return this.parent.encrypt(...t)}done(){return this.parent}}class Z_{constructor(t){this._recipients=[],this._plaintext=t}addRecipient(t,c){let u=new I_(this,t,{crit:c===null||c===void 0?void 0:c.crit});return this._recipients.push(u),u}setProtectedHeader(t){if(this._protectedHeader)throw TypeError("setProtectedHeader can only be called once");return this._protectedHeader=t,this}setSharedUnprotectedHeader(t){if(this._unprotectedHeader)throw TypeError("setSharedUnprotectedHeader can only be called once");return this._unprotectedHeader=t,this}setAdditionalAuthenticatedData(t){return this._aad=t,this}async encrypt(t){var c,u,r;if(!this._recipients.length)throw new g1.JWEInvalid("at least one recipient must be added");if(t={deflateRaw:t===null||t===void 0?void 0:t.deflateRaw},this._recipients.length===1){let[h]=this._recipients,q=await new Df.FlattenedEncrypt(this._plaintext).setAdditionalAuthenticatedData(this._aad).setProtectedHeader(this._protectedHeader).setSharedUnprotectedHeader(this._unprotectedHeader).setUnprotectedHeader(h.unprotectedHeader).encrypt(h.key,{...h.options,...t}),_={ciphertext:q.ciphertext,iv:q.iv,recipients:[{}],tag:q.tag};if(q.aad)_.aad=q.aad;if(q.protected)_.protected=q.protected;if(q.unprotected)_.unprotected=q.unprotected;if(q.encrypted_key)_.recipients[0].encrypted_key=q.encrypted_key;if(q.header)_.recipients[0].header=q.header;return _}let n;for(let h=0;h<this._recipients.length;h++){let q=this._recipients[h];if(!(0,QS.default)(this._protectedHeader,this._unprotectedHeader,q.unprotectedHeader))throw new g1.JWEInvalid("JWE Protected, JWE Shared Unprotected and JWE Per-Recipient Header Parameter names must be disjoint");let _={...this._protectedHeader,...this._unprotectedHeader,...q.unprotectedHeader},{alg:W}=_;if(typeof W!=="string"||!W)throw new g1.JWEInvalid('JWE "alg" (Algorithm) Header Parameter missing or invalid');if(W==="dir"||W==="ECDH-ES")throw new g1.JWEInvalid('"dir" and "ECDH-ES" alg may only be used with a single recipient');if(typeof _.enc!=="string"||!_.enc)throw new g1.JWEInvalid('JWE "enc" (Encryption Algorithm) Header Parameter missing or invalid');if(!n)n=_.enc;else if(n!==_.enc)throw new g1.JWEInvalid('JWE "enc" (Encryption Algorithm) Header Parameter must be the same for all recipients');if((0,cH.default)(g1.JWEInvalid,new Map,q.options.crit,this._protectedHeader,_),_.zip!==void 0){if(!this._protectedHeader||!this._protectedHeader.zip)throw new g1.JWEInvalid('JWE "zip" (Compression Algorithm) Header MUST be integrity protected')}}let f=(0,lS.default)(n),d={ciphertext:"",iv:"",recipients:[],tag:""};for(let h=0;h<this._recipients.length;h++){let q=this._recipients[h],_={};d.recipients.push(_);let J={...this._protectedHeader,...this._unprotectedHeader,...q.unprotectedHeader}.alg.startsWith("PBES2")?2048+h:void 0;if(h===0){let P=await new Df.FlattenedEncrypt(this._plaintext).setAdditionalAuthenticatedData(this._aad).setContentEncryptionKey(f).setProtectedHeader(this._protectedHeader).setSharedUnprotectedHeader(this._unprotectedHeader).setUnprotectedHeader(q.unprotectedHeader).setKeyManagementParameters({p2c:J}).encrypt(q.key,{...q.options,...t,[Df.unprotected]:!0});if(d.ciphertext=P.ciphertext,d.iv=P.iv,d.tag=P.tag,P.aad)d.aad=P.aad;if(P.protected)d.protected=P.protected;if(P.unprotected)d.unprotected=P.unprotected;if(_.encrypted_key=P.encrypted_key,P.header)_.header=P.header;continue}let{encryptedKey:$,parameters:w}=await(0,aS.default)(((c=q.unprotectedHeader)===null||c===void 0?void 0:c.alg)||((u=this._protectedHeader)===null||u===void 0?void 0:u.alg)||((r=this._unprotectedHeader)===null||r===void 0?void 0:r.alg),n,q.key,f,{p2c:J});if(_.encrypted_key=(0,tH.encode)($),q.unprotectedHeader||w)_.header={...q.unprotectedHeader,...w}}return d}}xu.GeneralEncrypt=Z_});var jf=K((bf)=>{Object.defineProperty(bf,"__esModule",{value:!0});var uH=C();function rH(t){switch(t){case"PS256":case"RS256":case"ES256":case"ES256K":return"sha256";case"PS384":case"RS384":case"ES384":return"sha384";case"PS512":case"RS512":case"ES512":return"sha512";case"EdDSA":return;default:throw new uH.JOSENotSupported(`alg ${t} is not supported either by JOSE or your javascript runtime`)}}bf.default=rH});var xf=K((vf)=>{Object.defineProperty(vf,"__esModule",{value:!0});var E_=require("crypto"),nH=Jc(),fH=C(),pf=$c(),Nt=Sc(),Y_={padding:E_.constants.RSA_PKCS1_PSS_PADDING,saltLength:E_.constants.RSA_PSS_SALTLEN_DIGEST},dH=new Map([["ES256","P-256"],["ES256K","secp256k1"],["ES384","P-384"],["ES512","P-521"]]);function hH(t,c){switch(t){case"EdDSA":if(!["ed25519","ed448"].includes(c.asymmetricKeyType))throw TypeError("Invalid key for this operation, its asymmetricKeyType must be ed25519 or ed448");return c;case"RS256":case"RS384":case"RS512":if(c.asymmetricKeyType!=="rsa")throw TypeError("Invalid key for this operation, its asymmetricKeyType must be rsa");return(0,pf.default)(c,t),c;case(Nt.rsaPssParams&&"PS256"):case(Nt.rsaPssParams&&"PS384"):case(Nt.rsaPssParams&&"PS512"):if(c.asymmetricKeyType==="rsa-pss"){let{hashAlgorithm:u,mgf1HashAlgorithm:r,saltLength:n}=c.asymmetricKeyDetails,f=parseInt(t.slice(-3),10);if(u!==void 0&&(u!==`sha${f}`||r!==u))throw TypeError(`Invalid key for this operation, its RSA-PSS parameters do not meet the requirements of "alg" ${t}`);if(n!==void 0&&n>f>>3)throw TypeError(`Invalid key for this operation, its RSA-PSS parameter saltLength does not meet the requirements of "alg" ${t}`)}else if(c.asymmetricKeyType!=="rsa")throw TypeError("Invalid key for this operation, its asymmetricKeyType must be rsa or rsa-pss");return(0,pf.default)(c,t),{key:c,...Y_};case(!Nt.rsaPssParams&&"PS256"):case(!Nt.rsaPssParams&&"PS384"):case(!Nt.rsaPssParams&&"PS512"):if(c.asymmetricKeyType!=="rsa")throw TypeError("Invalid key for this operation, its asymmetricKeyType must be rsa");return(0,pf.default)(c,t),{key:c,...Y_};case"ES256":case"ES256K":case"ES384":case"ES512":{if(c.asymmetricKeyType!=="ec")throw TypeError("Invalid key for this operation, its asymmetricKeyType must be ec");let u=(0,nH.default)(c),r=dH.get(t);if(u!==r)throw TypeError(`Invalid key curve for the algorithm, its curve must be ${r}, got ${u}`);return{dsaEncoding:"ieee-p1363",key:c}}default:throw new fH.JOSENotSupported(`alg ${t} is not supported either by JOSE or your javascript runtime`)}}vf.default=hH});var i_=K((Lf)=>{Object.defineProperty(Lf,"__esModule",{value:!0});var qH=C();function _H(t){switch(t){case"HS256":return"sha256";case"HS384":return"sha384";case"HS512":return"sha512";default:throw new qH.JOSENotSupported(`alg ${t} is not supported either by JOSE or your javascript runtime`)}}Lf.default=_H});var gf=K((mf)=>{Object.defineProperty(mf,"__esModule",{value:!0});var sf=require("crypto"),KH=h1(),WH=v1(),z_=q1(),R_=_1();function JH(t,c,u){if(c instanceof Uint8Array){if(!t.startsWith("HS"))throw TypeError((0,z_.default)(c,...R_.types));return(0,sf.createSecretKey)(c)}if(c instanceof sf.KeyObject)return c;if((0,KH.isCryptoKey)(c))return(0,WH.checkSigCryptoKey)(c,t,u),sf.KeyObject.from(c);throw TypeError((0,z_.default)(c,...R_.types,"Uint8Array"))}mf.default=JH});var kf=K((Ff)=>{Object.defineProperty(Ff,"__esModule",{value:!0});var Lu=require("crypto"),wH=require("util"),$H=jf(),PH=i_(),AH=xf(),yH=gf(),Bf;if(Lu.sign.length>3)Bf=(0,wH.promisify)(Lu.sign);else Bf=Lu.sign;var SH=async(t,c,u)=>{let r=(0,yH.default)(t,c,"sign");if(t.startsWith("HS")){let n=Lu.createHmac((0,PH.default)(t),r);return n.update(u),n.digest()}return Bf((0,$H.default)(t),u,(0,AH.default)(t,r))};Ff.default=SH});var V_=K((Uf)=>{Object.defineProperty(Uf,"__esModule",{value:!0});var su=require("crypto"),HH=require("util"),CH=jf(),OH=xf(),GH=kf(),IH=gf(),ZH=Sc(),of;if(su.verify.length>4&&ZH.oneShotCallback)of=(0,HH.promisify)(su.verify);else of=su.verify;var XH=async(t,c,u,r)=>{let n=(0,IH.default)(t,c,"verify");if(t.startsWith("HS")){let h=await(0,GH.default)(t,n,r),q=u;try{return su.timingSafeEqual(q,h)}catch{return!1}}let f=(0,CH.default)(t),d=(0,OH.default)(t,n);try{return await of(f,r,d,u)}catch{return!1}};Uf.default=XH});var gu=K((mu)=>{Object.defineProperty(mu,"__esModule",{value:!0});mu.flattenedVerify=void 0;var lf=F(),EH=V_(),m=C(),Tt=M(),YH=Zt(),M_=l(),iH=Cc(),zH=zt(),RH=Xf();async function VH(t,c,u){var r;if(!(0,M_.default)(t))throw new m.JWSInvalid("Flattened JWS must be an object");if(t.protected===void 0&&t.header===void 0)throw new m.JWSInvalid('Flattened JWS must have either of the "protected" or "header" members');if(t.protected!==void 0&&typeof t.protected!=="string")throw new m.JWSInvalid("JWS Protected Header incorrect type");if(t.payload===void 0)throw new m.JWSInvalid("JWS Payload missing");if(typeof t.signature!=="string")throw new m.JWSInvalid("JWS Signature missing or incorrect type");if(t.header!==void 0&&!(0,M_.default)(t.header))throw new m.JWSInvalid("JWS Unprotected Header incorrect type");let n={};if(t.protected)try{let G=(0,lf.decode)(t.protected);n=JSON.parse(Tt.decoder.decode(G))}catch{throw new m.JWSInvalid("JWS Protected Header is invalid")}if(!(0,YH.default)(n,t.header))throw new m.JWSInvalid("JWS Protected and JWS Unprotected Header Parameter names must be disjoint");let f={...n,...t.header},d=(0,zH.default)(m.JWSInvalid,new Map([["b64",!0]]),u===null||u===void 0?void 0:u.crit,n,f),h=!0;if(d.has("b64")){if(h=n.b64,typeof h!=="boolean")throw new m.JWSInvalid('The "b64" (base64url-encode payload) Header Parameter must be a boolean')}let{alg:q}=f;if(typeof q!=="string"||!q)throw new m.JWSInvalid('JWS "alg" (Algorithm) Header Parameter missing or invalid');let _=u&&(0,RH.default)("algorithms",u.algorithms);if(_&&!_.has(q))throw new m.JOSEAlgNotAllowed('"alg" (Algorithm) Header Parameter not allowed');if(h){if(typeof t.payload!=="string")throw new m.JWSInvalid("JWS Payload must be a string")}else if(typeof t.payload!=="string"&&!(t.payload instanceof Uint8Array))throw new m.JWSInvalid("JWS Payload must be a string or an Uint8Array instance");let W=!1;if(typeof c==="function")c=await c(n,t),W=!0;(0,iH.default)(q,c,"verify");let J=(0,Tt.concat)(Tt.encoder.encode((r=t.protected)!==null&&r!==void 0?r:""),Tt.encoder.encode("."),typeof t.payload==="string"?Tt.encoder.encode(t.payload):t.payload),$;try{$=(0,lf.decode)(t.signature)}catch{throw new m.JWSInvalid("Failed to base64url decode the signature")}if(!await(0,EH.default)(q,c,$,J))throw new m.JWSSignatureVerificationFailed;let P;if(h)try{P=(0,lf.decode)(t.payload)}catch{throw new m.JWSInvalid("Failed to base64url decode the payload")}else if(typeof t.payload==="string")P=Tt.encoder.encode(t.payload);else P=t.payload;let A={payload:P};if(t.protected!==void 0)A.protectedHeader=n;if(t.header!==void 0)A.unprotectedHeader=t.header;if(W)return{...A,key:c};return A}mu.flattenedVerify=VH});var Qf=K((Bu)=>{Object.defineProperty(Bu,"__esModule",{value:!0});Bu.compactVerify=void 0;var MH=gu(),e_=C(),eH=M();async function NH(t,c,u){if(t instanceof Uint8Array)t=eH.decoder.decode(t);if(typeof t!=="string")throw new e_.JWSInvalid("Compact JWS must be a string or Uint8Array");let{0:r,1:n,2:f,length:d}=t.split(".");if(d!==3)throw new e_.JWSInvalid("Invalid Compact JWS");let h=await(0,MH.flattenedVerify)({payload:n,protected:r,signature:f},c,u),q={payload:h.payload,protectedHeader:h.protectedHeader};if(typeof c==="function")return{...q,key:h.key};return q}Bu.compactVerify=NH});var T_=K((Fu)=>{Object.defineProperty(Fu,"__esModule",{value:!0});Fu.generalVerify=void 0;var TH=gu(),af=C(),N_=l();async function DH(t,c,u){if(!(0,N_.default)(t))throw new af.JWSInvalid("General JWS must be an object");if(!Array.isArray(t.signatures)||!t.signatures.every(N_.default))throw new af.JWSInvalid("JWS Signatures missing or incorrect type");for(let r of t.signatures)try{return await(0,TH.flattenedVerify)({header:r.header,payload:t.payload,protected:r.protected,signature:r.signature},c,u)}catch{}throw new af.JWSSignatureVerificationFailed}Fu.generalVerify=DH});var cd=K((td)=>{Object.defineProperty(td,"__esModule",{value:!0});td.default=(t)=>Math.floor(t.getTime()/1000)});var nd=K((rd)=>{Object.defineProperty(rd,"__esModule",{value:!0});var D_=60,b_=D_*60,ud=b_*24,bH=ud*7,jH=ud*365.25,pH=/^(\d+|\d+\.\d+) ?(seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|weeks?|w|years?|yrs?|y)$/i;rd.default=(t)=>{let c=pH.exec(t);if(!c)throw TypeError("Invalid time period format");let u=parseFloat(c[1]);switch(c[2].toLowerCase()){case"sec":case"secs":case"second":case"seconds":case"s":return Math.round(u);case"minute":case"minutes":case"min":case"mins":case"m":return Math.round(u*D_);case"hour":case"hours":case"hr":case"hrs":case"h":return Math.round(u*b_);case"day":case"days":case"d":return Math.round(u*ud);case"week":case"weeks":case"w":return Math.round(u*bH);default:return Math.round(u*jH)}}});var ku=K((fd)=>{Object.defineProperty(fd,"__esModule",{value:!0});var t1=C(),vH=M(),xH=cd(),j_=nd(),LH=l(),p_=(t)=>t.toLowerCase().replace(/^application\//,""),sH=(t,c)=>{if(typeof t==="string")return c.includes(t);if(Array.isArray(t))return c.some(Set.prototype.has.bind(new Set(t)));return!1};fd.default=(t,c,u={})=>{let{typ:r}=u;if(r&&(typeof t.typ!=="string"||p_(t.typ)!==p_(r)))throw new t1.JWTClaimValidationFailed('unexpected "typ" JWT header value',"typ","check_failed");let n;try{n=JSON.parse(vH.decoder.decode(c))}catch{}if(!(0,LH.default)(n))throw new t1.JWTInvalid("JWT Claims Set must be a top-level JSON object");let{requiredClaims:f=[],issuer:d,subject:h,audience:q,maxTokenAge:_}=u;if(_!==void 0)f.push("iat");if(q!==void 0)f.push("aud");if(h!==void 0)f.push("sub");if(d!==void 0)f.push("iss");for(let w of new Set(f.reverse()))if(!(w in n))throw new t1.JWTClaimValidationFailed(`missing required "${w}" claim`,w,"missing");if(d&&!(Array.isArray(d)?d:[d]).includes(n.iss))throw new t1.JWTClaimValidationFailed('unexpected "iss" claim value',"iss","check_failed");if(h&&n.sub!==h)throw new t1.JWTClaimValidationFailed('unexpected "sub" claim value',"sub","check_failed");if(q&&!sH(n.aud,typeof q==="string"?[q]:q))throw new t1.JWTClaimValidationFailed('unexpected "aud" claim value',"aud","check_failed");let W;switch(typeof u.clockTolerance){case"string":W=(0,j_.default)(u.clockTolerance);break;case"number":W=u.clockTolerance;break;case"undefined":W=0;break;default:throw TypeError("Invalid clockTolerance option type")}let{currentDate:J}=u,$=(0,xH.default)(J||new Date);if((n.iat!==void 0||_)&&typeof n.iat!=="number")throw new t1.JWTClaimValidationFailed('"iat" claim must be a number',"iat","invalid");if(n.nbf!==void 0){if(typeof n.nbf!=="number")throw new t1.JWTClaimValidationFailed('"nbf" claim must be a number',"nbf","invalid");if(n.nbf>$+W)throw new t1.JWTClaimValidationFailed('"nbf" claim timestamp check failed',"nbf","check_failed")}if(n.exp!==void 0){if(typeof n.exp!=="number")throw new t1.JWTClaimValidationFailed('"exp" claim must be a number',"exp","invalid");if(n.exp<=$-W)throw new t1.JWTExpired('"exp" claim timestamp check failed',"exp","check_failed")}if(_){let w=$-n.iat,P=typeof _==="number"?_:(0,j_.default)(_);if(w-W>P)throw new t1.JWTExpired('"iat" claim timestamp check failed (too far in the past)',"iat","check_failed");if(w<0-W)throw new t1.JWTClaimValidationFailed('"iat" claim timestamp check failed (it should be in the past)',"iat","check_failed")}return n}});var v_=K((ou)=>{Object.defineProperty(ou,"__esModule",{value:!0});ou.jwtVerify=void 0;var mH=Qf(),gH=ku(),BH=C();async function FH(t,c,u){var r;let n=await(0,mH.compactVerify)(t,c,u);if(((r=n.protectedHeader.crit)===null||r===void 0?void 0:r.includes("b64"))&&n.protectedHeader.b64===!1)throw new BH.JWTInvalid("JWTs MUST NOT use unencoded payload");let d={payload:(0,gH.default)(n.protectedHeader,n.payload,u),protectedHeader:n.protectedHeader};if(typeof c==="function")return{...d,key:n.key};return d}ou.jwtVerify=FH});var x_=K((Uu)=>{Object.defineProperty(Uu,"__esModule",{value:!0});Uu.jwtDecrypt=void 0;var kH=Yf(),oH=ku(),dd=C();async function UH(t,c,u){let r=await(0,kH.compactDecrypt)(t,c,u),n=(0,oH.default)(r.protectedHeader,r.plaintext,u),{protectedHeader:f}=r;if(f.iss!==void 0&&f.iss!==n.iss)throw new dd.JWTClaimValidationFailed('replicated "iss" claim header parameter mismatch',"iss","mismatch");if(f.sub!==void 0&&f.sub!==n.sub)throw new dd.JWTClaimValidationFailed('replicated "sub" claim header parameter mismatch',"sub","mismatch");if(f.aud!==void 0&&JSON.stringify(f.aud)!==JSON.stringify(n.aud))throw new dd.JWTClaimValidationFailed('replicated "aud" claim header parameter mismatch',"aud","mismatch");let d={payload:n,protectedHeader:f};if(typeof c==="function")return{...d,key:r.key};return d}Uu.jwtDecrypt=UH});var hd=K((lu)=>{Object.defineProperty(lu,"__esModule",{value:!0});lu.CompactEncrypt=void 0;var lH=vu();class L_{constructor(t){this._flattened=new lH.FlattenedEncrypt(t)}setContentEncryptionKey(t){return this._flattened.setContentEncryptionKey(t),this}setInitializationVector(t){return this._flattened.setInitializationVector(t),this}setProtectedHeader(t){return this._flattened.setProtectedHeader(t),this}setKeyManagementParameters(t){return this._flattened.setKeyManagementParameters(t),this}async encrypt(t,c){let u=await this._flattened.encrypt(t,c);return[u.protected,u.encrypted_key,u.iv,u.ciphertext,u.tag].join(".")}}lu.CompactEncrypt=L_});var au=K((Qu)=>{Object.defineProperty(Qu,"__esModule",{value:!0});Qu.FlattenedSign=void 0;var qd=F(),QH=kf(),aH=Zt(),Ic=C(),ut=M(),tC=Cc(),cC=zt();class s_{constructor(t){if(!(t instanceof Uint8Array))throw TypeError("payload must be an instance of Uint8Array");this._payload=t}setProtectedHeader(t){if(this._protectedHeader)throw TypeError("setProtectedHeader can only be called once");return this._protectedHeader=t,this}setUnprotectedHeader(t){if(this._unprotectedHeader)throw TypeError("setUnprotectedHeader can only be called once");return this._unprotectedHeader=t,this}async sign(t,c){if(!this._protectedHeader&&!this._unprotectedHeader)throw new Ic.JWSInvalid("either setProtectedHeader or setUnprotectedHeader must be called before #sign()");if(!(0,aH.default)(this._protectedHeader,this._unprotectedHeader))throw new Ic.JWSInvalid("JWS Protected and JWS Unprotected Header Parameter names must be disjoint");let u={...this._protectedHeader,...this._unprotectedHeader},r=(0,cC.default)(Ic.JWSInvalid,new Map([["b64",!0]]),c===null||c===void 0?void 0:c.crit,this._protectedHeader,u),n=!0;if(r.has("b64")){if(n=this._protectedHeader.b64,typeof n!=="boolean")throw new Ic.JWSInvalid('The "b64" (base64url-encode payload) Header Parameter must be a boolean')}let{alg:f}=u;if(typeof f!=="string"||!f)throw new Ic.JWSInvalid('JWS "alg" (Algorithm) Header Parameter missing or invalid');(0,tC.default)(f,t,"sign");let d=this._payload;if(n)d=ut.encoder.encode((0,qd.encode)(d));let h;if(this._protectedHeader)h=ut.encoder.encode((0,qd.encode)(JSON.stringify(this._protectedHeader)));else h=ut.encoder.encode("");let q=(0,ut.concat)(h,ut.encoder.encode("."),d),_=await(0,QH.default)(f,t,q),W={signature:(0,qd.encode)(_),payload:""};if(n)W.payload=ut.decoder.decode(d);if(this._unprotectedHeader)W.header=this._unprotectedHeader;if(this._protectedHeader)W.protected=ut.decoder.decode(h);return W}}Qu.FlattenedSign=s_});var _d=K((tr)=>{Object.defineProperty(tr,"__esModule",{value:!0});tr.CompactSign=void 0;var uC=au();class m_{constructor(t){this._flattened=new uC.FlattenedSign(t)}setProtectedHeader(t){return this._flattened.setProtectedHeader(t),this}async sign(t,c){let u=await this._flattened.sign(t,c);if(u.payload===void 0)throw TypeError("use the flattened module for creating JWS with b64: false");return`${u.protected}.${u.payload}.${u.signature}`}}tr.CompactSign=m_});var k_=K((cr)=>{Object.defineProperty(cr,"__esModule",{value:!0});cr.GeneralSign=void 0;var rC=au(),g_=C();class B_{constructor(t,c,u){this.parent=t,this.key=c,this.options=u}setProtectedHeader(t){if(this.protectedHeader)throw TypeError("setProtectedHeader can only be called once");return this.protectedHeader=t,this}setUnprotectedHeader(t){if(this.unprotectedHeader)throw TypeError("setUnprotectedHeader can only be called once");return this.unprotectedHeader=t,this}addSignature(...t){return this.parent.addSignature(...t)}sign(...t){return this.parent.sign(...t)}done(){return this.parent}}class F_{constructor(t){this._signatures=[],this._payload=t}addSignature(t,c){let u=new B_(this,t,c);return this._signatures.push(u),u}async sign(){if(!this._signatures.length)throw new g_.JWSInvalid("at least one signature must be added");let t={signatures:[],payload:""};for(let c=0;c<this._signatures.length;c++){let u=this._signatures[c],r=new rC.FlattenedSign(this._payload);r.setProtectedHeader(u.protectedHeader),r.setUnprotectedHeader(u.unprotectedHeader);let{payload:n,...f}=await r.sign(u.key,u.options);if(c===0)t.payload=n;else if(t.payload!==n)throw new g_.JWSInvalid("inconsistent use of JWS Unencoded Payload (RFC7797)");t.signatures.push(f)}return t}}cr.GeneralSign=F_});var rr=K((ur)=>{Object.defineProperty(ur,"__esModule",{value:!0});ur.ProduceJWT=void 0;var Kd=cd(),nC=l(),o_=nd();class U_{constructor(t){if(!(0,nC.default)(t))throw TypeError("JWT Claims Set MUST be an object");this._payload=t}setIssuer(t){return this._payload={...this._payload,iss:t},this}setSubject(t){return this._payload={...this._payload,sub:t},this}setAudience(t){return this._payload={...this._payload,aud:t},this}setJti(t){return this._payload={...this._payload,jti:t},this}setNotBefore(t){if(typeof t==="number")this._payload={...this._payload,nbf:t};else this._payload={...this._payload,nbf:(0,Kd.default)(new Date)+(0,o_.default)(t)};return this}setExpirationTime(t){if(typeof t==="number")this._payload={...this._payload,exp:t};else this._payload={...this._payload,exp:(0,Kd.default)(new Date)+(0,o_.default)(t)};return this}setIssuedAt(t){if(typeof t>"u")this._payload={...this._payload,iat:(0,Kd.default)(new Date)};else this._payload={...this._payload,iat:t};return this}}ur.ProduceJWT=U_});var Q_=K((nr)=>{Object.defineProperty(nr,"__esModule",{value:!0});nr.SignJWT=void 0;var fC=_d(),dC=C(),hC=M(),qC=rr();class l_ extends qC.ProduceJWT{setProtectedHeader(t){return this._protectedHeader=t,this}async sign(t,c){var u;let r=new fC.CompactSign(hC.encoder.encode(JSON.stringify(this._payload)));if(r.setProtectedHeader(this._protectedHeader),Array.isArray((u=this._protectedHeader)===null||u===void 0?void 0:u.crit)&&this._protectedHeader.crit.includes("b64")&&this._protectedHeader.b64===!1)throw new dC.JWTInvalid("JWTs MUST NOT use unencoded payload");return r.sign(t,c)}}nr.SignJWT=l_});var t8=K((fr)=>{Object.defineProperty(fr,"__esModule",{value:!0});fr.EncryptJWT=void 0;var _C=hd(),KC=M(),WC=rr();class a_ extends WC.ProduceJWT{setProtectedHeader(t){if(this._protectedHeader)throw TypeError("setProtectedHeader can only be called once");return this._protectedHeader=t,this}setKeyManagementParameters(t){if(this._keyManagementParameters)throw TypeError("setKeyManagementParameters can only be called once");return this._keyManagementParameters=t,this}setContentEncryptionKey(t){if(this._cek)throw TypeError("setContentEncryptionKey can only be called once");return this._cek=t,this}setInitializationVector(t){if(this._iv)throw TypeError("setInitializationVector can only be called once");return this._iv=t,this}replicateIssuerAsHeader(){return this._replicateIssuerAsHeader=!0,this}replicateSubjectAsHeader(){return this._replicateSubjectAsHeader=!0,this}replicateAudienceAsHeader(){return this._replicateAudienceAsHeader=!0,this}async encrypt(t,c){let u=new _C.CompactEncrypt(KC.encoder.encode(JSON.stringify(this._payload)));if(this._replicateIssuerAsHeader)this._protectedHeader={...this._protectedHeader,iss:this._payload.iss};if(this._replicateSubjectAsHeader)this._protectedHeader={...this._protectedHeader,sub:this._payload.sub};if(this._replicateAudienceAsHeader)this._protectedHeader={...this._protectedHeader,aud:this._payload.aud};if(u.setProtectedHeader(this._protectedHeader),this._iv)u.setInitializationVector(this._iv);if(this._cek)u.setContentEncryptionKey(this._cek);if(this._keyManagementParameters)u.setKeyManagementParameters(this._keyManagementParameters);return u.encrypt(t,c)}}fr.EncryptJWT=a_});var r8=K((Dt)=>{Object.defineProperty(Dt,"__esModule",{value:!0});Dt.calculateJwkThumbprintUri=Dt.calculateJwkThumbprint=void 0;var JC=Dn(),wC=F(),c8=C(),$C=M(),PC=l(),B1=(t,c)=>{if(typeof t!=="string"||!t)throw new c8.JWKInvalid(`${c} missing or invalid`)};async function u8(t,c){if(!(0,PC.default)(t))throw TypeError("JWK must be an object");if(c!==null&&c!==void 0||(c="sha256"),c!=="sha256"&&c!=="sha384"&&c!=="sha512")throw TypeError('digestAlgorithm must one of "sha256", "sha384", or "sha512"');let u;switch(t.kty){case"EC":B1(t.crv,'"crv" (Curve) Parameter'),B1(t.x,'"x" (X Coordinate) Parameter'),B1(t.y,'"y" (Y Coordinate) Parameter'),u={crv:t.crv,kty:t.kty,x:t.x,y:t.y};break;case"OKP":B1(t.crv,'"crv" (Subtype of Key Pair) Parameter'),B1(t.x,'"x" (Public Key) Parameter'),u={crv:t.crv,kty:t.kty,x:t.x};break;case"RSA":B1(t.e,'"e" (Exponent) Parameter'),B1(t.n,'"n" (Modulus) Parameter'),u={e:t.e,kty:t.kty,n:t.n};break;case"oct":B1(t.k,'"k" (Key Value) Parameter'),u={k:t.k,kty:t.kty};break;default:throw new c8.JOSENotSupported('"kty" (Key Type) Parameter missing or unsupported')}let r=$C.encoder.encode(JSON.stringify(u));return(0,wC.encode)(await(0,JC.default)(c,r))}Dt.calculateJwkThumbprint=u8;async function AC(t,c){c!==null&&c!==void 0||(c="sha256");let u=await u8(t,c);return`urn:ietf:params:oauth:jwk-thumbprint:sha-${c.slice(-3)}:${u}`}Dt.calculateJwkThumbprintUri=AC});var f8=K((dr)=>{Object.defineProperty(dr,"__esModule",{value:!0});dr.EmbeddedJWK=void 0;var yC=Hc(),SC=l(),n8=C();async function HC(t,c){let u={...t,...c===null||c===void 0?void 0:c.header};if(!(0,SC.default)(u.jwk))throw new n8.JWSInvalid('"jwk" (JSON Web Key) Header Parameter must be a JSON object');let r=await(0,yC.importJWK)({...u.jwk,ext:!0},u.alg,!0);if(r instanceof Uint8Array||r.type!=="public")throw new n8.JWSInvalid('"jwk" (JSON Web Key) Header Parameter must be a public key');return r}dr.EmbeddedJWK=HC});var Jd=K((F1)=>{Object.defineProperty(F1,"__esModule",{value:!0});F1.createLocalJWKSet=F1.LocalJWKSet=F1.isJWKSLike=void 0;var CC=Hc(),Zc=C(),OC=l();function GC(t){switch(typeof t==="string"&&t.slice(0,2)){case"RS":case"PS":return"RSA";case"ES":return"EC";case"Ed":return"OKP";default:throw new Zc.JOSENotSupported('Unsupported "alg" value for a JSON Web Key Set')}}function h8(t){return t&&typeof t==="object"&&Array.isArray(t.keys)&&t.keys.every(IC)}F1.isJWKSLike=h8;function IC(t){return(0,OC.default)(t)}function ZC(t){if(typeof structuredClone==="function")return structuredClone(t);return JSON.parse(JSON.stringify(t))}class Wd{constructor(t){if(this._cached=new WeakMap,!h8(t))throw new Zc.JWKSInvalid("JSON Web Key Set malformed");this._jwks=ZC(t)}async getKey(t,c){let{alg:u,kid:r}={...t,...c===null||c===void 0?void 0:c.header},n=GC(u),f=this._jwks.keys.filter((q)=>{let _=n===q.kty;if(_&&typeof r==="string")_=r===q.kid;if(_&&typeof q.alg==="string")_=u===q.alg;if(_&&typeof q.use==="string")_=q.use==="sig";if(_&&Array.isArray(q.key_ops))_=q.key_ops.includes("verify");if(_&&u==="EdDSA")_=q.crv==="Ed25519"||q.crv==="Ed448";if(_)switch(u){case"ES256":_=q.crv==="P-256";break;case"ES256K":_=q.crv==="secp256k1";break;case"ES384":_=q.crv==="P-384";break;case"ES512":_=q.crv==="P-521";break}return _}),{0:d,length:h}=f;if(h===0)throw new Zc.JWKSNoMatchingKey;else if(h!==1){let q=new Zc.JWKSMultipleMatchingKeys,{_cached:_}=this;throw q[Symbol.asyncIterator]=async function*(){for(let W of f)try{yield await d8(_,W,u)}catch{continue}},q}return d8(this._cached,d,u)}}F1.LocalJWKSet=Wd;async function d8(t,c,u){let r=t.get(c)||t.set(c,{}).get(c);if(r[u]===void 0){let n=await(0,CC.importJWK)({...c,ext:!0},u);if(n instanceof Uint8Array||n.type!=="public")throw new Zc.JWKSInvalid("JSON Web Key Set members must be public keys");r[u]=n}return r[u]}function XC(t){let c=new Wd(t);return async function(u,r){return c.getKey(u,r)}}F1.createLocalJWKSet=XC});var K8=K(($d)=>{Object.defineProperty($d,"__esModule",{value:!0});var EC=require("http"),YC=require("https"),q8=require("events"),wd=C(),_8=M(),iC=async(t,c,u)=>{let r;switch(t.protocol){case"https:":r=YC.get;break;case"http:":r=EC.get;break;default:throw TypeError("Unsupported URL protocol.")}let{agent:n,headers:f}=u,d=r(t.href,{agent:n,timeout:c,headers:f}),[h]=await Promise.race([(0,q8.once)(d,"response"),(0,q8.once)(d,"timeout")]);if(!h)throw d.destroy(),new wd.JWKSTimeout;if(h.statusCode!==200)throw new wd.JOSEError("Expected 200 OK from the JSON Web Key Set HTTP response");let q=[];for await(let _ of h)q.push(_);try{return JSON.parse(_8.decoder.decode((0,_8.concat)(...q)))}catch{throw new wd.JOSEError("Failed to parse the JSON Web Key Set HTTP response as JSON")}};$d.default=iC});var $8=K((hr)=>{Object.defineProperty(hr,"__esModule",{value:!0});hr.createRemoteJWKSet=void 0;var zC=K8(),W8=C(),J8=Jd();function RC(){return typeof WebSocketPair<"u"||typeof navigator<"u"&&navigator.userAgent==="Cloudflare-Workers"||typeof EdgeRuntime<"u"&&EdgeRuntime==="vercel"}class w8 extends J8.LocalJWKSet{constructor(t,c){super({keys:[]});if(this._jwks=void 0,!(t instanceof URL))throw TypeError("url must be an instance of URL");this._url=new URL(t.href),this._options={agent:c===null||c===void 0?void 0:c.agent,headers:c===null||c===void 0?void 0:c.headers},this._timeoutDuration=typeof(c===null||c===void 0?void 0:c.timeoutDuration)==="number"?c===null||c===void 0?void 0:c.timeoutDuration:5000,this._cooldownDuration=typeof(c===null||c===void 0?void 0:c.cooldownDuration)==="number"?c===null||c===void 0?void 0:c.cooldownDuration:30000,this._cacheMaxAge=typeof(c===null||c===void 0?void 0:c.cacheMaxAge)==="number"?c===null||c===void 0?void 0:c.cacheMaxAge:600000}coolingDown(){return typeof this._jwksTimestamp==="number"?Date.now()<this._jwksTimestamp+this._cooldownDuration:!1}fresh(){return typeof this._jwksTimestamp==="number"?Date.now()<this._jwksTimestamp+this._cacheMaxAge:!1}async getKey(t,c){if(!this._jwks||!this.fresh())await this.reload();try{return await super.getKey(t,c)}catch(u){if(u instanceof W8.JWKSNoMatchingKey){if(this.coolingDown()===!1)return await this.reload(),super.getKey(t,c)}throw u}}async reload(){if(this._pendingFetch&&RC())this._pendingFetch=void 0;this._pendingFetch||(this._pendingFetch=(0,zC.default)(this._url,this._timeoutDuration,this._options).then((t)=>{if(!(0,J8.isJWKSLike)(t))throw new W8.JWKSInvalid("JSON Web Key Set malformed");this._jwks={keys:t.keys},this._jwksTimestamp=Date.now(),this._pendingFetch=void 0}).catch((t)=>{throw this._pendingFetch=void 0,t})),await this._pendingFetch}}function VC(t,c){let u=new w8(t,c);return async function(r,n){return u.getKey(r,n)}}hr.createRemoteJWKSet=VC});var A8=K((_r)=>{Object.defineProperty(_r,"__esModule",{value:!0});_r.UnsecuredJWT=void 0;var qr=F(),MC=M(),Pd=C(),eC=ku(),NC=rr();class P8 extends NC.ProduceJWT{encode(){let t=qr.encode(JSON.stringify({alg:"none"})),c=qr.encode(JSON.stringify(this._payload));return`${t}.${c}.`}static decode(t,c){if(typeof t!=="string")throw new Pd.JWTInvalid("Unsecured JWT must be a string");let{0:u,1:r,2:n,length:f}=t.split(".");if(f!==3||n!=="")throw new Pd.JWTInvalid("Invalid Unsecured JWT");let d;try{if(d=JSON.parse(MC.decoder.decode(qr.decode(u))),d.alg!=="none")throw Error()}catch{throw new Pd.JWTInvalid("Invalid Unsecured JWT")}return{payload:(0,eC.default)(d,qr.decode(r),c),header:d}}}_r.UnsecuredJWT=P8});var Kr=K((bt)=>{Object.defineProperty(bt,"__esModule",{value:!0});bt.decode=bt.encode=void 0;var y8=F();bt.encode=y8.encode;bt.decode=y8.decode});var S8=K((Wr)=>{Object.defineProperty(Wr,"__esModule",{value:!0});Wr.decodeProtectedHeader=void 0;var TC=Kr(),DC=M(),bC=l();function jC(t){let c;if(typeof t==="string"){let u=t.split(".");if(u.length===3||u.length===5)[c]=u}else if(typeof t==="object"&&t)if("protected"in t)c=t.protected;else throw TypeError("Token does not contain a Protected Header");try{if(typeof c!=="string"||!c)throw Error();let u=JSON.parse(DC.decoder.decode((0,TC.decode)(c)));if(!(0,bC.default)(u))throw Error();return u}catch{throw TypeError("Invalid Token or Protected Header formatting")}}Wr.decodeProtectedHeader=jC});var H8=K((Jr)=>{Object.defineProperty(Jr,"__esModule",{value:!0});Jr.decodeJwt=void 0;var pC=Kr(),vC=M(),xC=l(),rt=C();function LC(t){if(typeof t!=="string")throw new rt.JWTInvalid("JWTs must use Compact JWS serialization, JWT must be a string");let{1:c,length:u}=t.split(".");if(u===5)throw new rt.JWTInvalid("Only JWTs using Compact JWS serialization can be decoded");if(u!==3)throw new rt.JWTInvalid("Invalid JWT");if(!c)throw new rt.JWTInvalid("JWTs must contain a payload");let r;try{r=(0,pC.decode)(c)}catch{throw new rt.JWTInvalid("Failed to base64url decode the payload")}let n;try{n=JSON.parse(vC.decoder.decode(r))}catch{throw new rt.JWTInvalid("Failed to parse the decoded payload as JSON")}if(!(0,xC.default)(n))throw new rt.JWTInvalid("Invalid JWT Claims Set");return n}Jr.decodeJwt=LC});var Ad=K((jt)=>{Object.defineProperty(jt,"__esModule",{value:!0});jt.generateKeyPair=jt.generateSecret=void 0;var O8=require("crypto"),sC=require("util"),mC=hc(),C8=$c(),Xc=C(),E1=(0,sC.promisify)(O8.generateKeyPair);async function gC(t,c){let u;switch(t){case"HS256":case"HS384":case"HS512":case"A128CBC-HS256":case"A192CBC-HS384":case"A256CBC-HS512":u=parseInt(t.slice(-3),10);break;case"A128KW":case"A192KW":case"A256KW":case"A128GCMKW":case"A192GCMKW":case"A256GCMKW":case"A128GCM":case"A192GCM":case"A256GCM":u=parseInt(t.slice(1,4),10);break;default:throw new Xc.JOSENotSupported('Invalid or unsupported JWK "alg" (Algorithm) Parameter value')}return(0,O8.createSecretKey)((0,mC.default)(new Uint8Array(u>>3)))}jt.generateSecret=gC;async function BC(t,c){var u,r;switch(t){case"RS256":case"RS384":case"RS512":case"PS256":case"PS384":case"PS512":case"RSA-OAEP":case"RSA-OAEP-256":case"RSA-OAEP-384":case"RSA-OAEP-512":case"RSA1_5":{let f=(u=c===null||c===void 0?void 0:c.modulusLength)!==null&&u!==void 0?u:2048;if(typeof f!=="number"||f<2048)throw new Xc.JOSENotSupported("Invalid or unsupported modulusLength option provided, 2048 bits or larger keys must be used");let d=await E1("rsa",{modulusLength:f,publicExponent:65537});return(0,C8.setModulusLength)(d.privateKey,f),(0,C8.setModulusLength)(d.publicKey,f),d}case"ES256":return E1("ec",{namedCurve:"P-256"});case"ES256K":return E1("ec",{namedCurve:"secp256k1"});case"ES384":return E1("ec",{namedCurve:"P-384"});case"ES512":return E1("ec",{namedCurve:"P-521"});case"EdDSA":switch(c===null||c===void 0?void 0:c.crv){case void 0:case"Ed25519":return E1("ed25519");case"Ed448":return E1("ed448");default:throw new Xc.JOSENotSupported("Invalid or unsupported crv option provided, supported values are Ed25519 and Ed448")}case"ECDH-ES":case"ECDH-ES+A128KW":case"ECDH-ES+A192KW":case"ECDH-ES+A256KW":let n=(r=c===null||c===void 0?void 0:c.crv)!==null&&r!==void 0?r:"P-256";switch(n){case void 0:case"P-256":case"P-384":case"P-521":return E1("ec",{namedCurve:n});case"X25519":return E1("x25519");case"X448":return E1("x448");default:throw new Xc.JOSENotSupported("Invalid or unsupported crv option provided, supported values are P-256, P-384, P-521, X25519, and X448")}default:throw new Xc.JOSENotSupported('Invalid or unsupported JWK "alg" (Algorithm) Parameter value')}}jt.generateKeyPair=BC});var G8=K((wr)=>{Object.defineProperty(wr,"__esModule",{value:!0});wr.generateKeyPair=void 0;var FC=Ad();async function kC(t,c){return(0,FC.generateKeyPair)(t,c)}wr.generateKeyPair=kC});var I8=K(($r)=>{Object.defineProperty($r,"__esModule",{value:!0});$r.generateSecret=void 0;var oC=Ad();async function UC(t,c){return(0,oC.generateSecret)(t,c)}$r.generateSecret=UC});var Z8=K((yd)=>{Object.defineProperty(yd,"__esModule",{value:!0});yd.default="node:crypto"});var X8=K((Sd)=>{Object.defineProperty(Sd,"__esModule",{value:!0});var lC=Z8();Sd.default=lC.default});var Cd=K((y)=>{Object.defineProperty(y,"__esModule",{value:!0});y.cryptoRuntime=y.base64url=y.generateSecret=y.generateKeyPair=y.errors=y.decodeJwt=y.decodeProtectedHeader=y.importJWK=y.importX509=y.importPKCS8=y.importSPKI=y.exportJWK=y.exportSPKI=y.exportPKCS8=y.UnsecuredJWT=y.createRemoteJWKSet=y.createLocalJWKSet=y.EmbeddedJWK=y.calculateJwkThumbprintUri=y.calculateJwkThumbprint=y.EncryptJWT=y.SignJWT=y.GeneralSign=y.FlattenedSign=y.CompactSign=y.FlattenedEncrypt=y.CompactEncrypt=y.jwtDecrypt=y.jwtVerify=y.generalVerify=y.flattenedVerify=y.compactVerify=y.GeneralEncrypt=y.generalDecrypt=y.flattenedDecrypt=y.compactDecrypt=void 0;var QC=Yf();Object.defineProperty(y,"compactDecrypt",{enumerable:!0,get:function(){return QC.compactDecrypt}});var aC=eu();Object.defineProperty(y,"flattenedDecrypt",{enumerable:!0,get:function(){return aC.flattenedDecrypt}});var tO=$_();Object.defineProperty(y,"generalDecrypt",{enumerable:!0,get:function(){return tO.generalDecrypt}});var cO=X_();Object.defineProperty(y,"GeneralEncrypt",{enumerable:!0,get:function(){return cO.GeneralEncrypt}});var uO=Qf();Object.defineProperty(y,"compactVerify",{enumerable:!0,get:function(){return uO.compactVerify}});var rO=gu();Object.defineProperty(y,"flattenedVerify",{enumerable:!0,get:function(){return rO.flattenedVerify}});var nO=T_();Object.defineProperty(y,"generalVerify",{enumerable:!0,get:function(){return nO.generalVerify}});var fO=v_();Object.defineProperty(y,"jwtVerify",{enumerable:!0,get:function(){return fO.jwtVerify}});var dO=x_();Object.defineProperty(y,"jwtDecrypt",{enumerable:!0,get:function(){return dO.jwtDecrypt}});var hO=hd();Object.defineProperty(y,"CompactEncrypt",{enumerable:!0,get:function(){return hO.CompactEncrypt}});var qO=vu();Object.defineProperty(y,"FlattenedEncrypt",{enumerable:!0,get:function(){return qO.FlattenedEncrypt}});var _O=_d();Object.defineProperty(y,"CompactSign",{enumerable:!0,get:function(){return _O.CompactSign}});var KO=au();Object.defineProperty(y,"FlattenedSign",{enumerable:!0,get:function(){return KO.FlattenedSign}});var WO=k_();Object.defineProperty(y,"GeneralSign",{enumerable:!0,get:function(){return WO.GeneralSign}});var JO=Q_();Object.defineProperty(y,"SignJWT",{enumerable:!0,get:function(){return JO.SignJWT}});var wO=t8();Object.defineProperty(y,"EncryptJWT",{enumerable:!0,get:function(){return wO.EncryptJWT}});var E8=r8();Object.defineProperty(y,"calculateJwkThumbprint",{enumerable:!0,get:function(){return E8.calculateJwkThumbprint}});Object.defineProperty(y,"calculateJwkThumbprintUri",{enumerable:!0,get:function(){return E8.calculateJwkThumbprintUri}});var $O=f8();Object.defineProperty(y,"EmbeddedJWK",{enumerable:!0,get:function(){return $O.EmbeddedJWK}});var PO=Jd();Object.defineProperty(y,"createLocalJWKSet",{enumerable:!0,get:function(){return PO.createLocalJWKSet}});var AO=$8();Object.defineProperty(y,"createRemoteJWKSet",{enumerable:!0,get:function(){return AO.createRemoteJWKSet}});var yO=A8();Object.defineProperty(y,"UnsecuredJWT",{enumerable:!0,get:function(){return yO.UnsecuredJWT}});var Hd=Mf();Object.defineProperty(y,"exportPKCS8",{enumerable:!0,get:function(){return Hd.exportPKCS8}});Object.defineProperty(y,"exportSPKI",{enumerable:!0,get:function(){return Hd.exportSPKI}});Object.defineProperty(y,"exportJWK",{enumerable:!0,get:function(){return Hd.exportJWK}});var Pr=Hc();Object.defineProperty(y,"importSPKI",{enumerable:!0,get:function(){return Pr.importSPKI}});Object.defineProperty(y,"importPKCS8",{enumerable:!0,get:function(){return Pr.importPKCS8}});Object.defineProperty(y,"importX509",{enumerable:!0,get:function(){return Pr.importX509}});Object.defineProperty(y,"importJWK",{enumerable:!0,get:function(){return Pr.importJWK}});var SO=S8();Object.defineProperty(y,"decodeProtectedHeader",{enumerable:!0,get:function(){return SO.decodeProtectedHeader}});var HO=H8();Object.defineProperty(y,"decodeJwt",{enumerable:!0,get:function(){return HO.decodeJwt}});y.errors=C();var CO=G8();Object.defineProperty(y,"generateKeyPair",{enumerable:!0,get:function(){return CO.generateKeyPair}});var OO=I8();Object.defineProperty(y,"generateSecret",{enumerable:!0,get:function(){return OO.generateSecret}});y.base64url=Kr();var GO=X8();Object.defineProperty(y,"cryptoRuntime",{enumerable:!0,get:function(){return GO.default}})});var yr=K((IY,Y8)=>{function Ar(t){Error.call(this,t),Error.captureStackTrace(this,this.constructor),this.name="JwksError",this.message=t}Ar.prototype=Object.create(Error.prototype);Ar.prototype.constructor=Ar;Y8.exports=Ar});var Od=K((ZY,z8)=>{var i8=Cd(),IO=yr();function ZO(t){if(t.alg)return t.alg;if(t.kty==="RSA")return"RS256";if(t.kty==="EC")switch(t.crv){case"P-256":return"ES256";case"secp256k1":return"ES256K";case"P-384":return"ES384";case"P-521":return"ES512"}if(t.kty==="OKP")switch(t.crv){case"Ed25519":case"Ed448":return"EdDSA"}throw new IO("Unsupported JWK")}async function XO(t){let c=[];t=t.filter(({use:u})=>u==="sig"||u===void 0).filter(({kty:u})=>u==="RSA"||u==="EC"||u==="OKP");for(let u of t)try{let r=await i8.importJWK({...u,ext:!0},ZO(u));if(r.type!=="public")continue;let n;switch(r[Symbol.toStringTag]){case"CryptoKey":{let f=await i8.exportSPKI(r);n=()=>f;break}case"KeyObject":default:n=()=>r.export({format:"pem",type:"spki"})}c.push({get publicKey(){return n()},get rsaPublicKey(){return n()},getPublicKey(){return n()},...typeof u.kid==="string"&&u.kid?{kid:u.kid}:void 0,...typeof u.alg==="string"&&u.alg?{alg:u.alg}:void 0})}catch(r){continue}return c}z8.exports={retrieveSigningKeys:XO}});var Gd=K((XY,R8)=>{function Sr(t){Error.call(this,t),Error.captureStackTrace(this,this.constructor),this.name="ArgumentError",this.message=t}Sr.prototype=Object.create(Error.prototype);Sr.prototype.constructor=Sr;R8.exports=Sr});var M8=K((EY,V8)=>{var EO=require("http"),YO=require("https"),iO=Gd();V8.exports.default=(t)=>{if(t.fetcher)return t.fetcher(t.uri);return new Promise((c,u)=>{let r;try{r=new URL(t.uri)}catch(w){throw new iO("Invalid JWKS URI: The provided URI is not a valid URL.")}let{hostname:n,port:f,protocol:d,pathname:h,search:q}=r,_=h+q,W={hostname:n,path:_,port:f,method:"GET",...t.headers&&{headers:{...t.headers}},...t.timeout&&{timeout:t.timeout},...t.agent&&{agent:t.agent}},$=(d==="https:"?YO:EO).request(W,(w)=>{let P="";w.setEncoding("utf8"),w.on("data",(A)=>{P+=A}),w.on("end",()=>{if(w.statusCode<200||w.statusCode>=300){let A=w.body&&(w.body.message||w.body)||w.statusMessage||`Http Error ${w.statusCode}`;u({errorMsg:A})}else try{c(P&&JSON.parse(P))}catch(A){u(A)}})});$.on("timeout",()=>$.destroy()).on("error",(w)=>u(w)).end()})}});var N8=K((YY,e8)=>{e8.exports=function(t){t.prototype[Symbol.iterator]=function*(){for(let c=this.head;c;c=c.next)yield c.value}}});var D8=K((iY,T8)=>{T8.exports=Y;Y.Node=nt;Y.create=Y;function Y(t){var c=this;if(!(c instanceof Y))c=new Y;if(c.tail=null,c.head=null,c.length=0,t&&typeof t.forEach==="function")t.forEach(function(n){c.push(n)});else if(arguments.length>0)for(var u=0,r=arguments.length;u<r;u++)c.push(arguments[u]);return c}Y.prototype.removeNode=function(t){if(t.list!==this)throw Error("removing node which does not belong to this list");var{next:c,prev:u}=t;if(c)c.prev=u;if(u)u.next=c;if(t===this.head)this.head=c;if(t===this.tail)this.tail=u;return t.list.length--,t.next=null,t.prev=null,t.list=null,c};Y.prototype.unshiftNode=function(t){if(t===this.head)return;if(t.list)t.list.removeNode(t);var c=this.head;if(t.list=this,t.next=c,c)c.prev=t;if(this.head=t,!this.tail)this.tail=t;this.length++};Y.prototype.pushNode=function(t){if(t===this.tail)return;if(t.list)t.list.removeNode(t);var c=this.tail;if(t.list=this,t.prev=c,c)c.next=t;if(this.tail=t,!this.head)this.head=t;this.length++};Y.prototype.push=function(){for(var t=0,c=arguments.length;t<c;t++)RO(this,arguments[t]);return this.length};Y.prototype.unshift=function(){for(var t=0,c=arguments.length;t<c;t++)VO(this,arguments[t]);return this.length};Y.prototype.pop=function(){if(!this.tail)return;var t=this.tail.value;if(this.tail=this.tail.prev,this.tail)this.tail.next=null;else this.head=null;return this.length--,t};Y.prototype.shift=function(){if(!this.head)return;var t=this.head.value;if(this.head=this.head.next,this.head)this.head.prev=null;else this.tail=null;return this.length--,t};Y.prototype.forEach=function(t,c){c=c||this;for(var u=this.head,r=0;u!==null;r++)t.call(c,u.value,r,this),u=u.next};Y.prototype.forEachReverse=function(t,c){c=c||this;for(var u=this.tail,r=this.length-1;u!==null;r--)t.call(c,u.value,r,this),u=u.prev};Y.prototype.get=function(t){for(var c=0,u=this.head;u!==null&&c<t;c++)u=u.next;if(c===t&&u!==null)return u.value};Y.prototype.getReverse=function(t){for(var c=0,u=this.tail;u!==null&&c<t;c++)u=u.prev;if(c===t&&u!==null)return u.value};Y.prototype.map=function(t,c){c=c||this;var u=new Y;for(var r=this.head;r!==null;)u.push(t.call(c,r.value,this)),r=r.next;return u};Y.prototype.mapReverse=function(t,c){c=c||this;var u=new Y;for(var r=this.tail;r!==null;)u.push(t.call(c,r.value,this)),r=r.prev;return u};Y.prototype.reduce=function(t,c){var u,r=this.head;if(arguments.length>1)u=c;else if(this.head)r=this.head.next,u=this.head.value;else throw TypeError("Reduce of empty list with no initial value");for(var n=0;r!==null;n++)u=t(u,r.value,n),r=r.next;return u};Y.prototype.reduceReverse=function(t,c){var u,r=this.tail;if(arguments.length>1)u=c;else if(this.tail)r=this.tail.prev,u=this.tail.value;else throw TypeError("Reduce of empty list with no initial value");for(var n=this.length-1;r!==null;n--)u=t(u,r.value,n),r=r.prev;return u};Y.prototype.toArray=function(){var t=Array(this.length);for(var c=0,u=this.head;u!==null;c++)t[c]=u.value,u=u.next;return t};Y.prototype.toArrayReverse=function(){var t=Array(this.length);for(var c=0,u=this.tail;u!==null;c++)t[c]=u.value,u=u.prev;return t};Y.prototype.slice=function(t,c){if(c=c||this.length,c<0)c+=this.length;if(t=t||0,t<0)t+=this.length;var u=new Y;if(c<t||c<0)return u;if(t<0)t=0;if(c>this.length)c=this.length;for(var r=0,n=this.head;n!==null&&r<t;r++)n=n.next;for(;n!==null&&r<c;r++,n=n.next)u.push(n.value);return u};Y.prototype.sliceReverse=function(t,c){if(c=c||this.length,c<0)c+=this.length;if(t=t||0,t<0)t+=this.length;var u=new Y;if(c<t||c<0)return u;if(t<0)t=0;if(c>this.length)c=this.length;for(var r=this.length,n=this.tail;n!==null&&r>c;r--)n=n.prev;for(;n!==null&&r>t;r--,n=n.prev)u.push(n.value);return u};Y.prototype.splice=function(t,c,...u){if(t>this.length)t=this.length-1;if(t<0)t=this.length+t;for(var r=0,n=this.head;n!==null&&r<t;r++)n=n.next;var f=[];for(var r=0;n&&r<c;r++)f.push(n.value),n=this.removeNode(n);if(n===null)n=this.tail;if(n!==this.head&&n!==this.tail)n=n.prev;for(var r=0;r<u.length;r++)n=zO(this,n,u[r]);return f};Y.prototype.reverse=function(){var t=this.head,c=this.tail;for(var u=t;u!==null;u=u.prev){var r=u.prev;u.prev=u.next,u.next=r}return this.head=c,this.tail=t,this};function zO(t,c,u){var r=c===t.head?new nt(u,null,c,t):new nt(u,c,c.next,t);if(r.next===null)t.tail=r;if(r.prev===null)t.head=r;return t.length++,r}function RO(t,c){if(t.tail=new nt(c,t.tail,null,t),!t.head)t.head=t.tail;t.length++}function VO(t,c){if(t.head=new nt(c,null,t.head,t),!t.tail)t.tail=t.head;t.length++}function nt(t,c,u,r){if(!(this instanceof nt))return new nt(t,c,u,r);if(this.list=r,this.value=t,c)c.next=this,this.prev=c;else this.prev=null;if(u)u.prev=this,this.next=u;else this.next=null}try{N8()(Y)}catch(t){}});var Xd=K((zY,L8)=>{var MO=D8(),ft=Symbol("max"),V1=Symbol("length"),pt=Symbol("lengthCalculator"),Yc=Symbol("allowStale"),dt=Symbol("maxAge"),R1=Symbol("dispose"),b8=Symbol("noDisposeOnSet"),v=Symbol("lruList"),H1=Symbol("cache"),p8=Symbol("updateAgeOnGet"),Id=()=>1;class v8{constructor(t){if(typeof t==="number")t={max:t};if(!t)t={};if(t.max&&(typeof t.max!=="number"||t.max<0))throw TypeError("max must be a non-negative number");let c=this[ft]=t.max||1/0,u=t.length||Id;if(this[pt]=typeof u!=="function"?Id:u,this[Yc]=t.stale||!1,t.maxAge&&typeof t.maxAge!=="number")throw TypeError("maxAge must be a number");this[dt]=t.maxAge||0,this[R1]=t.dispose,this[b8]=t.noDisposeOnSet||!1,this[p8]=t.updateAgeOnGet||!1,this.reset()}set max(t){if(typeof t!=="number"||t<0)throw TypeError("max must be a non-negative number");this[ft]=t||1/0,Ec(this)}get max(){return this[ft]}set allowStale(t){this[Yc]=!!t}get allowStale(){return this[Yc]}set maxAge(t){if(typeof t!=="number")throw TypeError("maxAge must be a non-negative number");this[dt]=t,Ec(this)}get maxAge(){return this[dt]}set lengthCalculator(t){if(typeof t!=="function")t=Id;if(t!==this[pt])this[pt]=t,this[V1]=0,this[v].forEach((c)=>{c.length=this[pt](c.value,c.key),this[V1]+=c.length});Ec(this)}get lengthCalculator(){return this[pt]}get length(){return this[V1]}get itemCount(){return this[v].length}rforEach(t,c){c=c||this;for(let u=this[v].tail;u!==null;){let r=u.prev;j8(this,t,u,c),u=r}}forEach(t,c){c=c||this;for(let u=this[v].head;u!==null;){let r=u.next;j8(this,t,u,c),u=r}}keys(){return this[v].toArray().map((t)=>t.key)}values(){return this[v].toArray().map((t)=>t.value)}reset(){if(this[R1]&&this[v]&&this[v].length)this[v].forEach((t)=>this[R1](t.key,t.value));this[H1]=new Map,this[v]=new MO,this[V1]=0}dump(){return this[v].map((t)=>Hr(this,t)?!1:{k:t.key,v:t.value,e:t.now+(t.maxAge||0)}).toArray().filter((t)=>t)}dumpLru(){return this[v]}set(t,c,u){if(u=u||this[dt],u&&typeof u!=="number")throw TypeError("maxAge must be a number");let r=u?Date.now():0,n=this[pt](c,t);if(this[H1].has(t)){if(n>this[ft])return vt(this,this[H1].get(t)),!1;let h=this[H1].get(t).value;if(this[R1]){if(!this[b8])this[R1](t,h.value)}return h.now=r,h.maxAge=u,h.value=c,this[V1]+=n-h.length,h.length=n,this.get(t),Ec(this),!0}let f=new x8(t,c,n,r,u);if(f.length>this[ft]){if(this[R1])this[R1](t,c);return!1}return this[V1]+=f.length,this[v].unshift(f),this[H1].set(t,this[v].head),Ec(this),!0}has(t){if(!this[H1].has(t))return!1;let c=this[H1].get(t).value;return!Hr(this,c)}get(t){return Zd(this,t,!0)}peek(t){return Zd(this,t,!1)}pop(){let t=this[v].tail;if(!t)return null;return vt(this,t),t.value}del(t){vt(this,this[H1].get(t))}load(t){this.reset();let c=Date.now();for(let u=t.length-1;u>=0;u--){let r=t[u],n=r.e||0;if(n===0)this.set(r.k,r.v);else{let f=n-c;if(f>0)this.set(r.k,r.v,f)}}}prune(){this[H1].forEach((t,c)=>Zd(this,c,!1))}}var Zd=(t,c,u)=>{let r=t[H1].get(c);if(r){let n=r.value;if(Hr(t,n)){if(vt(t,r),!t[Yc])return}else if(u){if(t[p8])r.value.now=Date.now();t[v].unshiftNode(r)}return n.value}},Hr=(t,c)=>{if(!c||!c.maxAge&&!t[dt])return!1;let u=Date.now()-c.now;return c.maxAge?u>c.maxAge:t[dt]&&u>t[dt]},Ec=(t)=>{if(t[V1]>t[ft])for(let c=t[v].tail;t[V1]>t[ft]&&c!==null;){let u=c.prev;vt(t,c),c=u}},vt=(t,c)=>{if(c){let u=c.value;if(t[R1])t[R1](u.key,u.value);t[V1]-=u.length,t[H1].delete(u.key),t[v].removeNode(c)}};class x8{constructor(t,c,u,r,n){this.key=t,this.value=c,this.length=u,this.now=r,this.maxAge=n||0}}var j8=(t,c,u,r)=>{let n=u.value;if(Hr(t,n)){if(vt(t,u),!t[Yc])n=void 0}if(n)c.call(r,n.value,n.key,t)};L8.exports=v8});var vd=K((ic,xt)=>{var eO=200,tK="__lodash_hash_undefined__",cK=9007199254740991,ed="[object Arguments]",NO="[object Array]",uK="[object Boolean]",rK="[object Date]",TO="[object Error]",Nd="[object Function]",nK="[object GeneratorFunction]",Cr="[object Map]",fK="[object Number]",Td="[object Object]",s8="[object Promise]",dK="[object RegExp]",Or="[object Set]",hK="[object String]",qK="[object Symbol]",Yd="[object WeakMap]",_K="[object ArrayBuffer]",Gr="[object DataView]",KK="[object Float32Array]",WK="[object Float64Array]",JK="[object Int8Array]",wK="[object Int16Array]",$K="[object Int32Array]",PK="[object Uint8Array]",AK="[object Uint8ClampedArray]",yK="[object Uint16Array]",SK="[object Uint32Array]",DO=/[\\^$.*+?()[\]{}|]/g,bO=/\w*$/,jO=/^\[object .+?Constructor\]$/,pO=/^(?:0|[1-9]\d*)$/,R={};R[ed]=R[NO]=R[_K]=R[Gr]=R[uK]=R[rK]=R[KK]=R[WK]=R[JK]=R[wK]=R[$K]=R[Cr]=R[fK]=R[Td]=R[dK]=R[Or]=R[hK]=R[qK]=R[PK]=R[AK]=R[yK]=R[SK]=!0;R[TO]=R[Nd]=R[Yd]=!1;var vO=typeof global=="object"&&global&&global.Object===Object&&global,xO=typeof self=="object"&&self&&self.Object===Object&&self,M1=vO||xO||Function("return this")(),HK=typeof ic=="object"&&ic&&!ic.nodeType&&ic,m8=HK&&typeof xt=="object"&&xt&&!xt.nodeType&&xt,LO=m8&&m8.exports===HK;function sO(t,c){return t.set(c[0],c[1]),t}function mO(t,c){return t.add(c),t}function gO(t,c){var u=-1,r=t?t.length:0;while(++u<r)if(c(t[u],u,t)===!1)break;return t}function BO(t,c){var u=-1,r=c.length,n=t.length;while(++u<r)t[n+u]=c[u];return t}function CK(t,c,u,r){var n=-1,f=t?t.length:0;if(r&&f)u=t[++n];while(++n<f)u=c(u,t[n],n,t);return u}function FO(t,c){var u=-1,r=Array(t);while(++u<t)r[u]=c(u);return r}function kO(t,c){return t==null?void 0:t[c]}function OK(t){var c=!1;if(t!=null&&typeof t.toString!="function")try{c=!!(t+"")}catch(u){}return c}function g8(t){var c=-1,u=Array(t.size);return t.forEach(function(r,n){u[++c]=[n,r]}),u}function Dd(t,c){return function(u){return t(c(u))}}function B8(t){var c=-1,u=Array(t.size);return t.forEach(function(r){u[++c]=r}),u}var oO=Array.prototype,UO=Function.prototype,Ir=Object.prototype,Ed=M1["__core-js_shared__"],F8=function(){var t=/[^.]+$/.exec(Ed&&Ed.keys&&Ed.keys.IE_PROTO||"");return t?"Symbol(src)_1."+t:""}(),GK=UO.toString,k1=Ir.hasOwnProperty,Zr=Ir.toString,lO=RegExp("^"+GK.call(k1).replace(DO,"\\$&").replace(/hasOwnProperty|(function).*?(?=\\\()| for .+?(?=\\\])/g,"$1.*?")+"$"),k8=LO?M1.Buffer:void 0,o8=M1.Symbol,U8=M1.Uint8Array,QO=Dd(Object.getPrototypeOf,Object),aO=Object.create,tG=Ir.propertyIsEnumerable,cG=oO.splice,l8=Object.getOwnPropertySymbols,uG=k8?k8.isBuffer:void 0,rG=Dd(Object.keys,Object),id=mt(M1,"DataView"),zc=mt(M1,"Map"),zd=mt(M1,"Promise"),Rd=mt(M1,"Set"),Vd=mt(M1,"WeakMap"),Rc=mt(Object,"create"),nG=_t(id),fG=_t(zc),dG=_t(zd),hG=_t(Rd),qG=_t(Vd),Q8=o8?o8.prototype:void 0,a8=Q8?Q8.valueOf:void 0;function qt(t){var c=-1,u=t?t.length:0;this.clear();while(++c<u){var r=t[c];this.set(r[0],r[1])}}function _G(){this.__data__=Rc?Rc(null):{}}function KG(t){return this.has(t)&&delete this.__data__[t]}function WG(t){var c=this.__data__;if(Rc){var u=c[t];return u===tK?void 0:u}return k1.call(c,t)?c[t]:void 0}function JG(t){var c=this.__data__;return Rc?c[t]!==void 0:k1.call(c,t)}function wG(t,c){var u=this.__data__;return u[t]=Rc&&c===void 0?tK:c,this}qt.prototype.clear=_G;qt.prototype.delete=KG;qt.prototype.get=WG;qt.prototype.has=JG;qt.prototype.set=wG;function e1(t){var c=-1,u=t?t.length:0;this.clear();while(++c<u){var r=t[c];this.set(r[0],r[1])}}function $G(){this.__data__=[]}function PG(t){var c=this.__data__,u=Xr(c,t);if(u<0)return!1;var r=c.length-1;if(u==r)c.pop();else cG.call(c,u,1);return!0}function AG(t){var c=this.__data__,u=Xr(c,t);return u<0?void 0:c[u][1]}function yG(t){return Xr(this.__data__,t)>-1}function SG(t,c){var u=this.__data__,r=Xr(u,t);if(r<0)u.push([t,c]);else u[r][1]=c;return this}e1.prototype.clear=$G;e1.prototype.delete=PG;e1.prototype.get=AG;e1.prototype.has=yG;e1.prototype.set=SG;function Lt(t){var c=-1,u=t?t.length:0;this.clear();while(++c<u){var r=t[c];this.set(r[0],r[1])}}function HG(){this.__data__={hash:new qt,map:new(zc||e1),string:new qt}}function CG(t){return Er(this,t).delete(t)}function OG(t){return Er(this,t).get(t)}function GG(t){return Er(this,t).has(t)}function IG(t,c){return Er(this,t).set(t,c),this}Lt.prototype.clear=HG;Lt.prototype.delete=CG;Lt.prototype.get=OG;Lt.prototype.has=GG;Lt.prototype.set=IG;function st(t){this.__data__=new e1(t)}function ZG(){this.__data__=new e1}function XG(t){return this.__data__.delete(t)}function EG(t){return this.__data__.get(t)}function YG(t){return this.__data__.has(t)}function iG(t,c){var u=this.__data__;if(u instanceof e1){var r=u.__data__;if(!zc||r.length<eO-1)return r.push([t,c]),this;u=this.__data__=new Lt(r)}return u.set(t,c),this}st.prototype.clear=ZG;st.prototype.delete=XG;st.prototype.get=EG;st.prototype.has=YG;st.prototype.set=iG;function zG(t,c){var u=jd(t)||aG(t)?FO(t.length,String):[],r=u.length,n=!!r;for(var f in t)if((c||k1.call(t,f))&&!(n&&(f=="length"||oG(f,r))))u.push(f);return u}function IK(t,c,u){var r=t[c];if(!(k1.call(t,c)&&YK(r,u))||u===void 0&&!(c in t))t[c]=u}function Xr(t,c){var u=t.length;while(u--)if(YK(t[u][0],c))return u;return-1}function RG(t,c){return t&&ZK(c,pd(c),t)}function Md(t,c,u,r,n,f,d){var h;if(r)h=f?r(t,n,f,d):r(t);if(h!==void 0)return h;if(!Yr(t))return t;var q=jd(t);if(q){if(h=BG(t),!c)return sG(t,h)}else{var _=ht(t),W=_==Nd||_==nK;if(cI(t))return DG(t,c);if(_==Td||_==ed||W&&!f){if(OK(t))return f?t:{};if(h=FG(W?{}:t),!c)return mG(t,RG(h,t))}else{if(!R[_])return f?t:{};h=kG(t,_,Md,c)}}d||(d=new st);var J=d.get(t);if(J)return J;if(d.set(t,h),!q)var $=u?gG(t):pd(t);return gO($||t,function(w,P){if($)P=w,w=t[P];IK(h,P,Md(w,c,u,r,P,t,d))}),h}function VG(t){return Yr(t)?aO(t):{}}function MG(t,c,u){var r=c(t);return jd(t)?r:BO(r,u(t))}function eG(t){return Zr.call(t)}function NG(t){if(!Yr(t)||lG(t))return!1;var c=zK(t)||OK(t)?lO:jO;return c.test(_t(t))}function TG(t){if(!EK(t))return rG(t);var c=[];for(var u in Object(t))if(k1.call(t,u)&&u!="constructor")c.push(u);return c}function DG(t,c){if(c)return t.slice();var u=new t.constructor(t.length);return t.copy(u),u}function bd(t){var c=new t.constructor(t.byteLength);return new U8(c).set(new U8(t)),c}function bG(t,c){var u=c?bd(t.buffer):t.buffer;return new t.constructor(u,t.byteOffset,t.byteLength)}function jG(t,c,u){var r=c?u(g8(t),!0):g8(t);return CK(r,sO,new t.constructor)}function pG(t){var c=new t.constructor(t.source,bO.exec(t));return c.lastIndex=t.lastIndex,c}function vG(t,c,u){var r=c?u(B8(t),!0):B8(t);return CK(r,mO,new t.constructor)}function xG(t){return a8?Object(a8.call(t)):{}}function LG(t,c){var u=c?bd(t.buffer):t.buffer;return new t.constructor(u,t.byteOffset,t.length)}function sG(t,c){var u=-1,r=t.length;c||(c=Array(r));while(++u<r)c[u]=t[u];return c}function ZK(t,c,u,r){u||(u={});var n=-1,f=c.length;while(++n<f){var d=c[n],h=r?r(u[d],t[d],d,u,t):void 0;IK(u,d,h===void 0?t[d]:h)}return u}function mG(t,c){return ZK(t,XK(t),c)}function gG(t){return MG(t,pd,XK)}function Er(t,c){var u=t.__data__;return UG(c)?u[typeof c=="string"?"string":"hash"]:u.map}function mt(t,c){var u=kO(t,c);return NG(u)?u:void 0}var XK=l8?Dd(l8,Object):nI,ht=eG;if(id&&ht(new id(new ArrayBuffer(1)))!=Gr||zc&&ht(new zc)!=Cr||zd&&ht(zd.resolve())!=s8||Rd&&ht(new Rd)!=Or||Vd&&ht(new Vd)!=Yd)ht=function(t){var c=Zr.call(t),u=c==Td?t.constructor:void 0,r=u?_t(u):void 0;if(r)switch(r){case nG:return Gr;case fG:return Cr;case dG:return s8;case hG:return Or;case qG:return Yd}return c};function BG(t){var c=t.length,u=t.constructor(c);if(c&&typeof t[0]=="string"&&k1.call(t,"index"))u.index=t.index,u.input=t.input;return u}function FG(t){return typeof t.constructor=="function"&&!EK(t)?VG(QO(t)):{}}function kG(t,c,u,r){var n=t.constructor;switch(c){case _K:return bd(t);case uK:case rK:return new n(+t);case Gr:return bG(t,r);case KK:case WK:case JK:case wK:case $K:case PK:case AK:case yK:case SK:return LG(t,r);case Cr:return jG(t,r,u);case fK:case hK:return new n(t);case dK:return pG(t);case Or:return vG(t,r,u);case qK:return xG(t)}}function oG(t,c){return c=c==null?cK:c,!!c&&(typeof t=="number"||pO.test(t))&&(t>-1&&t%1==0&&t<c)}function UG(t){var c=typeof t;return c=="string"||c=="number"||c=="symbol"||c=="boolean"?t!=="__proto__":t===null}function lG(t){return!!F8&&F8 in t}function EK(t){var c=t&&t.constructor,u=typeof c=="function"&&c.prototype||Ir;return t===u}function _t(t){if(t!=null){try{return GK.call(t)}catch(c){}try{return t+""}catch(c){}}return""}function QG(t){return Md(t,!0,!0)}function YK(t,c){return t===c||t!==t&&c!==c}function aG(t){return tI(t)&&k1.call(t,"callee")&&(!tG.call(t,"callee")||Zr.call(t)==ed)}var jd=Array.isArray;function iK(t){return t!=null&&uI(t.length)&&!zK(t)}function tI(t){return rI(t)&&iK(t)}var cI=uG||fI;function zK(t){var c=Yr(t)?Zr.call(t):"";return c==Nd||c==nK}function uI(t){return typeof t=="number"&&t>-1&&t%1==0&&t<=cK}function Yr(t){var c=typeof t;return!!t&&(c=="object"||c=="function")}function rI(t){return!!t&&typeof t=="object"}function pd(t){return iK(t)?zG(t):TG(t)}function nI(){return[]}function fI(){return!1}xt.exports=QG});var xd=K((ir)=>{Object.defineProperty(ir,"__esModule",{value:!0});ir.deepFreeze=void 0;function RK(t){if(t)Object.freeze(t),Object.getOwnPropertyNames(t).forEach(function(c){if(t.hasOwnProperty(c)&&t[c]!==null&&(typeof t[c]==="object"||typeof t[c]==="function")&&t[c].constructor!==Buffer&&!Object.isFrozen(t[c]))RK(t[c])});return t}ir.deepFreeze=RK});var NK=K((i1)=>{var dI=i1&&i1.__read||function(t,c){var u=typeof Symbol==="function"&&t[Symbol.iterator];if(!u)return t;var r=u.call(t),n,f=[],d;try{while((c===void 0||c-- >0)&&!(n=r.next()).done)f.push(n.value)}catch(h){d={error:h}}finally{try{if(n&&!n.done&&(u=r.return))u.call(r)}finally{if(d)throw d.error}}return f},Y1=i1&&i1.__spread||function(){for(var t=[],c=0;c<arguments.length;c++)t=t.concat(dI(arguments[c]));return t},eK=i1&&i1.__importDefault||function(t){return t&&t.__esModule?t:{default:t}};Object.defineProperty(i1,"__esModule",{value:!0});i1.syncMemoizer=void 0;var hI=eK(Xd()),qI=require("events"),VK=eK(vd()),MK=xd();function _I(t){var c=new hI.default(t),u=t.load,r=t.hash,n=t.bypass,f=t.itemMaxAge,d=t.freeze,h=t.clone,q=new qI.EventEmitter,_=Object.assign({del:W,reset:function(){return c.reset()},keys:c.keys.bind(c),on:q.on.bind(q),once:q.once.bind(q)},t);if(t.disable)return Object.assign(u,_);function W(){var A=r.apply(void 0,Y1(arguments));c.del(A)}function J(A){var G=[];for(var Z=1;Z<arguments.length;Z++)G[Z-1]=arguments[Z];q.emit.apply(q,Y1([A],G))}function $(A){return A&&A.then&&typeof A.then==="function"}function w(A){var G=A;if(h)if($(G))G=G.then(VK.default);else G=VK.default(G);if(d)if($(G))G=G.then(MK.deepFreeze);else MK.deepFreeze(G);return G}var P=function(){var A=[];for(var G=0;G<arguments.length;G++)A[G]=arguments[G];if(n&&n.apply(void 0,Y1(A)))return J.apply(void 0,Y1(["miss"],A)),u.apply(void 0,Y1(A));var Z=r.apply(void 0,Y1(A)),E=c.get(Z);if(E)return J.apply(void 0,Y1(["hit"],A)),w(E);J.apply(void 0,Y1(["miss"],A));var O=u.apply(void 0,Y1(A));if(f)c.set(Z,O,f.apply(void 0,Y1(A.concat([O]))));else c.set(Z,O);return w(O)};return Object.assign(P,_)}i1.syncMemoizer=_I});var bK=K((W1)=>{var KI=W1&&W1.__read||function(t,c){var u=typeof Symbol==="function"&&t[Symbol.iterator];if(!u)return t;var r=u.call(t),n,f=[],d;try{while((c===void 0||c-- >0)&&!(n=r.next()).done)f.push(n.value)}catch(h){d={error:h}}finally{try{if(n&&!n.done&&(u=r.return))u.call(r)}finally{if(d)throw d.error}}return f},Q=W1&&W1.__spread||function(){for(var t=[],c=0;c<arguments.length;c++)t=t.concat(KI(arguments[c]));return t},WI=W1&&W1.__values||function(t){var c=typeof Symbol==="function"&&Symbol.iterator,u=c&&t[c],r=0;if(u)return u.call(t);if(t&&typeof t.length==="number")return{next:function(){if(t&&r>=t.length)t=void 0;return{value:t&&t[r++],done:!t}}};throw TypeError(c?"Object is not iterable.":"Symbol.iterator is not defined.")},TK=W1&&W1.__importDefault||function(t){return t&&t.__esModule?t:{default:t}};Object.defineProperty(W1,"__esModule",{value:!0});W1.asyncMemoizer=void 0;var JI=TK(Xd()),wI=require("events"),$I=TK(vd()),PI=xd(),AI=NK();function DK(t){var c=new JI.default(t),u=t.load,r=t.hash,n=t.bypass,f=t.itemMaxAge,d=t.freeze,h=t.clone,q=t.queueMaxAge||1000,_=new Map,W=new wI.EventEmitter,J=Object.assign({del:$,reset:function(){return c.reset()},keys:c.keys.bind(c),on:W.on.bind(W),once:W.once.bind(W)},t);if(t.disable)return Object.assign(u,J);function $(){var Z=[];for(var E=0;E<arguments.length;E++)Z[E]=arguments[E];var O=r.apply(void 0,Q(Z));c.del(O)}function w(Z,E,O){if(d)O.forEach(PI.deepFreeze);if(f)c.set(Z,O,f.apply(void 0,Q(E.concat(O))));else c.set(Z,O)}function P(Z,E){var O,D;try{for(var a=WI(Z),c1=a.next();!c1.done;c1=a.next()){var N1=c1.value;if(h)setImmediate.apply(void 0,Q([N1],E.map($I.default)));else setImmediate.apply(void 0,Q([N1],E))}}catch(o1){O={error:o1}}finally{try{if(c1&&!c1.done&&(D=a.return))D.call(a)}finally{if(O)throw O.error}}}function A(Z){var E=[];for(var O=1;O<arguments.length;O++)E[O-1]=arguments[O];W.emit.apply(W,Q([Z],E))}function G(){var Z=[];for(var E=0;E<arguments.length;E++)Z[E]=arguments[E];var O=Z.slice(0,-1),D=Z.slice(-1).pop(),a;if(n&&n.apply(void 0,Q(O)))return A.apply(void 0,Q(["miss"],O)),u.apply(void 0,Q(Z));if(O.length===0&&!r)a="_";else a=r.apply(void 0,Q(O));var c1=c.get(a);if(c1)return A.apply(void 0,Q(["hit"],O)),P([D],[null].concat(c1));var N1=_.get(a);if(N1&&N1.expiresAt>Date.now()){N1.queue.push(D),A.apply(void 0,Q(["queue"],O));return}A.apply(void 0,Q(["miss"],O));var o1=Date.now(),Mc=[D];_.set(a,{queue:Mc,expiresAt:o1+q});var zW=function(){var ec=[];for(var Nc=0;Nc<arguments.length;Nc++)ec[Nc]=arguments[Nc];var RW=ec[0];if(!RW)w(a,O,ec.slice(1));_.delete(a),A.apply(void 0,Q(["loaded",Date.now()-o1],O)),P(Mc,ec)};u.apply(void 0,Q(O,[zW]))}return Object.assign(G,J)}W1.asyncMemoizer=DK;DK.sync=AI.syncMemoizer});var pK=K((eY,jK)=>{var yI=bK();jK.exports=yI.asyncMemoizer});var xK=K((NY,vK)=>{var SI=yu()("jwks"),HI=pK(),{promisify:CI,callbackify:OI}=require("util");function GI(t,{cacheMaxEntries:c=5,cacheMaxAge:u=600000}){return SI(`Configured caching of signing keys. Max: ${c} / Age: ${u}`),CI(HI({hash:(r)=>r,load:OI(t.getSigningKey.bind(t)),maxAge:u,max:c}))}vK.exports.default=GI});var Ld=K((TY,sK)=>{var LK=function(t,c,u,r){if(this.bucketSize=t,this.tokensPerInterval=c,typeof u==="string")switch(u){case"sec":case"second":this.interval=1000;break;case"min":case"minute":this.interval=60000;break;case"hr":case"hour":this.interval=3600000;break;case"day":this.interval=86400000;break;default:throw Error("Invaid interval "+u)}else this.interval=u;this.parentBucket=r,this.content=0,this.lastDrip=+new Date};LK.prototype={bucketSize:1,tokensPerInterval:1,interval:1000,parentBucket:null,content:0,lastDrip:0,removeTokens:function(t,c){var u=this;if(!this.bucketSize)return process.nextTick(c.bind(null,null,t,Number.POSITIVE_INFINITY)),!0;if(t>this.bucketSize)return process.nextTick(c.bind(null,"Requested tokens "+t+" exceeds bucket size "+this.bucketSize,null)),!1;if(this.drip(),t>this.content)return r();if(this.parentBucket)return this.parentBucket.removeTokens(t,function(n,f){if(n)return c(n,null);if(t>u.content)return r();u.content-=t,c(null,Math.min(f,u.content))});else return this.content-=t,process.nextTick(c.bind(null,null,this.content)),!0;function r(){var n=Math.ceil((t-u.content)*(u.interval/u.tokensPerInterval));return setTimeout(function(){u.removeTokens(t,c)},n),!1}},tryRemoveTokens:function(t){if(!this.bucketSize)return!0;if(t>this.bucketSize)return!1;if(this.drip(),t>this.content)return!1;if(this.parentBucket&&!this.parentBucket.tryRemoveTokens(t))return!1;return this.content-=t,!0},drip:function(){if(!this.tokensPerInterval){this.content=this.bucketSize;return}var t=+new Date,c=Math.max(t-this.lastDrip,0);this.lastDrip=t;var u=c*(this.tokensPerInterval/this.interval);this.content=Math.min(this.content+u,this.bucketSize)}};sK.exports=LK});var gK=K((DY,mK)=>{var II=function(){if(typeof process<"u"&&process.hrtime){var t=process.hrtime(),c=t[0],u=t[1];return c*1000+Math.floor(u/1e6)}return new Date().getTime()};mK.exports=II});var kK=K((bY,FK)=>{var ZI=Ld(),sd=gK(),BK=function(t,c,u){this.tokenBucket=new ZI(t,t,c,null),this.tokenBucket.content=t,this.curIntervalStart=sd(),this.tokensThisInterval=0,this.fireImmediately=u};BK.prototype={tokenBucket:null,curIntervalStart:0,tokensThisInterval:0,fireImmediately:!1,removeTokens:function(t,c){if(t>this.tokenBucket.bucketSize)return process.nextTick(c.bind(null,"Requested tokens "+t+" exceeds maximum tokens per interval "+this.tokenBucket.bucketSize,null)),!1;var u=this,r=sd();if(r<this.curIntervalStart||r-this.curIntervalStart>=this.tokenBucket.interval)this.curIntervalStart=r,this.tokensThisInterval=0;if(t>this.tokenBucket.tokensPerInterval-this.tokensThisInterval){if(this.fireImmediately)process.nextTick(c.bind(null,null,-1));else{var n=Math.ceil(this.curIntervalStart+this.tokenBucket.interval-r);setTimeout(function(){u.tokenBucket.removeTokens(t,f)},n)}return!1}return this.tokenBucket.removeTokens(t,f);function f(d,h){if(d)return c(d,null);u.tokensThisInterval+=t,c(null,h)}},tryRemoveTokens:function(t){if(t>this.tokenBucket.bucketSize)return!1;var c=sd();if(c<this.curIntervalStart||c-this.curIntervalStart>=this.tokenBucket.interval)this.curIntervalStart=c,this.tokensThisInterval=0;if(t>this.tokenBucket.tokensPerInterval-this.tokensThisInterval)return!1;var u=this.tokenBucket.tryRemoveTokens(t);if(u)this.tokensThisInterval+=t;return u},getTokensRemaining:function(){return this.tokenBucket.drip(),this.tokenBucket.content}};FK.exports=BK});var oK=K((md)=>{md.RateLimiter=kK();md.TokenBucket=Ld()});var gd=K((pY,UK)=>{function zr(t){Error.call(this,t),Error.captureStackTrace(this,this.constructor),this.name="JwksRateLimitError",this.message=t}zr.prototype=Object.create(Error.prototype);zr.prototype.constructor=zr;UK.exports=zr});var QK=K((vY,lK)=>{var Bd=yu()("jwks"),{RateLimiter:XI}=oK(),EI=gd();function YI(t,{jwksRequestsPerMinute:c=10}){let u=t.getSigningKey.bind(t),r=new XI(c,"minute",!0);return Bd(`Configured rate limiting to JWKS endpoint at ${c}/minute`),async(n)=>await new Promise((f,d)=>{r.removeTokens(1,async(h,q)=>{if(h)d(h);if(Bd("Requests to the JWKS endpoint available for the next minute:",q),q<0)Bd("Too many requests to the JWKS endpoint"),d(new EI("Too many requests to the JWKS endpoint"));else try{let _=await u(n);f(_)}catch(_){d(_)}})})}lK.exports.default=YI});var tW=K((xY,aK)=>{var iI=Od().retrieveSigningKeys;function zI(t,{getKeysInterceptor:c}){let u=t.getSigningKey.bind(t);return async(r)=>{let n=await c(),f;if(n&&n.length)f=await iI(n);if(f&&f.length){let d=f.find((h)=>!r||h.kid===r);if(d)return d}return u(r)}}aK.exports.default=zI});var uW=K((LY,cW)=>{var{callbackify:RI}=require("util"),VI=(t)=>{let c=t.getSigningKey.bind(t);return(u,r)=>{if(r)return RI(c)(u,r);return c(u)}};cW.exports.default=VI});var nW=K((sY,rW)=>{rW.exports={request:M8().default,cacheSigningKey:xK().default,rateLimitSigningKey:QK().default,getKeysInterceptor:tW().default,callbackSupport:uW().default}});var Fd=K((mY,fW)=>{function Rr(t){Error.call(this,t),Error.captureStackTrace(this,this.constructor),this.name="SigningKeyNotFoundError",this.message=t}Rr.prototype=Object.create(Error.prototype);Rr.prototype.constructor=Rr;fW.exports=Rr});var gt=K((gY,qW)=>{var Kt=yu()("jwks"),{retrieveSigningKeys:MI}=Od(),{request:eI,cacheSigningKey:NI,rateLimitSigningKey:TI,getKeysInterceptor:DI,callbackSupport:bI}=nW(),kd=yr(),dW=Fd();class hW{constructor(t){if(this.options={rateLimit:!1,cache:!0,timeout:30000,...t},this.options.getKeysInterceptor)this.getSigningKey=DI(this,t);if(this.options.rateLimit)this.getSigningKey=TI(this,t);if(this.options.cache)this.getSigningKey=NI(this,t);this.getSigningKey=bI(this,t)}async getKeys(){Kt(`Fetching keys from '${this.options.jwksUri}'`);try{let t=await eI({uri:this.options.jwksUri,headers:this.options.requestHeaders,agent:this.options.requestAgent,timeout:this.options.timeout,fetcher:this.options.fetcher});return Kt("Keys:",t.keys),t.keys}catch(t){let{errorMsg:c}=t;throw Kt("Failure:",c||t),c?new kd(c):t}}async getSigningKeys(){let t=await this.getKeys();if(!t||!t.length)throw new kd("The JWKS endpoint did not contain any keys");let c=await MI(t);if(!c.length)throw new kd("The JWKS endpoint did not contain any signing keys");return Kt("Signing Keys:",c),c}async getSigningKey(t){Kt(`Fetching signing key for '${t}'`);let c=await this.getSigningKeys(),u=t!==void 0&&t!==null;if(!u&&c.length>1)throw Kt("No KID specified and JWKS endpoint returned more than 1 key"),new dW("No KID specified and JWKS endpoint returned more than 1 key");let r=c.find((n)=>!u||n.kid===t);if(r)return r;else throw Kt(`Unable to find a signing key that matches '${t}'`),new dW(`Unable to find a signing key that matches '${t}'`)}}qW.exports={JwksClient:hW}});var Bt=K((BY,_W)=>{_W.exports={ArgumentError:Gd(),JwksError:yr(),JwksRateLimitError:gd(),SigningKeyNotFoundError:Fd()}});var Vc=K((FY,KW)=>{var jI=["RS256","RS384","RS512","PS256","PS384","PS512","ES256","ES256K","ES384","ES512","EdDSA"];KW.exports=jI});var WW=K((kY,Vr)=>{var{ArgumentError:pI}=Bt(),{JwksClient:vI}=gt(),xI=Vc(),LI=(t,c)=>{if(t&&t.name==="SigningKeyNotFoundError")return c(t,null,null);if(t)return c(t,null,null)};Vr.exports.hapiJwt2KeyAsync=(t)=>{let c=Vr.exports.hapiJwt2Key(t);return function(u){return new Promise((r,n)=>{c(u,(d,h)=>{!h||d?n(d):r({key:h})})})}};Vr.exports.hapiJwt2Key=function(t){if(t===null||t===void 0)throw new pI("An options object must be provided when initializing hapiJwt2Key");let c=new vI(t),u=t.handleSigningKeyError||LI;return function(n,f){if(!n||!n.header)return f(Error("Cannot find a signing certificate if there is no header"),null,null);if(!xI.includes(n.header.alg))return f(Error("Unsupported algorithm "+n.header.alg+" supplied."),null,null);c.getSigningKey(n.header.kid).then((d)=>{return f(null,d.publicKey||d.rsaPublicKey,d)}).catch((d)=>{return u(d,(h)=>f(h,null,null))})}}});var wW=K((oY,JW)=>{var{ArgumentError:sI}=Bt(),{JwksClient:mI}=gt(),gI=Vc(),BI=(t,c)=>{if(t&&t.name==="SigningKeyNotFoundError")return c(null);if(t)return c(t)};JW.exports.expressJwtSecret=function(t){if(t===null||t===void 0)throw new sI("An options object must be provided when initializing expressJwtSecret");let c=new mI(t),u=t.handleSigningKeyError||BI,r=async(n,f)=>{if(!f)return;let d=f.header;if(!d||!gI.includes(d.alg))return;try{let h=await c.getSigningKey(d.kid);return h.publicKey||h.rsaPublicKey}catch(h){return new Promise((q,_)=>{u(h,(W)=>{if(!W)return q();_(W)})})}};return function(f,d,h,q){if(arguments.length===4){r(f,{header:d}).then((_)=>{setImmediate(q,null,_)}).catch((_)=>{setImmediate(q,_)});return}return r(f,arguments[1])}}});var PW=K((UY,$W)=>{var{ArgumentError:FI}=Bt(),{JwksClient:kI}=gt(),oI=Vc();$W.exports.koaJwtSecret=function(t={}){if(!t.jwksUri)throw new FI("No JWKS provided. Please provide a jwksUri");let c=new kI(t);return function({alg:r,kid:n}={}){return new Promise((f,d)=>{if(!oI.includes(r))return d(Error("Missing / invalid token algorithm"));c.getSigningKey(n).then((h)=>{f(h.publicKey||h.rsaPublicKey)}).catch((h)=>{if(t.handleSigningKeyError)return t.handleSigningKeyError(h).then(d);return d(h)})})}}});var HW=K((lY,SW)=>{var AW=Cd(),{ArgumentError:yW}=Bt(),{JwksClient:UI}=gt(),lI=Vc(),QI=(t,c)=>{if(t&&t.name==="SigningKeyNotFoundError")return c(null);if(t)return c(t)};SW.exports.passportJwtSecret=function(t){if(t===null||t===void 0)throw new yW("An options object must be provided when initializing passportJwtSecret");if(!t.jwksUri)throw new yW("No JWKS provided. Please provide a jwksUri");let c=new UI(t),u=t.handleSigningKeyError||QI;return function(n,f,d){let h;try{h={payload:AW.decodeJwt(f),header:AW.decodeProtectedHeader(f)}}catch(q){h=null}if(!h||!lI.includes(h.header.alg))return d(null,null);c.getSigningKey(h.header.kid).then((q)=>{d(null,q.publicKey||q.rsaPublicKey)}).catch((q)=>{u(q,(_)=>d(_,null))})}}});var OW=K((QY,J1)=>{var{JwksClient:CW}=gt(),Mr=Bt(),{hapiJwt2Key:aI,hapiJwt2KeyAsync:tZ}=WW(),{expressJwtSecret:cZ}=wW(),{koaJwtSecret:uZ}=PW(),{passportJwtSecret:rZ}=HW();J1.exports=(t)=>{return new CW(t)};J1.exports.JwksClient=CW;J1.exports.ArgumentError=Mr.ArgumentError;J1.exports.JwksError=Mr.JwksError;J1.exports.JwksRateLimitError=Mr.JwksRateLimitError;J1.exports.SigningKeyNotFoundError=Mr.SigningKeyNotFoundError;J1.exports.expressJwtSecret=cZ;J1.exports.hapiJwt2Key=aI;J1.exports.hapiJwt2KeyAsync=tZ;J1.exports.koaJwtSecret=uZ;J1.exports.passportJwtSecret=rZ});var WZ={};pW(WZ,{isAuthorized:()=>iW,handler:()=>qZ});module.exports=DW(WZ);var Dr=require("node:crypto");function br(t){return t.replace(/=/g,"").replace(/\+/g,"-").replace(/\//g,"_")}function wZ(t){let c=t.replace(/-/g,"+").replace(/_/g,"/");return Buffer.from(c,"base64").toString()}var rh=`<!DOCTYPE html>
|
|
7
|
+
`).map((c)=>c.trim()).join(" ")};l6.O=function(t){return this.inspectOpts.colors=this.useColors,Pu.inspect(t,this.inspectOpts)}});var yu=K((BX,Tn)=>{if(typeof process>"u"||process.type==="renderer"||!1||process.__nwjs)Tn.exports=g6();else Tn.exports=Q6()});var Dn=K((en)=>{Object.defineProperty(en,"__esModule",{value:!0});var y3=require("crypto"),S3=(t,c)=>(0,y3.createHash)(t).update(c).digest();en.default=S3});var M=K((e)=>{Object.defineProperty(e,"__esModule",{value:!0});e.concatKdf=e.lengthAndInput=e.uint32be=e.uint64be=e.p2s=e.concat=e.decoder=e.encoder=void 0;var H3=Dn();e.encoder=new TextEncoder;e.decoder=new TextDecoder;var Su=4294967296;function jn(...t){let c=t.reduce((n,{length:f})=>n+f,0),u=new Uint8Array(c),r=0;return t.forEach((n)=>{u.set(n,r),r+=n.length}),u}e.concat=jn;function C3(t,c){return jn(e.encoder.encode(t),new Uint8Array([0]),c)}e.p2s=C3;function bn(t,c,u){if(c<0||c>=Su)throw RangeError(`value must be >= 0 and <= ${Su-1}. Received ${c}`);t.set([c>>>24,c>>>16,c>>>8,c&255],u)}function O3(t){let c=Math.floor(t/Su),u=t%Su,r=new Uint8Array(8);return bn(r,c,0),bn(r,u,4),r}e.uint64be=O3;function pn(t){let c=new Uint8Array(4);return bn(c,t),c}e.uint32be=pn;function G3(t){return jn(pn(t.length),t)}e.lengthAndInput=G3;async function I3(t,c,u){let r=Math.ceil((c>>3)/32),n=new Uint8Array(r*32);for(let f=0;f<r;f++){let d=new Uint8Array(4+t.length+u.length);d.set(pn(f+1)),d.set(t,4),d.set(u,4+t.length),n.set(await(0,H3.default)("sha256",d),f*32)}return n.slice(0,c>>3)}e.concatKdf=I3});var F=K((P1)=>{Object.defineProperty(P1,"__esModule",{value:!0});P1.decode=P1.encode=P1.encodeBase64=P1.decodeBase64=void 0;var Ct=require("buffer"),Z3=M(),a6;function X3(t){let c=t;if(c instanceof Uint8Array)c=Z3.decoder.decode(c);return c}if(Ct.Buffer.isEncoding("base64url"))P1.encode=a6=(t)=>Ct.Buffer.from(t).toString("base64url");else P1.encode=a6=(t)=>Ct.Buffer.from(t).toString("base64").replace(/=/g,"").replace(/\+/g,"-").replace(/\//g,"_");var E3=(t)=>Ct.Buffer.from(t,"base64");P1.decodeBase64=E3;var Y3=(t)=>Ct.Buffer.from(t).toString("base64");P1.encodeBase64=Y3;var z3=(t)=>Ct.Buffer.from(X3(t),"base64");P1.decode=z3});var C=K((X)=>{Object.defineProperty(X,"__esModule",{value:!0});X.JWSSignatureVerificationFailed=X.JWKSTimeout=X.JWKSMultipleMatchingKeys=X.JWKSNoMatchingKey=X.JWKSInvalid=X.JWKInvalid=X.JWTInvalid=X.JWSInvalid=X.JWEInvalid=X.JWEDecompressionFailed=X.JWEDecryptionFailed=X.JOSENotSupported=X.JOSEAlgNotAllowed=X.JWTExpired=X.JWTClaimValidationFailed=X.JOSEError=void 0;class x extends Error{static get code(){return"ERR_JOSE_GENERIC"}constructor(t){var c;super(t);this.code="ERR_JOSE_GENERIC",this.name=this.constructor.name,(c=Error.captureStackTrace)===null||c===void 0||c.call(Error,this,this.constructor)}}X.JOSEError=x;class t4 extends x{static get code(){return"ERR_JWT_CLAIM_VALIDATION_FAILED"}constructor(t,c="unspecified",u="unspecified"){super(t);this.code="ERR_JWT_CLAIM_VALIDATION_FAILED",this.claim=c,this.reason=u}}X.JWTClaimValidationFailed=t4;class c4 extends x{static get code(){return"ERR_JWT_EXPIRED"}constructor(t,c="unspecified",u="unspecified"){super(t);this.code="ERR_JWT_EXPIRED",this.claim=c,this.reason=u}}X.JWTExpired=c4;class u4 extends x{constructor(){super(...arguments);this.code="ERR_JOSE_ALG_NOT_ALLOWED"}static get code(){return"ERR_JOSE_ALG_NOT_ALLOWED"}}X.JOSEAlgNotAllowed=u4;class r4 extends x{constructor(){super(...arguments);this.code="ERR_JOSE_NOT_SUPPORTED"}static get code(){return"ERR_JOSE_NOT_SUPPORTED"}}X.JOSENotSupported=r4;class n4 extends x{constructor(){super(...arguments);this.code="ERR_JWE_DECRYPTION_FAILED",this.message="decryption operation failed"}static get code(){return"ERR_JWE_DECRYPTION_FAILED"}}X.JWEDecryptionFailed=n4;class f4 extends x{constructor(){super(...arguments);this.code="ERR_JWE_DECOMPRESSION_FAILED",this.message="decompression operation failed"}static get code(){return"ERR_JWE_DECOMPRESSION_FAILED"}}X.JWEDecompressionFailed=f4;class d4 extends x{constructor(){super(...arguments);this.code="ERR_JWE_INVALID"}static get code(){return"ERR_JWE_INVALID"}}X.JWEInvalid=d4;class h4 extends x{constructor(){super(...arguments);this.code="ERR_JWS_INVALID"}static get code(){return"ERR_JWS_INVALID"}}X.JWSInvalid=h4;class q4 extends x{constructor(){super(...arguments);this.code="ERR_JWT_INVALID"}static get code(){return"ERR_JWT_INVALID"}}X.JWTInvalid=q4;class _4 extends x{constructor(){super(...arguments);this.code="ERR_JWK_INVALID"}static get code(){return"ERR_JWK_INVALID"}}X.JWKInvalid=_4;class K4 extends x{constructor(){super(...arguments);this.code="ERR_JWKS_INVALID"}static get code(){return"ERR_JWKS_INVALID"}}X.JWKSInvalid=K4;class W4 extends x{constructor(){super(...arguments);this.code="ERR_JWKS_NO_MATCHING_KEY",this.message="no applicable key found in the JSON Web Key Set"}static get code(){return"ERR_JWKS_NO_MATCHING_KEY"}}X.JWKSNoMatchingKey=W4;class J4 extends x{constructor(){super(...arguments);this.code="ERR_JWKS_MULTIPLE_MATCHING_KEYS",this.message="multiple matching keys found in the JSON Web Key Set"}static get code(){return"ERR_JWKS_MULTIPLE_MATCHING_KEYS"}}X.JWKSMultipleMatchingKeys=J4;class w4 extends x{constructor(){super(...arguments);this.code="ERR_JWKS_TIMEOUT",this.message="request timed out"}static get code(){return"ERR_JWKS_TIMEOUT"}}X.JWKSTimeout=w4;class $4 extends x{constructor(){super(...arguments);this.code="ERR_JWS_SIGNATURE_VERIFICATION_FAILED",this.message="signature verification failed"}static get code(){return"ERR_JWS_SIGNATURE_VERIFICATION_FAILED"}}X.JWSSignatureVerificationFailed=$4});var hc=K((Hu)=>{Object.defineProperty(Hu,"__esModule",{value:!0});Hu.default=void 0;var i3=require("crypto");Object.defineProperty(Hu,"default",{enumerable:!0,get:function(){return i3.randomFillSync}})});var Cu=K((qc)=>{Object.defineProperty(qc,"__esModule",{value:!0});qc.bitLength=void 0;var R3=C(),V3=hc();function P4(t){switch(t){case"A128GCM":case"A128GCMKW":case"A192GCM":case"A192GCMKW":case"A256GCM":case"A256GCMKW":return 96;case"A128CBC-HS256":case"A192CBC-HS384":case"A256CBC-HS512":return 128;default:throw new R3.JOSENotSupported(`Unsupported JWE Algorithm: ${t}`)}}qc.bitLength=P4;qc.default=(t)=>(0,V3.default)(new Uint8Array(P4(t)>>3))});var xn=K((vn)=>{Object.defineProperty(vn,"__esModule",{value:!0});var M3=C(),N3=Cu(),T3=(t,c)=>{if(c.length<<3!==(0,N3.bitLength)(t))throw new M3.JWEInvalid("Invalid Initialization Vector length")};vn.default=T3});var d1=K((Ln)=>{Object.defineProperty(Ln,"__esModule",{value:!0});var e3=require("crypto"),A4=require("util");Ln.default=A4.types.isKeyObject?(t)=>A4.types.isKeyObject(t):(t)=>t!=null&&t instanceof e3.KeyObject});var gn=K((mn)=>{Object.defineProperty(mn,"__esModule",{value:!0});var sn=C(),D3=d1(),b3=(t,c)=>{let u;switch(t){case"A128CBC-HS256":case"A192CBC-HS384":case"A256CBC-HS512":u=parseInt(t.slice(-3),10);break;case"A128GCM":case"A192GCM":case"A256GCM":u=parseInt(t.slice(1,4),10);break;default:throw new sn.JOSENotSupported(`Content Encryption Algorithm ${t} is not supported either by JOSE or your javascript runtime`)}if(c instanceof Uint8Array){let r=c.byteLength<<3;if(r!==u)throw new sn.JWEInvalid(`Invalid Content Encryption Key length. Expected ${u} bits, got ${r} bits`);return}if((0,D3.default)(c)&&c.type==="secret"){let r=c.symmetricKeySize<<3;if(r!==u)throw new sn.JWEInvalid(`Invalid Content Encryption Key length. Expected ${u} bits, got ${r} bits`);return}throw TypeError("Invalid Content Encryption Key type")};mn.default=b3});var y4=K((Bn)=>{Object.defineProperty(Bn,"__esModule",{value:!0});var j3=require("crypto"),p3=j3.timingSafeEqual;Bn.default=p3});var kn=K((Fn)=>{Object.defineProperty(Fn,"__esModule",{value:!0});var v3=require("crypto"),S4=M();function x3(t,c,u,r,n,f){let d=(0,S4.concat)(t,c,u,(0,S4.uint64be)(t.length<<3)),h=(0,v3.createHmac)(`sha${r}`,n);return h.update(d),h.digest().slice(0,f>>3)}Fn.default=x3});var h1=K((_c)=>{Object.defineProperty(_c,"__esModule",{value:!0});_c.isCryptoKey=void 0;var L3=require("crypto"),H4=require("util"),s3=L3.webcrypto;_c.default=s3;_c.isCryptoKey=H4.types.isCryptoKey?(t)=>H4.types.isCryptoKey(t):(t)=>!1});var v1=K((Ot)=>{Object.defineProperty(Ot,"__esModule",{value:!0});Ot.checkEncCryptoKey=Ot.checkSigCryptoKey=void 0;function L(t,c="algorithm.name"){return TypeError(`CryptoKey does not support this operation, its ${c} must be ${t}`)}function p1(t,c){return t.name===c}function Ou(t){return parseInt(t.name.slice(4),10)}function m3(t){switch(t){case"ES256":return"P-256";case"ES384":return"P-384";case"ES512":return"P-521";default:throw Error("unreachable")}}function C4(t,c){if(c.length&&!c.some((u)=>t.usages.includes(u))){let u="CryptoKey does not support this operation, its usages must include ";if(c.length>2){let r=c.pop();u+=`one of ${c.join(", ")}, or ${r}.`}else if(c.length===2)u+=`one of ${c[0]} or ${c[1]}.`;else u+=`${c[0]}.`;throw TypeError(u)}}function g3(t,c,...u){switch(c){case"HS256":case"HS384":case"HS512":{if(!p1(t.algorithm,"HMAC"))throw L("HMAC");let r=parseInt(c.slice(2),10);if(Ou(t.algorithm.hash)!==r)throw L(`SHA-${r}`,"algorithm.hash");break}case"RS256":case"RS384":case"RS512":{if(!p1(t.algorithm,"RSASSA-PKCS1-v1_5"))throw L("RSASSA-PKCS1-v1_5");let r=parseInt(c.slice(2),10);if(Ou(t.algorithm.hash)!==r)throw L(`SHA-${r}`,"algorithm.hash");break}case"PS256":case"PS384":case"PS512":{if(!p1(t.algorithm,"RSA-PSS"))throw L("RSA-PSS");let r=parseInt(c.slice(2),10);if(Ou(t.algorithm.hash)!==r)throw L(`SHA-${r}`,"algorithm.hash");break}case"EdDSA":{if(t.algorithm.name!=="Ed25519"&&t.algorithm.name!=="Ed448")throw L("Ed25519 or Ed448");break}case"ES256":case"ES384":case"ES512":{if(!p1(t.algorithm,"ECDSA"))throw L("ECDSA");let r=m3(c);if(t.algorithm.namedCurve!==r)throw L(r,"algorithm.namedCurve");break}default:throw TypeError("CryptoKey does not support this operation")}C4(t,u)}Ot.checkSigCryptoKey=g3;function B3(t,c,...u){switch(c){case"A128GCM":case"A192GCM":case"A256GCM":{if(!p1(t.algorithm,"AES-GCM"))throw L("AES-GCM");let r=parseInt(c.slice(1,4),10);if(t.algorithm.length!==r)throw L(r,"algorithm.length");break}case"A128KW":case"A192KW":case"A256KW":{if(!p1(t.algorithm,"AES-KW"))throw L("AES-KW");let r=parseInt(c.slice(1,4),10);if(t.algorithm.length!==r)throw L(r,"algorithm.length");break}case"ECDH":{switch(t.algorithm.name){case"ECDH":case"X25519":case"X448":break;default:throw L("ECDH, X25519, or X448")}break}case"PBES2-HS256+A128KW":case"PBES2-HS384+A192KW":case"PBES2-HS512+A256KW":if(!p1(t.algorithm,"PBKDF2"))throw L("PBKDF2");break;case"RSA-OAEP":case"RSA-OAEP-256":case"RSA-OAEP-384":case"RSA-OAEP-512":{if(!p1(t.algorithm,"RSA-OAEP"))throw L("RSA-OAEP");let r=parseInt(c.slice(9),10)||1;if(Ou(t.algorithm.hash)!==r)throw L(`SHA-${r}`,"algorithm.hash");break}default:throw TypeError("CryptoKey does not support this operation")}C4(t,u)}Ot.checkEncCryptoKey=B3});var q1=K((Kc)=>{Object.defineProperty(Kc,"__esModule",{value:!0});Kc.withAlg=void 0;function O4(t,c,...u){if(u.length>2){let r=u.pop();t+=`one of type ${u.join(", ")}, or ${r}.`}else if(u.length===2)t+=`one of type ${u[0]} or ${u[1]}.`;else t+=`of type ${u[0]}.`;if(c==null)t+=` Received ${c}`;else if(typeof c==="function"&&c.name)t+=` Received function ${c.name}`;else if(typeof c==="object"&&c!=null){if(c.constructor&&c.constructor.name)t+=` Received an instance of ${c.constructor.name}`}return t}Kc.default=(t,...c)=>{return O4("Key must be ",t,...c)};function F3(t,c,...u){return O4(`Key for the ${t} algorithm must be `,c,...u)}Kc.withAlg=F3});var Gu=K((Un)=>{Object.defineProperty(Un,"__esModule",{value:!0});var k3=require("crypto"),on;Un.default=(t)=>{return on||(on=new Set((0,k3.getCiphers)())),on.has(t)}});var _1=K((Wc)=>{Object.defineProperty(Wc,"__esModule",{value:!0});Wc.types=void 0;var Iu=h1(),o3=d1();Wc.default=(t)=>(0,o3.default)(t)||(0,Iu.isCryptoKey)(t);var G4=["KeyObject"];Wc.types=G4;if(globalThis.CryptoKey||(Iu.default===null||Iu.default===void 0?void 0:Iu.default.CryptoKey))G4.push("CryptoKey")});var an=K((Qn)=>{Object.defineProperty(Qn,"__esModule",{value:!0});var ln=require("crypto"),U3=xn(),l3=gn(),Q3=M(),Gt=C(),a3=y4(),t9=kn(),c9=h1(),u9=v1(),I4=d1(),r9=q1(),Z4=Gu(),n9=_1();function f9(t,c,u,r,n,f){let d=parseInt(t.slice(1,4),10);if((0,I4.default)(c))c=c.export();let h=c.subarray(d>>3),q=c.subarray(0,d>>3),_=parseInt(t.slice(-3),10),W=`aes-${d}-cbc`;if(!(0,Z4.default)(W))throw new Gt.JOSENotSupported(`alg ${t} is not supported by your javascript runtime`);let J=(0,t9.default)(f,r,u,_,q,d),$;try{$=(0,a3.default)(n,J)}catch{}if(!$)throw new Gt.JWEDecryptionFailed;let w;try{let P=(0,ln.createDecipheriv)(W,h,r);w=(0,Q3.concat)(P.update(u),P.final())}catch{}if(!w)throw new Gt.JWEDecryptionFailed;return w}function d9(t,c,u,r,n,f){let h=`aes-${parseInt(t.slice(1,4),10)}-gcm`;if(!(0,Z4.default)(h))throw new Gt.JOSENotSupported(`alg ${t} is not supported by your javascript runtime`);try{let q=(0,ln.createDecipheriv)(h,c,r,{authTagLength:16});if(q.setAuthTag(n),f.byteLength)q.setAAD(f,{plaintextLength:u.length});let _=q.update(u);return q.final(),_}catch{throw new Gt.JWEDecryptionFailed}}var h9=(t,c,u,r,n,f)=>{let d;if((0,c9.isCryptoKey)(c))(0,u9.checkEncCryptoKey)(c,t,"decrypt"),d=ln.KeyObject.from(c);else if(c instanceof Uint8Array||(0,I4.default)(c))d=c;else throw TypeError((0,r9.default)(c,...n9.types,"Uint8Array"));switch((0,l3.default)(t,d),(0,U3.default)(t,r),t){case"A128CBC-HS256":case"A192CBC-HS384":case"A256CBC-HS512":return f9(t,d,u,r,n,f);case"A128GCM":case"A192GCM":case"A256GCM":return d9(t,d,u,r,n,f);default:throw new Gt.JOSENotSupported("Unsupported JWE Content Encryption Algorithm")}};Qn.default=h9});var tf=K((It)=>{Object.defineProperty(It,"__esModule",{value:!0});It.deflate=It.inflate=void 0;var X4=require("util"),E4=require("zlib"),q9=C(),_9=(0,X4.promisify)(E4.inflateRaw),K9=(0,X4.promisify)(E4.deflateRaw),W9=(t)=>_9(t,{maxOutputLength:250000}).catch(()=>{throw new q9.JWEDecompressionFailed});It.inflate=W9;var J9=(t)=>K9(t);It.deflate=J9});var Zt=K((cf)=>{Object.defineProperty(cf,"__esModule",{value:!0});var w9=(...t)=>{let c=t.filter(Boolean);if(c.length===0||c.length===1)return!0;let u;for(let r of c){let n=Object.keys(r);if(!u||u.size===0){u=new Set(n);continue}for(let f of n){if(u.has(f))return!1;u.add(f)}}return!0};cf.default=w9});var l=K((uf)=>{Object.defineProperty(uf,"__esModule",{value:!0});function $9(t){return typeof t==="object"&&t!==null}function P9(t){if(!$9(t)||Object.prototype.toString.call(t)!=="[object Object]")return!1;if(Object.getPrototypeOf(t)===null)return!0;let c=t;while(Object.getPrototypeOf(c)!==null)c=Object.getPrototypeOf(c);return Object.getPrototypeOf(t)===c}uf.default=P9});var Xu=K((Xt)=>{Object.defineProperty(Xt,"__esModule",{value:!0});Xt.unwrap=Xt.wrap=void 0;var Y4=require("buffer"),Zu=require("crypto"),z4=C(),i4=M(),A9=h1(),y9=v1(),S9=d1(),H9=q1(),R4=Gu(),C9=_1();function V4(t,c){if(t.symmetricKeySize<<3!==parseInt(c.slice(1,4),10))throw TypeError(`Invalid key size for alg: ${c}`)}function M4(t,c,u){if((0,S9.default)(t))return t;if(t instanceof Uint8Array)return(0,Zu.createSecretKey)(t);if((0,A9.isCryptoKey)(t))return(0,y9.checkEncCryptoKey)(t,c,u),Zu.KeyObject.from(t);throw TypeError((0,H9.default)(t,...C9.types,"Uint8Array"))}var O9=(t,c,u)=>{let n=`aes${parseInt(t.slice(1,4),10)}-wrap`;if(!(0,R4.default)(n))throw new z4.JOSENotSupported(`alg ${t} is not supported either by JOSE or your javascript runtime`);let f=M4(c,t,"wrapKey");V4(f,t);let d=(0,Zu.createCipheriv)(n,f,Y4.Buffer.alloc(8,166));return(0,i4.concat)(d.update(u),d.final())};Xt.wrap=O9;var G9=(t,c,u)=>{let n=`aes${parseInt(t.slice(1,4),10)}-wrap`;if(!(0,R4.default)(n))throw new z4.JOSENotSupported(`alg ${t} is not supported either by JOSE or your javascript runtime`);let f=M4(c,t,"unwrapKey");V4(f,t);let d=(0,Zu.createDecipheriv)(n,f,Y4.Buffer.alloc(8,166));return(0,i4.concat)(d.update(u),d.final())};Xt.unwrap=G9});var Jc=K((A1)=>{Object.defineProperty(A1,"__esModule",{value:!0});A1.setCurve=A1.weakMap=void 0;var Eu=require("buffer"),N4=require("crypto"),T4=C(),I9=h1(),Z9=d1(),X9=q1(),E9=_1(),Y9=Eu.Buffer.from([42,134,72,206,61,3,1,7]),z9=Eu.Buffer.from([43,129,4,0,34]),i9=Eu.Buffer.from([43,129,4,0,35]),R9=Eu.Buffer.from([43,129,4,0,10]);A1.weakMap=new WeakMap;var V9=(t)=>{switch(t){case"prime256v1":return"P-256";case"secp384r1":return"P-384";case"secp521r1":return"P-521";case"secp256k1":return"secp256k1";default:throw new T4.JOSENotSupported("Unsupported key curve for this operation")}},e4=(t,c)=>{var u;let r;if((0,I9.isCryptoKey)(t))r=N4.KeyObject.from(t);else if((0,Z9.default)(t))r=t;else throw TypeError((0,X9.default)(t,...E9.types));if(r.type==="secret")throw TypeError('only "private" or "public" type keys can be used for this operation');switch(r.asymmetricKeyType){case"ed25519":case"ed448":return`Ed${r.asymmetricKeyType.slice(2)}`;case"x25519":case"x448":return`X${r.asymmetricKeyType.slice(1)}`;case"ec":{if(A1.weakMap.has(r))return A1.weakMap.get(r);let n=(u=r.asymmetricKeyDetails)===null||u===void 0?void 0:u.namedCurve;if(!n&&r.type==="private")n=e4((0,N4.createPublicKey)(r),!0);else if(!n){let d=r.export({format:"der",type:"spki"}),h=d[1]<128?14:15,q=d[h],_=d.slice(h+1,h+1+q);if(_.equals(Y9))n="prime256v1";else if(_.equals(z9))n="secp384r1";else if(_.equals(i9))n="secp521r1";else if(_.equals(R9))n="secp256k1";else throw new T4.JOSENotSupported("Unsupported key curve for this operation")}if(c)return n;let f=V9(n);return A1.weakMap.set(r,f),f}default:throw TypeError("Invalid asymmetric key type for this operation")}};function M9(t,c){A1.weakMap.set(t,c)}A1.setCurve=M9;A1.default=e4});var qf=K((x1)=>{Object.defineProperty(x1,"__esModule",{value:!0});x1.ecdhAllowed=x1.generateEpk=x1.deriveKey=void 0;var wc=require("crypto"),N9=require("util"),b4=Jc(),a1=M(),T9=C(),nf=h1(),D4=v1(),ff=d1(),df=q1(),hf=_1(),rf=(0,N9.promisify)(wc.generateKeyPair);async function e9(t,c,u,r,n=new Uint8Array(0),f=new Uint8Array(0)){let d;if((0,nf.isCryptoKey)(t))(0,D4.checkEncCryptoKey)(t,"ECDH"),d=wc.KeyObject.from(t);else if((0,ff.default)(t))d=t;else throw TypeError((0,df.default)(t,...hf.types));let h;if((0,nf.isCryptoKey)(c))(0,D4.checkEncCryptoKey)(c,"ECDH","deriveBits"),h=wc.KeyObject.from(c);else if((0,ff.default)(c))h=c;else throw TypeError((0,df.default)(c,...hf.types));let q=(0,a1.concat)((0,a1.lengthAndInput)(a1.encoder.encode(u)),(0,a1.lengthAndInput)(n),(0,a1.lengthAndInput)(f),(0,a1.uint32be)(r)),_=(0,wc.diffieHellman)({privateKey:h,publicKey:d});return(0,a1.concatKdf)(_,r,q)}x1.deriveKey=e9;async function D9(t){let c;if((0,nf.isCryptoKey)(t))c=wc.KeyObject.from(t);else if((0,ff.default)(t))c=t;else throw TypeError((0,df.default)(t,...hf.types));switch(c.asymmetricKeyType){case"x25519":return rf("x25519");case"x448":return rf("x448");case"ec":{let u=(0,b4.default)(c);return rf("ec",{namedCurve:u})}default:throw new T9.JOSENotSupported("Invalid or unsupported EPK")}}x1.generateEpk=D9;var b9=(t)=>["P-256","P-384","P-521","X25519","X448"].includes((0,b4.default)(t));x1.ecdhAllowed=b9});var j4=K((_f)=>{Object.defineProperty(_f,"__esModule",{value:!0});var j9=C();function p9(t){if(!(t instanceof Uint8Array)||t.length<8)throw new j9.JWEInvalid("PBES2 Salt Input must be 8 or more octets")}_f.default=p9});var Kf=K((Et)=>{Object.defineProperty(Et,"__esModule",{value:!0});Et.decrypt=Et.encrypt=void 0;var v9=require("util"),p4=require("crypto"),x9=hc(),v4=M(),L9=F(),x4=Xu(),L4=j4(),s9=h1(),m9=v1(),g9=d1(),B9=q1(),F9=_1(),s4=(0,v9.promisify)(p4.pbkdf2);function m4(t,c){if((0,g9.default)(t))return t.export();if(t instanceof Uint8Array)return t;if((0,s9.isCryptoKey)(t))return(0,m9.checkEncCryptoKey)(t,c,"deriveBits","deriveKey"),p4.KeyObject.from(t).export();throw TypeError((0,B9.default)(t,...F9.types,"Uint8Array"))}var k9=async(t,c,u,r=2048,n=(0,x9.default)(new Uint8Array(16)))=>{(0,L4.default)(n);let f=(0,v4.p2s)(t,n),d=parseInt(t.slice(13,16),10)>>3,h=m4(c,t),q=await s4(h,f,r,d,`sha${t.slice(8,11)}`);return{encryptedKey:await(0,x4.wrap)(t.slice(-6),q,u),p2c:r,p2s:(0,L9.encode)(n)}};Et.encrypt=k9;var o9=async(t,c,u,r,n)=>{(0,L4.default)(n);let f=(0,v4.p2s)(t,n),d=parseInt(t.slice(13,16),10)>>3,h=m4(c,t),q=await s4(h,f,r,d,`sha${t.slice(8,11)}`);return(0,x4.unwrap)(t.slice(-6),q,u)};Et.decrypt=o9});var $c=K((y1)=>{Object.defineProperty(y1,"__esModule",{value:!0});y1.setModulusLength=y1.weakMap=void 0;y1.weakMap=new WeakMap;var Yu=(t,c)=>{let u=t.readUInt8(1);if((u&128)===0){if(c===0)return u;return Yu(t.subarray(2+u),c-1)}let r=u&127;u=0;for(let n=0;n<r;n++){u<<=8;let f=t.readUInt8(2+n);u|=f}if(c===0)return u;return Yu(t.subarray(2+u),c-1)},U9=(t,c)=>{let u=t.readUInt8(1);if((u&128)===0)return Yu(t.subarray(2),c);let r=u&127;return Yu(t.subarray(2+r),c)},l9=(t)=>{var c,u;if(y1.weakMap.has(t))return y1.weakMap.get(t);let r=(u=(c=t.asymmetricKeyDetails)===null||c===void 0?void 0:c.modulusLength)!==null&&u!==void 0?u:U9(t.export({format:"der",type:"pkcs1"}),t.type==="private"?1:0)-1<<3;return y1.weakMap.set(t,r),r},Q9=(t,c)=>{y1.weakMap.set(t,c)};y1.setModulusLength=Q9;y1.default=(t,c)=>{if(l9(t)<2048)throw TypeError(`${c} requires key modulusLength to be 2048 bits or larger`)}});var Wf=K((Yt)=>{Object.defineProperty(Yt,"__esModule",{value:!0});Yt.decrypt=Yt.encrypt=void 0;var Pc=require("crypto"),a9=$c(),ty=h1(),cy=v1(),uy=d1(),ry=q1(),ny=_1(),g4=(t,c)=>{if(t.asymmetricKeyType!=="rsa")throw TypeError("Invalid key for this operation, its asymmetricKeyType must be rsa");(0,a9.default)(t,c)},B4=(t)=>{switch(t){case"RSA-OAEP":case"RSA-OAEP-256":case"RSA-OAEP-384":case"RSA-OAEP-512":return Pc.constants.RSA_PKCS1_OAEP_PADDING;case"RSA1_5":return Pc.constants.RSA_PKCS1_PADDING;default:return}},F4=(t)=>{switch(t){case"RSA-OAEP":return"sha1";case"RSA-OAEP-256":return"sha256";case"RSA-OAEP-384":return"sha384";case"RSA-OAEP-512":return"sha512";default:return}};function k4(t,c,...u){if((0,uy.default)(t))return t;if((0,ty.isCryptoKey)(t))return(0,cy.checkEncCryptoKey)(t,c,...u),Pc.KeyObject.from(t);throw TypeError((0,ry.default)(t,...ny.types))}var fy=(t,c,u)=>{let r=B4(t),n=F4(t),f=k4(c,t,"wrapKey","encrypt");return g4(f,t),(0,Pc.publicEncrypt)({key:f,oaepHash:n,padding:r},u)};Yt.encrypt=fy;var dy=(t,c,u)=>{let r=B4(t),n=F4(t),f=k4(c,t,"unwrapKey","decrypt");return g4(f,t),(0,Pc.privateDecrypt)({key:f,oaepHash:n,padding:r},u)};Yt.decrypt=dy});var yc=K((Ac)=>{Object.defineProperty(Ac,"__esModule",{value:!0});Ac.bitLength=void 0;var hy=C(),qy=hc();function o4(t){switch(t){case"A128GCM":return 128;case"A192GCM":return 192;case"A256GCM":case"A128CBC-HS256":return 256;case"A192CBC-HS384":return 384;case"A256CBC-HS512":return 512;default:throw new hy.JOSENotSupported(`Unsupported JWE Algorithm: ${t}`)}}Ac.bitLength=o4;Ac.default=(t)=>(0,qy.default)(new Uint8Array(o4(t)>>3))});var iu=K((K1)=>{Object.defineProperty(K1,"__esModule",{value:!0});K1.fromX509=K1.fromSPKI=K1.fromPKCS8=K1.toPKCS8=K1.toSPKI=void 0;var zu=require("crypto"),U4=require("buffer"),_y=h1(),Ky=d1(),Wy=q1(),Jy=_1(),l4=(t,c,u)=>{let r;if((0,_y.isCryptoKey)(u)){if(!u.extractable)throw TypeError("CryptoKey is not extractable");r=zu.KeyObject.from(u)}else if((0,Ky.default)(u))r=u;else throw TypeError((0,Wy.default)(u,...Jy.types));if(r.type!==t)throw TypeError(`key is not a ${t} key`);return r.export({format:"pem",type:c})},wy=(t)=>{return l4("public","spki",t)};K1.toSPKI=wy;var $y=(t)=>{return l4("private","pkcs8",t)};K1.toPKCS8=$y;var Py=(t)=>(0,zu.createPrivateKey)({key:U4.Buffer.from(t.replace(/(?:-----(?:BEGIN|END) PRIVATE KEY-----|\s)/g,""),"base64"),type:"pkcs8",format:"der"});K1.fromPKCS8=Py;var Ay=(t)=>(0,zu.createPublicKey)({key:U4.Buffer.from(t.replace(/(?:-----(?:BEGIN|END) PUBLIC KEY-----|\s)/g,""),"base64"),type:"spki",format:"der"});K1.fromSPKI=Ay;var yy=(t)=>(0,zu.createPublicKey)({key:t,type:"spki",format:"pem"});K1.fromX509=yy});var a4=K((wf)=>{Object.defineProperty(wf,"__esModule",{value:!0});var T=require("buffer"),Sy=C(),Hy=2,Cy=3,Oy=4,Gy=48,Jf=T.Buffer.from([0]),Ru=T.Buffer.from([Hy]),Iy=T.Buffer.from([Cy]),Zy=T.Buffer.from([Gy]),Xy=T.Buffer.from([Oy]),L1=(t)=>{if(t<128)return T.Buffer.from([t]);let c=T.Buffer.alloc(5);c.writeUInt32BE(t,1);let u=1;while(c[u]===0)u++;return c[u-1]=128|5-u,c.slice(u-1)},Ey=new Map([["P-256",T.Buffer.from("06 08 2A 86 48 CE 3D 03 01 07".replace(/ /g,""),"hex")],["secp256k1",T.Buffer.from("06 05 2B 81 04 00 0A".replace(/ /g,""),"hex")],["P-384",T.Buffer.from("06 05 2B 81 04 00 22".replace(/ /g,""),"hex")],["P-521",T.Buffer.from("06 05 2B 81 04 00 23".replace(/ /g,""),"hex")],["ecPublicKey",T.Buffer.from("06 07 2A 86 48 CE 3D 02 01".replace(/ /g,""),"hex")],["X25519",T.Buffer.from("06 03 2B 65 6E".replace(/ /g,""),"hex")],["X448",T.Buffer.from("06 03 2B 65 6F".replace(/ /g,""),"hex")],["Ed25519",T.Buffer.from("06 03 2B 65 70".replace(/ /g,""),"hex")],["Ed448",T.Buffer.from("06 03 2B 65 71".replace(/ /g,""),"hex")]]);class Q4{constructor(){this.length=0,this.elements=[]}oidFor(t){let c=Ey.get(t);if(!c)throw new Sy.JOSENotSupported("Invalid or unsupported OID");this.elements.push(c),this.length+=c.length}zero(){this.elements.push(Ru,T.Buffer.from([1]),Jf),this.length+=3}one(){this.elements.push(Ru,T.Buffer.from([1]),T.Buffer.from([1])),this.length+=3}unsignedInteger(t){if(t[0]&128){let c=L1(t.length+1);this.elements.push(Ru,c,Jf,t),this.length+=2+c.length+t.length}else{let c=0;while(t[c]===0&&(t[c+1]&128)===0)c++;let u=L1(t.length-c);this.elements.push(Ru,L1(t.length-c),t.slice(c)),this.length+=1+u.length+t.length-c}}octStr(t){let c=L1(t.length);this.elements.push(Xy,L1(t.length),t),this.length+=1+c.length+t.length}bitStr(t){let c=L1(t.length+1);this.elements.push(Iy,L1(t.length+1),Jf,t),this.length+=1+c.length+t.length+1}add(t){this.elements.push(t),this.length+=t.length}end(t=Zy){let c=L1(this.length);return T.Buffer.concat([t,c,...this.elements],1+c.length+this.length)}}wf.default=Q4});var Sc=K((I1)=>{Object.defineProperty(I1,"__esModule",{value:!0});I1.jwkImport=I1.jwkExport=I1.rsaPssParams=I1.oneShotCallback=void 0;var[s1,Vu]=process.versions.node.split(".").map((t)=>parseInt(t,10));I1.oneShotCallback=s1>=16||s1===15&&Vu>=13;I1.rsaPssParams=!("electron"in process.versions)&&(s1>=17||s1===16&&Vu>=9);I1.jwkExport=s1>=16||s1===15&&Vu>=9;I1.jwkImport=s1>=16||s1===15&&Vu>=12});var c_=K(($f)=>{Object.defineProperty($f,"__esModule",{value:!0});var p=require("buffer"),i1=require("crypto"),Yy=F(),zy=C(),t_=Jc(),iy=$c(),S1=a4(),Ry=Sc(),Vy=(t)=>{if(Ry.jwkImport&&t.kty!=="oct")return t.d?(0,i1.createPrivateKey)({format:"jwk",key:t}):(0,i1.createPublicKey)({format:"jwk",key:t});switch(t.kty){case"oct":return(0,i1.createSecretKey)((0,Yy.decode)(t.k));case"RSA":{let c=new S1.default,u=t.d!==void 0,r=p.Buffer.from(t.n,"base64"),n=p.Buffer.from(t.e,"base64");if(u)c.zero(),c.unsignedInteger(r),c.unsignedInteger(n),c.unsignedInteger(p.Buffer.from(t.d,"base64")),c.unsignedInteger(p.Buffer.from(t.p,"base64")),c.unsignedInteger(p.Buffer.from(t.q,"base64")),c.unsignedInteger(p.Buffer.from(t.dp,"base64")),c.unsignedInteger(p.Buffer.from(t.dq,"base64")),c.unsignedInteger(p.Buffer.from(t.qi,"base64"));else c.unsignedInteger(r),c.unsignedInteger(n);let d={key:c.end(),format:"der",type:"pkcs1"},h=u?(0,i1.createPrivateKey)(d):(0,i1.createPublicKey)(d);return(0,iy.setModulusLength)(h,r.length<<3),h}case"EC":{let c=new S1.default,u=t.d!==void 0,r=p.Buffer.concat([p.Buffer.alloc(1,4),p.Buffer.from(t.x,"base64"),p.Buffer.from(t.y,"base64")]);if(u){c.zero();let h=new S1.default;h.oidFor("ecPublicKey"),h.oidFor(t.crv),c.add(h.end());let q=new S1.default;q.one(),q.octStr(p.Buffer.from(t.d,"base64"));let _=new S1.default;_.bitStr(r);let W=_.end(p.Buffer.from([161]));q.add(W);let J=q.end(),$=new S1.default;$.add(J);let w=$.end(p.Buffer.from([4]));c.add(w);let P=c.end(),A=(0,i1.createPrivateKey)({key:P,format:"der",type:"pkcs8"});return(0,t_.setCurve)(A,t.crv),A}let n=new S1.default;n.oidFor("ecPublicKey"),n.oidFor(t.crv),c.add(n.end()),c.bitStr(r);let f=c.end(),d=(0,i1.createPublicKey)({key:f,format:"der",type:"spki"});return(0,t_.setCurve)(d,t.crv),d}case"OKP":{let c=new S1.default;if(t.d!==void 0){c.zero();let f=new S1.default;f.oidFor(t.crv),c.add(f.end());let d=new S1.default;d.octStr(p.Buffer.from(t.d,"base64"));let h=d.end(p.Buffer.from([4]));c.add(h);let q=c.end();return(0,i1.createPrivateKey)({key:q,format:"der",type:"pkcs8"})}let r=new S1.default;r.oidFor(t.crv),c.add(r.end()),c.bitStr(p.Buffer.from(t.x,"base64"));let n=c.end();return(0,i1.createPublicKey)({key:n,format:"der",type:"spki"})}default:throw new zy.JOSENotSupported('Invalid or unsupported JWK "kty" (Key Type) Parameter value')}};$f.default=Vy});var Hc=K((Z1)=>{Object.defineProperty(Z1,"__esModule",{value:!0});Z1.importJWK=Z1.importPKCS8=Z1.importX509=Z1.importSPKI=void 0;var My=F(),Pf=iu(),u_=c_(),r_=C(),Ny=l();async function Ty(t,c,u){if(typeof t!=="string"||t.indexOf("-----BEGIN PUBLIC KEY-----")!==0)throw TypeError('"spki" must be SPKI formatted string');return(0,Pf.fromSPKI)(t,c,u)}Z1.importSPKI=Ty;async function ey(t,c,u){if(typeof t!=="string"||t.indexOf("-----BEGIN CERTIFICATE-----")!==0)throw TypeError('"x509" must be X.509 formatted string');return(0,Pf.fromX509)(t,c,u)}Z1.importX509=ey;async function Dy(t,c,u){if(typeof t!=="string"||t.indexOf("-----BEGIN PRIVATE KEY-----")!==0)throw TypeError('"pkcs8" must be PKCS#8 formatted string');return(0,Pf.fromPKCS8)(t,c,u)}Z1.importPKCS8=Dy;async function by(t,c,u){var r;if(!(0,Ny.default)(t))throw TypeError("JWK must be an object");switch(c||(c=t.alg),t.kty){case"oct":if(typeof t.k!=="string"||!t.k)throw TypeError('missing "k" (Key Value) Parameter value');if(u!==null&&u!==void 0||(u=t.ext!==!0),u)return(0,u_.default)({...t,alg:c,ext:(r=t.ext)!==null&&r!==void 0?r:!1});return(0,My.decode)(t.k);case"RSA":if(t.oth!==void 0)throw new r_.JOSENotSupported('RSA JWK "oth" (Other Primes Info) Parameter value is not supported');case"EC":case"OKP":return(0,u_.default)({...t,alg:c});default:throw new r_.JOSENotSupported('Unsupported "kty" (Key Type) Parameter value')}}Z1.importJWK=by});var Cc=K((Af)=>{Object.defineProperty(Af,"__esModule",{value:!0});var n_=q1(),X1=_1(),jy=(t,c)=>{if(c instanceof Uint8Array)return;if(!(0,X1.default)(c))throw TypeError((0,n_.withAlg)(t,c,...X1.types,"Uint8Array"));if(c.type!=="secret")throw TypeError(`${X1.types.join(" or ")} instances for symmetric algorithms must be of type "secret"`)},py=(t,c,u)=>{if(!(0,X1.default)(c))throw TypeError((0,n_.withAlg)(t,c,...X1.types));if(c.type==="secret")throw TypeError(`${X1.types.join(" or ")} instances for asymmetric algorithms must not be of type "secret"`);if(u==="sign"&&c.type==="public")throw TypeError(`${X1.types.join(" or ")} instances for asymmetric algorithm signing must be of type "private"`);if(u==="decrypt"&&c.type==="public")throw TypeError(`${X1.types.join(" or ")} instances for asymmetric algorithm decryption must be of type "private"`);if(c.algorithm&&u==="verify"&&c.type==="private")throw TypeError(`${X1.types.join(" or ")} instances for asymmetric algorithm verifying must be of type "public"`);if(c.algorithm&&u==="encrypt"&&c.type==="private")throw TypeError(`${X1.types.join(" or ")} instances for asymmetric algorithm encryption must be of type "public"`)},vy=(t,c,u)=>{if(t.startsWith("HS")||t==="dir"||t.startsWith("PBES2")||/^A\d{3}(?:GCM)?KW$/.test(t))jy(t,c);else py(t,c,u)};Af.default=vy});var Cf=K((Hf)=>{Object.defineProperty(Hf,"__esModule",{value:!0});var yf=require("crypto"),xy=xn(),Ly=gn(),sy=M(),my=kn(),gy=h1(),By=v1(),f_=d1(),Fy=q1(),Sf=C(),d_=Gu(),ky=_1();function oy(t,c,u,r,n){let f=parseInt(t.slice(1,4),10);if((0,f_.default)(u))u=u.export();let d=u.subarray(f>>3),h=u.subarray(0,f>>3),q=`aes-${f}-cbc`;if(!(0,d_.default)(q))throw new Sf.JOSENotSupported(`alg ${t} is not supported by your javascript runtime`);let _=(0,yf.createCipheriv)(q,d,r),W=(0,sy.concat)(_.update(c),_.final()),J=parseInt(t.slice(-3),10),$=(0,my.default)(n,r,W,J,h,f);return{ciphertext:W,tag:$}}function Uy(t,c,u,r,n){let d=`aes-${parseInt(t.slice(1,4),10)}-gcm`;if(!(0,d_.default)(d))throw new Sf.JOSENotSupported(`alg ${t} is not supported by your javascript runtime`);let h=(0,yf.createCipheriv)(d,u,r,{authTagLength:16});if(n.byteLength)h.setAAD(n,{plaintextLength:c.length});let q=h.update(c);h.final();let _=h.getAuthTag();return{ciphertext:q,tag:_}}var ly=(t,c,u,r,n)=>{let f;if((0,gy.isCryptoKey)(u))(0,By.checkEncCryptoKey)(u,t,"encrypt"),f=yf.KeyObject.from(u);else if(u instanceof Uint8Array||(0,f_.default)(u))f=u;else throw TypeError((0,Fy.default)(u,...ky.types,"Uint8Array"));switch((0,Ly.default)(t,f),(0,xy.default)(t,r),t){case"A128CBC-HS256":case"A192CBC-HS384":case"A256CBC-HS512":return oy(t,c,f,r,n);case"A128GCM":case"A192GCM":case"A256GCM":return Uy(t,c,f,r,n);default:throw new Sf.JOSENotSupported("Unsupported JWE Content Encryption Algorithm")}};Hf.default=ly});var Of=K((zt)=>{Object.defineProperty(zt,"__esModule",{value:!0});zt.unwrap=zt.wrap=void 0;var Qy=Cf(),ay=an(),tS=Cu(),h_=F();async function cS(t,c,u,r){let n=t.slice(0,7);r||(r=(0,tS.default)(n));let{ciphertext:f,tag:d}=await(0,Qy.default)(n,u,c,r,new Uint8Array(0));return{encryptedKey:f,iv:(0,h_.encode)(r),tag:(0,h_.encode)(d)}}zt.wrap=cS;async function uS(t,c,u,r,n){let f=t.slice(0,7);return(0,ay.default)(f,c,u,r,n,new Uint8Array(0))}zt.unwrap=uS});var K_=K((Gf)=>{Object.defineProperty(Gf,"__esModule",{value:!0});var q_=Xu(),__=qf(),rS=Kf(),nS=Wf(),Oc=F(),N=C(),fS=yc(),dS=Hc(),hS=Cc(),qS=l(),_S=Of();async function KS(t,c,u,r,n){switch((0,hS.default)(t,c,"decrypt"),t){case"dir":{if(u!==void 0)throw new N.JWEInvalid("Encountered unexpected JWE Encrypted Key");return c}case"ECDH-ES":if(u!==void 0)throw new N.JWEInvalid("Encountered unexpected JWE Encrypted Key");case"ECDH-ES+A128KW":case"ECDH-ES+A192KW":case"ECDH-ES+A256KW":{if(!(0,qS.default)(r.epk))throw new N.JWEInvalid('JOSE Header "epk" (Ephemeral Public Key) missing or invalid');if(!__.ecdhAllowed(c))throw new N.JOSENotSupported("ECDH with the provided key is not allowed or not supported by your javascript runtime");let f=await(0,dS.importJWK)(r.epk,t),d,h;if(r.apu!==void 0){if(typeof r.apu!=="string")throw new N.JWEInvalid('JOSE Header "apu" (Agreement PartyUInfo) invalid');try{d=(0,Oc.decode)(r.apu)}catch{throw new N.JWEInvalid("Failed to base64url decode the apu")}}if(r.apv!==void 0){if(typeof r.apv!=="string")throw new N.JWEInvalid('JOSE Header "apv" (Agreement PartyVInfo) invalid');try{h=(0,Oc.decode)(r.apv)}catch{throw new N.JWEInvalid("Failed to base64url decode the apv")}}let q=await __.deriveKey(f,c,t==="ECDH-ES"?r.enc:t,t==="ECDH-ES"?(0,fS.bitLength)(r.enc):parseInt(t.slice(-5,-2),10),d,h);if(t==="ECDH-ES")return q;if(u===void 0)throw new N.JWEInvalid("JWE Encrypted Key missing");return(0,q_.unwrap)(t.slice(-6),q,u)}case"RSA1_5":case"RSA-OAEP":case"RSA-OAEP-256":case"RSA-OAEP-384":case"RSA-OAEP-512":{if(u===void 0)throw new N.JWEInvalid("JWE Encrypted Key missing");return(0,nS.decrypt)(t,c,u)}case"PBES2-HS256+A128KW":case"PBES2-HS384+A192KW":case"PBES2-HS512+A256KW":{if(u===void 0)throw new N.JWEInvalid("JWE Encrypted Key missing");if(typeof r.p2c!=="number")throw new N.JWEInvalid('JOSE Header "p2c" (PBES2 Count) missing or invalid');let f=(n===null||n===void 0?void 0:n.maxPBES2Count)||1e4;if(r.p2c>f)throw new N.JWEInvalid('JOSE Header "p2c" (PBES2 Count) out is of acceptable bounds');if(typeof r.p2s!=="string")throw new N.JWEInvalid('JOSE Header "p2s" (PBES2 Salt) missing or invalid');let d;try{d=(0,Oc.decode)(r.p2s)}catch{throw new N.JWEInvalid("Failed to base64url decode the p2s")}return(0,rS.decrypt)(t,c,u,r.p2c,d)}case"A128KW":case"A192KW":case"A256KW":{if(u===void 0)throw new N.JWEInvalid("JWE Encrypted Key missing");return(0,q_.unwrap)(t,c,u)}case"A128GCMKW":case"A192GCMKW":case"A256GCMKW":{if(u===void 0)throw new N.JWEInvalid("JWE Encrypted Key missing");if(typeof r.iv!=="string")throw new N.JWEInvalid('JOSE Header "iv" (Initialization Vector) missing or invalid');if(typeof r.tag!=="string")throw new N.JWEInvalid('JOSE Header "tag" (Authentication Tag) missing or invalid');let f;try{f=(0,Oc.decode)(r.iv)}catch{throw new N.JWEInvalid("Failed to base64url decode the iv")}let d;try{d=(0,Oc.decode)(r.tag)}catch{throw new N.JWEInvalid("Failed to base64url decode the tag")}return(0,_S.unwrap)(t,c,u,f,d)}default:throw new N.JOSENotSupported('Invalid or unsupported "alg" (JWE Algorithm) header value')}}Gf.default=KS});var it=K((If)=>{Object.defineProperty(If,"__esModule",{value:!0});var WS=C();function JS(t,c,u,r,n){if(n.crit!==void 0&&r.crit===void 0)throw new t('"crit" (Critical) Header Parameter MUST be integrity protected');if(!r||r.crit===void 0)return new Set;if(!Array.isArray(r.crit)||r.crit.length===0||r.crit.some((d)=>typeof d!=="string"||d.length===0))throw new t('"crit" (Critical) Header Parameter MUST be an array of non-empty strings when present');let f;if(u!==void 0)f=new Map([...Object.entries(u),...c.entries()]);else f=c;for(let d of r.crit){if(!f.has(d))throw new WS.JOSENotSupported(`Extension Header Parameter "${d}" is not recognized`);if(n[d]===void 0)throw new t(`Extension Header Parameter "${d}" is missing`);else if(f.get(d)&&r[d]===void 0)throw new t(`Extension Header Parameter "${d}" MUST be integrity protected`)}return new Set(r.crit)}If.default=JS});var Xf=K((Zf)=>{Object.defineProperty(Zf,"__esModule",{value:!0});var wS=(t,c)=>{if(c!==void 0&&(!Array.isArray(c)||c.some((u)=>typeof u!=="string")))throw TypeError(`"${t}" option must be an array of strings`);if(!c)return;return new Set(c)};Zf.default=wS});var Nu=K((Mu)=>{Object.defineProperty(Mu,"__esModule",{value:!0});Mu.flattenedDecrypt=void 0;var Rt=F(),$S=an(),PS=tf(),i=C(),AS=Zt(),Ef=l(),yS=K_(),Gc=M(),SS=yc(),HS=it(),W_=Xf();async function CS(t,c,u){var r;if(!(0,Ef.default)(t))throw new i.JWEInvalid("Flattened JWE must be an object");if(t.protected===void 0&&t.header===void 0&&t.unprotected===void 0)throw new i.JWEInvalid("JOSE Header missing");if(typeof t.iv!=="string")throw new i.JWEInvalid("JWE Initialization Vector missing or incorrect type");if(typeof t.ciphertext!=="string")throw new i.JWEInvalid("JWE Ciphertext missing or incorrect type");if(typeof t.tag!=="string")throw new i.JWEInvalid("JWE Authentication Tag missing or incorrect type");if(t.protected!==void 0&&typeof t.protected!=="string")throw new i.JWEInvalid("JWE Protected Header incorrect type");if(t.encrypted_key!==void 0&&typeof t.encrypted_key!=="string")throw new i.JWEInvalid("JWE Encrypted Key incorrect type");if(t.aad!==void 0&&typeof t.aad!=="string")throw new i.JWEInvalid("JWE AAD incorrect type");if(t.header!==void 0&&!(0,Ef.default)(t.header))throw new i.JWEInvalid("JWE Shared Unprotected Header incorrect type");if(t.unprotected!==void 0&&!(0,Ef.default)(t.unprotected))throw new i.JWEInvalid("JWE Per-Recipient Unprotected Header incorrect type");let n;if(t.protected)try{let D=(0,Rt.decode)(t.protected);n=JSON.parse(Gc.decoder.decode(D))}catch{throw new i.JWEInvalid("JWE Protected Header is invalid")}if(!(0,AS.default)(n,t.header,t.unprotected))throw new i.JWEInvalid("JWE Protected, JWE Unprotected Header, and JWE Per-Recipient Unprotected Header Parameter names must be disjoint");let f={...n,...t.header,...t.unprotected};if((0,HS.default)(i.JWEInvalid,new Map,u===null||u===void 0?void 0:u.crit,n,f),f.zip!==void 0){if(!n||!n.zip)throw new i.JWEInvalid('JWE "zip" (Compression Algorithm) Header MUST be integrity protected');if(f.zip!=="DEF")throw new i.JOSENotSupported('Unsupported JWE "zip" (Compression Algorithm) Header Parameter value')}let{alg:d,enc:h}=f;if(typeof d!=="string"||!d)throw new i.JWEInvalid("missing JWE Algorithm (alg) in JWE Header");if(typeof h!=="string"||!h)throw new i.JWEInvalid("missing JWE Encryption Algorithm (enc) in JWE Header");let q=u&&(0,W_.default)("keyManagementAlgorithms",u.keyManagementAlgorithms),_=u&&(0,W_.default)("contentEncryptionAlgorithms",u.contentEncryptionAlgorithms);if(q&&!q.has(d))throw new i.JOSEAlgNotAllowed('"alg" (Algorithm) Header Parameter not allowed');if(_&&!_.has(h))throw new i.JOSEAlgNotAllowed('"enc" (Encryption Algorithm) Header Parameter not allowed');let W;if(t.encrypted_key!==void 0)try{W=(0,Rt.decode)(t.encrypted_key)}catch{throw new i.JWEInvalid("Failed to base64url decode the encrypted_key")}let J=!1;if(typeof c==="function")c=await c(n,t),J=!0;let $;try{$=await(0,yS.default)(d,c,W,f,u)}catch(D){if(D instanceof TypeError||D instanceof i.JWEInvalid||D instanceof i.JOSENotSupported)throw D;$=(0,SS.default)(h)}let w,P;try{w=(0,Rt.decode)(t.iv)}catch{throw new i.JWEInvalid("Failed to base64url decode the iv")}try{P=(0,Rt.decode)(t.tag)}catch{throw new i.JWEInvalid("Failed to base64url decode the tag")}let A=Gc.encoder.encode((r=t.protected)!==null&&r!==void 0?r:""),G;if(t.aad!==void 0)G=(0,Gc.concat)(A,Gc.encoder.encode("."),Gc.encoder.encode(t.aad));else G=A;let Z;try{Z=(0,Rt.decode)(t.ciphertext)}catch{throw new i.JWEInvalid("Failed to base64url decode the ciphertext")}let E=await(0,$S.default)(h,$,Z,w,P,G);if(f.zip==="DEF")E=await((u===null||u===void 0?void 0:u.inflateRaw)||PS.inflate)(E);let O={plaintext:E};if(t.protected!==void 0)O.protectedHeader=n;if(t.aad!==void 0)try{O.additionalAuthenticatedData=(0,Rt.decode)(t.aad)}catch{throw new i.JWEInvalid("Failed to base64url decode the aad")}if(t.unprotected!==void 0)O.sharedUnprotectedHeader=t.unprotected;if(t.header!==void 0)O.unprotectedHeader=t.header;if(J)return{...O,key:c};return O}Mu.flattenedDecrypt=CS});var Yf=K((Tu)=>{Object.defineProperty(Tu,"__esModule",{value:!0});Tu.compactDecrypt=void 0;var OS=Nu(),J_=C(),GS=M();async function IS(t,c,u){if(t instanceof Uint8Array)t=GS.decoder.decode(t);if(typeof t!=="string")throw new J_.JWEInvalid("Compact JWE must be a string or Uint8Array");let{0:r,1:n,2:f,3:d,4:h,length:q}=t.split(".");if(q!==5)throw new J_.JWEInvalid("Invalid Compact JWE");let _=await(0,OS.flattenedDecrypt)({ciphertext:d,iv:f||void 0,protected:r||void 0,tag:h||void 0,encrypted_key:n||void 0},c,u),W={plaintext:_.plaintext,protectedHeader:_.protectedHeader};if(typeof c==="function")return{...W,key:_.key};return W}Tu.compactDecrypt=IS});var $_=K((Du)=>{Object.defineProperty(Du,"__esModule",{value:!0});Du.generalDecrypt=void 0;var ZS=Nu(),eu=C(),w_=l();async function XS(t,c,u){if(!(0,w_.default)(t))throw new eu.JWEInvalid("General JWE must be an object");if(!Array.isArray(t.recipients)||!t.recipients.every(w_.default))throw new eu.JWEInvalid("JWE Recipients missing or incorrect type");if(!t.recipients.length)throw new eu.JWEInvalid("JWE Recipients has no members");for(let r of t.recipients)try{return await(0,ZS.flattenedDecrypt)({aad:t.aad,ciphertext:t.ciphertext,encrypted_key:r.encrypted_key,header:r.header,iv:t.iv,protected:t.protected,tag:t.tag,unprotected:t.unprotected},c,u)}catch{}throw new eu.JWEDecryptionFailed}Du.generalDecrypt=XS});var A_=K((zf)=>{Object.defineProperty(zf,"__esModule",{value:!0});var ES=2,YS=48;class P_{constructor(t){if(t[0]!==YS)throw TypeError();if(this.buffer=t,this.offset=1,this.decodeLength()!==t.length-this.offset)throw TypeError()}decodeLength(){let t=this.buffer[this.offset++];if(t&128){let c=t&-129;t=0;for(let u=0;u<c;u++)t=t<<8|this.buffer[this.offset+u];this.offset+=c}return t}unsignedInteger(){if(this.buffer[this.offset++]!==ES)throw TypeError();let t=this.decodeLength();if(this.buffer[this.offset]===0)this.offset++,t--;let c=this.buffer.slice(this.offset,this.offset+t);return this.offset+=t,c}end(){if(this.offset!==this.buffer.length)throw TypeError()}}zf.default=P_});var y_=K((Vf)=>{Object.defineProperty(Vf,"__esModule",{value:!0});var bu=require("crypto"),s=F(),zS=A_(),ju=C(),Rf=Jc(),iS=h1(),RS=d1(),VS=q1(),MS=_1(),NS=Sc(),pu=(t)=>{let c;if((0,iS.isCryptoKey)(t)){if(!t.extractable)throw TypeError("CryptoKey is not extractable");c=bu.KeyObject.from(t)}else if((0,RS.default)(t))c=t;else if(t instanceof Uint8Array)return{kty:"oct",k:(0,s.encode)(t)};else throw TypeError((0,VS.default)(t,...MS.types,"Uint8Array"));if(NS.jwkExport){if(c.type!=="secret"&&!["rsa","ec","ed25519","x25519","ed448","x448"].includes(c.asymmetricKeyType))throw new ju.JOSENotSupported("Unsupported key asymmetricKeyType");return c.export({format:"jwk"})}switch(c.type){case"secret":return{kty:"oct",k:(0,s.encode)(c.export())};case"private":case"public":switch(c.asymmetricKeyType){case"rsa":{let u=c.export({format:"der",type:"pkcs1"}),r=new zS.default(u);if(c.type==="private")r.unsignedInteger();let n=(0,s.encode)(r.unsignedInteger()),f=(0,s.encode)(r.unsignedInteger()),d;if(c.type==="private")d={d:(0,s.encode)(r.unsignedInteger()),p:(0,s.encode)(r.unsignedInteger()),q:(0,s.encode)(r.unsignedInteger()),dp:(0,s.encode)(r.unsignedInteger()),dq:(0,s.encode)(r.unsignedInteger()),qi:(0,s.encode)(r.unsignedInteger())};return r.end(),{kty:"RSA",n,e:f,...d}}case"ec":{let u=(0,Rf.default)(c),r,n,f;switch(u){case"secp256k1":r=64,n=33,f=-1;break;case"P-256":r=64,n=36,f=-1;break;case"P-384":r=96,n=35,f=-3;break;case"P-521":r=132,n=35,f=-3;break;default:throw new ju.JOSENotSupported("Unsupported curve")}if(c.type==="public"){let h=c.export({type:"spki",format:"der"});return{kty:"EC",crv:u,x:(0,s.encode)(h.subarray(-r,-r/2)),y:(0,s.encode)(h.subarray(-r/2))}}let d=c.export({type:"pkcs8",format:"der"});if(d.length<100)n+=f;return{...pu((0,bu.createPublicKey)(c)),d:(0,s.encode)(d.subarray(n,n+r/2))}}case"ed25519":case"x25519":{let u=(0,Rf.default)(c);if(c.type==="public"){let n=c.export({type:"spki",format:"der"});return{kty:"OKP",crv:u,x:(0,s.encode)(n.subarray(-32))}}let r=c.export({type:"pkcs8",format:"der"});return{...pu((0,bu.createPublicKey)(c)),d:(0,s.encode)(r.subarray(-32))}}case"ed448":case"x448":{let u=(0,Rf.default)(c);if(c.type==="public"){let n=c.export({type:"spki",format:"der"});return{kty:"OKP",crv:u,x:(0,s.encode)(n.subarray(u==="Ed448"?-57:-56))}}let r=c.export({type:"pkcs8",format:"der"});return{...pu((0,bu.createPublicKey)(c)),d:(0,s.encode)(r.subarray(u==="Ed448"?-57:-56))}}default:throw new ju.JOSENotSupported("Unsupported key asymmetricKeyType")}default:throw new ju.JOSENotSupported("Unsupported key type")}};Vf.default=pu});var Mf=K((m1)=>{Object.defineProperty(m1,"__esModule",{value:!0});m1.exportJWK=m1.exportPKCS8=m1.exportSPKI=void 0;var TS=iu(),eS=iu(),DS=y_();async function bS(t){return(0,TS.toSPKI)(t)}m1.exportSPKI=bS;async function jS(t){return(0,eS.toPKCS8)(t)}m1.exportPKCS8=jS;async function pS(t){return(0,DS.default)(t)}m1.exportJWK=pS});var ef=K((Tf)=>{Object.defineProperty(Tf,"__esModule",{value:!0});var S_=Xu(),Nf=qf(),vS=Kf(),xS=Wf(),H_=F(),Vt=yc(),C_=C(),LS=Mf(),sS=Cc(),mS=Of();async function gS(t,c,u,r,n={}){let f,d,h;switch((0,sS.default)(t,u,"encrypt"),t){case"dir":{h=u;break}case"ECDH-ES":case"ECDH-ES+A128KW":case"ECDH-ES+A192KW":case"ECDH-ES+A256KW":{if(!Nf.ecdhAllowed(u))throw new C_.JOSENotSupported("ECDH with the provided key is not allowed or not supported by your javascript runtime");let{apu:q,apv:_}=n,{epk:W}=n;W||(W=(await Nf.generateEpk(u)).privateKey);let{x:J,y:$,crv:w,kty:P}=await(0,LS.exportJWK)(W),A=await Nf.deriveKey(u,W,t==="ECDH-ES"?c:t,t==="ECDH-ES"?(0,Vt.bitLength)(c):parseInt(t.slice(-5,-2),10),q,_);if(d={epk:{x:J,crv:w,kty:P}},P==="EC")d.epk.y=$;if(q)d.apu=(0,H_.encode)(q);if(_)d.apv=(0,H_.encode)(_);if(t==="ECDH-ES"){h=A;break}h=r||(0,Vt.default)(c);let G=t.slice(-6);f=await(0,S_.wrap)(G,A,h);break}case"RSA1_5":case"RSA-OAEP":case"RSA-OAEP-256":case"RSA-OAEP-384":case"RSA-OAEP-512":{h=r||(0,Vt.default)(c),f=await(0,xS.encrypt)(t,u,h);break}case"PBES2-HS256+A128KW":case"PBES2-HS384+A192KW":case"PBES2-HS512+A256KW":{h=r||(0,Vt.default)(c);let{p2c:q,p2s:_}=n;({encryptedKey:f,...d}=await(0,vS.encrypt)(t,u,h,q,_));break}case"A128KW":case"A192KW":case"A256KW":{h=r||(0,Vt.default)(c),f=await(0,S_.wrap)(t,u,h);break}case"A128GCMKW":case"A192GCMKW":case"A256GCMKW":{h=r||(0,Vt.default)(c);let{iv:q}=n;({encryptedKey:f,...d}=await(0,mS.wrap)(t,u,h,q));break}default:throw new C_.JOSENotSupported('Invalid or unsupported "alg" (JWE Algorithm) header value')}return{cek:h,encryptedKey:f,parameters:d}}Tf.default=gS});var vu=K((ct)=>{Object.defineProperty(ct,"__esModule",{value:!0});ct.FlattenedEncrypt=ct.unprotected=void 0;var Mt=F(),O_=Cf(),BS=tf(),FS=Cu(),kS=ef(),tt=C(),oS=Zt(),Nt=M(),US=it();ct.unprotected=Symbol();class G_{constructor(t){if(!(t instanceof Uint8Array))throw TypeError("plaintext must be an instance of Uint8Array");this._plaintext=t}setKeyManagementParameters(t){if(this._keyManagementParameters)throw TypeError("setKeyManagementParameters can only be called once");return this._keyManagementParameters=t,this}setProtectedHeader(t){if(this._protectedHeader)throw TypeError("setProtectedHeader can only be called once");return this._protectedHeader=t,this}setSharedUnprotectedHeader(t){if(this._sharedUnprotectedHeader)throw TypeError("setSharedUnprotectedHeader can only be called once");return this._sharedUnprotectedHeader=t,this}setUnprotectedHeader(t){if(this._unprotectedHeader)throw TypeError("setUnprotectedHeader can only be called once");return this._unprotectedHeader=t,this}setAdditionalAuthenticatedData(t){return this._aad=t,this}setContentEncryptionKey(t){if(this._cek)throw TypeError("setContentEncryptionKey can only be called once");return this._cek=t,this}setInitializationVector(t){if(this._iv)throw TypeError("setInitializationVector can only be called once");return this._iv=t,this}async encrypt(t,c){if(!this._protectedHeader&&!this._unprotectedHeader&&!this._sharedUnprotectedHeader)throw new tt.JWEInvalid("either setProtectedHeader, setUnprotectedHeader, or sharedUnprotectedHeader must be called before #encrypt()");if(!(0,oS.default)(this._protectedHeader,this._unprotectedHeader,this._sharedUnprotectedHeader))throw new tt.JWEInvalid("JWE Protected, JWE Shared Unprotected and JWE Per-Recipient Header Parameter names must be disjoint");let u={...this._protectedHeader,...this._unprotectedHeader,...this._sharedUnprotectedHeader};if((0,US.default)(tt.JWEInvalid,new Map,c===null||c===void 0?void 0:c.crit,this._protectedHeader,u),u.zip!==void 0){if(!this._protectedHeader||!this._protectedHeader.zip)throw new tt.JWEInvalid('JWE "zip" (Compression Algorithm) Header MUST be integrity protected');if(u.zip!=="DEF")throw new tt.JOSENotSupported('Unsupported JWE "zip" (Compression Algorithm) Header Parameter value')}let{alg:r,enc:n}=u;if(typeof r!=="string"||!r)throw new tt.JWEInvalid('JWE "alg" (Algorithm) Header Parameter missing or invalid');if(typeof n!=="string"||!n)throw new tt.JWEInvalid('JWE "enc" (Encryption Algorithm) Header Parameter missing or invalid');let f;if(r==="dir"){if(this._cek)throw TypeError("setContentEncryptionKey cannot be called when using Direct Encryption")}else if(r==="ECDH-ES"){if(this._cek)throw TypeError("setContentEncryptionKey cannot be called when using Direct Key Agreement")}let d;{let w;if({cek:d,encryptedKey:f,parameters:w}=await(0,kS.default)(r,n,t,this._cek,this._keyManagementParameters),w)if(c&&ct.unprotected in c)if(!this._unprotectedHeader)this.setUnprotectedHeader(w);else this._unprotectedHeader={...this._unprotectedHeader,...w};else if(!this._protectedHeader)this.setProtectedHeader(w);else this._protectedHeader={...this._protectedHeader,...w}}this._iv||(this._iv=(0,FS.default)(n));let h,q,_;if(this._protectedHeader)q=Nt.encoder.encode((0,Mt.encode)(JSON.stringify(this._protectedHeader)));else q=Nt.encoder.encode("");if(this._aad)_=(0,Mt.encode)(this._aad),h=(0,Nt.concat)(q,Nt.encoder.encode("."),Nt.encoder.encode(_));else h=q;let W,J;if(u.zip==="DEF"){let w=await((c===null||c===void 0?void 0:c.deflateRaw)||BS.deflate)(this._plaintext);({ciphertext:W,tag:J}=await(0,O_.default)(n,w,d,this._iv,h))}else({ciphertext:W,tag:J}=await(0,O_.default)(n,this._plaintext,d,this._iv,h));let $={ciphertext:(0,Mt.encode)(W),iv:(0,Mt.encode)(this._iv),tag:(0,Mt.encode)(J)};if(f)$.encrypted_key=(0,Mt.encode)(f);if(_)$.aad=_;if(this._protectedHeader)$.protected=Nt.decoder.decode(q);if(this._sharedUnprotectedHeader)$.unprotected=this._sharedUnprotectedHeader;if(this._unprotectedHeader)$.header=this._unprotectedHeader;return $}}ct.FlattenedEncrypt=G_});var X_=K((xu)=>{Object.defineProperty(xu,"__esModule",{value:!0});xu.GeneralEncrypt=void 0;var Df=vu(),g1=C(),lS=yc(),QS=Zt(),aS=ef(),tH=F(),cH=it();class I_{constructor(t,c,u){this.parent=t,this.key=c,this.options=u}setUnprotectedHeader(t){if(this.unprotectedHeader)throw TypeError("setUnprotectedHeader can only be called once");return this.unprotectedHeader=t,this}addRecipient(...t){return this.parent.addRecipient(...t)}encrypt(...t){return this.parent.encrypt(...t)}done(){return this.parent}}class Z_{constructor(t){this._recipients=[],this._plaintext=t}addRecipient(t,c){let u=new I_(this,t,{crit:c===null||c===void 0?void 0:c.crit});return this._recipients.push(u),u}setProtectedHeader(t){if(this._protectedHeader)throw TypeError("setProtectedHeader can only be called once");return this._protectedHeader=t,this}setSharedUnprotectedHeader(t){if(this._unprotectedHeader)throw TypeError("setSharedUnprotectedHeader can only be called once");return this._unprotectedHeader=t,this}setAdditionalAuthenticatedData(t){return this._aad=t,this}async encrypt(t){var c,u,r;if(!this._recipients.length)throw new g1.JWEInvalid("at least one recipient must be added");if(t={deflateRaw:t===null||t===void 0?void 0:t.deflateRaw},this._recipients.length===1){let[h]=this._recipients,q=await new Df.FlattenedEncrypt(this._plaintext).setAdditionalAuthenticatedData(this._aad).setProtectedHeader(this._protectedHeader).setSharedUnprotectedHeader(this._unprotectedHeader).setUnprotectedHeader(h.unprotectedHeader).encrypt(h.key,{...h.options,...t}),_={ciphertext:q.ciphertext,iv:q.iv,recipients:[{}],tag:q.tag};if(q.aad)_.aad=q.aad;if(q.protected)_.protected=q.protected;if(q.unprotected)_.unprotected=q.unprotected;if(q.encrypted_key)_.recipients[0].encrypted_key=q.encrypted_key;if(q.header)_.recipients[0].header=q.header;return _}let n;for(let h=0;h<this._recipients.length;h++){let q=this._recipients[h];if(!(0,QS.default)(this._protectedHeader,this._unprotectedHeader,q.unprotectedHeader))throw new g1.JWEInvalid("JWE Protected, JWE Shared Unprotected and JWE Per-Recipient Header Parameter names must be disjoint");let _={...this._protectedHeader,...this._unprotectedHeader,...q.unprotectedHeader},{alg:W}=_;if(typeof W!=="string"||!W)throw new g1.JWEInvalid('JWE "alg" (Algorithm) Header Parameter missing or invalid');if(W==="dir"||W==="ECDH-ES")throw new g1.JWEInvalid('"dir" and "ECDH-ES" alg may only be used with a single recipient');if(typeof _.enc!=="string"||!_.enc)throw new g1.JWEInvalid('JWE "enc" (Encryption Algorithm) Header Parameter missing or invalid');if(!n)n=_.enc;else if(n!==_.enc)throw new g1.JWEInvalid('JWE "enc" (Encryption Algorithm) Header Parameter must be the same for all recipients');if((0,cH.default)(g1.JWEInvalid,new Map,q.options.crit,this._protectedHeader,_),_.zip!==void 0){if(!this._protectedHeader||!this._protectedHeader.zip)throw new g1.JWEInvalid('JWE "zip" (Compression Algorithm) Header MUST be integrity protected')}}let f=(0,lS.default)(n),d={ciphertext:"",iv:"",recipients:[],tag:""};for(let h=0;h<this._recipients.length;h++){let q=this._recipients[h],_={};d.recipients.push(_);let J={...this._protectedHeader,...this._unprotectedHeader,...q.unprotectedHeader}.alg.startsWith("PBES2")?2048+h:void 0;if(h===0){let P=await new Df.FlattenedEncrypt(this._plaintext).setAdditionalAuthenticatedData(this._aad).setContentEncryptionKey(f).setProtectedHeader(this._protectedHeader).setSharedUnprotectedHeader(this._unprotectedHeader).setUnprotectedHeader(q.unprotectedHeader).setKeyManagementParameters({p2c:J}).encrypt(q.key,{...q.options,...t,[Df.unprotected]:!0});if(d.ciphertext=P.ciphertext,d.iv=P.iv,d.tag=P.tag,P.aad)d.aad=P.aad;if(P.protected)d.protected=P.protected;if(P.unprotected)d.unprotected=P.unprotected;if(_.encrypted_key=P.encrypted_key,P.header)_.header=P.header;continue}let{encryptedKey:$,parameters:w}=await(0,aS.default)(((c=q.unprotectedHeader)===null||c===void 0?void 0:c.alg)||((u=this._protectedHeader)===null||u===void 0?void 0:u.alg)||((r=this._unprotectedHeader)===null||r===void 0?void 0:r.alg),n,q.key,f,{p2c:J});if(_.encrypted_key=(0,tH.encode)($),q.unprotectedHeader||w)_.header={...q.unprotectedHeader,...w}}return d}}xu.GeneralEncrypt=Z_});var jf=K((bf)=>{Object.defineProperty(bf,"__esModule",{value:!0});var uH=C();function rH(t){switch(t){case"PS256":case"RS256":case"ES256":case"ES256K":return"sha256";case"PS384":case"RS384":case"ES384":return"sha384";case"PS512":case"RS512":case"ES512":return"sha512";case"EdDSA":return;default:throw new uH.JOSENotSupported(`alg ${t} is not supported either by JOSE or your javascript runtime`)}}bf.default=rH});var xf=K((vf)=>{Object.defineProperty(vf,"__esModule",{value:!0});var E_=require("crypto"),nH=Jc(),fH=C(),pf=$c(),Tt=Sc(),Y_={padding:E_.constants.RSA_PKCS1_PSS_PADDING,saltLength:E_.constants.RSA_PSS_SALTLEN_DIGEST},dH=new Map([["ES256","P-256"],["ES256K","secp256k1"],["ES384","P-384"],["ES512","P-521"]]);function hH(t,c){switch(t){case"EdDSA":if(!["ed25519","ed448"].includes(c.asymmetricKeyType))throw TypeError("Invalid key for this operation, its asymmetricKeyType must be ed25519 or ed448");return c;case"RS256":case"RS384":case"RS512":if(c.asymmetricKeyType!=="rsa")throw TypeError("Invalid key for this operation, its asymmetricKeyType must be rsa");return(0,pf.default)(c,t),c;case(Tt.rsaPssParams&&"PS256"):case(Tt.rsaPssParams&&"PS384"):case(Tt.rsaPssParams&&"PS512"):if(c.asymmetricKeyType==="rsa-pss"){let{hashAlgorithm:u,mgf1HashAlgorithm:r,saltLength:n}=c.asymmetricKeyDetails,f=parseInt(t.slice(-3),10);if(u!==void 0&&(u!==`sha${f}`||r!==u))throw TypeError(`Invalid key for this operation, its RSA-PSS parameters do not meet the requirements of "alg" ${t}`);if(n!==void 0&&n>f>>3)throw TypeError(`Invalid key for this operation, its RSA-PSS parameter saltLength does not meet the requirements of "alg" ${t}`)}else if(c.asymmetricKeyType!=="rsa")throw TypeError("Invalid key for this operation, its asymmetricKeyType must be rsa or rsa-pss");return(0,pf.default)(c,t),{key:c,...Y_};case(!Tt.rsaPssParams&&"PS256"):case(!Tt.rsaPssParams&&"PS384"):case(!Tt.rsaPssParams&&"PS512"):if(c.asymmetricKeyType!=="rsa")throw TypeError("Invalid key for this operation, its asymmetricKeyType must be rsa");return(0,pf.default)(c,t),{key:c,...Y_};case"ES256":case"ES256K":case"ES384":case"ES512":{if(c.asymmetricKeyType!=="ec")throw TypeError("Invalid key for this operation, its asymmetricKeyType must be ec");let u=(0,nH.default)(c),r=dH.get(t);if(u!==r)throw TypeError(`Invalid key curve for the algorithm, its curve must be ${r}, got ${u}`);return{dsaEncoding:"ieee-p1363",key:c}}default:throw new fH.JOSENotSupported(`alg ${t} is not supported either by JOSE or your javascript runtime`)}}vf.default=hH});var z_=K((Lf)=>{Object.defineProperty(Lf,"__esModule",{value:!0});var qH=C();function _H(t){switch(t){case"HS256":return"sha256";case"HS384":return"sha384";case"HS512":return"sha512";default:throw new qH.JOSENotSupported(`alg ${t} is not supported either by JOSE or your javascript runtime`)}}Lf.default=_H});var gf=K((mf)=>{Object.defineProperty(mf,"__esModule",{value:!0});var sf=require("crypto"),KH=h1(),WH=v1(),i_=q1(),R_=_1();function JH(t,c,u){if(c instanceof Uint8Array){if(!t.startsWith("HS"))throw TypeError((0,i_.default)(c,...R_.types));return(0,sf.createSecretKey)(c)}if(c instanceof sf.KeyObject)return c;if((0,KH.isCryptoKey)(c))return(0,WH.checkSigCryptoKey)(c,t,u),sf.KeyObject.from(c);throw TypeError((0,i_.default)(c,...R_.types,"Uint8Array"))}mf.default=JH});var kf=K((Ff)=>{Object.defineProperty(Ff,"__esModule",{value:!0});var Lu=require("crypto"),wH=require("util"),$H=jf(),PH=z_(),AH=xf(),yH=gf(),Bf;if(Lu.sign.length>3)Bf=(0,wH.promisify)(Lu.sign);else Bf=Lu.sign;var SH=async(t,c,u)=>{let r=(0,yH.default)(t,c,"sign");if(t.startsWith("HS")){let n=Lu.createHmac((0,PH.default)(t),r);return n.update(u),n.digest()}return Bf((0,$H.default)(t),u,(0,AH.default)(t,r))};Ff.default=SH});var V_=K((Uf)=>{Object.defineProperty(Uf,"__esModule",{value:!0});var su=require("crypto"),HH=require("util"),CH=jf(),OH=xf(),GH=kf(),IH=gf(),ZH=Sc(),of;if(su.verify.length>4&&ZH.oneShotCallback)of=(0,HH.promisify)(su.verify);else of=su.verify;var XH=async(t,c,u,r)=>{let n=(0,IH.default)(t,c,"verify");if(t.startsWith("HS")){let h=await(0,GH.default)(t,n,r),q=u;try{return su.timingSafeEqual(q,h)}catch{return!1}}let f=(0,CH.default)(t),d=(0,OH.default)(t,n);try{return await of(f,r,d,u)}catch{return!1}};Uf.default=XH});var gu=K((mu)=>{Object.defineProperty(mu,"__esModule",{value:!0});mu.flattenedVerify=void 0;var lf=F(),EH=V_(),m=C(),et=M(),YH=Zt(),M_=l(),zH=Cc(),iH=it(),RH=Xf();async function VH(t,c,u){var r;if(!(0,M_.default)(t))throw new m.JWSInvalid("Flattened JWS must be an object");if(t.protected===void 0&&t.header===void 0)throw new m.JWSInvalid('Flattened JWS must have either of the "protected" or "header" members');if(t.protected!==void 0&&typeof t.protected!=="string")throw new m.JWSInvalid("JWS Protected Header incorrect type");if(t.payload===void 0)throw new m.JWSInvalid("JWS Payload missing");if(typeof t.signature!=="string")throw new m.JWSInvalid("JWS Signature missing or incorrect type");if(t.header!==void 0&&!(0,M_.default)(t.header))throw new m.JWSInvalid("JWS Unprotected Header incorrect type");let n={};if(t.protected)try{let G=(0,lf.decode)(t.protected);n=JSON.parse(et.decoder.decode(G))}catch{throw new m.JWSInvalid("JWS Protected Header is invalid")}if(!(0,YH.default)(n,t.header))throw new m.JWSInvalid("JWS Protected and JWS Unprotected Header Parameter names must be disjoint");let f={...n,...t.header},d=(0,iH.default)(m.JWSInvalid,new Map([["b64",!0]]),u===null||u===void 0?void 0:u.crit,n,f),h=!0;if(d.has("b64")){if(h=n.b64,typeof h!=="boolean")throw new m.JWSInvalid('The "b64" (base64url-encode payload) Header Parameter must be a boolean')}let{alg:q}=f;if(typeof q!=="string"||!q)throw new m.JWSInvalid('JWS "alg" (Algorithm) Header Parameter missing or invalid');let _=u&&(0,RH.default)("algorithms",u.algorithms);if(_&&!_.has(q))throw new m.JOSEAlgNotAllowed('"alg" (Algorithm) Header Parameter not allowed');if(h){if(typeof t.payload!=="string")throw new m.JWSInvalid("JWS Payload must be a string")}else if(typeof t.payload!=="string"&&!(t.payload instanceof Uint8Array))throw new m.JWSInvalid("JWS Payload must be a string or an Uint8Array instance");let W=!1;if(typeof c==="function")c=await c(n,t),W=!0;(0,zH.default)(q,c,"verify");let J=(0,et.concat)(et.encoder.encode((r=t.protected)!==null&&r!==void 0?r:""),et.encoder.encode("."),typeof t.payload==="string"?et.encoder.encode(t.payload):t.payload),$;try{$=(0,lf.decode)(t.signature)}catch{throw new m.JWSInvalid("Failed to base64url decode the signature")}if(!await(0,EH.default)(q,c,$,J))throw new m.JWSSignatureVerificationFailed;let P;if(h)try{P=(0,lf.decode)(t.payload)}catch{throw new m.JWSInvalid("Failed to base64url decode the payload")}else if(typeof t.payload==="string")P=et.encoder.encode(t.payload);else P=t.payload;let A={payload:P};if(t.protected!==void 0)A.protectedHeader=n;if(t.header!==void 0)A.unprotectedHeader=t.header;if(W)return{...A,key:c};return A}mu.flattenedVerify=VH});var Qf=K((Bu)=>{Object.defineProperty(Bu,"__esModule",{value:!0});Bu.compactVerify=void 0;var MH=gu(),N_=C(),NH=M();async function TH(t,c,u){if(t instanceof Uint8Array)t=NH.decoder.decode(t);if(typeof t!=="string")throw new N_.JWSInvalid("Compact JWS must be a string or Uint8Array");let{0:r,1:n,2:f,length:d}=t.split(".");if(d!==3)throw new N_.JWSInvalid("Invalid Compact JWS");let h=await(0,MH.flattenedVerify)({payload:n,protected:r,signature:f},c,u),q={payload:h.payload,protectedHeader:h.protectedHeader};if(typeof c==="function")return{...q,key:h.key};return q}Bu.compactVerify=TH});var e_=K((Fu)=>{Object.defineProperty(Fu,"__esModule",{value:!0});Fu.generalVerify=void 0;var eH=gu(),af=C(),T_=l();async function DH(t,c,u){if(!(0,T_.default)(t))throw new af.JWSInvalid("General JWS must be an object");if(!Array.isArray(t.signatures)||!t.signatures.every(T_.default))throw new af.JWSInvalid("JWS Signatures missing or incorrect type");for(let r of t.signatures)try{return await(0,eH.flattenedVerify)({header:r.header,payload:t.payload,protected:r.protected,signature:r.signature},c,u)}catch{}throw new af.JWSSignatureVerificationFailed}Fu.generalVerify=DH});var cd=K((td)=>{Object.defineProperty(td,"__esModule",{value:!0});td.default=(t)=>Math.floor(t.getTime()/1000)});var nd=K((rd)=>{Object.defineProperty(rd,"__esModule",{value:!0});var D_=60,b_=D_*60,ud=b_*24,bH=ud*7,jH=ud*365.25,pH=/^(\d+|\d+\.\d+) ?(seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|weeks?|w|years?|yrs?|y)$/i;rd.default=(t)=>{let c=pH.exec(t);if(!c)throw TypeError("Invalid time period format");let u=parseFloat(c[1]);switch(c[2].toLowerCase()){case"sec":case"secs":case"second":case"seconds":case"s":return Math.round(u);case"minute":case"minutes":case"min":case"mins":case"m":return Math.round(u*D_);case"hour":case"hours":case"hr":case"hrs":case"h":return Math.round(u*b_);case"day":case"days":case"d":return Math.round(u*ud);case"week":case"weeks":case"w":return Math.round(u*bH);default:return Math.round(u*jH)}}});var ku=K((fd)=>{Object.defineProperty(fd,"__esModule",{value:!0});var t1=C(),vH=M(),xH=cd(),j_=nd(),LH=l(),p_=(t)=>t.toLowerCase().replace(/^application\//,""),sH=(t,c)=>{if(typeof t==="string")return c.includes(t);if(Array.isArray(t))return c.some(Set.prototype.has.bind(new Set(t)));return!1};fd.default=(t,c,u={})=>{let{typ:r}=u;if(r&&(typeof t.typ!=="string"||p_(t.typ)!==p_(r)))throw new t1.JWTClaimValidationFailed('unexpected "typ" JWT header value',"typ","check_failed");let n;try{n=JSON.parse(vH.decoder.decode(c))}catch{}if(!(0,LH.default)(n))throw new t1.JWTInvalid("JWT Claims Set must be a top-level JSON object");let{requiredClaims:f=[],issuer:d,subject:h,audience:q,maxTokenAge:_}=u;if(_!==void 0)f.push("iat");if(q!==void 0)f.push("aud");if(h!==void 0)f.push("sub");if(d!==void 0)f.push("iss");for(let w of new Set(f.reverse()))if(!(w in n))throw new t1.JWTClaimValidationFailed(`missing required "${w}" claim`,w,"missing");if(d&&!(Array.isArray(d)?d:[d]).includes(n.iss))throw new t1.JWTClaimValidationFailed('unexpected "iss" claim value',"iss","check_failed");if(h&&n.sub!==h)throw new t1.JWTClaimValidationFailed('unexpected "sub" claim value',"sub","check_failed");if(q&&!sH(n.aud,typeof q==="string"?[q]:q))throw new t1.JWTClaimValidationFailed('unexpected "aud" claim value',"aud","check_failed");let W;switch(typeof u.clockTolerance){case"string":W=(0,j_.default)(u.clockTolerance);break;case"number":W=u.clockTolerance;break;case"undefined":W=0;break;default:throw TypeError("Invalid clockTolerance option type")}let{currentDate:J}=u,$=(0,xH.default)(J||new Date);if((n.iat!==void 0||_)&&typeof n.iat!=="number")throw new t1.JWTClaimValidationFailed('"iat" claim must be a number',"iat","invalid");if(n.nbf!==void 0){if(typeof n.nbf!=="number")throw new t1.JWTClaimValidationFailed('"nbf" claim must be a number',"nbf","invalid");if(n.nbf>$+W)throw new t1.JWTClaimValidationFailed('"nbf" claim timestamp check failed',"nbf","check_failed")}if(n.exp!==void 0){if(typeof n.exp!=="number")throw new t1.JWTClaimValidationFailed('"exp" claim must be a number',"exp","invalid");if(n.exp<=$-W)throw new t1.JWTExpired('"exp" claim timestamp check failed',"exp","check_failed")}if(_){let w=$-n.iat,P=typeof _==="number"?_:(0,j_.default)(_);if(w-W>P)throw new t1.JWTExpired('"iat" claim timestamp check failed (too far in the past)',"iat","check_failed");if(w<0-W)throw new t1.JWTClaimValidationFailed('"iat" claim timestamp check failed (it should be in the past)',"iat","check_failed")}return n}});var v_=K((ou)=>{Object.defineProperty(ou,"__esModule",{value:!0});ou.jwtVerify=void 0;var mH=Qf(),gH=ku(),BH=C();async function FH(t,c,u){var r;let n=await(0,mH.compactVerify)(t,c,u);if(((r=n.protectedHeader.crit)===null||r===void 0?void 0:r.includes("b64"))&&n.protectedHeader.b64===!1)throw new BH.JWTInvalid("JWTs MUST NOT use unencoded payload");let d={payload:(0,gH.default)(n.protectedHeader,n.payload,u),protectedHeader:n.protectedHeader};if(typeof c==="function")return{...d,key:n.key};return d}ou.jwtVerify=FH});var x_=K((Uu)=>{Object.defineProperty(Uu,"__esModule",{value:!0});Uu.jwtDecrypt=void 0;var kH=Yf(),oH=ku(),dd=C();async function UH(t,c,u){let r=await(0,kH.compactDecrypt)(t,c,u),n=(0,oH.default)(r.protectedHeader,r.plaintext,u),{protectedHeader:f}=r;if(f.iss!==void 0&&f.iss!==n.iss)throw new dd.JWTClaimValidationFailed('replicated "iss" claim header parameter mismatch',"iss","mismatch");if(f.sub!==void 0&&f.sub!==n.sub)throw new dd.JWTClaimValidationFailed('replicated "sub" claim header parameter mismatch',"sub","mismatch");if(f.aud!==void 0&&JSON.stringify(f.aud)!==JSON.stringify(n.aud))throw new dd.JWTClaimValidationFailed('replicated "aud" claim header parameter mismatch',"aud","mismatch");let d={payload:n,protectedHeader:f};if(typeof c==="function")return{...d,key:r.key};return d}Uu.jwtDecrypt=UH});var hd=K((lu)=>{Object.defineProperty(lu,"__esModule",{value:!0});lu.CompactEncrypt=void 0;var lH=vu();class L_{constructor(t){this._flattened=new lH.FlattenedEncrypt(t)}setContentEncryptionKey(t){return this._flattened.setContentEncryptionKey(t),this}setInitializationVector(t){return this._flattened.setInitializationVector(t),this}setProtectedHeader(t){return this._flattened.setProtectedHeader(t),this}setKeyManagementParameters(t){return this._flattened.setKeyManagementParameters(t),this}async encrypt(t,c){let u=await this._flattened.encrypt(t,c);return[u.protected,u.encrypted_key,u.iv,u.ciphertext,u.tag].join(".")}}lu.CompactEncrypt=L_});var au=K((Qu)=>{Object.defineProperty(Qu,"__esModule",{value:!0});Qu.FlattenedSign=void 0;var qd=F(),QH=kf(),aH=Zt(),Ic=C(),ut=M(),tC=Cc(),cC=it();class s_{constructor(t){if(!(t instanceof Uint8Array))throw TypeError("payload must be an instance of Uint8Array");this._payload=t}setProtectedHeader(t){if(this._protectedHeader)throw TypeError("setProtectedHeader can only be called once");return this._protectedHeader=t,this}setUnprotectedHeader(t){if(this._unprotectedHeader)throw TypeError("setUnprotectedHeader can only be called once");return this._unprotectedHeader=t,this}async sign(t,c){if(!this._protectedHeader&&!this._unprotectedHeader)throw new Ic.JWSInvalid("either setProtectedHeader or setUnprotectedHeader must be called before #sign()");if(!(0,aH.default)(this._protectedHeader,this._unprotectedHeader))throw new Ic.JWSInvalid("JWS Protected and JWS Unprotected Header Parameter names must be disjoint");let u={...this._protectedHeader,...this._unprotectedHeader},r=(0,cC.default)(Ic.JWSInvalid,new Map([["b64",!0]]),c===null||c===void 0?void 0:c.crit,this._protectedHeader,u),n=!0;if(r.has("b64")){if(n=this._protectedHeader.b64,typeof n!=="boolean")throw new Ic.JWSInvalid('The "b64" (base64url-encode payload) Header Parameter must be a boolean')}let{alg:f}=u;if(typeof f!=="string"||!f)throw new Ic.JWSInvalid('JWS "alg" (Algorithm) Header Parameter missing or invalid');(0,tC.default)(f,t,"sign");let d=this._payload;if(n)d=ut.encoder.encode((0,qd.encode)(d));let h;if(this._protectedHeader)h=ut.encoder.encode((0,qd.encode)(JSON.stringify(this._protectedHeader)));else h=ut.encoder.encode("");let q=(0,ut.concat)(h,ut.encoder.encode("."),d),_=await(0,QH.default)(f,t,q),W={signature:(0,qd.encode)(_),payload:""};if(n)W.payload=ut.decoder.decode(d);if(this._unprotectedHeader)W.header=this._unprotectedHeader;if(this._protectedHeader)W.protected=ut.decoder.decode(h);return W}}Qu.FlattenedSign=s_});var _d=K((tr)=>{Object.defineProperty(tr,"__esModule",{value:!0});tr.CompactSign=void 0;var uC=au();class m_{constructor(t){this._flattened=new uC.FlattenedSign(t)}setProtectedHeader(t){return this._flattened.setProtectedHeader(t),this}async sign(t,c){let u=await this._flattened.sign(t,c);if(u.payload===void 0)throw TypeError("use the flattened module for creating JWS with b64: false");return`${u.protected}.${u.payload}.${u.signature}`}}tr.CompactSign=m_});var k_=K((cr)=>{Object.defineProperty(cr,"__esModule",{value:!0});cr.GeneralSign=void 0;var rC=au(),g_=C();class B_{constructor(t,c,u){this.parent=t,this.key=c,this.options=u}setProtectedHeader(t){if(this.protectedHeader)throw TypeError("setProtectedHeader can only be called once");return this.protectedHeader=t,this}setUnprotectedHeader(t){if(this.unprotectedHeader)throw TypeError("setUnprotectedHeader can only be called once");return this.unprotectedHeader=t,this}addSignature(...t){return this.parent.addSignature(...t)}sign(...t){return this.parent.sign(...t)}done(){return this.parent}}class F_{constructor(t){this._signatures=[],this._payload=t}addSignature(t,c){let u=new B_(this,t,c);return this._signatures.push(u),u}async sign(){if(!this._signatures.length)throw new g_.JWSInvalid("at least one signature must be added");let t={signatures:[],payload:""};for(let c=0;c<this._signatures.length;c++){let u=this._signatures[c],r=new rC.FlattenedSign(this._payload);r.setProtectedHeader(u.protectedHeader),r.setUnprotectedHeader(u.unprotectedHeader);let{payload:n,...f}=await r.sign(u.key,u.options);if(c===0)t.payload=n;else if(t.payload!==n)throw new g_.JWSInvalid("inconsistent use of JWS Unencoded Payload (RFC7797)");t.signatures.push(f)}return t}}cr.GeneralSign=F_});var rr=K((ur)=>{Object.defineProperty(ur,"__esModule",{value:!0});ur.ProduceJWT=void 0;var Kd=cd(),nC=l(),o_=nd();class U_{constructor(t){if(!(0,nC.default)(t))throw TypeError("JWT Claims Set MUST be an object");this._payload=t}setIssuer(t){return this._payload={...this._payload,iss:t},this}setSubject(t){return this._payload={...this._payload,sub:t},this}setAudience(t){return this._payload={...this._payload,aud:t},this}setJti(t){return this._payload={...this._payload,jti:t},this}setNotBefore(t){if(typeof t==="number")this._payload={...this._payload,nbf:t};else this._payload={...this._payload,nbf:(0,Kd.default)(new Date)+(0,o_.default)(t)};return this}setExpirationTime(t){if(typeof t==="number")this._payload={...this._payload,exp:t};else this._payload={...this._payload,exp:(0,Kd.default)(new Date)+(0,o_.default)(t)};return this}setIssuedAt(t){if(typeof t>"u")this._payload={...this._payload,iat:(0,Kd.default)(new Date)};else this._payload={...this._payload,iat:t};return this}}ur.ProduceJWT=U_});var Q_=K((nr)=>{Object.defineProperty(nr,"__esModule",{value:!0});nr.SignJWT=void 0;var fC=_d(),dC=C(),hC=M(),qC=rr();class l_ extends qC.ProduceJWT{setProtectedHeader(t){return this._protectedHeader=t,this}async sign(t,c){var u;let r=new fC.CompactSign(hC.encoder.encode(JSON.stringify(this._payload)));if(r.setProtectedHeader(this._protectedHeader),Array.isArray((u=this._protectedHeader)===null||u===void 0?void 0:u.crit)&&this._protectedHeader.crit.includes("b64")&&this._protectedHeader.b64===!1)throw new dC.JWTInvalid("JWTs MUST NOT use unencoded payload");return r.sign(t,c)}}nr.SignJWT=l_});var t8=K((fr)=>{Object.defineProperty(fr,"__esModule",{value:!0});fr.EncryptJWT=void 0;var _C=hd(),KC=M(),WC=rr();class a_ extends WC.ProduceJWT{setProtectedHeader(t){if(this._protectedHeader)throw TypeError("setProtectedHeader can only be called once");return this._protectedHeader=t,this}setKeyManagementParameters(t){if(this._keyManagementParameters)throw TypeError("setKeyManagementParameters can only be called once");return this._keyManagementParameters=t,this}setContentEncryptionKey(t){if(this._cek)throw TypeError("setContentEncryptionKey can only be called once");return this._cek=t,this}setInitializationVector(t){if(this._iv)throw TypeError("setInitializationVector can only be called once");return this._iv=t,this}replicateIssuerAsHeader(){return this._replicateIssuerAsHeader=!0,this}replicateSubjectAsHeader(){return this._replicateSubjectAsHeader=!0,this}replicateAudienceAsHeader(){return this._replicateAudienceAsHeader=!0,this}async encrypt(t,c){let u=new _C.CompactEncrypt(KC.encoder.encode(JSON.stringify(this._payload)));if(this._replicateIssuerAsHeader)this._protectedHeader={...this._protectedHeader,iss:this._payload.iss};if(this._replicateSubjectAsHeader)this._protectedHeader={...this._protectedHeader,sub:this._payload.sub};if(this._replicateAudienceAsHeader)this._protectedHeader={...this._protectedHeader,aud:this._payload.aud};if(u.setProtectedHeader(this._protectedHeader),this._iv)u.setInitializationVector(this._iv);if(this._cek)u.setContentEncryptionKey(this._cek);if(this._keyManagementParameters)u.setKeyManagementParameters(this._keyManagementParameters);return u.encrypt(t,c)}}fr.EncryptJWT=a_});var r8=K((Dt)=>{Object.defineProperty(Dt,"__esModule",{value:!0});Dt.calculateJwkThumbprintUri=Dt.calculateJwkThumbprint=void 0;var JC=Dn(),wC=F(),c8=C(),$C=M(),PC=l(),B1=(t,c)=>{if(typeof t!=="string"||!t)throw new c8.JWKInvalid(`${c} missing or invalid`)};async function u8(t,c){if(!(0,PC.default)(t))throw TypeError("JWK must be an object");if(c!==null&&c!==void 0||(c="sha256"),c!=="sha256"&&c!=="sha384"&&c!=="sha512")throw TypeError('digestAlgorithm must one of "sha256", "sha384", or "sha512"');let u;switch(t.kty){case"EC":B1(t.crv,'"crv" (Curve) Parameter'),B1(t.x,'"x" (X Coordinate) Parameter'),B1(t.y,'"y" (Y Coordinate) Parameter'),u={crv:t.crv,kty:t.kty,x:t.x,y:t.y};break;case"OKP":B1(t.crv,'"crv" (Subtype of Key Pair) Parameter'),B1(t.x,'"x" (Public Key) Parameter'),u={crv:t.crv,kty:t.kty,x:t.x};break;case"RSA":B1(t.e,'"e" (Exponent) Parameter'),B1(t.n,'"n" (Modulus) Parameter'),u={e:t.e,kty:t.kty,n:t.n};break;case"oct":B1(t.k,'"k" (Key Value) Parameter'),u={k:t.k,kty:t.kty};break;default:throw new c8.JOSENotSupported('"kty" (Key Type) Parameter missing or unsupported')}let r=$C.encoder.encode(JSON.stringify(u));return(0,wC.encode)(await(0,JC.default)(c,r))}Dt.calculateJwkThumbprint=u8;async function AC(t,c){c!==null&&c!==void 0||(c="sha256");let u=await u8(t,c);return`urn:ietf:params:oauth:jwk-thumbprint:sha-${c.slice(-3)}:${u}`}Dt.calculateJwkThumbprintUri=AC});var f8=K((dr)=>{Object.defineProperty(dr,"__esModule",{value:!0});dr.EmbeddedJWK=void 0;var yC=Hc(),SC=l(),n8=C();async function HC(t,c){let u={...t,...c===null||c===void 0?void 0:c.header};if(!(0,SC.default)(u.jwk))throw new n8.JWSInvalid('"jwk" (JSON Web Key) Header Parameter must be a JSON object');let r=await(0,yC.importJWK)({...u.jwk,ext:!0},u.alg,!0);if(r instanceof Uint8Array||r.type!=="public")throw new n8.JWSInvalid('"jwk" (JSON Web Key) Header Parameter must be a public key');return r}dr.EmbeddedJWK=HC});var Jd=K((F1)=>{Object.defineProperty(F1,"__esModule",{value:!0});F1.createLocalJWKSet=F1.LocalJWKSet=F1.isJWKSLike=void 0;var CC=Hc(),Zc=C(),OC=l();function GC(t){switch(typeof t==="string"&&t.slice(0,2)){case"RS":case"PS":return"RSA";case"ES":return"EC";case"Ed":return"OKP";default:throw new Zc.JOSENotSupported('Unsupported "alg" value for a JSON Web Key Set')}}function h8(t){return t&&typeof t==="object"&&Array.isArray(t.keys)&&t.keys.every(IC)}F1.isJWKSLike=h8;function IC(t){return(0,OC.default)(t)}function ZC(t){if(typeof structuredClone==="function")return structuredClone(t);return JSON.parse(JSON.stringify(t))}class Wd{constructor(t){if(this._cached=new WeakMap,!h8(t))throw new Zc.JWKSInvalid("JSON Web Key Set malformed");this._jwks=ZC(t)}async getKey(t,c){let{alg:u,kid:r}={...t,...c===null||c===void 0?void 0:c.header},n=GC(u),f=this._jwks.keys.filter((q)=>{let _=n===q.kty;if(_&&typeof r==="string")_=r===q.kid;if(_&&typeof q.alg==="string")_=u===q.alg;if(_&&typeof q.use==="string")_=q.use==="sig";if(_&&Array.isArray(q.key_ops))_=q.key_ops.includes("verify");if(_&&u==="EdDSA")_=q.crv==="Ed25519"||q.crv==="Ed448";if(_)switch(u){case"ES256":_=q.crv==="P-256";break;case"ES256K":_=q.crv==="secp256k1";break;case"ES384":_=q.crv==="P-384";break;case"ES512":_=q.crv==="P-521";break}return _}),{0:d,length:h}=f;if(h===0)throw new Zc.JWKSNoMatchingKey;else if(h!==1){let q=new Zc.JWKSMultipleMatchingKeys,{_cached:_}=this;throw q[Symbol.asyncIterator]=async function*(){for(let W of f)try{yield await d8(_,W,u)}catch{continue}},q}return d8(this._cached,d,u)}}F1.LocalJWKSet=Wd;async function d8(t,c,u){let r=t.get(c)||t.set(c,{}).get(c);if(r[u]===void 0){let n=await(0,CC.importJWK)({...c,ext:!0},u);if(n instanceof Uint8Array||n.type!=="public")throw new Zc.JWKSInvalid("JSON Web Key Set members must be public keys");r[u]=n}return r[u]}function XC(t){let c=new Wd(t);return async function(u,r){return c.getKey(u,r)}}F1.createLocalJWKSet=XC});var K8=K(($d)=>{Object.defineProperty($d,"__esModule",{value:!0});var EC=require("http"),YC=require("https"),q8=require("events"),wd=C(),_8=M(),zC=async(t,c,u)=>{let r;switch(t.protocol){case"https:":r=YC.get;break;case"http:":r=EC.get;break;default:throw TypeError("Unsupported URL protocol.")}let{agent:n,headers:f}=u,d=r(t.href,{agent:n,timeout:c,headers:f}),[h]=await Promise.race([(0,q8.once)(d,"response"),(0,q8.once)(d,"timeout")]);if(!h)throw d.destroy(),new wd.JWKSTimeout;if(h.statusCode!==200)throw new wd.JOSEError("Expected 200 OK from the JSON Web Key Set HTTP response");let q=[];for await(let _ of h)q.push(_);try{return JSON.parse(_8.decoder.decode((0,_8.concat)(...q)))}catch{throw new wd.JOSEError("Failed to parse the JSON Web Key Set HTTP response as JSON")}};$d.default=zC});var $8=K((hr)=>{Object.defineProperty(hr,"__esModule",{value:!0});hr.createRemoteJWKSet=void 0;var iC=K8(),W8=C(),J8=Jd();function RC(){return typeof WebSocketPair<"u"||typeof navigator<"u"&&navigator.userAgent==="Cloudflare-Workers"||typeof EdgeRuntime<"u"&&EdgeRuntime==="vercel"}class w8 extends J8.LocalJWKSet{constructor(t,c){super({keys:[]});if(this._jwks=void 0,!(t instanceof URL))throw TypeError("url must be an instance of URL");this._url=new URL(t.href),this._options={agent:c===null||c===void 0?void 0:c.agent,headers:c===null||c===void 0?void 0:c.headers},this._timeoutDuration=typeof(c===null||c===void 0?void 0:c.timeoutDuration)==="number"?c===null||c===void 0?void 0:c.timeoutDuration:5000,this._cooldownDuration=typeof(c===null||c===void 0?void 0:c.cooldownDuration)==="number"?c===null||c===void 0?void 0:c.cooldownDuration:30000,this._cacheMaxAge=typeof(c===null||c===void 0?void 0:c.cacheMaxAge)==="number"?c===null||c===void 0?void 0:c.cacheMaxAge:600000}coolingDown(){return typeof this._jwksTimestamp==="number"?Date.now()<this._jwksTimestamp+this._cooldownDuration:!1}fresh(){return typeof this._jwksTimestamp==="number"?Date.now()<this._jwksTimestamp+this._cacheMaxAge:!1}async getKey(t,c){if(!this._jwks||!this.fresh())await this.reload();try{return await super.getKey(t,c)}catch(u){if(u instanceof W8.JWKSNoMatchingKey){if(this.coolingDown()===!1)return await this.reload(),super.getKey(t,c)}throw u}}async reload(){if(this._pendingFetch&&RC())this._pendingFetch=void 0;this._pendingFetch||(this._pendingFetch=(0,iC.default)(this._url,this._timeoutDuration,this._options).then((t)=>{if(!(0,J8.isJWKSLike)(t))throw new W8.JWKSInvalid("JSON Web Key Set malformed");this._jwks={keys:t.keys},this._jwksTimestamp=Date.now(),this._pendingFetch=void 0}).catch((t)=>{throw this._pendingFetch=void 0,t})),await this._pendingFetch}}function VC(t,c){let u=new w8(t,c);return async function(r,n){return u.getKey(r,n)}}hr.createRemoteJWKSet=VC});var A8=K((_r)=>{Object.defineProperty(_r,"__esModule",{value:!0});_r.UnsecuredJWT=void 0;var qr=F(),MC=M(),Pd=C(),NC=ku(),TC=rr();class P8 extends TC.ProduceJWT{encode(){let t=qr.encode(JSON.stringify({alg:"none"})),c=qr.encode(JSON.stringify(this._payload));return`${t}.${c}.`}static decode(t,c){if(typeof t!=="string")throw new Pd.JWTInvalid("Unsecured JWT must be a string");let{0:u,1:r,2:n,length:f}=t.split(".");if(f!==3||n!=="")throw new Pd.JWTInvalid("Invalid Unsecured JWT");let d;try{if(d=JSON.parse(MC.decoder.decode(qr.decode(u))),d.alg!=="none")throw Error()}catch{throw new Pd.JWTInvalid("Invalid Unsecured JWT")}return{payload:(0,NC.default)(d,qr.decode(r),c),header:d}}}_r.UnsecuredJWT=P8});var Kr=K((bt)=>{Object.defineProperty(bt,"__esModule",{value:!0});bt.decode=bt.encode=void 0;var y8=F();bt.encode=y8.encode;bt.decode=y8.decode});var S8=K((Wr)=>{Object.defineProperty(Wr,"__esModule",{value:!0});Wr.decodeProtectedHeader=void 0;var eC=Kr(),DC=M(),bC=l();function jC(t){let c;if(typeof t==="string"){let u=t.split(".");if(u.length===3||u.length===5)[c]=u}else if(typeof t==="object"&&t)if("protected"in t)c=t.protected;else throw TypeError("Token does not contain a Protected Header");try{if(typeof c!=="string"||!c)throw Error();let u=JSON.parse(DC.decoder.decode((0,eC.decode)(c)));if(!(0,bC.default)(u))throw Error();return u}catch{throw TypeError("Invalid Token or Protected Header formatting")}}Wr.decodeProtectedHeader=jC});var H8=K((Jr)=>{Object.defineProperty(Jr,"__esModule",{value:!0});Jr.decodeJwt=void 0;var pC=Kr(),vC=M(),xC=l(),rt=C();function LC(t){if(typeof t!=="string")throw new rt.JWTInvalid("JWTs must use Compact JWS serialization, JWT must be a string");let{1:c,length:u}=t.split(".");if(u===5)throw new rt.JWTInvalid("Only JWTs using Compact JWS serialization can be decoded");if(u!==3)throw new rt.JWTInvalid("Invalid JWT");if(!c)throw new rt.JWTInvalid("JWTs must contain a payload");let r;try{r=(0,pC.decode)(c)}catch{throw new rt.JWTInvalid("Failed to base64url decode the payload")}let n;try{n=JSON.parse(vC.decoder.decode(r))}catch{throw new rt.JWTInvalid("Failed to parse the decoded payload as JSON")}if(!(0,xC.default)(n))throw new rt.JWTInvalid("Invalid JWT Claims Set");return n}Jr.decodeJwt=LC});var Ad=K((jt)=>{Object.defineProperty(jt,"__esModule",{value:!0});jt.generateKeyPair=jt.generateSecret=void 0;var O8=require("crypto"),sC=require("util"),mC=hc(),C8=$c(),Xc=C(),E1=(0,sC.promisify)(O8.generateKeyPair);async function gC(t,c){let u;switch(t){case"HS256":case"HS384":case"HS512":case"A128CBC-HS256":case"A192CBC-HS384":case"A256CBC-HS512":u=parseInt(t.slice(-3),10);break;case"A128KW":case"A192KW":case"A256KW":case"A128GCMKW":case"A192GCMKW":case"A256GCMKW":case"A128GCM":case"A192GCM":case"A256GCM":u=parseInt(t.slice(1,4),10);break;default:throw new Xc.JOSENotSupported('Invalid or unsupported JWK "alg" (Algorithm) Parameter value')}return(0,O8.createSecretKey)((0,mC.default)(new Uint8Array(u>>3)))}jt.generateSecret=gC;async function BC(t,c){var u,r;switch(t){case"RS256":case"RS384":case"RS512":case"PS256":case"PS384":case"PS512":case"RSA-OAEP":case"RSA-OAEP-256":case"RSA-OAEP-384":case"RSA-OAEP-512":case"RSA1_5":{let f=(u=c===null||c===void 0?void 0:c.modulusLength)!==null&&u!==void 0?u:2048;if(typeof f!=="number"||f<2048)throw new Xc.JOSENotSupported("Invalid or unsupported modulusLength option provided, 2048 bits or larger keys must be used");let d=await E1("rsa",{modulusLength:f,publicExponent:65537});return(0,C8.setModulusLength)(d.privateKey,f),(0,C8.setModulusLength)(d.publicKey,f),d}case"ES256":return E1("ec",{namedCurve:"P-256"});case"ES256K":return E1("ec",{namedCurve:"secp256k1"});case"ES384":return E1("ec",{namedCurve:"P-384"});case"ES512":return E1("ec",{namedCurve:"P-521"});case"EdDSA":switch(c===null||c===void 0?void 0:c.crv){case void 0:case"Ed25519":return E1("ed25519");case"Ed448":return E1("ed448");default:throw new Xc.JOSENotSupported("Invalid or unsupported crv option provided, supported values are Ed25519 and Ed448")}case"ECDH-ES":case"ECDH-ES+A128KW":case"ECDH-ES+A192KW":case"ECDH-ES+A256KW":let n=(r=c===null||c===void 0?void 0:c.crv)!==null&&r!==void 0?r:"P-256";switch(n){case void 0:case"P-256":case"P-384":case"P-521":return E1("ec",{namedCurve:n});case"X25519":return E1("x25519");case"X448":return E1("x448");default:throw new Xc.JOSENotSupported("Invalid or unsupported crv option provided, supported values are P-256, P-384, P-521, X25519, and X448")}default:throw new Xc.JOSENotSupported('Invalid or unsupported JWK "alg" (Algorithm) Parameter value')}}jt.generateKeyPair=BC});var G8=K((wr)=>{Object.defineProperty(wr,"__esModule",{value:!0});wr.generateKeyPair=void 0;var FC=Ad();async function kC(t,c){return(0,FC.generateKeyPair)(t,c)}wr.generateKeyPair=kC});var I8=K(($r)=>{Object.defineProperty($r,"__esModule",{value:!0});$r.generateSecret=void 0;var oC=Ad();async function UC(t,c){return(0,oC.generateSecret)(t,c)}$r.generateSecret=UC});var Z8=K((yd)=>{Object.defineProperty(yd,"__esModule",{value:!0});yd.default="node:crypto"});var X8=K((Sd)=>{Object.defineProperty(Sd,"__esModule",{value:!0});var lC=Z8();Sd.default=lC.default});var Cd=K((y)=>{Object.defineProperty(y,"__esModule",{value:!0});y.cryptoRuntime=y.base64url=y.generateSecret=y.generateKeyPair=y.errors=y.decodeJwt=y.decodeProtectedHeader=y.importJWK=y.importX509=y.importPKCS8=y.importSPKI=y.exportJWK=y.exportSPKI=y.exportPKCS8=y.UnsecuredJWT=y.createRemoteJWKSet=y.createLocalJWKSet=y.EmbeddedJWK=y.calculateJwkThumbprintUri=y.calculateJwkThumbprint=y.EncryptJWT=y.SignJWT=y.GeneralSign=y.FlattenedSign=y.CompactSign=y.FlattenedEncrypt=y.CompactEncrypt=y.jwtDecrypt=y.jwtVerify=y.generalVerify=y.flattenedVerify=y.compactVerify=y.GeneralEncrypt=y.generalDecrypt=y.flattenedDecrypt=y.compactDecrypt=void 0;var QC=Yf();Object.defineProperty(y,"compactDecrypt",{enumerable:!0,get:function(){return QC.compactDecrypt}});var aC=Nu();Object.defineProperty(y,"flattenedDecrypt",{enumerable:!0,get:function(){return aC.flattenedDecrypt}});var tO=$_();Object.defineProperty(y,"generalDecrypt",{enumerable:!0,get:function(){return tO.generalDecrypt}});var cO=X_();Object.defineProperty(y,"GeneralEncrypt",{enumerable:!0,get:function(){return cO.GeneralEncrypt}});var uO=Qf();Object.defineProperty(y,"compactVerify",{enumerable:!0,get:function(){return uO.compactVerify}});var rO=gu();Object.defineProperty(y,"flattenedVerify",{enumerable:!0,get:function(){return rO.flattenedVerify}});var nO=e_();Object.defineProperty(y,"generalVerify",{enumerable:!0,get:function(){return nO.generalVerify}});var fO=v_();Object.defineProperty(y,"jwtVerify",{enumerable:!0,get:function(){return fO.jwtVerify}});var dO=x_();Object.defineProperty(y,"jwtDecrypt",{enumerable:!0,get:function(){return dO.jwtDecrypt}});var hO=hd();Object.defineProperty(y,"CompactEncrypt",{enumerable:!0,get:function(){return hO.CompactEncrypt}});var qO=vu();Object.defineProperty(y,"FlattenedEncrypt",{enumerable:!0,get:function(){return qO.FlattenedEncrypt}});var _O=_d();Object.defineProperty(y,"CompactSign",{enumerable:!0,get:function(){return _O.CompactSign}});var KO=au();Object.defineProperty(y,"FlattenedSign",{enumerable:!0,get:function(){return KO.FlattenedSign}});var WO=k_();Object.defineProperty(y,"GeneralSign",{enumerable:!0,get:function(){return WO.GeneralSign}});var JO=Q_();Object.defineProperty(y,"SignJWT",{enumerable:!0,get:function(){return JO.SignJWT}});var wO=t8();Object.defineProperty(y,"EncryptJWT",{enumerable:!0,get:function(){return wO.EncryptJWT}});var E8=r8();Object.defineProperty(y,"calculateJwkThumbprint",{enumerable:!0,get:function(){return E8.calculateJwkThumbprint}});Object.defineProperty(y,"calculateJwkThumbprintUri",{enumerable:!0,get:function(){return E8.calculateJwkThumbprintUri}});var $O=f8();Object.defineProperty(y,"EmbeddedJWK",{enumerable:!0,get:function(){return $O.EmbeddedJWK}});var PO=Jd();Object.defineProperty(y,"createLocalJWKSet",{enumerable:!0,get:function(){return PO.createLocalJWKSet}});var AO=$8();Object.defineProperty(y,"createRemoteJWKSet",{enumerable:!0,get:function(){return AO.createRemoteJWKSet}});var yO=A8();Object.defineProperty(y,"UnsecuredJWT",{enumerable:!0,get:function(){return yO.UnsecuredJWT}});var Hd=Mf();Object.defineProperty(y,"exportPKCS8",{enumerable:!0,get:function(){return Hd.exportPKCS8}});Object.defineProperty(y,"exportSPKI",{enumerable:!0,get:function(){return Hd.exportSPKI}});Object.defineProperty(y,"exportJWK",{enumerable:!0,get:function(){return Hd.exportJWK}});var Pr=Hc();Object.defineProperty(y,"importSPKI",{enumerable:!0,get:function(){return Pr.importSPKI}});Object.defineProperty(y,"importPKCS8",{enumerable:!0,get:function(){return Pr.importPKCS8}});Object.defineProperty(y,"importX509",{enumerable:!0,get:function(){return Pr.importX509}});Object.defineProperty(y,"importJWK",{enumerable:!0,get:function(){return Pr.importJWK}});var SO=S8();Object.defineProperty(y,"decodeProtectedHeader",{enumerable:!0,get:function(){return SO.decodeProtectedHeader}});var HO=H8();Object.defineProperty(y,"decodeJwt",{enumerable:!0,get:function(){return HO.decodeJwt}});y.errors=C();var CO=G8();Object.defineProperty(y,"generateKeyPair",{enumerable:!0,get:function(){return CO.generateKeyPair}});var OO=I8();Object.defineProperty(y,"generateSecret",{enumerable:!0,get:function(){return OO.generateSecret}});y.base64url=Kr();var GO=X8();Object.defineProperty(y,"cryptoRuntime",{enumerable:!0,get:function(){return GO.default}})});var yr=K((IY,Y8)=>{function Ar(t){Error.call(this,t),Error.captureStackTrace(this,this.constructor),this.name="JwksError",this.message=t}Ar.prototype=Object.create(Error.prototype);Ar.prototype.constructor=Ar;Y8.exports=Ar});var Od=K((ZY,i8)=>{var z8=Cd(),IO=yr();function ZO(t){if(t.alg)return t.alg;if(t.kty==="RSA")return"RS256";if(t.kty==="EC")switch(t.crv){case"P-256":return"ES256";case"secp256k1":return"ES256K";case"P-384":return"ES384";case"P-521":return"ES512"}if(t.kty==="OKP")switch(t.crv){case"Ed25519":case"Ed448":return"EdDSA"}throw new IO("Unsupported JWK")}async function XO(t){let c=[];t=t.filter(({use:u})=>u==="sig"||u===void 0).filter(({kty:u})=>u==="RSA"||u==="EC"||u==="OKP");for(let u of t)try{let r=await z8.importJWK({...u,ext:!0},ZO(u));if(r.type!=="public")continue;let n;switch(r[Symbol.toStringTag]){case"CryptoKey":{let f=await z8.exportSPKI(r);n=()=>f;break}case"KeyObject":default:n=()=>r.export({format:"pem",type:"spki"})}c.push({get publicKey(){return n()},get rsaPublicKey(){return n()},getPublicKey(){return n()},...typeof u.kid==="string"&&u.kid?{kid:u.kid}:void 0,...typeof u.alg==="string"&&u.alg?{alg:u.alg}:void 0})}catch(r){continue}return c}i8.exports={retrieveSigningKeys:XO}});var Gd=K((XY,R8)=>{function Sr(t){Error.call(this,t),Error.captureStackTrace(this,this.constructor),this.name="ArgumentError",this.message=t}Sr.prototype=Object.create(Error.prototype);Sr.prototype.constructor=Sr;R8.exports=Sr});var M8=K((EY,V8)=>{var EO=require("http"),YO=require("https"),zO=Gd();V8.exports.default=(t)=>{if(t.fetcher)return t.fetcher(t.uri);return new Promise((c,u)=>{let r;try{r=new URL(t.uri)}catch(w){throw new zO("Invalid JWKS URI: The provided URI is not a valid URL.")}let{hostname:n,port:f,protocol:d,pathname:h,search:q}=r,_=h+q,W={hostname:n,path:_,port:f,method:"GET",...t.headers&&{headers:{...t.headers}},...t.timeout&&{timeout:t.timeout},...t.agent&&{agent:t.agent}},$=(d==="https:"?YO:EO).request(W,(w)=>{let P="";w.setEncoding("utf8"),w.on("data",(A)=>{P+=A}),w.on("end",()=>{if(w.statusCode<200||w.statusCode>=300){let A=w.body&&(w.body.message||w.body)||w.statusMessage||`Http Error ${w.statusCode}`;u({errorMsg:A})}else try{c(P&&JSON.parse(P))}catch(A){u(A)}})});$.on("timeout",()=>$.destroy()).on("error",(w)=>u(w)).end()})}});var T8=K((YY,N8)=>{N8.exports=function(t){t.prototype[Symbol.iterator]=function*(){for(let c=this.head;c;c=c.next)yield c.value}}});var D8=K((zY,e8)=>{e8.exports=Y;Y.Node=nt;Y.create=Y;function Y(t){var c=this;if(!(c instanceof Y))c=new Y;if(c.tail=null,c.head=null,c.length=0,t&&typeof t.forEach==="function")t.forEach(function(n){c.push(n)});else if(arguments.length>0)for(var u=0,r=arguments.length;u<r;u++)c.push(arguments[u]);return c}Y.prototype.removeNode=function(t){if(t.list!==this)throw Error("removing node which does not belong to this list");var{next:c,prev:u}=t;if(c)c.prev=u;if(u)u.next=c;if(t===this.head)this.head=c;if(t===this.tail)this.tail=u;return t.list.length--,t.next=null,t.prev=null,t.list=null,c};Y.prototype.unshiftNode=function(t){if(t===this.head)return;if(t.list)t.list.removeNode(t);var c=this.head;if(t.list=this,t.next=c,c)c.prev=t;if(this.head=t,!this.tail)this.tail=t;this.length++};Y.prototype.pushNode=function(t){if(t===this.tail)return;if(t.list)t.list.removeNode(t);var c=this.tail;if(t.list=this,t.prev=c,c)c.next=t;if(this.tail=t,!this.head)this.head=t;this.length++};Y.prototype.push=function(){for(var t=0,c=arguments.length;t<c;t++)RO(this,arguments[t]);return this.length};Y.prototype.unshift=function(){for(var t=0,c=arguments.length;t<c;t++)VO(this,arguments[t]);return this.length};Y.prototype.pop=function(){if(!this.tail)return;var t=this.tail.value;if(this.tail=this.tail.prev,this.tail)this.tail.next=null;else this.head=null;return this.length--,t};Y.prototype.shift=function(){if(!this.head)return;var t=this.head.value;if(this.head=this.head.next,this.head)this.head.prev=null;else this.tail=null;return this.length--,t};Y.prototype.forEach=function(t,c){c=c||this;for(var u=this.head,r=0;u!==null;r++)t.call(c,u.value,r,this),u=u.next};Y.prototype.forEachReverse=function(t,c){c=c||this;for(var u=this.tail,r=this.length-1;u!==null;r--)t.call(c,u.value,r,this),u=u.prev};Y.prototype.get=function(t){for(var c=0,u=this.head;u!==null&&c<t;c++)u=u.next;if(c===t&&u!==null)return u.value};Y.prototype.getReverse=function(t){for(var c=0,u=this.tail;u!==null&&c<t;c++)u=u.prev;if(c===t&&u!==null)return u.value};Y.prototype.map=function(t,c){c=c||this;var u=new Y;for(var r=this.head;r!==null;)u.push(t.call(c,r.value,this)),r=r.next;return u};Y.prototype.mapReverse=function(t,c){c=c||this;var u=new Y;for(var r=this.tail;r!==null;)u.push(t.call(c,r.value,this)),r=r.prev;return u};Y.prototype.reduce=function(t,c){var u,r=this.head;if(arguments.length>1)u=c;else if(this.head)r=this.head.next,u=this.head.value;else throw TypeError("Reduce of empty list with no initial value");for(var n=0;r!==null;n++)u=t(u,r.value,n),r=r.next;return u};Y.prototype.reduceReverse=function(t,c){var u,r=this.tail;if(arguments.length>1)u=c;else if(this.tail)r=this.tail.prev,u=this.tail.value;else throw TypeError("Reduce of empty list with no initial value");for(var n=this.length-1;r!==null;n--)u=t(u,r.value,n),r=r.prev;return u};Y.prototype.toArray=function(){var t=Array(this.length);for(var c=0,u=this.head;u!==null;c++)t[c]=u.value,u=u.next;return t};Y.prototype.toArrayReverse=function(){var t=Array(this.length);for(var c=0,u=this.tail;u!==null;c++)t[c]=u.value,u=u.prev;return t};Y.prototype.slice=function(t,c){if(c=c||this.length,c<0)c+=this.length;if(t=t||0,t<0)t+=this.length;var u=new Y;if(c<t||c<0)return u;if(t<0)t=0;if(c>this.length)c=this.length;for(var r=0,n=this.head;n!==null&&r<t;r++)n=n.next;for(;n!==null&&r<c;r++,n=n.next)u.push(n.value);return u};Y.prototype.sliceReverse=function(t,c){if(c=c||this.length,c<0)c+=this.length;if(t=t||0,t<0)t+=this.length;var u=new Y;if(c<t||c<0)return u;if(t<0)t=0;if(c>this.length)c=this.length;for(var r=this.length,n=this.tail;n!==null&&r>c;r--)n=n.prev;for(;n!==null&&r>t;r--,n=n.prev)u.push(n.value);return u};Y.prototype.splice=function(t,c,...u){if(t>this.length)t=this.length-1;if(t<0)t=this.length+t;for(var r=0,n=this.head;n!==null&&r<t;r++)n=n.next;var f=[];for(var r=0;n&&r<c;r++)f.push(n.value),n=this.removeNode(n);if(n===null)n=this.tail;if(n!==this.head&&n!==this.tail)n=n.prev;for(var r=0;r<u.length;r++)n=iO(this,n,u[r]);return f};Y.prototype.reverse=function(){var t=this.head,c=this.tail;for(var u=t;u!==null;u=u.prev){var r=u.prev;u.prev=u.next,u.next=r}return this.head=c,this.tail=t,this};function iO(t,c,u){var r=c===t.head?new nt(u,null,c,t):new nt(u,c,c.next,t);if(r.next===null)t.tail=r;if(r.prev===null)t.head=r;return t.length++,r}function RO(t,c){if(t.tail=new nt(c,t.tail,null,t),!t.head)t.head=t.tail;t.length++}function VO(t,c){if(t.head=new nt(c,null,t.head,t),!t.tail)t.tail=t.head;t.length++}function nt(t,c,u,r){if(!(this instanceof nt))return new nt(t,c,u,r);if(this.list=r,this.value=t,c)c.next=this,this.prev=c;else this.prev=null;if(u)u.prev=this,this.next=u;else this.next=null}try{T8()(Y)}catch(t){}});var Xd=K((iY,L8)=>{var MO=D8(),ft=Symbol("max"),V1=Symbol("length"),pt=Symbol("lengthCalculator"),Yc=Symbol("allowStale"),dt=Symbol("maxAge"),R1=Symbol("dispose"),b8=Symbol("noDisposeOnSet"),v=Symbol("lruList"),H1=Symbol("cache"),p8=Symbol("updateAgeOnGet"),Id=()=>1;class v8{constructor(t){if(typeof t==="number")t={max:t};if(!t)t={};if(t.max&&(typeof t.max!=="number"||t.max<0))throw TypeError("max must be a non-negative number");let c=this[ft]=t.max||1/0,u=t.length||Id;if(this[pt]=typeof u!=="function"?Id:u,this[Yc]=t.stale||!1,t.maxAge&&typeof t.maxAge!=="number")throw TypeError("maxAge must be a number");this[dt]=t.maxAge||0,this[R1]=t.dispose,this[b8]=t.noDisposeOnSet||!1,this[p8]=t.updateAgeOnGet||!1,this.reset()}set max(t){if(typeof t!=="number"||t<0)throw TypeError("max must be a non-negative number");this[ft]=t||1/0,Ec(this)}get max(){return this[ft]}set allowStale(t){this[Yc]=!!t}get allowStale(){return this[Yc]}set maxAge(t){if(typeof t!=="number")throw TypeError("maxAge must be a non-negative number");this[dt]=t,Ec(this)}get maxAge(){return this[dt]}set lengthCalculator(t){if(typeof t!=="function")t=Id;if(t!==this[pt])this[pt]=t,this[V1]=0,this[v].forEach((c)=>{c.length=this[pt](c.value,c.key),this[V1]+=c.length});Ec(this)}get lengthCalculator(){return this[pt]}get length(){return this[V1]}get itemCount(){return this[v].length}rforEach(t,c){c=c||this;for(let u=this[v].tail;u!==null;){let r=u.prev;j8(this,t,u,c),u=r}}forEach(t,c){c=c||this;for(let u=this[v].head;u!==null;){let r=u.next;j8(this,t,u,c),u=r}}keys(){return this[v].toArray().map((t)=>t.key)}values(){return this[v].toArray().map((t)=>t.value)}reset(){if(this[R1]&&this[v]&&this[v].length)this[v].forEach((t)=>this[R1](t.key,t.value));this[H1]=new Map,this[v]=new MO,this[V1]=0}dump(){return this[v].map((t)=>Hr(this,t)?!1:{k:t.key,v:t.value,e:t.now+(t.maxAge||0)}).toArray().filter((t)=>t)}dumpLru(){return this[v]}set(t,c,u){if(u=u||this[dt],u&&typeof u!=="number")throw TypeError("maxAge must be a number");let r=u?Date.now():0,n=this[pt](c,t);if(this[H1].has(t)){if(n>this[ft])return vt(this,this[H1].get(t)),!1;let h=this[H1].get(t).value;if(this[R1]){if(!this[b8])this[R1](t,h.value)}return h.now=r,h.maxAge=u,h.value=c,this[V1]+=n-h.length,h.length=n,this.get(t),Ec(this),!0}let f=new x8(t,c,n,r,u);if(f.length>this[ft]){if(this[R1])this[R1](t,c);return!1}return this[V1]+=f.length,this[v].unshift(f),this[H1].set(t,this[v].head),Ec(this),!0}has(t){if(!this[H1].has(t))return!1;let c=this[H1].get(t).value;return!Hr(this,c)}get(t){return Zd(this,t,!0)}peek(t){return Zd(this,t,!1)}pop(){let t=this[v].tail;if(!t)return null;return vt(this,t),t.value}del(t){vt(this,this[H1].get(t))}load(t){this.reset();let c=Date.now();for(let u=t.length-1;u>=0;u--){let r=t[u],n=r.e||0;if(n===0)this.set(r.k,r.v);else{let f=n-c;if(f>0)this.set(r.k,r.v,f)}}}prune(){this[H1].forEach((t,c)=>Zd(this,c,!1))}}var Zd=(t,c,u)=>{let r=t[H1].get(c);if(r){let n=r.value;if(Hr(t,n)){if(vt(t,r),!t[Yc])return}else if(u){if(t[p8])r.value.now=Date.now();t[v].unshiftNode(r)}return n.value}},Hr=(t,c)=>{if(!c||!c.maxAge&&!t[dt])return!1;let u=Date.now()-c.now;return c.maxAge?u>c.maxAge:t[dt]&&u>t[dt]},Ec=(t)=>{if(t[V1]>t[ft])for(let c=t[v].tail;t[V1]>t[ft]&&c!==null;){let u=c.prev;vt(t,c),c=u}},vt=(t,c)=>{if(c){let u=c.value;if(t[R1])t[R1](u.key,u.value);t[V1]-=u.length,t[H1].delete(u.key),t[v].removeNode(c)}};class x8{constructor(t,c,u,r,n){this.key=t,this.value=c,this.length=u,this.now=r,this.maxAge=n||0}}var j8=(t,c,u,r)=>{let n=u.value;if(Hr(t,n)){if(vt(t,u),!t[Yc])n=void 0}if(n)c.call(r,n.value,n.key,t)};L8.exports=v8});var vd=K((zc,xt)=>{var NO=200,tK="__lodash_hash_undefined__",cK=9007199254740991,Nd="[object Arguments]",TO="[object Array]",uK="[object Boolean]",rK="[object Date]",eO="[object Error]",Td="[object Function]",nK="[object GeneratorFunction]",Cr="[object Map]",fK="[object Number]",ed="[object Object]",s8="[object Promise]",dK="[object RegExp]",Or="[object Set]",hK="[object String]",qK="[object Symbol]",Yd="[object WeakMap]",_K="[object ArrayBuffer]",Gr="[object DataView]",KK="[object Float32Array]",WK="[object Float64Array]",JK="[object Int8Array]",wK="[object Int16Array]",$K="[object Int32Array]",PK="[object Uint8Array]",AK="[object Uint8ClampedArray]",yK="[object Uint16Array]",SK="[object Uint32Array]",DO=/[\\^$.*+?()[\]{}|]/g,bO=/\w*$/,jO=/^\[object .+?Constructor\]$/,pO=/^(?:0|[1-9]\d*)$/,R={};R[Nd]=R[TO]=R[_K]=R[Gr]=R[uK]=R[rK]=R[KK]=R[WK]=R[JK]=R[wK]=R[$K]=R[Cr]=R[fK]=R[ed]=R[dK]=R[Or]=R[hK]=R[qK]=R[PK]=R[AK]=R[yK]=R[SK]=!0;R[eO]=R[Td]=R[Yd]=!1;var vO=typeof global=="object"&&global&&global.Object===Object&&global,xO=typeof self=="object"&&self&&self.Object===Object&&self,M1=vO||xO||Function("return this")(),HK=typeof zc=="object"&&zc&&!zc.nodeType&&zc,m8=HK&&typeof xt=="object"&&xt&&!xt.nodeType&&xt,LO=m8&&m8.exports===HK;function sO(t,c){return t.set(c[0],c[1]),t}function mO(t,c){return t.add(c),t}function gO(t,c){var u=-1,r=t?t.length:0;while(++u<r)if(c(t[u],u,t)===!1)break;return t}function BO(t,c){var u=-1,r=c.length,n=t.length;while(++u<r)t[n+u]=c[u];return t}function CK(t,c,u,r){var n=-1,f=t?t.length:0;if(r&&f)u=t[++n];while(++n<f)u=c(u,t[n],n,t);return u}function FO(t,c){var u=-1,r=Array(t);while(++u<t)r[u]=c(u);return r}function kO(t,c){return t==null?void 0:t[c]}function OK(t){var c=!1;if(t!=null&&typeof t.toString!="function")try{c=!!(t+"")}catch(u){}return c}function g8(t){var c=-1,u=Array(t.size);return t.forEach(function(r,n){u[++c]=[n,r]}),u}function Dd(t,c){return function(u){return t(c(u))}}function B8(t){var c=-1,u=Array(t.size);return t.forEach(function(r){u[++c]=r}),u}var oO=Array.prototype,UO=Function.prototype,Ir=Object.prototype,Ed=M1["__core-js_shared__"],F8=function(){var t=/[^.]+$/.exec(Ed&&Ed.keys&&Ed.keys.IE_PROTO||"");return t?"Symbol(src)_1."+t:""}(),GK=UO.toString,k1=Ir.hasOwnProperty,Zr=Ir.toString,lO=RegExp("^"+GK.call(k1).replace(DO,"\\$&").replace(/hasOwnProperty|(function).*?(?=\\\()| for .+?(?=\\\])/g,"$1.*?")+"$"),k8=LO?M1.Buffer:void 0,o8=M1.Symbol,U8=M1.Uint8Array,QO=Dd(Object.getPrototypeOf,Object),aO=Object.create,tG=Ir.propertyIsEnumerable,cG=oO.splice,l8=Object.getOwnPropertySymbols,uG=k8?k8.isBuffer:void 0,rG=Dd(Object.keys,Object),zd=mt(M1,"DataView"),ic=mt(M1,"Map"),id=mt(M1,"Promise"),Rd=mt(M1,"Set"),Vd=mt(M1,"WeakMap"),Rc=mt(Object,"create"),nG=_t(zd),fG=_t(ic),dG=_t(id),hG=_t(Rd),qG=_t(Vd),Q8=o8?o8.prototype:void 0,a8=Q8?Q8.valueOf:void 0;function qt(t){var c=-1,u=t?t.length:0;this.clear();while(++c<u){var r=t[c];this.set(r[0],r[1])}}function _G(){this.__data__=Rc?Rc(null):{}}function KG(t){return this.has(t)&&delete this.__data__[t]}function WG(t){var c=this.__data__;if(Rc){var u=c[t];return u===tK?void 0:u}return k1.call(c,t)?c[t]:void 0}function JG(t){var c=this.__data__;return Rc?c[t]!==void 0:k1.call(c,t)}function wG(t,c){var u=this.__data__;return u[t]=Rc&&c===void 0?tK:c,this}qt.prototype.clear=_G;qt.prototype.delete=KG;qt.prototype.get=WG;qt.prototype.has=JG;qt.prototype.set=wG;function N1(t){var c=-1,u=t?t.length:0;this.clear();while(++c<u){var r=t[c];this.set(r[0],r[1])}}function $G(){this.__data__=[]}function PG(t){var c=this.__data__,u=Xr(c,t);if(u<0)return!1;var r=c.length-1;if(u==r)c.pop();else cG.call(c,u,1);return!0}function AG(t){var c=this.__data__,u=Xr(c,t);return u<0?void 0:c[u][1]}function yG(t){return Xr(this.__data__,t)>-1}function SG(t,c){var u=this.__data__,r=Xr(u,t);if(r<0)u.push([t,c]);else u[r][1]=c;return this}N1.prototype.clear=$G;N1.prototype.delete=PG;N1.prototype.get=AG;N1.prototype.has=yG;N1.prototype.set=SG;function Lt(t){var c=-1,u=t?t.length:0;this.clear();while(++c<u){var r=t[c];this.set(r[0],r[1])}}function HG(){this.__data__={hash:new qt,map:new(ic||N1),string:new qt}}function CG(t){return Er(this,t).delete(t)}function OG(t){return Er(this,t).get(t)}function GG(t){return Er(this,t).has(t)}function IG(t,c){return Er(this,t).set(t,c),this}Lt.prototype.clear=HG;Lt.prototype.delete=CG;Lt.prototype.get=OG;Lt.prototype.has=GG;Lt.prototype.set=IG;function st(t){this.__data__=new N1(t)}function ZG(){this.__data__=new N1}function XG(t){return this.__data__.delete(t)}function EG(t){return this.__data__.get(t)}function YG(t){return this.__data__.has(t)}function zG(t,c){var u=this.__data__;if(u instanceof N1){var r=u.__data__;if(!ic||r.length<NO-1)return r.push([t,c]),this;u=this.__data__=new Lt(r)}return u.set(t,c),this}st.prototype.clear=ZG;st.prototype.delete=XG;st.prototype.get=EG;st.prototype.has=YG;st.prototype.set=zG;function iG(t,c){var u=jd(t)||aG(t)?FO(t.length,String):[],r=u.length,n=!!r;for(var f in t)if((c||k1.call(t,f))&&!(n&&(f=="length"||oG(f,r))))u.push(f);return u}function IK(t,c,u){var r=t[c];if(!(k1.call(t,c)&&YK(r,u))||u===void 0&&!(c in t))t[c]=u}function Xr(t,c){var u=t.length;while(u--)if(YK(t[u][0],c))return u;return-1}function RG(t,c){return t&&ZK(c,pd(c),t)}function Md(t,c,u,r,n,f,d){var h;if(r)h=f?r(t,n,f,d):r(t);if(h!==void 0)return h;if(!Yr(t))return t;var q=jd(t);if(q){if(h=BG(t),!c)return sG(t,h)}else{var _=ht(t),W=_==Td||_==nK;if(cI(t))return DG(t,c);if(_==ed||_==Nd||W&&!f){if(OK(t))return f?t:{};if(h=FG(W?{}:t),!c)return mG(t,RG(h,t))}else{if(!R[_])return f?t:{};h=kG(t,_,Md,c)}}d||(d=new st);var J=d.get(t);if(J)return J;if(d.set(t,h),!q)var $=u?gG(t):pd(t);return gO($||t,function(w,P){if($)P=w,w=t[P];IK(h,P,Md(w,c,u,r,P,t,d))}),h}function VG(t){return Yr(t)?aO(t):{}}function MG(t,c,u){var r=c(t);return jd(t)?r:BO(r,u(t))}function NG(t){return Zr.call(t)}function TG(t){if(!Yr(t)||lG(t))return!1;var c=iK(t)||OK(t)?lO:jO;return c.test(_t(t))}function eG(t){if(!EK(t))return rG(t);var c=[];for(var u in Object(t))if(k1.call(t,u)&&u!="constructor")c.push(u);return c}function DG(t,c){if(c)return t.slice();var u=new t.constructor(t.length);return t.copy(u),u}function bd(t){var c=new t.constructor(t.byteLength);return new U8(c).set(new U8(t)),c}function bG(t,c){var u=c?bd(t.buffer):t.buffer;return new t.constructor(u,t.byteOffset,t.byteLength)}function jG(t,c,u){var r=c?u(g8(t),!0):g8(t);return CK(r,sO,new t.constructor)}function pG(t){var c=new t.constructor(t.source,bO.exec(t));return c.lastIndex=t.lastIndex,c}function vG(t,c,u){var r=c?u(B8(t),!0):B8(t);return CK(r,mO,new t.constructor)}function xG(t){return a8?Object(a8.call(t)):{}}function LG(t,c){var u=c?bd(t.buffer):t.buffer;return new t.constructor(u,t.byteOffset,t.length)}function sG(t,c){var u=-1,r=t.length;c||(c=Array(r));while(++u<r)c[u]=t[u];return c}function ZK(t,c,u,r){u||(u={});var n=-1,f=c.length;while(++n<f){var d=c[n],h=r?r(u[d],t[d],d,u,t):void 0;IK(u,d,h===void 0?t[d]:h)}return u}function mG(t,c){return ZK(t,XK(t),c)}function gG(t){return MG(t,pd,XK)}function Er(t,c){var u=t.__data__;return UG(c)?u[typeof c=="string"?"string":"hash"]:u.map}function mt(t,c){var u=kO(t,c);return TG(u)?u:void 0}var XK=l8?Dd(l8,Object):nI,ht=NG;if(zd&&ht(new zd(new ArrayBuffer(1)))!=Gr||ic&&ht(new ic)!=Cr||id&&ht(id.resolve())!=s8||Rd&&ht(new Rd)!=Or||Vd&&ht(new Vd)!=Yd)ht=function(t){var c=Zr.call(t),u=c==ed?t.constructor:void 0,r=u?_t(u):void 0;if(r)switch(r){case nG:return Gr;case fG:return Cr;case dG:return s8;case hG:return Or;case qG:return Yd}return c};function BG(t){var c=t.length,u=t.constructor(c);if(c&&typeof t[0]=="string"&&k1.call(t,"index"))u.index=t.index,u.input=t.input;return u}function FG(t){return typeof t.constructor=="function"&&!EK(t)?VG(QO(t)):{}}function kG(t,c,u,r){var n=t.constructor;switch(c){case _K:return bd(t);case uK:case rK:return new n(+t);case Gr:return bG(t,r);case KK:case WK:case JK:case wK:case $K:case PK:case AK:case yK:case SK:return LG(t,r);case Cr:return jG(t,r,u);case fK:case hK:return new n(t);case dK:return pG(t);case Or:return vG(t,r,u);case qK:return xG(t)}}function oG(t,c){return c=c==null?cK:c,!!c&&(typeof t=="number"||pO.test(t))&&(t>-1&&t%1==0&&t<c)}function UG(t){var c=typeof t;return c=="string"||c=="number"||c=="symbol"||c=="boolean"?t!=="__proto__":t===null}function lG(t){return!!F8&&F8 in t}function EK(t){var c=t&&t.constructor,u=typeof c=="function"&&c.prototype||Ir;return t===u}function _t(t){if(t!=null){try{return GK.call(t)}catch(c){}try{return t+""}catch(c){}}return""}function QG(t){return Md(t,!0,!0)}function YK(t,c){return t===c||t!==t&&c!==c}function aG(t){return tI(t)&&k1.call(t,"callee")&&(!tG.call(t,"callee")||Zr.call(t)==Nd)}var jd=Array.isArray;function zK(t){return t!=null&&uI(t.length)&&!iK(t)}function tI(t){return rI(t)&&zK(t)}var cI=uG||fI;function iK(t){var c=Yr(t)?Zr.call(t):"";return c==Td||c==nK}function uI(t){return typeof t=="number"&&t>-1&&t%1==0&&t<=cK}function Yr(t){var c=typeof t;return!!t&&(c=="object"||c=="function")}function rI(t){return!!t&&typeof t=="object"}function pd(t){return zK(t)?iG(t):eG(t)}function nI(){return[]}function fI(){return!1}xt.exports=QG});var xd=K((zr)=>{Object.defineProperty(zr,"__esModule",{value:!0});zr.deepFreeze=void 0;function RK(t){if(t)Object.freeze(t),Object.getOwnPropertyNames(t).forEach(function(c){if(t.hasOwnProperty(c)&&t[c]!==null&&(typeof t[c]==="object"||typeof t[c]==="function")&&t[c].constructor!==Buffer&&!Object.isFrozen(t[c]))RK(t[c])});return t}zr.deepFreeze=RK});var TK=K((z1)=>{var dI=z1&&z1.__read||function(t,c){var u=typeof Symbol==="function"&&t[Symbol.iterator];if(!u)return t;var r=u.call(t),n,f=[],d;try{while((c===void 0||c-- >0)&&!(n=r.next()).done)f.push(n.value)}catch(h){d={error:h}}finally{try{if(n&&!n.done&&(u=r.return))u.call(r)}finally{if(d)throw d.error}}return f},Y1=z1&&z1.__spread||function(){for(var t=[],c=0;c<arguments.length;c++)t=t.concat(dI(arguments[c]));return t},NK=z1&&z1.__importDefault||function(t){return t&&t.__esModule?t:{default:t}};Object.defineProperty(z1,"__esModule",{value:!0});z1.syncMemoizer=void 0;var hI=NK(Xd()),qI=require("events"),VK=NK(vd()),MK=xd();function _I(t){var c=new hI.default(t),u=t.load,r=t.hash,n=t.bypass,f=t.itemMaxAge,d=t.freeze,h=t.clone,q=new qI.EventEmitter,_=Object.assign({del:W,reset:function(){return c.reset()},keys:c.keys.bind(c),on:q.on.bind(q),once:q.once.bind(q)},t);if(t.disable)return Object.assign(u,_);function W(){var A=r.apply(void 0,Y1(arguments));c.del(A)}function J(A){var G=[];for(var Z=1;Z<arguments.length;Z++)G[Z-1]=arguments[Z];q.emit.apply(q,Y1([A],G))}function $(A){return A&&A.then&&typeof A.then==="function"}function w(A){var G=A;if(h)if($(G))G=G.then(VK.default);else G=VK.default(G);if(d)if($(G))G=G.then(MK.deepFreeze);else MK.deepFreeze(G);return G}var P=function(){var A=[];for(var G=0;G<arguments.length;G++)A[G]=arguments[G];if(n&&n.apply(void 0,Y1(A)))return J.apply(void 0,Y1(["miss"],A)),u.apply(void 0,Y1(A));var Z=r.apply(void 0,Y1(A)),E=c.get(Z);if(E)return J.apply(void 0,Y1(["hit"],A)),w(E);J.apply(void 0,Y1(["miss"],A));var O=u.apply(void 0,Y1(A));if(f)c.set(Z,O,f.apply(void 0,Y1(A.concat([O]))));else c.set(Z,O);return w(O)};return Object.assign(P,_)}z1.syncMemoizer=_I});var bK=K((W1)=>{var KI=W1&&W1.__read||function(t,c){var u=typeof Symbol==="function"&&t[Symbol.iterator];if(!u)return t;var r=u.call(t),n,f=[],d;try{while((c===void 0||c-- >0)&&!(n=r.next()).done)f.push(n.value)}catch(h){d={error:h}}finally{try{if(n&&!n.done&&(u=r.return))u.call(r)}finally{if(d)throw d.error}}return f},Q=W1&&W1.__spread||function(){for(var t=[],c=0;c<arguments.length;c++)t=t.concat(KI(arguments[c]));return t},WI=W1&&W1.__values||function(t){var c=typeof Symbol==="function"&&Symbol.iterator,u=c&&t[c],r=0;if(u)return u.call(t);if(t&&typeof t.length==="number")return{next:function(){if(t&&r>=t.length)t=void 0;return{value:t&&t[r++],done:!t}}};throw TypeError(c?"Object is not iterable.":"Symbol.iterator is not defined.")},eK=W1&&W1.__importDefault||function(t){return t&&t.__esModule?t:{default:t}};Object.defineProperty(W1,"__esModule",{value:!0});W1.asyncMemoizer=void 0;var JI=eK(Xd()),wI=require("events"),$I=eK(vd()),PI=xd(),AI=TK();function DK(t){var c=new JI.default(t),u=t.load,r=t.hash,n=t.bypass,f=t.itemMaxAge,d=t.freeze,h=t.clone,q=t.queueMaxAge||1000,_=new Map,W=new wI.EventEmitter,J=Object.assign({del:$,reset:function(){return c.reset()},keys:c.keys.bind(c),on:W.on.bind(W),once:W.once.bind(W)},t);if(t.disable)return Object.assign(u,J);function $(){var Z=[];for(var E=0;E<arguments.length;E++)Z[E]=arguments[E];var O=r.apply(void 0,Q(Z));c.del(O)}function w(Z,E,O){if(d)O.forEach(PI.deepFreeze);if(f)c.set(Z,O,f.apply(void 0,Q(E.concat(O))));else c.set(Z,O)}function P(Z,E){var O,D;try{for(var a=WI(Z),c1=a.next();!c1.done;c1=a.next()){var T1=c1.value;if(h)setImmediate.apply(void 0,Q([T1],E.map($I.default)));else setImmediate.apply(void 0,Q([T1],E))}}catch(o1){O={error:o1}}finally{try{if(c1&&!c1.done&&(D=a.return))D.call(a)}finally{if(O)throw O.error}}}function A(Z){var E=[];for(var O=1;O<arguments.length;O++)E[O-1]=arguments[O];W.emit.apply(W,Q([Z],E))}function G(){var Z=[];for(var E=0;E<arguments.length;E++)Z[E]=arguments[E];var O=Z.slice(0,-1),D=Z.slice(-1).pop(),a;if(n&&n.apply(void 0,Q(O)))return A.apply(void 0,Q(["miss"],O)),u.apply(void 0,Q(Z));if(O.length===0&&!r)a="_";else a=r.apply(void 0,Q(O));var c1=c.get(a);if(c1)return A.apply(void 0,Q(["hit"],O)),P([D],[null].concat(c1));var T1=_.get(a);if(T1&&T1.expiresAt>Date.now()){T1.queue.push(D),A.apply(void 0,Q(["queue"],O));return}A.apply(void 0,Q(["miss"],O));var o1=Date.now(),Mc=[D];_.set(a,{queue:Mc,expiresAt:o1+q});var iW=function(){var Nc=[];for(var Tc=0;Tc<arguments.length;Tc++)Nc[Tc]=arguments[Tc];var RW=Nc[0];if(!RW)w(a,O,Nc.slice(1));_.delete(a),A.apply(void 0,Q(["loaded",Date.now()-o1],O)),P(Mc,Nc)};u.apply(void 0,Q(O,[iW]))}return Object.assign(G,J)}W1.asyncMemoizer=DK;DK.sync=AI.syncMemoizer});var pK=K((NY,jK)=>{var yI=bK();jK.exports=yI.asyncMemoizer});var xK=K((TY,vK)=>{var SI=yu()("jwks"),HI=pK(),{promisify:CI,callbackify:OI}=require("util");function GI(t,{cacheMaxEntries:c=5,cacheMaxAge:u=600000}){return SI(`Configured caching of signing keys. Max: ${c} / Age: ${u}`),CI(HI({hash:(r)=>r,load:OI(t.getSigningKey.bind(t)),maxAge:u,max:c}))}vK.exports.default=GI});var Ld=K((eY,sK)=>{var LK=function(t,c,u,r){if(this.bucketSize=t,this.tokensPerInterval=c,typeof u==="string")switch(u){case"sec":case"second":this.interval=1000;break;case"min":case"minute":this.interval=60000;break;case"hr":case"hour":this.interval=3600000;break;case"day":this.interval=86400000;break;default:throw Error("Invaid interval "+u)}else this.interval=u;this.parentBucket=r,this.content=0,this.lastDrip=+new Date};LK.prototype={bucketSize:1,tokensPerInterval:1,interval:1000,parentBucket:null,content:0,lastDrip:0,removeTokens:function(t,c){var u=this;if(!this.bucketSize)return process.nextTick(c.bind(null,null,t,Number.POSITIVE_INFINITY)),!0;if(t>this.bucketSize)return process.nextTick(c.bind(null,"Requested tokens "+t+" exceeds bucket size "+this.bucketSize,null)),!1;if(this.drip(),t>this.content)return r();if(this.parentBucket)return this.parentBucket.removeTokens(t,function(n,f){if(n)return c(n,null);if(t>u.content)return r();u.content-=t,c(null,Math.min(f,u.content))});else return this.content-=t,process.nextTick(c.bind(null,null,this.content)),!0;function r(){var n=Math.ceil((t-u.content)*(u.interval/u.tokensPerInterval));return setTimeout(function(){u.removeTokens(t,c)},n),!1}},tryRemoveTokens:function(t){if(!this.bucketSize)return!0;if(t>this.bucketSize)return!1;if(this.drip(),t>this.content)return!1;if(this.parentBucket&&!this.parentBucket.tryRemoveTokens(t))return!1;return this.content-=t,!0},drip:function(){if(!this.tokensPerInterval){this.content=this.bucketSize;return}var t=+new Date,c=Math.max(t-this.lastDrip,0);this.lastDrip=t;var u=c*(this.tokensPerInterval/this.interval);this.content=Math.min(this.content+u,this.bucketSize)}};sK.exports=LK});var gK=K((DY,mK)=>{var II=function(){if(typeof process<"u"&&process.hrtime){var t=process.hrtime(),c=t[0],u=t[1];return c*1000+Math.floor(u/1e6)}return new Date().getTime()};mK.exports=II});var kK=K((bY,FK)=>{var ZI=Ld(),sd=gK(),BK=function(t,c,u){this.tokenBucket=new ZI(t,t,c,null),this.tokenBucket.content=t,this.curIntervalStart=sd(),this.tokensThisInterval=0,this.fireImmediately=u};BK.prototype={tokenBucket:null,curIntervalStart:0,tokensThisInterval:0,fireImmediately:!1,removeTokens:function(t,c){if(t>this.tokenBucket.bucketSize)return process.nextTick(c.bind(null,"Requested tokens "+t+" exceeds maximum tokens per interval "+this.tokenBucket.bucketSize,null)),!1;var u=this,r=sd();if(r<this.curIntervalStart||r-this.curIntervalStart>=this.tokenBucket.interval)this.curIntervalStart=r,this.tokensThisInterval=0;if(t>this.tokenBucket.tokensPerInterval-this.tokensThisInterval){if(this.fireImmediately)process.nextTick(c.bind(null,null,-1));else{var n=Math.ceil(this.curIntervalStart+this.tokenBucket.interval-r);setTimeout(function(){u.tokenBucket.removeTokens(t,f)},n)}return!1}return this.tokenBucket.removeTokens(t,f);function f(d,h){if(d)return c(d,null);u.tokensThisInterval+=t,c(null,h)}},tryRemoveTokens:function(t){if(t>this.tokenBucket.bucketSize)return!1;var c=sd();if(c<this.curIntervalStart||c-this.curIntervalStart>=this.tokenBucket.interval)this.curIntervalStart=c,this.tokensThisInterval=0;if(t>this.tokenBucket.tokensPerInterval-this.tokensThisInterval)return!1;var u=this.tokenBucket.tryRemoveTokens(t);if(u)this.tokensThisInterval+=t;return u},getTokensRemaining:function(){return this.tokenBucket.drip(),this.tokenBucket.content}};FK.exports=BK});var oK=K((md)=>{md.RateLimiter=kK();md.TokenBucket=Ld()});var gd=K((pY,UK)=>{function ir(t){Error.call(this,t),Error.captureStackTrace(this,this.constructor),this.name="JwksRateLimitError",this.message=t}ir.prototype=Object.create(Error.prototype);ir.prototype.constructor=ir;UK.exports=ir});var QK=K((vY,lK)=>{var Bd=yu()("jwks"),{RateLimiter:XI}=oK(),EI=gd();function YI(t,{jwksRequestsPerMinute:c=10}){let u=t.getSigningKey.bind(t),r=new XI(c,"minute",!0);return Bd(`Configured rate limiting to JWKS endpoint at ${c}/minute`),async(n)=>await new Promise((f,d)=>{r.removeTokens(1,async(h,q)=>{if(h)d(h);if(Bd("Requests to the JWKS endpoint available for the next minute:",q),q<0)Bd("Too many requests to the JWKS endpoint"),d(new EI("Too many requests to the JWKS endpoint"));else try{let _=await u(n);f(_)}catch(_){d(_)}})})}lK.exports.default=YI});var tW=K((xY,aK)=>{var zI=Od().retrieveSigningKeys;function iI(t,{getKeysInterceptor:c}){let u=t.getSigningKey.bind(t);return async(r)=>{let n=await c(),f;if(n&&n.length)f=await zI(n);if(f&&f.length){let d=f.find((h)=>!r||h.kid===r);if(d)return d}return u(r)}}aK.exports.default=iI});var uW=K((LY,cW)=>{var{callbackify:RI}=require("util"),VI=(t)=>{let c=t.getSigningKey.bind(t);return(u,r)=>{if(r)return RI(c)(u,r);return c(u)}};cW.exports.default=VI});var nW=K((sY,rW)=>{rW.exports={request:M8().default,cacheSigningKey:xK().default,rateLimitSigningKey:QK().default,getKeysInterceptor:tW().default,callbackSupport:uW().default}});var Fd=K((mY,fW)=>{function Rr(t){Error.call(this,t),Error.captureStackTrace(this,this.constructor),this.name="SigningKeyNotFoundError",this.message=t}Rr.prototype=Object.create(Error.prototype);Rr.prototype.constructor=Rr;fW.exports=Rr});var gt=K((gY,qW)=>{var Kt=yu()("jwks"),{retrieveSigningKeys:MI}=Od(),{request:NI,cacheSigningKey:TI,rateLimitSigningKey:eI,getKeysInterceptor:DI,callbackSupport:bI}=nW(),kd=yr(),dW=Fd();class hW{constructor(t){if(this.options={rateLimit:!1,cache:!0,timeout:30000,...t},this.options.getKeysInterceptor)this.getSigningKey=DI(this,t);if(this.options.rateLimit)this.getSigningKey=eI(this,t);if(this.options.cache)this.getSigningKey=TI(this,t);this.getSigningKey=bI(this,t)}async getKeys(){Kt(`Fetching keys from '${this.options.jwksUri}'`);try{let t=await NI({uri:this.options.jwksUri,headers:this.options.requestHeaders,agent:this.options.requestAgent,timeout:this.options.timeout,fetcher:this.options.fetcher});return Kt("Keys:",t.keys),t.keys}catch(t){let{errorMsg:c}=t;throw Kt("Failure:",c||t),c?new kd(c):t}}async getSigningKeys(){let t=await this.getKeys();if(!t||!t.length)throw new kd("The JWKS endpoint did not contain any keys");let c=await MI(t);if(!c.length)throw new kd("The JWKS endpoint did not contain any signing keys");return Kt("Signing Keys:",c),c}async getSigningKey(t){Kt(`Fetching signing key for '${t}'`);let c=await this.getSigningKeys(),u=t!==void 0&&t!==null;if(!u&&c.length>1)throw Kt("No KID specified and JWKS endpoint returned more than 1 key"),new dW("No KID specified and JWKS endpoint returned more than 1 key");let r=c.find((n)=>!u||n.kid===t);if(r)return r;else throw Kt(`Unable to find a signing key that matches '${t}'`),new dW(`Unable to find a signing key that matches '${t}'`)}}qW.exports={JwksClient:hW}});var Bt=K((BY,_W)=>{_W.exports={ArgumentError:Gd(),JwksError:yr(),JwksRateLimitError:gd(),SigningKeyNotFoundError:Fd()}});var Vc=K((FY,KW)=>{var jI=["RS256","RS384","RS512","PS256","PS384","PS512","ES256","ES256K","ES384","ES512","EdDSA"];KW.exports=jI});var WW=K((kY,Vr)=>{var{ArgumentError:pI}=Bt(),{JwksClient:vI}=gt(),xI=Vc(),LI=(t,c)=>{if(t&&t.name==="SigningKeyNotFoundError")return c(t,null,null);if(t)return c(t,null,null)};Vr.exports.hapiJwt2KeyAsync=(t)=>{let c=Vr.exports.hapiJwt2Key(t);return function(u){return new Promise((r,n)=>{c(u,(d,h)=>{!h||d?n(d):r({key:h})})})}};Vr.exports.hapiJwt2Key=function(t){if(t===null||t===void 0)throw new pI("An options object must be provided when initializing hapiJwt2Key");let c=new vI(t),u=t.handleSigningKeyError||LI;return function(n,f){if(!n||!n.header)return f(Error("Cannot find a signing certificate if there is no header"),null,null);if(!xI.includes(n.header.alg))return f(Error("Unsupported algorithm "+n.header.alg+" supplied."),null,null);c.getSigningKey(n.header.kid).then((d)=>{return f(null,d.publicKey||d.rsaPublicKey,d)}).catch((d)=>{return u(d,(h)=>f(h,null,null))})}}});var wW=K((oY,JW)=>{var{ArgumentError:sI}=Bt(),{JwksClient:mI}=gt(),gI=Vc(),BI=(t,c)=>{if(t&&t.name==="SigningKeyNotFoundError")return c(null);if(t)return c(t)};JW.exports.expressJwtSecret=function(t){if(t===null||t===void 0)throw new sI("An options object must be provided when initializing expressJwtSecret");let c=new mI(t),u=t.handleSigningKeyError||BI,r=async(n,f)=>{if(!f)return;let d=f.header;if(!d||!gI.includes(d.alg))return;try{let h=await c.getSigningKey(d.kid);return h.publicKey||h.rsaPublicKey}catch(h){return new Promise((q,_)=>{u(h,(W)=>{if(!W)return q();_(W)})})}};return function(f,d,h,q){if(arguments.length===4){r(f,{header:d}).then((_)=>{setImmediate(q,null,_)}).catch((_)=>{setImmediate(q,_)});return}return r(f,arguments[1])}}});var PW=K((UY,$W)=>{var{ArgumentError:FI}=Bt(),{JwksClient:kI}=gt(),oI=Vc();$W.exports.koaJwtSecret=function(t={}){if(!t.jwksUri)throw new FI("No JWKS provided. Please provide a jwksUri");let c=new kI(t);return function({alg:r,kid:n}={}){return new Promise((f,d)=>{if(!oI.includes(r))return d(Error("Missing / invalid token algorithm"));c.getSigningKey(n).then((h)=>{f(h.publicKey||h.rsaPublicKey)}).catch((h)=>{if(t.handleSigningKeyError)return t.handleSigningKeyError(h).then(d);return d(h)})})}}});var HW=K((lY,SW)=>{var AW=Cd(),{ArgumentError:yW}=Bt(),{JwksClient:UI}=gt(),lI=Vc(),QI=(t,c)=>{if(t&&t.name==="SigningKeyNotFoundError")return c(null);if(t)return c(t)};SW.exports.passportJwtSecret=function(t){if(t===null||t===void 0)throw new yW("An options object must be provided when initializing passportJwtSecret");if(!t.jwksUri)throw new yW("No JWKS provided. Please provide a jwksUri");let c=new UI(t),u=t.handleSigningKeyError||QI;return function(n,f,d){let h;try{h={payload:AW.decodeJwt(f),header:AW.decodeProtectedHeader(f)}}catch(q){h=null}if(!h||!lI.includes(h.header.alg))return d(null,null);c.getSigningKey(h.header.kid).then((q)=>{d(null,q.publicKey||q.rsaPublicKey)}).catch((q)=>{u(q,(_)=>d(_,null))})}}});var OW=K((QY,J1)=>{var{JwksClient:CW}=gt(),Mr=Bt(),{hapiJwt2Key:aI,hapiJwt2KeyAsync:tZ}=WW(),{expressJwtSecret:cZ}=wW(),{koaJwtSecret:uZ}=PW(),{passportJwtSecret:rZ}=HW();J1.exports=(t)=>{return new CW(t)};J1.exports.JwksClient=CW;J1.exports.ArgumentError=Mr.ArgumentError;J1.exports.JwksError=Mr.JwksError;J1.exports.JwksRateLimitError=Mr.JwksRateLimitError;J1.exports.SigningKeyNotFoundError=Mr.SigningKeyNotFoundError;J1.exports.expressJwtSecret=cZ;J1.exports.hapiJwt2Key=aI;J1.exports.hapiJwt2KeyAsync=tZ;J1.exports.koaJwtSecret=uZ;J1.exports.passportJwtSecret=rZ});var WZ={};pW(WZ,{isAuthorized:()=>zW,handler:()=>qZ});module.exports=DW(WZ);var Dr=require("node:crypto");function br(t){return t.replace(/=/g,"").replace(/\+/g,"-").replace(/\//g,"_")}function wZ(t){let c=t.replace(/-/g,"+").replace(/_/g,"/");return Buffer.from(c,"base64").toString()}var rh=`<!DOCTYPE html>
|
|
8
8
|
<html lang="en">
|
|
9
9
|
<head>
|
|
10
10
|
<meta charset="utf-8" />
|
|
@@ -24,4 +24,4 @@ var VW=Object.create;var{getPrototypeOf:MW,defineProperty:Ft,getOwnPropertyNames
|
|
|
24
24
|
</p>
|
|
25
25
|
</body>
|
|
26
26
|
</html>
|
|
27
|
-
`;var qh=require("node:fs"),Dc=kt(require("node:path")),_h=require("node:url"),Kh=kt(vr(),1);var xr;((f)=>{f[f.none=0]="none";f[f.error=10]="error";f[f.warn=20]="warn";f[f.info=30]="info";f[f.debug=40]="debug"})(xr||={});class Lr{logLevel;constructor(t){this.logLevel=t}jsonify(t){return t.map((c)=>{if(typeof c==="object")try{return JSON.stringify(c)}catch{return c}return c})}info(...t){if(this.logLevel>=30)console.log(...this.jsonify(t))}warn(...t){if(this.logLevel>=20)console.warn(...this.jsonify(t))}error(...t){if(this.logLevel>=10)console.error(...this.jsonify(t))}debug(...t){if(this.logLevel>=40)console.trace(...this.jsonify(t))}}var oW=_h.fileURLToPath("file:///home/runner/work/cdk-cloudfront-auth/cdk-cloudfront-auth/src/handlers/util/config.ts"),UW=Dc.dirname(oW);function sr(){let c=process.env.LAMBDA_TASK_ROOT||UW,u=Dc.join(c,"config.json");console.log("Loading config from",u);let r=JSON.parse(qh.readFileSync(u,"utf-8")),f=`https://cognito-idp.${/^(\S+?)_\S+$/.exec(r.userPoolId)[1]}.amazonaws.com/${r.userPoolId}`,d=`${f}/.well-known/jwks.json`;return{nonceMaxAge:Number.parseInt(Kh.parse(r.cookieSettings.nonce.toLowerCase())["max-age"],10)||86400,...r,tokenIssuer:f,tokenJwksUri:d,logger:new Lr(xr[r.logLevel])}}function lW(t){return Object.entries(t).reduce((c,[u,r])=>Object.assign(c,{[u.toLowerCase()]:[{key:u,value:r}]}),{})}function mr(t,c){let u=c?.cookies?{"set-cookie":c.cookies.map((r)=>({key:"set-cookie",value:r}))}:{};return{status:"307",statusDescription:"Temporary Redirect",headers:{location:[{key:"location",value:t}],...u}}}function Wh(t){return{body:QW(t),status:t.statusCode??"500",headers:{"content-type":[{key:"Content-Type",value:"text/html; charset=UTF-8"}]}}}function QW(t){let c={...t,region:process.env.AWS_REGION};return rh.replace(/\${([^}]*)}/g,(u,r)=>c[r]||"")}function Jh(t,c){if(!c)throw Error("Expected response value");return{...c,headers:{...c.headers??{},...lW(t.httpHeaders)}}}function wh(t){let c;return async(u)=>{if(!c)c=sr();c.logger.debug("Handling event:",u);let r=Jh(c,await t(c,u));return c.logger.debug("Returning response:",r),r}}function GZ(t){let c;return async(u)=>{if(!c)c=sr();c.logger.debug("Handling event:",u);let r=Jh(c,await t(c,u));return c.logger.debug("Returning response:",r),r}}var ZW=kt(vr(),1);var Ud=kt(s6(),1),GW=kt(OW(),1),od;function nZ(t){return"rsaPublicKey"in t}async function fZ(t,c){if(!od)od=GW.default({cache:!0,rateLimit:!0,jwksUri:t});let u=await od.getSigningKey(c);return nZ(u)?u.rsaPublicKey:u.publicKey}async function IW(t,c,u,r){let n=Ud.default.decode(t,{complete:!0});if(!n||typeof n==="string")return{validationError:Error("Cannot parse JWT token")};let f=n.header.kid,d=await fZ(c,f);if(d instanceof Error)return{validationError:d};let h={audience:r,issuer:u,ignoreExpiration:!1};return new Promise((q)=>Ud.default.verify(t,d,h,(_)=>_?q({validationError:_}):q(void 0)))}function
|
|
27
|
+
`;var qh=require("node:fs"),Dc=kt(require("node:path")),_h=require("node:url"),Kh=kt(vr(),1);var xr;((f)=>{f[f.none=0]="none";f[f.error=10]="error";f[f.warn=20]="warn";f[f.info=30]="info";f[f.debug=40]="debug"})(xr||={});class Lr{logLevel;constructor(t){this.logLevel=t}jsonify(t){return t.map((c)=>{if(typeof c==="object")try{return JSON.stringify(c)}catch{return c}return c})}info(...t){if(this.logLevel>=30)console.log(...this.jsonify(t))}warn(...t){if(this.logLevel>=20)console.warn(...this.jsonify(t))}error(...t){if(this.logLevel>=10)console.error(...this.jsonify(t))}debug(...t){if(this.logLevel>=40)console.trace(...this.jsonify(t))}}var oW=_h.fileURLToPath("file:///home/runner/work/cdk-cloudfront-auth/cdk-cloudfront-auth/src/handlers/util/config.ts"),UW=Dc.dirname(oW);function sr(){let c=process.env.LAMBDA_TASK_ROOT||UW,u=Dc.join(c,"config.json");console.log("Loading config from",u);let r=JSON.parse(qh.readFileSync(u,"utf-8")),f=`https://cognito-idp.${/^(\S+?)_\S+$/.exec(r.userPoolId)[1]}.amazonaws.com/${r.userPoolId}`,d=`${f}/.well-known/jwks.json`;return{nonceMaxAge:Number.parseInt(Kh.parse(r.cookieSettings.nonce.toLowerCase())["max-age"],10)||86400,...r,tokenIssuer:f,tokenJwksUri:d,logger:new Lr(xr[r.logLevel])}}function lW(t){return Object.entries(t).reduce((c,[u,r])=>Object.assign(c,{[u.toLowerCase()]:[{key:u,value:r}]}),{})}function mr(t,c){let u=c?.cookies?{"set-cookie":c.cookies.map((r)=>({key:"set-cookie",value:r}))}:{};return{status:"307",statusDescription:"Temporary Redirect",headers:{location:[{key:"location",value:t}],...u}}}function Wh(t){return{body:QW(t),status:t.statusCode??"500",headers:{"content-type":[{key:"Content-Type",value:"text/html; charset=UTF-8"}]}}}function QW(t){let c={...t,region:process.env.AWS_REGION};return rh.replace(/\${([^}]*)}/g,(u,r)=>c[r]||"")}function Jh(t,c){if(!c)throw Error("Expected response value");return{...c,headers:{...c.headers??{},...lW(t.httpHeaders)}}}function wh(t){let c;return async(u)=>{if(!c)c=sr();c.logger.debug("Handling event:",u);let r=Jh(c,await t(c,u));return c.logger.debug("Returning response:",r),r}}function GZ(t){let c;return async(u)=>{if(!c)c=sr();c.logger.debug("Handling event:",u);let r=Jh(c,await t(c,u));return c.logger.debug("Returning response:",r),r}}var ZW=kt(vr(),1);var Ud=kt(s6(),1),GW=kt(OW(),1),od;function nZ(t){return"rsaPublicKey"in t}async function fZ(t,c){if(!od)od=GW.default({cache:!0,rateLimit:!0,jwksUri:t});let u=await od.getSigningKey(c);return nZ(u)?u.rsaPublicKey:u.publicKey}async function IW(t,c,u,r){let n=Ud.default.decode(t,{complete:!0});if(!n||typeof n==="string")return{validationError:Error("Cannot parse JWT token")};let f=n.header.kid,d=await fZ(c,f);if(d instanceof Error)return{validationError:d};let h={audience:r,issuer:u,ignoreExpiration:!1};return new Promise((q)=>Ud.default.verify(t,d,h,(_)=>_?q({validationError:_}):q(void 0)))}function Nr(t){let u=t.split(".")[1].replace(/-/g,"+").replace(/_/g,"/");return JSON.parse(Buffer.from(u,"base64").toString())}function dZ(t){if(!t.cookie)return{};return t.cookie.reduce((u,r)=>({...u,...ZW.parse(r.value)}),{})}function Wt(t,c){if(c.toLowerCase().indexOf("domain")===-1)return`${c}; Domain=.${t}`;return c}function XW(t,c){let u=dZ(t);if(!u)return{};let r=`CognitoIdentityServiceProvider.${c}`,n=u[`${r}.LastAuthUser`];return{tokenUserName:n,idToken:u[`${r}.${n??""}.idToken`],accessToken:u[`${r}.${n??""}.accessToken`],refreshToken:u[`${r}.${n??""}.refreshToken`],scopes:u[`${r}.${n??""}.tokenScopesString`],nonce:u["spa-auth-edge-nonce"],nonceHmac:u["spa-auth-edge-nonce-hmac"],pkce:u["spa-auth-edge-pkce"]}}function cz(t){let c=Nr(t.tokens.idToken),u=c["cognito:username"],r=`CognitoIdentityServiceProvider.${t.clientId}`,n=`${r}.${u}.idToken`,f=`${r}.${u}.accessToken`,d=`${r}.${u}.refreshToken`,h=`${r}.LastAuthUser`,q=`${r}.${u}.tokenScopesString`,_=t.oauthScopes.join(" "),W=`${r}.${u}.userData`,J=JSON.stringify({UserAttributes:[{Name:"sub",Value:c.sub},{Name:"email",Value:c.email}],Username:u}),$={[n]:`${t.tokens.idToken}; ${Wt(t.domainName,t.cookieSettings.idToken)}`,[f]:`${t.tokens.accessToken}; ${Wt(t.domainName,t.cookieSettings.accessToken)}`,[d]:`${t.tokens.refreshToken}; ${Wt(t.domainName,t.cookieSettings.refreshToken)}`,[h]:`${u}; ${Wt(t.domainName,t.cookieSettings.idToken)}`,[q]:`${_}; ${Wt(t.domainName,t.cookieSettings.accessToken)}`,[W]:`${encodeURIComponent(J)}; ${Wt(t.domainName,t.cookieSettings.idToken)}`,"amplify-signin-with-hostedUI":`true; ${Wt(t.domainName,t.cookieSettings.accessToken)}`};if(t.event==="signOut")Object.keys($).forEach((w)=>$[w]=ld($[w]));else if(t.event==="refreshFailed")$[d]=ld($[d]);return["spa-auth-edge-nonce","spa-auth-edge-nonce-hmac","spa-auth-edge-pkce"].forEach((w)=>{$[w]=ld($[w])}),Object.entries($).map(([w,P])=>`${w}=${P}`)}function ld(t=""){let c=t.split(";").map((r)=>r.trim()).filter((r)=>!r.toLowerCase().startsWith("max-age")).filter((r)=>!r.toLowerCase().startsWith("expires")),u=`Expires=${new Date(0).toUTCString()}`;return["",...c.slice(1),u].join("; ")}var Tr=require("node:crypto");function hZ(t,c){let u=Number.parseInt(t.slice(0,t.indexOf("T")),10);if(Number.isNaN(u))return{clientError:"Invalid nonce"};if(EW()-u>c)return{clientError:`Nonce is too old (nonce is from ${new Date(u*1000).toISOString()})`}}function rz(t,c,u){let r=hZ(t,u.nonceMaxAge);if(r)return r;let n=er(t,u);if(n!==c)return{clientError:`Nonce signature mismatch! Expected ${n} but got ${c}`}}function Qd(){let t=Tr.randomBytes(16).toString("hex");return`${EW()}T${t}`}function er(t,c){return Tr.createHmac("sha256",c.nonceSigningSecret).update(t).digest("hex")}function EW(){return Date.now()/1000|0}var qZ=wh(async(t,c)=>{let u=c.Records[0].cf.request,r=u.headers.host[0].value,n=`${u.uri}${u.querystring?`?${u.querystring}`:""}`,{idToken:f,refreshToken:d,nonce:h,nonceHmac:q}=XW(u.headers,t.clientId);if(t.logger.debug("Extracted cookies:",{idToken:f,refreshToken:d,nonce:h,nonceHmac:q}),!f)return YW({config:t,domainName:r,requestedUri:n});let _=Nr(f),{exp:W}=_;if(t.logger.debug("ID token exp:",W,new Date(W*1000).toISOString()),Date.now()/1000>W-600&&d)return _Z({config:t,domainName:r,requestedUri:n});t.logger.info("Validating JWT");let J=await IW(f,t.tokenJwksUri,t.tokenIssuer,t.clientId);if(J!==void 0)return t.logger.debug("ID token not valid:",J.validationError),YW({config:t,domainName:r,requestedUri:n});if(t.logger.info("JWT is valid"),!zW(t,_))return Wh({title:"Not authorized",statusCode:"403",message:"You are not authorized for this resource.",details:"Your sign in was successful, but your user is not allowed to access this resource.",linkHref:`https://${r}${t.signOutPath}`,linkText:"Sign out"});return u});function zW(t,c){if(t.requireGroupAnyOf){let u=c["cognito:groups"]||[];if(!t.requireGroupAnyOf.some((r)=>u.includes(r)))return!1}return!0}function _Z({config:t,domainName:c,requestedUri:u}){t.logger.info("Redirecting to refresh endpoint");let r=Qd(),n=new URLSearchParams({requestedUri:u,nonce:r}).toString();return mr(`https://${c}${t.refreshAuthPath}?${n}`,{cookies:[`spa-auth-edge-nonce=${encodeURIComponent(r)}; ${t.cookieSettings.nonce}`,`spa-auth-edge-nonce-hmac=${encodeURIComponent(er(r,t))}; ${t.cookieSettings.nonce}`]})}function YW({config:t,domainName:c,requestedUri:u}){let r=Qd(),n={nonce:r,nonceHmac:er(r,t),...KZ(t)};t.logger.debug("Using new state:",n);let f=new URLSearchParams({redirect_uri:`https://${c}${t.callbackPath}`,response_type:"code",client_id:t.clientId,state:br(Buffer.from(JSON.stringify({nonce:n.nonce,requestedUri:u})).toString("base64")),scope:t.oauthScopes.join(" "),code_challenge_method:"S256",code_challenge:n.pkceHash}).toString();return mr(`https://${t.cognitoAuthDomain}/oauth2/authorize?${f}`,{cookies:[`spa-auth-edge-nonce=${encodeURIComponent(n.nonce)}; ${t.cookieSettings.nonce}`,`spa-auth-edge-nonce-hmac=${encodeURIComponent(n.nonceHmac)}; ${t.cookieSettings.nonce}`,`spa-auth-edge-pkce=${encodeURIComponent(n.pkce)}; ${t.cookieSettings.nonce}`]})}function KZ(t){let c=Dr.randomBytes(26).toString("hex"),u={pkce:c,pkceHash:br(Dr.createHash("sha256").update(c,"utf8").digest("base64"))};return t.logger.debug("Generated PKCE verifier:",u),u}
|