@mission_sciences/provider-sdk 0.1.2 → 0.2.0-dev.03bcad5

package/dist/marketplace-sdk.umd.js.map

@@ -1 +1 @@
-{"version":3,"file":"marketplace-sdk.umd.js","sources":["../src/types/index.ts","../src/core/JWTParser.ts","../node_modules/jose/dist/webapi/lib/buffer_utils.js","../node_modules/jose/dist/webapi/util/base64url.js","../node_modules/jose/dist/webapi/lib/base64.js","../node_modules/jose/dist/webapi/util/errors.js","../node_modules/jose/dist/webapi/lib/crypto_key.js","../node_modules/jose/dist/webapi/lib/invalid_key_input.js","../node_modules/jose/dist/webapi/lib/is_key_like.js","../node_modules/jose/dist/webapi/lib/is_object.js","../node_modules/jose/dist/webapi/lib/jwk_to_key.js","../node_modules/jose/dist/webapi/lib/is_jwk.js","../node_modules/jose/dist/webapi/lib/normalize_key.js","../node_modules/jose/dist/webapi/lib/check_key_type.js","../node_modules/jose/dist/webapi/lib/get_sign_verify_key.js","../node_modules/jose/dist/webapi/lib/verify.js","../node_modules/jose/dist/webapi/lib/check_key_length.js","../node_modules/jose/dist/webapi/lib/subtle_dsa.js","../node_modules/jose/dist/webapi/jws/flattened/verify.js","../node_modules/jose/dist/webapi/lib/is_disjoint.js","../node_modules/jose/dist/webapi/lib/validate_crit.js","../node_modules/jose/dist/webapi/lib/validate_algorithms.js","../node_modules/jose/dist/webapi/lib/epoch.js","../node_modules/jose/dist/webapi/lib/secs.js","../node_modules/jose/dist/webapi/lib/jwt_claims_set.js","../node_modules/jose/dist/webapi/jwt/verify.js","../node_modules/jose/dist/webapi/jws/compact/verify.js","../node_modules/jose/dist/webapi/jwks/local.js","../node_modules/jose/dist/webapi/key/import.js","../node_modules/jose/dist/webapi/jwks/remote.js","../src/utils/logger.ts","../src/core/JWKSValidator.ts","../src/core/TimerManager.ts","../src/core/HeartbeatManager.ts","../src/core/TabSyncManager.ts","../src/styles/theme.ts","../src/ui/WarningModal.ts","../src/utils/url.ts","../src/core/MarketplaceSDK.ts","../src/ui/SessionHeader.ts"],"sourcesContent":["/**\n * SDK Configuration\n */\nexport interface SDKConfig {\n  /** JWKS endpoint URL (default: https://api.generalwisdom.com/.well-known/jwks.json) */\n  jwksUri?: string;\n  /** API endpoint for backend integration (Phase 2) */\n  apiEndpoint?: string;\n  /** Enable debug logging */\n  debug?: boolean;\n  /** Auto-start timer after initialization */\n  autoStart?: boolean;\n  /** Warning threshold in seconds (default: 300 = 5 minutes) */\n  warningThresholdSeconds?: number;\n  /** Custom styling for warning modal (Legacy - prefer using themeMode) */\n  customStyles?: Partial<ModalStyles>;\n  /** Theme mode for modal styling (default: 'light') */\n  themeMode?: ThemeMode;\n  /** Application ID for validation */\n  applicationId?: string;\n  /** Marketplace URL for redirects (default: https://d3p2yqofgy75sz.cloudfront.net/) */\n  marketplaceUrl?: string;\n\n  // Phase 2 Features\n  /** Enable heartbeat system (default: false) */\n  enableHeartbeat?: boolean;\n  /** Heartbeat interval in seconds (default: 30) */\n  heartbeatIntervalSeconds?: number;\n  /** Enable multi-tab synchronization (default: false) */\n  enableTabSync?: boolean;\n  /** Pause timer when tab is hidden (default: false) */\n  pauseOnHidden?: boolean;\n  /** Use backend validation instead of JWKS (default: false) */\n  useBackendValidation?: boolean;\n\n  // Lifecycle Hooks\n  /** Optional hooks for synchronizing app auth state with marketplace sessions */\n  hooks?: SessionLifecycleHooks;\n  /** Hook execution timeout in milliseconds (default: 5000) */\n  hookTimeoutMs?: number;\n}\n\n/**\n * Session Data extracted from JWT\n */\nexport interface SessionData {\n  /** Unique session UUID */\n  sessionId: string;\n  /** Application ID */\n  applicationId: string;\n  /** User ID */\n  userId: string;\n  /** Organization ID */\n  orgId: string;\n  /** Session start time (Unix timestamp seconds) */\n  startTime: number;\n  /** Session duration in minutes */\n  durationMinutes: number;\n  /** Issued at timestamp (Unix seconds) */\n  iat: number;\n  /** Expiration timestamp (Unix seconds) */\n  exp: number;\n  /** Issuer */\n  iss: string;\n  /** Subject (user ID) */\n  sub: string;\n}\n\n/**\n * Modal styling options (Legacy - prefer using theme)\n * @deprecated Use theme configuration from src/styles/theme.ts instead\n */\nexport interface ModalStyles {\n  backgroundColor: string;\n  textColor: string;\n  primaryColor: string;\n  borderRadius: string;\n  fontFamily: string;\n}\n\n/**\n * Theme mode for modal styling\n */\nexport type ThemeMode = 'light' | 'dark' | 'auto';\n\n/**\n * SDK Event Handlers\n */\nexport interface SDKEvents {\n  /** Called when session successfully initialized */\n  onSessionStart: (data: SessionData) => void;\n  /** Called when warning threshold reached */\n  onSessionWarning: (data: { remainingSeconds: number }) => void;\n  /** Called when session expires or is ended */\n  onSessionEnd: () => void;\n  /** Called on any error */\n  onError: (error: Error) => void;\n}\n\n/**\n * Session Lifecycle Hook Contexts\n */\nexport interface SessionStartContext {\n  /** Unique session UUID */\n  sessionId: string;\n  /** User ID from JWT */\n  userId: string;\n  /** User email (if available in JWT) */\n  email?: string;\n  /** Organization ID */\n  orgId: string;\n  /** Application ID */\n  applicationId: string;\n  /** Session duration in minutes */\n  durationMinutes: number;\n  /** Expiration timestamp (Unix seconds) */\n  expiresAt: number;\n  /** Full JWT token for app use */\n  jwt: string;\n}\n\nexport interface SessionEndContext {\n  /** Unique session UUID */\n  sessionId: string;\n  /** User ID */\n  userId: string;\n  /** Reason for session end */\n  reason: 'expired' | 'manual' | 'error';\n  /** Actual session duration in minutes (if available) */\n  actualDurationMinutes?: number;\n}\n\nexport interface SessionExtendContext {\n  /** Unique session UUID */\n  sessionId: string;\n  /** User ID */\n  userId: string;\n  /** Additional minutes added to session */\n  additionalMinutes: number;\n  /** New expiration timestamp (Unix seconds) */\n  newExpiresAt: number;\n}\n\nexport interface SessionWarningContext {\n  /** Unique session UUID */\n  sessionId: string;\n  /** User ID */\n  userId: string;\n  /** Remaining seconds until expiration */\n  remainingSeconds: number;\n}\n\n/**\n * Session Lifecycle Hooks\n * Optional callbacks that allow applications to synchronize their auth state with marketplace sessions\n */\nexport interface SessionLifecycleHooks {\n  /**\n   * Called after JWT validation succeeds but before session timer starts\n   * Use to: Auto-login user to your app's auth system\n   * Note: Hook failure will prevent session from starting\n   */\n  onSessionStart?: (context: SessionStartContext) => Promise<void> | void;\n\n  /**\n   * Called when session expires or is manually ended, before redirect\n   * Use to: Force logout user from your app's auth system\n   * Note: Hook failure will be logged but won't prevent session end\n   */\n  onSessionEnd?: (context: SessionEndContext) => Promise<void> | void;\n\n  /**\n   * Called when session extension succeeds\n   * Use to: Refresh app auth tokens if needed\n   */\n  onSessionExtend?: (context: SessionExtendContext) => Promise<void> | void;\n\n  /**\n   * Called before session warning modal is shown\n   * Use to: Prepare user for session expiration\n   */\n  onSessionWarning?: (context: SessionWarningContext) => Promise<void> | void;\n}\n\n/**\n * Custom SDK Error\n */\nexport class SDKError extends Error {\n  constructor(\n    message: string,\n    public code: string,\n    public statusCode?: number\n  ) {\n    super(message);\n    this.name = 'SDKError';\n\n    // Maintains proper stack trace for where our error was thrown (only available on V8)\n    if (Error.captureStackTrace) {\n      Error.captureStackTrace(this, SDKError);\n    }\n  }\n}\n\n/**\n * JWT Header\n */\nexport interface JWTHeader {\n  alg: string;\n  typ: string;\n  kid: string;\n}\n\n/**\n * JWT Claims (raw payload from token)\n */\nexport interface JWTClaims {\n  sessionId: string;\n  applicationId: string;\n  userId: string;\n  orgId: string;\n  startTime: number;\n  durationMinutes: number;\n  iat: number;\n  exp: number;\n  iss: string;\n  sub: string;\n}\n\n/**\n * JWKS Key\n */\nexport interface JWKSKey {\n  kty: string;\n  use: string;\n  kid: string;\n  alg: string;\n  n: string;\n  e: string;\n}\n\n/**\n * JWKS Response\n */\nexport interface JWKSResponse {\n  keys: JWKSKey[];\n}\n","import { SDKError, JWTHeader, JWTClaims } from '../types';\n\n/**\n * JWT Parser for client-side token decoding\n * Note: Does NOT verify signature - use JWKSValidator for verification\n */\nexport class JWTParser {\n  /**\n   * Decode JWT payload without verification\n   * @param token - JWT token string\n   * @returns Decoded payload\n   */\n  static decode(token: string): JWTClaims {\n    if (!token || typeof token !== 'string') {\n      throw new SDKError('Invalid JWT token format', 'INVALID_TOKEN');\n    }\n\n    const parts = token.split('.');\n    if (parts.length !== 3) {\n      throw new SDKError('Malformed JWT token - expected 3 parts', 'MALFORMED_TOKEN');\n    }\n\n    try {\n      const payload = parts[1];\n      const decoded = this.base64UrlDecode(payload);\n      return JSON.parse(decoded) as JWTClaims;\n    } catch (error) {\n      throw new SDKError(\n        `Failed to decode JWT payload: ${error instanceof Error ? error.message : 'Unknown error'}`,\n        'DECODE_ERROR'\n      );\n    }\n  }\n\n  /**\n   * Decode JWT header\n   * @param token - JWT token string\n   * @returns Decoded header\n   */\n  static decodeHeader(token: string): JWTHeader {\n    if (!token || typeof token !== 'string') {\n      throw new SDKError('Invalid JWT token format', 'INVALID_TOKEN');\n    }\n\n    const parts = token.split('.');\n    if (parts.length !== 3) {\n      throw new SDKError('Malformed JWT token - expected 3 parts', 'MALFORMED_TOKEN');\n    }\n\n    try {\n      const header = parts[0];\n      const decoded = this.base64UrlDecode(header);\n      return JSON.parse(decoded) as JWTHeader;\n    } catch (error) {\n      throw new SDKError(\n        `Failed to decode JWT header: ${error instanceof Error ? error.message : 'Unknown error'}`,\n        'DECODE_ERROR'\n      );\n    }\n  }\n\n  /**\n   * Extract specific claim from JWT\n   * @param token - JWT token string\n   * @param claim - Claim name to extract\n   * @returns Claim value\n   */\n  static extractClaim<T = any>(token: string, claim: string): T {\n    const payload = this.decode(token);\n    return (payload as any)[claim];\n  }\n\n  /**\n   * Check if JWT is expired (client-side only, not authoritative)\n   * @param token - JWT token string\n   * @returns True if token is expired\n   */\n  static isExpired(token: string): boolean {\n    const payload = this.decode(token);\n    const exp = payload.exp;\n\n    if (!exp) {\n      return false;\n    }\n\n    // exp is in seconds, Date.now() is in milliseconds\n    return Date.now() >= exp * 1000;\n  }\n\n  /**\n   * Get time remaining until expiration\n   * @param token - JWT token string\n   * @returns Seconds remaining (0 if expired)\n   */\n  static getTimeRemaining(token: string): number {\n    const payload = this.decode(token);\n    const exp = payload.exp;\n\n    if (!exp) {\n      return 0;\n    }\n\n    const remaining = exp - Math.floor(Date.now() / 1000);\n    return Math.max(0, remaining);\n  }\n\n  /**\n   * Base64 URL decode\n   * @param str - Base64 URL encoded string\n   * @returns Decoded string\n   */\n  private static base64UrlDecode(str: string): string {\n    // Replace URL-safe characters\n    let base64 = str.replace(/-/g, '+').replace(/_/g, '/');\n\n    // Add padding if needed\n    const padding = base64.length % 4;\n    if (padding) {\n      base64 += '='.repeat(4 - padding);\n    }\n\n    try {\n      // Use Buffer in Node.js, atob in browser\n      if (typeof Buffer !== 'undefined') {\n        return Buffer.from(base64, 'base64').toString('utf-8');\n      } else if (typeof atob !== 'undefined') {\n        return atob(base64);\n      } else {\n        throw new Error('No base64 decoding available');\n      }\n    } catch (error) {\n      throw new SDKError(\n        'Invalid base64 encoding',\n        'ENCODING_ERROR'\n      );\n    }\n  }\n}\n","export const encoder = new TextEncoder();\nexport const decoder = new TextDecoder();\nconst MAX_INT32 = 2 ** 32;\nexport function concat(...buffers) {\n    const size = buffers.reduce((acc, { length }) => acc + length, 0);\n    const buf = new Uint8Array(size);\n    let i = 0;\n    for (const buffer of buffers) {\n        buf.set(buffer, i);\n        i += buffer.length;\n    }\n    return buf;\n}\nfunction writeUInt32BE(buf, value, offset) {\n    if (value < 0 || value >= MAX_INT32) {\n        throw new RangeError(`value must be >= 0 and <= ${MAX_INT32 - 1}. Received ${value}`);\n    }\n    buf.set([value >>> 24, value >>> 16, value >>> 8, value & 0xff], offset);\n}\nexport function uint64be(value) {\n    const high = Math.floor(value / MAX_INT32);\n    const low = value % MAX_INT32;\n    const buf = new Uint8Array(8);\n    writeUInt32BE(buf, high, 0);\n    writeUInt32BE(buf, low, 4);\n    return buf;\n}\nexport function uint32be(value) {\n    const buf = new Uint8Array(4);\n    writeUInt32BE(buf, value);\n    return buf;\n}\n","import { encoder, decoder } from '../lib/buffer_utils.js';\nimport { encodeBase64, decodeBase64 } from '../lib/base64.js';\nexport function decode(input) {\n    if (Uint8Array.fromBase64) {\n        return Uint8Array.fromBase64(typeof input === 'string' ? input : decoder.decode(input), {\n            alphabet: 'base64url',\n        });\n    }\n    let encoded = input;\n    if (encoded instanceof Uint8Array) {\n        encoded = decoder.decode(encoded);\n    }\n    encoded = encoded.replace(/-/g, '+').replace(/_/g, '/').replace(/\\s/g, '');\n    try {\n        return decodeBase64(encoded);\n    }\n    catch {\n        throw new TypeError('The input to be decoded is not correctly encoded.');\n    }\n}\nexport function encode(input) {\n    let unencoded = input;\n    if (typeof unencoded === 'string') {\n        unencoded = encoder.encode(unencoded);\n    }\n    if (Uint8Array.prototype.toBase64) {\n        return unencoded.toBase64({ alphabet: 'base64url', omitPadding: true });\n    }\n    return encodeBase64(unencoded).replace(/=/g, '').replace(/\\+/g, '-').replace(/\\//g, '_');\n}\n","export function encodeBase64(input) {\n    if (Uint8Array.prototype.toBase64) {\n        return input.toBase64();\n    }\n    const CHUNK_SIZE = 0x8000;\n    const arr = [];\n    for (let i = 0; i < input.length; i += CHUNK_SIZE) {\n        arr.push(String.fromCharCode.apply(null, input.subarray(i, i + CHUNK_SIZE)));\n    }\n    return btoa(arr.join(''));\n}\nexport function decodeBase64(encoded) {\n    if (Uint8Array.fromBase64) {\n        return Uint8Array.fromBase64(encoded);\n    }\n    const binary = atob(encoded);\n    const bytes = new Uint8Array(binary.length);\n    for (let i = 0; i < binary.length; i++) {\n        bytes[i] = binary.charCodeAt(i);\n    }\n    return bytes;\n}\n","export class JOSEError extends Error {\n    static code = 'ERR_JOSE_GENERIC';\n    code = 'ERR_JOSE_GENERIC';\n    constructor(message, options) {\n        super(message, options);\n        this.name = this.constructor.name;\n        Error.captureStackTrace?.(this, this.constructor);\n    }\n}\nexport class JWTClaimValidationFailed extends JOSEError {\n    static code = 'ERR_JWT_CLAIM_VALIDATION_FAILED';\n    code = 'ERR_JWT_CLAIM_VALIDATION_FAILED';\n    claim;\n    reason;\n    payload;\n    constructor(message, payload, claim = 'unspecified', reason = 'unspecified') {\n        super(message, { cause: { claim, reason, payload } });\n        this.claim = claim;\n        this.reason = reason;\n        this.payload = payload;\n    }\n}\nexport class JWTExpired extends JOSEError {\n    static code = 'ERR_JWT_EXPIRED';\n    code = 'ERR_JWT_EXPIRED';\n    claim;\n    reason;\n    payload;\n    constructor(message, payload, claim = 'unspecified', reason = 'unspecified') {\n        super(message, { cause: { claim, reason, payload } });\n        this.claim = claim;\n        this.reason = reason;\n        this.payload = payload;\n    }\n}\nexport class JOSEAlgNotAllowed extends JOSEError {\n    static code = 'ERR_JOSE_ALG_NOT_ALLOWED';\n    code = 'ERR_JOSE_ALG_NOT_ALLOWED';\n}\nexport class JOSENotSupported extends JOSEError {\n    static code = 'ERR_JOSE_NOT_SUPPORTED';\n    code = 'ERR_JOSE_NOT_SUPPORTED';\n}\nexport class JWEDecryptionFailed extends JOSEError {\n    static code = 'ERR_JWE_DECRYPTION_FAILED';\n    code = 'ERR_JWE_DECRYPTION_FAILED';\n    constructor(message = 'decryption operation failed', options) {\n        super(message, options);\n    }\n}\nexport class JWEInvalid extends JOSEError {\n    static code = 'ERR_JWE_INVALID';\n    code = 'ERR_JWE_INVALID';\n}\nexport class JWSInvalid extends JOSEError {\n    static code = 'ERR_JWS_INVALID';\n    code = 'ERR_JWS_INVALID';\n}\nexport class JWTInvalid extends JOSEError {\n    static code = 'ERR_JWT_INVALID';\n    code = 'ERR_JWT_INVALID';\n}\nexport class JWKInvalid extends JOSEError {\n    static code = 'ERR_JWK_INVALID';\n    code = 'ERR_JWK_INVALID';\n}\nexport class JWKSInvalid extends JOSEError {\n    static code = 'ERR_JWKS_INVALID';\n    code = 'ERR_JWKS_INVALID';\n}\nexport class JWKSNoMatchingKey extends JOSEError {\n    static code = 'ERR_JWKS_NO_MATCHING_KEY';\n    code = 'ERR_JWKS_NO_MATCHING_KEY';\n    constructor(message = 'no applicable key found in the JSON Web Key Set', options) {\n        super(message, options);\n    }\n}\nexport class JWKSMultipleMatchingKeys extends JOSEError {\n    [Symbol.asyncIterator];\n    static code = 'ERR_JWKS_MULTIPLE_MATCHING_KEYS';\n    code = 'ERR_JWKS_MULTIPLE_MATCHING_KEYS';\n    constructor(message = 'multiple matching keys found in the JSON Web Key Set', options) {\n        super(message, options);\n    }\n}\nexport class JWKSTimeout extends JOSEError {\n    static code = 'ERR_JWKS_TIMEOUT';\n    code = 'ERR_JWKS_TIMEOUT';\n    constructor(message = 'request timed out', options) {\n        super(message, options);\n    }\n}\nexport class JWSSignatureVerificationFailed extends JOSEError {\n    static code = 'ERR_JWS_SIGNATURE_VERIFICATION_FAILED';\n    code = 'ERR_JWS_SIGNATURE_VERIFICATION_FAILED';\n    constructor(message = 'signature verification failed', options) {\n        super(message, options);\n    }\n}\n","function unusable(name, prop = 'algorithm.name') {\n    return new TypeError(`CryptoKey does not support this operation, its ${prop} must be ${name}`);\n}\nfunction isAlgorithm(algorithm, name) {\n    return algorithm.name === name;\n}\nfunction getHashLength(hash) {\n    return parseInt(hash.name.slice(4), 10);\n}\nfunction getNamedCurve(alg) {\n    switch (alg) {\n        case 'ES256':\n            return 'P-256';\n        case 'ES384':\n            return 'P-384';\n        case 'ES512':\n            return 'P-521';\n        default:\n            throw new Error('unreachable');\n    }\n}\nfunction checkUsage(key, usage) {\n    if (usage && !key.usages.includes(usage)) {\n        throw new TypeError(`CryptoKey does not support this operation, its usages must include ${usage}.`);\n    }\n}\nexport function checkSigCryptoKey(key, alg, usage) {\n    switch (alg) {\n        case 'HS256':\n        case 'HS384':\n        case 'HS512': {\n            if (!isAlgorithm(key.algorithm, 'HMAC'))\n                throw unusable('HMAC');\n            const expected = parseInt(alg.slice(2), 10);\n            const actual = getHashLength(key.algorithm.hash);\n            if (actual !== expected)\n                throw unusable(`SHA-${expected}`, 'algorithm.hash');\n            break;\n        }\n        case 'RS256':\n        case 'RS384':\n        case 'RS512': {\n            if (!isAlgorithm(key.algorithm, 'RSASSA-PKCS1-v1_5'))\n                throw unusable('RSASSA-PKCS1-v1_5');\n            const expected = parseInt(alg.slice(2), 10);\n            const actual = getHashLength(key.algorithm.hash);\n            if (actual !== expected)\n                throw unusable(`SHA-${expected}`, 'algorithm.hash');\n            break;\n        }\n        case 'PS256':\n        case 'PS384':\n        case 'PS512': {\n            if (!isAlgorithm(key.algorithm, 'RSA-PSS'))\n                throw unusable('RSA-PSS');\n            const expected = parseInt(alg.slice(2), 10);\n            const actual = getHashLength(key.algorithm.hash);\n            if (actual !== expected)\n                throw unusable(`SHA-${expected}`, 'algorithm.hash');\n            break;\n        }\n        case 'Ed25519':\n        case 'EdDSA': {\n            if (!isAlgorithm(key.algorithm, 'Ed25519'))\n                throw unusable('Ed25519');\n            break;\n        }\n        case 'ML-DSA-44':\n        case 'ML-DSA-65':\n        case 'ML-DSA-87': {\n            if (!isAlgorithm(key.algorithm, alg))\n                throw unusable(alg);\n            break;\n        }\n        case 'ES256':\n        case 'ES384':\n        case 'ES512': {\n            if (!isAlgorithm(key.algorithm, 'ECDSA'))\n                throw unusable('ECDSA');\n            const expected = getNamedCurve(alg);\n            const actual = key.algorithm.namedCurve;\n            if (actual !== expected)\n                throw unusable(expected, 'algorithm.namedCurve');\n            break;\n        }\n        default:\n            throw new TypeError('CryptoKey does not support this operation');\n    }\n    checkUsage(key, usage);\n}\nexport function checkEncCryptoKey(key, alg, usage) {\n    switch (alg) {\n        case 'A128GCM':\n        case 'A192GCM':\n        case 'A256GCM': {\n            if (!isAlgorithm(key.algorithm, 'AES-GCM'))\n                throw unusable('AES-GCM');\n            const expected = parseInt(alg.slice(1, 4), 10);\n            const actual = key.algorithm.length;\n            if (actual !== expected)\n                throw unusable(expected, 'algorithm.length');\n            break;\n        }\n        case 'A128KW':\n        case 'A192KW':\n        case 'A256KW': {\n            if (!isAlgorithm(key.algorithm, 'AES-KW'))\n                throw unusable('AES-KW');\n            const expected = parseInt(alg.slice(1, 4), 10);\n            const actual = key.algorithm.length;\n            if (actual !== expected)\n                throw unusable(expected, 'algorithm.length');\n            break;\n        }\n        case 'ECDH': {\n            switch (key.algorithm.name) {\n                case 'ECDH':\n                case 'X25519':\n                    break;\n                default:\n                    throw unusable('ECDH or X25519');\n            }\n            break;\n        }\n        case 'PBES2-HS256+A128KW':\n        case 'PBES2-HS384+A192KW':\n        case 'PBES2-HS512+A256KW':\n            if (!isAlgorithm(key.algorithm, 'PBKDF2'))\n                throw unusable('PBKDF2');\n            break;\n        case 'RSA-OAEP':\n        case 'RSA-OAEP-256':\n        case 'RSA-OAEP-384':\n        case 'RSA-OAEP-512': {\n            if (!isAlgorithm(key.algorithm, 'RSA-OAEP'))\n                throw unusable('RSA-OAEP');\n            const expected = parseInt(alg.slice(9), 10) || 1;\n            const actual = getHashLength(key.algorithm.hash);\n            if (actual !== expected)\n                throw unusable(`SHA-${expected}`, 'algorithm.hash');\n            break;\n        }\n        default:\n            throw new TypeError('CryptoKey does not support this operation');\n    }\n    checkUsage(key, usage);\n}\n","function message(msg, actual, ...types) {\n    types = types.filter(Boolean);\n    if (types.length > 2) {\n        const last = types.pop();\n        msg += `one of type ${types.join(', ')}, or ${last}.`;\n    }\n    else if (types.length === 2) {\n        msg += `one of type ${types[0]} or ${types[1]}.`;\n    }\n    else {\n        msg += `of type ${types[0]}.`;\n    }\n    if (actual == null) {\n        msg += ` Received ${actual}`;\n    }\n    else if (typeof actual === 'function' && actual.name) {\n        msg += ` Received function ${actual.name}`;\n    }\n    else if (typeof actual === 'object' && actual != null) {\n        if (actual.constructor?.name) {\n            msg += ` Received an instance of ${actual.constructor.name}`;\n        }\n    }\n    return msg;\n}\nexport default (actual, ...types) => {\n    return message('Key must be ', actual, ...types);\n};\nexport function withAlg(alg, actual, ...types) {\n    return message(`Key for the ${alg} algorithm must be `, actual, ...types);\n}\n","export function assertCryptoKey(key) {\n    if (!isCryptoKey(key)) {\n        throw new Error('CryptoKey instance expected');\n    }\n}\nexport function isCryptoKey(key) {\n    return key?.[Symbol.toStringTag] === 'CryptoKey';\n}\nexport function isKeyObject(key) {\n    return key?.[Symbol.toStringTag] === 'KeyObject';\n}\nexport default (key) => {\n    return isCryptoKey(key) || isKeyObject(key);\n};\n","function isObjectLike(value) {\n    return typeof value === 'object' && value !== null;\n}\nexport default (input) => {\n    if (!isObjectLike(input) || Object.prototype.toString.call(input) !== '[object Object]') {\n        return false;\n    }\n    if (Object.getPrototypeOf(input) === null) {\n        return true;\n    }\n    let proto = input;\n    while (Object.getPrototypeOf(proto) !== null) {\n        proto = Object.getPrototypeOf(proto);\n    }\n    return Object.getPrototypeOf(input) === proto;\n};\n","import { JOSENotSupported } from '../util/errors.js';\nfunction subtleMapping(jwk) {\n    let algorithm;\n    let keyUsages;\n    switch (jwk.kty) {\n        case 'AKP': {\n            switch (jwk.alg) {\n                case 'ML-DSA-44':\n                case 'ML-DSA-65':\n                case 'ML-DSA-87':\n                    algorithm = { name: jwk.alg };\n                    keyUsages = jwk.priv ? ['sign'] : ['verify'];\n                    break;\n                default:\n                    throw new JOSENotSupported('Invalid or unsupported JWK \"alg\" (Algorithm) Parameter value');\n            }\n            break;\n        }\n        case 'RSA': {\n            switch (jwk.alg) {\n                case 'PS256':\n                case 'PS384':\n                case 'PS512':\n                    algorithm = { name: 'RSA-PSS', hash: `SHA-${jwk.alg.slice(-3)}` };\n                    keyUsages = jwk.d ? ['sign'] : ['verify'];\n                    break;\n                case 'RS256':\n                case 'RS384':\n                case 'RS512':\n                    algorithm = { name: 'RSASSA-PKCS1-v1_5', hash: `SHA-${jwk.alg.slice(-3)}` };\n                    keyUsages = jwk.d ? ['sign'] : ['verify'];\n                    break;\n                case 'RSA-OAEP':\n                case 'RSA-OAEP-256':\n                case 'RSA-OAEP-384':\n                case 'RSA-OAEP-512':\n                    algorithm = {\n                        name: 'RSA-OAEP',\n                        hash: `SHA-${parseInt(jwk.alg.slice(-3), 10) || 1}`,\n                    };\n                    keyUsages = jwk.d ? ['decrypt', 'unwrapKey'] : ['encrypt', 'wrapKey'];\n                    break;\n                default:\n                    throw new JOSENotSupported('Invalid or unsupported JWK \"alg\" (Algorithm) Parameter value');\n            }\n            break;\n        }\n        case 'EC': {\n            switch (jwk.alg) {\n                case 'ES256':\n                    algorithm = { name: 'ECDSA', namedCurve: 'P-256' };\n                    keyUsages = jwk.d ? ['sign'] : ['verify'];\n                    break;\n                case 'ES384':\n                    algorithm = { name: 'ECDSA', namedCurve: 'P-384' };\n                    keyUsages = jwk.d ? ['sign'] : ['verify'];\n                    break;\n                case 'ES512':\n                    algorithm = { name: 'ECDSA', namedCurve: 'P-521' };\n                    keyUsages = jwk.d ? ['sign'] : ['verify'];\n                    break;\n                case 'ECDH-ES':\n                case 'ECDH-ES+A128KW':\n                case 'ECDH-ES+A192KW':\n                case 'ECDH-ES+A256KW':\n                    algorithm = { name: 'ECDH', namedCurve: jwk.crv };\n                    keyUsages = jwk.d ? ['deriveBits'] : [];\n                    break;\n                default:\n                    throw new JOSENotSupported('Invalid or unsupported JWK \"alg\" (Algorithm) Parameter value');\n            }\n            break;\n        }\n        case 'OKP': {\n            switch (jwk.alg) {\n                case 'Ed25519':\n                case 'EdDSA':\n                    algorithm = { name: 'Ed25519' };\n                    keyUsages = jwk.d ? ['sign'] : ['verify'];\n                    break;\n                case 'ECDH-ES':\n                case 'ECDH-ES+A128KW':\n                case 'ECDH-ES+A192KW':\n                case 'ECDH-ES+A256KW':\n                    algorithm = { name: jwk.crv };\n                    keyUsages = jwk.d ? ['deriveBits'] : [];\n                    break;\n                default:\n                    throw new JOSENotSupported('Invalid or unsupported JWK \"alg\" (Algorithm) Parameter value');\n            }\n            break;\n        }\n        default:\n            throw new JOSENotSupported('Invalid or unsupported JWK \"kty\" (Key Type) Parameter value');\n    }\n    return { algorithm, keyUsages };\n}\nexport default async (jwk) => {\n    if (!jwk.alg) {\n        throw new TypeError('\"alg\" argument is required when \"jwk.alg\" is not present');\n    }\n    const { algorithm, keyUsages } = subtleMapping(jwk);\n    const keyData = { ...jwk };\n    if (keyData.kty !== 'AKP') {\n        delete keyData.alg;\n    }\n    delete keyData.use;\n    return crypto.subtle.importKey('jwk', keyData, algorithm, jwk.ext ?? (jwk.d || jwk.priv ? false : true), jwk.key_ops ?? keyUsages);\n};\n","import isObject from './is_object.js';\nexport function isJWK(key) {\n    return isObject(key) && typeof key.kty === 'string';\n}\nexport function isPrivateJWK(key) {\n    return (key.kty !== 'oct' &&\n        ((key.kty === 'AKP' && typeof key.priv === 'string') || typeof key.d === 'string'));\n}\nexport function isPublicJWK(key) {\n    return key.kty !== 'oct' && typeof key.d === 'undefined' && typeof key.priv === 'undefined';\n}\nexport function isSecretJWK(key) {\n    return key.kty === 'oct' && typeof key.k === 'string';\n}\n","import { isJWK } from './is_jwk.js';\nimport { decode } from '../util/base64url.js';\nimport importJWK from './jwk_to_key.js';\nimport { isCryptoKey, isKeyObject } from './is_key_like.js';\nlet cache;\nconst handleJWK = async (key, jwk, alg, freeze = false) => {\n    cache ||= new WeakMap();\n    let cached = cache.get(key);\n    if (cached?.[alg]) {\n        return cached[alg];\n    }\n    const cryptoKey = await importJWK({ ...jwk, alg });\n    if (freeze)\n        Object.freeze(key);\n    if (!cached) {\n        cache.set(key, { [alg]: cryptoKey });\n    }\n    else {\n        cached[alg] = cryptoKey;\n    }\n    return cryptoKey;\n};\nconst handleKeyObject = (keyObject, alg) => {\n    cache ||= new WeakMap();\n    let cached = cache.get(keyObject);\n    if (cached?.[alg]) {\n        return cached[alg];\n    }\n    const isPublic = keyObject.type === 'public';\n    const extractable = isPublic ? true : false;\n    let cryptoKey;\n    if (keyObject.asymmetricKeyType === 'x25519') {\n        switch (alg) {\n            case 'ECDH-ES':\n            case 'ECDH-ES+A128KW':\n            case 'ECDH-ES+A192KW':\n            case 'ECDH-ES+A256KW':\n                break;\n            default:\n                throw new TypeError('given KeyObject instance cannot be used for this algorithm');\n        }\n        cryptoKey = keyObject.toCryptoKey(keyObject.asymmetricKeyType, extractable, isPublic ? [] : ['deriveBits']);\n    }\n    if (keyObject.asymmetricKeyType === 'ed25519') {\n        if (alg !== 'EdDSA' && alg !== 'Ed25519') {\n            throw new TypeError('given KeyObject instance cannot be used for this algorithm');\n        }\n        cryptoKey = keyObject.toCryptoKey(keyObject.asymmetricKeyType, extractable, [\n            isPublic ? 'verify' : 'sign',\n        ]);\n    }\n    switch (keyObject.asymmetricKeyType) {\n        case 'ml-dsa-44':\n        case 'ml-dsa-65':\n        case 'ml-dsa-87': {\n            if (alg !== keyObject.asymmetricKeyType.toUpperCase()) {\n                throw new TypeError('given KeyObject instance cannot be used for this algorithm');\n            }\n            cryptoKey = keyObject.toCryptoKey(keyObject.asymmetricKeyType, extractable, [\n                isPublic ? 'verify' : 'sign',\n            ]);\n        }\n    }\n    if (keyObject.asymmetricKeyType === 'rsa') {\n        let hash;\n        switch (alg) {\n            case 'RSA-OAEP':\n                hash = 'SHA-1';\n                break;\n            case 'RS256':\n            case 'PS256':\n            case 'RSA-OAEP-256':\n                hash = 'SHA-256';\n                break;\n            case 'RS384':\n            case 'PS384':\n            case 'RSA-OAEP-384':\n                hash = 'SHA-384';\n                break;\n            case 'RS512':\n            case 'PS512':\n            case 'RSA-OAEP-512':\n                hash = 'SHA-512';\n                break;\n            default:\n                throw new TypeError('given KeyObject instance cannot be used for this algorithm');\n        }\n        if (alg.startsWith('RSA-OAEP')) {\n            return keyObject.toCryptoKey({\n                name: 'RSA-OAEP',\n                hash,\n            }, extractable, isPublic ? ['encrypt'] : ['decrypt']);\n        }\n        cryptoKey = keyObject.toCryptoKey({\n            name: alg.startsWith('PS') ? 'RSA-PSS' : 'RSASSA-PKCS1-v1_5',\n            hash,\n        }, extractable, [isPublic ? 'verify' : 'sign']);\n    }\n    if (keyObject.asymmetricKeyType === 'ec') {\n        const nist = new Map([\n            ['prime256v1', 'P-256'],\n            ['secp384r1', 'P-384'],\n            ['secp521r1', 'P-521'],\n        ]);\n        const namedCurve = nist.get(keyObject.asymmetricKeyDetails?.namedCurve);\n        if (!namedCurve) {\n            throw new TypeError('given KeyObject instance cannot be used for this algorithm');\n        }\n        if (alg === 'ES256' && namedCurve === 'P-256') {\n            cryptoKey = keyObject.toCryptoKey({\n                name: 'ECDSA',\n                namedCurve,\n            }, extractable, [isPublic ? 'verify' : 'sign']);\n        }\n        if (alg === 'ES384' && namedCurve === 'P-384') {\n            cryptoKey = keyObject.toCryptoKey({\n                name: 'ECDSA',\n                namedCurve,\n            }, extractable, [isPublic ? 'verify' : 'sign']);\n        }\n        if (alg === 'ES512' && namedCurve === 'P-521') {\n            cryptoKey = keyObject.toCryptoKey({\n                name: 'ECDSA',\n                namedCurve,\n            }, extractable, [isPublic ? 'verify' : 'sign']);\n        }\n        if (alg.startsWith('ECDH-ES')) {\n            cryptoKey = keyObject.toCryptoKey({\n                name: 'ECDH',\n                namedCurve,\n            }, extractable, isPublic ? [] : ['deriveBits']);\n        }\n    }\n    if (!cryptoKey) {\n        throw new TypeError('given KeyObject instance cannot be used for this algorithm');\n    }\n    if (!cached) {\n        cache.set(keyObject, { [alg]: cryptoKey });\n    }\n    else {\n        cached[alg] = cryptoKey;\n    }\n    return cryptoKey;\n};\nexport default async (key, alg) => {\n    if (key instanceof Uint8Array) {\n        return key;\n    }\n    if (isCryptoKey(key)) {\n        return key;\n    }\n    if (isKeyObject(key)) {\n        if (key.type === 'secret') {\n            return key.export();\n        }\n        if ('toCryptoKey' in key && typeof key.toCryptoKey === 'function') {\n            try {\n                return handleKeyObject(key, alg);\n            }\n            catch (err) {\n                if (err instanceof TypeError) {\n                    throw err;\n                }\n            }\n        }\n        let jwk = key.export({ format: 'jwk' });\n        return handleJWK(key, jwk, alg);\n    }\n    if (isJWK(key)) {\n        if (key.k) {\n            return decode(key.k);\n        }\n        return handleJWK(key, key, alg, true);\n    }\n    throw new Error('unreachable');\n};\n","import { withAlg as invalidKeyInput } from './invalid_key_input.js';\nimport isKeyLike from './is_key_like.js';\nimport * as jwk from './is_jwk.js';\nconst tag = (key) => key?.[Symbol.toStringTag];\nconst jwkMatchesOp = (alg, key, usage) => {\n    if (key.use !== undefined) {\n        let expected;\n        switch (usage) {\n            case 'sign':\n            case 'verify':\n                expected = 'sig';\n                break;\n            case 'encrypt':\n            case 'decrypt':\n                expected = 'enc';\n                break;\n        }\n        if (key.use !== expected) {\n            throw new TypeError(`Invalid key for this operation, its \"use\" must be \"${expected}\" when present`);\n        }\n    }\n    if (key.alg !== undefined && key.alg !== alg) {\n        throw new TypeError(`Invalid key for this operation, its \"alg\" must be \"${alg}\" when present`);\n    }\n    if (Array.isArray(key.key_ops)) {\n        let expectedKeyOp;\n        switch (true) {\n            case usage === 'sign' || usage === 'verify':\n            case alg === 'dir':\n            case alg.includes('CBC-HS'):\n                expectedKeyOp = usage;\n                break;\n            case alg.startsWith('PBES2'):\n                expectedKeyOp = 'deriveBits';\n                break;\n            case /^A\\d{3}(?:GCM)?(?:KW)?$/.test(alg):\n                if (!alg.includes('GCM') && alg.endsWith('KW')) {\n                    expectedKeyOp = usage === 'encrypt' ? 'wrapKey' : 'unwrapKey';\n                }\n                else {\n                    expectedKeyOp = usage;\n                }\n                break;\n            case usage === 'encrypt' && alg.startsWith('RSA'):\n                expectedKeyOp = 'wrapKey';\n                break;\n            case usage === 'decrypt':\n                expectedKeyOp = alg.startsWith('RSA') ? 'unwrapKey' : 'deriveBits';\n                break;\n        }\n        if (expectedKeyOp && key.key_ops?.includes?.(expectedKeyOp) === false) {\n            throw new TypeError(`Invalid key for this operation, its \"key_ops\" must include \"${expectedKeyOp}\" when present`);\n        }\n    }\n    return true;\n};\nconst symmetricTypeCheck = (alg, key, usage) => {\n    if (key instanceof Uint8Array)\n        return;\n    if (jwk.isJWK(key)) {\n        if (jwk.isSecretJWK(key) && jwkMatchesOp(alg, key, usage))\n            return;\n        throw new TypeError(`JSON Web Key for symmetric algorithms must have JWK \"kty\" (Key Type) equal to \"oct\" and the JWK \"k\" (Key Value) present`);\n    }\n    if (!isKeyLike(key)) {\n        throw new TypeError(invalidKeyInput(alg, key, 'CryptoKey', 'KeyObject', 'JSON Web Key', 'Uint8Array'));\n    }\n    if (key.type !== 'secret') {\n        throw new TypeError(`${tag(key)} instances for symmetric algorithms must be of type \"secret\"`);\n    }\n};\nconst asymmetricTypeCheck = (alg, key, usage) => {\n    if (jwk.isJWK(key)) {\n        switch (usage) {\n            case 'decrypt':\n            case 'sign':\n                if (jwk.isPrivateJWK(key) && jwkMatchesOp(alg, key, usage))\n                    return;\n                throw new TypeError(`JSON Web Key for this operation be a private JWK`);\n            case 'encrypt':\n            case 'verify':\n                if (jwk.isPublicJWK(key) && jwkMatchesOp(alg, key, usage))\n                    return;\n                throw new TypeError(`JSON Web Key for this operation be a public JWK`);\n        }\n    }\n    if (!isKeyLike(key)) {\n        throw new TypeError(invalidKeyInput(alg, key, 'CryptoKey', 'KeyObject', 'JSON Web Key'));\n    }\n    if (key.type === 'secret') {\n        throw new TypeError(`${tag(key)} instances for asymmetric algorithms must not be of type \"secret\"`);\n    }\n    if (key.type === 'public') {\n        switch (usage) {\n            case 'sign':\n                throw new TypeError(`${tag(key)} instances for asymmetric algorithm signing must be of type \"private\"`);\n            case 'decrypt':\n                throw new TypeError(`${tag(key)} instances for asymmetric algorithm decryption must be of type \"private\"`);\n            default:\n                break;\n        }\n    }\n    if (key.type === 'private') {\n        switch (usage) {\n            case 'verify':\n                throw new TypeError(`${tag(key)} instances for asymmetric algorithm verifying must be of type \"public\"`);\n            case 'encrypt':\n                throw new TypeError(`${tag(key)} instances for asymmetric algorithm encryption must be of type \"public\"`);\n            default:\n                break;\n        }\n    }\n};\nexport default (alg, key, usage) => {\n    const symmetric = alg.startsWith('HS') ||\n        alg === 'dir' ||\n        alg.startsWith('PBES2') ||\n        /^A(?:128|192|256)(?:GCM)?(?:KW)?$/.test(alg) ||\n        /^A(?:128|192|256)CBC-HS(?:256|384|512)$/.test(alg);\n    if (symmetric) {\n        symmetricTypeCheck(alg, key, usage);\n    }\n    else {\n        asymmetricTypeCheck(alg, key, usage);\n    }\n};\n","import { checkSigCryptoKey } from './crypto_key.js';\nimport invalidKeyInput from './invalid_key_input.js';\nexport default async (alg, key, usage) => {\n    if (key instanceof Uint8Array) {\n        if (!alg.startsWith('HS')) {\n            throw new TypeError(invalidKeyInput(key, 'CryptoKey', 'KeyObject', 'JSON Web Key'));\n        }\n        return crypto.subtle.importKey('raw', key, { hash: `SHA-${alg.slice(-3)}`, name: 'HMAC' }, false, [usage]);\n    }\n    checkSigCryptoKey(key, alg, usage);\n    return key;\n};\n","import subtleAlgorithm from './subtle_dsa.js';\nimport checkKeyLength from './check_key_length.js';\nimport getVerifyKey from './get_sign_verify_key.js';\nexport default async (alg, key, signature, data) => {\n    const cryptoKey = await getVerifyKey(alg, key, 'verify');\n    checkKeyLength(alg, cryptoKey);\n    const algorithm = subtleAlgorithm(alg, cryptoKey.algorithm);\n    try {\n        return await crypto.subtle.verify(algorithm, cryptoKey, signature, data);\n    }\n    catch {\n        return false;\n    }\n};\n","export default (alg, key) => {\n    if (alg.startsWith('RS') || alg.startsWith('PS')) {\n        const { modulusLength } = key.algorithm;\n        if (typeof modulusLength !== 'number' || modulusLength < 2048) {\n            throw new TypeError(`${alg} requires key modulusLength to be 2048 bits or larger`);\n        }\n    }\n};\n","import { JOSENotSupported } from '../util/errors.js';\nexport default (alg, algorithm) => {\n    const hash = `SHA-${alg.slice(-3)}`;\n    switch (alg) {\n        case 'HS256':\n        case 'HS384':\n        case 'HS512':\n            return { hash, name: 'HMAC' };\n        case 'PS256':\n        case 'PS384':\n        case 'PS512':\n            return { hash, name: 'RSA-PSS', saltLength: parseInt(alg.slice(-3), 10) >> 3 };\n        case 'RS256':\n        case 'RS384':\n        case 'RS512':\n            return { hash, name: 'RSASSA-PKCS1-v1_5' };\n        case 'ES256':\n        case 'ES384':\n        case 'ES512':\n            return { hash, name: 'ECDSA', namedCurve: algorithm.namedCurve };\n        case 'Ed25519':\n        case 'EdDSA':\n            return { name: 'Ed25519' };\n        case 'ML-DSA-44':\n        case 'ML-DSA-65':\n        case 'ML-DSA-87':\n            return { name: alg };\n        default:\n            throw new JOSENotSupported(`alg ${alg} is not supported either by JOSE or your javascript runtime`);\n    }\n};\n","import { decode as b64u } from '../../util/base64url.js';\nimport verify from '../../lib/verify.js';\nimport { JOSEAlgNotAllowed, JWSInvalid, JWSSignatureVerificationFailed } from '../../util/errors.js';\nimport { concat, encoder, decoder } from '../../lib/buffer_utils.js';\nimport isDisjoint from '../../lib/is_disjoint.js';\nimport isObject from '../../lib/is_object.js';\nimport checkKeyType from '../../lib/check_key_type.js';\nimport validateCrit from '../../lib/validate_crit.js';\nimport validateAlgorithms from '../../lib/validate_algorithms.js';\nimport normalizeKey from '../../lib/normalize_key.js';\nexport async function flattenedVerify(jws, key, options) {\n    if (!isObject(jws)) {\n        throw new JWSInvalid('Flattened JWS must be an object');\n    }\n    if (jws.protected === undefined && jws.header === undefined) {\n        throw new JWSInvalid('Flattened JWS must have either of the \"protected\" or \"header\" members');\n    }\n    if (jws.protected !== undefined && typeof jws.protected !== 'string') {\n        throw new JWSInvalid('JWS Protected Header incorrect type');\n    }\n    if (jws.payload === undefined) {\n        throw new JWSInvalid('JWS Payload missing');\n    }\n    if (typeof jws.signature !== 'string') {\n        throw new JWSInvalid('JWS Signature missing or incorrect type');\n    }\n    if (jws.header !== undefined && !isObject(jws.header)) {\n        throw new JWSInvalid('JWS Unprotected Header incorrect type');\n    }\n    let parsedProt = {};\n    if (jws.protected) {\n        try {\n            const protectedHeader = b64u(jws.protected);\n            parsedProt = JSON.parse(decoder.decode(protectedHeader));\n        }\n        catch {\n            throw new JWSInvalid('JWS Protected Header is invalid');\n        }\n    }\n    if (!isDisjoint(parsedProt, jws.header)) {\n        throw new JWSInvalid('JWS Protected and JWS Unprotected Header Parameter names must be disjoint');\n    }\n    const joseHeader = {\n        ...parsedProt,\n        ...jws.header,\n    };\n    const extensions = validateCrit(JWSInvalid, new Map([['b64', true]]), options?.crit, parsedProt, joseHeader);\n    let b64 = true;\n    if (extensions.has('b64')) {\n        b64 = parsedProt.b64;\n        if (typeof b64 !== 'boolean') {\n            throw new JWSInvalid('The \"b64\" (base64url-encode payload) Header Parameter must be a boolean');\n        }\n    }\n    const { alg } = joseHeader;\n    if (typeof alg !== 'string' || !alg) {\n        throw new JWSInvalid('JWS \"alg\" (Algorithm) Header Parameter missing or invalid');\n    }\n    const algorithms = options && validateAlgorithms('algorithms', options.algorithms);\n    if (algorithms && !algorithms.has(alg)) {\n        throw new JOSEAlgNotAllowed('\"alg\" (Algorithm) Header Parameter value not allowed');\n    }\n    if (b64) {\n        if (typeof jws.payload !== 'string') {\n            throw new JWSInvalid('JWS Payload must be a string');\n        }\n    }\n    else if (typeof jws.payload !== 'string' && !(jws.payload instanceof Uint8Array)) {\n        throw new JWSInvalid('JWS Payload must be a string or an Uint8Array instance');\n    }\n    let resolvedKey = false;\n    if (typeof key === 'function') {\n        key = await key(parsedProt, jws);\n        resolvedKey = true;\n    }\n    checkKeyType(alg, key, 'verify');\n    const data = concat(encoder.encode(jws.protected ?? ''), encoder.encode('.'), typeof jws.payload === 'string' ? encoder.encode(jws.payload) : jws.payload);\n    let signature;\n    try {\n        signature = b64u(jws.signature);\n    }\n    catch {\n        throw new JWSInvalid('Failed to base64url decode the signature');\n    }\n    const k = await normalizeKey(key, alg);\n    const verified = await verify(alg, k, signature, data);\n    if (!verified) {\n        throw new JWSSignatureVerificationFailed();\n    }\n    let payload;\n    if (b64) {\n        try {\n            payload = b64u(jws.payload);\n        }\n        catch {\n            throw new JWSInvalid('Failed to base64url decode the payload');\n        }\n    }\n    else if (typeof jws.payload === 'string') {\n        payload = encoder.encode(jws.payload);\n    }\n    else {\n        payload = jws.payload;\n    }\n    const result = { payload };\n    if (jws.protected !== undefined) {\n        result.protectedHeader = parsedProt;\n    }\n    if (jws.header !== undefined) {\n        result.unprotectedHeader = jws.header;\n    }\n    if (resolvedKey) {\n        return { ...result, key: k };\n    }\n    return result;\n}\n","export default (...headers) => {\n    const sources = headers.filter(Boolean);\n    if (sources.length === 0 || sources.length === 1) {\n        return true;\n    }\n    let acc;\n    for (const header of sources) {\n        const parameters = Object.keys(header);\n        if (!acc || acc.size === 0) {\n            acc = new Set(parameters);\n            continue;\n        }\n        for (const parameter of parameters) {\n            if (acc.has(parameter)) {\n                return false;\n            }\n            acc.add(parameter);\n        }\n    }\n    return true;\n};\n","import { JOSENotSupported, JWEInvalid, JWSInvalid } from '../util/errors.js';\nexport default (Err, recognizedDefault, recognizedOption, protectedHeader, joseHeader) => {\n    if (joseHeader.crit !== undefined && protectedHeader?.crit === undefined) {\n        throw new Err('\"crit\" (Critical) Header Parameter MUST be integrity protected');\n    }\n    if (!protectedHeader || protectedHeader.crit === undefined) {\n        return new Set();\n    }\n    if (!Array.isArray(protectedHeader.crit) ||\n        protectedHeader.crit.length === 0 ||\n        protectedHeader.crit.some((input) => typeof input !== 'string' || input.length === 0)) {\n        throw new Err('\"crit\" (Critical) Header Parameter MUST be an array of non-empty strings when present');\n    }\n    let recognized;\n    if (recognizedOption !== undefined) {\n        recognized = new Map([...Object.entries(recognizedOption), ...recognizedDefault.entries()]);\n    }\n    else {\n        recognized = recognizedDefault;\n    }\n    for (const parameter of protectedHeader.crit) {\n        if (!recognized.has(parameter)) {\n            throw new JOSENotSupported(`Extension Header Parameter \"${parameter}\" is not recognized`);\n        }\n        if (joseHeader[parameter] === undefined) {\n            throw new Err(`Extension Header Parameter \"${parameter}\" is missing`);\n        }\n        if (recognized.get(parameter) && protectedHeader[parameter] === undefined) {\n            throw new Err(`Extension Header Parameter \"${parameter}\" MUST be integrity protected`);\n        }\n    }\n    return new Set(protectedHeader.crit);\n};\n","export default (option, algorithms) => {\n    if (algorithms !== undefined &&\n        (!Array.isArray(algorithms) || algorithms.some((s) => typeof s !== 'string'))) {\n        throw new TypeError(`\"${option}\" option must be an array of strings`);\n    }\n    if (!algorithms) {\n        return undefined;\n    }\n    return new Set(algorithms);\n};\n","export default (date) => Math.floor(date.getTime() / 1000);\n","const minute = 60;\nconst hour = minute * 60;\nconst day = hour * 24;\nconst week = day * 7;\nconst year = day * 365.25;\nconst REGEX = /^(\\+|\\-)? ?(\\d+|\\d+\\.\\d+) ?(seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|weeks?|w|years?|yrs?|y)(?: (ago|from now))?$/i;\nexport default (str) => {\n    const matched = REGEX.exec(str);\n    if (!matched || (matched[4] && matched[1])) {\n        throw new TypeError('Invalid time period format');\n    }\n    const value = parseFloat(matched[2]);\n    const unit = matched[3].toLowerCase();\n    let numericDate;\n    switch (unit) {\n        case 'sec':\n        case 'secs':\n        case 'second':\n        case 'seconds':\n        case 's':\n            numericDate = Math.round(value);\n            break;\n        case 'minute':\n        case 'minutes':\n        case 'min':\n        case 'mins':\n        case 'm':\n            numericDate = Math.round(value * minute);\n            break;\n        case 'hour':\n        case 'hours':\n        case 'hr':\n        case 'hrs':\n        case 'h':\n            numericDate = Math.round(value * hour);\n            break;\n        case 'day':\n        case 'days':\n        case 'd':\n            numericDate = Math.round(value * day);\n            break;\n        case 'week':\n        case 'weeks':\n        case 'w':\n            numericDate = Math.round(value * week);\n            break;\n        default:\n            numericDate = Math.round(value * year);\n            break;\n    }\n    if (matched[1] === '-' || matched[4] === 'ago') {\n        return -numericDate;\n    }\n    return numericDate;\n};\n","import { JWTClaimValidationFailed, JWTExpired, JWTInvalid } from '../util/errors.js';\nimport { decoder } from './buffer_utils.js';\nimport epoch from './epoch.js';\nimport secs from './secs.js';\nimport isObject from './is_object.js';\nimport { encoder } from './buffer_utils.js';\nfunction validateInput(label, input) {\n    if (!Number.isFinite(input)) {\n        throw new TypeError(`Invalid ${label} input`);\n    }\n    return input;\n}\nconst normalizeTyp = (value) => {\n    if (value.includes('/')) {\n        return value.toLowerCase();\n    }\n    return `application/${value.toLowerCase()}`;\n};\nconst checkAudiencePresence = (audPayload, audOption) => {\n    if (typeof audPayload === 'string') {\n        return audOption.includes(audPayload);\n    }\n    if (Array.isArray(audPayload)) {\n        return audOption.some(Set.prototype.has.bind(new Set(audPayload)));\n    }\n    return false;\n};\nexport function validateClaimsSet(protectedHeader, encodedPayload, options = {}) {\n    let payload;\n    try {\n        payload = JSON.parse(decoder.decode(encodedPayload));\n    }\n    catch {\n    }\n    if (!isObject(payload)) {\n        throw new JWTInvalid('JWT Claims Set must be a top-level JSON object');\n    }\n    const { typ } = options;\n    if (typ &&\n        (typeof protectedHeader.typ !== 'string' ||\n            normalizeTyp(protectedHeader.typ) !== normalizeTyp(typ))) {\n        throw new JWTClaimValidationFailed('unexpected \"typ\" JWT header value', payload, 'typ', 'check_failed');\n    }\n    const { requiredClaims = [], issuer, subject, audience, maxTokenAge } = options;\n    const presenceCheck = [...requiredClaims];\n    if (maxTokenAge !== undefined)\n        presenceCheck.push('iat');\n    if (audience !== undefined)\n        presenceCheck.push('aud');\n    if (subject !== undefined)\n        presenceCheck.push('sub');\n    if (issuer !== undefined)\n        presenceCheck.push('iss');\n    for (const claim of new Set(presenceCheck.reverse())) {\n        if (!(claim in payload)) {\n            throw new JWTClaimValidationFailed(`missing required \"${claim}\" claim`, payload, claim, 'missing');\n        }\n    }\n    if (issuer &&\n        !(Array.isArray(issuer) ? issuer : [issuer]).includes(payload.iss)) {\n        throw new JWTClaimValidationFailed('unexpected \"iss\" claim value', payload, 'iss', 'check_failed');\n    }\n    if (subject && payload.sub !== subject) {\n        throw new JWTClaimValidationFailed('unexpected \"sub\" claim value', payload, 'sub', 'check_failed');\n    }\n    if (audience &&\n        !checkAudiencePresence(payload.aud, typeof audience === 'string' ? [audience] : audience)) {\n        throw new JWTClaimValidationFailed('unexpected \"aud\" claim value', payload, 'aud', 'check_failed');\n    }\n    let tolerance;\n    switch (typeof options.clockTolerance) {\n        case 'string':\n            tolerance = secs(options.clockTolerance);\n            break;\n        case 'number':\n            tolerance = options.clockTolerance;\n            break;\n        case 'undefined':\n            tolerance = 0;\n            break;\n        default:\n            throw new TypeError('Invalid clockTolerance option type');\n    }\n    const { currentDate } = options;\n    const now = epoch(currentDate || new Date());\n    if ((payload.iat !== undefined || maxTokenAge) && typeof payload.iat !== 'number') {\n        throw new JWTClaimValidationFailed('\"iat\" claim must be a number', payload, 'iat', 'invalid');\n    }\n    if (payload.nbf !== undefined) {\n        if (typeof payload.nbf !== 'number') {\n            throw new JWTClaimValidationFailed('\"nbf\" claim must be a number', payload, 'nbf', 'invalid');\n        }\n        if (payload.nbf > now + tolerance) {\n            throw new JWTClaimValidationFailed('\"nbf\" claim timestamp check failed', payload, 'nbf', 'check_failed');\n        }\n    }\n    if (payload.exp !== undefined) {\n        if (typeof payload.exp !== 'number') {\n            throw new JWTClaimValidationFailed('\"exp\" claim must be a number', payload, 'exp', 'invalid');\n        }\n        if (payload.exp <= now - tolerance) {\n            throw new JWTExpired('\"exp\" claim timestamp check failed', payload, 'exp', 'check_failed');\n        }\n    }\n    if (maxTokenAge) {\n        const age = now - payload.iat;\n        const max = typeof maxTokenAge === 'number' ? maxTokenAge : secs(maxTokenAge);\n        if (age - tolerance > max) {\n            throw new JWTExpired('\"iat\" claim timestamp check failed (too far in the past)', payload, 'iat', 'check_failed');\n        }\n        if (age < 0 - tolerance) {\n            throw new JWTClaimValidationFailed('\"iat\" claim timestamp check failed (it should be in the past)', payload, 'iat', 'check_failed');\n        }\n    }\n    return payload;\n}\nexport class JWTClaimsBuilder {\n    #payload;\n    constructor(payload) {\n        if (!isObject(payload)) {\n            throw new TypeError('JWT Claims Set MUST be an object');\n        }\n        this.#payload = structuredClone(payload);\n    }\n    data() {\n        return encoder.encode(JSON.stringify(this.#payload));\n    }\n    get iss() {\n        return this.#payload.iss;\n    }\n    set iss(value) {\n        this.#payload.iss = value;\n    }\n    get sub() {\n        return this.#payload.sub;\n    }\n    set sub(value) {\n        this.#payload.sub = value;\n    }\n    get aud() {\n        return this.#payload.aud;\n    }\n    set aud(value) {\n        this.#payload.aud = value;\n    }\n    set jti(value) {\n        this.#payload.jti = value;\n    }\n    set nbf(value) {\n        if (typeof value === 'number') {\n            this.#payload.nbf = validateInput('setNotBefore', value);\n        }\n        else if (value instanceof Date) {\n            this.#payload.nbf = validateInput('setNotBefore', epoch(value));\n        }\n        else {\n            this.#payload.nbf = epoch(new Date()) + secs(value);\n        }\n    }\n    set exp(value) {\n        if (typeof value === 'number') {\n            this.#payload.exp = validateInput('setExpirationTime', value);\n        }\n        else if (value instanceof Date) {\n            this.#payload.exp = validateInput('setExpirationTime', epoch(value));\n        }\n        else {\n            this.#payload.exp = epoch(new Date()) + secs(value);\n        }\n    }\n    set iat(value) {\n        if (typeof value === 'undefined') {\n            this.#payload.iat = epoch(new Date());\n        }\n        else if (value instanceof Date) {\n            this.#payload.iat = validateInput('setIssuedAt', epoch(value));\n        }\n        else if (typeof value === 'string') {\n            this.#payload.iat = validateInput('setIssuedAt', epoch(new Date()) + secs(value));\n        }\n        else {\n            this.#payload.iat = validateInput('setIssuedAt', value);\n        }\n    }\n}\n","import { compactVerify } from '../jws/compact/verify.js';\nimport { validateClaimsSet } from '../lib/jwt_claims_set.js';\nimport { JWTInvalid } from '../util/errors.js';\nexport async function jwtVerify(jwt, key, options) {\n    const verified = await compactVerify(jwt, key, options);\n    if (verified.protectedHeader.crit?.includes('b64') && verified.protectedHeader.b64 === false) {\n        throw new JWTInvalid('JWTs MUST NOT use unencoded payload');\n    }\n    const payload = validateClaimsSet(verified.protectedHeader, verified.payload, options);\n    const result = { payload, protectedHeader: verified.protectedHeader };\n    if (typeof key === 'function') {\n        return { ...result, key: verified.key };\n    }\n    return result;\n}\n","import { flattenedVerify } from '../flattened/verify.js';\nimport { JWSInvalid } from '../../util/errors.js';\nimport { decoder } from '../../lib/buffer_utils.js';\nexport async function compactVerify(jws, key, options) {\n    if (jws instanceof Uint8Array) {\n        jws = decoder.decode(jws);\n    }\n    if (typeof jws !== 'string') {\n        throw new JWSInvalid('Compact JWS must be a string or Uint8Array');\n    }\n    const { 0: protectedHeader, 1: payload, 2: signature, length } = jws.split('.');\n    if (length !== 3) {\n        throw new JWSInvalid('Invalid Compact JWS');\n    }\n    const verified = await flattenedVerify({ payload, protected: protectedHeader, signature }, key, options);\n    const result = { payload: verified.payload, protectedHeader: verified.protectedHeader };\n    if (typeof key === 'function') {\n        return { ...result, key: verified.key };\n    }\n    return result;\n}\n","import { importJWK } from '../key/import.js';\nimport { JWKSInvalid, JOSENotSupported, JWKSNoMatchingKey, JWKSMultipleMatchingKeys, } from '../util/errors.js';\nimport isObject from '../lib/is_object.js';\nfunction getKtyFromAlg(alg) {\n    switch (typeof alg === 'string' && alg.slice(0, 2)) {\n        case 'RS':\n        case 'PS':\n            return 'RSA';\n        case 'ES':\n            return 'EC';\n        case 'Ed':\n            return 'OKP';\n        case 'ML':\n            return 'AKP';\n        default:\n            throw new JOSENotSupported('Unsupported \"alg\" value for a JSON Web Key Set');\n    }\n}\nfunction isJWKSLike(jwks) {\n    return (jwks &&\n        typeof jwks === 'object' &&\n        Array.isArray(jwks.keys) &&\n        jwks.keys.every(isJWKLike));\n}\nfunction isJWKLike(key) {\n    return isObject(key);\n}\nclass LocalJWKSet {\n    #jwks;\n    #cached = new WeakMap();\n    constructor(jwks) {\n        if (!isJWKSLike(jwks)) {\n            throw new JWKSInvalid('JSON Web Key Set malformed');\n        }\n        this.#jwks = structuredClone(jwks);\n    }\n    jwks() {\n        return this.#jwks;\n    }\n    async getKey(protectedHeader, token) {\n        const { alg, kid } = { ...protectedHeader, ...token?.header };\n        const kty = getKtyFromAlg(alg);\n        const candidates = this.#jwks.keys.filter((jwk) => {\n            let candidate = kty === jwk.kty;\n            if (candidate && typeof kid === 'string') {\n                candidate = kid === jwk.kid;\n            }\n            if (candidate && (typeof jwk.alg === 'string' || kty === 'AKP')) {\n                candidate = alg === jwk.alg;\n            }\n            if (candidate && typeof jwk.use === 'string') {\n                candidate = jwk.use === 'sig';\n            }\n            if (candidate && Array.isArray(jwk.key_ops)) {\n                candidate = jwk.key_ops.includes('verify');\n            }\n            if (candidate) {\n                switch (alg) {\n                    case 'ES256':\n                        candidate = jwk.crv === 'P-256';\n                        break;\n                    case 'ES384':\n                        candidate = jwk.crv === 'P-384';\n                        break;\n                    case 'ES512':\n                        candidate = jwk.crv === 'P-521';\n                        break;\n                    case 'Ed25519':\n                    case 'EdDSA':\n                        candidate = jwk.crv === 'Ed25519';\n                        break;\n                }\n            }\n            return candidate;\n        });\n        const { 0: jwk, length } = candidates;\n        if (length === 0) {\n            throw new JWKSNoMatchingKey();\n        }\n        if (length !== 1) {\n            const error = new JWKSMultipleMatchingKeys();\n            const _cached = this.#cached;\n            error[Symbol.asyncIterator] = async function* () {\n                for (const jwk of candidates) {\n                    try {\n                        yield await importWithAlgCache(_cached, jwk, alg);\n                    }\n                    catch { }\n                }\n            };\n            throw error;\n        }\n        return importWithAlgCache(this.#cached, jwk, alg);\n    }\n}\nasync function importWithAlgCache(cache, jwk, alg) {\n    const cached = cache.get(jwk) || cache.set(jwk, {}).get(jwk);\n    if (cached[alg] === undefined) {\n        const key = await importJWK({ ...jwk, ext: true }, alg);\n        if (key instanceof Uint8Array || key.type !== 'public') {\n            throw new JWKSInvalid('JSON Web Key Set members must be public keys');\n        }\n        cached[alg] = key;\n    }\n    return cached[alg];\n}\nexport function createLocalJWKSet(jwks) {\n    const set = new LocalJWKSet(jwks);\n    const localJWKSet = async (protectedHeader, token) => set.getKey(protectedHeader, token);\n    Object.defineProperties(localJWKSet, {\n        jwks: {\n            value: () => structuredClone(set.jwks()),\n            enumerable: false,\n            configurable: false,\n            writable: false,\n        },\n    });\n    return localJWKSet;\n}\n","import { decode as decodeBase64URL } from '../util/base64url.js';\nimport { fromSPKI, fromPKCS8, fromX509 } from '../lib/asn1.js';\nimport toCryptoKey from '../lib/jwk_to_key.js';\nimport { JOSENotSupported } from '../util/errors.js';\nimport isObject from '../lib/is_object.js';\nexport async function importSPKI(spki, alg, options) {\n    if (typeof spki !== 'string' || spki.indexOf('-----BEGIN PUBLIC KEY-----') !== 0) {\n        throw new TypeError('\"spki\" must be SPKI formatted string');\n    }\n    return fromSPKI(spki, alg, options);\n}\nexport async function importX509(x509, alg, options) {\n    if (typeof x509 !== 'string' || x509.indexOf('-----BEGIN CERTIFICATE-----') !== 0) {\n        throw new TypeError('\"x509\" must be X.509 formatted string');\n    }\n    return fromX509(x509, alg, options);\n}\nexport async function importPKCS8(pkcs8, alg, options) {\n    if (typeof pkcs8 !== 'string' || pkcs8.indexOf('-----BEGIN PRIVATE KEY-----') !== 0) {\n        throw new TypeError('\"pkcs8\" must be PKCS#8 formatted string');\n    }\n    return fromPKCS8(pkcs8, alg, options);\n}\nexport async function importJWK(jwk, alg, options) {\n    if (!isObject(jwk)) {\n        throw new TypeError('JWK must be an object');\n    }\n    let ext;\n    alg ??= jwk.alg;\n    ext ??= options?.extractable ?? jwk.ext;\n    switch (jwk.kty) {\n        case 'oct':\n            if (typeof jwk.k !== 'string' || !jwk.k) {\n                throw new TypeError('missing \"k\" (Key Value) Parameter value');\n            }\n            return decodeBase64URL(jwk.k);\n        case 'RSA':\n            if ('oth' in jwk && jwk.oth !== undefined) {\n                throw new JOSENotSupported('RSA JWK \"oth\" (Other Primes Info) Parameter value is not supported');\n            }\n            return toCryptoKey({ ...jwk, alg, ext });\n        case 'AKP': {\n            if (typeof jwk.alg !== 'string' || !jwk.alg) {\n                throw new TypeError('missing \"alg\" (Algorithm) Parameter value');\n            }\n            if (alg !== undefined && alg !== jwk.alg) {\n                throw new TypeError('JWK alg and alg option value mismatch');\n            }\n            return toCryptoKey({ ...jwk, ext });\n        }\n        case 'EC':\n        case 'OKP':\n            return toCryptoKey({ ...jwk, alg, ext });\n        default:\n            throw new JOSENotSupported('Unsupported \"kty\" (Key Type) Parameter value');\n    }\n}\n","import { JOSEError, JWKSNoMatchingKey, JWKSTimeout } from '../util/errors.js';\nimport { createLocalJWKSet } from './local.js';\nimport isObject from '../lib/is_object.js';\nfunction isCloudflareWorkers() {\n    return (typeof WebSocketPair !== 'undefined' ||\n        (typeof navigator !== 'undefined' && navigator.userAgent === 'Cloudflare-Workers') ||\n        (typeof EdgeRuntime !== 'undefined' && EdgeRuntime === 'vercel'));\n}\nlet USER_AGENT;\nif (typeof navigator === 'undefined' || !navigator.userAgent?.startsWith?.('Mozilla/5.0 ')) {\n    const NAME = 'jose';\n    const VERSION = 'v6.1.0';\n    USER_AGENT = `${NAME}/${VERSION}`;\n}\nexport const customFetch = Symbol();\nasync function fetchJwks(url, headers, signal, fetchImpl = fetch) {\n    const response = await fetchImpl(url, {\n        method: 'GET',\n        signal,\n        redirect: 'manual',\n        headers,\n    }).catch((err) => {\n        if (err.name === 'TimeoutError') {\n            throw new JWKSTimeout();\n        }\n        throw err;\n    });\n    if (response.status !== 200) {\n        throw new JOSEError('Expected 200 OK from the JSON Web Key Set HTTP response');\n    }\n    try {\n        return await response.json();\n    }\n    catch {\n        throw new JOSEError('Failed to parse the JSON Web Key Set HTTP response as JSON');\n    }\n}\nexport const jwksCache = Symbol();\nfunction isFreshJwksCache(input, cacheMaxAge) {\n    if (typeof input !== 'object' || input === null) {\n        return false;\n    }\n    if (!('uat' in input) || typeof input.uat !== 'number' || Date.now() - input.uat >= cacheMaxAge) {\n        return false;\n    }\n    if (!('jwks' in input) ||\n        !isObject(input.jwks) ||\n        !Array.isArray(input.jwks.keys) ||\n        !Array.prototype.every.call(input.jwks.keys, isObject)) {\n        return false;\n    }\n    return true;\n}\nclass RemoteJWKSet {\n    #url;\n    #timeoutDuration;\n    #cooldownDuration;\n    #cacheMaxAge;\n    #jwksTimestamp;\n    #pendingFetch;\n    #headers;\n    #customFetch;\n    #local;\n    #cache;\n    constructor(url, options) {\n        if (!(url instanceof URL)) {\n            throw new TypeError('url must be an instance of URL');\n        }\n        this.#url = new URL(url.href);\n        this.#timeoutDuration =\n            typeof options?.timeoutDuration === 'number' ? options?.timeoutDuration : 5000;\n        this.#cooldownDuration =\n            typeof options?.cooldownDuration === 'number' ? options?.cooldownDuration : 30000;\n        this.#cacheMaxAge = typeof options?.cacheMaxAge === 'number' ? options?.cacheMaxAge : 600000;\n        this.#headers = new Headers(options?.headers);\n        if (USER_AGENT && !this.#headers.has('User-Agent')) {\n            this.#headers.set('User-Agent', USER_AGENT);\n        }\n        if (!this.#headers.has('accept')) {\n            this.#headers.set('accept', 'application/json');\n            this.#headers.append('accept', 'application/jwk-set+json');\n        }\n        this.#customFetch = options?.[customFetch];\n        if (options?.[jwksCache] !== undefined) {\n            this.#cache = options?.[jwksCache];\n            if (isFreshJwksCache(options?.[jwksCache], this.#cacheMaxAge)) {\n                this.#jwksTimestamp = this.#cache.uat;\n                this.#local = createLocalJWKSet(this.#cache.jwks);\n            }\n        }\n    }\n    pendingFetch() {\n        return !!this.#pendingFetch;\n    }\n    coolingDown() {\n        return typeof this.#jwksTimestamp === 'number'\n            ? Date.now() < this.#jwksTimestamp + this.#cooldownDuration\n            : false;\n    }\n    fresh() {\n        return typeof this.#jwksTimestamp === 'number'\n            ? Date.now() < this.#jwksTimestamp + this.#cacheMaxAge\n            : false;\n    }\n    jwks() {\n        return this.#local?.jwks();\n    }\n    async getKey(protectedHeader, token) {\n        if (!this.#local || !this.fresh()) {\n            await this.reload();\n        }\n        try {\n            return await this.#local(protectedHeader, token);\n        }\n        catch (err) {\n            if (err instanceof JWKSNoMatchingKey) {\n                if (this.coolingDown() === false) {\n                    await this.reload();\n                    return this.#local(protectedHeader, token);\n                }\n            }\n            throw err;\n        }\n    }\n    async reload() {\n        if (this.#pendingFetch && isCloudflareWorkers()) {\n            this.#pendingFetch = undefined;\n        }\n        this.#pendingFetch ||= fetchJwks(this.#url.href, this.#headers, AbortSignal.timeout(this.#timeoutDuration), this.#customFetch)\n            .then((json) => {\n            this.#local = createLocalJWKSet(json);\n            if (this.#cache) {\n                this.#cache.uat = Date.now();\n                this.#cache.jwks = json;\n            }\n            this.#jwksTimestamp = Date.now();\n            this.#pendingFetch = undefined;\n        })\n            .catch((err) => {\n            this.#pendingFetch = undefined;\n            throw err;\n        });\n        await this.#pendingFetch;\n    }\n}\nexport function createRemoteJWKSet(url, options) {\n    const set = new RemoteJWKSet(url, options);\n    const remoteJWKSet = async (protectedHeader, token) => set.getKey(protectedHeader, token);\n    Object.defineProperties(remoteJWKSet, {\n        coolingDown: {\n            get: () => set.coolingDown(),\n            enumerable: true,\n            configurable: false,\n        },\n        fresh: {\n            get: () => set.fresh(),\n            enumerable: true,\n            configurable: false,\n        },\n        reload: {\n            value: () => set.reload(),\n            enumerable: true,\n            configurable: false,\n            writable: false,\n        },\n        reloading: {\n            get: () => set.pendingFetch(),\n            enumerable: true,\n            configurable: false,\n        },\n        jwks: {\n            value: () => set.jwks(),\n            enumerable: true,\n            configurable: false,\n            writable: false,\n        },\n    });\n    return remoteJWKSet;\n}\n","/**\n * Simple logger with debug mode support\n */\nexport class Logger {\n  private debug: boolean;\n  private prefix: string;\n\n  constructor(debug: boolean = false, prefix: string = '[MarketplaceSDK]') {\n    this.debug = debug;\n    this.prefix = prefix;\n  }\n\n  /**\n   * Log debug message (only if debug enabled)\n   */\n  log(...args: any[]): void {\n    if (this.debug) {\n      console.log(this.prefix, ...args);\n    }\n  }\n\n  /**\n   * Log info message (only if debug enabled)\n   */\n  info(...args: any[]): void {\n    if (this.debug) {\n      console.info(this.prefix, ...args);\n    }\n  }\n\n  /**\n   * Log warning message (always shown)\n   */\n  warn(...args: any[]): void {\n    console.warn(this.prefix, ...args);\n  }\n\n  /**\n   * Log error message (always shown)\n   */\n  error(...args: any[]): void {\n    console.error(this.prefix, ...args);\n  }\n}\n","import { createRemoteJWKSet, jwtVerify, JWTVerifyResult, JWTPayload } from 'jose';\nimport { SDKError, JWTClaims } from '../types';\nimport { Logger } from '../utils/logger';\n\n/**\n * JWKS Validator for RS256 JWT signature verification\n * Uses jose library for browser and Node.js compatibility\n */\nexport class JWKSValidator {\n  private jwksUri: string;\n  private logger: Logger;\n  private jwks: ReturnType<typeof createRemoteJWKSet>;\n\n  constructor(jwksUri: string, debug: boolean = false) {\n    this.jwksUri = jwksUri;\n    this.logger = new Logger(debug, '[JWKSValidator]');\n\n    // Create JWKS fetcher (works in browser and Node.js)\n    this.jwks = createRemoteJWKSet(new URL(this.jwksUri));\n\n    this.logger.info('Initialized with JWKS URI:', this.jwksUri);\n  }\n\n  /**\n   * Verify JWT signature using JWKS public key\n   * @param token - JWT token to verify\n   * @param expectedIssuer - Expected issuer (default: 'generalwisdom.com')\n   * @param expectedApplicationId - Optional application ID to validate\n   * @returns Decoded and verified JWT claims\n   */\n  async verify(\n    token: string,\n    expectedIssuer: string = 'generalwisdom.com',\n    expectedApplicationId?: string\n  ): Promise<JWTClaims> {\n    this.logger.log('Verifying JWT signature...');\n\n    try {\n      // Verify JWT using JWKS\n      const result: JWTVerifyResult = await jwtVerify(token, this.jwks, {\n        issuer: expectedIssuer,\n        algorithms: ['RS256'],\n      });\n\n      const payload = result.payload as JWTPayload & Partial<JWTClaims>;\n\n      // Validate required claims\n      const requiredClaims: (keyof JWTClaims)[] = [\n        'sessionId',\n        'userId',\n        'orgId',\n        'applicationId',\n        'exp',\n        'iat',\n      ];\n\n      for (const claim of requiredClaims) {\n        if (!(claim in payload)) {\n          throw new SDKError(\n            `Missing required claim: ${claim}`,\n            'MISSING_CLAIM'\n          );\n        }\n      }\n\n      // Validate application ID if provided\n      if (expectedApplicationId && payload.applicationId !== expectedApplicationId) {\n        this.logger.error(\n          `Application ID mismatch: expected ${expectedApplicationId}, got ${payload.applicationId}`\n        );\n        throw new SDKError(\n          'Token is for a different application',\n          'APPLICATION_MISMATCH'\n        );\n      }\n\n      const claims: JWTClaims = {\n        sessionId: payload.sessionId!,\n        applicationId: payload.applicationId!,\n        userId: payload.userId!,\n        orgId: payload.orgId!,\n        startTime: payload.startTime!,\n        durationMinutes: payload.durationMinutes!,\n        iat: payload.iat!,\n        exp: payload.exp!,\n        iss: payload.iss!,\n        sub: payload.sub!,\n      };\n\n      this.logger.log('JWT verified successfully');\n      return claims;\n\n    } catch (error) {\n      this.logger.error('JWT verification failed:', error);\n\n      if (error instanceof SDKError) {\n        throw error;\n      }\n\n      // Handle jose-specific errors\n      const errorMessage = error instanceof Error ? error.message : 'Unknown error';\n      const errorName = error instanceof Error ? error.name : 'Error';\n\n      if (errorName === 'JWTExpired' || errorMessage.includes('expired')) {\n        throw new SDKError('Session expired', 'SESSION_EXPIRED');\n      }\n\n      if (errorName === 'JWSSignatureVerificationFailed') {\n        throw new SDKError('Invalid JWT signature', 'INVALID_SIGNATURE');\n      }\n\n      if (errorName === 'JWTClaimValidationFailed') {\n        throw new SDKError(`JWT claim validation failed: ${errorMessage}`, 'INVALID_CLAIM');\n      }\n\n      throw new SDKError(\n        `JWT verification failed: ${errorMessage}`,\n        'VERIFICATION_FAILED'\n      );\n    }\n  }\n\n  /**\n   * Update JWKS URI\n   * @param jwksUri - New JWKS URI\n   */\n  updateJwksUri(jwksUri: string): void {\n    this.jwksUri = jwksUri;\n    this.jwks = createRemoteJWKSet(new URL(this.jwksUri));\n    this.logger.info('Updated JWKS URI:', this.jwksUri);\n  }\n}\n","import { Logger } from '../utils/logger';\nimport { SDKEvents } from '../types';\n\n/**\n * Timer Manager for session countdown\n */\nexport class TimerManager {\n  private remainingSeconds: number;\n  private intervalId: number | null = null;\n  private warningThreshold: number;\n  private warningShown: boolean = false;\n  private logger: Logger;\n  private events: Partial<SDKEvents>;\n\n  constructor(\n    durationSeconds: number,\n    warningThresholdSeconds: number = 300,\n    events: Partial<SDKEvents> = {},\n    debug: boolean = false\n  ) {\n    this.remainingSeconds = durationSeconds;\n    this.warningThreshold = warningThresholdSeconds;\n    this.events = events;\n    this.logger = new Logger(debug, '[TimerManager]');\n\n    this.logger.log('Initialized with duration:', durationSeconds, 'seconds');\n  }\n\n  /**\n   * Start countdown timer\n   */\n  start(): void {\n    if (this.intervalId !== null) {\n      this.logger.warn('Timer already running');\n      return;\n    }\n\n    this.logger.log('Starting timer with', this.remainingSeconds, 'seconds remaining');\n\n    this.intervalId = window.setInterval(() => {\n      this.remainingSeconds--;\n\n      // Check for warning threshold\n      if (\n        !this.warningShown &&\n        this.remainingSeconds <= this.warningThreshold &&\n        this.remainingSeconds > 0\n      ) {\n        this.warningShown = true;\n        this.logger.warn('Warning threshold reached:', this.remainingSeconds, 'seconds remaining');\n        this.events.onSessionWarning?.({\n          remainingSeconds: this.remainingSeconds,\n        });\n      }\n\n      // Check for expiration\n      if (this.remainingSeconds <= 0) {\n        this.logger.warn('Session expired');\n        this.stop();\n        this.events.onSessionEnd?.();\n      }\n    }, 1000);\n  }\n\n  /**\n   * Stop timer\n   */\n  stop(): void {\n    if (this.intervalId !== null) {\n      clearInterval(this.intervalId);\n      this.intervalId = null;\n      this.logger.log('Timer stopped');\n    }\n  }\n\n  /**\n   * Pause timer\n   */\n  pause(): void {\n    this.stop();\n    this.logger.log('Timer paused at:', this.remainingSeconds, 'seconds');\n  }\n\n  /**\n   * Resume timer\n   */\n  resume(): void {\n    if (this.intervalId === null && this.remainingSeconds > 0) {\n      this.start();\n      this.logger.log('Timer resumed at:', this.remainingSeconds, 'seconds');\n    }\n  }\n\n  /**\n   * Get remaining time in seconds\n   */\n  getRemainingSeconds(): number {\n    return this.remainingSeconds;\n  }\n\n  /**\n   * Get formatted time string (MM:SS)\n   */\n  getFormattedTime(): string {\n    const minutes = Math.floor(this.remainingSeconds / 60);\n    const seconds = this.remainingSeconds % 60;\n    return `${minutes}:${seconds.toString().padStart(2, '0')}`;\n  }\n\n  /**\n   * Get formatted time string with hours (HH:MM:SS)\n   */\n  getFormattedTimeWithHours(): string {\n    const hours = Math.floor(this.remainingSeconds / 3600);\n    const minutes = Math.floor((this.remainingSeconds % 3600) / 60);\n    const seconds = this.remainingSeconds % 60;\n\n    if (hours > 0) {\n      return `${hours}:${minutes.toString().padStart(2, '0')}:${seconds.toString().padStart(2, '0')}`;\n    }\n\n    return this.getFormattedTime();\n  }\n\n  /**\n   * Check if timer is running\n   */\n  isRunning(): boolean {\n    return this.intervalId !== null;\n  }\n\n  /**\n   * Check if warning has been shown\n   */\n  hasWarningBeenShown(): boolean {\n    return this.warningShown;\n  }\n\n  /**\n   * Update remaining time (useful for syncing with server)\n   */\n  updateRemainingTime(seconds: number): void {\n    this.remainingSeconds = seconds;\n    this.logger.log('Remaining time updated to:', seconds, 'seconds');\n  }\n}\n","import { Logger } from '../utils/logger';\nimport { SDKError } from '../types';\n\n/**\n * Heartbeat Manager for active session tracking\n * Phase 2 Feature - Sends periodic heartbeats to backend\n */\nexport class HeartbeatManager {\n  private intervalId: number | null = null;\n  private heartbeatInterval: number;\n  private failureCount: number = 0;\n  private maxFailures: number = 3;\n  private isEnabled: boolean = false;\n  private logger: Logger;\n\n  constructor(\n    private sessionId: string,\n    private apiEndpoint: string,\n    private token: string,\n    private onSync?: (remainingSeconds: number) => void,\n    private onError?: (error: Error) => void,\n    heartbeatIntervalSeconds: number = 30,\n    debug: boolean = false\n  ) {\n    this.heartbeatInterval = heartbeatIntervalSeconds * 1000;\n    this.logger = new Logger(debug, '[HeartbeatManager]');\n    this.logger.log('Initialized with', heartbeatIntervalSeconds, 'second interval');\n  }\n\n  /**\n   * Start sending heartbeats\n   */\n  start(): void {\n    if (this.intervalId !== null) {\n      this.logger.warn('Heartbeat already running');\n      return;\n    }\n\n    this.isEnabled = true;\n    this.logger.log('Starting heartbeat for session:', this.sessionId);\n\n    // Send initial heartbeat immediately\n    this.sendHeartbeat();\n\n    // Then send periodically\n    this.intervalId = window.setInterval(() => {\n      this.sendHeartbeat();\n    }, this.heartbeatInterval);\n  }\n\n  /**\n   * Stop sending heartbeats\n   */\n  stop(): void {\n    if (this.intervalId !== null) {\n      clearInterval(this.intervalId);\n      this.intervalId = null;\n      this.isEnabled = false;\n      this.logger.log('Heartbeat stopped');\n    }\n  }\n\n  /**\n   * Send a single heartbeat to backend\n   */\n  private async sendHeartbeat(): Promise<void> {\n    if (!this.isEnabled) {\n      return;\n    }\n\n    this.logger.log('Sending heartbeat...');\n\n    try {\n      const response = await fetch(\n        `${this.apiEndpoint}/sessions/${this.sessionId}/heartbeat`,\n        {\n          method: 'POST',\n          headers: {\n            'Authorization': `Bearer ${this.token}`,\n            'Content-Type': 'application/json',\n          },\n          body: JSON.stringify({\n            timestamp: Date.now(),\n            active: true,\n          }),\n        }\n      );\n\n      if (!response.ok) {\n        throw new SDKError(\n          `Heartbeat failed with status ${response.status}`,\n          'HEARTBEAT_FAILED',\n          response.status\n        );\n      }\n\n      const data = await response.json();\n\n      // Reset failure count on success\n      this.failureCount = 0;\n\n      // Sync remaining time with server\n      if (typeof data.remaining_seconds === 'number') {\n        this.logger.log('Server reports', data.remaining_seconds, 'seconds remaining');\n        this.onSync?.(data.remaining_seconds);\n      }\n\n      this.logger.log('Heartbeat acknowledged');\n\n    } catch (error) {\n      this.failureCount++;\n      this.logger.error('Heartbeat failed:', error, `(${this.failureCount}/${this.maxFailures})`);\n\n      if (this.failureCount >= this.maxFailures) {\n        this.logger.error('Max heartbeat failures reached, stopping');\n        this.stop();\n\n        const sdkError = error instanceof SDKError ? error : new SDKError(\n          error instanceof Error ? error.message : 'Heartbeat failed',\n          'HEARTBEAT_ERROR'\n        );\n        this.onError?.(sdkError);\n      }\n    }\n  }\n\n  /**\n   * Check if heartbeat is running\n   */\n  isRunning(): boolean {\n    return this.intervalId !== null;\n  }\n\n  /**\n   * Get failure count\n   */\n  getFailureCount(): number {\n    return this.failureCount;\n  }\n\n  /**\n   * Update heartbeat interval\n   */\n  updateInterval(seconds: number): void {\n    const wasRunning = this.isRunning();\n\n    if (wasRunning) {\n      this.stop();\n    }\n\n    this.heartbeatInterval = seconds * 1000;\n    this.logger.log('Heartbeat interval updated to', seconds, 'seconds');\n\n    if (wasRunning) {\n      this.start();\n    }\n  }\n}\n","import { Logger } from '../utils/logger';\n\nexport interface TabSyncMessage {\n  type: 'timer_update' | 'pause' | 'resume' | 'end';\n  sessionId: string;\n  remainingSeconds?: number;\n  timestamp: number;\n}\n\n/**\n * Tab Synchronization Manager\n * Phase 2 Feature - Syncs session state across multiple tabs\n */\nexport class TabSyncManager {\n  private channel: BroadcastChannel | null = null;\n  private storageKey: string;\n  private logger: Logger;\n  private isMaster: boolean = false;\n\n  constructor(\n    private sessionId: string,\n    private onMessage: (message: TabSyncMessage) => void,\n    debug: boolean = false\n  ) {\n    this.storageKey = `gw_session_sync_${sessionId}`;\n    this.logger = new Logger(debug, '[TabSyncManager]');\n\n    this.initialize();\n  }\n\n  /**\n   * Initialize sync mechanism\n   */\n  private initialize(): void {\n    // Try BroadcastChannel API first (modern browsers)\n    if (typeof BroadcastChannel !== 'undefined') {\n      this.logger.log('Using BroadcastChannel for tab sync');\n      this.channel = new BroadcastChannel(`gw-session-${this.sessionId}`);\n      this.channel.onmessage = (event) => {\n        this.handleMessage(event.data);\n      };\n    } else {\n      // Fallback to localStorage events (older browsers)\n      this.logger.log('Using localStorage for tab sync (fallback)');\n      window.addEventListener('storage', this.handleStorageEvent);\n    }\n\n    // Elect this tab as master if no other tab exists\n    this.electMaster();\n  }\n\n  /**\n   * Broadcast message to other tabs\n   */\n  broadcast(type: TabSyncMessage['type'], data?: Partial<TabSyncMessage>): void {\n    const message: TabSyncMessage = {\n      type,\n      sessionId: this.sessionId,\n      timestamp: Date.now(),\n      ...data,\n    };\n\n    if (this.channel) {\n      this.channel.postMessage(message);\n      this.logger.log('Broadcasted:', type);\n    } else {\n      // Fallback: use localStorage\n      localStorage.setItem(this.storageKey, JSON.stringify(message));\n      this.logger.log('Broadcasted via localStorage:', type);\n    }\n  }\n\n  /**\n   * Handle incoming message\n   */\n  private handleMessage(data: TabSyncMessage): void {\n    if (data.sessionId !== this.sessionId) {\n      return; // Ignore messages for other sessions\n    }\n\n    this.logger.log('Received message:', data.type);\n    this.onMessage(data);\n  }\n\n  /**\n   * Handle storage event (fallback mechanism)\n   */\n  private handleStorageEvent = (event: StorageEvent): void => {\n    if (event.key === this.storageKey && event.newValue) {\n      try {\n        const data = JSON.parse(event.newValue) as TabSyncMessage;\n        this.handleMessage(data);\n      } catch (error) {\n        this.logger.error('Failed to parse storage event:', error);\n      }\n    }\n  };\n\n  /**\n   * Elect this tab as master if appropriate\n   * Master tab is responsible for heartbeats\n   */\n  private electMaster(): void {\n    const masterKey = `gw_session_master_${this.sessionId}`;\n    const existingMaster = localStorage.getItem(masterKey);\n\n    if (!existingMaster) {\n      // No master exists, become master\n      this.isMaster = true;\n      localStorage.setItem(masterKey, Date.now().toString());\n      this.logger.log('Elected as master tab');\n\n      // Set up heartbeat to maintain master status\n      setInterval(() => {\n        if (this.isMaster) {\n          localStorage.setItem(masterKey, Date.now().toString());\n        }\n      }, 5000);\n\n      // Clear master status on unload\n      window.addEventListener('beforeunload', () => {\n        if (this.isMaster) {\n          localStorage.removeItem(masterKey);\n          this.logger.log('Removed master status');\n        }\n      });\n    } else {\n      this.logger.log('Another tab is master');\n\n      // Check periodically if master is still alive\n      setInterval(() => {\n        const masterTimestamp = localStorage.getItem(masterKey);\n        if (masterTimestamp) {\n          const age = Date.now() - parseInt(masterTimestamp);\n          if (age > 10000) {\n            // Master hasn't updated in 10s, assume dead\n            this.logger.warn('Master tab appears dead, becoming master');\n            this.isMaster = true;\n            localStorage.setItem(masterKey, Date.now().toString());\n          }\n        }\n      }, 5000);\n    }\n  }\n\n  /**\n   * Check if this tab is the master\n   */\n  isMasterTab(): boolean {\n    return this.isMaster;\n  }\n\n  /**\n   * Cleanup and destroy\n   */\n  destroy(): void {\n    if (this.channel) {\n      this.channel.close();\n      this.channel = null;\n    } else {\n      window.removeEventListener('storage', this.handleStorageEvent);\n    }\n\n    // Clean up storage\n    localStorage.removeItem(this.storageKey);\n\n    if (this.isMaster) {\n      localStorage.removeItem(`gw_session_master_${this.sessionId}`);\n    }\n\n    this.logger.log('Tab sync destroyed');\n  }\n}\n","/**\n * Theme configuration matching the General Wisdom SPA design system\n * Based on gw-spa/src/styles/globals.css and Tailwind CSS v4\n */\n\nexport interface ThemeColors {\n  // Background colors\n  background: string;\n  foreground: string;\n\n  // Card colors\n  card: string;\n  cardForeground: string;\n\n  // Popover colors\n  popover: string;\n  popoverForeground: string;\n\n  // Primary colors (brand blue)\n  primary: string;\n  primaryForeground: string;\n\n  // Secondary colors (light gray)\n  secondary: string;\n  secondaryForeground: string;\n\n  // Muted colors\n  muted: string;\n  mutedForeground: string;\n\n  // Accent colors\n  accent: string;\n  accentForeground: string;\n\n  // Destructive colors (red for errors/warnings)\n  destructive: string;\n  destructiveForeground: string;\n\n  // Success colors (green for success actions)\n  success: string;\n  successForeground: string;\n\n  // Border and input\n  border: string;\n  input: string;\n  ring: string;\n}\n\nexport interface ThemeTypography {\n  fontFamily: string;\n  fontSize: {\n    xs: string;\n    sm: string;\n    base: string;\n    lg: string;\n    xl: string;\n    '2xl': string;\n  };\n  fontWeight: {\n    normal: string;\n    medium: string;\n    semibold: string;\n    bold: string;\n  };\n  lineHeight: {\n    tight: string;\n    normal: string;\n    relaxed: string;\n  };\n}\n\nexport interface ThemeSpacing {\n  borderRadius: {\n    sm: string;\n    md: string;\n    lg: string;\n  };\n  padding: {\n    sm: string;\n    md: string;\n    lg: string;\n    xl: string;\n  };\n  gap: {\n    sm: string;\n    md: string;\n    lg: string;\n  };\n}\n\nexport interface Theme {\n  colors: ThemeColors;\n  typography: ThemeTypography;\n  spacing: ThemeSpacing;\n}\n\n/**\n * Light theme matching gw-spa design system\n */\nexport const lightTheme: Theme = {\n  colors: {\n    // Background\n    background: 'hsl(0 0% 100%)',\n    foreground: 'hsl(222.2 84% 4.9%)',\n\n    // Card\n    card: 'hsl(0 0% 100%)',\n    cardForeground: 'hsl(222.2 84% 4.9%)',\n\n    // Popover\n    popover: 'hsl(0 0% 100%)',\n    popoverForeground: 'hsl(222.2 84% 4.9%)',\n\n    // Primary (brand blue)\n    primary: 'hsl(221.2 83.2% 53.3%)',\n    primaryForeground: 'hsl(210 40% 98%)',\n\n    // Secondary (light gray)\n    secondary: 'hsl(210 40% 96.1%)',\n    secondaryForeground: 'hsl(222.2 47.4% 11.2%)',\n\n    // Muted\n    muted: 'hsl(210 40% 96.1%)',\n    mutedForeground: 'hsl(215.4 16.3% 46.9%)',\n\n    // Accent\n    accent: 'hsl(210 40% 96.1%)',\n    accentForeground: 'hsl(222.2 47.4% 11.2%)',\n\n    // Destructive (red)\n    destructive: 'hsl(0 84.2% 60.2%)',\n    destructiveForeground: 'hsl(210 40% 98%)',\n\n    // Success (green)\n    success: 'hsl(142 76% 36%)', // Tailwind green-600 equivalent\n    successForeground: 'hsl(0 0% 100%)',\n\n    // Border and input\n    border: 'hsl(214.3 31.8% 91.4%)',\n    input: 'hsl(214.3 31.8% 91.4%)',\n    ring: 'hsl(221.2 83.2% 53.3%)',\n  },\n  typography: {\n    fontFamily: '-apple-system, BlinkMacSystemFont, \"Segoe UI\", Roboto, \"Helvetica Neue\", Arial, sans-serif',\n    fontSize: {\n      xs: '12px',\n      sm: '14px',\n      base: '16px',\n      lg: '18px',\n      xl: '20px',\n      '2xl': '24px',\n    },\n    fontWeight: {\n      normal: '400',\n      medium: '500',\n      semibold: '600',\n      bold: '700',\n    },\n    lineHeight: {\n      tight: '1.25',\n      normal: '1.5',\n      relaxed: '1.75',\n    },\n  },\n  spacing: {\n    borderRadius: {\n      sm: '4px',  // calc(0.5rem - 4px)\n      md: '6px',  // calc(0.5rem - 2px)\n      lg: '8px',  // 0.5rem\n    },\n    padding: {\n      sm: '8px',\n      md: '16px',\n      lg: '24px',\n      xl: '32px',\n    },\n    gap: {\n      sm: '8px',\n      md: '12px',\n      lg: '16px',\n    },\n  },\n};\n\n/**\n * Dark theme matching gw-spa design system\n */\nexport const darkTheme: Theme = {\n  colors: {\n    // Background\n    background: 'hsl(222.2 84% 4.9%)',\n    foreground: 'hsl(210 40% 98%)',\n\n    // Card\n    card: 'hsl(222.2 84% 4.9%)',\n    cardForeground: 'hsl(210 40% 98%)',\n\n    // Popover\n    popover: 'hsl(222.2 84% 4.9%)',\n    popoverForeground: 'hsl(210 40% 98%)',\n\n    // Primary (lighter blue for dark mode)\n    primary: 'hsl(217.2 91.2% 59.8%)',\n    primaryForeground: 'hsl(222.2 47.4% 11.2%)',\n\n    // Secondary (dark gray)\n    secondary: 'hsl(217.2 32.6% 17.5%)',\n    secondaryForeground: 'hsl(210 40% 98%)',\n\n    // Muted\n    muted: 'hsl(217.2 32.6% 17.5%)',\n    mutedForeground: 'hsl(215 20.2% 65.1%)',\n\n    // Accent\n    accent: 'hsl(217.2 32.6% 17.5%)',\n    accentForeground: 'hsl(210 40% 98%)',\n\n    // Destructive (darker red for dark mode)\n    destructive: 'hsl(0 62.8% 30.6%)',\n    destructiveForeground: 'hsl(210 40% 98%)',\n\n    // Success (darker green for dark mode)\n    success: 'hsl(142 71% 45%)', // Tailwind green-500 equivalent\n    successForeground: 'hsl(0 0% 100%)',\n\n    // Border and input\n    border: 'hsl(217.2 32.6% 17.5%)',\n    input: 'hsl(217.2 32.6% 17.5%)',\n    ring: 'hsl(224.3 76.3% 48%)',\n  },\n  typography: {\n    fontFamily: '-apple-system, BlinkMacSystemFont, \"Segoe UI\", Roboto, \"Helvetica Neue\", Arial, sans-serif',\n    fontSize: {\n      xs: '12px',\n      sm: '14px',\n      base: '16px',\n      lg: '18px',\n      xl: '20px',\n      '2xl': '24px',\n    },\n    fontWeight: {\n      normal: '400',\n      medium: '500',\n      semibold: '600',\n      bold: '700',\n    },\n    lineHeight: {\n      tight: '1.25',\n      normal: '1.5',\n      relaxed: '1.75',\n    },\n  },\n  spacing: {\n    borderRadius: {\n      sm: '4px',\n      md: '6px',\n      lg: '8px',\n    },\n    padding: {\n      sm: '8px',\n      md: '16px',\n      lg: '24px',\n      xl: '32px',\n    },\n    gap: {\n      sm: '8px',\n      md: '12px',\n      lg: '16px',\n    },\n  },\n};\n\n/**\n * Get theme based on user preference or system setting\n */\nexport function getTheme(prefersDark?: boolean): Theme {\n  // Check for explicit preference\n  if (prefersDark !== undefined) {\n    return prefersDark ? darkTheme : lightTheme;\n  }\n\n  // Check system preference\n  if (typeof window !== 'undefined' && window.matchMedia) {\n    const isDarkMode = window.matchMedia('(prefers-color-scheme: dark)').matches;\n    return isDarkMode ? darkTheme : lightTheme;\n  }\n\n  // Default to light theme\n  return lightTheme;\n}\n\n/**\n * Generate CSS string from theme colors for inline styles\n */\nexport function generateCSSVariables(theme: Theme): string {\n  return `\n    --gw-background: ${theme.colors.background};\n    --gw-foreground: ${theme.colors.foreground};\n    --gw-card: ${theme.colors.card};\n    --gw-card-foreground: ${theme.colors.cardForeground};\n    --gw-primary: ${theme.colors.primary};\n    --gw-primary-foreground: ${theme.colors.primaryForeground};\n    --gw-secondary: ${theme.colors.secondary};\n    --gw-secondary-foreground: ${theme.colors.secondaryForeground};\n    --gw-muted: ${theme.colors.muted};\n    --gw-muted-foreground: ${theme.colors.mutedForeground};\n    --gw-accent: ${theme.colors.accent};\n    --gw-accent-foreground: ${theme.colors.accentForeground};\n    --gw-destructive: ${theme.colors.destructive};\n    --gw-destructive-foreground: ${theme.colors.destructiveForeground};\n    --gw-success: ${theme.colors.success};\n    --gw-success-foreground: ${theme.colors.successForeground};\n    --gw-border: ${theme.colors.border};\n    --gw-input: ${theme.colors.input};\n    --gw-ring: ${theme.colors.ring};\n  `.trim();\n}\n","import { ModalStyles, ThemeMode } from '../types';\nimport { getTheme, Theme } from '../styles/theme';\n\n/**\n * Warning Modal for session expiration alerts\n */\nexport class WarningModal {\n  private modal: HTMLDivElement | null = null;\n  private theme: Theme;\n  private legacyStyles: ModalStyles | null = null;\n  private updateInterval: number | null = null;\n  private timeDisplay: HTMLElement | null = null;\n  private startTime: number = 0;\n  private initialSeconds: number = 0;\n  private onEndCallback: (() => void) | undefined = undefined;\n\n  constructor(themeMode: ThemeMode = 'light', customStyles?: Partial<ModalStyles>) {\n    // Use new theme system\n    const prefersDark = themeMode === 'dark' || (themeMode === 'auto' && this.detectDarkMode());\n    this.theme = getTheme(prefersDark);\n\n    // Keep legacy styles for backward compatibility\n    if (customStyles) {\n      this.legacyStyles = {\n        backgroundColor: customStyles.backgroundColor || '#ffffff',\n        textColor: customStyles.textColor || '#333333',\n        primaryColor: customStyles.primaryColor || '#007bff',\n        borderRadius: customStyles.borderRadius || '8px',\n        fontFamily:\n          customStyles.fontFamily ||\n          '-apple-system, BlinkMacSystemFont, \"Segoe UI\", Roboto, sans-serif',\n      };\n    }\n  }\n\n  private detectDarkMode(): boolean {\n    if (typeof window !== 'undefined' && window.matchMedia) {\n      return window.matchMedia('(prefers-color-scheme: dark)').matches;\n    }\n    return false;\n  }\n\n  /**\n   * Show warning modal\n   */\n  show(options: {\n    remainingSeconds: number;\n    onExtend?: () => void;\n    onEnd?: () => void;\n  }): void {\n    // Remove existing modal if any\n    this.hide();\n\n    // Create modal\n    this.modal = document.createElement('div');\n    this.modal.id = 'gw-session-warning-modal';\n    this.modal.style.cssText = `\n      position: fixed;\n      top: 0;\n      left: 0;\n      width: 100%;\n      height: 100%;\n      background-color: rgba(0, 0, 0, 0.5);\n      display: flex;\n      align-items: center;\n      justify-content: center;\n      z-index: 99999;\n      font-family: ${this.legacyStyles?.fontFamily || this.theme.typography.fontFamily};\n    `;\n\n    // Create modal content\n    const content = document.createElement('div');\n    const bgColor = this.legacyStyles?.backgroundColor || this.theme.colors.card;\n    const textColor = this.legacyStyles?.textColor || this.theme.colors.cardForeground;\n    const borderRadius = this.legacyStyles?.borderRadius || this.theme.spacing.borderRadius.lg;\n\n    content.style.cssText = `\n      background-color: ${bgColor};\n      color: ${textColor};\n      border-radius: ${borderRadius};\n      padding: ${this.theme.spacing.padding.lg};\n      max-width: 400px;\n      width: 90%;\n      box-shadow: 0 4px 6px rgba(0, 0, 0, 0.1);\n      border: 1px solid ${this.theme.colors.border};\n    `;\n\n    this.initialSeconds = options.remainingSeconds;\n    this.startTime = Date.now();\n    this.onEndCallback = options.onEnd;\n\n    const minutes = Math.floor(options.remainingSeconds / 60);\n    const seconds = options.remainingSeconds % 60;\n\n    content.innerHTML = `\n      <h2 style=\"margin: 0 0 ${this.theme.spacing.padding.md} 0; font-size: ${this.theme.typography.fontSize.xl}; font-weight: ${this.theme.typography.fontWeight.semibold}; color: ${textColor};\">\n        ⏱️ Time Running Low\n      </h2>\n      <p style=\"margin: 0 0 ${this.theme.spacing.padding.lg} 0; font-size: ${this.theme.typography.fontSize.base}; line-height: ${this.theme.typography.lineHeight.normal}; color: ${this.theme.colors.mutedForeground};\">\n        Your session will expire in <strong id=\"gw-time-display\" style=\"color: ${textColor};\">${minutes}:${seconds.toString().padStart(2, '0')}</strong>.\n      </p>\n      <div style=\"display: flex; gap: ${this.theme.spacing.gap.md}; justify-content: flex-end;\">\n        <button id=\"gw-dismiss-btn\" style=\"\n          padding: 10px 20px;\n          background-color: ${this.theme.colors.secondary};\n          color: ${this.theme.colors.secondaryForeground};\n          border: 1px solid ${this.theme.colors.border};\n          border-radius: ${this.theme.spacing.borderRadius.sm};\n          font-size: ${this.theme.typography.fontSize.sm};\n          font-weight: ${this.theme.typography.fontWeight.medium};\n          cursor: pointer;\n          transition: all 0.2s;\n          font-family: ${this.theme.typography.fontFamily};\n        \">\n          Continue\n        </button>\n        ${\n          options.onExtend\n            ? `<button id=\"gw-extend-btn\" style=\"\n                padding: 10px 20px;\n                background-color: ${this.theme.colors.success};\n                color: ${this.theme.colors.successForeground};\n                border: none;\n                border-radius: ${this.theme.spacing.borderRadius.sm};\n                font-size: ${this.theme.typography.fontSize.sm};\n                font-weight: ${this.theme.typography.fontWeight.medium};\n                cursor: pointer;\n                transition: all 0.2s;\n                font-family: ${this.theme.typography.fontFamily};\n              \">\n                Extend Session\n              </button>`\n            : ''\n        }\n        ${\n          options.onEnd\n            ? `<button id=\"gw-end-btn\" style=\"\n                padding: 10px 20px;\n                background-color: ${this.theme.colors.destructive};\n                color: ${this.theme.colors.destructiveForeground};\n                border: none;\n                border-radius: ${this.theme.spacing.borderRadius.sm};\n                font-size: ${this.theme.typography.fontSize.sm};\n                font-weight: ${this.theme.typography.fontWeight.medium};\n                cursor: pointer;\n                transition: all 0.2s;\n                font-family: ${this.theme.typography.fontFamily};\n              \">\n                End Session\n              </button>`\n            : ''\n        }\n      </div>\n    `;\n\n    this.modal.appendChild(content);\n    document.body.appendChild(this.modal);\n\n    // Add event listeners\n    const extendBtn = document.getElementById('gw-extend-btn');\n    if (extendBtn && options.onExtend) {\n      extendBtn.addEventListener('click', () => {\n        options.onExtend?.();\n        this.hide();\n      });\n    }\n\n    const dismissBtn = document.getElementById('gw-dismiss-btn');\n    if (dismissBtn) {\n      dismissBtn.addEventListener('click', () => {\n        this.hide();\n      });\n    }\n\n    const endBtn = document.getElementById('gw-end-btn');\n    if (endBtn && options.onEnd) {\n      endBtn.addEventListener('click', () => {\n        options.onEnd?.();\n        // Don't call this.hide() here - the onEnd callback will handle showing\n        // the ending modal, and calling hide() would remove it immediately\n      });\n    }\n\n    // Add hover effects\n    const buttons = content.querySelectorAll('button');\n    buttons.forEach((button) => {\n      button.addEventListener('mouseenter', () => {\n        (button as HTMLElement).style.opacity = '0.9';\n      });\n      button.addEventListener('mouseleave', () => {\n        (button as HTMLElement).style.opacity = '1';\n      });\n      // Add focus ring\n      button.addEventListener('focus', () => {\n        (button as HTMLElement).style.outline = `2px solid ${this.theme.colors.ring}`;\n        (button as HTMLElement).style.outlineOffset = '2px';\n      });\n      button.addEventListener('blur', () => {\n        (button as HTMLElement).style.outline = 'none';\n      });\n    });\n\n    // Start updating the timer display\n    this.timeDisplay = document.getElementById('gw-time-display');\n    this.updateInterval = window.setInterval(() => {\n      const elapsed = Math.floor((Date.now() - this.startTime) / 1000);\n      const remaining = Math.max(0, this.initialSeconds - elapsed);\n\n      const minutes = Math.floor(remaining / 60);\n      const seconds = remaining % 60;\n\n      if (this.timeDisplay) {\n        this.timeDisplay.textContent = `${minutes}:${seconds.toString().padStart(2, '0')}`;\n      }\n\n      // If time runs out, trigger session end if callback exists\n      if (remaining === 0) {\n        if (this.onEndCallback) {\n          this.onEndCallback();\n        }\n        this.hide();\n      }\n    }, 1000);\n  }\n\n  /**\n   * Hide and remove modal\n   */\n  hide(): void {\n    // Clear the update interval\n    if (this.updateInterval !== null) {\n      clearInterval(this.updateInterval);\n      this.updateInterval = null;\n    }\n\n    // Remove modal from DOM\n    if (this.modal && this.modal.parentNode) {\n      this.modal.parentNode.removeChild(this.modal);\n      this.modal = null;\n      this.timeDisplay = null;\n    }\n  }\n\n  /**\n   * Check if modal is currently shown\n   */\n  isShown(): boolean {\n    return this.modal !== null;\n  }\n\n  /**\n   * Show \"Session Ending\" modal before redirect\n   * Displays for a fixed duration (3 seconds) then calls callback\n   */\n  showEndingMessage(onComplete: () => void, durationMs: number = 3000): void {\n    // Hide any existing modal first\n    this.hide();\n\n    const bgColor = this.legacyStyles?.backgroundColor || this.theme.colors.card;\n    const textColor = this.legacyStyles?.textColor || this.theme.colors.cardForeground;\n    const borderRadius = this.legacyStyles?.borderRadius || this.theme.spacing.borderRadius.lg;\n\n    // Create modal overlay\n    this.modal = document.createElement('div');\n    this.modal.id = 'gw-session-ending-modal';\n    this.modal.style.cssText = `\n      position: fixed;\n      top: 0;\n      left: 0;\n      width: 100%;\n      height: 100%;\n      background-color: rgba(0, 0, 0, 0.5);\n      display: flex;\n      align-items: center;\n      justify-content: center;\n      z-index: 99999;\n      font-family: ${this.legacyStyles?.fontFamily || this.theme.typography.fontFamily};\n      animation: fadeIn 0.2s ease-in;\n    `;\n\n    // Create modal content\n    const content = document.createElement('div');\n    content.style.cssText = `\n      background-color: ${bgColor};\n      color: ${textColor};\n      border-radius: ${borderRadius};\n      padding: ${this.theme.spacing.padding.xl};\n      max-width: 400px;\n      width: 90%;\n      box-shadow: 0 4px 6px rgba(0, 0, 0, 0.1);\n      text-align: center;\n      animation: slideIn 0.3s ease-out;\n      border: 1px solid ${this.theme.colors.border};\n    `;\n\n    content.innerHTML = `\n      <div style=\"font-size: 48px; margin-bottom: ${this.theme.spacing.padding.lg};\">⏱️</div>\n      <h2 style=\"margin: 0 0 ${this.theme.spacing.padding.md} 0; font-size: ${this.theme.typography.fontSize['2xl']}; font-weight: ${this.theme.typography.fontWeight.semibold}; color: ${this.theme.colors.destructive};\">\n        Session Ending\n      </h2>\n      <p style=\"margin: 0 0 ${this.theme.spacing.padding.lg} 0; font-size: ${this.theme.typography.fontSize.base}; line-height: ${this.theme.typography.lineHeight.normal}; color: ${this.theme.colors.mutedForeground};\">\n        Your session has expired.<br/>\n        Redirecting to marketplace...\n      </p>\n      <div style=\"\n        width: 100%;\n        height: 4px;\n        background: ${this.theme.colors.muted};\n        border-radius: ${this.theme.spacing.borderRadius.sm};\n        overflow: hidden;\n        margin-top: ${this.theme.spacing.padding.lg};\n      \">\n        <div id=\"gw-progress-bar\" style=\"\n          width: 100%;\n          height: 100%;\n          background: linear-gradient(90deg, ${this.theme.colors.destructive}, ${this.theme.colors.primary});\n          animation: progressBar ${durationMs}ms linear forwards;\n        \"></div>\n      </div>\n    `;\n\n    // Add animations\n    const style = document.createElement('style');\n    style.textContent = `\n      @keyframes fadeIn {\n        from { opacity: 0; }\n        to { opacity: 1; }\n      }\n      @keyframes slideIn {\n        from { transform: translateY(-20px); opacity: 0; }\n        to { transform: translateY(0); opacity: 1; }\n      }\n      @keyframes progressBar {\n        from { width: 100%; }\n        to { width: 0%; }\n      }\n    `;\n    document.head.appendChild(style);\n\n    this.modal.appendChild(content);\n    document.body.appendChild(this.modal);\n\n    // Call callback after duration\n    setTimeout(() => {\n      this.hide();\n      onComplete();\n    }, durationMs);\n  }\n}\n","import { SDKError } from '../types';\n\n/**\n * Extract JWT token from URL parameter\n * @param paramName - URL parameter name (default: 'jwt')\n * @param url - URL to extract from (default: window.location.href)\n * @returns JWT token or null if not found\n */\nexport function extractTokenFromURL(\n  paramName: string = 'jwt',\n  url?: string\n): string | null {\n  try {\n    const targetUrl = url || (typeof window !== 'undefined' ? window.location.href : '');\n\n    if (!targetUrl) {\n      return null;\n    }\n\n    const urlObj = new URL(targetUrl);\n    const token = urlObj.searchParams.get(paramName);\n\n    return token;\n  } catch (error) {\n    throw new SDKError(\n      `Failed to extract token from URL: ${error instanceof Error ? error.message : 'Unknown error'}`,\n      'URL_PARSE_ERROR'\n    );\n  }\n}\n\n/**\n * Check if code is running in browser environment\n */\nexport function isBrowser(): boolean {\n  return typeof window !== 'undefined' && typeof window.document !== 'undefined';\n}\n","import { JWTParser } from './JWTParser';\nimport { JWKSValidator } from './JWKSValidator';\nimport { TimerManager } from './TimerManager';\nimport { HeartbeatManager } from './HeartbeatManager';\nimport { TabSyncManager, TabSyncMessage } from './TabSyncManager';\nimport { WarningModal } from '../ui/WarningModal';\nimport { extractTokenFromURL } from '../utils/url';\nimport { Logger } from '../utils/logger';\nimport { SDKConfig, SDKEvents, SessionData, SDKError, SessionStartContext, SessionEndContext, SessionExtendContext, SessionWarningContext } from '../types';\n\n/**\n * Marketplace SDK with Phase 2 Features\n * - Heartbeat system\n * - Multi-tab synchronization\n * - Visibility API integration\n * - Session extension/completion\n * - Backend validation\n */\nexport class MarketplaceSDK {\n  private config: Required<SDKConfig>;\n  private validator: JWKSValidator;\n  private timer: TimerManager | null = null;\n  private heartbeat: HeartbeatManager | null = null;\n  private tabSync: TabSyncManager | null = null;\n  private modal: WarningModal | null = null;\n  private logger: Logger;\n  private events: Partial<SDKEvents> = {};\n  private sessionData: SessionData | null = null;\n  private jwtToken: string | null = null;\n  private endReason: 'expired' | 'manual' | 'error' = 'manual';\n\n  constructor(config: SDKConfig) {\n    this.config = {\n      jwksUri: config.jwksUri || 'https://api.generalwisdom.com/.well-known/jwks.json',\n      apiEndpoint: config.apiEndpoint || 'http://localhost:3000',\n      debug: config.debug ?? false,\n      autoStart: config.autoStart ?? true,\n      warningThresholdSeconds: config.warningThresholdSeconds ?? 300,\n      customStyles: config.customStyles ?? {},\n      themeMode: config.themeMode ?? 'light',\n      applicationId: config.applicationId ?? '',\n      marketplaceUrl: config.marketplaceUrl ?? 'https://d3p2yqofgy75sz.cloudfront.net/',\n      // Phase 2 options\n      enableHeartbeat: config.enableHeartbeat ?? false,\n      heartbeatIntervalSeconds: config.heartbeatIntervalSeconds ?? 30,\n      enableTabSync: config.enableTabSync ?? false,\n      pauseOnHidden: config.pauseOnHidden ?? false,\n      useBackendValidation: config.useBackendValidation ?? false,\n      // Lifecycle hooks\n      hooks: config.hooks ?? {},\n      hookTimeoutMs: config.hookTimeoutMs ?? 5000,\n    };\n\n    this.validator = new JWKSValidator(this.config.jwksUri, this.config.debug);\n    this.logger = new Logger(this.config.debug, '[MarketplaceSDK]');\n\n    this.logger.info('SDK initialized with config:', {\n      jwksUri: this.config.jwksUri,\n      apiEndpoint: this.config.apiEndpoint,\n      enableHeartbeat: this.config.enableHeartbeat,\n      enableTabSync: this.config.enableTabSync,\n      pauseOnHidden: this.config.pauseOnHidden,\n    });\n  }\n\n  /**\n   * Register event handlers\n   */\n  on<K extends keyof SDKEvents>(event: K, handler: SDKEvents[K]): void {\n    this.events[event] = handler;\n    this.logger.log('Event handler registered:', event);\n  }\n\n  /**\n   * Execute a lifecycle hook with timeout\n   */\n  private async executeHook<T>(\n    hookName: string,\n    hook: ((context: T) => Promise<void> | void) | undefined,\n    context: T,\n    isStrict: boolean = true\n  ): Promise<void> {\n    if (!hook) return;\n\n    this.logger.log(`Calling ${hookName} hook`);\n\n    const timeout = new Promise<never>((_, reject) =>\n      setTimeout(\n        () => reject(new SDKError(`${hookName} hook timeout after ${this.config.hookTimeoutMs}ms`, 'HOOK_TIMEOUT')),\n        this.config.hookTimeoutMs\n      )\n    );\n\n    try {\n      await Promise.race([\n        Promise.resolve(hook(context)),\n        timeout\n      ]);\n      this.logger.log(`${hookName} hook completed successfully`);\n    } catch (error) {\n      this.logger.error(`${hookName} hook failed:`, error);\n\n      if (isStrict) {\n        // Strict mode: throw error to prevent session operation\n        throw new SDKError(\n          `${hookName} hook failed: ${error instanceof Error ? error.message : 'Unknown error'}`,\n          'HOOK_ERROR'\n        );\n      } else {\n        // Lenient mode: log but don't throw\n        this.logger.warn(`${hookName} hook failed but continuing (lenient mode)`);\n      }\n    }\n  }\n\n  /**\n   * Calculate actual session duration in minutes\n   */\n  private calculateActualDuration(): number | undefined {\n    if (!this.sessionData) return undefined;\n    const now = Math.floor(Date.now() / 1000);\n    const durationSeconds = now - this.sessionData.startTime;\n    return Math.ceil(durationSeconds / 60);\n  }\n\n  /**\n   * Initialize SDK and validate session\n   */\n  async initialize(): Promise<SessionData> {\n    this.logger.info('Initializing session...');\n\n    try {\n      // Extract JWT from URL or retrieve from storage\n      const JWT_STORAGE_KEY = 'gw_marketplace_jwt';\n\n      // First try URL parameter\n      this.jwtToken = extractTokenFromURL('jwt');\n\n      // If not in URL, try storage (for persistence through OAuth redirects)\n      if (!this.jwtToken && typeof sessionStorage !== 'undefined') {\n        this.jwtToken = sessionStorage.getItem(JWT_STORAGE_KEY);\n        if (this.jwtToken) {\n          this.logger.log('JWT token retrieved from storage');\n        }\n      }\n\n      // Still no token? Error out\n      if (!this.jwtToken) {\n        throw new SDKError(\n          'No jwt token found in URL or storage',\n          'MISSING_TOKEN'\n        );\n      }\n\n      // Store JWT for persistence through navigation\n      if (typeof sessionStorage !== 'undefined') {\n        sessionStorage.setItem(JWT_STORAGE_KEY, this.jwtToken);\n        this.logger.log('JWT token stored in sessionStorage');\n      }\n\n      this.logger.log('JWT token extracted from URL');\n\n      // Validate JWT\n      let verifiedClaims;\n      if (this.config.useBackendValidation) {\n        // Phase 2: Backend validation\n        this.logger.log('Using backend validation');\n        verifiedClaims = await this.validateWithBackend(this.jwtToken);\n      } else {\n        // Phase 1: JWKS validation\n        this.logger.log('Using JWKS validation');\n        verifiedClaims = await this.validator.verify(\n          this.jwtToken,\n          'generalwisdom.com',\n          this.config.applicationId || undefined\n        );\n      }\n\n      this.logger.log('JWT verified successfully');\n\n      // Map to SessionData\n      this.sessionData = {\n        sessionId: verifiedClaims.sessionId,\n        applicationId: verifiedClaims.applicationId,\n        userId: verifiedClaims.userId,\n        orgId: verifiedClaims.orgId,\n        startTime: verifiedClaims.startTime,\n        durationMinutes: verifiedClaims.durationMinutes,\n        iat: verifiedClaims.iat,\n        exp: verifiedClaims.exp,\n        iss: verifiedClaims.iss,\n        sub: verifiedClaims.sub,\n      };\n\n      // Calculate remaining time\n      const now = Math.floor(Date.now() / 1000);\n      const remainingSeconds = Math.max(0, this.sessionData.exp - now);\n\n      if (remainingSeconds <= 0) {\n        throw new SDKError(\n          'Session has already expired',\n          'SESSION_EXPIRED'\n        );\n      }\n\n      this.logger.log('Remaining time:', remainingSeconds, 'seconds');\n\n      // Call onSessionStart hook if provided (STRICT - failure prevents session start)\n      if (this.config.hooks?.onSessionStart) {\n        const startContext: SessionStartContext = {\n          sessionId: this.sessionData.sessionId,\n          userId: this.sessionData.userId,\n          email: (verifiedClaims as any).email, // May not be in all JWTs\n          orgId: this.sessionData.orgId,\n          applicationId: this.sessionData.applicationId,\n          durationMinutes: this.sessionData.durationMinutes,\n          expiresAt: this.sessionData.exp,\n          jwt: this.jwtToken!,\n        };\n\n        await this.executeHook('onSessionStart', this.config.hooks.onSessionStart, startContext, true);\n        this.logger.log('Application auth synchronized with marketplace session');\n      }\n\n      // Initialize timer\n      this.timer = new TimerManager(\n        remainingSeconds,\n        this.config.warningThresholdSeconds,\n        {\n          onSessionWarning: (data) => {\n            // Call warning hook if provided (lenient)\n            if (this.config.hooks?.onSessionWarning) {\n              const warningContext: SessionWarningContext = {\n                sessionId: this.sessionData!.sessionId,\n                userId: this.sessionData!.userId,\n                remainingSeconds: data.remainingSeconds,\n              };\n              this.executeHook('onSessionWarning', this.config.hooks.onSessionWarning, warningContext, false)\n                .catch(error => this.logger.error('onSessionWarning hook failed:', error));\n            }\n\n            this.showWarningModal(data.remainingSeconds);\n            this.events.onSessionWarning?.(data);\n          },\n          onSessionEnd: () => {\n            this.endReason = 'expired'; // Track that this was an expiration\n            this.endSession();\n          },\n        },\n        this.config.debug\n      );\n\n      // Phase 2: Initialize heartbeat if enabled\n      if (this.config.enableHeartbeat && this.jwtToken) {\n        this.heartbeat = new HeartbeatManager(\n          this.sessionData.sessionId,\n          this.config.apiEndpoint,\n          this.jwtToken,\n          (remainingSeconds) => {\n            // Sync timer with server\n            this.timer?.updateRemainingTime(remainingSeconds);\n          },\n          (error) => {\n            this.logger.error('Heartbeat error:', error);\n            this.events.onError?.(error);\n          },\n          this.config.heartbeatIntervalSeconds,\n          this.config.debug\n        );\n      }\n\n      // Phase 2: Initialize tab sync if enabled\n      if (this.config.enableTabSync) {\n        this.tabSync = new TabSyncManager(\n          this.sessionData.sessionId,\n          (message) => this.handleTabSyncMessage(message),\n          this.config.debug\n        );\n      }\n\n      // Phase 2: Set up Visibility API if enabled\n      if (this.config.pauseOnHidden) {\n        this.initializeVisibilityHandling();\n      }\n\n      // Start timer if autoStart enabled\n      if (this.config.autoStart) {\n        this.timer.start();\n        this.logger.log('Timer started automatically');\n\n        // Start heartbeat only if this is the master tab\n        if (this.config.enableHeartbeat && this.heartbeat) {\n          const isMaster = !this.tabSync || this.tabSync.isMasterTab();\n          if (isMaster) {\n            this.heartbeat.start();\n            this.logger.log('Heartbeat started (master tab)');\n          } else {\n            this.logger.log('Heartbeat not started (slave tab)');\n          }\n        }\n      }\n\n      // Trigger session start event\n      this.events.onSessionStart?.(this.sessionData);\n\n      this.logger.info('Session initialized successfully');\n      return this.sessionData;\n\n    } catch (error) {\n      this.logger.error('Initialization failed:', error);\n      const sdkError = error instanceof SDKError ? error : new SDKError(\n        error instanceof Error ? error.message : 'Unknown error',\n        'INITIALIZATION_ERROR'\n      );\n      this.events.onError?.(sdkError);\n      throw sdkError;\n    }\n  }\n\n  /**\n   * Phase 2: Validate JWT with backend\n   */\n  private async validateWithBackend(token: string): Promise<any> {\n    const response = await fetch(\n      `${this.config.apiEndpoint}/sessions/validate`,\n      {\n        method: 'POST',\n        headers: {\n          'Authorization': `Bearer ${token}`,\n          'Content-Type': 'application/json',\n        },\n        body: JSON.stringify({ session_jwt: token }),\n      }\n    );\n\n    if (!response.ok) {\n      throw new SDKError(\n        'Backend validation failed',\n        'BACKEND_VALIDATION_FAILED',\n        response.status\n      );\n    }\n\n    const data = await response.json();\n    if (!data.valid) {\n      throw new SDKError(\n        data.error || 'Session validation failed',\n        'SESSION_INVALID'\n      );\n    }\n\n    // Return decoded claims from backend\n    const decoded = JWTParser.decode(token);\n    return decoded;\n  }\n\n  /**\n   * Phase 2: Handle tab sync messages\n   */\n  private handleTabSyncMessage(message: TabSyncMessage): void {\n    this.logger.log('Tab sync message:', message.type);\n\n    switch (message.type) {\n      case 'pause':\n        this.timer?.pause();\n        break;\n      case 'resume':\n        this.timer?.resume();\n        break;\n      case 'end':\n        this.endSession();\n        break;\n      case 'timer_update':\n        if (message.remainingSeconds !== undefined) {\n          this.timer?.updateRemainingTime(message.remainingSeconds);\n        }\n        break;\n    }\n  }\n\n  /**\n   * Phase 2: Initialize Visibility API handling\n   */\n  private initializeVisibilityHandling(): void {\n    document.addEventListener('visibilitychange', () => {\n      if (document.hidden) {\n        this.logger.log('Tab hidden, pausing timer');\n        this.pauseTimer();\n      } else {\n        this.logger.log('Tab visible, resuming timer');\n        this.resumeTimer();\n      }\n    });\n    this.logger.log('Visibility API handler initialized');\n  }\n\n  /**\n   * Start session timer manually\n   */\n  startTimer(): void {\n    if (!this.timer) {\n      throw new SDKError(\n        'SDK not initialized. Call initialize() first.',\n        'NOT_INITIALIZED'\n      );\n    }\n    this.timer.start();\n    this.tabSync?.broadcast('resume');\n    this.logger.info('Timer started manually');\n  }\n\n  /**\n   * Pause session timer\n   */\n  pauseTimer(): void {\n    this.timer?.pause();\n    this.tabSync?.broadcast('pause');\n    this.logger.info('Timer paused');\n  }\n\n  /**\n   * Resume session timer\n   */\n  resumeTimer(): void {\n    this.timer?.resume();\n    this.tabSync?.broadcast('resume');\n    this.logger.info('Timer resumed');\n  }\n\n  /**\n   * Phase 2: Extend session\n   */\n  async extendSession(additionalMinutes: number): Promise<void> {\n    if (!this.sessionData || !this.jwtToken) {\n      throw new SDKError('No active session', 'NO_SESSION');\n    }\n\n    this.logger.info('Extending session by', additionalMinutes, 'minutes');\n\n    try {\n      const response = await fetch(\n        `${this.config.apiEndpoint}/sessions/${this.sessionData.sessionId}/renew`,\n        {\n          method: 'PUT',\n          headers: {\n            'Authorization': `Bearer ${this.jwtToken}`,\n            'Content-Type': 'application/json',\n          },\n          body: JSON.stringify({\n            additional_minutes: additionalMinutes,\n          }),\n        }\n      );\n\n      if (!response.ok) {\n        throw new SDKError(\n          'Session extension failed',\n          'EXTENSION_FAILED',\n          response.status\n        );\n      }\n\n      const data = await response.json();\n\n      // Update session data\n      this.sessionData.exp = data.new_expires_at;\n\n      // Update timer\n      const now = Math.floor(Date.now() / 1000);\n      const remainingSeconds = data.new_expires_at - now;\n      this.timer?.updateRemainingTime(remainingSeconds);\n\n      // Broadcast to other tabs\n      this.tabSync?.broadcast('timer_update', { remainingSeconds });\n\n      // Call onSessionExtend hook if provided\n      if (this.config.hooks?.onSessionExtend) {\n        const extendContext: SessionExtendContext = {\n          sessionId: this.sessionData.sessionId,\n          userId: this.sessionData.userId,\n          additionalMinutes,\n          newExpiresAt: data.new_expires_at,\n        };\n\n        await this.executeHook('onSessionExtend', this.config.hooks.onSessionExtend, extendContext, false);\n      }\n\n      this.logger.info('Session extended successfully');\n\n    } catch (error) {\n      this.logger.error('Failed to extend session:', error);\n      const sdkError = error instanceof SDKError ? error : new SDKError(\n        error instanceof Error ? error.message : 'Extension failed',\n        'EXTENSION_ERROR'\n      );\n      this.events.onError?.(sdkError);\n      throw sdkError;\n    }\n  }\n\n  /**\n   * Phase 2: Complete session\n   */\n  async completeSession(actualUsageMinutes?: number): Promise<void> {\n    if (!this.sessionData || !this.jwtToken) {\n      throw new SDKError('No active session', 'NO_SESSION');\n    }\n\n    this.logger.info('Completing session...');\n\n    try {\n      const response = await fetch(\n        `${this.config.apiEndpoint}/sessions/${this.sessionData.sessionId}/complete`,\n        {\n          method: 'POST',\n          headers: {\n            'Authorization': `Bearer ${this.jwtToken}`,\n            'Content-Type': 'application/json',\n          },\n          body: JSON.stringify({\n            actual_usage_minutes: actualUsageMinutes,\n            metadata: {},\n          }),\n        }\n      );\n\n      if (!response.ok) {\n        throw new SDKError(\n          'Session completion failed',\n          'COMPLETION_FAILED',\n          response.status\n        );\n      }\n\n      const data = await response.json();\n      this.logger.info('Session completed:', data);\n\n      // End the session\n      this.endSession();\n\n    } catch (error) {\n      this.logger.error('Failed to complete session:', error);\n      const sdkError = error instanceof SDKError ? error : new SDKError(\n        error instanceof Error ? error.message : 'Completion failed',\n        'COMPLETION_ERROR'\n      );\n      this.events.onError?.(sdkError);\n      throw sdkError;\n    }\n  }\n\n  /**\n   * End session\n   */\n  async endSession(): Promise<void> {\n    this.logger.info('Ending session...');\n\n    // Build session end context\n    const endContext: SessionEndContext = {\n      sessionId: this.sessionData?.sessionId || '',\n      userId: this.sessionData?.userId || '',\n      reason: this.endReason,\n      actualDurationMinutes: this.calculateActualDuration(),\n    };\n\n    // Call onSessionEnd hook if provided (LENIENT - errors logged but don't block)\n    if (this.config.hooks?.onSessionEnd) {\n      try {\n        await this.executeHook('onSessionEnd', this.config.hooks.onSessionEnd, endContext, false);\n        this.logger.log('Application auth cleanup completed');\n      } catch (error) {\n        // This shouldn't throw due to lenient mode, but catch anyway\n        this.logger.error('onSessionEnd hook error (continuing anyway):', error);\n      }\n    }\n\n    // Stop timer\n    this.timer?.stop();\n\n    // Stop heartbeat\n    this.heartbeat?.stop();\n\n    // Broadcast to other tabs\n    this.tabSync?.broadcast('end');\n\n    // Clear JWT from storage\n    if (typeof sessionStorage !== 'undefined') {\n      sessionStorage.removeItem('gw_marketplace_jwt');\n      this.logger.log('JWT token cleared from storage');\n    }\n\n    // Trigger end event\n    this.events.onSessionEnd?.();\n\n    this.logger.info('Session ended');\n\n    // Show \"Session Ending\" modal, then redirect after 3 seconds\n    if (typeof window !== 'undefined') {\n      // Create modal if it doesn't exist\n      if (!this.modal) {\n        this.modal = new WarningModal(\n          this.config.themeMode || 'light',\n          this.config.customStyles\n        );\n      }\n\n      // Show ending message with redirect callback\n      this.modal.showEndingMessage(() => {\n        window.location.href = this.config.marketplaceUrl;\n      }, 3000); // 3 second delay\n    }\n  }\n\n  /**\n   * Show warning modal\n   */\n  private showWarningModal(remainingSeconds: number): void {\n    if (!this.modal) {\n      this.modal = new WarningModal(\n        this.config.themeMode || 'light',\n        this.config.customStyles\n      );\n    }\n\n    this.modal.show({\n      remainingSeconds,\n      onExtend: async () => {\n        // Try to extend session via API\n        try {\n          await this.extendSession(15); // Extend by 15 minutes\n          this.modal?.hide();\n          this.logger.log('Session extended successfully from modal');\n        } catch (error) {\n          // If extension fails (likely insufficient tokens), show ending modal then redirect to marketplace\n          this.logger.error('Extension failed, redirecting to marketplace:', error);\n          const marketplaceUrl = `${this.config.marketplaceUrl}extend-session?sessionId=${this.sessionData?.sessionId}`;\n\n          // Show ending modal before redirect\n          if (typeof window !== 'undefined') {\n            if (!this.modal) {\n              this.modal = new WarningModal(\n                this.config.themeMode || 'light',\n                this.config.customStyles\n              );\n            }\n            this.modal.showEndingMessage(() => {\n              window.location.href = marketplaceUrl;\n            }, 3000);\n          }\n        }\n      },\n      onEnd: () => {\n        // endSession() handles cleanup and redirect\n        this.endSession();\n      },\n    });\n  }\n\n  /**\n   * Get current session data\n   */\n  getSessionData(): SessionData | null {\n    return this.sessionData;\n  }\n\n  /**\n   * Get remaining time\n   */\n  getRemainingTime(): number {\n    return this.timer?.getRemainingSeconds() ?? 0;\n  }\n\n  /**\n   * Get formatted time (MM:SS)\n   */\n  getFormattedTime(): string {\n    return this.timer?.getFormattedTime() ?? '0:00';\n  }\n\n  /**\n   * Get formatted time with hours (HH:MM:SS)\n   */\n  getFormattedTimeWithHours(): string {\n    return this.timer?.getFormattedTimeWithHours() ?? '0:00:00';\n  }\n\n  /**\n   * Check if timer is running\n   */\n  isTimerRunning(): boolean {\n    return this.timer?.isRunning() ?? false;\n  }\n\n  /**\n   * Cleanup and destroy SDK instance\n   */\n  destroy(): void {\n    this.logger.info('Destroying SDK instance...');\n    this.timer?.stop();\n    this.heartbeat?.stop();\n    this.tabSync?.destroy();\n    this.modal?.hide();\n\n    // Clear JWT from storage\n    if (typeof sessionStorage !== 'undefined') {\n      sessionStorage.removeItem('gw_marketplace_jwt');\n      this.logger.log('JWT token cleared from storage');\n    }\n\n    this.sessionData = null;\n    this.jwtToken = null;\n  }\n}\n","import { ThemeMode } from '../types';\nimport { getTheme, Theme } from '../styles/theme';\n\n/**\n * Session Header Component\n * Compact header widget showing session timer with extend/end controls\n */\nexport class SessionHeader {\n  private container: HTMLDivElement | null = null;\n  private theme: Theme;\n  private updateInterval: number | null = null;\n  private timeDisplay: HTMLElement | null = null;\n  private getTimeCallback: (() => string) | undefined;\n  private onExtendCallback: (() => void) | undefined;\n  private onEndCallback: (() => void) | undefined;\n  private mounted: boolean = false;\n\n  constructor(themeMode: ThemeMode = 'auto') {\n    const prefersDark = themeMode === 'dark' || (themeMode === 'auto' && this.detectDarkMode());\n    this.theme = getTheme(prefersDark);\n  }\n\n  private detectDarkMode(): boolean {\n    if (typeof window !== 'undefined' && window.matchMedia) {\n      return window.matchMedia('(prefers-color-scheme: dark)').matches;\n    }\n    return false;\n  }\n\n  /**\n   * Mount the session header to a DOM element\n   * @param targetElement - Element to mount to (or selector string)\n   * @param options - Configuration options\n   */\n  mount(\n    targetElement: HTMLElement | string,\n    options: {\n      getTime: () => string;\n      onExtend?: () => void;\n      onEnd?: () => void;\n      position?: 'left' | 'center' | 'right';\n    }\n  ): void {\n    // Unmount if already mounted\n    if (this.mounted) {\n      this.unmount();\n    }\n\n    // Get target element\n    const target =\n      typeof targetElement === 'string'\n        ? document.querySelector<HTMLElement>(targetElement)\n        : targetElement;\n\n    if (!target) {\n      console.error('[SessionHeader] Mount target not found');\n      return;\n    }\n\n    this.getTimeCallback = options.getTime;\n    this.onExtendCallback = options.onExtend;\n    this.onEndCallback = options.onEnd;\n\n    // Create container\n    this.container = document.createElement('div');\n    this.container.id = 'gw-session-header';\n\n    const position = options.position || 'right';\n    const justifyContent =\n      position === 'left' ? 'flex-start' :\n      position === 'center' ? 'center' :\n      'flex-end';\n\n    this.container.style.cssText = `\n      display: flex;\n      align-items: center;\n      justify-content: ${justifyContent};\n      gap: ${this.theme.spacing.gap.md};\n      padding: ${this.theme.spacing.padding.sm} ${this.theme.spacing.padding.md};\n      background-color: ${this.theme.colors.card};\n      border: 1px solid ${this.theme.colors.border};\n      border-radius: ${this.theme.spacing.borderRadius.md};\n      font-family: ${this.theme.typography.fontFamily};\n      box-shadow: 0 1px 3px rgba(0, 0, 0, 0.1);\n    `;\n\n    // Create timer display\n    const timerWrapper = document.createElement('div');\n    timerWrapper.style.cssText = `\n      display: flex;\n      align-items: center;\n      gap: ${this.theme.spacing.gap.sm};\n      color: ${this.theme.colors.foreground};\n      font-size: ${this.theme.typography.fontSize.sm};\n      font-weight: ${this.theme.typography.fontWeight.medium};\n    `;\n\n    const clockIcon = document.createElement('span');\n    clockIcon.textContent = '⏱️';\n    clockIcon.style.fontSize = this.theme.typography.fontSize.base;\n\n    this.timeDisplay = document.createElement('span');\n    this.timeDisplay.id = 'gw-session-time';\n    this.timeDisplay.textContent = this.getTimeCallback?.() || '--:--';\n    this.timeDisplay.style.cssText = `\n      font-variant-numeric: tabular-nums;\n      min-width: 50px;\n      text-align: center;\n    `;\n\n    timerWrapper.appendChild(clockIcon);\n    timerWrapper.appendChild(this.timeDisplay);\n    this.container.appendChild(timerWrapper);\n\n    // Create button container\n    const buttonContainer = document.createElement('div');\n    buttonContainer.style.cssText = `\n      display: flex;\n      gap: ${this.theme.spacing.gap.sm};\n    `;\n\n    // Extend button (if callback provided)\n    if (this.onExtendCallback) {\n      const extendBtn = document.createElement('button');\n      extendBtn.textContent = 'Extend';\n      extendBtn.style.cssText = `\n        padding: ${this.theme.spacing.padding.sm};\n        background-color: ${this.theme.colors.success};\n        color: ${this.theme.colors.successForeground};\n        border: none;\n        border-radius: ${this.theme.spacing.borderRadius.sm};\n        font-size: ${this.theme.typography.fontSize.sm};\n        font-weight: ${this.theme.typography.fontWeight.medium};\n        font-family: ${this.theme.typography.fontFamily};\n        cursor: pointer;\n        transition: opacity 0.2s;\n      `;\n      extendBtn.addEventListener('mouseenter', () => {\n        extendBtn.style.opacity = '0.9';\n      });\n      extendBtn.addEventListener('mouseleave', () => {\n        extendBtn.style.opacity = '1';\n      });\n      extendBtn.addEventListener('click', () => {\n        this.onExtendCallback?.();\n      });\n      buttonContainer.appendChild(extendBtn);\n    }\n\n    // End button (if callback provided)\n    if (this.onEndCallback) {\n      const endBtn = document.createElement('button');\n      endBtn.textContent = 'End';\n      endBtn.style.cssText = `\n        padding: ${this.theme.spacing.padding.sm};\n        background-color: ${this.theme.colors.secondary};\n        color: ${this.theme.colors.secondaryForeground};\n        border: 1px solid ${this.theme.colors.border};\n        border-radius: ${this.theme.spacing.borderRadius.sm};\n        font-size: ${this.theme.typography.fontSize.sm};\n        font-weight: ${this.theme.typography.fontWeight.medium};\n        font-family: ${this.theme.typography.fontFamily};\n        cursor: pointer;\n        transition: opacity 0.2s;\n      `;\n      endBtn.addEventListener('mouseenter', () => {\n        endBtn.style.opacity = '0.9';\n      });\n      endBtn.addEventListener('mouseleave', () => {\n        endBtn.style.opacity = '1';\n      });\n      endBtn.addEventListener('click', () => {\n        this.onEndCallback?.();\n      });\n      buttonContainer.appendChild(endBtn);\n    }\n\n    if (buttonContainer.children.length > 0) {\n      this.container.appendChild(buttonContainer);\n    }\n\n    // Mount to target\n    target.appendChild(this.container);\n    this.mounted = true;\n\n    // Start updating time display\n    this.startUpdating();\n  }\n\n  /**\n   * Start updating the time display\n   */\n  private startUpdating(): void {\n    if (this.updateInterval) {\n      clearInterval(this.updateInterval);\n    }\n\n    this.updateInterval = window.setInterval(() => {\n      if (this.timeDisplay && this.getTimeCallback) {\n        const newTime = this.getTimeCallback();\n        this.timeDisplay.textContent = newTime;\n\n        // Change color if warning state (< 5 minutes = MM:SS where MM < 05)\n        const [minutes] = newTime.split(':').map(Number);\n        if (!isNaN(minutes) && minutes < 5) {\n          this.timeDisplay.style.color = this.theme.colors.destructive;\n          this.timeDisplay.style.fontWeight = this.theme.typography.fontWeight.bold;\n        } else {\n          this.timeDisplay.style.color = this.theme.colors.foreground;\n          this.timeDisplay.style.fontWeight = this.theme.typography.fontWeight.medium;\n        }\n      }\n    }, 1000);\n  }\n\n  /**\n   * Unmount and cleanup the session header\n   */\n  unmount(): void {\n    if (this.updateInterval) {\n      clearInterval(this.updateInterval);\n      this.updateInterval = null;\n    }\n\n    if (this.container && this.container.parentNode) {\n      this.container.parentNode.removeChild(this.container);\n    }\n\n    this.container = null;\n    this.timeDisplay = null;\n    this.mounted = false;\n  }\n\n  /**\n   * Check if component is mounted\n   */\n  isMounted(): boolean {\n    return this.mounted;\n  }\n\n  /**\n   * Update the theme\n   */\n  updateTheme(themeMode: ThemeMode): void {\n    const prefersDark = themeMode === 'dark' || (themeMode === 'auto' && this.detectDarkMode());\n    this.theme = getTheme(prefersDark);\n\n    // Re-mount with new theme if currently mounted\n    if (this.mounted && this.container && this.container.parentElement) {\n      const parent = this.container.parentElement;\n      const options = {\n        getTime: this.getTimeCallback!,\n        onExtend: this.onExtendCallback,\n        onEnd: this.onEndCallback,\n      };\n      this.unmount();\n      this.mount(parent, options);\n    }\n  }\n}\n"],"names":["SDKError","Error","constructor","message","code","statusCode","super","this","name","captureStackTrace","JWTParser","decode","token","parts","split","length","payload","decoded","base64UrlDecode","JSON","parse","error","decodeHeader","header","extractClaim","claim","isExpired","exp","Date","now","getTimeRemaining","remaining","Math","floor","max","str","base64","replace","padding","repeat","Buffer","from","toString","atob","encoder","TextEncoder","decoder","TextDecoder","input","Uint8Array","fromBase64","alphabet","encoded","binary","bytes","i","charCodeAt","decodeBase64","TypeError","JOSEError","options","__publicField","JWTClaimValidationFailed","reason","cause","JWTExpired","JOSEAlgNotAllowed","arguments","JOSENotSupported","JWSInvalid","JWTInvalid","JWKSInvalid","JWKSNoMatchingKey","JWKSMultipleMatchingKeys","_b","_a","Symbol","asyncIterator","JWKSTimeout","JWSSignatureVerificationFailed","unusable","prop","isAlgorithm","algorithm","getHashLength","hash","parseInt","slice","checkSigCryptoKey","key","alg","usage","expected","getNamedCurve","namedCurve","usages","includes","checkUsage","msg","actual","types","filter","Boolean","last","pop","join","withAlg","isCryptoKey","toStringTag","isKeyObject","isKeyLike","isObject","value","Object","prototype","call","getPrototypeOf","proto","importJWK$1","async","jwk","keyUsages","kty","priv","d","crv","subtleMapping","keyData","use","crypto","subtle","importKey","ext","key_ops","isJWK","cache","handleJWK","freeze","WeakMap","cached","get","cryptoKey","importJWK","set","normalizeKey","type","export","toCryptoKey","keyObject","isPublic","extractable","asymmetricKeyType","toUpperCase","startsWith","Map","asymmetricKeyDetails","handleKeyObject","err","format","k","tag","jwkMatchesOp","Array","isArray","expectedKeyOp","test","endsWith","checkKeyType","jwk.isJWK","jwk.isSecretJWK","invalidKeyInput","symmetricTypeCheck","jwk.isPrivateJWK","jwk.isPublicJWK","asymmetricTypeCheck","getSignKey","verify","signature","data","getVerifyKey","modulusLength","checkKeyLength","saltLength","subtleAlgorithm","flattenedVerify","jws","protected","parsedProt","protectedHeader","b64u","headers","sources","acc","parameters","keys","size","parameter","has","add","Set","isDisjoint","joseHeader","extensions","Err","recognizedDefault","recognizedOption","crit","some","recognized","entries","validateCrit","b64","algorithms","option","s","validateAlgorithms","resolvedKey","buffers","reduce","buf","buffer","concat","encode","result","unprotectedHeader","day","hour","REGEX","secs","matched","exec","parseFloat","numericDate","toLowerCase","round","minute","normalizeTyp","validateClaimsSet","encodedPayload","typ","requiredClaims","issuer","subject","audience","maxTokenAge","presenceCheck","push","reverse","iss","sub","audPayload","aud","audOption","bind","tolerance","clockTolerance","currentDate","date","getTime","iat","nbf","age","jwtVerify","jwt","verified","compactVerify","isJWKLike","LocalJWKSet","jwks","__privateAdd","_jwks","_cached","every","isJWKSLike","__privateSet","structuredClone","__privateGet","getKey","kid","getKtyFromAlg","candidates","candidate","importWithAlgCache","decodeBase64URL","oth","createLocalJWKSet","localJWKSet","defineProperties","enumerable","configurable","writable","USER_AGENT","navigator","userAgent","customFetch","jwksCache","RemoteJWKSet","url","_url","_timeoutDuration","_cooldownDuration","_cacheMaxAge","_jwksTimestamp","_pendingFetch","_headers","_customFetch","_local","_cache","URL","cacheMaxAge","href","timeoutDuration","cooldownDuration","Headers","append","uat","pendingFetch","coolingDown","fresh","reload","WebSocketPair","EdgeRuntime","signal","fetchImpl","fetch","response","method","redirect","catch","status","json","fetchJwks","AbortSignal","timeout","then","createRemoteJWKSet","remoteJWKSet","reloading","Logger","debug","prefix","log","args","info","warn","JWKSValidator","jwksUri","logger","expectedIssuer","expectedApplicationId","applicationId","claims","sessionId","userId","orgId","startTime","durationMinutes","errorMessage","errorName","updateJwksUri","TimerManager","durationSeconds","warningThresholdSeconds","events","intervalId","warningShown","remainingSeconds","warningThreshold","start","window","setInterval","onSessionWarning","stop","onSessionEnd","clearInterval","pause","resume","getRemainingSeconds","getFormattedTime","padStart","getFormattedTimeWithHours","hours","minutes","seconds","isRunning","hasWarningBeenShown","updateRemainingTime","HeartbeatManager","apiEndpoint","onSync","onError","heartbeatIntervalSeconds","failureCount","maxFailures","isEnabled","heartbeatInterval","sendHeartbeat","Authorization","body","stringify","timestamp","active","ok","remaining_seconds","sdkError","getFailureCount","updateInterval","wasRunning","TabSyncManager","onMessage","channel","isMaster","handleStorageEvent","event","storageKey","newValue","handleMessage","initialize","BroadcastChannel","onmessage","addEventListener","electMaster","broadcast","postMessage","localStorage","setItem","masterKey","getItem","masterTimestamp","removeItem","isMasterTab","destroy","close","removeEventListener","lightTheme","colors","background","foreground","card","cardForeground","popover","popoverForeground","primary","primaryForeground","secondary","secondaryForeground","muted","mutedForeground","accent","accentForeground","destructive","destructiveForeground","success","successForeground","border","ring","typography","fontFamily","fontSize","xs","sm","base","lg","xl","fontWeight","normal","medium","semibold","bold","lineHeight","tight","relaxed","spacing","borderRadius","md","gap","darkTheme","getTheme","prefersDark","matchMedia","matches","WarningModal","themeMode","customStyles","modal","legacyStyles","timeDisplay","initialSeconds","onEndCallback","detectDarkMode","theme","backgroundColor","textColor","primaryColor","show","hide","document","createElement","id","style","cssText","content","bgColor","onEnd","innerHTML","onExtend","appendChild","extendBtn","getElementById","dismissBtn","endBtn","querySelectorAll","forEach","button","opacity","outline","outlineOffset","elapsed","textContent","parentNode","removeChild","isShown","showEndingMessage","onComplete","durationMs","head","setTimeout","extractTokenFromURL","paramName","targetUrl","location","urlObj","searchParams","MarketplaceSDK","config","timer","heartbeat","tabSync","sessionData","jwtToken","endReason","autoStart","marketplaceUrl","enableHeartbeat","enableTabSync","pauseOnHidden","useBackendValidation","hooks","hookTimeoutMs","validator","on","handler","executeHook","hookName","hook","context","isStrict","Promise","_","reject","race","resolve","calculateActualDuration","ceil","JWT_STORAGE_KEY","sessionStorage","verifiedClaims","validateWithBackend","onSessionStart","startContext","email","expiresAt","warningContext","showWarningModal","endSession","handleTabSyncMessage","initializeVisibilityHandling","session_jwt","valid","hidden","pauseTimer","resumeTimer","startTimer","extendSession","additionalMinutes","additional_minutes","new_expires_at","onSessionExtend","extendContext","newExpiresAt","completeSession","actualUsageMinutes","actual_usage_minutes","metadata","endContext","actualDurationMinutes","getSessionData","getRemainingTime","isTimerRunning","container","mounted","mount","targetElement","unmount","target","querySelector","getTimeCallback","onExtendCallback","position","justifyContent","timerWrapper","clockIcon","buttonContainer","children","startUpdating","newTime","map","Number","isNaN","color","isMounted","updateTheme","parentElement","parent","trim"],"mappings":"0uBA2LO,MAAMA,UAAiBC,MAC5B,WAAAC,CACEC,EACOC,EACAC,GAEPC,MAAMH,GAHCI,KAAAH,KAAAA,EACAG,KAAAF,WAAAA,EAGPE,KAAKC,KAAO,WAGRP,MAAMQ,mBACRR,MAAMQ,kBAAkBF,KAAMP,EAElC,EClMK,MAAMU,EAMX,aAAOC,CAAOC,GACZ,IAAKA,GAA0B,iBAAVA,EACnB,MAAM,IAAIZ,EAAS,2BAA4B,iBAGjD,MAAMa,EAAQD,EAAME,MAAM,KAC1B,GAAqB,IAAjBD,EAAME,OACR,MAAM,IAAIf,EAAS,yCAA0C,mBAG/D,IACE,MAAMgB,EAAUH,EAAM,GAChBI,EAAUV,KAAKW,gBAAgBF,GACrC,OAAOG,KAAKC,MAAMH,EACpB,OAASI,GACP,MAAM,IAAIrB,EACR,iCAAiCqB,aAAiBpB,MAAQoB,EAAMlB,QAAU,kBAC1E,eAEJ,CACF,CAOA,mBAAOmB,CAAaV,GAClB,IAAKA,GAA0B,iBAAVA,EACnB,MAAM,IAAIZ,EAAS,2BAA4B,iBAGjD,MAAMa,EAAQD,EAAME,MAAM,KAC1B,GAAqB,IAAjBD,EAAME,OACR,MAAM,IAAIf,EAAS,yCAA0C,mBAG/D,IACE,MAAMuB,EAASV,EAAM,GACfI,EAAUV,KAAKW,gBAAgBK,GACrC,OAAOJ,KAAKC,MAAMH,EACpB,OAASI,GACP,MAAM,IAAIrB,EACR,gCAAgCqB,aAAiBpB,MAAQoB,EAAMlB,QAAU,kBACzE,eAEJ,CACF,CAQA,mBAAOqB,CAAsBZ,EAAea,GAE1C,OADgBlB,KAAKI,OAAOC,GACJa,EAC1B,CAOA,gBAAOC,CAAUd,GACf,MACMe,EADUpB,KAAKI,OAAOC,GACRe,IAEpB,QAAKA,GAKEC,KAAKC,OAAe,IAANF,CACvB,CAOA,uBAAOG,CAAiBlB,GACtB,MACMe,EADUpB,KAAKI,OAAOC,GACRe,IAEpB,IAAKA,EACH,OAAO,EAGT,MAAMI,EAAYJ,EAAMK,KAAKC,MAAML,KAAKC,MAAQ,KAChD,OAAOG,KAAKE,IAAI,EAAGH,EACrB,CAOA,sBAAeb,CAAgBiB,GAE7B,IAAIC,EAASD,EAAIE,QAAQ,KAAM,KAAKA,QAAQ,KAAM,KAGlD,MAAMC,EAAUF,EAAOrB,OAAS,EAC5BuB,IACFF,GAAU,IAAIG,OAAO,EAAID,IAG3B,IAEE,GAAsB,oBAAXE,OACT,OAAOA,OAAOC,KAAKL,EAAQ,UAAUM,SAAS,SAChD,GAA2B,oBAATC,KAChB,OAAOA,KAAKP,GAEZ,MAAM,IAAInC,MAAM,+BAEpB,OAASoB,GACP,MAAM,IAAIrB,EACR,0BACA,iBAEJ,CACF,ECxIK,MAAM4C,EAAU,IAAIC,YACdC,EAAU,IAAIC,YCCpB,SAASpC,EAAOqC,GACnB,GAAIC,WAAWC,WACX,OAAOD,WAAWC,WAA4B,iBAAVF,EAAqBA,EAAQF,EAAQnC,OAAOqC,GAAQ,CACpFG,SAAU,cAGlB,IAAIC,EAAUJ,EACVI,aAAmBH,aACnBG,EAAUN,EAAQnC,OAAOyC,IAE7BA,EAAUA,EAAQf,QAAQ,KAAM,KAAKA,QAAQ,KAAM,KAAKA,QAAQ,MAAO,IACvE,IACI,OCHD,SAAsBe,GACzB,GAAIH,WAAWC,WACX,OAAOD,WAAWC,WAAWE,GAEjC,MAAMC,EAASV,KAAKS,GACdE,EAAQ,IAAIL,WAAWI,EAAOtC,QACpC,IAAA,IAASwC,EAAI,EAAGA,EAAIF,EAAOtC,OAAQwC,IAC/BD,EAAMC,GAAKF,EAAOG,WAAWD,GAEjC,OAAOD,CACX,CDPeG,CAAaL,EACxB,CAAA,MAEI,MAAM,IAAIM,UAAU,oDACxB,CACJ,CEnBO,MAAMC,UAAkB1D,MAG3B,WAAAC,CAAYC,EAASyD,GACjBtD,MAAMH,EAASyD,GAFnBC,EAAAtD,KAAA,OAAO,oBAGHA,KAAKC,KAAOD,KAAKL,YAAYM,KAC7BP,MAAMQ,oBAAoBF,KAAMA,KAAKL,YACzC,EANA2D,EADSF,EACF,OAAO,oBAQX,MAAMG,UAAiCH,EAM1C,WAAAzD,CAAYC,EAASa,EAASS,EAAQ,cAAesC,EAAS,eAC1DzD,MAAMH,EAAS,CAAE6D,MAAO,CAAEvC,QAAOsC,SAAQ/C,aAL7C6C,EAAAtD,KAAA,OAAO,mCACPsD,EAAAtD,KAAA,SACAsD,EAAAtD,KAAA,UACAsD,EAAAtD,KAAA,WAGIA,KAAKkB,MAAQA,EACblB,KAAKwD,OAASA,EACdxD,KAAKS,QAAUA,CACnB,EAVA6C,EADSC,EACF,OAAO,mCAYX,MAAMG,UAAmBN,EAM5B,WAAAzD,CAAYC,EAASa,EAASS,EAAQ,cAAesC,EAAS,eAC1DzD,MAAMH,EAAS,CAAE6D,MAAO,CAAEvC,QAAOsC,SAAQ/C,aAL7C6C,EAAAtD,KAAA,OAAO,mBACPsD,EAAAtD,KAAA,SACAsD,EAAAtD,KAAA,UACAsD,EAAAtD,KAAA,WAGIA,KAAKkB,MAAQA,EACblB,KAAKwD,OAASA,EACdxD,KAAKS,QAAUA,CACnB,EAVA6C,EADSI,EACF,OAAO,mBAYX,MAAMC,UAA0BP,EAAhC,WAAAzD,GAAAI,SAAA6D,WAEHN,EAAAtD,KAAA,OAAO,2BAAA,EADPsD,EADSK,EACF,OAAO,4BAGX,MAAME,UAAyBT,EAA/B,WAAAzD,GAAAI,SAAA6D,WAEHN,EAAAtD,KAAA,OAAO,yBAAA,EADPsD,EADSO,EACF,OAAO,0BAcX,MAAMC,UAAmBV,EAAzB,WAAAzD,GAAAI,SAAA6D,WAEHN,EAAAtD,KAAA,OAAO,kBAAA,EADPsD,EADSQ,EACF,OAAO,mBAGX,MAAMC,UAAmBX,EAAzB,WAAAzD,GAAAI,SAAA6D,WAEHN,EAAAtD,KAAA,OAAO,kBAAA,EADPsD,EADSS,EACF,OAAO,mBAOX,MAAMC,UAAoBZ,EAA1B,WAAAzD,GAAAI,SAAA6D,WAEHN,EAAAtD,KAAA,OAAO,mBAAA,EADPsD,EADSU,EACF,OAAO,oBAGX,MAAMC,UAA0Bb,EAGnC,WAAAzD,CAAYC,EAAU,kDAAmDyD,GACrEtD,MAAMH,EAASyD,GAFnBC,EAAAtD,KAAA,OAAO,2BAGP,EAJAsD,EADSW,EACF,OAAO,4BAMX,MAAMC,UAAiCC,EAAAf,EACzCgB,EAAAC,OAAOC,cADkCH,GAI1C,WAAAxE,CAAYC,EAAU,uDAAwDyD,GAC1EtD,MAAMH,EAASyD,GAJnBC,EAAAtD,KAACoE,GAEDd,EAAAtD,KAAA,OAAO,kCAGP,EAJAsD,EAFSY,EAEF,OAAO,mCAMX,MAAMK,UAAoBnB,EAG7B,WAAAzD,CAAYC,EAAU,oBAAqByD,GACvCtD,MAAMH,EAASyD,GAFnBC,EAAAtD,KAAA,OAAO,mBAGP,EAJAsD,EADSiB,EACF,OAAO,oBAMX,MAAMC,UAAuCpB,EAGhD,WAAAzD,CAAYC,EAAU,gCAAiCyD,GACnDtD,MAAMH,EAASyD,GAFnBC,EAAAtD,KAAA,OAAO,wCAGP,ECjGJ,SAASyE,EAASxE,EAAMyE,EAAO,kBAC3B,OAAO,IAAIvB,UAAU,kDAAkDuB,aAAgBzE,IAC3F,CACA,SAAS0E,EAAYC,EAAW3E,GAC5B,OAAO2E,EAAU3E,OAASA,CAC9B,CACA,SAAS4E,EAAcC,GACnB,OAAOC,SAASD,EAAK7E,KAAK+E,MAAM,GAAI,GACxC,CAkBO,SAASC,EAAkBC,EAAKC,EAAKC,GACxC,OAAQD,GACJ,IAAK,QACL,IAAK,QACL,IAAK,QAAS,CACV,IAAKR,EAAYO,EAAIN,UAAW,QAC5B,MAAMH,EAAS,QACnB,MAAMY,EAAWN,SAASI,EAAIH,MAAM,GAAI,IAExC,GADeH,EAAcK,EAAIN,UAAUE,QAC5BO,EACX,MAAMZ,EAAS,OAAOY,IAAY,kBACtC,KACJ,CACA,IAAK,QACL,IAAK,QACL,IAAK,QAAS,CACV,IAAKV,EAAYO,EAAIN,UAAW,qBAC5B,MAAMH,EAAS,qBACnB,MAAMY,EAAWN,SAASI,EAAIH,MAAM,GAAI,IAExC,GADeH,EAAcK,EAAIN,UAAUE,QAC5BO,EACX,MAAMZ,EAAS,OAAOY,IAAY,kBACtC,KACJ,CACA,IAAK,QACL,IAAK,QACL,IAAK,QAAS,CACV,IAAKV,EAAYO,EAAIN,UAAW,WAC5B,MAAMH,EAAS,WACnB,MAAMY,EAAWN,SAASI,EAAIH,MAAM,GAAI,IAExC,GADeH,EAAcK,EAAIN,UAAUE,QAC5BO,EACX,MAAMZ,EAAS,OAAOY,IAAY,kBACtC,KACJ,CACA,IAAK,UACL,IAAK,QACD,IAAKV,EAAYO,EAAIN,UAAW,WAC5B,MAAMH,EAAS,WACnB,MAEJ,IAAK,YACL,IAAK,YACL,IAAK,YACD,IAAKE,EAAYO,EAAIN,UAAWO,GAC5B,MAAMV,EAASU,GACnB,MAEJ,IAAK,QACL,IAAK,QACL,IAAK,QAAS,CACV,IAAKR,EAAYO,EAAIN,UAAW,SAC5B,MAAMH,EAAS,SACnB,MAAMY,EAtElB,SAAuBF,GACnB,OAAQA,GACJ,IAAK,QACD,MAAO,QACX,IAAK,QACD,MAAO,QACX,IAAK,QACD,MAAO,QACX,QACI,MAAM,IAAIzF,MAAM,eAE5B,CA2D6B4F,CAAcH,GAE/B,GADeD,EAAIN,UAAUW,aACdF,EACX,MAAMZ,EAASY,EAAU,wBAC7B,KACJ,CACA,QACI,MAAM,IAAIlC,UAAU,8CAjEhC,SAAoB+B,EAAKE,GACrB,IAAcF,EAAIM,OAAOC,SAASL,GAC9B,MAAM,IAAIjC,UAAU,sEAAsEiC,KAElG,CA+DIM,CAAWR,EAAKE,EACpB,CCzFA,SAASxF,EAAQ+F,EAAKC,KAAWC,GAE7B,IADAA,EAAQA,EAAMC,OAAOC,UACXvF,OAAS,EAAG,CAClB,MAAMwF,EAAOH,EAAMI,MACnBN,GAAO,eAAeE,EAAMK,KAAK,aAAaF,IAClD,MAC0B,IAAjBH,EAAMrF,OACXmF,GAAO,eAAeE,EAAM,SAASA,EAAM,MAG3CF,GAAO,WAAWE,EAAM,MAa5B,OAXc,MAAVD,EACAD,GAAO,aAAaC,IAEG,mBAAXA,GAAyBA,EAAO3F,KAC5C0F,GAAO,sBAAsBC,EAAO3F,OAEb,iBAAX2F,GAAiC,MAAVA,GAC/BA,EAAOjG,aAAaM,OACpB0F,GAAO,4BAA4BC,EAAOjG,YAAYM,QAGvD0F,CACX,CFqEIrC,EADSkB,EACF,OAAO,yCEjEX,SAAS2B,EAAQhB,EAAKS,KAAWC,GACpC,OAAOjG,EAAQ,eAAeuF,uBAA0BS,KAAWC,EACvE,CCzBO,SAASO,EAAYlB,GACxB,MAAqC,cAA9BA,IAAMb,OAAOgC,YACxB,CACO,SAASC,EAAYpB,GACxB,MAAqC,cAA9BA,IAAMb,OAAOgC,YACxB,CACA,MAAAE,EAAgBrB,GACLkB,EAAYlB,IAAQoB,EAAYpB,GCT3C,MAAAsB,EAAgB/D,IACZ,GAHwB,iBADNgE,EAIAhE,IAH4B,OAAVgE,GAGkC,oBAA1CC,OAAOC,UAAUxE,SAASyE,KAAKnE,GACvD,OAAO,EALf,IAAsBgE,EAOlB,GAAqC,OAAjCC,OAAOG,eAAepE,GACtB,OAAO,EAEX,IAAIqE,EAAQrE,EACZ,KAAwC,OAAjCiE,OAAOG,eAAeC,IACzBA,EAAQJ,OAAOG,eAAeC,GAElC,OAAOJ,OAAOG,eAAepE,KAAWqE,GCmF5C,MAAAC,EAAeC,MAAOC,IAClB,IAAKA,EAAI9B,IACL,MAAM,IAAIhC,UAAU,4DAExB,MAAMyB,UAAEA,EAAAsC,UAAWA,GApGvB,SAAuBD,GACnB,IAAIrC,EACAsC,EACJ,OAAQD,EAAIE,KACR,IAAK,MACD,OAAQF,EAAI9B,KACR,IAAK,YACL,IAAK,YACL,IAAK,YACDP,EAAY,CAAE3E,KAAMgH,EAAI9B,KACxB+B,EAAYD,EAAIG,KAAO,CAAC,QAAU,CAAC,UACnC,MACJ,QACI,MAAM,IAAIvD,EAAiB,gEAEnC,MAEJ,IAAK,MACD,OAAQoD,EAAI9B,KACR,IAAK,QACL,IAAK,QACL,IAAK,QACDP,EAAY,CAAE3E,KAAM,UAAW6E,KAAM,OAAOmC,EAAI9B,IAAIH,OAAM,MAC1DkC,EAAYD,EAAII,EAAI,CAAC,QAAU,CAAC,UAChC,MACJ,IAAK,QACL,IAAK,QACL,IAAK,QACDzC,EAAY,CAAE3E,KAAM,oBAAqB6E,KAAM,OAAOmC,EAAI9B,IAAIH,OAAM,MACpEkC,EAAYD,EAAII,EAAI,CAAC,QAAU,CAAC,UAChC,MACJ,IAAK,WACL,IAAK,eACL,IAAK,eACL,IAAK,eACDzC,EAAY,CACR3E,KAAM,WACN6E,KAAM,OAAOC,SAASkC,EAAI9B,IAAIH,OAAM,GAAK,KAAO,KAEpDkC,EAAYD,EAAII,EAAI,CAAC,UAAW,aAAe,CAAC,UAAW,WAC3D,MACJ,QACI,MAAM,IAAIxD,EAAiB,gEAEnC,MAEJ,IAAK,KACD,OAAQoD,EAAI9B,KACR,IAAK,QACDP,EAAY,CAAE3E,KAAM,QAASsF,WAAY,SACzC2B,EAAYD,EAAII,EAAI,CAAC,QAAU,CAAC,UAChC,MACJ,IAAK,QACDzC,EAAY,CAAE3E,KAAM,QAASsF,WAAY,SACzC2B,EAAYD,EAAII,EAAI,CAAC,QAAU,CAAC,UAChC,MACJ,IAAK,QACDzC,EAAY,CAAE3E,KAAM,QAASsF,WAAY,SACzC2B,EAAYD,EAAII,EAAI,CAAC,QAAU,CAAC,UAChC,MACJ,IAAK,UACL,IAAK,iBACL,IAAK,iBACL,IAAK,iBACDzC,EAAY,CAAE3E,KAAM,OAAQsF,WAAY0B,EAAIK,KAC5CJ,EAAYD,EAAII,EAAI,CAAC,cAAgB,GACrC,MACJ,QACI,MAAM,IAAIxD,EAAiB,gEAEnC,MAEJ,IAAK,MACD,OAAQoD,EAAI9B,KACR,IAAK,UACL,IAAK,QACDP,EAAY,CAAE3E,KAAM,WACpBiH,EAAYD,EAAII,EAAI,CAAC,QAAU,CAAC,UAChC,MACJ,IAAK,UACL,IAAK,iBACL,IAAK,iBACL,IAAK,iBACDzC,EAAY,CAAE3E,KAAMgH,EAAIK,KACxBJ,EAAYD,EAAII,EAAI,CAAC,cAAgB,GACrC,MACJ,QACI,MAAM,IAAIxD,EAAiB,gEAEnC,MAEJ,QACI,MAAM,IAAIA,EAAiB,+DAEnC,MAAO,CAAEe,YAAWsC,YACxB,CAKqCK,CAAcN,GACzCO,EAAU,IAAKP,GAKrB,MAJoB,QAAhBO,EAAQL,YACDK,EAAQrC,WAEZqC,EAAQC,IACRC,OAAOC,OAAOC,UAAU,MAAOJ,EAAS5C,EAAWqC,EAAIY,OAAQZ,EAAII,IAAKJ,EAAIG,MAAsBH,EAAIa,SAAWZ,IC1GrH,SAASa,EAAM7C,GAClB,OAAOsB,EAAStB,IAA2B,iBAAZA,EAAIiC,GACvC,CCCA,IAAIa,EACJ,MAAMC,EAAYjB,MAAO9B,EAAK+B,EAAK9B,EAAK+C,GAAS,KAC7CF,IAAAA,MAAcG,SACd,IAAIC,EAASJ,EAAMK,IAAInD,GACvB,GAAIkD,IAASjD,GACT,OAAOiD,EAAOjD,GAElB,MAAMmD,QAAkBC,EAAU,IAAKtB,EAAK9B,QAS5C,OARI+C,GACAxB,OAAOwB,OAAOhD,GACbkD,EAIDA,EAAOjD,GAAOmD,EAHdN,EAAMQ,IAAItD,EAAK,CAAEC,CAACA,GAAMmD,IAKrBA,GA4HXG,EAAezB,MAAO9B,EAAKC,KACvB,GAAID,aAAexC,WACf,OAAOwC,EAEX,GAAIkB,EAAYlB,GACZ,OAAOA,EAEX,GAAIoB,EAAYpB,GAAM,CAClB,GAAiB,WAAbA,EAAIwD,KACJ,OAAOxD,EAAIyD,SAEf,GAAI,gBAAiBzD,GAAkC,mBAApBA,EAAI0D,YACnC,IACI,MAvIQ,EAACC,EAAW1D,KAChC6C,IAAAA,MAAcG,SACd,IAAIC,EAASJ,EAAMK,IAAIQ,GACvB,GAAIT,IAASjD,GACT,OAAOiD,EAAOjD,GAElB,MAAM2D,EAA8B,WAAnBD,EAAUH,KACrBK,IAAcD,EACpB,IAAIR,EACJ,GAAoC,WAAhCO,EAAUG,kBAAgC,CAC1C,OAAQ7D,GACJ,IAAK,UACL,IAAK,iBACL,IAAK,iBACL,IAAK,iBACD,MACJ,QACI,MAAM,IAAIhC,UAAU,8DAE5BmF,EAAYO,EAAUD,YAAYC,EAAUG,kBAAmBD,EAAaD,EAAW,GAAK,CAAC,cACjG,CACA,GAAoC,YAAhCD,EAAUG,kBAAiC,CAC3C,GAAY,UAAR7D,GAA2B,YAARA,EACnB,MAAM,IAAIhC,UAAU,8DAExBmF,EAAYO,EAAUD,YAAYC,EAAUG,kBAAmBD,EAAa,CACxED,EAAW,SAAW,QAE9B,CACA,OAAQD,EAAUG,mBACd,IAAK,YACL,IAAK,YACL,IAAK,YACD,GAAI7D,IAAQ0D,EAAUG,kBAAkBC,cACpC,MAAM,IAAI9F,UAAU,8DAExBmF,EAAYO,EAAUD,YAAYC,EAAUG,kBAAmBD,EAAa,CACxED,EAAW,SAAW,SAIlC,GAAoC,QAAhCD,EAAUG,kBAA6B,CACvC,IAAIlE,EACJ,OAAQK,GACJ,IAAK,WACDL,EAAO,QACP,MACJ,IAAK,QACL,IAAK,QACL,IAAK,eACDA,EAAO,UACP,MACJ,IAAK,QACL,IAAK,QACL,IAAK,eACDA,EAAO,UACP,MACJ,IAAK,QACL,IAAK,QACL,IAAK,eACDA,EAAO,UACP,MACJ,QACI,MAAM,IAAI3B,UAAU,8DAE5B,GAAIgC,EAAI+D,WAAW,YACf,OAAOL,EAAUD,YAAY,CACzB3I,KAAM,WACN6E,QACDiE,EAAaD,EAAW,CAAC,WAAa,CAAC,YAE9CR,EAAYO,EAAUD,YAAY,CAC9B3I,KAAMkF,EAAI+D,WAAW,MAAQ,UAAY,oBACzCpE,QACDiE,EAAa,CAACD,EAAW,SAAW,QAC3C,CACA,GAAoC,OAAhCD,EAAUG,kBAA4B,CACtC,MAKMzD,MALW4D,IAAI,CACjB,CAAC,aAAc,SACf,CAAC,YAAa,SACd,CAAC,YAAa,WAEMd,IAAIQ,EAAUO,sBAAsB7D,YAC5D,IAAKA,EACD,MAAM,IAAIpC,UAAU,8DAEZ,UAARgC,GAAkC,UAAfI,IACnB+C,EAAYO,EAAUD,YAAY,CAC9B3I,KAAM,QACNsF,cACDwD,EAAa,CAACD,EAAW,SAAW,UAE/B,UAAR3D,GAAkC,UAAfI,IACnB+C,EAAYO,EAAUD,YAAY,CAC9B3I,KAAM,QACNsF,cACDwD,EAAa,CAACD,EAAW,SAAW,UAE/B,UAAR3D,GAAkC,UAAfI,IACnB+C,EAAYO,EAAUD,YAAY,CAC9B3I,KAAM,QACNsF,cACDwD,EAAa,CAACD,EAAW,SAAW,UAEvC3D,EAAI+D,WAAW,aACfZ,EAAYO,EAAUD,YAAY,CAC9B3I,KAAM,OACNsF,cACDwD,EAAaD,EAAW,GAAK,CAAC,eAEzC,CACA,IAAKR,EACD,MAAM,IAAInF,UAAU,8DAQxB,OANKiF,EAIDA,EAAOjD,GAAOmD,EAHdN,EAAMQ,IAAIK,EAAW,CAAE1D,CAACA,GAAMmD,IAK3BA,GAeYe,CAAgBnE,EAAKC,EAChC,OACOmE,GACH,GAAIA,aAAenG,UACf,MAAMmG,CAEd,CAEJ,IAAIrC,EAAM/B,EAAIyD,OAAO,CAAEY,OAAQ,QAC/B,OAAOtB,EAAU/C,EAAK+B,EAAK9B,EAC/B,CACA,GAAI4C,EAAM7C,GACN,OAAIA,EAAIsE,EACGpJ,EAAO8E,EAAIsE,GAEfvB,EAAU/C,EAAKA,EAAKC,GAAK,GAEpC,MAAM,IAAIzF,MAAM,gBC3Kd+J,GAAOvE,GAAQA,IAAMb,OAAOgC,aAC5BqD,GAAe,CAACvE,EAAKD,EAAKE,KAC5B,QAAgB,IAAZF,EAAIuC,IAAmB,CACvB,IAAIpC,EACJ,OAAQD,GACJ,IAAK,OACL,IAAK,SACDC,EAAW,MACX,MACJ,IAAK,UACL,IAAK,UACDA,EAAW,MAGnB,GAAIH,EAAIuC,MAAQpC,EACZ,MAAM,IAAIlC,UAAU,sDAAsDkC,kBAElF,CACA,QAAgB,IAAZH,EAAIC,KAAqBD,EAAIC,MAAQA,EACrC,MAAM,IAAIhC,UAAU,sDAAsDgC,mBAE9E,GAAIwE,MAAMC,QAAQ1E,EAAI4C,SAAU,CAC5B,IAAI+B,EACJ,QAAQ,GACJ,IAAmC,WAAVzE,EACzB,IAAa,QAARD,EACL,KAAKA,EAAIM,SAAS,UACdoE,EAAgBzE,EAChB,MACJ,KAAKD,EAAI+D,WAAW,SAChBW,EAAgB,aAChB,MACJ,IAAK,0BAA0BC,KAAK3E,GAE5B0E,GADC1E,EAAIM,SAAS,QAAUN,EAAI4E,SAAS,MACa,YAGlC3E,EAEpB,MACJ,IAAe,YAAVA,EACDyE,EAAgB,UAChB,MACJ,IAAe,YAAVzE,EACDyE,EAAgB1E,EAAI+D,WAAW,OAAS,YAAc,aAG9D,GAAIW,IAA4D,IAA3C3E,EAAI4C,SAASrC,WAAWoE,GACzC,MAAM,IAAI1G,UAAU,+DAA+D0G,kBAE3F,CACA,OAAO,GA2DXG,GAAe,CAAC7E,EAAKD,EAAKE,KACJD,EAAI+D,WAAW,OACrB,QAAR/D,GACAA,EAAI+D,WAAW,UACf,oCAAoCY,KAAK3E,IACzC,0CAA0C2E,KAAK3E,GA9D5B,EAACA,EAAKD,EAAKE,KAClC,KAAIF,aAAexC,YAAnB,CAEA,GAAIuH,EAAU/E,GAAM,CAChB,GFjDD,SAAqBA,GACxB,MAAmB,QAAZA,EAAIiC,KAAkC,iBAAVjC,EAAIsE,CAC3C,CE+CYU,CAAgBhF,IAAQwE,GAAavE,EAAKD,EAAKE,GAC/C,OACJ,MAAM,IAAIjC,UAAU,0HACxB,CACA,IAAKoD,EAAUrB,GACX,MAAM,IAAI/B,UAAUgH,EAAgBhF,EAAKD,EAAK,YAAa,YAAa,eAAgB,eAE5F,GAAiB,WAAbA,EAAIwD,KACJ,MAAM,IAAIvF,UAAU,GAAGsG,GAAIvE,iEAV3B,GA8DAkF,CAAmBjF,EAAKD,EAAKE,GAjDT,EAACD,EAAKD,EAAKE,KACnC,GAAI6E,EAAU/E,GACV,OAAQE,GACJ,IAAK,UACL,IAAK,OACD,GFxET,SAAsBF,GACzB,MAAoB,QAAZA,EAAIiC,MACM,QAAZjC,EAAIiC,KAAqC,iBAAbjC,EAAIkC,MAAuC,iBAAVlC,EAAImC,EAC3E,CEqEoBgD,CAAiBnF,IAAQwE,GAAavE,EAAKD,EAAKE,GAChD,OACJ,MAAM,IAAIjC,UAAU,oDACxB,IAAK,UACL,IAAK,SACD,GFzET,SAAqB+B,GACxB,MAAmB,QAAZA,EAAIiC,UAAkC,IAAVjC,EAAImC,QAAyC,IAAbnC,EAAIkC,IAC3E,CEuEoBkD,CAAgBpF,IAAQwE,GAAavE,EAAKD,EAAKE,GAC/C,OACJ,MAAM,IAAIjC,UAAU,mDAGhC,IAAKoD,EAAUrB,GACX,MAAM,IAAI/B,UAAUgH,EAAgBhF,EAAKD,EAAK,YAAa,YAAa,iBAE5E,GAAiB,WAAbA,EAAIwD,KACJ,MAAM,IAAIvF,UAAU,GAAGsG,GAAIvE,uEAE/B,GAAiB,WAAbA,EAAIwD,KACJ,OAAQtD,GACJ,IAAK,OACD,MAAM,IAAIjC,UAAU,GAAGsG,GAAIvE,2EAC/B,IAAK,UACD,MAAM,IAAI/B,UAAU,GAAGsG,GAAIvE,8EAKvC,GAAiB,YAAbA,EAAIwD,KACJ,OAAQtD,GACJ,IAAK,SACD,MAAM,IAAIjC,UAAU,GAAGsG,GAAIvE,4EAC/B,IAAK,UACD,MAAM,IAAI/B,UAAU,GAAGsG,GAAIvE,+EAgBnCqF,CAAoBpF,EAAKD,EAAKE,ICzHtCoF,GAAexD,MAAO7B,EAAKD,EAAKE,KAC5B,GAAIF,aAAexC,WAAY,CAC3B,IAAKyC,EAAI+D,WAAW,MAChB,MAAM,IAAI/F,UPoBP,EAACyC,KAAWC,IAChBjG,EAAQ,eAAgBgG,KAAWC,GOrBdsE,CAAgBjF,EAAK,YAAa,YAAa,iBAEvE,OAAOwC,OAAOC,OAAOC,UAAU,MAAO1C,EAAK,CAAEJ,KAAM,OAAOK,EAAIH,OAAM,KAAO/E,KAAM,SAAU,EAAO,CAACmF,GACvG,CAEA,OADAH,EAAkBC,EAAKC,EAAKC,GACrBF,GCPXuF,GAAezD,MAAO7B,EAAKD,EAAKwF,EAAWC,KACvC,MAAMrC,QAAkBsC,GAAazF,EAAKD,EAAK,UCJpC,EAACC,EAAKD,KACjB,GAAIC,EAAI+D,WAAW,OAAS/D,EAAI+D,WAAW,MAAO,CAC9C,MAAM2B,cAAEA,GAAkB3F,EAAIN,UAC9B,GAA6B,iBAAlBiG,GAA8BA,EAAgB,KACrD,MAAM,IAAI1H,UAAU,GAAGgC,yDAE/B,GDDA2F,CAAe3F,EAAKmD,GACpB,MAAM1D,EELK,EAACO,EAAKP,KACjB,MAAME,EAAO,OAAOK,EAAIH,YACxB,OAAQG,GACJ,IAAK,QACL,IAAK,QACL,IAAK,QACD,MAAO,CAAEL,OAAM7E,KAAM,QACzB,IAAK,QACL,IAAK,QACL,IAAK,QACD,MAAO,CAAE6E,OAAM7E,KAAM,UAAW8K,WAAYhG,SAASI,EAAIH,OAAM,GAAK,KAAO,GAC/E,IAAK,QACL,IAAK,QACL,IAAK,QACD,MAAO,CAAEF,OAAM7E,KAAM,qBACzB,IAAK,QACL,IAAK,QACL,IAAK,QACD,MAAO,CAAE6E,OAAM7E,KAAM,QAASsF,WAAYX,EAAUW,YACxD,IAAK,UACL,IAAK,QACD,MAAO,CAAEtF,KAAM,WACnB,IAAK,YACL,IAAK,YACL,IAAK,YACD,MAAO,CAAEA,KAAMkF,GACnB,QACI,MAAM,IAAItB,EAAiB,OAAOsB,kEFtBxB6F,CAAgB7F,EAAKmD,EAAU1D,WACjD,IACI,aAAa8C,OAAOC,OAAO8C,OAAO7F,EAAW0D,EAAWoC,EAAWC,EACvE,CAAA,MAEI,OAAO,CACX,GGFG3D,eAAeiE,GAAgBC,EAAKhG,EAAK7B,GAC5C,IAAKmD,EAAS0E,GACV,MAAM,IAAIpH,EAAW,mCAEzB,QAAsB,IAAlBoH,EAAIC,gBAA0C,IAAfD,EAAIlK,OACnC,MAAM,IAAI8C,EAAW,yEAEzB,QAAsB,IAAlBoH,EAAIC,WAAoD,iBAAlBD,EAAIC,UAC1C,MAAM,IAAIrH,EAAW,uCAEzB,QAAoB,IAAhBoH,EAAIzK,QACJ,MAAM,IAAIqD,EAAW,uBAEzB,GAA6B,iBAAlBoH,EAAIR,UACX,MAAM,IAAI5G,EAAW,2CAEzB,QAAmB,IAAfoH,EAAIlK,SAAyBwF,EAAS0E,EAAIlK,QAC1C,MAAM,IAAI8C,EAAW,yCAEzB,IAAIsH,EAAa,CAAA,EACjB,GAAIF,EAAIC,UACJ,IACI,MAAME,EAAkBC,EAAKJ,EAAIC,WACjCC,EAAaxK,KAAKC,MAAM0B,EAAQnC,OAAOiL,GAC3C,CAAA,MAEI,MAAM,IAAIvH,EAAW,kCACzB,CAEJ,ICvCW,KAAIyH,KACf,MAAMC,EAAUD,EAAQzF,OAAOC,SAC/B,GAAuB,IAAnByF,EAAQhL,QAAmC,IAAnBgL,EAAQhL,OAChC,OAAO,EAEX,IAAIiL,EACJ,IAAA,MAAWzK,KAAUwK,EAAS,CAC1B,MAAME,EAAahF,OAAOiF,KAAK3K,GAC/B,GAAKyK,GAAoB,IAAbA,EAAIG,KAIhB,IAAA,MAAWC,KAAaH,EAAY,CAChC,GAAID,EAAIK,IAAID,GACR,OAAO,EAEXJ,EAAIM,IAAIF,EACZ,MARIJ,EAAM,IAAIO,IAAIN,EAStB,CACA,OAAO,GDoBFO,CAAWb,EAAYF,EAAIlK,QAC5B,MAAM,IAAI8C,EAAW,6EAEzB,MAAMoI,EAAa,IACZd,KACAF,EAAIlK,QAELmL,EE7CK,EAACC,EAAKC,EAAmBC,EAAkBjB,EAAiBa,KACvE,QAAwB,IAApBA,EAAWK,WAAgD,IAA1BlB,GAAiBkB,KAClD,MAAM,IAAIH,EAAI,kEAElB,IAAKf,QAA4C,IAAzBA,EAAgBkB,KACpC,WAAWP,IAEf,IAAKrC,MAAMC,QAAQyB,EAAgBkB,OACC,IAAhClB,EAAgBkB,KAAK/L,QACrB6K,EAAgBkB,KAAKC,KAAM/J,GAA2B,iBAAVA,GAAuC,IAAjBA,EAAMjC,QACxE,MAAM,IAAI4L,EAAI,yFAElB,IAAIK,EAEAA,OADqB,IAArBH,EACa,IAAInD,IAAI,IAAIzC,OAAOgG,QAAQJ,MAAsBD,EAAkBK,YAGnEL,EAEjB,IAAA,MAAWR,KAAaR,EAAgBkB,KAAM,CAC1C,IAAKE,EAAWX,IAAID,GAChB,MAAM,IAAIhI,EAAiB,+BAA+BgI,wBAE9D,QAA8B,IAA1BK,EAAWL,GACX,MAAM,IAAIO,EAAI,+BAA+BP,iBAEjD,GAAIY,EAAWpE,IAAIwD,SAA6C,IAA/BR,EAAgBQ,GAC7C,MAAM,IAAIO,EAAI,+BAA+BP,iCAErD,CACA,OAAO,IAAIG,IAAIX,EAAgBkB,OFeZI,CAAa7I,EAAY,IAAIqF,IAAI,CAAC,CAAC,OAAO,KAAS9F,GAASkJ,KAAMnB,EAAYc,GACjG,IAAIU,GAAM,EACV,GAAIT,EAAWL,IAAI,SACfc,EAAMxB,EAAWwB,IACE,kBAARA,GACP,MAAM,IAAI9I,EAAW,2EAG7B,MAAMqB,IAAEA,GAAQ+G,EAChB,GAAmB,iBAAR/G,IAAqBA,EAC5B,MAAM,IAAIrB,EAAW,6DAEzB,MAAM+I,EAAaxJ,GG1DR,EAACyJ,EAAQD,KACpB,QAAmB,IAAfA,KACElD,MAAMC,QAAQiD,IAAeA,EAAWL,KAAMO,GAAmB,iBAANA,IAC7D,MAAM,IAAI5J,UAAU,IAAI2J,yCAE5B,GAAKD,EAGL,OAAO,IAAIb,IAAIa,IHkDeG,CAAmB,aAAc3J,EAAQwJ,YACvE,GAAIA,IAAeA,EAAWf,IAAI3G,GAC9B,MAAM,IAAIxB,EAAkB,wDAEhC,GAAIiJ,GACA,GAA2B,iBAAhB1B,EAAIzK,QACX,MAAM,IAAIqD,EAAW,qCAE7B,GACgC,iBAAhBoH,EAAIzK,WAA0ByK,EAAIzK,mBAAmBiC,YACjE,MAAM,IAAIoB,EAAW,0DAEzB,IAAImJ,GAAc,EACC,mBAAR/H,IACPA,QAAYA,EAAIkG,EAAYF,GAC5B+B,GAAc,GAElBjD,GAAa7E,EAAKD,EAAK,UACvB,MAAMyF,EhBzEH,YAAmBuC,GACtB,MAAMtB,EAAOsB,EAAQC,OAAO,CAAC1B,GAAOjL,YAAaiL,EAAMjL,EAAQ,GACzD4M,EAAM,IAAI1K,WAAWkJ,GAC3B,IAAI5I,EAAI,EACR,IAAA,MAAWqK,KAAUH,EACjBE,EAAI5E,IAAI6E,EAAQrK,GAChBA,GAAKqK,EAAO7M,OAEhB,OAAO4M,CACX,CgBgEiBE,CAAOjL,EAAQkL,OAAOrC,EAAIC,WAAa,IAAK9I,EAAQkL,OAAO,KAA6B,iBAAhBrC,EAAIzK,QAAuB4B,EAAQkL,OAAOrC,EAAIzK,SAAWyK,EAAIzK,SAClJ,IAAIiK,EACJ,IACIA,EAAYY,EAAKJ,EAAIR,UACzB,CAAA,MAEI,MAAM,IAAI5G,EAAW,2CACzB,CACA,MAAM0F,QAAUf,EAAavD,EAAKC,GAElC,WADuBsF,GAAOtF,EAAKqE,EAAGkB,EAAWC,IAE7C,MAAM,IAAInG,EAEd,IAAI/D,EACJ,GAAImM,EACA,IACInM,EAAU6K,EAAKJ,EAAIzK,QACvB,CAAA,MAEI,MAAM,IAAIqD,EAAW,yCACzB,MAGArD,EAD4B,iBAAhByK,EAAIzK,QACN4B,EAAQkL,OAAOrC,EAAIzK,SAGnByK,EAAIzK,QAElB,MAAM+M,EAAS,CAAE/M,WAOjB,YANsB,IAAlByK,EAAIC,YACJqC,EAAOnC,gBAAkBD,QAEV,IAAfF,EAAIlK,SACJwM,EAAOC,kBAAoBvC,EAAIlK,QAE/BiM,EACO,IAAKO,EAAQtI,IAAKsE,GAEtBgE,CACX,CInHA,MCEME,GAAMC,MAGNC,GAAQ,oIACdC,GAAgBjM,IACZ,MAAMkM,EAAUF,GAAMG,KAAKnM,GAC3B,IAAKkM,GAAYA,EAAQ,IAAMA,EAAQ,GACnC,MAAM,IAAI3K,UAAU,8BAExB,MAAMsD,EAAQuH,WAAWF,EAAQ,IAEjC,IAAIG,EACJ,OAFaH,EAAQ,GAAGI,eAGpB,IAAK,MACL,IAAK,OACL,IAAK,SACL,IAAK,UACL,IAAK,IACDD,EAAcxM,KAAK0M,MAAM1H,GACzB,MACJ,IAAK,SACL,IAAK,UACL,IAAK,MACL,IAAK,OACL,IAAK,IACDwH,EAAcxM,KAAK0M,MA3BhB,GA2BsB1H,GACzB,MACJ,IAAK,OACL,IAAK,QACL,IAAK,KACL,IAAK,MACL,IAAK,IACDwH,EAAcxM,KAAK0M,MAjClBC,KAiCwB3H,GACzB,MACJ,IAAK,MACL,IAAK,OACL,IAAK,IACDwH,EAAcxM,KAAK0M,MAAM1H,EAAQiH,IACjC,MACJ,IAAK,OACL,IAAK,QACL,IAAK,IACDO,EAAcxM,KAAK0M,MAzClBT,OAyCwBjH,GACzB,MACJ,QACIwH,EAAcxM,KAAK0M,MA3ClBT,SA2CwBjH,GAGjC,MAAmB,MAAfqH,EAAQ,IAA6B,QAAfA,EAAQ,IACtBG,EAELA,GCzCLI,GAAgB5H,GACdA,EAAMhB,SAAS,KACRgB,EAAMyH,cAEV,eAAezH,EAAMyH,gBAWzB,SAASI,GAAkBjD,EAAiBkD,EAAgBlL,EAAU,CAAA,GACzE,IAAI5C,EACJ,IACIA,EAAUG,KAAKC,MAAM0B,EAAQnC,OAAOmO,GACxC,CAAA,MAEA,CACA,IAAK/H,EAAS/F,GACV,MAAM,IAAIsD,EAAW,kDAEzB,MAAMyK,IAAEA,GAAQnL,EAChB,GAAImL,IACgC,iBAAxBnD,EAAgBmD,KACpBH,GAAahD,EAAgBmD,OAASH,GAAaG,IACvD,MAAM,IAAIjL,EAAyB,oCAAqC9C,EAAS,MAAO,gBAE5F,MAAMgO,eAAEA,EAAiB,UAAIC,UAAQC,EAAAC,SAASA,EAAAC,YAAUA,GAAgBxL,EAClEyL,EAAgB,IAAIL,QACN,IAAhBI,GACAC,EAAcC,KAAK,YACN,IAAbH,GACAE,EAAcC,KAAK,YACP,IAAZJ,GACAG,EAAcC,KAAK,YACR,IAAXL,GACAI,EAAcC,KAAK,OACvB,IAAA,MAAW7N,KAAS,IAAI8K,IAAI8C,EAAcE,WACtC,KAAM9N,KAAST,GACX,MAAM,IAAI8C,EAAyB,qBAAqBrC,WAAgBT,EAASS,EAAO,WAGhG,GAAIwN,KACE/E,MAAMC,QAAQ8E,GAAUA,EAAS,CAACA,IAASjJ,SAAShF,EAAQwO,KAC9D,MAAM,IAAI1L,EAAyB,+BAAgC9C,EAAS,MAAO,gBAEvF,GAAIkO,GAAWlO,EAAQyO,MAAQP,EAC3B,MAAM,IAAIpL,EAAyB,+BAAgC9C,EAAS,MAAO,gBAEvF,GAAImO,IA/CuBO,EAgDA1O,EAAQ2O,IAhDIC,EAgDqB,iBAAbT,EAAwB,CAACA,GAAYA,IA/C1D,iBAAfO,EACAE,EAAU5J,SAAS0J,GAE1BxF,MAAMC,QAAQuF,IACPE,EAAU7C,KAAKR,IAAIrF,UAAUmF,IAAIwD,KAAK,IAAItD,IAAImD,OA4CrD,MAAM,IAAI5L,EAAyB,+BAAgC9C,EAAS,MAAO,gBAjD7D,IAAC0O,EAAYE,EAmDvC,IAAIE,EACJ,cAAelM,EAAQmM,gBACnB,IAAK,SACDD,EAAY1B,GAAKxK,EAAQmM,gBACzB,MACJ,IAAK,SACDD,EAAYlM,EAAQmM,eACpB,MACJ,IAAK,YACDD,EAAY,EACZ,MACJ,QACI,MAAM,IAAIpM,UAAU,sCAE5B,MAAMsM,YAAEA,GAAgBpM,EAClB/B,GFpFMoO,EEoFMD,GAAe,IAAIpO,KFpFhBI,KAAKC,MAAMgO,EAAKC,UAAY,MAAtC,IAACD,EEqFZ,SAAqB,IAAhBjP,EAAQmP,KAAqBf,IAAuC,iBAAhBpO,EAAQmP,IAC7D,MAAM,IAAIrM,EAAyB,+BAAgC9C,EAAS,MAAO,WAEvF,QAAoB,IAAhBA,EAAQoP,IAAmB,CAC3B,GAA2B,iBAAhBpP,EAAQoP,IACf,MAAM,IAAItM,EAAyB,+BAAgC9C,EAAS,MAAO,WAEvF,GAAIA,EAAQoP,IAAMvO,EAAMiO,EACpB,MAAM,IAAIhM,EAAyB,qCAAsC9C,EAAS,MAAO,eAEjG,CACA,QAAoB,IAAhBA,EAAQW,IAAmB,CAC3B,GAA2B,iBAAhBX,EAAQW,IACf,MAAM,IAAImC,EAAyB,+BAAgC9C,EAAS,MAAO,WAEvF,GAAIA,EAAQW,KAAOE,EAAMiO,EACrB,MAAM,IAAI7L,EAAW,qCAAsCjD,EAAS,MAAO,eAEnF,CACA,GAAIoO,EAAa,CACb,MAAMiB,EAAMxO,EAAMb,EAAQmP,IAE1B,GAAIE,EAAMP,GADyB,iBAAhBV,EAA2BA,EAAchB,GAAKgB,IAE7D,MAAM,IAAInL,EAAW,2DAA4DjD,EAAS,MAAO,gBAErG,GAAIqP,EAAM,EAAIP,EACV,MAAM,IAAIhM,EAAyB,gEAAiE9C,EAAS,MAAO,eAE5H,CACA,OAAOA,CACX,CChHOuG,eAAe+I,GAAUC,EAAK9K,EAAK7B,GACtC,MAAM4M,QCDHjJ,eAA6BkE,EAAKhG,EAAK7B,GAI1C,GAHI6H,aAAexI,aACfwI,EAAM3I,EAAQnC,OAAO8K,IAEN,iBAARA,EACP,MAAM,IAAIpH,EAAW,8CAEzB,MAAQ,EAAGuH,EAAiB,EAAG5K,EAAS,EAAGiK,EAAAlK,OAAWA,GAAW0K,EAAI3K,MAAM,KAC3E,GAAe,IAAXC,EACA,MAAM,IAAIsD,EAAW,uBAEzB,MAAMmM,QAAiBhF,GAAgB,CAAExK,UAAS0K,UAAWE,EAAiBX,aAAaxF,EAAK7B,GAC1FmK,EAAS,CAAE/M,QAASwP,EAASxP,QAAS4K,gBAAiB4E,EAAS5E,iBACtE,MAAmB,mBAARnG,EACA,IAAKsI,EAAQtI,IAAK+K,EAAS/K,KAE/BsI,CACX,CDhB2B0C,CAAcF,EAAK9K,EAAK7B,GAC/C,GAAI4M,EAAS5E,gBAAgBkB,MAAM9G,SAAS,SAA2C,IAAjCwK,EAAS5E,gBAAgBuB,IAC3E,MAAM,IAAI7I,EAAW,uCAEzB,MACMyJ,EAAS,CAAE/M,QADD6N,GAAkB2B,EAAS5E,gBAAiB4E,EAASxP,QAAS4C,GACpDgI,gBAAiB4E,EAAS5E,iBACpD,MAAmB,mBAARnG,EACA,IAAKsI,EAAQtI,IAAK+K,EAAS/K,KAE/BsI,CACX,CEUA,SAAS2C,GAAUjL,GACf,OAAOsB,EAAStB,EACpB,CACA,MAAMkL,GAGF,WAAAzQ,CAAY0Q,GACR,GAHJC,EAAAtQ,KAAAuQ,GACAD,EAAAtQ,KAAAwQ,MAAcrI,UAXlB,SAAoBkI,GAChB,OAAQA,GACY,iBAATA,GACP1G,MAAMC,QAAQyG,EAAK1E,OACnB0E,EAAK1E,KAAK8E,MAAMN,GACxB,CAQaO,CAAWL,GACZ,MAAM,IAAIrM,EAAY,8BAE1B2M,EAAA3Q,KAAKuQ,EAAQK,gBAAgBP,GACjC,CACA,IAAAA,GACI,OAAOQ,EAAA7Q,KAAKuQ,EAChB,CACA,YAAMO,CAAOzF,EAAiBhL,GAC1B,MAAM8E,IAAEA,MAAK4L,GAAQ,IAAK1F,KAAoBhL,GAAOW,QAC/CmG,EAtCd,SAAuBhC,GACnB,OAAuB,iBAARA,GAAoBA,EAAIH,MAAM,EAAG,IAC5C,IAAK,KACL,IAAK,KACD,MAAO,MACX,IAAK,KACD,MAAO,KACX,IAAK,KACD,MAAO,MACX,IAAK,KACD,MAAO,MACX,QACI,MAAM,IAAInB,EAAiB,kDAEvC,CAwBoBmN,CAAc7L,GACpB8L,EAAaJ,EAAA7Q,KAAKuQ,GAAM5E,KAAK7F,OAAQmB,IACvC,IAAIiK,EAAY/J,IAAQF,EAAIE,IAa5B,GAZI+J,GAA4B,iBAARH,IACpBG,EAAYH,IAAQ9J,EAAI8J,MAExBG,GAAiC,iBAAZjK,EAAI9B,KAA4B,QAARgC,IAC7C+J,EAAY/L,IAAQ8B,EAAI9B,KAExB+L,GAAgC,iBAAZjK,EAAIQ,MACxByJ,EAAwB,QAAZjK,EAAIQ,KAEhByJ,GAAavH,MAAMC,QAAQ3C,EAAIa,WAC/BoJ,EAAYjK,EAAIa,QAAQrC,SAAS,WAEjCyL,EACA,OAAQ/L,GACJ,IAAK,QACD+L,EAAwB,UAAZjK,EAAIK,IAChB,MACJ,IAAK,QACD4J,EAAwB,UAAZjK,EAAIK,IAChB,MACJ,IAAK,QACD4J,EAAwB,UAAZjK,EAAIK,IAChB,MACJ,IAAK,UACL,IAAK,QACD4J,EAAwB,YAAZjK,EAAIK,IAI5B,OAAO4J,KAEH,EAAGjK,EAAAzG,OAAKA,GAAWyQ,EAC3B,GAAe,IAAXzQ,EACA,MAAM,IAAIyD,EAEd,GAAe,IAAXzD,EAAc,CACd,MAAMM,EAAQ,IAAIoD,EACZsM,EAAUK,EAAA7Q,KAAKwQ,GASrB,MARA1P,EAAMuD,OAAOC,eAAiB0C,kBAC1B,IAAA,MAAWC,KAAOgK,EACd,gBACgBE,GAAmBX,EAASvJ,EAAK9B,EACjD,CAAA,MACQ,CAEhB,EACMrE,CACV,CACA,OAAOqQ,GAAmBN,EAAA7Q,KAAKwQ,GAASvJ,EAAK9B,EACjD,EAEJ6B,eAAemK,GAAmBnJ,EAAOf,EAAK9B,GAC1C,MAAMiD,EAASJ,EAAMK,IAAIpB,IAAQe,EAAMQ,IAAIvB,EAAK,CAAA,GAAIoB,IAAIpB,GACxD,QAAoB,IAAhBmB,EAAOjD,GAAoB,CAC3B,MAAMD,QC3EP8B,eAAyBC,EAAK9B,GACjC,IAAKqB,EAASS,GACV,MAAM,IAAI9D,UAAU,yBAExB,IAAI0E,EAGJ,OAFA1C,IAAAA,EAAQ8B,EAAI9B,KACZ0C,IAAAA,EAAgCZ,EAAIY,KAC5BZ,EAAIE,KACR,IAAK,MACD,GAAqB,iBAAVF,EAAIuC,IAAmBvC,EAAIuC,EAClC,MAAM,IAAIrG,UAAU,2CAExB,OAAOiO,EAAgBnK,EAAIuC,GAC/B,IAAK,MACD,GAAI,QAASvC,QAAmB,IAAZA,EAAIoK,IACpB,MAAM,IAAIxN,EAAiB,sEAE/B,OAAO+E,EAAY,IAAK3B,EAAK9B,MAAK0C,QACtC,IAAK,MACD,GAAuB,iBAAZZ,EAAI9B,MAAqB8B,EAAI9B,IACpC,MAAM,IAAIhC,UAAU,6CAExB,QAAY,IAARgC,GAAqBA,IAAQ8B,EAAI9B,IACjC,MAAM,IAAIhC,UAAU,yCAExB,OAAOyF,EAAY,IAAK3B,EAAKY,QAEjC,IAAK,KACL,IAAK,MACD,OAAOe,EAAY,IAAK3B,EAAK9B,MAAK0C,QACtC,QACI,MAAM,IAAIhE,EAAiB,gDAEvC,CD0C0B0E,CAAU,IAAKtB,EAAKY,KAAK,GAAQ1C,GACnD,GAAID,aAAexC,YAA2B,WAAbwC,EAAIwD,KACjC,MAAM,IAAI1E,EAAY,gDAE1BoE,EAAOjD,GAAOD,CAClB,CACA,OAAOkD,EAAOjD,EAClB,CACO,SAASmM,GAAkBjB,GAC9B,MAAM7H,EAAM,IAAI4H,GAAYC,GACtBkB,EAAcvK,MAAOqE,EAAiBhL,IAAUmI,EAAIsI,OAAOzF,EAAiBhL,GASlF,OARAqG,OAAO8K,iBAAiBD,EAAa,CACjClB,KAAM,CACF5J,MAAO,IAAMmK,gBAAgBpI,EAAI6H,QACjCoB,YAAY,EACZC,cAAc,EACdC,UAAU,KAGXJ,CACX,CE9GA,IAAIK,GACJ,GFmBIrB,EAAA,IAAApI,QACAqI,EAAA,IAAArI,QEpBqB,oBAAd0J,YAA8BA,UAAUC,WAAW5I,aAAa,gBAAiB,CAGxF0I,GAAa,GAFA,UACG,UAEpB,CACO,MAAMG,GAAc1N,SAuBpB,MAAM2N,GAAY3N,SAgBzB,MAAM4N,GAWF,WAAAtS,CAAYuS,EAAK7O,GACb,GAXJiN,EAAAtQ,KAAAmS,GACA7B,EAAAtQ,KAAAoS,GACA9B,EAAAtQ,KAAAqS,GACA/B,EAAAtQ,KAAAsS,GACAhC,EAAAtQ,KAAAuS,GACAjC,EAAAtQ,KAAAwS,GACAlC,EAAAtQ,KAAAyS,GACAnC,EAAAtQ,KAAA0S,GACApC,EAAAtQ,KAAA2S,GACArC,EAAAtQ,KAAA4S,KAEUV,aAAeW,KACjB,MAAM,IAAI1P,UAAU,kCA5BhC,IAA0BV,EAAOqQ,EA8BzBnC,EAAA3Q,KAAKmS,EAAO,IAAIU,IAAIX,EAAIa,OACxBpC,EAAA3Q,KAAKoS,EACmC,iBAA7B/O,GAAS2P,gBAA+B3P,GAAS2P,gBAAkB,KAC9ErC,EAAA3Q,KAAKqS,EACoC,iBAA9BhP,GAAS4P,iBAAgC5P,GAAS4P,iBAAmB,KAChFtC,EAAA3Q,KAAKsS,EAA+C,iBAAzBjP,GAASyP,YAA2BzP,GAASyP,YAAc,KACtFnC,EAAA3Q,KAAKyS,EAAW,IAAIS,QAAQ7P,GAASkI,UACjCqG,KAAef,EAAA7Q,KAAKyS,GAAS3G,IAAI,eACjC+E,EAAA7Q,KAAKyS,GAASjK,IAAI,aAAcoJ,IAE/Bf,EAAA7Q,KAAKyS,GAAS3G,IAAI,YACnB+E,EAAA7Q,KAAKyS,GAASjK,IAAI,SAAU,oBAC5BqI,EAAA7Q,KAAKyS,GAASU,OAAO,SAAU,6BAEnCxC,EAAA3Q,KAAK0S,EAAerP,IAAU0O,UACD,IAAzB1O,IAAU2O,MACVrB,EAAA3Q,KAAK4S,EAASvP,IAAU2O,KA9CVvP,EA+COY,IAAU2O,IA/CVc,EA+CsBjC,EAAA7Q,KAAKsS,GA9CnC,iBAAV7P,GAAgC,OAAVA,GAG3B,QAASA,GAA+B,iBAAdA,EAAM2Q,OAAoB/R,KAAKC,MAAQmB,EAAM2Q,KAAON,IAG9E,SAAUrQ,GACX+D,EAAS/D,EAAM4N,OACf1G,MAAMC,QAAQnH,EAAM4N,KAAK1E,OACzBhC,MAAMhD,UAAU8J,MAAM7J,KAAKnE,EAAM4N,KAAK1E,KAAMnF,KAsCrCmK,EAAA3Q,KAAKuS,EAAiB1B,OAAK+B,GAAOQ,KAClCzC,EAAA3Q,KAAK2S,EAASrB,GAAkBT,EAAA7Q,KAAK4S,GAAOvC,QAGxD,CACA,YAAAgD,GACI,QAASxC,EAAA7Q,KAAKwS,EAClB,CACA,WAAAc,GACI,MAAsC,iBAAxBzC,EAAA7Q,KAAKuS,IACblR,KAAKC,MAAQuP,EAAA7Q,KAAKuS,GAAiB1B,EAAA7Q,KAAKqS,EAElD,CACA,KAAAkB,GACI,MAAsC,iBAAxB1C,EAAA7Q,KAAKuS,IACblR,KAAKC,MAAQuP,EAAA7Q,KAAKuS,GAAiB1B,EAAA7Q,KAAKsS,EAElD,CACA,IAAAjC,GACI,OAAOQ,EAAA7Q,KAAK2S,IAAQtC,MACxB,CACA,YAAMS,CAAOzF,EAAiBhL,GACrBwQ,EAAA7Q,KAAK2S,IAAW3S,KAAKuT,eAChBvT,KAAKwT,SAEf,IACI,aAAa3C,EAAA7Q,KAAK2S,GAAL/L,KAAA5G,KAAYqL,EAAiBhL,EAC9C,OACOiJ,GACH,GAAIA,aAAerF,IACY,IAAvBjE,KAAKsT,cAEL,aADMtT,KAAKwT,SACJ3C,EAAA7Q,KAAK2S,GAAL/L,KAAA5G,KAAYqL,EAAiBhL,GAG5C,MAAMiJ,CACV,CACJ,CACA,YAAMkK,GACE3C,EAAA7Q,KAAKwS,KAzHoB,oBAAlBiB,eACW,oBAAd5B,WAAqD,uBAAxBA,UAAUC,WACvB,oBAAhB4B,aAA+C,WAAhBA,cAwHnC/C,EAAA3Q,KAAKwS,OAAgB,GAEzB3B,EAAA7Q,KAAKwS,IAAL7B,EAAA3Q,KAAKwS,EAjHbxL,eAAyBkL,EAAK3G,EAASoI,EAAQC,EAAYC,OACvD,MAAMC,QAAiBF,EAAU1B,EAAK,CAClC6B,OAAQ,MACRJ,SACAK,SAAU,SACVzI,YACD0I,MAAO3K,IACN,GAAiB,iBAAbA,EAAIrJ,KACJ,MAAM,IAAIsE,EAEd,MAAM+E,IAEV,GAAwB,MAApBwK,EAASI,OACT,MAAM,IAAI9Q,EAAU,2DAExB,IACI,aAAa0Q,EAASK,MAC1B,CAAA,MAEI,MAAM,IAAI/Q,EAAU,6DACxB,CACJ,CA4F+BgR,CAAUvD,EAAA7Q,KAAKmS,GAAKY,KAAMlC,EAAA7Q,KAAKyS,GAAU4B,YAAYC,QAAQzD,EAAA7Q,KAAKoS,IAAmBvB,EAAA7Q,KAAK0S,IAC5G6B,KAAMJ,IACPxD,EAAA3Q,KAAK2S,EAASrB,GAAkB6C,IAC5BtD,OAAK+B,KACL/B,EAAA7Q,KAAK4S,GAAOQ,IAAM/R,KAAKC,MACvBuP,EAAA7Q,KAAK4S,GAAOvC,KAAO8D,GAEvBxD,EAAA3Q,KAAKuS,EAAiBlR,KAAKC,OAC3BqP,EAAA3Q,KAAKwS,OAAgB,KAEpByB,MAAO3K,IAER,MADAqH,EAAA3Q,KAAKwS,OAAgB,GACflJ,WAEJuH,EAAA7Q,KAAKwS,EACf,EAEG,SAASgC,GAAmBtC,EAAK7O,GACpC,MAAMmF,EAAM,IAAIyJ,GAAaC,EAAK7O,GAC5BoR,EAAezN,MAAOqE,EAAiBhL,IAAUmI,EAAIsI,OAAOzF,EAAiBhL,GA8BnF,OA7BAqG,OAAO8K,iBAAiBiD,EAAc,CAClCnB,YAAa,CACTjL,IAAK,IAAMG,EAAI8K,cACf7B,YAAY,EACZC,cAAc,GAElB6B,MAAO,CACHlL,IAAK,IAAMG,EAAI+K,QACf9B,YAAY,EACZC,cAAc,GAElB8B,OAAQ,CACJ/M,MAAO,IAAM+B,EAAIgL,SACjB/B,YAAY,EACZC,cAAc,EACdC,UAAU,GAEd+C,UAAW,CACPrM,IAAK,IAAMG,EAAI6K,eACf5B,YAAY,EACZC,cAAc,GAElBrB,KAAM,CACF5J,MAAO,IAAM+B,EAAI6H,OACjBoB,YAAY,EACZC,cAAc,EACdC,UAAU,KAGX8C,CACX,CA5HItC,EAAA,IAAAhK,QACAiK,EAAA,IAAAjK,QACAkK,EAAA,IAAAlK,QACAmK,EAAA,IAAAnK,QACAoK,EAAA,IAAApK,QACAqK,EAAA,IAAArK,QACAsK,EAAA,IAAAtK,QACAuK,EAAA,IAAAvK,QACAwK,EAAA,IAAAxK,QACAyK,EAAA,IAAAzK,QC5DG,MAAMwM,GAIX,WAAAhV,CAAYiV,GAAiB,EAAOC,EAAiB,oBACnD7U,KAAK4U,MAAQA,EACb5U,KAAK6U,OAASA,CAChB,CAKA,GAAAC,IAAOC,GACD/U,KAAK4U,KAGX,CAKA,IAAAI,IAAQD,GACF/U,KAAK4U,KAGX,CAKA,IAAAK,IAAQF,GAER,CAKA,KAAAjU,IAASiU,GAET,EClCK,MAAMG,GAKX,WAAAvV,CAAYwV,EAAiBP,GAAiB,GAC5C5U,KAAKmV,QAAUA,EACfnV,KAAKoV,OAAS,IAAIT,GAAOC,EAAO,mBAGhC5U,KAAKqQ,KAAOmE,GAAmB,IAAI3B,IAAI7S,KAAKmV,UAE5CnV,KAAKoV,OAAOJ,KAAK,6BAA8BhV,KAAKmV,QACtD,CASA,YAAM1K,CACJpK,EACAgV,EAAyB,oBACzBC,GAEAtV,KAAKoV,OAAON,IAAI,8BAEhB,IAEE,MAKMrU,SALgCsP,GAAU1P,EAAOL,KAAKqQ,KAAM,CAChE3B,OAAQ2G,EACRxI,WAAY,CAAC,YAGQpM,QAGjBgO,EAAsC,CAC1C,YACA,SACA,QACA,gBACA,MACA,OAGF,IAAA,MAAWvN,KAASuN,EAClB,KAAMvN,KAAST,GACb,MAAM,IAAIhB,EACR,2BAA2ByB,IAC3B,iBAMN,GAAIoU,GAAyB7U,EAAQ8U,gBAAkBD,EAIrD,MAHAtV,KAAKoV,OAAOtU,MACV,qCAAqCwU,UAA8B7U,EAAQ8U,iBAEvE,IAAI9V,EACR,uCACA,wBAIJ,MAAM+V,EAAoB,CACxBC,UAAWhV,EAAQgV,UACnBF,cAAe9U,EAAQ8U,cACvBG,OAAQjV,EAAQiV,OAChBC,MAAOlV,EAAQkV,MACfC,UAAWnV,EAAQmV,UACnBC,gBAAiBpV,EAAQoV,gBACzBjG,IAAKnP,EAAQmP,IACbxO,IAAKX,EAAQW,IACb6N,IAAKxO,EAAQwO,IACbC,IAAKzO,EAAQyO,KAIf,OADAlP,KAAKoV,OAAON,IAAI,6BACTU,CAET,OAAS1U,GAGP,GAFAd,KAAKoV,OAAOtU,MAAM,2BAA4BA,GAE1CA,aAAiBrB,EACnB,MAAMqB,EAIR,MAAMgV,EAAehV,aAAiBpB,MAAQoB,EAAMlB,QAAU,gBACxDmW,EAAYjV,aAAiBpB,MAAQoB,EAAMb,KAAO,QAExD,GAAkB,eAAd8V,GAA8BD,EAAarQ,SAAS,WACtD,MAAM,IAAIhG,EAAS,kBAAmB,mBAGxC,GAAkB,mCAAdsW,EACF,MAAM,IAAItW,EAAS,wBAAyB,qBAG9C,GAAkB,6BAAdsW,EACF,MAAM,IAAItW,EAAS,gCAAgCqW,IAAgB,iBAGrE,MAAM,IAAIrW,EACR,4BAA4BqW,IAC5B,sBAEJ,CACF,CAMA,aAAAE,CAAcb,GACZnV,KAAKmV,QAAUA,EACfnV,KAAKqQ,KAAOmE,GAAmB,IAAI3B,IAAI7S,KAAKmV,UAC5CnV,KAAKoV,OAAOJ,KAAK,oBAAqBhV,KAAKmV,QAC7C,EC5HK,MAAMc,GAQX,WAAAtW,CACEuW,EACAC,EAAkC,IAClCC,EAA6B,CAAA,EAC7BxB,GAAiB,GAVnB5U,KAAQqW,WAA4B,KAEpCrW,KAAQsW,cAAwB,EAU9BtW,KAAKuW,iBAAmBL,EACxBlW,KAAKwW,iBAAmBL,EACxBnW,KAAKoW,OAASA,EACdpW,KAAKoV,OAAS,IAAIT,GAAOC,EAAO,kBAEhC5U,KAAKoV,OAAON,IAAI,6BAA8BoB,EAAiB,UACjE,CAKA,KAAAO,GAC0B,OAApBzW,KAAKqW,YAKTrW,KAAKoV,OAAON,IAAI,sBAAuB9U,KAAKuW,iBAAkB,qBAE9DvW,KAAKqW,WAAaK,OAAOC,YAAY,KACnC3W,KAAKuW,oBAIFvW,KAAKsW,cACNtW,KAAKuW,kBAAoBvW,KAAKwW,kBAC9BxW,KAAKuW,iBAAmB,IAExBvW,KAAKsW,cAAe,EACpBtW,KAAKoV,OAAOH,KAAK,6BAA8BjV,KAAKuW,iBAAkB,qBACtEvW,KAAKoW,OAAOQ,mBAAmB,CAC7BL,iBAAkBvW,KAAKuW,oBAKvBvW,KAAKuW,kBAAoB,IAC3BvW,KAAKoV,OAAOH,KAAK,mBACjBjV,KAAK6W,OACL7W,KAAKoW,OAAOU,mBAEb,MA5BD9W,KAAKoV,OAAOH,KAAK,wBA6BrB,CAKA,IAAA4B,GAC0B,OAApB7W,KAAKqW,aACPU,cAAc/W,KAAKqW,YACnBrW,KAAKqW,WAAa,KAClBrW,KAAKoV,OAAON,IAAI,iBAEpB,CAKA,KAAAkC,GACEhX,KAAK6W,OACL7W,KAAKoV,OAAON,IAAI,mBAAoB9U,KAAKuW,iBAAkB,UAC7D,CAKA,MAAAU,GAC0B,OAApBjX,KAAKqW,YAAuBrW,KAAKuW,iBAAmB,IACtDvW,KAAKyW,QACLzW,KAAKoV,OAAON,IAAI,oBAAqB9U,KAAKuW,iBAAkB,WAEhE,CAKA,mBAAAW,GACE,OAAOlX,KAAKuW,gBACd,CAKA,gBAAAY,GAGE,MAAO,GAFS1V,KAAKC,MAAM1B,KAAKuW,iBAAmB,QACnCvW,KAAKuW,iBAAmB,IACXpU,WAAWiV,SAAS,EAAG,MACtD,CAKA,yBAAAC,GACE,MAAMC,EAAQ7V,KAAKC,MAAM1B,KAAKuW,iBAAmB,MAC3CgB,EAAU9V,KAAKC,MAAO1B,KAAKuW,iBAAmB,KAAQ,IACtDiB,EAAUxX,KAAKuW,iBAAmB,GAExC,OAAIe,EAAQ,EACH,GAAGA,KAASC,EAAQpV,WAAWiV,SAAS,EAAG,QAAQI,EAAQrV,WAAWiV,SAAS,EAAG,OAGpFpX,KAAKmX,kBACd,CAKA,SAAAM,GACE,OAA2B,OAApBzX,KAAKqW,UACd,CAKA,mBAAAqB,GACE,OAAO1X,KAAKsW,YACd,CAKA,mBAAAqB,CAAoBH,GAClBxX,KAAKuW,iBAAmBiB,EACxBxX,KAAKoV,OAAON,IAAI,6BAA8B0C,EAAS,UACzD,ECzIK,MAAMI,GAQX,WAAAjY,CACU8V,EACAoC,EACAxX,EACAyX,EACAC,EACRC,EAAmC,GACnCpD,GAAiB,GANT5U,KAAAyV,UAAAA,EACAzV,KAAA6X,YAAAA,EACA7X,KAAAK,MAAAA,EACAL,KAAA8X,OAAAA,EACA9X,KAAA+X,QAAAA,EAZV/X,KAAQqW,WAA4B,KAEpCrW,KAAQiY,aAAuB,EAC/BjY,KAAQkY,YAAsB,EAC9BlY,KAAQmY,WAAqB,EAY3BnY,KAAKoY,kBAA+C,IAA3BJ,EACzBhY,KAAKoV,OAAS,IAAIT,GAAOC,EAAO,sBAChC5U,KAAKoV,OAAON,IAAI,mBAAoBkD,EAA0B,kBAChE,CAKA,KAAAvB,GAC0B,OAApBzW,KAAKqW,YAKTrW,KAAKmY,WAAY,EACjBnY,KAAKoV,OAAON,IAAI,kCAAmC9U,KAAKyV,WAGxDzV,KAAKqY,gBAGLrY,KAAKqW,WAAaK,OAAOC,YAAY,KACnC3W,KAAKqY,iBACJrY,KAAKoY,oBAbNpY,KAAKoV,OAAOH,KAAK,4BAcrB,CAKA,IAAA4B,GAC0B,OAApB7W,KAAKqW,aACPU,cAAc/W,KAAKqW,YACnBrW,KAAKqW,WAAa,KAClBrW,KAAKmY,WAAY,EACjBnY,KAAKoV,OAAON,IAAI,qBAEpB,CAKA,mBAAcuD,GACZ,GAAKrY,KAAKmY,UAAV,CAIAnY,KAAKoV,OAAON,IAAI,wBAEhB,IACE,MAAMhB,QAAiBD,MACrB,GAAG7T,KAAK6X,wBAAwB7X,KAAKyV,sBACrC,CACE1B,OAAQ,OACRxI,QAAS,CACP+M,cAAiB,UAAUtY,KAAKK,QAChC,eAAgB,oBAElBkY,KAAM3X,KAAK4X,UAAU,CACnBC,UAAWpX,KAAKC,MAChBoX,QAAQ,MAKd,IAAK5E,EAAS6E,GACZ,MAAM,IAAIlZ,EACR,gCAAgCqU,EAASI,SACzC,mBACAJ,EAASI,QAIb,MAAMvJ,QAAamJ,EAASK,OAG5BnU,KAAKiY,aAAe,EAGkB,iBAA3BtN,EAAKiO,oBACd5Y,KAAKoV,OAAON,IAAI,iBAAkBnK,EAAKiO,kBAAmB,qBAC1D5Y,KAAK8X,SAASnN,EAAKiO,oBAGrB5Y,KAAKoV,OAAON,IAAI,yBAElB,OAAShU,GAIP,GAHAd,KAAKiY,eACLjY,KAAKoV,OAAOtU,MAAM,oBAAqBA,EAAO,IAAId,KAAKiY,gBAAgBjY,KAAKkY,gBAExElY,KAAKiY,cAAgBjY,KAAKkY,YAAa,CACzClY,KAAKoV,OAAOtU,MAAM,4CAClBd,KAAK6W,OAEL,MAAMgC,EAAW/X,aAAiBrB,EAAWqB,EAAQ,IAAIrB,EACvDqB,aAAiBpB,MAAQoB,EAAMlB,QAAU,mBACzC,mBAEFI,KAAK+X,UAAUc,EACjB,CACF,CAvDA,CAwDF,CAKA,SAAApB,GACE,OAA2B,OAApBzX,KAAKqW,UACd,CAKA,eAAAyC,GACE,OAAO9Y,KAAKiY,YACd,CAKA,cAAAc,CAAevB,GACb,MAAMwB,EAAahZ,KAAKyX,YAEpBuB,GACFhZ,KAAK6W,OAGP7W,KAAKoY,kBAA8B,IAAVZ,EACzBxX,KAAKoV,OAAON,IAAI,gCAAiC0C,EAAS,WAEtDwB,GACFhZ,KAAKyW,OAET,EC/IK,MAAMwC,GAMX,WAAAtZ,CACU8V,EACAyD,EACRtE,GAAiB,GAFT5U,KAAAyV,UAAAA,EACAzV,KAAAkZ,UAAAA,EAPVlZ,KAAQmZ,QAAmC,KAG3CnZ,KAAQoZ,UAAoB,EAsE5BpZ,KAAQqZ,mBAAsBC,IAC5B,GAAIA,EAAMpU,MAAQlF,KAAKuZ,YAAcD,EAAME,SACzC,IACE,MAAM7O,EAAO/J,KAAKC,MAAMyY,EAAME,UAC9BxZ,KAAKyZ,cAAc9O,EACrB,OAAS7J,GACPd,KAAKoV,OAAOtU,MAAM,iCAAkCA,EACtD,GAtEFd,KAAKuZ,WAAa,mBAAmB9D,IACrCzV,KAAKoV,OAAS,IAAIT,GAAOC,EAAO,oBAEhC5U,KAAK0Z,YACP,CAKQ,UAAAA,GAE0B,oBAArBC,kBACT3Z,KAAKoV,OAAON,IAAI,uCAChB9U,KAAKmZ,QAAU,IAAIQ,iBAAiB,cAAc3Z,KAAKyV,aACvDzV,KAAKmZ,QAAQS,UAAaN,IACxBtZ,KAAKyZ,cAAcH,EAAM3O,SAI3B3K,KAAKoV,OAAON,IAAI,8CAChB4B,OAAOmD,iBAAiB,UAAW7Z,KAAKqZ,qBAI1CrZ,KAAK8Z,aACP,CAKA,SAAAC,CAAUrR,EAA8BiC,GACtC,MAAM/K,EAA0B,CAC9B8I,OACA+M,UAAWzV,KAAKyV,UAChBgD,UAAWpX,KAAKC,SACbqJ,GAGD3K,KAAKmZ,SACPnZ,KAAKmZ,QAAQa,YAAYpa,GACzBI,KAAKoV,OAAON,IAAI,eAAgBpM,KAGhCuR,aAAaC,QAAQla,KAAKuZ,WAAY3Y,KAAK4X,UAAU5Y,IACrDI,KAAKoV,OAAON,IAAI,gCAAiCpM,GAErD,CAKQ,aAAA+Q,CAAc9O,GAChBA,EAAK8K,YAAczV,KAAKyV,YAI5BzV,KAAKoV,OAAON,IAAI,oBAAqBnK,EAAKjC,MAC1C1I,KAAKkZ,UAAUvO,GACjB,CAoBQ,WAAAmP,GACN,MAAMK,EAAY,qBAAqBna,KAAKyV,YACrBwE,aAAaG,QAAQD,IAuB1Cna,KAAKoV,OAAON,IAAI,yBAGhB6B,YAAY,KACV,MAAM0D,EAAkBJ,aAAaG,QAAQD,GAC7C,GAAIE,EAAiB,CACPhZ,KAAKC,MAAQyD,SAASsV,GACxB,MAERra,KAAKoV,OAAOH,KAAK,4CACjBjV,KAAKoZ,UAAW,EAChBa,aAAaC,QAAQC,EAAW9Y,KAAKC,MAAMa,YAE/C,GACC,OAjCHnC,KAAKoZ,UAAW,EAChBa,aAAaC,QAAQC,EAAW9Y,KAAKC,MAAMa,YAC3CnC,KAAKoV,OAAON,IAAI,yBAGhB6B,YAAY,KACN3W,KAAKoZ,UACPa,aAAaC,QAAQC,EAAW9Y,KAAKC,MAAMa,aAE5C,KAGHuU,OAAOmD,iBAAiB,eAAgB,KAClC7Z,KAAKoZ,WACPa,aAAaK,WAAWH,GACxBna,KAAKoV,OAAON,IAAI,4BAoBxB,CAKA,WAAAyF,GACE,OAAOva,KAAKoZ,QACd,CAKA,OAAAoB,GACMxa,KAAKmZ,SACPnZ,KAAKmZ,QAAQsB,QACbza,KAAKmZ,QAAU,MAEfzC,OAAOgE,oBAAoB,UAAW1a,KAAKqZ,oBAI7CY,aAAaK,WAAWta,KAAKuZ,YAEzBvZ,KAAKoZ,UACPa,aAAaK,WAAW,qBAAqBta,KAAKyV,aAGpDzV,KAAKoV,OAAON,IAAI,qBAClB,ECxEK,MAAM6F,GAAoB,CAC/BC,OAAQ,CAENC,WAAY,iBACZC,WAAY,sBAGZC,KAAM,iBACNC,eAAgB,sBAGhBC,QAAS,iBACTC,kBAAmB,sBAGnBC,QAAS,yBACTC,kBAAmB,mBAGnBC,UAAW,qBACXC,oBAAqB,yBAGrBC,MAAO,qBACPC,gBAAiB,yBAGjBC,OAAQ,qBACRC,iBAAkB,yBAGlBC,YAAa,qBACbC,sBAAuB,mBAGvBC,QAAS,mBACTC,kBAAmB,iBAGnBC,OAAQ,yBACRtZ,MAAO,yBACPuZ,KAAM,0BAERC,WAAY,CACVC,WAAY,6FACZC,SAAU,CACRC,GAAI,OACJC,GAAI,OACJC,KAAM,OACNC,GAAI,OACJC,GAAI,OACJ,MAAO,QAETC,WAAY,CACVC,OAAQ,MACRC,OAAQ,MACRC,SAAU,MACVC,KAAM,OAERC,WAAY,CACVC,MAAO,OACPL,OAAQ,MACRM,QAAS,SAGbC,QAAS,CACPC,aAAc,CACZb,GAAI,MACJc,GAAI,MACJZ,GAAI,OAENxa,QAAS,CACPsa,GAAI,MACJc,GAAI,OACJZ,GAAI,OACJC,GAAI,QAENY,IAAK,CACHf,GAAI,MACJc,GAAI,OACJZ,GAAI,UAQGc,GAAmB,CAC9BzC,OAAQ,CAENC,WAAY,sBACZC,WAAY,mBAGZC,KAAM,sBACNC,eAAgB,mBAGhBC,QAAS,sBACTC,kBAAmB,mBAGnBC,QAAS,yBACTC,kBAAmB,yBAGnBC,UAAW,yBACXC,oBAAqB,mBAGrBC,MAAO,yBACPC,gBAAiB,uBAGjBC,OAAQ,yBACRC,iBAAkB,mBAGlBC,YAAa,qBACbC,sBAAuB,mBAGvBC,QAAS,mBACTC,kBAAmB,iBAGnBC,OAAQ,yBACRtZ,MAAO,yBACPuZ,KAAM,wBAERC,WAAY,CACVC,WAAY,6FACZC,SAAU,CACRC,GAAI,OACJC,GAAI,OACJC,KAAM,OACNC,GAAI,OACJC,GAAI,OACJ,MAAO,QAETC,WAAY,CACVC,OAAQ,MACRC,OAAQ,MACRC,SAAU,MACVC,KAAM,OAERC,WAAY,CACVC,MAAO,OACPL,OAAQ,MACRM,QAAS,SAGbC,QAAS,CACPC,aAAc,CACZb,GAAI,MACJc,GAAI,MACJZ,GAAI,OAENxa,QAAS,CACPsa,GAAI,MACJc,GAAI,OACJZ,GAAI,OACJC,GAAI,QAENY,IAAK,CACHf,GAAI,MACJc,GAAI,OACJZ,GAAI,UAQH,SAASe,GAASC,GAEvB,QAAoB,IAAhBA,EACF,OAAOA,EAAcF,GAAY1C,GAInC,GAAsB,oBAAXjE,QAA0BA,OAAO8G,WAAY,CAEtD,OADmB9G,OAAO8G,WAAW,gCAAgCC,QACjDJ,GAAY1C,EAClC,CAGA,OAAOA,EACT,CC3RO,MAAM+C,GAUX,WAAA/d,CAAYge,EAAuB,QAASC,GAT5C5d,KAAQ6d,MAA+B,KAEvC7d,KAAQ8d,aAAmC,KAC3C9d,KAAQ+Y,eAAgC,KACxC/Y,KAAQ+d,YAAkC,KAC1C/d,KAAQ4V,UAAoB,EAC5B5V,KAAQge,eAAyB,EACjChe,KAAQie,mBAA0C,EAIhD,MAAMV,EAA4B,SAAdI,GAAuC,SAAdA,GAAwB3d,KAAKke,iBAC1Ele,KAAKme,MAAQb,GAASC,GAGlBK,IACF5d,KAAK8d,aAAe,CAClBM,gBAAiBR,EAAaQ,iBAAmB,UACjDC,UAAWT,EAAaS,WAAa,UACrCC,aAAcV,EAAaU,cAAgB,UAC3CpB,aAAcU,EAAaV,cAAgB,MAC3ChB,WACE0B,EAAa1B,YACb,qEAGR,CAEQ,cAAAgC,GACN,QAAsB,oBAAXxH,SAA0BA,OAAO8G,aACnC9G,OAAO8G,WAAW,gCAAgCC,OAG7D,CAKA,IAAAc,CAAKlb,GAMHrD,KAAKwe,OAGLxe,KAAK6d,MAAQY,SAASC,cAAc,OACpC1e,KAAK6d,MAAMc,GAAK,2BAChB3e,KAAK6d,MAAMe,MAAMC,QAAU,8QAWV7e,KAAK8d,cAAc5B,YAAclc,KAAKme,MAAMlC,WAAWC,oBAIxE,MAAM4C,EAAUL,SAASC,cAAc,OACjCK,EAAU/e,KAAK8d,cAAcM,iBAAmBpe,KAAKme,MAAMvD,OAAOG,KAClEsD,EAAYre,KAAK8d,cAAcO,WAAare,KAAKme,MAAMvD,OAAOI,eAC9DkC,EAAeld,KAAK8d,cAAcZ,cAAgBld,KAAKme,MAAMlB,QAAQC,aAAaX,GAExFuC,EAAQF,MAAMC,QAAU,6BACFE,oBACXV,4BACQnB,sBACNld,KAAKme,MAAMlB,QAAQlb,QAAQwa,6HAIlBvc,KAAKme,MAAMvD,OAAOmB,gBAGxC/b,KAAKge,eAAiB3a,EAAQkT,iBAC9BvW,KAAK4V,UAAYvU,KAAKC,MACtBtB,KAAKie,cAAgB5a,EAAQ2b,MAE7B,MAAMzH,EAAU9V,KAAKC,MAAM2B,EAAQkT,iBAAmB,IAChDiB,EAAUnU,EAAQkT,iBAAmB,GAE3CuI,EAAQG,UAAY,kCACOjf,KAAKme,MAAMlB,QAAQlb,QAAQob,oBAAoBnd,KAAKme,MAAMlC,WAAWE,SAASK,oBAAoBxc,KAAKme,MAAMlC,WAAWQ,WAAWG,oBAAoByB,+EAGxJre,KAAKme,MAAMlB,QAAQlb,QAAQwa,oBAAoBvc,KAAKme,MAAMlC,WAAWE,SAASG,sBAAsBtc,KAAKme,MAAMlC,WAAWa,WAAWJ,kBAAkB1c,KAAKme,MAAMvD,OAAOY,sGACtH6C,OAAe9G,KAAWC,EAAQrV,WAAWiV,SAAS,EAAG,qEAElGpX,KAAKme,MAAMlB,QAAQG,IAAID,6IAGjCnd,KAAKme,MAAMvD,OAAOS,gCAC7Brb,KAAKme,MAAMvD,OAAOU,qDACPtb,KAAKme,MAAMvD,OAAOmB,qCACrB/b,KAAKme,MAAMlB,QAAQC,aAAab,6BACpCrc,KAAKme,MAAMlC,WAAWE,SAASE,+BAC7Brc,KAAKme,MAAMlC,WAAWQ,WAAWE,gGAGjC3c,KAAKme,MAAMlC,WAAWC,2EAKrC7Y,EAAQ6b,SACJ,8GAEsBlf,KAAKme,MAAMvD,OAAOiB,oCAC7B7b,KAAKme,MAAMvD,OAAOkB,qFAEV9b,KAAKme,MAAMlB,QAAQC,aAAab,mCACpCrc,KAAKme,MAAMlC,WAAWE,SAASE,qCAC7Brc,KAAKme,MAAMlC,WAAWQ,WAAWE,kHAGjC3c,KAAKme,MAAMlC,WAAWC,yFAIvC,eAGJ7Y,EAAQ2b,MACJ,2GAEsBhf,KAAKme,MAAMvD,OAAOe,wCAC7B3b,KAAKme,MAAMvD,OAAOgB,yFAEV5b,KAAKme,MAAMlB,QAAQC,aAAab,mCACpCrc,KAAKme,MAAMlC,WAAWE,SAASE,qCAC7Brc,KAAKme,MAAMlC,WAAWQ,WAAWE,kHAGjC3c,KAAKme,MAAMlC,WAAWC,sFAIvC,yBAKVlc,KAAK6d,MAAMsB,YAAYL,GACvBL,SAASlG,KAAK4G,YAAYnf,KAAK6d,OAG/B,MAAMuB,EAAYX,SAASY,eAAe,iBACtCD,GAAa/b,EAAQ6b,UACvBE,EAAUvF,iBAAiB,QAAS,KAClCxW,EAAQ6b,aACRlf,KAAKwe,SAIT,MAAMc,EAAab,SAASY,eAAe,kBACvCC,GACFA,EAAWzF,iBAAiB,QAAS,KACnC7Z,KAAKwe,SAIT,MAAMe,EAASd,SAASY,eAAe,cACnCE,GAAUlc,EAAQ2b,OACpBO,EAAO1F,iBAAiB,QAAS,KAC/BxW,EAAQ2b,YAOIF,EAAQU,iBAAiB,UACjCC,QAASC,IACfA,EAAO7F,iBAAiB,aAAc,KACnC6F,EAAuBd,MAAMe,QAAU,QAE1CD,EAAO7F,iBAAiB,aAAc,KACnC6F,EAAuBd,MAAMe,QAAU,MAG1CD,EAAO7F,iBAAiB,QAAS,KAC9B6F,EAAuBd,MAAMgB,QAAU,aAAa5f,KAAKme,MAAMvD,OAAOoB,OACtE0D,EAAuBd,MAAMiB,cAAgB,QAEhDH,EAAO7F,iBAAiB,OAAQ,KAC7B6F,EAAuBd,MAAMgB,QAAU,WAK5C5f,KAAK+d,YAAcU,SAASY,eAAe,mBAC3Crf,KAAK+Y,eAAiBrC,OAAOC,YAAY,KACvC,MAAMmJ,EAAUre,KAAKC,OAAOL,KAAKC,MAAQtB,KAAK4V,WAAa,KACrDpU,EAAYC,KAAKE,IAAI,EAAG3B,KAAKge,eAAiB8B,GAE9CvI,EAAU9V,KAAKC,MAAMF,EAAY,IACjCgW,EAAUhW,EAAY,GAExBxB,KAAK+d,cACP/d,KAAK+d,YAAYgC,YAAc,GAAGxI,KAAWC,EAAQrV,WAAWiV,SAAS,EAAG,QAI5D,IAAd5V,IACExB,KAAKie,eACPje,KAAKie,gBAEPje,KAAKwe,SAEN,IACL,CAKA,IAAAA,GAE8B,OAAxBxe,KAAK+Y,iBACPhC,cAAc/W,KAAK+Y,gBACnB/Y,KAAK+Y,eAAiB,MAIpB/Y,KAAK6d,OAAS7d,KAAK6d,MAAMmC,aAC3BhgB,KAAK6d,MAAMmC,WAAWC,YAAYjgB,KAAK6d,OACvC7d,KAAK6d,MAAQ,KACb7d,KAAK+d,YAAc,KAEvB,CAKA,OAAAmC,GACE,OAAsB,OAAflgB,KAAK6d,KACd,CAMA,iBAAAsC,CAAkBC,EAAwBC,EAAqB,KAE7DrgB,KAAKwe,OAEL,MAAMO,EAAU/e,KAAK8d,cAAcM,iBAAmBpe,KAAKme,MAAMvD,OAAOG,KAClEsD,EAAYre,KAAK8d,cAAcO,WAAare,KAAKme,MAAMvD,OAAOI,eAC9DkC,EAAeld,KAAK8d,cAAcZ,cAAgBld,KAAKme,MAAMlB,QAAQC,aAAaX,GAGxFvc,KAAK6d,MAAQY,SAASC,cAAc,OACpC1e,KAAK6d,MAAMc,GAAK,0BAChB3e,KAAK6d,MAAMe,MAAMC,QAAU,8QAWV7e,KAAK8d,cAAc5B,YAAclc,KAAKme,MAAMlC,WAAWC,2DAKxE,MAAM4C,EAAUL,SAASC,cAAc,OACvCI,EAAQF,MAAMC,QAAU,6BACFE,oBACXV,4BACQnB,sBACNld,KAAKme,MAAMlB,QAAQlb,QAAQya,iMAMlBxc,KAAKme,MAAMvD,OAAOmB,gBAGxC+C,EAAQG,UAAY,uDAC4Bjf,KAAKme,MAAMlB,QAAQlb,QAAQwa,+CAChDvc,KAAKme,MAAMlB,QAAQlb,QAAQob,oBAAoBnd,KAAKme,MAAMlC,WAAWE,SAAS,wBAAwBnc,KAAKme,MAAMlC,WAAWQ,WAAWG,oBAAoB5c,KAAKme,MAAMvD,OAAOe,oFAG9K3b,KAAKme,MAAMlB,QAAQlb,QAAQwa,oBAAoBvc,KAAKme,MAAMlC,WAAWE,SAASG,sBAAsBtc,KAAKme,MAAMlC,WAAWa,WAAWJ,kBAAkB1c,KAAKme,MAAMvD,OAAOY,sMAOjLxb,KAAKme,MAAMvD,OAAOW,kCACfvb,KAAKme,MAAMlB,QAAQC,aAAab,uDAEnCrc,KAAKme,MAAMlB,QAAQlb,QAAQwa,2JAKFvc,KAAKme,MAAMvD,OAAOe,gBAAgB3b,KAAKme,MAAMvD,OAAOO,+CAChEkF,6DAM/B,MAAMzB,EAAQH,SAASC,cAAc,SACrCE,EAAMmB,YAAc,iWAcpBtB,SAAS6B,KAAKnB,YAAYP,GAE1B5e,KAAK6d,MAAMsB,YAAYL,GACvBL,SAASlG,KAAK4G,YAAYnf,KAAK6d,OAG/B0C,WAAW,KACTvgB,KAAKwe,OACL4B,KACCC,EACL,ECnVK,SAASG,GACdC,EAAoB,MACpBvO,GAEA,IACE,MAAMwO,EAAYxO,IAA0B,oBAAXwE,OAAyBA,OAAOiK,SAAS5N,KAAO,IAEjF,IAAK2N,EACH,OAAO,KAGT,MAAME,EAAS,IAAI/N,IAAI6N,GAGvB,OAFcE,EAAOC,aAAaxY,IAAIoY,EAGxC,OAAS3f,GACP,MAAM,IAAIrB,EACR,qCAAqCqB,aAAiBpB,MAAQoB,EAAMlB,QAAU,kBAC9E,kBAEJ,CACF,CCXO,MAAMkhB,GAaX,WAAAnhB,CAAYohB,GAVZ/gB,KAAQghB,MAA6B,KACrChhB,KAAQihB,UAAqC,KAC7CjhB,KAAQkhB,QAAiC,KACzClhB,KAAQ6d,MAA6B,KAErC7d,KAAQoW,OAA6B,CAAA,EACrCpW,KAAQmhB,YAAkC,KAC1CnhB,KAAQohB,SAA0B,KAClCphB,KAAQqhB,UAA4C,SAGlDrhB,KAAK+gB,OAAS,CACZ5L,QAAS4L,EAAO5L,SAAW,sDAC3B0C,YAAakJ,EAAOlJ,aAAe,wBACnCjD,MAAOmM,EAAOnM,QAAS,EACvB0M,UAAWP,EAAOO,YAAa,EAC/BnL,wBAAyB4K,EAAO5K,yBAA2B,IAC3DyH,aAAcmD,EAAOnD,cAAgB,CAAA,EACrCD,UAAWoD,EAAOpD,WAAa,QAC/BpI,cAAewL,EAAOxL,eAAiB,GACvCgM,eAAgBR,EAAOQ,gBAAkB,yCAEzCC,gBAAiBT,EAAOS,kBAAmB,EAC3CxJ,yBAA0B+I,EAAO/I,0BAA4B,GAC7DyJ,cAAeV,EAAOU,gBAAiB,EACvCC,cAAeX,EAAOW,gBAAiB,EACvCC,qBAAsBZ,EAAOY,uBAAwB,EAErDC,MAAOb,EAAOa,OAAS,CAAA,EACvBC,cAAed,EAAOc,eAAiB,KAGzC7hB,KAAK8hB,UAAY,IAAI5M,GAAclV,KAAK+gB,OAAO5L,QAASnV,KAAK+gB,OAAOnM,OACpE5U,KAAKoV,OAAS,IAAIT,GAAO3U,KAAK+gB,OAAOnM,MAAO,oBAE5C5U,KAAKoV,OAAOJ,KAAK,+BAAgC,CAC/CG,QAASnV,KAAK+gB,OAAO5L,QACrB0C,YAAa7X,KAAK+gB,OAAOlJ,YACzB2J,gBAAiBxhB,KAAK+gB,OAAOS,gBAC7BC,cAAezhB,KAAK+gB,OAAOU,cAC3BC,cAAe1hB,KAAK+gB,OAAOW,eAE/B,CAKA,EAAAK,CAA8BzI,EAAU0I,GACtChiB,KAAKoW,OAAOkD,GAAS0I,EACrBhiB,KAAKoV,OAAON,IAAI,4BAA6BwE,EAC/C,CAKA,iBAAc2I,CACZC,EACAC,EACAC,EACAC,GAAoB,GAEpB,IAAKF,EAAM,OAEXniB,KAAKoV,OAAON,IAAI,WAAWoN,UAE3B,MAAM5N,EAAU,IAAIgO,QAAe,CAACC,EAAGC,IACrCjC,WACE,IAAMiC,EAAO,IAAI/iB,EAAS,GAAGyiB,wBAA+BliB,KAAK+gB,OAAOc,kBAAmB,iBAC3F7hB,KAAK+gB,OAAOc,gBAIhB,UACQS,QAAQG,KAAK,CACjBH,QAAQI,QAAQP,EAAKC,IACrB9N,IAEFtU,KAAKoV,OAAON,IAAI,GAAGoN,gCACrB,OAASphB,GAGP,GAFAd,KAAKoV,OAAOtU,MAAM,GAAGohB,iBAAyBphB,GAE1CuhB,EAEF,MAAM,IAAI5iB,EACR,GAAGyiB,kBAAyBphB,aAAiBpB,MAAQoB,EAAMlB,QAAU,kBACrE,cAIFI,KAAKoV,OAAOH,KAAK,GAAGiN,8CAExB,CACF,CAKQ,uBAAAS,GACN,IAAK3iB,KAAKmhB,YAAa,OACvB,MACMjL,EADMzU,KAAKC,MAAML,KAAKC,MAAQ,KACNtB,KAAKmhB,YAAYvL,UAC/C,OAAOnU,KAAKmhB,KAAK1M,EAAkB,GACrC,CAKA,gBAAMwD,GACJ1Z,KAAKoV,OAAOJ,KAAK,2BAEjB,IAEE,MAAM6N,EAAkB,qBAcxB,GAXA7iB,KAAKohB,SAAWZ,GAAoB,OAG/BxgB,KAAKohB,UAAsC,oBAAnB0B,iBAC3B9iB,KAAKohB,SAAW0B,eAAe1I,QAAQyI,GACnC7iB,KAAKohB,UACPphB,KAAKoV,OAAON,IAAI,sCAKf9U,KAAKohB,SACR,MAAM,IAAI3hB,EACR,uCACA,iBAaJ,IAAIsjB,EAR0B,oBAAnBD,iBACTA,eAAe5I,QAAQ2I,EAAiB7iB,KAAKohB,UAC7CphB,KAAKoV,OAAON,IAAI,uCAGlB9U,KAAKoV,OAAON,IAAI,gCAIZ9U,KAAK+gB,OAAOY,sBAEd3hB,KAAKoV,OAAON,IAAI,4BAChBiO,QAAuB/iB,KAAKgjB,oBAAoBhjB,KAAKohB,YAGrDphB,KAAKoV,OAAON,IAAI,yBAChBiO,QAAuB/iB,KAAK8hB,UAAUrX,OACpCzK,KAAKohB,SACL,oBACAphB,KAAK+gB,OAAOxL,oBAAiB,IAIjCvV,KAAKoV,OAAON,IAAI,6BAGhB9U,KAAKmhB,YAAc,CACjB1L,UAAWsN,EAAetN,UAC1BF,cAAewN,EAAexN,cAC9BG,OAAQqN,EAAerN,OACvBC,MAAOoN,EAAepN,MACtBC,UAAWmN,EAAenN,UAC1BC,gBAAiBkN,EAAelN,gBAChCjG,IAAKmT,EAAenT,IACpBxO,IAAK2hB,EAAe3hB,IACpB6N,IAAK8T,EAAe9T,IACpBC,IAAK6T,EAAe7T,KAItB,MAAM5N,EAAMG,KAAKC,MAAML,KAAKC,MAAQ,KAC9BiV,EAAmB9U,KAAKE,IAAI,EAAG3B,KAAKmhB,YAAY/f,IAAME,GAE5D,GAAIiV,GAAoB,EACtB,MAAM,IAAI9W,EACR,8BACA,mBAOJ,GAHAO,KAAKoV,OAAON,IAAI,kBAAmByB,EAAkB,WAGjDvW,KAAK+gB,OAAOa,OAAOqB,eAAgB,CACrC,MAAMC,EAAoC,CACxCzN,UAAWzV,KAAKmhB,YAAY1L,UAC5BC,OAAQ1V,KAAKmhB,YAAYzL,OACzByN,MAAQJ,EAAuBI,MAC/BxN,MAAO3V,KAAKmhB,YAAYxL,MACxBJ,cAAevV,KAAKmhB,YAAY5L,cAChCM,gBAAiB7V,KAAKmhB,YAAYtL,gBAClCuN,UAAWpjB,KAAKmhB,YAAY/f,IAC5B4O,IAAKhQ,KAAKohB,gBAGNphB,KAAKiiB,YAAY,iBAAkBjiB,KAAK+gB,OAAOa,MAAMqB,eAAgBC,GAAc,GACzFljB,KAAKoV,OAAON,IAAI,yDAClB,CAgEA,GA7DA9U,KAAKghB,MAAQ,IAAI/K,GACfM,EACAvW,KAAK+gB,OAAO5K,wBACZ,CACES,iBAAmBjM,IAEjB,GAAI3K,KAAK+gB,OAAOa,OAAOhL,iBAAkB,CACvC,MAAMyM,EAAwC,CAC5C5N,UAAWzV,KAAKmhB,YAAa1L,UAC7BC,OAAQ1V,KAAKmhB,YAAazL,OAC1Ba,iBAAkB5L,EAAK4L,kBAEzBvW,KAAKiiB,YAAY,mBAAoBjiB,KAAK+gB,OAAOa,MAAMhL,iBAAkByM,GAAgB,GACtFpP,SAAejU,KAAKoV,OAAOtU,MAAM,gCAAiCA,GACvE,CAEAd,KAAKsjB,iBAAiB3Y,EAAK4L,kBAC3BvW,KAAKoW,OAAOQ,mBAAmBjM,IAEjCmM,aAAc,KACZ9W,KAAKqhB,UAAY,UACjBrhB,KAAKujB,eAGTvjB,KAAK+gB,OAAOnM,OAIV5U,KAAK+gB,OAAOS,iBAAmBxhB,KAAKohB,WACtCphB,KAAKihB,UAAY,IAAIrJ,GACnB5X,KAAKmhB,YAAY1L,UACjBzV,KAAK+gB,OAAOlJ,YACZ7X,KAAKohB,SACJ7K,IAECvW,KAAKghB,OAAOrJ,oBAAoBpB,IAEjCzV,IACCd,KAAKoV,OAAOtU,MAAM,mBAAoBA,GACtCd,KAAKoW,OAAO2B,UAAUjX,IAExBd,KAAK+gB,OAAO/I,yBACZhY,KAAK+gB,OAAOnM,QAKZ5U,KAAK+gB,OAAOU,gBACdzhB,KAAKkhB,QAAU,IAAIjI,GACjBjZ,KAAKmhB,YAAY1L,UAChB7V,GAAYI,KAAKwjB,qBAAqB5jB,GACvCI,KAAK+gB,OAAOnM,QAKZ5U,KAAK+gB,OAAOW,eACd1hB,KAAKyjB,+BAIHzjB,KAAK+gB,OAAOO,YACdthB,KAAKghB,MAAMvK,QACXzW,KAAKoV,OAAON,IAAI,+BAGZ9U,KAAK+gB,OAAOS,iBAAmBxhB,KAAKihB,WAAW,EAC/BjhB,KAAKkhB,SAAWlhB,KAAKkhB,QAAQ3G,eAE7Cva,KAAKihB,UAAUxK,QACfzW,KAAKoV,OAAON,IAAI,mCAEhB9U,KAAKoV,OAAON,IAAI,oCAEpB,CAOF,OAHA9U,KAAKoW,OAAO6M,iBAAiBjjB,KAAKmhB,aAElCnhB,KAAKoV,OAAOJ,KAAK,oCACVhV,KAAKmhB,WAEd,OAASrgB,GACPd,KAAKoV,OAAOtU,MAAM,yBAA0BA,GAC5C,MAAM+X,EAAW/X,aAAiBrB,EAAWqB,EAAQ,IAAIrB,EACvDqB,aAAiBpB,MAAQoB,EAAMlB,QAAU,gBACzC,wBAGF,MADAI,KAAKoW,OAAO2B,UAAUc,GAChBA,CACR,CACF,CAKA,yBAAcmK,CAAoB3iB,GAChC,MAAMyT,QAAiBD,MACrB,GAAG7T,KAAK+gB,OAAOlJ,gCACf,CACE9D,OAAQ,OACRxI,QAAS,CACP+M,cAAiB,UAAUjY,IAC3B,eAAgB,oBAElBkY,KAAM3X,KAAK4X,UAAU,CAAEkL,YAAarjB,MAIxC,IAAKyT,EAAS6E,GACZ,MAAM,IAAIlZ,EACR,4BACA,4BACAqU,EAASI,QAIb,MAAMvJ,QAAamJ,EAASK,OAC5B,IAAKxJ,EAAKgZ,MACR,MAAM,IAAIlkB,EACRkL,EAAK7J,OAAS,4BACd,mBAMJ,OADgBX,EAAUC,OAAOC,EAEnC,CAKQ,oBAAAmjB,CAAqB5jB,GAG3B,OAFAI,KAAKoV,OAAON,IAAI,oBAAqBlV,EAAQ8I,MAErC9I,EAAQ8I,MACd,IAAK,QACH1I,KAAKghB,OAAOhK,QACZ,MACF,IAAK,SACHhX,KAAKghB,OAAO/J,SACZ,MACF,IAAK,MACHjX,KAAKujB,aACL,MACF,IAAK,oBAC8B,IAA7B3jB,EAAQ2W,kBACVvW,KAAKghB,OAAOrJ,oBAAoB/X,EAAQ2W,kBAIhD,CAKQ,4BAAAkN,GACNhF,SAAS5E,iBAAiB,mBAAoB,KACxC4E,SAASmF,QACX5jB,KAAKoV,OAAON,IAAI,6BAChB9U,KAAK6jB,eAEL7jB,KAAKoV,OAAON,IAAI,+BAChB9U,KAAK8jB,iBAGT9jB,KAAKoV,OAAON,IAAI,qCAClB,CAKA,UAAAiP,GACE,IAAK/jB,KAAKghB,MACR,MAAM,IAAIvhB,EACR,gDACA,mBAGJO,KAAKghB,MAAMvK,QACXzW,KAAKkhB,SAASnH,UAAU,UACxB/Z,KAAKoV,OAAOJ,KAAK,yBACnB,CAKA,UAAA6O,GACE7jB,KAAKghB,OAAOhK,QACZhX,KAAKkhB,SAASnH,UAAU,SACxB/Z,KAAKoV,OAAOJ,KAAK,eACnB,CAKA,WAAA8O,GACE9jB,KAAKghB,OAAO/J,SACZjX,KAAKkhB,SAASnH,UAAU,UACxB/Z,KAAKoV,OAAOJ,KAAK,gBACnB,CAKA,mBAAMgP,CAAcC,GAClB,IAAKjkB,KAAKmhB,cAAgBnhB,KAAKohB,SAC7B,MAAM,IAAI3hB,EAAS,oBAAqB,cAG1CO,KAAKoV,OAAOJ,KAAK,uBAAwBiP,EAAmB,WAE5D,IACE,MAAMnQ,QAAiBD,MACrB,GAAG7T,KAAK+gB,OAAOlJ,wBAAwB7X,KAAKmhB,YAAY1L,kBACxD,CACE1B,OAAQ,MACRxI,QAAS,CACP+M,cAAiB,UAAUtY,KAAKohB,WAChC,eAAgB,oBAElB7I,KAAM3X,KAAK4X,UAAU,CACnB0L,mBAAoBD,MAK1B,IAAKnQ,EAAS6E,GACZ,MAAM,IAAIlZ,EACR,2BACA,mBACAqU,EAASI,QAIb,MAAMvJ,QAAamJ,EAASK,OAG5BnU,KAAKmhB,YAAY/f,IAAMuJ,EAAKwZ,eAG5B,MAAM7iB,EAAMG,KAAKC,MAAML,KAAKC,MAAQ,KAC9BiV,EAAmB5L,EAAKwZ,eAAiB7iB,EAO/C,GANAtB,KAAKghB,OAAOrJ,oBAAoBpB,GAGhCvW,KAAKkhB,SAASnH,UAAU,eAAgB,CAAExD,qBAGtCvW,KAAK+gB,OAAOa,OAAOwC,gBAAiB,CACtC,MAAMC,EAAsC,CAC1C5O,UAAWzV,KAAKmhB,YAAY1L,UAC5BC,OAAQ1V,KAAKmhB,YAAYzL,OACzBuO,oBACAK,aAAc3Z,EAAKwZ,sBAGfnkB,KAAKiiB,YAAY,kBAAmBjiB,KAAK+gB,OAAOa,MAAMwC,gBAAiBC,GAAe,EAC9F,CAEArkB,KAAKoV,OAAOJ,KAAK,gCAEnB,OAASlU,GACPd,KAAKoV,OAAOtU,MAAM,4BAA6BA,GAC/C,MAAM+X,EAAW/X,aAAiBrB,EAAWqB,EAAQ,IAAIrB,EACvDqB,aAAiBpB,MAAQoB,EAAMlB,QAAU,mBACzC,mBAGF,MADAI,KAAKoW,OAAO2B,UAAUc,GAChBA,CACR,CACF,CAKA,qBAAM0L,CAAgBC,GACpB,IAAKxkB,KAAKmhB,cAAgBnhB,KAAKohB,SAC7B,MAAM,IAAI3hB,EAAS,oBAAqB,cAG1CO,KAAKoV,OAAOJ,KAAK,yBAEjB,IACE,MAAMlB,QAAiBD,MACrB,GAAG7T,KAAK+gB,OAAOlJ,wBAAwB7X,KAAKmhB,YAAY1L,qBACxD,CACE1B,OAAQ,OACRxI,QAAS,CACP+M,cAAiB,UAAUtY,KAAKohB,WAChC,eAAgB,oBAElB7I,KAAM3X,KAAK4X,UAAU,CACnBiM,qBAAsBD,EACtBE,SAAU,CAAA,MAKhB,IAAK5Q,EAAS6E,GACZ,MAAM,IAAIlZ,EACR,4BACA,oBACAqU,EAASI,QAIb,MAAMvJ,QAAamJ,EAASK,OAC5BnU,KAAKoV,OAAOJ,KAAK,qBAAsBrK,GAGvC3K,KAAKujB,YAEP,OAASziB,GACPd,KAAKoV,OAAOtU,MAAM,8BAA+BA,GACjD,MAAM+X,EAAW/X,aAAiBrB,EAAWqB,EAAQ,IAAIrB,EACvDqB,aAAiBpB,MAAQoB,EAAMlB,QAAU,oBACzC,oBAGF,MADAI,KAAKoW,OAAO2B,UAAUc,GAChBA,CACR,CACF,CAKA,gBAAM0K,GACJvjB,KAAKoV,OAAOJ,KAAK,qBAGjB,MAAM2P,EAAgC,CACpClP,UAAWzV,KAAKmhB,aAAa1L,WAAa,GAC1CC,OAAQ1V,KAAKmhB,aAAazL,QAAU,GACpClS,OAAQxD,KAAKqhB,UACbuD,sBAAuB5kB,KAAK2iB,2BAI9B,GAAI3iB,KAAK+gB,OAAOa,OAAO9K,aACrB,UACQ9W,KAAKiiB,YAAY,eAAgBjiB,KAAK+gB,OAAOa,MAAM9K,aAAc6N,GAAY,GACnF3kB,KAAKoV,OAAON,IAAI,qCAClB,OAAShU,GAEPd,KAAKoV,OAAOtU,MAAM,+CAAgDA,EACpE,CAIFd,KAAKghB,OAAOnK,OAGZ7W,KAAKihB,WAAWpK,OAGhB7W,KAAKkhB,SAASnH,UAAU,OAGM,oBAAnB+I,iBACTA,eAAexI,WAAW,sBAC1Bta,KAAKoV,OAAON,IAAI,mCAIlB9U,KAAKoW,OAAOU,iBAEZ9W,KAAKoV,OAAOJ,KAAK,iBAGK,oBAAX0B,SAEJ1W,KAAK6d,QACR7d,KAAK6d,MAAQ,IAAIH,GACf1d,KAAK+gB,OAAOpD,WAAa,QACzB3d,KAAK+gB,OAAOnD,eAKhB5d,KAAK6d,MAAMsC,kBAAkB,KAC3BzJ,OAAOiK,SAAS5N,KAAO/S,KAAK+gB,OAAOQ,gBAClC,KAEP,CAKQ,gBAAA+B,CAAiB/M,GAClBvW,KAAK6d,QACR7d,KAAK6d,MAAQ,IAAIH,GACf1d,KAAK+gB,OAAOpD,WAAa,QACzB3d,KAAK+gB,OAAOnD,eAIhB5d,KAAK6d,MAAMU,KAAK,CACdhI,mBACA2I,SAAUlY,UAER,UACQhH,KAAKgkB,cAAc,IACzBhkB,KAAK6d,OAAOW,OACZxe,KAAKoV,OAAON,IAAI,2CAClB,OAAShU,GAEPd,KAAKoV,OAAOtU,MAAM,gDAAiDA,GACnE,MAAMygB,EAAiB,GAAGvhB,KAAK+gB,OAAOQ,0CAA0CvhB,KAAKmhB,aAAa1L,YAG5E,oBAAXiB,SACJ1W,KAAK6d,QACR7d,KAAK6d,MAAQ,IAAIH,GACf1d,KAAK+gB,OAAOpD,WAAa,QACzB3d,KAAK+gB,OAAOnD,eAGhB5d,KAAK6d,MAAMsC,kBAAkB,KAC3BzJ,OAAOiK,SAAS5N,KAAOwO,GACtB,KAEP,GAEFvC,MAAO,KAELhf,KAAKujB,eAGX,CAKA,cAAAsB,GACE,OAAO7kB,KAAKmhB,WACd,CAKA,gBAAA2D,GACE,OAAO9kB,KAAKghB,OAAO9J,uBAAyB,CAC9C,CAKA,gBAAAC,GACE,OAAOnX,KAAKghB,OAAO7J,oBAAsB,MAC3C,CAKA,yBAAAE,GACE,OAAOrX,KAAKghB,OAAO3J,6BAA+B,SACpD,CAKA,cAAA0N,GACE,OAAO/kB,KAAKghB,OAAOvJ,cAAe,CACpC,CAKA,OAAA+C,GACExa,KAAKoV,OAAOJ,KAAK,8BACjBhV,KAAKghB,OAAOnK,OACZ7W,KAAKihB,WAAWpK,OAChB7W,KAAKkhB,SAAS1G,UACdxa,KAAK6d,OAAOW,OAGkB,oBAAnBsE,iBACTA,eAAexI,WAAW,sBAC1Bta,KAAKoV,OAAON,IAAI,mCAGlB9U,KAAKmhB,YAAc,KACnBnhB,KAAKohB,SAAW,IAClB,sHChsBK,MAUL,WAAAzhB,CAAYge,EAAuB,QATnC3d,KAAQglB,UAAmC,KAE3ChlB,KAAQ+Y,eAAgC,KACxC/Y,KAAQ+d,YAAkC,KAI1C/d,KAAQilB,SAAmB,EAGzB,MAAM1H,EAA4B,SAAdI,GAAuC,SAAdA,GAAwB3d,KAAKke,iBAC1Ele,KAAKme,MAAQb,GAASC,EACxB,CAEQ,cAAAW,GACN,QAAsB,oBAAXxH,SAA0BA,OAAO8G,aACnC9G,OAAO8G,WAAW,gCAAgCC,OAG7D,CAOA,KAAAyH,CACEC,EACA9hB,GAQIrD,KAAKilB,SACPjlB,KAAKolB,UAIP,MAAMC,EACqB,iBAAlBF,EACH1G,SAAS6G,cAA2BH,GACpCA,EAEN,IAAKE,EAEH,OAGFrlB,KAAKulB,gBAAkBliB,EAAQsM,QAC/B3P,KAAKwlB,iBAAmBniB,EAAQ6b,SAChClf,KAAKie,cAAgB5a,EAAQ2b,MAG7Bhf,KAAKglB,UAAYvG,SAASC,cAAc,OACxC1e,KAAKglB,UAAUrG,GAAK,oBAEpB,MAAM8G,EAAWpiB,EAAQoiB,UAAY,QAC/BC,EACS,SAAbD,EAAsB,aACT,WAAbA,EAAwB,SACxB,WAEFzlB,KAAKglB,UAAUpG,MAAMC,QAAU,8EAGV6G,kBACZ1lB,KAAKme,MAAMlB,QAAQG,IAAID,uBACnBnd,KAAKme,MAAMlB,QAAQlb,QAAQsa,MAAMrc,KAAKme,MAAMlB,QAAQlb,QAAQob,gCACnDnd,KAAKme,MAAMvD,OAAOG,kCAClB/a,KAAKme,MAAMvD,OAAOmB,iCACrB/b,KAAKme,MAAMlB,QAAQC,aAAaC,2BAClCnd,KAAKme,MAAMlC,WAAWC,qEAKvC,MAAMyJ,EAAelH,SAASC,cAAc,OAC5CiH,EAAa/G,MAAMC,QAAU,kEAGpB7e,KAAKme,MAAMlB,QAAQG,IAAIf,qBACrBrc,KAAKme,MAAMvD,OAAOE,iCACd9a,KAAKme,MAAMlC,WAAWE,SAASE,2BAC7Brc,KAAKme,MAAMlC,WAAWQ,WAAWE,gBAGlD,MAAMiJ,EAAYnH,SAASC,cAAc,QACzCkH,EAAU7F,YAAc,KACxB6F,EAAUhH,MAAMzC,SAAWnc,KAAKme,MAAMlC,WAAWE,SAASG,KAE1Dtc,KAAK+d,YAAcU,SAASC,cAAc,QAC1C1e,KAAK+d,YAAYY,GAAK,kBACtB3e,KAAK+d,YAAYgC,YAAc/f,KAAKulB,qBAAuB,QAC3DvlB,KAAK+d,YAAYa,MAAMC,QAAU,uGAMjC8G,EAAaxG,YAAYyG,GACzBD,EAAaxG,YAAYnf,KAAK+d,aAC9B/d,KAAKglB,UAAU7F,YAAYwG,GAG3B,MAAME,EAAkBpH,SAASC,cAAc,OAO/C,GANAmH,EAAgBjH,MAAMC,QAAU,sCAEvB7e,KAAKme,MAAMlB,QAAQG,IAAIf,YAI5Brc,KAAKwlB,iBAAkB,CACzB,MAAMpG,EAAYX,SAASC,cAAc,UACzCU,EAAUW,YAAc,SACxBX,EAAUR,MAAMC,QAAU,sBACb7e,KAAKme,MAAMlB,QAAQlb,QAAQsa,kCAClBrc,KAAKme,MAAMvD,OAAOiB,4BAC7B7b,KAAKme,MAAMvD,OAAOkB,qEAEV9b,KAAKme,MAAMlB,QAAQC,aAAab,2BACpCrc,KAAKme,MAAMlC,WAAWE,SAASE,6BAC7Brc,KAAKme,MAAMlC,WAAWQ,WAAWE,iCACjC3c,KAAKme,MAAMlC,WAAWC,mFAIvCkD,EAAUvF,iBAAiB,aAAc,KACvCuF,EAAUR,MAAMe,QAAU,QAE5BP,EAAUvF,iBAAiB,aAAc,KACvCuF,EAAUR,MAAMe,QAAU,MAE5BP,EAAUvF,iBAAiB,QAAS,KAClC7Z,KAAKwlB,uBAEPK,EAAgB1G,YAAYC,EAC9B,CAGA,GAAIpf,KAAKie,cAAe,CACtB,MAAMsB,EAASd,SAASC,cAAc,UACtCa,EAAOQ,YAAc,MACrBR,EAAOX,MAAMC,QAAU,sBACV7e,KAAKme,MAAMlB,QAAQlb,QAAQsa,kCAClBrc,KAAKme,MAAMvD,OAAOS,8BAC7Brb,KAAKme,MAAMvD,OAAOU,mDACPtb,KAAKme,MAAMvD,OAAOmB,mCACrB/b,KAAKme,MAAMlB,QAAQC,aAAab,2BACpCrc,KAAKme,MAAMlC,WAAWE,SAASE,6BAC7Brc,KAAKme,MAAMlC,WAAWQ,WAAWE,iCACjC3c,KAAKme,MAAMlC,WAAWC,mFAIvCqD,EAAO1F,iBAAiB,aAAc,KACpC0F,EAAOX,MAAMe,QAAU,QAEzBJ,EAAO1F,iBAAiB,aAAc,KACpC0F,EAAOX,MAAMe,QAAU,MAEzBJ,EAAO1F,iBAAiB,QAAS,KAC/B7Z,KAAKie,oBAEP4H,EAAgB1G,YAAYI,EAC9B,CAEIsG,EAAgBC,SAAStlB,OAAS,GACpCR,KAAKglB,UAAU7F,YAAY0G,GAI7BR,EAAOlG,YAAYnf,KAAKglB,WACxBhlB,KAAKilB,SAAU,EAGfjlB,KAAK+lB,eACP,CAKQ,aAAAA,GACF/lB,KAAK+Y,gBACPhC,cAAc/W,KAAK+Y,gBAGrB/Y,KAAK+Y,eAAiBrC,OAAOC,YAAY,KACvC,GAAI3W,KAAK+d,aAAe/d,KAAKulB,gBAAiB,CAC5C,MAAMS,EAAUhmB,KAAKulB,kBACrBvlB,KAAK+d,YAAYgC,YAAciG,EAG/B,MAAOzO,GAAWyO,EAAQzlB,MAAM,KAAK0lB,IAAIC,SACpCC,MAAM5O,IAAYA,EAAU,GAC/BvX,KAAK+d,YAAYa,MAAMwH,MAAQpmB,KAAKme,MAAMvD,OAAOe,YACjD3b,KAAK+d,YAAYa,MAAMnC,WAAazc,KAAKme,MAAMlC,WAAWQ,WAAWI,OAErE7c,KAAK+d,YAAYa,MAAMwH,MAAQpmB,KAAKme,MAAMvD,OAAOE,WACjD9a,KAAK+d,YAAYa,MAAMnC,WAAazc,KAAKme,MAAMlC,WAAWQ,WAAWE,OAEzE,GACC,IACL,CAKA,OAAAyI,GACMplB,KAAK+Y,iBACPhC,cAAc/W,KAAK+Y,gBACnB/Y,KAAK+Y,eAAiB,MAGpB/Y,KAAKglB,WAAahlB,KAAKglB,UAAUhF,YACnChgB,KAAKglB,UAAUhF,WAAWC,YAAYjgB,KAAKglB,WAG7ChlB,KAAKglB,UAAY,KACjBhlB,KAAK+d,YAAc,KACnB/d,KAAKilB,SAAU,CACjB,CAKA,SAAAoB,GACE,OAAOrmB,KAAKilB,OACd,CAKA,WAAAqB,CAAY3I,GACV,MAAMJ,EAA4B,SAAdI,GAAuC,SAAdA,GAAwB3d,KAAKke,iBAI1E,GAHAle,KAAKme,MAAQb,GAASC,GAGlBvd,KAAKilB,SAAWjlB,KAAKglB,WAAahlB,KAAKglB,UAAUuB,cAAe,CAClE,MAAMC,EAASxmB,KAAKglB,UAAUuB,cACxBljB,EAAU,CACdsM,QAAS3P,KAAKulB,gBACdrG,SAAUlf,KAAKwlB,iBACfxG,MAAOhf,KAAKie,eAEdje,KAAKolB,UACLplB,KAAKklB,MAAMsB,EAAQnjB,EACrB,CACF,uIJoCK,SAA8B8a,GACnC,MAAO,0BACcA,EAAMvD,OAAOC,qCACbsD,EAAMvD,OAAOE,+BACnBqD,EAAMvD,OAAOG,oCACFoD,EAAMvD,OAAOI,sCACrBmD,EAAMvD,OAAOO,0CACFgD,EAAMvD,OAAOQ,2CACtB+C,EAAMvD,OAAOS,8CACF8C,EAAMvD,OAAOU,yCAC5B6C,EAAMvD,OAAOW,sCACF4C,EAAMvD,OAAOY,sCACvB2C,EAAMvD,OAAOa,wCACF0C,EAAMvD,OAAOc,4CACnByC,EAAMvD,OAAOe,kDACFwC,EAAMvD,OAAOgB,6CAC5BuC,EAAMvD,OAAOiB,0CACFsC,EAAMvD,OAAOkB,wCACzBqC,EAAMvD,OAAOmB,4BACdoC,EAAMvD,OAAOnY,0BACd0b,EAAMvD,OAAOoB,YAC1ByK,MACJ,4BE1RO,WACL,MAAyB,oBAAX/P,aAAqD,IAApBA,OAAO+H,QACxD","x_google_ignoreList":[2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29]}
+{"version":3,"file":"marketplace-sdk.umd.js","sources":["../src/types/index.ts","../src/core/JWTParser.ts","../node_modules/jose/dist/webapi/lib/buffer_utils.js","../node_modules/jose/dist/webapi/util/base64url.js","../node_modules/jose/dist/webapi/lib/base64.js","../node_modules/jose/dist/webapi/util/errors.js","../node_modules/jose/dist/webapi/lib/crypto_key.js","../node_modules/jose/dist/webapi/lib/invalid_key_input.js","../node_modules/jose/dist/webapi/lib/is_key_like.js","../node_modules/jose/dist/webapi/lib/is_object.js","../node_modules/jose/dist/webapi/lib/jwk_to_key.js","../node_modules/jose/dist/webapi/lib/is_jwk.js","../node_modules/jose/dist/webapi/lib/normalize_key.js","../node_modules/jose/dist/webapi/lib/check_key_type.js","../node_modules/jose/dist/webapi/lib/get_sign_verify_key.js","../node_modules/jose/dist/webapi/lib/verify.js","../node_modules/jose/dist/webapi/lib/check_key_length.js","../node_modules/jose/dist/webapi/lib/subtle_dsa.js","../node_modules/jose/dist/webapi/jws/flattened/verify.js","../node_modules/jose/dist/webapi/lib/is_disjoint.js","../node_modules/jose/dist/webapi/lib/validate_crit.js","../node_modules/jose/dist/webapi/lib/validate_algorithms.js","../node_modules/jose/dist/webapi/lib/epoch.js","../node_modules/jose/dist/webapi/lib/secs.js","../node_modules/jose/dist/webapi/lib/jwt_claims_set.js","../node_modules/jose/dist/webapi/jwt/verify.js","../node_modules/jose/dist/webapi/jws/compact/verify.js","../node_modules/jose/dist/webapi/jwks/local.js","../node_modules/jose/dist/webapi/key/import.js","../node_modules/jose/dist/webapi/jwks/remote.js","../src/utils/logger.ts","../src/core/JWKSValidator.ts","../src/core/TimerManager.ts","../src/core/HeartbeatManager.ts","../src/core/TabSyncManager.ts","../src/styles/theme.ts","../src/ui/WarningModal.ts","../src/utils/url.ts","../src/core/MarketplaceSDK.ts","../src/ui/SessionHeader.ts"],"sourcesContent":["/**\n * SDK Configuration\n */\nexport interface SDKConfig {\n  /** JWKS endpoint URL (default: https://api.generalwisdom.com/.well-known/jwks.json) */\n  jwksUri?: string;\n  /** URL query parameter name containing the JWT (default: 'gwSession') */\n  jwtParamName?: string;\n  /** API endpoint for backend integration (Phase 2) */\n  apiEndpoint?: string;\n  /** Enable debug logging */\n  debug?: boolean;\n  /** Auto-start timer after initialization */\n  autoStart?: boolean;\n  /** Warning threshold in seconds (default: 300 = 5 minutes) */\n  warningThresholdSeconds?: number;\n  /** Custom styling for warning modal (Legacy - prefer using themeMode) */\n  customStyles?: Partial<ModalStyles>;\n  /** Theme mode for modal styling (default: 'light') */\n  themeMode?: ThemeMode;\n  /** Application ID for validation */\n  applicationId?: string;\n  /** Marketplace URL for redirects (default: https://d3p2yqofgy75sz.cloudfront.net/) */\n  marketplaceUrl?: string;\n\n  // Phase 2 Features\n  /** Enable heartbeat system (default: false) */\n  enableHeartbeat?: boolean;\n  /** Heartbeat interval in seconds (default: 30) */\n  heartbeatIntervalSeconds?: number;\n  /** Enable multi-tab synchronization (default: false) */\n  enableTabSync?: boolean;\n  /** Pause timer when tab is hidden (default: false) */\n  pauseOnHidden?: boolean;\n  /** Use backend validation instead of JWKS (default: false) */\n  useBackendValidation?: boolean;\n\n  // Lifecycle Hooks\n  /** Optional hooks for synchronizing app auth state with marketplace sessions */\n  hooks?: SessionLifecycleHooks;\n  /** Hook execution timeout in milliseconds (default: 5000) */\n  hookTimeoutMs?: number;\n}\n\n/**\n * Session Data extracted from JWT\n */\nexport interface SessionData {\n  /** Unique session UUID */\n  sessionId: string;\n  /** Application ID */\n  applicationId: string;\n  /** User ID */\n  userId: string;\n  /** Organization ID */\n  orgId: string;\n  /** Session start time (Unix timestamp seconds) */\n  startTime: number;\n  /** Session duration in minutes */\n  durationMinutes: number;\n  /** Issued at timestamp (Unix seconds) */\n  iat: number;\n  /** Expiration timestamp (Unix seconds) */\n  exp: number;\n  /** Issuer */\n  iss: string;\n  /** Subject (user ID) */\n  sub: string;\n}\n\n/**\n * Modal styling options (Legacy - prefer using theme)\n * @deprecated Use theme configuration from src/styles/theme.ts instead\n */\nexport interface ModalStyles {\n  backgroundColor: string;\n  textColor: string;\n  primaryColor: string;\n  borderRadius: string;\n  fontFamily: string;\n}\n\n/**\n * Theme mode for modal styling\n */\nexport type ThemeMode = 'light' | 'dark' | 'auto';\n\n/**\n * SDK Event Handlers\n */\nexport interface SDKEvents {\n  /** Called when session successfully initialized */\n  onSessionStart: (data: SessionData) => void;\n  /** Called when warning threshold reached */\n  onSessionWarning: (data: { remainingSeconds: number }) => void;\n  /** Called when session expires or is ended */\n  onSessionEnd: () => void;\n  /** Called on any error */\n  onError: (error: Error) => void;\n}\n\n/**\n * Session Lifecycle Hook Contexts\n */\nexport interface SessionStartContext {\n  /** Unique session UUID */\n  sessionId: string;\n  /** User ID from JWT */\n  userId: string;\n  /** User email (if available in JWT) */\n  email?: string;\n  /** Organization ID */\n  orgId: string;\n  /** Application ID */\n  applicationId: string;\n  /** Session duration in minutes */\n  durationMinutes: number;\n  /** Expiration timestamp (Unix seconds) */\n  expiresAt: number;\n  /** Full JWT token for app use */\n  jwt: string;\n}\n\nexport interface SessionEndContext {\n  /** Unique session UUID */\n  sessionId: string;\n  /** User ID */\n  userId: string;\n  /** Reason for session end */\n  reason: 'expired' | 'manual' | 'error';\n  /** Actual session duration in minutes (if available) */\n  actualDurationMinutes?: number;\n}\n\nexport interface SessionExtendContext {\n  /** Unique session UUID */\n  sessionId: string;\n  /** User ID */\n  userId: string;\n  /** Additional minutes added to session */\n  additionalMinutes: number;\n  /** New expiration timestamp (Unix seconds) */\n  newExpiresAt: number;\n}\n\nexport interface SessionWarningContext {\n  /** Unique session UUID */\n  sessionId: string;\n  /** User ID */\n  userId: string;\n  /** Remaining seconds until expiration */\n  remainingSeconds: number;\n}\n\n/**\n * Session Lifecycle Hooks\n * Optional callbacks that allow applications to synchronize their auth state with marketplace sessions\n */\nexport interface SessionLifecycleHooks {\n  /**\n   * Called after JWT validation succeeds but before session timer starts\n   * Use to: Auto-login user to your app's auth system\n   * Note: Hook failure will prevent session from starting\n   */\n  onSessionStart?: (context: SessionStartContext) => Promise<void> | void;\n\n  /**\n   * Called when session expires or is manually ended, before redirect\n   * Use to: Force logout user from your app's auth system\n   * Note: Hook failure will be logged but won't prevent session end\n   */\n  onSessionEnd?: (context: SessionEndContext) => Promise<void> | void;\n\n  /**\n   * Called when session extension succeeds\n   * Use to: Refresh app auth tokens if needed\n   */\n  onSessionExtend?: (context: SessionExtendContext) => Promise<void> | void;\n\n  /**\n   * Called before session warning modal is shown\n   * Use to: Prepare user for session expiration\n   */\n  onSessionWarning?: (context: SessionWarningContext) => Promise<void> | void;\n}\n\n/**\n * Custom SDK Error\n */\nexport class SDKError extends Error {\n  constructor(\n    message: string,\n    public code: string,\n    public statusCode?: number\n  ) {\n    super(message);\n    this.name = 'SDKError';\n\n    // Maintains proper stack trace for where our error was thrown (only available on V8)\n    if (Error.captureStackTrace) {\n      Error.captureStackTrace(this, SDKError);\n    }\n  }\n}\n\n/**\n * JWT Header\n */\nexport interface JWTHeader {\n  alg: string;\n  typ: string;\n  kid: string;\n}\n\n/**\n * JWT Claims (raw payload from token)\n */\nexport interface JWTClaims {\n  sessionId: string;\n  applicationId: string;\n  userId: string;\n  orgId: string;\n  startTime: number;\n  durationMinutes: number;\n  iat: number;\n  exp: number;\n  iss: string;\n  sub: string;\n}\n\n/**\n * JWKS Key\n */\nexport interface JWKSKey {\n  kty: string;\n  use: string;\n  kid: string;\n  alg: string;\n  n: string;\n  e: string;\n}\n\n/**\n * JWKS Response\n */\nexport interface JWKSResponse {\n  keys: JWKSKey[];\n}\n","import { SDKError, JWTHeader, JWTClaims } from '../types';\n\n/**\n * JWT Parser for client-side token decoding\n * Note: Does NOT verify signature - use JWKSValidator for verification\n */\nexport class JWTParser {\n  /**\n   * Decode JWT payload without verification\n   * @param token - JWT token string\n   * @returns Decoded payload\n   */\n  static decode(token: string): JWTClaims {\n    if (!token || typeof token !== 'string') {\n      throw new SDKError('Invalid JWT token format', 'INVALID_TOKEN');\n    }\n\n    const parts = token.split('.');\n    if (parts.length !== 3) {\n      throw new SDKError('Malformed JWT token - expected 3 parts', 'MALFORMED_TOKEN');\n    }\n\n    try {\n      const payload = parts[1];\n      const decoded = this.base64UrlDecode(payload);\n      return JSON.parse(decoded) as JWTClaims;\n    } catch (error) {\n      throw new SDKError(\n        `Failed to decode JWT payload: ${error instanceof Error ? error.message : 'Unknown error'}`,\n        'DECODE_ERROR'\n      );\n    }\n  }\n\n  /**\n   * Decode JWT header\n   * @param token - JWT token string\n   * @returns Decoded header\n   */\n  static decodeHeader(token: string): JWTHeader {\n    if (!token || typeof token !== 'string') {\n      throw new SDKError('Invalid JWT token format', 'INVALID_TOKEN');\n    }\n\n    const parts = token.split('.');\n    if (parts.length !== 3) {\n      throw new SDKError('Malformed JWT token - expected 3 parts', 'MALFORMED_TOKEN');\n    }\n\n    try {\n      const header = parts[0];\n      const decoded = this.base64UrlDecode(header);\n      return JSON.parse(decoded) as JWTHeader;\n    } catch (error) {\n      throw new SDKError(\n        `Failed to decode JWT header: ${error instanceof Error ? error.message : 'Unknown error'}`,\n        'DECODE_ERROR'\n      );\n    }\n  }\n\n  /**\n   * Extract specific claim from JWT\n   * @param token - JWT token string\n   * @param claim - Claim name to extract\n   * @returns Claim value\n   */\n  static extractClaim<T = any>(token: string, claim: string): T {\n    const payload = this.decode(token);\n    return (payload as any)[claim];\n  }\n\n  /**\n   * Check if JWT is expired (client-side only, not authoritative)\n   * @param token - JWT token string\n   * @returns True if token is expired\n   */\n  static isExpired(token: string): boolean {\n    const payload = this.decode(token);\n    const exp = payload.exp;\n\n    if (!exp) {\n      return false;\n    }\n\n    // exp is in seconds, Date.now() is in milliseconds\n    return Date.now() >= exp * 1000;\n  }\n\n  /**\n   * Get time remaining until expiration\n   * @param token - JWT token string\n   * @returns Seconds remaining (0 if expired)\n   */\n  static getTimeRemaining(token: string): number {\n    const payload = this.decode(token);\n    const exp = payload.exp;\n\n    if (!exp) {\n      return 0;\n    }\n\n    const remaining = exp - Math.floor(Date.now() / 1000);\n    return Math.max(0, remaining);\n  }\n\n  /**\n   * Base64 URL decode\n   * @param str - Base64 URL encoded string\n   * @returns Decoded string\n   */\n  private static base64UrlDecode(str: string): string {\n    // Replace URL-safe characters\n    let base64 = str.replace(/-/g, '+').replace(/_/g, '/');\n\n    // Add padding if needed\n    const padding = base64.length % 4;\n    if (padding) {\n      base64 += '='.repeat(4 - padding);\n    }\n\n    try {\n      // Use Buffer in Node.js, atob in browser\n      if (typeof Buffer !== 'undefined') {\n        return Buffer.from(base64, 'base64').toString('utf-8');\n      } else if (typeof atob !== 'undefined') {\n        return atob(base64);\n      } else {\n        throw new Error('No base64 decoding available');\n      }\n    } catch (error) {\n      throw new SDKError(\n        'Invalid base64 encoding',\n        'ENCODING_ERROR'\n      );\n    }\n  }\n}\n","export const encoder = new TextEncoder();\nexport const decoder = new TextDecoder();\nconst MAX_INT32 = 2 ** 32;\nexport function concat(...buffers) {\n    const size = buffers.reduce((acc, { length }) => acc + length, 0);\n    const buf = new Uint8Array(size);\n    let i = 0;\n    for (const buffer of buffers) {\n        buf.set(buffer, i);\n        i += buffer.length;\n    }\n    return buf;\n}\nfunction writeUInt32BE(buf, value, offset) {\n    if (value < 0 || value >= MAX_INT32) {\n        throw new RangeError(`value must be >= 0 and <= ${MAX_INT32 - 1}. Received ${value}`);\n    }\n    buf.set([value >>> 24, value >>> 16, value >>> 8, value & 0xff], offset);\n}\nexport function uint64be(value) {\n    const high = Math.floor(value / MAX_INT32);\n    const low = value % MAX_INT32;\n    const buf = new Uint8Array(8);\n    writeUInt32BE(buf, high, 0);\n    writeUInt32BE(buf, low, 4);\n    return buf;\n}\nexport function uint32be(value) {\n    const buf = new Uint8Array(4);\n    writeUInt32BE(buf, value);\n    return buf;\n}\n","import { encoder, decoder } from '../lib/buffer_utils.js';\nimport { encodeBase64, decodeBase64 } from '../lib/base64.js';\nexport function decode(input) {\n    if (Uint8Array.fromBase64) {\n        return Uint8Array.fromBase64(typeof input === 'string' ? input : decoder.decode(input), {\n            alphabet: 'base64url',\n        });\n    }\n    let encoded = input;\n    if (encoded instanceof Uint8Array) {\n        encoded = decoder.decode(encoded);\n    }\n    encoded = encoded.replace(/-/g, '+').replace(/_/g, '/').replace(/\\s/g, '');\n    try {\n        return decodeBase64(encoded);\n    }\n    catch {\n        throw new TypeError('The input to be decoded is not correctly encoded.');\n    }\n}\nexport function encode(input) {\n    let unencoded = input;\n    if (typeof unencoded === 'string') {\n        unencoded = encoder.encode(unencoded);\n    }\n    if (Uint8Array.prototype.toBase64) {\n        return unencoded.toBase64({ alphabet: 'base64url', omitPadding: true });\n    }\n    return encodeBase64(unencoded).replace(/=/g, '').replace(/\\+/g, '-').replace(/\\//g, '_');\n}\n","export function encodeBase64(input) {\n    if (Uint8Array.prototype.toBase64) {\n        return input.toBase64();\n    }\n    const CHUNK_SIZE = 0x8000;\n    const arr = [];\n    for (let i = 0; i < input.length; i += CHUNK_SIZE) {\n        arr.push(String.fromCharCode.apply(null, input.subarray(i, i + CHUNK_SIZE)));\n    }\n    return btoa(arr.join(''));\n}\nexport function decodeBase64(encoded) {\n    if (Uint8Array.fromBase64) {\n        return Uint8Array.fromBase64(encoded);\n    }\n    const binary = atob(encoded);\n    const bytes = new Uint8Array(binary.length);\n    for (let i = 0; i < binary.length; i++) {\n        bytes[i] = binary.charCodeAt(i);\n    }\n    return bytes;\n}\n","export class JOSEError extends Error {\n    static code = 'ERR_JOSE_GENERIC';\n    code = 'ERR_JOSE_GENERIC';\n    constructor(message, options) {\n        super(message, options);\n        this.name = this.constructor.name;\n        Error.captureStackTrace?.(this, this.constructor);\n    }\n}\nexport class JWTClaimValidationFailed extends JOSEError {\n    static code = 'ERR_JWT_CLAIM_VALIDATION_FAILED';\n    code = 'ERR_JWT_CLAIM_VALIDATION_FAILED';\n    claim;\n    reason;\n    payload;\n    constructor(message, payload, claim = 'unspecified', reason = 'unspecified') {\n        super(message, { cause: { claim, reason, payload } });\n        this.claim = claim;\n        this.reason = reason;\n        this.payload = payload;\n    }\n}\nexport class JWTExpired extends JOSEError {\n    static code = 'ERR_JWT_EXPIRED';\n    code = 'ERR_JWT_EXPIRED';\n    claim;\n    reason;\n    payload;\n    constructor(message, payload, claim = 'unspecified', reason = 'unspecified') {\n        super(message, { cause: { claim, reason, payload } });\n        this.claim = claim;\n        this.reason = reason;\n        this.payload = payload;\n    }\n}\nexport class JOSEAlgNotAllowed extends JOSEError {\n    static code = 'ERR_JOSE_ALG_NOT_ALLOWED';\n    code = 'ERR_JOSE_ALG_NOT_ALLOWED';\n}\nexport class JOSENotSupported extends JOSEError {\n    static code = 'ERR_JOSE_NOT_SUPPORTED';\n    code = 'ERR_JOSE_NOT_SUPPORTED';\n}\nexport class JWEDecryptionFailed extends JOSEError {\n    static code = 'ERR_JWE_DECRYPTION_FAILED';\n    code = 'ERR_JWE_DECRYPTION_FAILED';\n    constructor(message = 'decryption operation failed', options) {\n        super(message, options);\n    }\n}\nexport class JWEInvalid extends JOSEError {\n    static code = 'ERR_JWE_INVALID';\n    code = 'ERR_JWE_INVALID';\n}\nexport class JWSInvalid extends JOSEError {\n    static code = 'ERR_JWS_INVALID';\n    code = 'ERR_JWS_INVALID';\n}\nexport class JWTInvalid extends JOSEError {\n    static code = 'ERR_JWT_INVALID';\n    code = 'ERR_JWT_INVALID';\n}\nexport class JWKInvalid extends JOSEError {\n    static code = 'ERR_JWK_INVALID';\n    code = 'ERR_JWK_INVALID';\n}\nexport class JWKSInvalid extends JOSEError {\n    static code = 'ERR_JWKS_INVALID';\n    code = 'ERR_JWKS_INVALID';\n}\nexport class JWKSNoMatchingKey extends JOSEError {\n    static code = 'ERR_JWKS_NO_MATCHING_KEY';\n    code = 'ERR_JWKS_NO_MATCHING_KEY';\n    constructor(message = 'no applicable key found in the JSON Web Key Set', options) {\n        super(message, options);\n    }\n}\nexport class JWKSMultipleMatchingKeys extends JOSEError {\n    [Symbol.asyncIterator];\n    static code = 'ERR_JWKS_MULTIPLE_MATCHING_KEYS';\n    code = 'ERR_JWKS_MULTIPLE_MATCHING_KEYS';\n    constructor(message = 'multiple matching keys found in the JSON Web Key Set', options) {\n        super(message, options);\n    }\n}\nexport class JWKSTimeout extends JOSEError {\n    static code = 'ERR_JWKS_TIMEOUT';\n    code = 'ERR_JWKS_TIMEOUT';\n    constructor(message = 'request timed out', options) {\n        super(message, options);\n    }\n}\nexport class JWSSignatureVerificationFailed extends JOSEError {\n    static code = 'ERR_JWS_SIGNATURE_VERIFICATION_FAILED';\n    code = 'ERR_JWS_SIGNATURE_VERIFICATION_FAILED';\n    constructor(message = 'signature verification failed', options) {\n        super(message, options);\n    }\n}\n","function unusable(name, prop = 'algorithm.name') {\n    return new TypeError(`CryptoKey does not support this operation, its ${prop} must be ${name}`);\n}\nfunction isAlgorithm(algorithm, name) {\n    return algorithm.name === name;\n}\nfunction getHashLength(hash) {\n    return parseInt(hash.name.slice(4), 10);\n}\nfunction getNamedCurve(alg) {\n    switch (alg) {\n        case 'ES256':\n            return 'P-256';\n        case 'ES384':\n            return 'P-384';\n        case 'ES512':\n            return 'P-521';\n        default:\n            throw new Error('unreachable');\n    }\n}\nfunction checkUsage(key, usage) {\n    if (usage && !key.usages.includes(usage)) {\n        throw new TypeError(`CryptoKey does not support this operation, its usages must include ${usage}.`);\n    }\n}\nexport function checkSigCryptoKey(key, alg, usage) {\n    switch (alg) {\n        case 'HS256':\n        case 'HS384':\n        case 'HS512': {\n            if (!isAlgorithm(key.algorithm, 'HMAC'))\n                throw unusable('HMAC');\n            const expected = parseInt(alg.slice(2), 10);\n            const actual = getHashLength(key.algorithm.hash);\n            if (actual !== expected)\n                throw unusable(`SHA-${expected}`, 'algorithm.hash');\n            break;\n        }\n        case 'RS256':\n        case 'RS384':\n        case 'RS512': {\n            if (!isAlgorithm(key.algorithm, 'RSASSA-PKCS1-v1_5'))\n                throw unusable('RSASSA-PKCS1-v1_5');\n            const expected = parseInt(alg.slice(2), 10);\n            const actual = getHashLength(key.algorithm.hash);\n            if (actual !== expected)\n                throw unusable(`SHA-${expected}`, 'algorithm.hash');\n            break;\n        }\n        case 'PS256':\n        case 'PS384':\n        case 'PS512': {\n            if (!isAlgorithm(key.algorithm, 'RSA-PSS'))\n                throw unusable('RSA-PSS');\n            const expected = parseInt(alg.slice(2), 10);\n            const actual = getHashLength(key.algorithm.hash);\n            if (actual !== expected)\n                throw unusable(`SHA-${expected}`, 'algorithm.hash');\n            break;\n        }\n        case 'Ed25519':\n        case 'EdDSA': {\n            if (!isAlgorithm(key.algorithm, 'Ed25519'))\n                throw unusable('Ed25519');\n            break;\n        }\n        case 'ML-DSA-44':\n        case 'ML-DSA-65':\n        case 'ML-DSA-87': {\n            if (!isAlgorithm(key.algorithm, alg))\n                throw unusable(alg);\n            break;\n        }\n        case 'ES256':\n        case 'ES384':\n        case 'ES512': {\n            if (!isAlgorithm(key.algorithm, 'ECDSA'))\n                throw unusable('ECDSA');\n            const expected = getNamedCurve(alg);\n            const actual = key.algorithm.namedCurve;\n            if (actual !== expected)\n                throw unusable(expected, 'algorithm.namedCurve');\n            break;\n        }\n        default:\n            throw new TypeError('CryptoKey does not support this operation');\n    }\n    checkUsage(key, usage);\n}\nexport function checkEncCryptoKey(key, alg, usage) {\n    switch (alg) {\n        case 'A128GCM':\n        case 'A192GCM':\n        case 'A256GCM': {\n            if (!isAlgorithm(key.algorithm, 'AES-GCM'))\n                throw unusable('AES-GCM');\n            const expected = parseInt(alg.slice(1, 4), 10);\n            const actual = key.algorithm.length;\n            if (actual !== expected)\n                throw unusable(expected, 'algorithm.length');\n            break;\n        }\n        case 'A128KW':\n        case 'A192KW':\n        case 'A256KW': {\n            if (!isAlgorithm(key.algorithm, 'AES-KW'))\n                throw unusable('AES-KW');\n            const expected = parseInt(alg.slice(1, 4), 10);\n            const actual = key.algorithm.length;\n            if (actual !== expected)\n                throw unusable(expected, 'algorithm.length');\n            break;\n        }\n        case 'ECDH': {\n            switch (key.algorithm.name) {\n                case 'ECDH':\n                case 'X25519':\n                    break;\n                default:\n                    throw unusable('ECDH or X25519');\n            }\n            break;\n        }\n        case 'PBES2-HS256+A128KW':\n        case 'PBES2-HS384+A192KW':\n        case 'PBES2-HS512+A256KW':\n            if (!isAlgorithm(key.algorithm, 'PBKDF2'))\n                throw unusable('PBKDF2');\n            break;\n        case 'RSA-OAEP':\n        case 'RSA-OAEP-256':\n        case 'RSA-OAEP-384':\n        case 'RSA-OAEP-512': {\n            if (!isAlgorithm(key.algorithm, 'RSA-OAEP'))\n                throw unusable('RSA-OAEP');\n            const expected = parseInt(alg.slice(9), 10) || 1;\n            const actual = getHashLength(key.algorithm.hash);\n            if (actual !== expected)\n                throw unusable(`SHA-${expected}`, 'algorithm.hash');\n            break;\n        }\n        default:\n            throw new TypeError('CryptoKey does not support this operation');\n    }\n    checkUsage(key, usage);\n}\n","function message(msg, actual, ...types) {\n    types = types.filter(Boolean);\n    if (types.length > 2) {\n        const last = types.pop();\n        msg += `one of type ${types.join(', ')}, or ${last}.`;\n    }\n    else if (types.length === 2) {\n        msg += `one of type ${types[0]} or ${types[1]}.`;\n    }\n    else {\n        msg += `of type ${types[0]}.`;\n    }\n    if (actual == null) {\n        msg += ` Received ${actual}`;\n    }\n    else if (typeof actual === 'function' && actual.name) {\n        msg += ` Received function ${actual.name}`;\n    }\n    else if (typeof actual === 'object' && actual != null) {\n        if (actual.constructor?.name) {\n            msg += ` Received an instance of ${actual.constructor.name}`;\n        }\n    }\n    return msg;\n}\nexport default (actual, ...types) => {\n    return message('Key must be ', actual, ...types);\n};\nexport function withAlg(alg, actual, ...types) {\n    return message(`Key for the ${alg} algorithm must be `, actual, ...types);\n}\n","export function assertCryptoKey(key) {\n    if (!isCryptoKey(key)) {\n        throw new Error('CryptoKey instance expected');\n    }\n}\nexport function isCryptoKey(key) {\n    return key?.[Symbol.toStringTag] === 'CryptoKey';\n}\nexport function isKeyObject(key) {\n    return key?.[Symbol.toStringTag] === 'KeyObject';\n}\nexport default (key) => {\n    return isCryptoKey(key) || isKeyObject(key);\n};\n","function isObjectLike(value) {\n    return typeof value === 'object' && value !== null;\n}\nexport default (input) => {\n    if (!isObjectLike(input) || Object.prototype.toString.call(input) !== '[object Object]') {\n        return false;\n    }\n    if (Object.getPrototypeOf(input) === null) {\n        return true;\n    }\n    let proto = input;\n    while (Object.getPrototypeOf(proto) !== null) {\n        proto = Object.getPrototypeOf(proto);\n    }\n    return Object.getPrototypeOf(input) === proto;\n};\n","import { JOSENotSupported } from '../util/errors.js';\nfunction subtleMapping(jwk) {\n    let algorithm;\n    let keyUsages;\n    switch (jwk.kty) {\n        case 'AKP': {\n            switch (jwk.alg) {\n                case 'ML-DSA-44':\n                case 'ML-DSA-65':\n                case 'ML-DSA-87':\n                    algorithm = { name: jwk.alg };\n                    keyUsages = jwk.priv ? ['sign'] : ['verify'];\n                    break;\n                default:\n                    throw new JOSENotSupported('Invalid or unsupported JWK \"alg\" (Algorithm) Parameter value');\n            }\n            break;\n        }\n        case 'RSA': {\n            switch (jwk.alg) {\n                case 'PS256':\n                case 'PS384':\n                case 'PS512':\n                    algorithm = { name: 'RSA-PSS', hash: `SHA-${jwk.alg.slice(-3)}` };\n                    keyUsages = jwk.d ? ['sign'] : ['verify'];\n                    break;\n                case 'RS256':\n                case 'RS384':\n                case 'RS512':\n                    algorithm = { name: 'RSASSA-PKCS1-v1_5', hash: `SHA-${jwk.alg.slice(-3)}` };\n                    keyUsages = jwk.d ? ['sign'] : ['verify'];\n                    break;\n                case 'RSA-OAEP':\n                case 'RSA-OAEP-256':\n                case 'RSA-OAEP-384':\n                case 'RSA-OAEP-512':\n                    algorithm = {\n                        name: 'RSA-OAEP',\n                        hash: `SHA-${parseInt(jwk.alg.slice(-3), 10) || 1}`,\n                    };\n                    keyUsages = jwk.d ? ['decrypt', 'unwrapKey'] : ['encrypt', 'wrapKey'];\n                    break;\n                default:\n                    throw new JOSENotSupported('Invalid or unsupported JWK \"alg\" (Algorithm) Parameter value');\n            }\n            break;\n        }\n        case 'EC': {\n            switch (jwk.alg) {\n                case 'ES256':\n                    algorithm = { name: 'ECDSA', namedCurve: 'P-256' };\n                    keyUsages = jwk.d ? ['sign'] : ['verify'];\n                    break;\n                case 'ES384':\n                    algorithm = { name: 'ECDSA', namedCurve: 'P-384' };\n                    keyUsages = jwk.d ? ['sign'] : ['verify'];\n                    break;\n                case 'ES512':\n                    algorithm = { name: 'ECDSA', namedCurve: 'P-521' };\n                    keyUsages = jwk.d ? ['sign'] : ['verify'];\n                    break;\n                case 'ECDH-ES':\n                case 'ECDH-ES+A128KW':\n                case 'ECDH-ES+A192KW':\n                case 'ECDH-ES+A256KW':\n                    algorithm = { name: 'ECDH', namedCurve: jwk.crv };\n                    keyUsages = jwk.d ? ['deriveBits'] : [];\n                    break;\n                default:\n                    throw new JOSENotSupported('Invalid or unsupported JWK \"alg\" (Algorithm) Parameter value');\n            }\n            break;\n        }\n        case 'OKP': {\n            switch (jwk.alg) {\n                case 'Ed25519':\n                case 'EdDSA':\n                    algorithm = { name: 'Ed25519' };\n                    keyUsages = jwk.d ? ['sign'] : ['verify'];\n                    break;\n                case 'ECDH-ES':\n                case 'ECDH-ES+A128KW':\n                case 'ECDH-ES+A192KW':\n                case 'ECDH-ES+A256KW':\n                    algorithm = { name: jwk.crv };\n                    keyUsages = jwk.d ? ['deriveBits'] : [];\n                    break;\n                default:\n                    throw new JOSENotSupported('Invalid or unsupported JWK \"alg\" (Algorithm) Parameter value');\n            }\n            break;\n        }\n        default:\n            throw new JOSENotSupported('Invalid or unsupported JWK \"kty\" (Key Type) Parameter value');\n    }\n    return { algorithm, keyUsages };\n}\nexport default async (jwk) => {\n    if (!jwk.alg) {\n        throw new TypeError('\"alg\" argument is required when \"jwk.alg\" is not present');\n    }\n    const { algorithm, keyUsages } = subtleMapping(jwk);\n    const keyData = { ...jwk };\n    if (keyData.kty !== 'AKP') {\n        delete keyData.alg;\n    }\n    delete keyData.use;\n    return crypto.subtle.importKey('jwk', keyData, algorithm, jwk.ext ?? (jwk.d || jwk.priv ? false : true), jwk.key_ops ?? keyUsages);\n};\n","import isObject from './is_object.js';\nexport function isJWK(key) {\n    return isObject(key) && typeof key.kty === 'string';\n}\nexport function isPrivateJWK(key) {\n    return (key.kty !== 'oct' &&\n        ((key.kty === 'AKP' && typeof key.priv === 'string') || typeof key.d === 'string'));\n}\nexport function isPublicJWK(key) {\n    return key.kty !== 'oct' && typeof key.d === 'undefined' && typeof key.priv === 'undefined';\n}\nexport function isSecretJWK(key) {\n    return key.kty === 'oct' && typeof key.k === 'string';\n}\n","import { isJWK } from './is_jwk.js';\nimport { decode } from '../util/base64url.js';\nimport importJWK from './jwk_to_key.js';\nimport { isCryptoKey, isKeyObject } from './is_key_like.js';\nlet cache;\nconst handleJWK = async (key, jwk, alg, freeze = false) => {\n    cache ||= new WeakMap();\n    let cached = cache.get(key);\n    if (cached?.[alg]) {\n        return cached[alg];\n    }\n    const cryptoKey = await importJWK({ ...jwk, alg });\n    if (freeze)\n        Object.freeze(key);\n    if (!cached) {\n        cache.set(key, { [alg]: cryptoKey });\n    }\n    else {\n        cached[alg] = cryptoKey;\n    }\n    return cryptoKey;\n};\nconst handleKeyObject = (keyObject, alg) => {\n    cache ||= new WeakMap();\n    let cached = cache.get(keyObject);\n    if (cached?.[alg]) {\n        return cached[alg];\n    }\n    const isPublic = keyObject.type === 'public';\n    const extractable = isPublic ? true : false;\n    let cryptoKey;\n    if (keyObject.asymmetricKeyType === 'x25519') {\n        switch (alg) {\n            case 'ECDH-ES':\n            case 'ECDH-ES+A128KW':\n            case 'ECDH-ES+A192KW':\n            case 'ECDH-ES+A256KW':\n                break;\n            default:\n                throw new TypeError('given KeyObject instance cannot be used for this algorithm');\n        }\n        cryptoKey = keyObject.toCryptoKey(keyObject.asymmetricKeyType, extractable, isPublic ? [] : ['deriveBits']);\n    }\n    if (keyObject.asymmetricKeyType === 'ed25519') {\n        if (alg !== 'EdDSA' && alg !== 'Ed25519') {\n            throw new TypeError('given KeyObject instance cannot be used for this algorithm');\n        }\n        cryptoKey = keyObject.toCryptoKey(keyObject.asymmetricKeyType, extractable, [\n            isPublic ? 'verify' : 'sign',\n        ]);\n    }\n    switch (keyObject.asymmetricKeyType) {\n        case 'ml-dsa-44':\n        case 'ml-dsa-65':\n        case 'ml-dsa-87': {\n            if (alg !== keyObject.asymmetricKeyType.toUpperCase()) {\n                throw new TypeError('given KeyObject instance cannot be used for this algorithm');\n            }\n            cryptoKey = keyObject.toCryptoKey(keyObject.asymmetricKeyType, extractable, [\n                isPublic ? 'verify' : 'sign',\n            ]);\n        }\n    }\n    if (keyObject.asymmetricKeyType === 'rsa') {\n        let hash;\n        switch (alg) {\n            case 'RSA-OAEP':\n                hash = 'SHA-1';\n                break;\n            case 'RS256':\n            case 'PS256':\n            case 'RSA-OAEP-256':\n                hash = 'SHA-256';\n                break;\n            case 'RS384':\n            case 'PS384':\n            case 'RSA-OAEP-384':\n                hash = 'SHA-384';\n                break;\n            case 'RS512':\n            case 'PS512':\n            case 'RSA-OAEP-512':\n                hash = 'SHA-512';\n                break;\n            default:\n                throw new TypeError('given KeyObject instance cannot be used for this algorithm');\n        }\n        if (alg.startsWith('RSA-OAEP')) {\n            return keyObject.toCryptoKey({\n                name: 'RSA-OAEP',\n                hash,\n            }, extractable, isPublic ? ['encrypt'] : ['decrypt']);\n        }\n        cryptoKey = keyObject.toCryptoKey({\n            name: alg.startsWith('PS') ? 'RSA-PSS' : 'RSASSA-PKCS1-v1_5',\n            hash,\n        }, extractable, [isPublic ? 'verify' : 'sign']);\n    }\n    if (keyObject.asymmetricKeyType === 'ec') {\n        const nist = new Map([\n            ['prime256v1', 'P-256'],\n            ['secp384r1', 'P-384'],\n            ['secp521r1', 'P-521'],\n        ]);\n        const namedCurve = nist.get(keyObject.asymmetricKeyDetails?.namedCurve);\n        if (!namedCurve) {\n            throw new TypeError('given KeyObject instance cannot be used for this algorithm');\n        }\n        if (alg === 'ES256' && namedCurve === 'P-256') {\n            cryptoKey = keyObject.toCryptoKey({\n                name: 'ECDSA',\n                namedCurve,\n            }, extractable, [isPublic ? 'verify' : 'sign']);\n        }\n        if (alg === 'ES384' && namedCurve === 'P-384') {\n            cryptoKey = keyObject.toCryptoKey({\n                name: 'ECDSA',\n                namedCurve,\n            }, extractable, [isPublic ? 'verify' : 'sign']);\n        }\n        if (alg === 'ES512' && namedCurve === 'P-521') {\n            cryptoKey = keyObject.toCryptoKey({\n                name: 'ECDSA',\n                namedCurve,\n            }, extractable, [isPublic ? 'verify' : 'sign']);\n        }\n        if (alg.startsWith('ECDH-ES')) {\n            cryptoKey = keyObject.toCryptoKey({\n                name: 'ECDH',\n                namedCurve,\n            }, extractable, isPublic ? [] : ['deriveBits']);\n        }\n    }\n    if (!cryptoKey) {\n        throw new TypeError('given KeyObject instance cannot be used for this algorithm');\n    }\n    if (!cached) {\n        cache.set(keyObject, { [alg]: cryptoKey });\n    }\n    else {\n        cached[alg] = cryptoKey;\n    }\n    return cryptoKey;\n};\nexport default async (key, alg) => {\n    if (key instanceof Uint8Array) {\n        return key;\n    }\n    if (isCryptoKey(key)) {\n        return key;\n    }\n    if (isKeyObject(key)) {\n        if (key.type === 'secret') {\n            return key.export();\n        }\n        if ('toCryptoKey' in key && typeof key.toCryptoKey === 'function') {\n            try {\n                return handleKeyObject(key, alg);\n            }\n            catch (err) {\n                if (err instanceof TypeError) {\n                    throw err;\n                }\n            }\n        }\n        let jwk = key.export({ format: 'jwk' });\n        return handleJWK(key, jwk, alg);\n    }\n    if (isJWK(key)) {\n        if (key.k) {\n            return decode(key.k);\n        }\n        return handleJWK(key, key, alg, true);\n    }\n    throw new Error('unreachable');\n};\n","import { withAlg as invalidKeyInput } from './invalid_key_input.js';\nimport isKeyLike from './is_key_like.js';\nimport * as jwk from './is_jwk.js';\nconst tag = (key) => key?.[Symbol.toStringTag];\nconst jwkMatchesOp = (alg, key, usage) => {\n    if (key.use !== undefined) {\n        let expected;\n        switch (usage) {\n            case 'sign':\n            case 'verify':\n                expected = 'sig';\n                break;\n            case 'encrypt':\n            case 'decrypt':\n                expected = 'enc';\n                break;\n        }\n        if (key.use !== expected) {\n            throw new TypeError(`Invalid key for this operation, its \"use\" must be \"${expected}\" when present`);\n        }\n    }\n    if (key.alg !== undefined && key.alg !== alg) {\n        throw new TypeError(`Invalid key for this operation, its \"alg\" must be \"${alg}\" when present`);\n    }\n    if (Array.isArray(key.key_ops)) {\n        let expectedKeyOp;\n        switch (true) {\n            case usage === 'sign' || usage === 'verify':\n            case alg === 'dir':\n            case alg.includes('CBC-HS'):\n                expectedKeyOp = usage;\n                break;\n            case alg.startsWith('PBES2'):\n                expectedKeyOp = 'deriveBits';\n                break;\n            case /^A\\d{3}(?:GCM)?(?:KW)?$/.test(alg):\n                if (!alg.includes('GCM') && alg.endsWith('KW')) {\n                    expectedKeyOp = usage === 'encrypt' ? 'wrapKey' : 'unwrapKey';\n                }\n                else {\n                    expectedKeyOp = usage;\n                }\n                break;\n            case usage === 'encrypt' && alg.startsWith('RSA'):\n                expectedKeyOp = 'wrapKey';\n                break;\n            case usage === 'decrypt':\n                expectedKeyOp = alg.startsWith('RSA') ? 'unwrapKey' : 'deriveBits';\n                break;\n        }\n        if (expectedKeyOp && key.key_ops?.includes?.(expectedKeyOp) === false) {\n            throw new TypeError(`Invalid key for this operation, its \"key_ops\" must include \"${expectedKeyOp}\" when present`);\n        }\n    }\n    return true;\n};\nconst symmetricTypeCheck = (alg, key, usage) => {\n    if (key instanceof Uint8Array)\n        return;\n    if (jwk.isJWK(key)) {\n        if (jwk.isSecretJWK(key) && jwkMatchesOp(alg, key, usage))\n            return;\n        throw new TypeError(`JSON Web Key for symmetric algorithms must have JWK \"kty\" (Key Type) equal to \"oct\" and the JWK \"k\" (Key Value) present`);\n    }\n    if (!isKeyLike(key)) {\n        throw new TypeError(invalidKeyInput(alg, key, 'CryptoKey', 'KeyObject', 'JSON Web Key', 'Uint8Array'));\n    }\n    if (key.type !== 'secret') {\n        throw new TypeError(`${tag(key)} instances for symmetric algorithms must be of type \"secret\"`);\n    }\n};\nconst asymmetricTypeCheck = (alg, key, usage) => {\n    if (jwk.isJWK(key)) {\n        switch (usage) {\n            case 'decrypt':\n            case 'sign':\n                if (jwk.isPrivateJWK(key) && jwkMatchesOp(alg, key, usage))\n                    return;\n                throw new TypeError(`JSON Web Key for this operation be a private JWK`);\n            case 'encrypt':\n            case 'verify':\n                if (jwk.isPublicJWK(key) && jwkMatchesOp(alg, key, usage))\n                    return;\n                throw new TypeError(`JSON Web Key for this operation be a public JWK`);\n        }\n    }\n    if (!isKeyLike(key)) {\n        throw new TypeError(invalidKeyInput(alg, key, 'CryptoKey', 'KeyObject', 'JSON Web Key'));\n    }\n    if (key.type === 'secret') {\n        throw new TypeError(`${tag(key)} instances for asymmetric algorithms must not be of type \"secret\"`);\n    }\n    if (key.type === 'public') {\n        switch (usage) {\n            case 'sign':\n                throw new TypeError(`${tag(key)} instances for asymmetric algorithm signing must be of type \"private\"`);\n            case 'decrypt':\n                throw new TypeError(`${tag(key)} instances for asymmetric algorithm decryption must be of type \"private\"`);\n            default:\n                break;\n        }\n    }\n    if (key.type === 'private') {\n        switch (usage) {\n            case 'verify':\n                throw new TypeError(`${tag(key)} instances for asymmetric algorithm verifying must be of type \"public\"`);\n            case 'encrypt':\n                throw new TypeError(`${tag(key)} instances for asymmetric algorithm encryption must be of type \"public\"`);\n            default:\n                break;\n        }\n    }\n};\nexport default (alg, key, usage) => {\n    const symmetric = alg.startsWith('HS') ||\n        alg === 'dir' ||\n        alg.startsWith('PBES2') ||\n        /^A(?:128|192|256)(?:GCM)?(?:KW)?$/.test(alg) ||\n        /^A(?:128|192|256)CBC-HS(?:256|384|512)$/.test(alg);\n    if (symmetric) {\n        symmetricTypeCheck(alg, key, usage);\n    }\n    else {\n        asymmetricTypeCheck(alg, key, usage);\n    }\n};\n","import { checkSigCryptoKey } from './crypto_key.js';\nimport invalidKeyInput from './invalid_key_input.js';\nexport default async (alg, key, usage) => {\n    if (key instanceof Uint8Array) {\n        if (!alg.startsWith('HS')) {\n            throw new TypeError(invalidKeyInput(key, 'CryptoKey', 'KeyObject', 'JSON Web Key'));\n        }\n        return crypto.subtle.importKey('raw', key, { hash: `SHA-${alg.slice(-3)}`, name: 'HMAC' }, false, [usage]);\n    }\n    checkSigCryptoKey(key, alg, usage);\n    return key;\n};\n","import subtleAlgorithm from './subtle_dsa.js';\nimport checkKeyLength from './check_key_length.js';\nimport getVerifyKey from './get_sign_verify_key.js';\nexport default async (alg, key, signature, data) => {\n    const cryptoKey = await getVerifyKey(alg, key, 'verify');\n    checkKeyLength(alg, cryptoKey);\n    const algorithm = subtleAlgorithm(alg, cryptoKey.algorithm);\n    try {\n        return await crypto.subtle.verify(algorithm, cryptoKey, signature, data);\n    }\n    catch {\n        return false;\n    }\n};\n","export default (alg, key) => {\n    if (alg.startsWith('RS') || alg.startsWith('PS')) {\n        const { modulusLength } = key.algorithm;\n        if (typeof modulusLength !== 'number' || modulusLength < 2048) {\n            throw new TypeError(`${alg} requires key modulusLength to be 2048 bits or larger`);\n        }\n    }\n};\n","import { JOSENotSupported } from '../util/errors.js';\nexport default (alg, algorithm) => {\n    const hash = `SHA-${alg.slice(-3)}`;\n    switch (alg) {\n        case 'HS256':\n        case 'HS384':\n        case 'HS512':\n            return { hash, name: 'HMAC' };\n        case 'PS256':\n        case 'PS384':\n        case 'PS512':\n            return { hash, name: 'RSA-PSS', saltLength: parseInt(alg.slice(-3), 10) >> 3 };\n        case 'RS256':\n        case 'RS384':\n        case 'RS512':\n            return { hash, name: 'RSASSA-PKCS1-v1_5' };\n        case 'ES256':\n        case 'ES384':\n        case 'ES512':\n            return { hash, name: 'ECDSA', namedCurve: algorithm.namedCurve };\n        case 'Ed25519':\n        case 'EdDSA':\n            return { name: 'Ed25519' };\n        case 'ML-DSA-44':\n        case 'ML-DSA-65':\n        case 'ML-DSA-87':\n            return { name: alg };\n        default:\n            throw new JOSENotSupported(`alg ${alg} is not supported either by JOSE or your javascript runtime`);\n    }\n};\n","import { decode as b64u } from '../../util/base64url.js';\nimport verify from '../../lib/verify.js';\nimport { JOSEAlgNotAllowed, JWSInvalid, JWSSignatureVerificationFailed } from '../../util/errors.js';\nimport { concat, encoder, decoder } from '../../lib/buffer_utils.js';\nimport isDisjoint from '../../lib/is_disjoint.js';\nimport isObject from '../../lib/is_object.js';\nimport checkKeyType from '../../lib/check_key_type.js';\nimport validateCrit from '../../lib/validate_crit.js';\nimport validateAlgorithms from '../../lib/validate_algorithms.js';\nimport normalizeKey from '../../lib/normalize_key.js';\nexport async function flattenedVerify(jws, key, options) {\n    if (!isObject(jws)) {\n        throw new JWSInvalid('Flattened JWS must be an object');\n    }\n    if (jws.protected === undefined && jws.header === undefined) {\n        throw new JWSInvalid('Flattened JWS must have either of the \"protected\" or \"header\" members');\n    }\n    if (jws.protected !== undefined && typeof jws.protected !== 'string') {\n        throw new JWSInvalid('JWS Protected Header incorrect type');\n    }\n    if (jws.payload === undefined) {\n        throw new JWSInvalid('JWS Payload missing');\n    }\n    if (typeof jws.signature !== 'string') {\n        throw new JWSInvalid('JWS Signature missing or incorrect type');\n    }\n    if (jws.header !== undefined && !isObject(jws.header)) {\n        throw new JWSInvalid('JWS Unprotected Header incorrect type');\n    }\n    let parsedProt = {};\n    if (jws.protected) {\n        try {\n            const protectedHeader = b64u(jws.protected);\n            parsedProt = JSON.parse(decoder.decode(protectedHeader));\n        }\n        catch {\n            throw new JWSInvalid('JWS Protected Header is invalid');\n        }\n    }\n    if (!isDisjoint(parsedProt, jws.header)) {\n        throw new JWSInvalid('JWS Protected and JWS Unprotected Header Parameter names must be disjoint');\n    }\n    const joseHeader = {\n        ...parsedProt,\n        ...jws.header,\n    };\n    const extensions = validateCrit(JWSInvalid, new Map([['b64', true]]), options?.crit, parsedProt, joseHeader);\n    let b64 = true;\n    if (extensions.has('b64')) {\n        b64 = parsedProt.b64;\n        if (typeof b64 !== 'boolean') {\n            throw new JWSInvalid('The \"b64\" (base64url-encode payload) Header Parameter must be a boolean');\n        }\n    }\n    const { alg } = joseHeader;\n    if (typeof alg !== 'string' || !alg) {\n        throw new JWSInvalid('JWS \"alg\" (Algorithm) Header Parameter missing or invalid');\n    }\n    const algorithms = options && validateAlgorithms('algorithms', options.algorithms);\n    if (algorithms && !algorithms.has(alg)) {\n        throw new JOSEAlgNotAllowed('\"alg\" (Algorithm) Header Parameter value not allowed');\n    }\n    if (b64) {\n        if (typeof jws.payload !== 'string') {\n            throw new JWSInvalid('JWS Payload must be a string');\n        }\n    }\n    else if (typeof jws.payload !== 'string' && !(jws.payload instanceof Uint8Array)) {\n        throw new JWSInvalid('JWS Payload must be a string or an Uint8Array instance');\n    }\n    let resolvedKey = false;\n    if (typeof key === 'function') {\n        key = await key(parsedProt, jws);\n        resolvedKey = true;\n    }\n    checkKeyType(alg, key, 'verify');\n    const data = concat(encoder.encode(jws.protected ?? ''), encoder.encode('.'), typeof jws.payload === 'string' ? encoder.encode(jws.payload) : jws.payload);\n    let signature;\n    try {\n        signature = b64u(jws.signature);\n    }\n    catch {\n        throw new JWSInvalid('Failed to base64url decode the signature');\n    }\n    const k = await normalizeKey(key, alg);\n    const verified = await verify(alg, k, signature, data);\n    if (!verified) {\n        throw new JWSSignatureVerificationFailed();\n    }\n    let payload;\n    if (b64) {\n        try {\n            payload = b64u(jws.payload);\n        }\n        catch {\n            throw new JWSInvalid('Failed to base64url decode the payload');\n        }\n    }\n    else if (typeof jws.payload === 'string') {\n        payload = encoder.encode(jws.payload);\n    }\n    else {\n        payload = jws.payload;\n    }\n    const result = { payload };\n    if (jws.protected !== undefined) {\n        result.protectedHeader = parsedProt;\n    }\n    if (jws.header !== undefined) {\n        result.unprotectedHeader = jws.header;\n    }\n    if (resolvedKey) {\n        return { ...result, key: k };\n    }\n    return result;\n}\n","export default (...headers) => {\n    const sources = headers.filter(Boolean);\n    if (sources.length === 0 || sources.length === 1) {\n        return true;\n    }\n    let acc;\n    for (const header of sources) {\n        const parameters = Object.keys(header);\n        if (!acc || acc.size === 0) {\n            acc = new Set(parameters);\n            continue;\n        }\n        for (const parameter of parameters) {\n            if (acc.has(parameter)) {\n                return false;\n            }\n            acc.add(parameter);\n        }\n    }\n    return true;\n};\n","import { JOSENotSupported, JWEInvalid, JWSInvalid } from '../util/errors.js';\nexport default (Err, recognizedDefault, recognizedOption, protectedHeader, joseHeader) => {\n    if (joseHeader.crit !== undefined && protectedHeader?.crit === undefined) {\n        throw new Err('\"crit\" (Critical) Header Parameter MUST be integrity protected');\n    }\n    if (!protectedHeader || protectedHeader.crit === undefined) {\n        return new Set();\n    }\n    if (!Array.isArray(protectedHeader.crit) ||\n        protectedHeader.crit.length === 0 ||\n        protectedHeader.crit.some((input) => typeof input !== 'string' || input.length === 0)) {\n        throw new Err('\"crit\" (Critical) Header Parameter MUST be an array of non-empty strings when present');\n    }\n    let recognized;\n    if (recognizedOption !== undefined) {\n        recognized = new Map([...Object.entries(recognizedOption), ...recognizedDefault.entries()]);\n    }\n    else {\n        recognized = recognizedDefault;\n    }\n    for (const parameter of protectedHeader.crit) {\n        if (!recognized.has(parameter)) {\n            throw new JOSENotSupported(`Extension Header Parameter \"${parameter}\" is not recognized`);\n        }\n        if (joseHeader[parameter] === undefined) {\n            throw new Err(`Extension Header Parameter \"${parameter}\" is missing`);\n        }\n        if (recognized.get(parameter) && protectedHeader[parameter] === undefined) {\n            throw new Err(`Extension Header Parameter \"${parameter}\" MUST be integrity protected`);\n        }\n    }\n    return new Set(protectedHeader.crit);\n};\n","export default (option, algorithms) => {\n    if (algorithms !== undefined &&\n        (!Array.isArray(algorithms) || algorithms.some((s) => typeof s !== 'string'))) {\n        throw new TypeError(`\"${option}\" option must be an array of strings`);\n    }\n    if (!algorithms) {\n        return undefined;\n    }\n    return new Set(algorithms);\n};\n","export default (date) => Math.floor(date.getTime() / 1000);\n","const minute = 60;\nconst hour = minute * 60;\nconst day = hour * 24;\nconst week = day * 7;\nconst year = day * 365.25;\nconst REGEX = /^(\\+|\\-)? ?(\\d+|\\d+\\.\\d+) ?(seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|weeks?|w|years?|yrs?|y)(?: (ago|from now))?$/i;\nexport default (str) => {\n    const matched = REGEX.exec(str);\n    if (!matched || (matched[4] && matched[1])) {\n        throw new TypeError('Invalid time period format');\n    }\n    const value = parseFloat(matched[2]);\n    const unit = matched[3].toLowerCase();\n    let numericDate;\n    switch (unit) {\n        case 'sec':\n        case 'secs':\n        case 'second':\n        case 'seconds':\n        case 's':\n            numericDate = Math.round(value);\n            break;\n        case 'minute':\n        case 'minutes':\n        case 'min':\n        case 'mins':\n        case 'm':\n            numericDate = Math.round(value * minute);\n            break;\n        case 'hour':\n        case 'hours':\n        case 'hr':\n        case 'hrs':\n        case 'h':\n            numericDate = Math.round(value * hour);\n            break;\n        case 'day':\n        case 'days':\n        case 'd':\n            numericDate = Math.round(value * day);\n            break;\n        case 'week':\n        case 'weeks':\n        case 'w':\n            numericDate = Math.round(value * week);\n            break;\n        default:\n            numericDate = Math.round(value * year);\n            break;\n    }\n    if (matched[1] === '-' || matched[4] === 'ago') {\n        return -numericDate;\n    }\n    return numericDate;\n};\n","import { JWTClaimValidationFailed, JWTExpired, JWTInvalid } from '../util/errors.js';\nimport { decoder } from './buffer_utils.js';\nimport epoch from './epoch.js';\nimport secs from './secs.js';\nimport isObject from './is_object.js';\nimport { encoder } from './buffer_utils.js';\nfunction validateInput(label, input) {\n    if (!Number.isFinite(input)) {\n        throw new TypeError(`Invalid ${label} input`);\n    }\n    return input;\n}\nconst normalizeTyp = (value) => {\n    if (value.includes('/')) {\n        return value.toLowerCase();\n    }\n    return `application/${value.toLowerCase()}`;\n};\nconst checkAudiencePresence = (audPayload, audOption) => {\n    if (typeof audPayload === 'string') {\n        return audOption.includes(audPayload);\n    }\n    if (Array.isArray(audPayload)) {\n        return audOption.some(Set.prototype.has.bind(new Set(audPayload)));\n    }\n    return false;\n};\nexport function validateClaimsSet(protectedHeader, encodedPayload, options = {}) {\n    let payload;\n    try {\n        payload = JSON.parse(decoder.decode(encodedPayload));\n    }\n    catch {\n    }\n    if (!isObject(payload)) {\n        throw new JWTInvalid('JWT Claims Set must be a top-level JSON object');\n    }\n    const { typ } = options;\n    if (typ &&\n        (typeof protectedHeader.typ !== 'string' ||\n            normalizeTyp(protectedHeader.typ) !== normalizeTyp(typ))) {\n        throw new JWTClaimValidationFailed('unexpected \"typ\" JWT header value', payload, 'typ', 'check_failed');\n    }\n    const { requiredClaims = [], issuer, subject, audience, maxTokenAge } = options;\n    const presenceCheck = [...requiredClaims];\n    if (maxTokenAge !== undefined)\n        presenceCheck.push('iat');\n    if (audience !== undefined)\n        presenceCheck.push('aud');\n    if (subject !== undefined)\n        presenceCheck.push('sub');\n    if (issuer !== undefined)\n        presenceCheck.push('iss');\n    for (const claim of new Set(presenceCheck.reverse())) {\n        if (!(claim in payload)) {\n            throw new JWTClaimValidationFailed(`missing required \"${claim}\" claim`, payload, claim, 'missing');\n        }\n    }\n    if (issuer &&\n        !(Array.isArray(issuer) ? issuer : [issuer]).includes(payload.iss)) {\n        throw new JWTClaimValidationFailed('unexpected \"iss\" claim value', payload, 'iss', 'check_failed');\n    }\n    if (subject && payload.sub !== subject) {\n        throw new JWTClaimValidationFailed('unexpected \"sub\" claim value', payload, 'sub', 'check_failed');\n    }\n    if (audience &&\n        !checkAudiencePresence(payload.aud, typeof audience === 'string' ? [audience] : audience)) {\n        throw new JWTClaimValidationFailed('unexpected \"aud\" claim value', payload, 'aud', 'check_failed');\n    }\n    let tolerance;\n    switch (typeof options.clockTolerance) {\n        case 'string':\n            tolerance = secs(options.clockTolerance);\n            break;\n        case 'number':\n            tolerance = options.clockTolerance;\n            break;\n        case 'undefined':\n            tolerance = 0;\n            break;\n        default:\n            throw new TypeError('Invalid clockTolerance option type');\n    }\n    const { currentDate } = options;\n    const now = epoch(currentDate || new Date());\n    if ((payload.iat !== undefined || maxTokenAge) && typeof payload.iat !== 'number') {\n        throw new JWTClaimValidationFailed('\"iat\" claim must be a number', payload, 'iat', 'invalid');\n    }\n    if (payload.nbf !== undefined) {\n        if (typeof payload.nbf !== 'number') {\n            throw new JWTClaimValidationFailed('\"nbf\" claim must be a number', payload, 'nbf', 'invalid');\n        }\n        if (payload.nbf > now + tolerance) {\n            throw new JWTClaimValidationFailed('\"nbf\" claim timestamp check failed', payload, 'nbf', 'check_failed');\n        }\n    }\n    if (payload.exp !== undefined) {\n        if (typeof payload.exp !== 'number') {\n            throw new JWTClaimValidationFailed('\"exp\" claim must be a number', payload, 'exp', 'invalid');\n        }\n        if (payload.exp <= now - tolerance) {\n            throw new JWTExpired('\"exp\" claim timestamp check failed', payload, 'exp', 'check_failed');\n        }\n    }\n    if (maxTokenAge) {\n        const age = now - payload.iat;\n        const max = typeof maxTokenAge === 'number' ? maxTokenAge : secs(maxTokenAge);\n        if (age - tolerance > max) {\n            throw new JWTExpired('\"iat\" claim timestamp check failed (too far in the past)', payload, 'iat', 'check_failed');\n        }\n        if (age < 0 - tolerance) {\n            throw new JWTClaimValidationFailed('\"iat\" claim timestamp check failed (it should be in the past)', payload, 'iat', 'check_failed');\n        }\n    }\n    return payload;\n}\nexport class JWTClaimsBuilder {\n    #payload;\n    constructor(payload) {\n        if (!isObject(payload)) {\n            throw new TypeError('JWT Claims Set MUST be an object');\n        }\n        this.#payload = structuredClone(payload);\n    }\n    data() {\n        return encoder.encode(JSON.stringify(this.#payload));\n    }\n    get iss() {\n        return this.#payload.iss;\n    }\n    set iss(value) {\n        this.#payload.iss = value;\n    }\n    get sub() {\n        return this.#payload.sub;\n    }\n    set sub(value) {\n        this.#payload.sub = value;\n    }\n    get aud() {\n        return this.#payload.aud;\n    }\n    set aud(value) {\n        this.#payload.aud = value;\n    }\n    set jti(value) {\n        this.#payload.jti = value;\n    }\n    set nbf(value) {\n        if (typeof value === 'number') {\n            this.#payload.nbf = validateInput('setNotBefore', value);\n        }\n        else if (value instanceof Date) {\n            this.#payload.nbf = validateInput('setNotBefore', epoch(value));\n        }\n        else {\n            this.#payload.nbf = epoch(new Date()) + secs(value);\n        }\n    }\n    set exp(value) {\n        if (typeof value === 'number') {\n            this.#payload.exp = validateInput('setExpirationTime', value);\n        }\n        else if (value instanceof Date) {\n            this.#payload.exp = validateInput('setExpirationTime', epoch(value));\n        }\n        else {\n            this.#payload.exp = epoch(new Date()) + secs(value);\n        }\n    }\n    set iat(value) {\n        if (typeof value === 'undefined') {\n            this.#payload.iat = epoch(new Date());\n        }\n        else if (value instanceof Date) {\n            this.#payload.iat = validateInput('setIssuedAt', epoch(value));\n        }\n        else if (typeof value === 'string') {\n            this.#payload.iat = validateInput('setIssuedAt', epoch(new Date()) + secs(value));\n        }\n        else {\n            this.#payload.iat = validateInput('setIssuedAt', value);\n        }\n    }\n}\n","import { compactVerify } from '../jws/compact/verify.js';\nimport { validateClaimsSet } from '../lib/jwt_claims_set.js';\nimport { JWTInvalid } from '../util/errors.js';\nexport async function jwtVerify(jwt, key, options) {\n    const verified = await compactVerify(jwt, key, options);\n    if (verified.protectedHeader.crit?.includes('b64') && verified.protectedHeader.b64 === false) {\n        throw new JWTInvalid('JWTs MUST NOT use unencoded payload');\n    }\n    const payload = validateClaimsSet(verified.protectedHeader, verified.payload, options);\n    const result = { payload, protectedHeader: verified.protectedHeader };\n    if (typeof key === 'function') {\n        return { ...result, key: verified.key };\n    }\n    return result;\n}\n","import { flattenedVerify } from '../flattened/verify.js';\nimport { JWSInvalid } from '../../util/errors.js';\nimport { decoder } from '../../lib/buffer_utils.js';\nexport async function compactVerify(jws, key, options) {\n    if (jws instanceof Uint8Array) {\n        jws = decoder.decode(jws);\n    }\n    if (typeof jws !== 'string') {\n        throw new JWSInvalid('Compact JWS must be a string or Uint8Array');\n    }\n    const { 0: protectedHeader, 1: payload, 2: signature, length } = jws.split('.');\n    if (length !== 3) {\n        throw new JWSInvalid('Invalid Compact JWS');\n    }\n    const verified = await flattenedVerify({ payload, protected: protectedHeader, signature }, key, options);\n    const result = { payload: verified.payload, protectedHeader: verified.protectedHeader };\n    if (typeof key === 'function') {\n        return { ...result, key: verified.key };\n    }\n    return result;\n}\n","import { importJWK } from '../key/import.js';\nimport { JWKSInvalid, JOSENotSupported, JWKSNoMatchingKey, JWKSMultipleMatchingKeys, } from '../util/errors.js';\nimport isObject from '../lib/is_object.js';\nfunction getKtyFromAlg(alg) {\n    switch (typeof alg === 'string' && alg.slice(0, 2)) {\n        case 'RS':\n        case 'PS':\n            return 'RSA';\n        case 'ES':\n            return 'EC';\n        case 'Ed':\n            return 'OKP';\n        case 'ML':\n            return 'AKP';\n        default:\n            throw new JOSENotSupported('Unsupported \"alg\" value for a JSON Web Key Set');\n    }\n}\nfunction isJWKSLike(jwks) {\n    return (jwks &&\n        typeof jwks === 'object' &&\n        Array.isArray(jwks.keys) &&\n        jwks.keys.every(isJWKLike));\n}\nfunction isJWKLike(key) {\n    return isObject(key);\n}\nclass LocalJWKSet {\n    #jwks;\n    #cached = new WeakMap();\n    constructor(jwks) {\n        if (!isJWKSLike(jwks)) {\n            throw new JWKSInvalid('JSON Web Key Set malformed');\n        }\n        this.#jwks = structuredClone(jwks);\n    }\n    jwks() {\n        return this.#jwks;\n    }\n    async getKey(protectedHeader, token) {\n        const { alg, kid } = { ...protectedHeader, ...token?.header };\n        const kty = getKtyFromAlg(alg);\n        const candidates = this.#jwks.keys.filter((jwk) => {\n            let candidate = kty === jwk.kty;\n            if (candidate && typeof kid === 'string') {\n                candidate = kid === jwk.kid;\n            }\n            if (candidate && (typeof jwk.alg === 'string' || kty === 'AKP')) {\n                candidate = alg === jwk.alg;\n            }\n            if (candidate && typeof jwk.use === 'string') {\n                candidate = jwk.use === 'sig';\n            }\n            if (candidate && Array.isArray(jwk.key_ops)) {\n                candidate = jwk.key_ops.includes('verify');\n            }\n            if (candidate) {\n                switch (alg) {\n                    case 'ES256':\n                        candidate = jwk.crv === 'P-256';\n                        break;\n                    case 'ES384':\n                        candidate = jwk.crv === 'P-384';\n                        break;\n                    case 'ES512':\n                        candidate = jwk.crv === 'P-521';\n                        break;\n                    case 'Ed25519':\n                    case 'EdDSA':\n                        candidate = jwk.crv === 'Ed25519';\n                        break;\n                }\n            }\n            return candidate;\n        });\n        const { 0: jwk, length } = candidates;\n        if (length === 0) {\n            throw new JWKSNoMatchingKey();\n        }\n        if (length !== 1) {\n            const error = new JWKSMultipleMatchingKeys();\n            const _cached = this.#cached;\n            error[Symbol.asyncIterator] = async function* () {\n                for (const jwk of candidates) {\n                    try {\n                        yield await importWithAlgCache(_cached, jwk, alg);\n                    }\n                    catch { }\n                }\n            };\n            throw error;\n        }\n        return importWithAlgCache(this.#cached, jwk, alg);\n    }\n}\nasync function importWithAlgCache(cache, jwk, alg) {\n    const cached = cache.get(jwk) || cache.set(jwk, {}).get(jwk);\n    if (cached[alg] === undefined) {\n        const key = await importJWK({ ...jwk, ext: true }, alg);\n        if (key instanceof Uint8Array || key.type !== 'public') {\n            throw new JWKSInvalid('JSON Web Key Set members must be public keys');\n        }\n        cached[alg] = key;\n    }\n    return cached[alg];\n}\nexport function createLocalJWKSet(jwks) {\n    const set = new LocalJWKSet(jwks);\n    const localJWKSet = async (protectedHeader, token) => set.getKey(protectedHeader, token);\n    Object.defineProperties(localJWKSet, {\n        jwks: {\n            value: () => structuredClone(set.jwks()),\n            enumerable: false,\n            configurable: false,\n            writable: false,\n        },\n    });\n    return localJWKSet;\n}\n","import { decode as decodeBase64URL } from '../util/base64url.js';\nimport { fromSPKI, fromPKCS8, fromX509 } from '../lib/asn1.js';\nimport toCryptoKey from '../lib/jwk_to_key.js';\nimport { JOSENotSupported } from '../util/errors.js';\nimport isObject from '../lib/is_object.js';\nexport async function importSPKI(spki, alg, options) {\n    if (typeof spki !== 'string' || spki.indexOf('-----BEGIN PUBLIC KEY-----') !== 0) {\n        throw new TypeError('\"spki\" must be SPKI formatted string');\n    }\n    return fromSPKI(spki, alg, options);\n}\nexport async function importX509(x509, alg, options) {\n    if (typeof x509 !== 'string' || x509.indexOf('-----BEGIN CERTIFICATE-----') !== 0) {\n        throw new TypeError('\"x509\" must be X.509 formatted string');\n    }\n    return fromX509(x509, alg, options);\n}\nexport async function importPKCS8(pkcs8, alg, options) {\n    if (typeof pkcs8 !== 'string' || pkcs8.indexOf('-----BEGIN PRIVATE KEY-----') !== 0) {\n        throw new TypeError('\"pkcs8\" must be PKCS#8 formatted string');\n    }\n    return fromPKCS8(pkcs8, alg, options);\n}\nexport async function importJWK(jwk, alg, options) {\n    if (!isObject(jwk)) {\n        throw new TypeError('JWK must be an object');\n    }\n    let ext;\n    alg ??= jwk.alg;\n    ext ??= options?.extractable ?? jwk.ext;\n    switch (jwk.kty) {\n        case 'oct':\n            if (typeof jwk.k !== 'string' || !jwk.k) {\n                throw new TypeError('missing \"k\" (Key Value) Parameter value');\n            }\n            return decodeBase64URL(jwk.k);\n        case 'RSA':\n            if ('oth' in jwk && jwk.oth !== undefined) {\n                throw new JOSENotSupported('RSA JWK \"oth\" (Other Primes Info) Parameter value is not supported');\n            }\n            return toCryptoKey({ ...jwk, alg, ext });\n        case 'AKP': {\n            if (typeof jwk.alg !== 'string' || !jwk.alg) {\n                throw new TypeError('missing \"alg\" (Algorithm) Parameter value');\n            }\n            if (alg !== undefined && alg !== jwk.alg) {\n                throw new TypeError('JWK alg and alg option value mismatch');\n            }\n            return toCryptoKey({ ...jwk, ext });\n        }\n        case 'EC':\n        case 'OKP':\n            return toCryptoKey({ ...jwk, alg, ext });\n        default:\n            throw new JOSENotSupported('Unsupported \"kty\" (Key Type) Parameter value');\n    }\n}\n","import { JOSEError, JWKSNoMatchingKey, JWKSTimeout } from '../util/errors.js';\nimport { createLocalJWKSet } from './local.js';\nimport isObject from '../lib/is_object.js';\nfunction isCloudflareWorkers() {\n    return (typeof WebSocketPair !== 'undefined' ||\n        (typeof navigator !== 'undefined' && navigator.userAgent === 'Cloudflare-Workers') ||\n        (typeof EdgeRuntime !== 'undefined' && EdgeRuntime === 'vercel'));\n}\nlet USER_AGENT;\nif (typeof navigator === 'undefined' || !navigator.userAgent?.startsWith?.('Mozilla/5.0 ')) {\n    const NAME = 'jose';\n    const VERSION = 'v6.1.0';\n    USER_AGENT = `${NAME}/${VERSION}`;\n}\nexport const customFetch = Symbol();\nasync function fetchJwks(url, headers, signal, fetchImpl = fetch) {\n    const response = await fetchImpl(url, {\n        method: 'GET',\n        signal,\n        redirect: 'manual',\n        headers,\n    }).catch((err) => {\n        if (err.name === 'TimeoutError') {\n            throw new JWKSTimeout();\n        }\n        throw err;\n    });\n    if (response.status !== 200) {\n        throw new JOSEError('Expected 200 OK from the JSON Web Key Set HTTP response');\n    }\n    try {\n        return await response.json();\n    }\n    catch {\n        throw new JOSEError('Failed to parse the JSON Web Key Set HTTP response as JSON');\n    }\n}\nexport const jwksCache = Symbol();\nfunction isFreshJwksCache(input, cacheMaxAge) {\n    if (typeof input !== 'object' || input === null) {\n        return false;\n    }\n    if (!('uat' in input) || typeof input.uat !== 'number' || Date.now() - input.uat >= cacheMaxAge) {\n        return false;\n    }\n    if (!('jwks' in input) ||\n        !isObject(input.jwks) ||\n        !Array.isArray(input.jwks.keys) ||\n        !Array.prototype.every.call(input.jwks.keys, isObject)) {\n        return false;\n    }\n    return true;\n}\nclass RemoteJWKSet {\n    #url;\n    #timeoutDuration;\n    #cooldownDuration;\n    #cacheMaxAge;\n    #jwksTimestamp;\n    #pendingFetch;\n    #headers;\n    #customFetch;\n    #local;\n    #cache;\n    constructor(url, options) {\n        if (!(url instanceof URL)) {\n            throw new TypeError('url must be an instance of URL');\n        }\n        this.#url = new URL(url.href);\n        this.#timeoutDuration =\n            typeof options?.timeoutDuration === 'number' ? options?.timeoutDuration : 5000;\n        this.#cooldownDuration =\n            typeof options?.cooldownDuration === 'number' ? options?.cooldownDuration : 30000;\n        this.#cacheMaxAge = typeof options?.cacheMaxAge === 'number' ? options?.cacheMaxAge : 600000;\n        this.#headers = new Headers(options?.headers);\n        if (USER_AGENT && !this.#headers.has('User-Agent')) {\n            this.#headers.set('User-Agent', USER_AGENT);\n        }\n        if (!this.#headers.has('accept')) {\n            this.#headers.set('accept', 'application/json');\n            this.#headers.append('accept', 'application/jwk-set+json');\n        }\n        this.#customFetch = options?.[customFetch];\n        if (options?.[jwksCache] !== undefined) {\n            this.#cache = options?.[jwksCache];\n            if (isFreshJwksCache(options?.[jwksCache], this.#cacheMaxAge)) {\n                this.#jwksTimestamp = this.#cache.uat;\n                this.#local = createLocalJWKSet(this.#cache.jwks);\n            }\n        }\n    }\n    pendingFetch() {\n        return !!this.#pendingFetch;\n    }\n    coolingDown() {\n        return typeof this.#jwksTimestamp === 'number'\n            ? Date.now() < this.#jwksTimestamp + this.#cooldownDuration\n            : false;\n    }\n    fresh() {\n        return typeof this.#jwksTimestamp === 'number'\n            ? Date.now() < this.#jwksTimestamp + this.#cacheMaxAge\n            : false;\n    }\n    jwks() {\n        return this.#local?.jwks();\n    }\n    async getKey(protectedHeader, token) {\n        if (!this.#local || !this.fresh()) {\n            await this.reload();\n        }\n        try {\n            return await this.#local(protectedHeader, token);\n        }\n        catch (err) {\n            if (err instanceof JWKSNoMatchingKey) {\n                if (this.coolingDown() === false) {\n                    await this.reload();\n                    return this.#local(protectedHeader, token);\n                }\n            }\n            throw err;\n        }\n    }\n    async reload() {\n        if (this.#pendingFetch && isCloudflareWorkers()) {\n            this.#pendingFetch = undefined;\n        }\n        this.#pendingFetch ||= fetchJwks(this.#url.href, this.#headers, AbortSignal.timeout(this.#timeoutDuration), this.#customFetch)\n            .then((json) => {\n            this.#local = createLocalJWKSet(json);\n            if (this.#cache) {\n                this.#cache.uat = Date.now();\n                this.#cache.jwks = json;\n            }\n            this.#jwksTimestamp = Date.now();\n            this.#pendingFetch = undefined;\n        })\n            .catch((err) => {\n            this.#pendingFetch = undefined;\n            throw err;\n        });\n        await this.#pendingFetch;\n    }\n}\nexport function createRemoteJWKSet(url, options) {\n    const set = new RemoteJWKSet(url, options);\n    const remoteJWKSet = async (protectedHeader, token) => set.getKey(protectedHeader, token);\n    Object.defineProperties(remoteJWKSet, {\n        coolingDown: {\n            get: () => set.coolingDown(),\n            enumerable: true,\n            configurable: false,\n        },\n        fresh: {\n            get: () => set.fresh(),\n            enumerable: true,\n            configurable: false,\n        },\n        reload: {\n            value: () => set.reload(),\n            enumerable: true,\n            configurable: false,\n            writable: false,\n        },\n        reloading: {\n            get: () => set.pendingFetch(),\n            enumerable: true,\n            configurable: false,\n        },\n        jwks: {\n            value: () => set.jwks(),\n            enumerable: true,\n            configurable: false,\n            writable: false,\n        },\n    });\n    return remoteJWKSet;\n}\n","/**\n * Simple logger with debug mode support\n */\nexport class Logger {\n  private debug: boolean;\n  private prefix: string;\n\n  constructor(debug: boolean = false, prefix: string = '[MarketplaceSDK]') {\n    this.debug = debug;\n    this.prefix = prefix;\n  }\n\n  /**\n   * Log debug message (only if debug enabled)\n   */\n  log(...args: any[]): void {\n    if (this.debug) {\n      console.log(this.prefix, ...args);\n    }\n  }\n\n  /**\n   * Log info message (only if debug enabled)\n   */\n  info(...args: any[]): void {\n    if (this.debug) {\n      console.info(this.prefix, ...args);\n    }\n  }\n\n  /**\n   * Log warning message (always shown)\n   */\n  warn(...args: any[]): void {\n    console.warn(this.prefix, ...args);\n  }\n\n  /**\n   * Log error message (always shown)\n   */\n  error(...args: any[]): void {\n    console.error(this.prefix, ...args);\n  }\n}\n","import { createRemoteJWKSet, jwtVerify, JWTVerifyResult, JWTPayload } from 'jose';\nimport { SDKError, JWTClaims } from '../types';\nimport { Logger } from '../utils/logger';\n\n/**\n * JWKS Validator for RS256 JWT signature verification\n * Uses jose library for browser and Node.js compatibility\n */\nexport class JWKSValidator {\n  private jwksUri: string;\n  private logger: Logger;\n  private jwks: ReturnType<typeof createRemoteJWKSet>;\n\n  constructor(jwksUri: string, debug: boolean = false) {\n    this.jwksUri = jwksUri;\n    this.logger = new Logger(debug, '[JWKSValidator]');\n\n    // Create JWKS fetcher (works in browser and Node.js)\n    // Resolve relative URIs against the page origin in browser environments\n    const resolvedUrl = this.jwksUri.startsWith('http')\n      ? new URL(this.jwksUri)\n      : new URL(this.jwksUri, typeof window !== 'undefined' ? window.location.origin : undefined);\n    this.jwks = createRemoteJWKSet(resolvedUrl);\n\n    this.logger.info('Initialized with JWKS URI:', this.jwksUri);\n  }\n\n  /**\n   * Verify JWT signature using JWKS public key\n   * @param token - JWT token to verify\n   * @param expectedIssuer - Expected issuer (default: 'generalwisdom.com')\n   * @param expectedApplicationId - Optional application ID to validate\n   * @returns Decoded and verified JWT claims\n   */\n  async verify(\n    token: string,\n    expectedIssuer: string = 'generalwisdom.com',\n    expectedApplicationId?: string\n  ): Promise<JWTClaims> {\n    this.logger.log('Verifying JWT signature...');\n\n    try {\n      // Verify JWT using JWKS\n      const result: JWTVerifyResult = await jwtVerify(token, this.jwks, {\n        issuer: expectedIssuer,\n        algorithms: ['RS256'],\n      });\n\n      const payload = result.payload as JWTPayload & Partial<JWTClaims>;\n\n      // Validate required claims\n      const requiredClaims: (keyof JWTClaims)[] = [\n        'sessionId',\n        'userId',\n        'orgId',\n        'applicationId',\n        'exp',\n        'iat',\n      ];\n\n      for (const claim of requiredClaims) {\n        if (!(claim in payload)) {\n          throw new SDKError(\n            `Missing required claim: ${claim}`,\n            'MISSING_CLAIM'\n          );\n        }\n      }\n\n      // Validate application ID if provided\n      if (expectedApplicationId && payload.applicationId !== expectedApplicationId) {\n        this.logger.error(\n          `Application ID mismatch: expected ${expectedApplicationId}, got ${payload.applicationId}`\n        );\n        throw new SDKError(\n          'Token is for a different application',\n          'APPLICATION_MISMATCH'\n        );\n      }\n\n      const claims: JWTClaims = {\n        sessionId: payload.sessionId!,\n        applicationId: payload.applicationId!,\n        userId: payload.userId!,\n        orgId: payload.orgId!,\n        startTime: payload.startTime!,\n        durationMinutes: payload.durationMinutes!,\n        iat: payload.iat!,\n        exp: payload.exp!,\n        iss: payload.iss!,\n        sub: payload.sub!,\n      };\n\n      this.logger.log('JWT verified successfully');\n      return claims;\n\n    } catch (error) {\n      this.logger.error('JWT verification failed:', error);\n\n      if (error instanceof SDKError) {\n        throw error;\n      }\n\n      // Handle jose-specific errors\n      const errorMessage = error instanceof Error ? error.message : 'Unknown error';\n      const errorName = error instanceof Error ? error.name : 'Error';\n\n      if (errorName === 'JWTExpired' || errorMessage.includes('expired')) {\n        throw new SDKError('Session expired', 'SESSION_EXPIRED');\n      }\n\n      if (errorName === 'JWSSignatureVerificationFailed') {\n        throw new SDKError('Invalid JWT signature', 'INVALID_SIGNATURE');\n      }\n\n      if (errorName === 'JWTClaimValidationFailed') {\n        throw new SDKError(`JWT claim validation failed: ${errorMessage}`, 'INVALID_CLAIM');\n      }\n\n      throw new SDKError(\n        `JWT verification failed: ${errorMessage}`,\n        'VERIFICATION_FAILED'\n      );\n    }\n  }\n\n  /**\n   * Update JWKS URI\n   * @param jwksUri - New JWKS URI\n   */\n  updateJwksUri(jwksUri: string): void {\n    this.jwksUri = jwksUri;\n    const resolvedUrl = this.jwksUri.startsWith('http')\n      ? new URL(this.jwksUri)\n      : new URL(this.jwksUri, typeof window !== 'undefined' ? window.location.origin : undefined);\n    this.jwks = createRemoteJWKSet(resolvedUrl);\n    this.logger.info('Updated JWKS URI:', this.jwksUri);\n  }\n}\n","import { Logger } from '../utils/logger';\nimport { SDKEvents } from '../types';\n\n/**\n * Timer Manager for session countdown\n */\nexport class TimerManager {\n  private remainingSeconds: number;\n  private intervalId: number | null = null;\n  private warningThreshold: number;\n  private warningShown: boolean = false;\n  private logger: Logger;\n  private events: Partial<SDKEvents>;\n\n  constructor(\n    durationSeconds: number,\n    warningThresholdSeconds: number = 300,\n    events: Partial<SDKEvents> = {},\n    debug: boolean = false\n  ) {\n    this.remainingSeconds = durationSeconds;\n    this.warningThreshold = warningThresholdSeconds;\n    this.events = events;\n    this.logger = new Logger(debug, '[TimerManager]');\n\n    this.logger.log('Initialized with duration:', durationSeconds, 'seconds');\n  }\n\n  /**\n   * Start countdown timer\n   */\n  start(): void {\n    if (this.intervalId !== null) {\n      this.logger.warn('Timer already running');\n      return;\n    }\n\n    this.logger.log('Starting timer with', this.remainingSeconds, 'seconds remaining');\n\n    this.intervalId = window.setInterval(() => {\n      this.remainingSeconds--;\n\n      // Check for warning threshold\n      if (\n        !this.warningShown &&\n        this.remainingSeconds <= this.warningThreshold &&\n        this.remainingSeconds > 0\n      ) {\n        this.warningShown = true;\n        this.logger.warn('Warning threshold reached:', this.remainingSeconds, 'seconds remaining');\n        this.events.onSessionWarning?.({\n          remainingSeconds: this.remainingSeconds,\n        });\n      }\n\n      // Check for expiration\n      if (this.remainingSeconds <= 0) {\n        this.logger.warn('Session expired');\n        this.stop();\n        this.events.onSessionEnd?.();\n      }\n    }, 1000);\n  }\n\n  /**\n   * Stop timer\n   */\n  stop(): void {\n    if (this.intervalId !== null) {\n      clearInterval(this.intervalId);\n      this.intervalId = null;\n      this.logger.log('Timer stopped');\n    }\n  }\n\n  /**\n   * Pause timer\n   */\n  pause(): void {\n    this.stop();\n    this.logger.log('Timer paused at:', this.remainingSeconds, 'seconds');\n  }\n\n  /**\n   * Resume timer\n   */\n  resume(): void {\n    if (this.intervalId === null && this.remainingSeconds > 0) {\n      this.start();\n      this.logger.log('Timer resumed at:', this.remainingSeconds, 'seconds');\n    }\n  }\n\n  /**\n   * Get remaining time in seconds\n   */\n  getRemainingSeconds(): number {\n    return this.remainingSeconds;\n  }\n\n  /**\n   * Get formatted time string (MM:SS)\n   */\n  getFormattedTime(): string {\n    const minutes = Math.floor(this.remainingSeconds / 60);\n    const seconds = this.remainingSeconds % 60;\n    return `${minutes}:${seconds.toString().padStart(2, '0')}`;\n  }\n\n  /**\n   * Get formatted time string with hours (HH:MM:SS)\n   */\n  getFormattedTimeWithHours(): string {\n    const hours = Math.floor(this.remainingSeconds / 3600);\n    const minutes = Math.floor((this.remainingSeconds % 3600) / 60);\n    const seconds = this.remainingSeconds % 60;\n\n    if (hours > 0) {\n      return `${hours}:${minutes.toString().padStart(2, '0')}:${seconds.toString().padStart(2, '0')}`;\n    }\n\n    return this.getFormattedTime();\n  }\n\n  /**\n   * Check if timer is running\n   */\n  isRunning(): boolean {\n    return this.intervalId !== null;\n  }\n\n  /**\n   * Check if warning has been shown\n   */\n  hasWarningBeenShown(): boolean {\n    return this.warningShown;\n  }\n\n  /**\n   * Update remaining time (useful for syncing with server)\n   */\n  updateRemainingTime(seconds: number): void {\n    this.remainingSeconds = seconds;\n    this.logger.log('Remaining time updated to:', seconds, 'seconds');\n  }\n}\n","import { Logger } from '../utils/logger';\nimport { SDKError } from '../types';\n\n/**\n * Heartbeat Manager for active session tracking\n * Phase 2 Feature - Sends periodic heartbeats to backend\n */\nexport class HeartbeatManager {\n  private intervalId: number | null = null;\n  private heartbeatInterval: number;\n  private failureCount: number = 0;\n  private maxFailures: number = 3;\n  private isEnabled: boolean = false;\n  private logger: Logger;\n\n  constructor(\n    private sessionId: string,\n    private apiEndpoint: string,\n    private token: string,\n    private onSync?: (remainingSeconds: number) => void,\n    private onError?: (error: Error) => void,\n    heartbeatIntervalSeconds: number = 30,\n    debug: boolean = false\n  ) {\n    this.heartbeatInterval = heartbeatIntervalSeconds * 1000;\n    this.logger = new Logger(debug, '[HeartbeatManager]');\n    this.logger.log('Initialized with', heartbeatIntervalSeconds, 'second interval');\n  }\n\n  /**\n   * Start sending heartbeats\n   */\n  start(): void {\n    if (this.intervalId !== null) {\n      this.logger.warn('Heartbeat already running');\n      return;\n    }\n\n    this.isEnabled = true;\n    this.logger.log('Starting heartbeat for session:', this.sessionId);\n\n    // Send initial heartbeat immediately\n    this.sendHeartbeat();\n\n    // Then send periodically\n    this.intervalId = window.setInterval(() => {\n      this.sendHeartbeat();\n    }, this.heartbeatInterval);\n  }\n\n  /**\n   * Stop sending heartbeats\n   */\n  stop(): void {\n    if (this.intervalId !== null) {\n      clearInterval(this.intervalId);\n      this.intervalId = null;\n      this.isEnabled = false;\n      this.logger.log('Heartbeat stopped');\n    }\n  }\n\n  /**\n   * Send a single heartbeat to backend\n   */\n  private async sendHeartbeat(): Promise<void> {\n    if (!this.isEnabled) {\n      return;\n    }\n\n    this.logger.log('Sending heartbeat...');\n\n    try {\n      const response = await fetch(\n        `${this.apiEndpoint}/sessions/${this.sessionId}/heartbeat`,\n        {\n          method: 'POST',\n          headers: {\n            'Authorization': `Bearer ${this.token}`,\n            'Content-Type': 'application/json',\n          },\n          body: JSON.stringify({\n            timestamp: Date.now(),\n            active: true,\n          }),\n        }\n      );\n\n      if (!response.ok) {\n        throw new SDKError(\n          `Heartbeat failed with status ${response.status}`,\n          'HEARTBEAT_FAILED',\n          response.status\n        );\n      }\n\n      const data = await response.json();\n\n      // Reset failure count on success\n      this.failureCount = 0;\n\n      // Sync remaining time with server\n      if (typeof data.remaining_seconds === 'number') {\n        this.logger.log('Server reports', data.remaining_seconds, 'seconds remaining');\n        this.onSync?.(data.remaining_seconds);\n      }\n\n      this.logger.log('Heartbeat acknowledged');\n\n    } catch (error) {\n      this.failureCount++;\n      this.logger.error('Heartbeat failed:', error, `(${this.failureCount}/${this.maxFailures})`);\n\n      if (this.failureCount >= this.maxFailures) {\n        this.logger.error('Max heartbeat failures reached, stopping');\n        this.stop();\n\n        const sdkError = error instanceof SDKError ? error : new SDKError(\n          error instanceof Error ? error.message : 'Heartbeat failed',\n          'HEARTBEAT_ERROR'\n        );\n        this.onError?.(sdkError);\n      }\n    }\n  }\n\n  /**\n   * Check if heartbeat is running\n   */\n  isRunning(): boolean {\n    return this.intervalId !== null;\n  }\n\n  /**\n   * Get failure count\n   */\n  getFailureCount(): number {\n    return this.failureCount;\n  }\n\n  /**\n   * Update heartbeat interval\n   */\n  updateInterval(seconds: number): void {\n    const wasRunning = this.isRunning();\n\n    if (wasRunning) {\n      this.stop();\n    }\n\n    this.heartbeatInterval = seconds * 1000;\n    this.logger.log('Heartbeat interval updated to', seconds, 'seconds');\n\n    if (wasRunning) {\n      this.start();\n    }\n  }\n}\n","import { Logger } from '../utils/logger';\n\nexport interface TabSyncMessage {\n  type: 'timer_update' | 'pause' | 'resume' | 'end';\n  sessionId: string;\n  remainingSeconds?: number;\n  timestamp: number;\n}\n\n/**\n * Tab Synchronization Manager\n * Phase 2 Feature - Syncs session state across multiple tabs\n */\nexport class TabSyncManager {\n  private channel: BroadcastChannel | null = null;\n  private storageKey: string;\n  private logger: Logger;\n  private isMaster: boolean = false;\n\n  constructor(\n    private sessionId: string,\n    private onMessage: (message: TabSyncMessage) => void,\n    debug: boolean = false\n  ) {\n    this.storageKey = `gw_session_sync_${sessionId}`;\n    this.logger = new Logger(debug, '[TabSyncManager]');\n\n    this.initialize();\n  }\n\n  /**\n   * Initialize sync mechanism\n   */\n  private initialize(): void {\n    // Try BroadcastChannel API first (modern browsers)\n    if (typeof BroadcastChannel !== 'undefined') {\n      this.logger.log('Using BroadcastChannel for tab sync');\n      this.channel = new BroadcastChannel(`gw-session-${this.sessionId}`);\n      this.channel.onmessage = (event) => {\n        this.handleMessage(event.data);\n      };\n    } else {\n      // Fallback to localStorage events (older browsers)\n      this.logger.log('Using localStorage for tab sync (fallback)');\n      window.addEventListener('storage', this.handleStorageEvent);\n    }\n\n    // Elect this tab as master if no other tab exists\n    this.electMaster();\n  }\n\n  /**\n   * Broadcast message to other tabs\n   */\n  broadcast(type: TabSyncMessage['type'], data?: Partial<TabSyncMessage>): void {\n    const message: TabSyncMessage = {\n      type,\n      sessionId: this.sessionId,\n      timestamp: Date.now(),\n      ...data,\n    };\n\n    if (this.channel) {\n      this.channel.postMessage(message);\n      this.logger.log('Broadcasted:', type);\n    } else {\n      // Fallback: use localStorage\n      localStorage.setItem(this.storageKey, JSON.stringify(message));\n      this.logger.log('Broadcasted via localStorage:', type);\n    }\n  }\n\n  /**\n   * Handle incoming message\n   */\n  private handleMessage(data: TabSyncMessage): void {\n    if (data.sessionId !== this.sessionId) {\n      return; // Ignore messages for other sessions\n    }\n\n    this.logger.log('Received message:', data.type);\n    this.onMessage(data);\n  }\n\n  /**\n   * Handle storage event (fallback mechanism)\n   */\n  private handleStorageEvent = (event: StorageEvent): void => {\n    if (event.key === this.storageKey && event.newValue) {\n      try {\n        const data = JSON.parse(event.newValue) as TabSyncMessage;\n        this.handleMessage(data);\n      } catch (error) {\n        this.logger.error('Failed to parse storage event:', error);\n      }\n    }\n  };\n\n  /**\n   * Elect this tab as master if appropriate\n   * Master tab is responsible for heartbeats\n   */\n  private electMaster(): void {\n    const masterKey = `gw_session_master_${this.sessionId}`;\n    const existingMaster = localStorage.getItem(masterKey);\n\n    if (!existingMaster) {\n      // No master exists, become master\n      this.isMaster = true;\n      localStorage.setItem(masterKey, Date.now().toString());\n      this.logger.log('Elected as master tab');\n\n      // Set up heartbeat to maintain master status\n      setInterval(() => {\n        if (this.isMaster) {\n          localStorage.setItem(masterKey, Date.now().toString());\n        }\n      }, 5000);\n\n      // Clear master status on unload\n      window.addEventListener('beforeunload', () => {\n        if (this.isMaster) {\n          localStorage.removeItem(masterKey);\n          this.logger.log('Removed master status');\n        }\n      });\n    } else {\n      this.logger.log('Another tab is master');\n\n      // Check periodically if master is still alive\n      setInterval(() => {\n        const masterTimestamp = localStorage.getItem(masterKey);\n        if (masterTimestamp) {\n          const age = Date.now() - parseInt(masterTimestamp);\n          if (age > 10000) {\n            // Master hasn't updated in 10s, assume dead\n            this.logger.warn('Master tab appears dead, becoming master');\n            this.isMaster = true;\n            localStorage.setItem(masterKey, Date.now().toString());\n          }\n        }\n      }, 5000);\n    }\n  }\n\n  /**\n   * Check if this tab is the master\n   */\n  isMasterTab(): boolean {\n    return this.isMaster;\n  }\n\n  /**\n   * Cleanup and destroy\n   */\n  destroy(): void {\n    if (this.channel) {\n      this.channel.close();\n      this.channel = null;\n    } else {\n      window.removeEventListener('storage', this.handleStorageEvent);\n    }\n\n    // Clean up storage\n    localStorage.removeItem(this.storageKey);\n\n    if (this.isMaster) {\n      localStorage.removeItem(`gw_session_master_${this.sessionId}`);\n    }\n\n    this.logger.log('Tab sync destroyed');\n  }\n}\n","/**\n * Theme configuration matching the General Wisdom SPA design system\n * Based on gw-spa/src/styles/globals.css and Tailwind CSS v4\n */\n\nexport interface ThemeColors {\n  // Background colors\n  background: string;\n  foreground: string;\n\n  // Card colors\n  card: string;\n  cardForeground: string;\n\n  // Popover colors\n  popover: string;\n  popoverForeground: string;\n\n  // Primary colors (brand blue)\n  primary: string;\n  primaryForeground: string;\n\n  // Secondary colors (light gray)\n  secondary: string;\n  secondaryForeground: string;\n\n  // Muted colors\n  muted: string;\n  mutedForeground: string;\n\n  // Accent colors\n  accent: string;\n  accentForeground: string;\n\n  // Destructive colors (red for errors/warnings)\n  destructive: string;\n  destructiveForeground: string;\n\n  // Success colors (green for success actions)\n  success: string;\n  successForeground: string;\n\n  // Border and input\n  border: string;\n  input: string;\n  ring: string;\n}\n\nexport interface ThemeTypography {\n  fontFamily: string;\n  fontSize: {\n    xs: string;\n    sm: string;\n    base: string;\n    lg: string;\n    xl: string;\n    '2xl': string;\n  };\n  fontWeight: {\n    normal: string;\n    medium: string;\n    semibold: string;\n    bold: string;\n  };\n  lineHeight: {\n    tight: string;\n    normal: string;\n    relaxed: string;\n  };\n}\n\nexport interface ThemeSpacing {\n  borderRadius: {\n    sm: string;\n    md: string;\n    lg: string;\n  };\n  padding: {\n    sm: string;\n    md: string;\n    lg: string;\n    xl: string;\n  };\n  gap: {\n    sm: string;\n    md: string;\n    lg: string;\n  };\n}\n\nexport interface Theme {\n  colors: ThemeColors;\n  typography: ThemeTypography;\n  spacing: ThemeSpacing;\n}\n\n/**\n * Light theme matching gw-spa design system\n */\nexport const lightTheme: Theme = {\n  colors: {\n    // Background\n    background: 'hsl(0 0% 100%)',\n    foreground: 'hsl(222.2 84% 4.9%)',\n\n    // Card\n    card: 'hsl(0 0% 100%)',\n    cardForeground: 'hsl(222.2 84% 4.9%)',\n\n    // Popover\n    popover: 'hsl(0 0% 100%)',\n    popoverForeground: 'hsl(222.2 84% 4.9%)',\n\n    // Primary (brand blue)\n    primary: 'hsl(221.2 83.2% 53.3%)',\n    primaryForeground: 'hsl(210 40% 98%)',\n\n    // Secondary (light gray)\n    secondary: 'hsl(210 40% 96.1%)',\n    secondaryForeground: 'hsl(222.2 47.4% 11.2%)',\n\n    // Muted\n    muted: 'hsl(210 40% 96.1%)',\n    mutedForeground: 'hsl(215.4 16.3% 46.9%)',\n\n    // Accent\n    accent: 'hsl(210 40% 96.1%)',\n    accentForeground: 'hsl(222.2 47.4% 11.2%)',\n\n    // Destructive (red)\n    destructive: 'hsl(0 84.2% 60.2%)',\n    destructiveForeground: 'hsl(210 40% 98%)',\n\n    // Success (green)\n    success: 'hsl(142 76% 36%)', // Tailwind green-600 equivalent\n    successForeground: 'hsl(0 0% 100%)',\n\n    // Border and input\n    border: 'hsl(214.3 31.8% 91.4%)',\n    input: 'hsl(214.3 31.8% 91.4%)',\n    ring: 'hsl(221.2 83.2% 53.3%)',\n  },\n  typography: {\n    fontFamily: '-apple-system, BlinkMacSystemFont, \"Segoe UI\", Roboto, \"Helvetica Neue\", Arial, sans-serif',\n    fontSize: {\n      xs: '12px',\n      sm: '14px',\n      base: '16px',\n      lg: '18px',\n      xl: '20px',\n      '2xl': '24px',\n    },\n    fontWeight: {\n      normal: '400',\n      medium: '500',\n      semibold: '600',\n      bold: '700',\n    },\n    lineHeight: {\n      tight: '1.25',\n      normal: '1.5',\n      relaxed: '1.75',\n    },\n  },\n  spacing: {\n    borderRadius: {\n      sm: '4px',  // calc(0.5rem - 4px)\n      md: '6px',  // calc(0.5rem - 2px)\n      lg: '8px',  // 0.5rem\n    },\n    padding: {\n      sm: '8px',\n      md: '16px',\n      lg: '24px',\n      xl: '32px',\n    },\n    gap: {\n      sm: '8px',\n      md: '12px',\n      lg: '16px',\n    },\n  },\n};\n\n/**\n * Dark theme matching gw-spa design system\n */\nexport const darkTheme: Theme = {\n  colors: {\n    // Background\n    background: 'hsl(222.2 84% 4.9%)',\n    foreground: 'hsl(210 40% 98%)',\n\n    // Card\n    card: 'hsl(222.2 84% 4.9%)',\n    cardForeground: 'hsl(210 40% 98%)',\n\n    // Popover\n    popover: 'hsl(222.2 84% 4.9%)',\n    popoverForeground: 'hsl(210 40% 98%)',\n\n    // Primary (lighter blue for dark mode)\n    primary: 'hsl(217.2 91.2% 59.8%)',\n    primaryForeground: 'hsl(222.2 47.4% 11.2%)',\n\n    // Secondary (dark gray)\n    secondary: 'hsl(217.2 32.6% 17.5%)',\n    secondaryForeground: 'hsl(210 40% 98%)',\n\n    // Muted\n    muted: 'hsl(217.2 32.6% 17.5%)',\n    mutedForeground: 'hsl(215 20.2% 65.1%)',\n\n    // Accent\n    accent: 'hsl(217.2 32.6% 17.5%)',\n    accentForeground: 'hsl(210 40% 98%)',\n\n    // Destructive (darker red for dark mode)\n    destructive: 'hsl(0 62.8% 30.6%)',\n    destructiveForeground: 'hsl(210 40% 98%)',\n\n    // Success (darker green for dark mode)\n    success: 'hsl(142 71% 45%)', // Tailwind green-500 equivalent\n    successForeground: 'hsl(0 0% 100%)',\n\n    // Border and input\n    border: 'hsl(217.2 32.6% 17.5%)',\n    input: 'hsl(217.2 32.6% 17.5%)',\n    ring: 'hsl(224.3 76.3% 48%)',\n  },\n  typography: {\n    fontFamily: '-apple-system, BlinkMacSystemFont, \"Segoe UI\", Roboto, \"Helvetica Neue\", Arial, sans-serif',\n    fontSize: {\n      xs: '12px',\n      sm: '14px',\n      base: '16px',\n      lg: '18px',\n      xl: '20px',\n      '2xl': '24px',\n    },\n    fontWeight: {\n      normal: '400',\n      medium: '500',\n      semibold: '600',\n      bold: '700',\n    },\n    lineHeight: {\n      tight: '1.25',\n      normal: '1.5',\n      relaxed: '1.75',\n    },\n  },\n  spacing: {\n    borderRadius: {\n      sm: '4px',\n      md: '6px',\n      lg: '8px',\n    },\n    padding: {\n      sm: '8px',\n      md: '16px',\n      lg: '24px',\n      xl: '32px',\n    },\n    gap: {\n      sm: '8px',\n      md: '12px',\n      lg: '16px',\n    },\n  },\n};\n\n/**\n * Get theme based on user preference or system setting\n */\nexport function getTheme(prefersDark?: boolean): Theme {\n  // Check for explicit preference\n  if (prefersDark !== undefined) {\n    return prefersDark ? darkTheme : lightTheme;\n  }\n\n  // Check system preference\n  if (typeof window !== 'undefined' && window.matchMedia) {\n    const isDarkMode = window.matchMedia('(prefers-color-scheme: dark)').matches;\n    return isDarkMode ? darkTheme : lightTheme;\n  }\n\n  // Default to light theme\n  return lightTheme;\n}\n\n/**\n * Generate CSS string from theme colors for inline styles\n */\nexport function generateCSSVariables(theme: Theme): string {\n  return `\n    --gw-background: ${theme.colors.background};\n    --gw-foreground: ${theme.colors.foreground};\n    --gw-card: ${theme.colors.card};\n    --gw-card-foreground: ${theme.colors.cardForeground};\n    --gw-primary: ${theme.colors.primary};\n    --gw-primary-foreground: ${theme.colors.primaryForeground};\n    --gw-secondary: ${theme.colors.secondary};\n    --gw-secondary-foreground: ${theme.colors.secondaryForeground};\n    --gw-muted: ${theme.colors.muted};\n    --gw-muted-foreground: ${theme.colors.mutedForeground};\n    --gw-accent: ${theme.colors.accent};\n    --gw-accent-foreground: ${theme.colors.accentForeground};\n    --gw-destructive: ${theme.colors.destructive};\n    --gw-destructive-foreground: ${theme.colors.destructiveForeground};\n    --gw-success: ${theme.colors.success};\n    --gw-success-foreground: ${theme.colors.successForeground};\n    --gw-border: ${theme.colors.border};\n    --gw-input: ${theme.colors.input};\n    --gw-ring: ${theme.colors.ring};\n  `.trim();\n}\n","import { ModalStyles, ThemeMode } from '../types';\nimport { getTheme, Theme } from '../styles/theme';\n\n/**\n * Warning Modal for session expiration alerts\n */\nexport class WarningModal {\n  private modal: HTMLDivElement | null = null;\n  private theme: Theme;\n  private legacyStyles: ModalStyles | null = null;\n  private updateInterval: number | null = null;\n  private timeDisplay: HTMLElement | null = null;\n  private startTime: number = 0;\n  private initialSeconds: number = 0;\n  private onEndCallback: (() => void) | undefined = undefined;\n\n  constructor(themeMode: ThemeMode = 'light', customStyles?: Partial<ModalStyles>) {\n    // Use new theme system\n    const prefersDark = themeMode === 'dark' || (themeMode === 'auto' && this.detectDarkMode());\n    this.theme = getTheme(prefersDark);\n\n    // Keep legacy styles for backward compatibility\n    if (customStyles) {\n      this.legacyStyles = {\n        backgroundColor: customStyles.backgroundColor || '#ffffff',\n        textColor: customStyles.textColor || '#333333',\n        primaryColor: customStyles.primaryColor || '#007bff',\n        borderRadius: customStyles.borderRadius || '8px',\n        fontFamily:\n          customStyles.fontFamily ||\n          '-apple-system, BlinkMacSystemFont, \"Segoe UI\", Roboto, sans-serif',\n      };\n    }\n  }\n\n  private detectDarkMode(): boolean {\n    if (typeof window !== 'undefined' && window.matchMedia) {\n      return window.matchMedia('(prefers-color-scheme: dark)').matches;\n    }\n    return false;\n  }\n\n  /**\n   * Show warning modal\n   */\n  show(options: {\n    remainingSeconds: number;\n    onExtend?: () => void;\n    onEnd?: () => void;\n  }): void {\n    // Remove existing modal if any\n    this.hide();\n\n    // Create modal\n    this.modal = document.createElement('div');\n    this.modal.id = 'gw-session-warning-modal';\n    this.modal.style.cssText = `\n      position: fixed;\n      top: 0;\n      left: 0;\n      width: 100%;\n      height: 100%;\n      background-color: rgba(0, 0, 0, 0.5);\n      display: flex;\n      align-items: center;\n      justify-content: center;\n      z-index: 99999;\n      font-family: ${this.legacyStyles?.fontFamily || this.theme.typography.fontFamily};\n    `;\n\n    // Create modal content\n    const content = document.createElement('div');\n    const bgColor = this.legacyStyles?.backgroundColor || this.theme.colors.card;\n    const textColor = this.legacyStyles?.textColor || this.theme.colors.cardForeground;\n    const borderRadius = this.legacyStyles?.borderRadius || this.theme.spacing.borderRadius.lg;\n\n    content.style.cssText = `\n      background-color: ${bgColor};\n      color: ${textColor};\n      border-radius: ${borderRadius};\n      padding: ${this.theme.spacing.padding.lg};\n      max-width: 400px;\n      width: 90%;\n      box-shadow: 0 4px 6px rgba(0, 0, 0, 0.1);\n      border: 1px solid ${this.theme.colors.border};\n    `;\n\n    this.initialSeconds = options.remainingSeconds;\n    this.startTime = Date.now();\n    this.onEndCallback = options.onEnd;\n\n    const minutes = Math.floor(options.remainingSeconds / 60);\n    const seconds = options.remainingSeconds % 60;\n\n    content.innerHTML = `\n      <h2 style=\"margin: 0 0 ${this.theme.spacing.padding.md} 0; font-size: ${this.theme.typography.fontSize.xl}; font-weight: ${this.theme.typography.fontWeight.semibold}; color: ${textColor};\">\n        ⏱️ Time Running Low\n      </h2>\n      <p style=\"margin: 0 0 ${this.theme.spacing.padding.lg} 0; font-size: ${this.theme.typography.fontSize.base}; line-height: ${this.theme.typography.lineHeight.normal}; color: ${this.theme.colors.mutedForeground};\">\n        Your session will expire in <strong id=\"gw-time-display\" style=\"color: ${textColor};\">${minutes}:${seconds.toString().padStart(2, '0')}</strong>.\n      </p>\n      <div style=\"display: flex; gap: ${this.theme.spacing.gap.md}; justify-content: flex-end;\">\n        <button id=\"gw-dismiss-btn\" style=\"\n          padding: 10px 20px;\n          background-color: ${this.theme.colors.secondary};\n          color: ${this.theme.colors.secondaryForeground};\n          border: 1px solid ${this.theme.colors.border};\n          border-radius: ${this.theme.spacing.borderRadius.sm};\n          font-size: ${this.theme.typography.fontSize.sm};\n          font-weight: ${this.theme.typography.fontWeight.medium};\n          cursor: pointer;\n          transition: all 0.2s;\n          font-family: ${this.theme.typography.fontFamily};\n        \">\n          Continue\n        </button>\n        ${\n          options.onExtend\n            ? `<button id=\"gw-extend-btn\" style=\"\n                padding: 10px 20px;\n                background-color: ${this.theme.colors.success};\n                color: ${this.theme.colors.successForeground};\n                border: none;\n                border-radius: ${this.theme.spacing.borderRadius.sm};\n                font-size: ${this.theme.typography.fontSize.sm};\n                font-weight: ${this.theme.typography.fontWeight.medium};\n                cursor: pointer;\n                transition: all 0.2s;\n                font-family: ${this.theme.typography.fontFamily};\n              \">\n                Extend Session\n              </button>`\n            : ''\n        }\n        ${\n          options.onEnd\n            ? `<button id=\"gw-end-btn\" style=\"\n                padding: 10px 20px;\n                background-color: ${this.theme.colors.destructive};\n                color: ${this.theme.colors.destructiveForeground};\n                border: none;\n                border-radius: ${this.theme.spacing.borderRadius.sm};\n                font-size: ${this.theme.typography.fontSize.sm};\n                font-weight: ${this.theme.typography.fontWeight.medium};\n                cursor: pointer;\n                transition: all 0.2s;\n                font-family: ${this.theme.typography.fontFamily};\n              \">\n                End Session\n              </button>`\n            : ''\n        }\n      </div>\n    `;\n\n    this.modal.appendChild(content);\n    document.body.appendChild(this.modal);\n\n    // Add event listeners\n    const extendBtn = document.getElementById('gw-extend-btn');\n    if (extendBtn && options.onExtend) {\n      extendBtn.addEventListener('click', () => {\n        options.onExtend?.();\n        this.hide();\n      });\n    }\n\n    const dismissBtn = document.getElementById('gw-dismiss-btn');\n    if (dismissBtn) {\n      dismissBtn.addEventListener('click', () => {\n        this.hide();\n      });\n    }\n\n    const endBtn = document.getElementById('gw-end-btn');\n    if (endBtn && options.onEnd) {\n      endBtn.addEventListener('click', () => {\n        options.onEnd?.();\n        // Don't call this.hide() here - the onEnd callback will handle showing\n        // the ending modal, and calling hide() would remove it immediately\n      });\n    }\n\n    // Add hover effects\n    const buttons = content.querySelectorAll('button');\n    buttons.forEach((button) => {\n      button.addEventListener('mouseenter', () => {\n        (button as HTMLElement).style.opacity = '0.9';\n      });\n      button.addEventListener('mouseleave', () => {\n        (button as HTMLElement).style.opacity = '1';\n      });\n      // Add focus ring\n      button.addEventListener('focus', () => {\n        (button as HTMLElement).style.outline = `2px solid ${this.theme.colors.ring}`;\n        (button as HTMLElement).style.outlineOffset = '2px';\n      });\n      button.addEventListener('blur', () => {\n        (button as HTMLElement).style.outline = 'none';\n      });\n    });\n\n    // Start updating the timer display\n    this.timeDisplay = document.getElementById('gw-time-display');\n    this.updateInterval = window.setInterval(() => {\n      const elapsed = Math.floor((Date.now() - this.startTime) / 1000);\n      const remaining = Math.max(0, this.initialSeconds - elapsed);\n\n      const minutes = Math.floor(remaining / 60);\n      const seconds = remaining % 60;\n\n      if (this.timeDisplay) {\n        this.timeDisplay.textContent = `${minutes}:${seconds.toString().padStart(2, '0')}`;\n      }\n\n      // If time runs out, trigger session end if callback exists\n      if (remaining === 0) {\n        if (this.onEndCallback) {\n          this.onEndCallback();\n        }\n        this.hide();\n      }\n    }, 1000);\n  }\n\n  /**\n   * Hide and remove modal\n   */\n  hide(): void {\n    // Clear the update interval\n    if (this.updateInterval !== null) {\n      clearInterval(this.updateInterval);\n      this.updateInterval = null;\n    }\n\n    // Remove modal from DOM\n    if (this.modal && this.modal.parentNode) {\n      this.modal.parentNode.removeChild(this.modal);\n      this.modal = null;\n      this.timeDisplay = null;\n    }\n  }\n\n  /**\n   * Check if modal is currently shown\n   */\n  isShown(): boolean {\n    return this.modal !== null;\n  }\n\n  /**\n   * Show \"Session Ending\" modal before redirect\n   * Displays for a fixed duration (3 seconds) then calls callback\n   */\n  showEndingMessage(onComplete: () => void, durationMs: number = 3000): void {\n    // Hide any existing modal first\n    this.hide();\n\n    const bgColor = this.legacyStyles?.backgroundColor || this.theme.colors.card;\n    const textColor = this.legacyStyles?.textColor || this.theme.colors.cardForeground;\n    const borderRadius = this.legacyStyles?.borderRadius || this.theme.spacing.borderRadius.lg;\n\n    // Create modal overlay\n    this.modal = document.createElement('div');\n    this.modal.id = 'gw-session-ending-modal';\n    this.modal.style.cssText = `\n      position: fixed;\n      top: 0;\n      left: 0;\n      width: 100%;\n      height: 100%;\n      background-color: rgba(0, 0, 0, 0.5);\n      display: flex;\n      align-items: center;\n      justify-content: center;\n      z-index: 99999;\n      font-family: ${this.legacyStyles?.fontFamily || this.theme.typography.fontFamily};\n      animation: fadeIn 0.2s ease-in;\n    `;\n\n    // Create modal content\n    const content = document.createElement('div');\n    content.style.cssText = `\n      background-color: ${bgColor};\n      color: ${textColor};\n      border-radius: ${borderRadius};\n      padding: ${this.theme.spacing.padding.xl};\n      max-width: 400px;\n      width: 90%;\n      box-shadow: 0 4px 6px rgba(0, 0, 0, 0.1);\n      text-align: center;\n      animation: slideIn 0.3s ease-out;\n      border: 1px solid ${this.theme.colors.border};\n    `;\n\n    content.innerHTML = `\n      <div style=\"font-size: 48px; margin-bottom: ${this.theme.spacing.padding.lg};\">⏱️</div>\n      <h2 style=\"margin: 0 0 ${this.theme.spacing.padding.md} 0; font-size: ${this.theme.typography.fontSize['2xl']}; font-weight: ${this.theme.typography.fontWeight.semibold}; color: ${this.theme.colors.destructive};\">\n        Session Ending\n      </h2>\n      <p style=\"margin: 0 0 ${this.theme.spacing.padding.lg} 0; font-size: ${this.theme.typography.fontSize.base}; line-height: ${this.theme.typography.lineHeight.normal}; color: ${this.theme.colors.mutedForeground};\">\n        Your session has expired.<br/>\n        Redirecting to marketplace...\n      </p>\n      <div style=\"\n        width: 100%;\n        height: 4px;\n        background: ${this.theme.colors.muted};\n        border-radius: ${this.theme.spacing.borderRadius.sm};\n        overflow: hidden;\n        margin-top: ${this.theme.spacing.padding.lg};\n      \">\n        <div id=\"gw-progress-bar\" style=\"\n          width: 100%;\n          height: 100%;\n          background: linear-gradient(90deg, ${this.theme.colors.destructive}, ${this.theme.colors.primary});\n          animation: progressBar ${durationMs}ms linear forwards;\n        \"></div>\n      </div>\n    `;\n\n    // Add animations\n    const style = document.createElement('style');\n    style.textContent = `\n      @keyframes fadeIn {\n        from { opacity: 0; }\n        to { opacity: 1; }\n      }\n      @keyframes slideIn {\n        from { transform: translateY(-20px); opacity: 0; }\n        to { transform: translateY(0); opacity: 1; }\n      }\n      @keyframes progressBar {\n        from { width: 100%; }\n        to { width: 0%; }\n      }\n    `;\n    document.head.appendChild(style);\n\n    this.modal.appendChild(content);\n    document.body.appendChild(this.modal);\n\n    // Call callback after duration\n    setTimeout(() => {\n      this.hide();\n      onComplete();\n    }, durationMs);\n  }\n}\n","import { SDKError } from '../types';\n\n/**\n * Extract JWT token from URL parameter\n * @param paramName - URL parameter name (default: 'gwSession')\n * @param url - URL to extract from (default: window.location.href)\n * @returns JWT token or null if not found\n */\nexport function extractTokenFromURL(\n  paramName: string = 'gwSession',\n  url?: string\n): string | null {\n  try {\n    const targetUrl = url || (typeof window !== 'undefined' ? window.location.href : '');\n\n    if (!targetUrl) {\n      return null;\n    }\n\n    const urlObj = new URL(targetUrl);\n    const token = urlObj.searchParams.get(paramName);\n\n    return token;\n  } catch (error) {\n    throw new SDKError(\n      `Failed to extract token from URL: ${error instanceof Error ? error.message : 'Unknown error'}`,\n      'URL_PARSE_ERROR'\n    );\n  }\n}\n\n/**\n * Check if code is running in browser environment\n */\nexport function isBrowser(): boolean {\n  return typeof window !== 'undefined' && typeof window.document !== 'undefined';\n}\n","import { JWTParser } from './JWTParser';\nimport { JWKSValidator } from './JWKSValidator';\nimport { TimerManager } from './TimerManager';\nimport { HeartbeatManager } from './HeartbeatManager';\nimport { TabSyncManager, TabSyncMessage } from './TabSyncManager';\nimport { WarningModal } from '../ui/WarningModal';\nimport { extractTokenFromURL } from '../utils/url';\nimport { Logger } from '../utils/logger';\nimport { SDKConfig, SDKEvents, SessionData, SDKError, SessionStartContext, SessionEndContext, SessionExtendContext, SessionWarningContext } from '../types';\n\n/**\n * Marketplace SDK with Phase 2 Features\n * - Heartbeat system\n * - Multi-tab synchronization\n * - Visibility API integration\n * - Session extension/completion\n * - Backend validation\n */\nexport class MarketplaceSDK {\n  private config: Required<SDKConfig>;\n  private validator: JWKSValidator;\n  private timer: TimerManager | null = null;\n  private heartbeat: HeartbeatManager | null = null;\n  private tabSync: TabSyncManager | null = null;\n  private modal: WarningModal | null = null;\n  private logger: Logger;\n  private events: Partial<SDKEvents> = {};\n  private sessionData: SessionData | null = null;\n  private jwtToken: string | null = null;\n  private endReason: 'expired' | 'manual' | 'error' = 'manual';\n\n  constructor(config: SDKConfig) {\n    this.config = {\n      jwksUri: config.jwksUri || 'https://api.generalwisdom.com/.well-known/jwks.json',\n      jwtParamName: config.jwtParamName || 'gwSession',\n      apiEndpoint: config.apiEndpoint || 'http://localhost:3000',\n      debug: config.debug ?? false,\n      autoStart: config.autoStart ?? true,\n      warningThresholdSeconds: config.warningThresholdSeconds ?? 300,\n      customStyles: config.customStyles ?? {},\n      themeMode: config.themeMode ?? 'light',\n      applicationId: config.applicationId ?? '',\n      marketplaceUrl: config.marketplaceUrl ?? 'https://d3p2yqofgy75sz.cloudfront.net/',\n      // Phase 2 options\n      enableHeartbeat: config.enableHeartbeat ?? false,\n      heartbeatIntervalSeconds: config.heartbeatIntervalSeconds ?? 30,\n      enableTabSync: config.enableTabSync ?? false,\n      pauseOnHidden: config.pauseOnHidden ?? false,\n      useBackendValidation: config.useBackendValidation ?? false,\n      // Lifecycle hooks\n      hooks: config.hooks ?? {},\n      hookTimeoutMs: config.hookTimeoutMs ?? 5000,\n    };\n\n    this.validator = new JWKSValidator(this.config.jwksUri, this.config.debug);\n    this.logger = new Logger(this.config.debug, '[MarketplaceSDK]');\n\n    this.logger.info('SDK initialized with config:', {\n      jwksUri: this.config.jwksUri,\n      jwtParamName: this.config.jwtParamName,\n      apiEndpoint: this.config.apiEndpoint,\n      enableHeartbeat: this.config.enableHeartbeat,\n      enableTabSync: this.config.enableTabSync,\n      pauseOnHidden: this.config.pauseOnHidden,\n    });\n  }\n\n  /**\n   * Register event handlers\n   */\n  on<K extends keyof SDKEvents>(event: K, handler: SDKEvents[K]): void {\n    this.events[event] = handler;\n    this.logger.log('Event handler registered:', event);\n  }\n\n  /**\n   * Execute a lifecycle hook with timeout\n   */\n  private async executeHook<T>(\n    hookName: string,\n    hook: ((context: T) => Promise<void> | void) | undefined,\n    context: T,\n    isStrict: boolean = true\n  ): Promise<void> {\n    if (!hook) return;\n\n    this.logger.log(`Calling ${hookName} hook`);\n\n    const timeout = new Promise<never>((_, reject) =>\n      setTimeout(\n        () => reject(new SDKError(`${hookName} hook timeout after ${this.config.hookTimeoutMs}ms`, 'HOOK_TIMEOUT')),\n        this.config.hookTimeoutMs\n      )\n    );\n\n    try {\n      await Promise.race([\n        Promise.resolve(hook(context)),\n        timeout\n      ]);\n      this.logger.log(`${hookName} hook completed successfully`);\n    } catch (error) {\n      this.logger.error(`${hookName} hook failed:`, error);\n\n      if (isStrict) {\n        // Strict mode: throw error to prevent session operation\n        throw new SDKError(\n          `${hookName} hook failed: ${error instanceof Error ? error.message : 'Unknown error'}`,\n          'HOOK_ERROR'\n        );\n      } else {\n        // Lenient mode: log but don't throw\n        this.logger.warn(`${hookName} hook failed but continuing (lenient mode)`);\n      }\n    }\n  }\n\n  /**\n   * Calculate actual session duration in minutes\n   */\n  private calculateActualDuration(): number | undefined {\n    if (!this.sessionData) return undefined;\n    const now = Math.floor(Date.now() / 1000);\n    const durationSeconds = now - this.sessionData.startTime;\n    return Math.ceil(durationSeconds / 60);\n  }\n\n  /**\n   * Initialize SDK and validate session\n   */\n  async initialize(): Promise<SessionData> {\n    this.logger.info('Initializing session...');\n\n    try {\n      // Extract JWT from URL or retrieve from storage\n      const JWT_STORAGE_KEY = 'gw_marketplace_jwt';\n\n      // First try URL parameter\n      this.jwtToken = extractTokenFromURL(this.config.jwtParamName);\n\n      // If not in URL, try storage (for persistence through OAuth redirects)\n      if (!this.jwtToken && typeof sessionStorage !== 'undefined') {\n        this.jwtToken = sessionStorage.getItem(JWT_STORAGE_KEY);\n        if (this.jwtToken) {\n          this.logger.log('JWT token retrieved from storage');\n        }\n      }\n\n      // Still no token? Error out\n      if (!this.jwtToken) {\n        throw new SDKError(\n          `No token found in URL parameter '${this.config.jwtParamName}' or storage`,\n          'MISSING_TOKEN'\n        );\n      }\n\n      // Store JWT for persistence through navigation\n      if (typeof sessionStorage !== 'undefined') {\n        sessionStorage.setItem(JWT_STORAGE_KEY, this.jwtToken);\n        this.logger.log('JWT token stored in sessionStorage');\n      }\n\n      this.logger.log('JWT token extracted from URL');\n\n      // Validate JWT\n      let verifiedClaims;\n      if (this.config.useBackendValidation) {\n        // Phase 2: Backend validation\n        this.logger.log('Using backend validation');\n        verifiedClaims = await this.validateWithBackend(this.jwtToken);\n      } else {\n        // Phase 1: JWKS validation\n        this.logger.log('Using JWKS validation');\n        verifiedClaims = await this.validator.verify(\n          this.jwtToken,\n          'generalwisdom.com',\n          this.config.applicationId || undefined\n        );\n      }\n\n      this.logger.log('JWT verified successfully');\n\n      // Map to SessionData\n      this.sessionData = {\n        sessionId: verifiedClaims.sessionId,\n        applicationId: verifiedClaims.applicationId,\n        userId: verifiedClaims.userId,\n        orgId: verifiedClaims.orgId,\n        startTime: verifiedClaims.startTime,\n        durationMinutes: verifiedClaims.durationMinutes,\n        iat: verifiedClaims.iat,\n        exp: verifiedClaims.exp,\n        iss: verifiedClaims.iss,\n        sub: verifiedClaims.sub,\n      };\n\n      // Calculate remaining time\n      const now = Math.floor(Date.now() / 1000);\n      const remainingSeconds = Math.max(0, this.sessionData.exp - now);\n\n      if (remainingSeconds <= 0) {\n        throw new SDKError(\n          'Session has already expired',\n          'SESSION_EXPIRED'\n        );\n      }\n\n      this.logger.log('Remaining time:', remainingSeconds, 'seconds');\n\n      // Call onSessionStart hook if provided (STRICT - failure prevents session start)\n      if (this.config.hooks?.onSessionStart) {\n        const startContext: SessionStartContext = {\n          sessionId: this.sessionData.sessionId,\n          userId: this.sessionData.userId,\n          email: (verifiedClaims as any).email, // May not be in all JWTs\n          orgId: this.sessionData.orgId,\n          applicationId: this.sessionData.applicationId,\n          durationMinutes: this.sessionData.durationMinutes,\n          expiresAt: this.sessionData.exp,\n          jwt: this.jwtToken!,\n        };\n\n        await this.executeHook('onSessionStart', this.config.hooks.onSessionStart, startContext, true);\n        this.logger.log('Application auth synchronized with marketplace session');\n      }\n\n      // Initialize timer\n      this.timer = new TimerManager(\n        remainingSeconds,\n        this.config.warningThresholdSeconds,\n        {\n          onSessionWarning: (data) => {\n            // Call warning hook if provided (lenient)\n            if (this.config.hooks?.onSessionWarning) {\n              const warningContext: SessionWarningContext = {\n                sessionId: this.sessionData!.sessionId,\n                userId: this.sessionData!.userId,\n                remainingSeconds: data.remainingSeconds,\n              };\n              this.executeHook('onSessionWarning', this.config.hooks.onSessionWarning, warningContext, false)\n                .catch(error => this.logger.error('onSessionWarning hook failed:', error));\n            }\n\n            this.showWarningModal(data.remainingSeconds);\n            this.events.onSessionWarning?.(data);\n          },\n          onSessionEnd: () => {\n            this.endReason = 'expired'; // Track that this was an expiration\n            this.endSession();\n          },\n        },\n        this.config.debug\n      );\n\n      // Phase 2: Initialize heartbeat if enabled\n      if (this.config.enableHeartbeat && this.jwtToken) {\n        this.heartbeat = new HeartbeatManager(\n          this.sessionData.sessionId,\n          this.config.apiEndpoint,\n          this.jwtToken,\n          (remainingSeconds) => {\n            // Sync timer with server\n            this.timer?.updateRemainingTime(remainingSeconds);\n          },\n          (error) => {\n            this.logger.error('Heartbeat error:', error);\n            this.events.onError?.(error);\n          },\n          this.config.heartbeatIntervalSeconds,\n          this.config.debug\n        );\n      }\n\n      // Phase 2: Initialize tab sync if enabled\n      if (this.config.enableTabSync) {\n        this.tabSync = new TabSyncManager(\n          this.sessionData.sessionId,\n          (message) => this.handleTabSyncMessage(message),\n          this.config.debug\n        );\n      }\n\n      // Phase 2: Set up Visibility API if enabled\n      if (this.config.pauseOnHidden) {\n        this.initializeVisibilityHandling();\n      }\n\n      // Start timer if autoStart enabled\n      if (this.config.autoStart) {\n        this.timer.start();\n        this.logger.log('Timer started automatically');\n\n        // Start heartbeat only if this is the master tab\n        if (this.config.enableHeartbeat && this.heartbeat) {\n          const isMaster = !this.tabSync || this.tabSync.isMasterTab();\n          if (isMaster) {\n            this.heartbeat.start();\n            this.logger.log('Heartbeat started (master tab)');\n          } else {\n            this.logger.log('Heartbeat not started (slave tab)');\n          }\n        }\n      }\n\n      // Trigger session start event\n      this.events.onSessionStart?.(this.sessionData);\n\n      this.logger.info('Session initialized successfully');\n      return this.sessionData;\n\n    } catch (error) {\n      this.logger.error('Initialization failed:', error);\n      const sdkError = error instanceof SDKError ? error : new SDKError(\n        error instanceof Error ? error.message : 'Unknown error',\n        'INITIALIZATION_ERROR'\n      );\n      this.events.onError?.(sdkError);\n      throw sdkError;\n    }\n  }\n\n  /**\n   * Phase 2: Validate JWT with backend\n   */\n  private async validateWithBackend(token: string): Promise<any> {\n    const response = await fetch(\n      `${this.config.apiEndpoint}/sessions/validate`,\n      {\n        method: 'POST',\n        headers: {\n          'Authorization': `Bearer ${token}`,\n          'Content-Type': 'application/json',\n        },\n        body: JSON.stringify({ session_jwt: token }),\n      }\n    );\n\n    if (!response.ok) {\n      throw new SDKError(\n        'Backend validation failed',\n        'BACKEND_VALIDATION_FAILED',\n        response.status\n      );\n    }\n\n    const data = await response.json();\n    if (!data.valid) {\n      throw new SDKError(\n        data.error || 'Session validation failed',\n        'SESSION_INVALID'\n      );\n    }\n\n    // Return decoded claims from backend\n    const decoded = JWTParser.decode(token);\n    return decoded;\n  }\n\n  /**\n   * Phase 2: Handle tab sync messages\n   */\n  private handleTabSyncMessage(message: TabSyncMessage): void {\n    this.logger.log('Tab sync message:', message.type);\n\n    switch (message.type) {\n      case 'pause':\n        this.timer?.pause();\n        break;\n      case 'resume':\n        this.timer?.resume();\n        break;\n      case 'end':\n        this.endSession();\n        break;\n      case 'timer_update':\n        if (message.remainingSeconds !== undefined) {\n          this.timer?.updateRemainingTime(message.remainingSeconds);\n        }\n        break;\n    }\n  }\n\n  /**\n   * Phase 2: Initialize Visibility API handling\n   */\n  private initializeVisibilityHandling(): void {\n    document.addEventListener('visibilitychange', () => {\n      if (document.hidden) {\n        this.logger.log('Tab hidden, pausing timer');\n        this.pauseTimer();\n      } else {\n        this.logger.log('Tab visible, resuming timer');\n        this.resumeTimer();\n      }\n    });\n    this.logger.log('Visibility API handler initialized');\n  }\n\n  /**\n   * Start session timer manually\n   */\n  startTimer(): void {\n    if (!this.timer) {\n      throw new SDKError(\n        'SDK not initialized. Call initialize() first.',\n        'NOT_INITIALIZED'\n      );\n    }\n    this.timer.start();\n    this.tabSync?.broadcast('resume');\n    this.logger.info('Timer started manually');\n  }\n\n  /**\n   * Pause session timer\n   */\n  pauseTimer(): void {\n    this.timer?.pause();\n    this.tabSync?.broadcast('pause');\n    this.logger.info('Timer paused');\n  }\n\n  /**\n   * Resume session timer\n   */\n  resumeTimer(): void {\n    this.timer?.resume();\n    this.tabSync?.broadcast('resume');\n    this.logger.info('Timer resumed');\n  }\n\n  /**\n   * Phase 2: Extend session\n   */\n  async extendSession(additionalMinutes: number): Promise<void> {\n    if (!this.sessionData || !this.jwtToken) {\n      throw new SDKError('No active session', 'NO_SESSION');\n    }\n\n    this.logger.info('Extending session by', additionalMinutes, 'minutes');\n\n    try {\n      const response = await fetch(\n        `${this.config.apiEndpoint}/sessions/${this.sessionData.sessionId}/renew`,\n        {\n          method: 'PUT',\n          headers: {\n            'Authorization': `Bearer ${this.jwtToken}`,\n            'Content-Type': 'application/json',\n          },\n          body: JSON.stringify({\n            additional_minutes: additionalMinutes,\n          }),\n        }\n      );\n\n      if (!response.ok) {\n        throw new SDKError(\n          'Session extension failed',\n          'EXTENSION_FAILED',\n          response.status\n        );\n      }\n\n      const data = await response.json();\n\n      // Update session data\n      this.sessionData.exp = data.new_expires_at;\n\n      // Update timer\n      const now = Math.floor(Date.now() / 1000);\n      const remainingSeconds = data.new_expires_at - now;\n      this.timer?.updateRemainingTime(remainingSeconds);\n\n      // Broadcast to other tabs\n      this.tabSync?.broadcast('timer_update', { remainingSeconds });\n\n      // Call onSessionExtend hook if provided\n      if (this.config.hooks?.onSessionExtend) {\n        const extendContext: SessionExtendContext = {\n          sessionId: this.sessionData.sessionId,\n          userId: this.sessionData.userId,\n          additionalMinutes,\n          newExpiresAt: data.new_expires_at,\n        };\n\n        await this.executeHook('onSessionExtend', this.config.hooks.onSessionExtend, extendContext, false);\n      }\n\n      this.logger.info('Session extended successfully');\n\n    } catch (error) {\n      this.logger.error('Failed to extend session:', error);\n      const sdkError = error instanceof SDKError ? error : new SDKError(\n        error instanceof Error ? error.message : 'Extension failed',\n        'EXTENSION_ERROR'\n      );\n      this.events.onError?.(sdkError);\n      throw sdkError;\n    }\n  }\n\n  /**\n   * Phase 2: Complete session\n   */\n  async completeSession(actualUsageMinutes?: number): Promise<void> {\n    if (!this.sessionData || !this.jwtToken) {\n      throw new SDKError('No active session', 'NO_SESSION');\n    }\n\n    this.logger.info('Completing session...');\n\n    try {\n      const response = await fetch(\n        `${this.config.apiEndpoint}/sessions/${this.sessionData.sessionId}/complete`,\n        {\n          method: 'POST',\n          headers: {\n            'Authorization': `Bearer ${this.jwtToken}`,\n            'Content-Type': 'application/json',\n          },\n          body: JSON.stringify({\n            actual_usage_minutes: actualUsageMinutes,\n            metadata: {},\n          }),\n        }\n      );\n\n      if (!response.ok) {\n        throw new SDKError(\n          'Session completion failed',\n          'COMPLETION_FAILED',\n          response.status\n        );\n      }\n\n      const data = await response.json();\n      this.logger.info('Session completed:', data);\n\n      // End the session\n      this.endSession();\n\n    } catch (error) {\n      this.logger.error('Failed to complete session:', error);\n      const sdkError = error instanceof SDKError ? error : new SDKError(\n        error instanceof Error ? error.message : 'Completion failed',\n        'COMPLETION_ERROR'\n      );\n      this.events.onError?.(sdkError);\n      throw sdkError;\n    }\n  }\n\n  /**\n   * End session\n   */\n  async endSession(): Promise<void> {\n    this.logger.info('Ending session...');\n\n    // Build session end context\n    const endContext: SessionEndContext = {\n      sessionId: this.sessionData?.sessionId || '',\n      userId: this.sessionData?.userId || '',\n      reason: this.endReason,\n      actualDurationMinutes: this.calculateActualDuration(),\n    };\n\n    // Call onSessionEnd hook if provided (LENIENT - errors logged but don't block)\n    if (this.config.hooks?.onSessionEnd) {\n      try {\n        await this.executeHook('onSessionEnd', this.config.hooks.onSessionEnd, endContext, false);\n        this.logger.log('Application auth cleanup completed');\n      } catch (error) {\n        // This shouldn't throw due to lenient mode, but catch anyway\n        this.logger.error('onSessionEnd hook error (continuing anyway):', error);\n      }\n    }\n\n    // Stop timer\n    this.timer?.stop();\n\n    // Stop heartbeat\n    this.heartbeat?.stop();\n\n    // Broadcast to other tabs\n    this.tabSync?.broadcast('end');\n\n    // Clear JWT from storage\n    if (typeof sessionStorage !== 'undefined') {\n      sessionStorage.removeItem('gw_marketplace_jwt');\n      this.logger.log('JWT token cleared from storage');\n    }\n\n    // Trigger end event\n    this.events.onSessionEnd?.();\n\n    this.logger.info('Session ended');\n\n    // Show \"Session Ending\" modal, then redirect after 3 seconds\n    if (typeof window !== 'undefined') {\n      // Create modal if it doesn't exist\n      if (!this.modal) {\n        this.modal = new WarningModal(\n          this.config.themeMode || 'light',\n          this.config.customStyles\n        );\n      }\n\n      // Show ending message with redirect callback\n      this.modal.showEndingMessage(() => {\n        window.location.href = this.config.marketplaceUrl;\n      }, 3000); // 3 second delay\n    }\n  }\n\n  /**\n   * Show warning modal\n   */\n  private showWarningModal(remainingSeconds: number): void {\n    if (!this.modal) {\n      this.modal = new WarningModal(\n        this.config.themeMode || 'light',\n        this.config.customStyles\n      );\n    }\n\n    this.modal.show({\n      remainingSeconds,\n      onExtend: async () => {\n        // Try to extend session via API\n        try {\n          await this.extendSession(15); // Extend by 15 minutes\n          this.modal?.hide();\n          this.logger.log('Session extended successfully from modal');\n        } catch (error) {\n          // If extension fails (likely insufficient tokens), show ending modal then redirect to marketplace\n          this.logger.error('Extension failed, redirecting to marketplace:', error);\n          const marketplaceUrl = `${this.config.marketplaceUrl}extend-session?sessionId=${this.sessionData?.sessionId}`;\n\n          // Show ending modal before redirect\n          if (typeof window !== 'undefined') {\n            if (!this.modal) {\n              this.modal = new WarningModal(\n                this.config.themeMode || 'light',\n                this.config.customStyles\n              );\n            }\n            this.modal.showEndingMessage(() => {\n              window.location.href = marketplaceUrl;\n            }, 3000);\n          }\n        }\n      },\n      onEnd: () => {\n        // endSession() handles cleanup and redirect\n        this.endSession();\n      },\n    });\n  }\n\n  /**\n   * Get current session data\n   */\n  getSessionData(): SessionData | null {\n    return this.sessionData;\n  }\n\n  /**\n   * Get remaining time\n   */\n  getRemainingTime(): number {\n    return this.timer?.getRemainingSeconds() ?? 0;\n  }\n\n  /**\n   * Get formatted time (MM:SS)\n   */\n  getFormattedTime(): string {\n    return this.timer?.getFormattedTime() ?? '0:00';\n  }\n\n  /**\n   * Get formatted time with hours (HH:MM:SS)\n   */\n  getFormattedTimeWithHours(): string {\n    return this.timer?.getFormattedTimeWithHours() ?? '0:00:00';\n  }\n\n  /**\n   * Check if timer is running\n   */\n  isTimerRunning(): boolean {\n    return this.timer?.isRunning() ?? false;\n  }\n\n  /**\n   * Cleanup and destroy SDK instance\n   */\n  destroy(): void {\n    this.logger.info('Destroying SDK instance...');\n    this.timer?.stop();\n    this.heartbeat?.stop();\n    this.tabSync?.destroy();\n    this.modal?.hide();\n\n    // Clear JWT from storage\n    if (typeof sessionStorage !== 'undefined') {\n      sessionStorage.removeItem('gw_marketplace_jwt');\n      this.logger.log('JWT token cleared from storage');\n    }\n\n    this.sessionData = null;\n    this.jwtToken = null;\n  }\n}\n","import { ThemeMode } from '../types';\nimport { getTheme, Theme } from '../styles/theme';\n\n/**\n * Session Header Component\n * Compact header widget showing session timer with extend/end controls\n */\nexport class SessionHeader {\n  private container: HTMLDivElement | null = null;\n  private theme: Theme;\n  private updateInterval: number | null = null;\n  private timeDisplay: HTMLElement | null = null;\n  private getTimeCallback: (() => string) | undefined;\n  private onExtendCallback: (() => void) | undefined;\n  private onEndCallback: (() => void) | undefined;\n  private mounted: boolean = false;\n\n  constructor(themeMode: ThemeMode = 'auto') {\n    const prefersDark = themeMode === 'dark' || (themeMode === 'auto' && this.detectDarkMode());\n    this.theme = getTheme(prefersDark);\n  }\n\n  private detectDarkMode(): boolean {\n    if (typeof window !== 'undefined' && window.matchMedia) {\n      return window.matchMedia('(prefers-color-scheme: dark)').matches;\n    }\n    return false;\n  }\n\n  /**\n   * Mount the session header to a DOM element\n   * @param targetElement - Element to mount to (or selector string)\n   * @param options - Configuration options\n   */\n  mount(\n    targetElement: HTMLElement | string,\n    options: {\n      getTime: () => string;\n      onExtend?: () => void;\n      onEnd?: () => void;\n      position?: 'left' | 'center' | 'right';\n    }\n  ): void {\n    // Unmount if already mounted\n    if (this.mounted) {\n      this.unmount();\n    }\n\n    // Get target element\n    const target =\n      typeof targetElement === 'string'\n        ? document.querySelector<HTMLElement>(targetElement)\n        : targetElement;\n\n    if (!target) {\n      console.error('[SessionHeader] Mount target not found');\n      return;\n    }\n\n    this.getTimeCallback = options.getTime;\n    this.onExtendCallback = options.onExtend;\n    this.onEndCallback = options.onEnd;\n\n    // Create container\n    this.container = document.createElement('div');\n    this.container.id = 'gw-session-header';\n\n    const position = options.position || 'right';\n    const justifyContent =\n      position === 'left' ? 'flex-start' :\n      position === 'center' ? 'center' :\n      'flex-end';\n\n    this.container.style.cssText = `\n      display: flex;\n      align-items: center;\n      justify-content: ${justifyContent};\n      gap: ${this.theme.spacing.gap.md};\n      padding: ${this.theme.spacing.padding.sm} ${this.theme.spacing.padding.md};\n      background-color: ${this.theme.colors.card};\n      border: 1px solid ${this.theme.colors.border};\n      border-radius: ${this.theme.spacing.borderRadius.md};\n      font-family: ${this.theme.typography.fontFamily};\n      box-shadow: 0 1px 3px rgba(0, 0, 0, 0.1);\n    `;\n\n    // Create timer display\n    const timerWrapper = document.createElement('div');\n    timerWrapper.style.cssText = `\n      display: flex;\n      align-items: center;\n      gap: ${this.theme.spacing.gap.sm};\n      color: ${this.theme.colors.foreground};\n      font-size: ${this.theme.typography.fontSize.sm};\n      font-weight: ${this.theme.typography.fontWeight.medium};\n    `;\n\n    const clockIcon = document.createElement('span');\n    clockIcon.textContent = '⏱️';\n    clockIcon.style.fontSize = this.theme.typography.fontSize.base;\n\n    this.timeDisplay = document.createElement('span');\n    this.timeDisplay.id = 'gw-session-time';\n    this.timeDisplay.textContent = this.getTimeCallback?.() || '--:--';\n    this.timeDisplay.style.cssText = `\n      font-variant-numeric: tabular-nums;\n      min-width: 50px;\n      text-align: center;\n    `;\n\n    timerWrapper.appendChild(clockIcon);\n    timerWrapper.appendChild(this.timeDisplay);\n    this.container.appendChild(timerWrapper);\n\n    // Create button container\n    const buttonContainer = document.createElement('div');\n    buttonContainer.style.cssText = `\n      display: flex;\n      gap: ${this.theme.spacing.gap.sm};\n    `;\n\n    // Extend button (if callback provided)\n    if (this.onExtendCallback) {\n      const extendBtn = document.createElement('button');\n      extendBtn.textContent = 'Extend';\n      extendBtn.style.cssText = `\n        padding: ${this.theme.spacing.padding.sm};\n        background-color: ${this.theme.colors.success};\n        color: ${this.theme.colors.successForeground};\n        border: none;\n        border-radius: ${this.theme.spacing.borderRadius.sm};\n        font-size: ${this.theme.typography.fontSize.sm};\n        font-weight: ${this.theme.typography.fontWeight.medium};\n        font-family: ${this.theme.typography.fontFamily};\n        cursor: pointer;\n        transition: opacity 0.2s;\n      `;\n      extendBtn.addEventListener('mouseenter', () => {\n        extendBtn.style.opacity = '0.9';\n      });\n      extendBtn.addEventListener('mouseleave', () => {\n        extendBtn.style.opacity = '1';\n      });\n      extendBtn.addEventListener('click', () => {\n        this.onExtendCallback?.();\n      });\n      buttonContainer.appendChild(extendBtn);\n    }\n\n    // End button (if callback provided)\n    if (this.onEndCallback) {\n      const endBtn = document.createElement('button');\n      endBtn.textContent = 'End';\n      endBtn.style.cssText = `\n        padding: ${this.theme.spacing.padding.sm};\n        background-color: ${this.theme.colors.secondary};\n        color: ${this.theme.colors.secondaryForeground};\n        border: 1px solid ${this.theme.colors.border};\n        border-radius: ${this.theme.spacing.borderRadius.sm};\n        font-size: ${this.theme.typography.fontSize.sm};\n        font-weight: ${this.theme.typography.fontWeight.medium};\n        font-family: ${this.theme.typography.fontFamily};\n        cursor: pointer;\n        transition: opacity 0.2s;\n      `;\n      endBtn.addEventListener('mouseenter', () => {\n        endBtn.style.opacity = '0.9';\n      });\n      endBtn.addEventListener('mouseleave', () => {\n        endBtn.style.opacity = '1';\n      });\n      endBtn.addEventListener('click', () => {\n        this.onEndCallback?.();\n      });\n      buttonContainer.appendChild(endBtn);\n    }\n\n    if (buttonContainer.children.length > 0) {\n      this.container.appendChild(buttonContainer);\n    }\n\n    // Mount to target\n    target.appendChild(this.container);\n    this.mounted = true;\n\n    // Start updating time display\n    this.startUpdating();\n  }\n\n  /**\n   * Start updating the time display\n   */\n  private startUpdating(): void {\n    if (this.updateInterval) {\n      clearInterval(this.updateInterval);\n    }\n\n    this.updateInterval = window.setInterval(() => {\n      if (this.timeDisplay && this.getTimeCallback) {\n        const newTime = this.getTimeCallback();\n        this.timeDisplay.textContent = newTime;\n\n        // Change color if warning state (< 5 minutes = MM:SS where MM < 05)\n        const [minutes] = newTime.split(':').map(Number);\n        if (!isNaN(minutes) && minutes < 5) {\n          this.timeDisplay.style.color = this.theme.colors.destructive;\n          this.timeDisplay.style.fontWeight = this.theme.typography.fontWeight.bold;\n        } else {\n          this.timeDisplay.style.color = this.theme.colors.foreground;\n          this.timeDisplay.style.fontWeight = this.theme.typography.fontWeight.medium;\n        }\n      }\n    }, 1000);\n  }\n\n  /**\n   * Unmount and cleanup the session header\n   */\n  unmount(): void {\n    if (this.updateInterval) {\n      clearInterval(this.updateInterval);\n      this.updateInterval = null;\n    }\n\n    if (this.container && this.container.parentNode) {\n      this.container.parentNode.removeChild(this.container);\n    }\n\n    this.container = null;\n    this.timeDisplay = null;\n    this.mounted = false;\n  }\n\n  /**\n   * Check if component is mounted\n   */\n  isMounted(): boolean {\n    return this.mounted;\n  }\n\n  /**\n   * Update the theme\n   */\n  updateTheme(themeMode: ThemeMode): void {\n    const prefersDark = themeMode === 'dark' || (themeMode === 'auto' && this.detectDarkMode());\n    this.theme = getTheme(prefersDark);\n\n    // Re-mount with new theme if currently mounted\n    if (this.mounted && this.container && this.container.parentElement) {\n      const parent = this.container.parentElement;\n      const options = {\n        getTime: this.getTimeCallback!,\n        onExtend: this.onExtendCallback,\n        onEnd: this.onEndCallback,\n      };\n      this.unmount();\n      this.mount(parent, options);\n    }\n  }\n}\n"],"names":["SDKError","Error","constructor","message","code","statusCode","super","this","name","captureStackTrace","JWTParser","decode","token","parts","split","length","payload","decoded","base64UrlDecode","JSON","parse","error","decodeHeader","header","extractClaim","claim","isExpired","exp","Date","now","getTimeRemaining","remaining","Math","floor","max","str","base64","replace","padding","repeat","Buffer","from","toString","atob","encoder","TextEncoder","decoder","TextDecoder","input","Uint8Array","fromBase64","alphabet","encoded","binary","bytes","i","charCodeAt","decodeBase64","TypeError","JOSEError","options","__publicField","JWTClaimValidationFailed","reason","cause","JWTExpired","JOSEAlgNotAllowed","arguments","JOSENotSupported","JWSInvalid","JWTInvalid","JWKSInvalid","JWKSNoMatchingKey","JWKSMultipleMatchingKeys","_b","_a","Symbol","asyncIterator","JWKSTimeout","JWSSignatureVerificationFailed","unusable","prop","isAlgorithm","algorithm","getHashLength","hash","parseInt","slice","checkSigCryptoKey","key","alg","usage","expected","getNamedCurve","namedCurve","usages","includes","checkUsage","msg","actual","types","filter","Boolean","last","pop","join","withAlg","isCryptoKey","toStringTag","isKeyObject","isKeyLike","isObject","value","Object","prototype","call","getPrototypeOf","proto","importJWK$1","async","jwk","keyUsages","kty","priv","d","crv","subtleMapping","keyData","use","crypto","subtle","importKey","ext","key_ops","isJWK","cache","handleJWK","freeze","WeakMap","cached","get","cryptoKey","importJWK","set","normalizeKey","type","export","toCryptoKey","keyObject","isPublic","extractable","asymmetricKeyType","toUpperCase","startsWith","Map","asymmetricKeyDetails","handleKeyObject","err","format","k","tag","jwkMatchesOp","Array","isArray","expectedKeyOp","test","endsWith","checkKeyType","jwk.isJWK","jwk.isSecretJWK","invalidKeyInput","symmetricTypeCheck","jwk.isPrivateJWK","jwk.isPublicJWK","asymmetricTypeCheck","getSignKey","verify","signature","data","getVerifyKey","modulusLength","checkKeyLength","saltLength","subtleAlgorithm","flattenedVerify","jws","protected","parsedProt","protectedHeader","b64u","headers","sources","acc","parameters","keys","size","parameter","has","add","Set","isDisjoint","joseHeader","extensions","Err","recognizedDefault","recognizedOption","crit","some","recognized","entries","validateCrit","b64","algorithms","option","s","validateAlgorithms","resolvedKey","buffers","reduce","buf","buffer","concat","encode","result","unprotectedHeader","day","hour","REGEX","secs","matched","exec","parseFloat","numericDate","toLowerCase","round","minute","normalizeTyp","validateClaimsSet","encodedPayload","typ","requiredClaims","issuer","subject","audience","maxTokenAge","presenceCheck","push","reverse","iss","sub","audPayload","aud","audOption","bind","tolerance","clockTolerance","currentDate","date","getTime","iat","nbf","age","jwtVerify","jwt","verified","compactVerify","isJWKLike","LocalJWKSet","jwks","__privateAdd","_jwks","_cached","every","isJWKSLike","__privateSet","structuredClone","__privateGet","getKey","kid","getKtyFromAlg","candidates","candidate","importWithAlgCache","decodeBase64URL","oth","createLocalJWKSet","localJWKSet","defineProperties","enumerable","configurable","writable","USER_AGENT","navigator","userAgent","customFetch","jwksCache","RemoteJWKSet","url","_url","_timeoutDuration","_cooldownDuration","_cacheMaxAge","_jwksTimestamp","_pendingFetch","_headers","_customFetch","_local","_cache","URL","cacheMaxAge","href","timeoutDuration","cooldownDuration","Headers","append","uat","pendingFetch","coolingDown","fresh","reload","WebSocketPair","EdgeRuntime","signal","fetchImpl","fetch","response","method","redirect","catch","status","json","fetchJwks","AbortSignal","timeout","then","createRemoteJWKSet","remoteJWKSet","reloading","Logger","debug","prefix","log","args","info","warn","JWKSValidator","jwksUri","logger","resolvedUrl","window","location","origin","expectedIssuer","expectedApplicationId","applicationId","claims","sessionId","userId","orgId","startTime","durationMinutes","errorMessage","errorName","updateJwksUri","TimerManager","durationSeconds","warningThresholdSeconds","events","intervalId","warningShown","remainingSeconds","warningThreshold","start","setInterval","onSessionWarning","stop","onSessionEnd","clearInterval","pause","resume","getRemainingSeconds","getFormattedTime","padStart","getFormattedTimeWithHours","hours","minutes","seconds","isRunning","hasWarningBeenShown","updateRemainingTime","HeartbeatManager","apiEndpoint","onSync","onError","heartbeatIntervalSeconds","failureCount","maxFailures","isEnabled","heartbeatInterval","sendHeartbeat","Authorization","body","stringify","timestamp","active","ok","remaining_seconds","sdkError","getFailureCount","updateInterval","wasRunning","TabSyncManager","onMessage","channel","isMaster","handleStorageEvent","event","storageKey","newValue","handleMessage","initialize","BroadcastChannel","onmessage","addEventListener","electMaster","broadcast","postMessage","localStorage","setItem","masterKey","getItem","masterTimestamp","removeItem","isMasterTab","destroy","close","removeEventListener","lightTheme","colors","background","foreground","card","cardForeground","popover","popoverForeground","primary","primaryForeground","secondary","secondaryForeground","muted","mutedForeground","accent","accentForeground","destructive","destructiveForeground","success","successForeground","border","ring","typography","fontFamily","fontSize","xs","sm","base","lg","xl","fontWeight","normal","medium","semibold","bold","lineHeight","tight","relaxed","spacing","borderRadius","md","gap","darkTheme","getTheme","prefersDark","matchMedia","matches","WarningModal","themeMode","customStyles","modal","legacyStyles","timeDisplay","initialSeconds","onEndCallback","detectDarkMode","theme","backgroundColor","textColor","primaryColor","show","hide","document","createElement","id","style","cssText","content","bgColor","onEnd","innerHTML","onExtend","appendChild","extendBtn","getElementById","dismissBtn","endBtn","querySelectorAll","forEach","button","opacity","outline","outlineOffset","elapsed","textContent","parentNode","removeChild","isShown","showEndingMessage","onComplete","durationMs","head","setTimeout","extractTokenFromURL","paramName","targetUrl","urlObj","searchParams","MarketplaceSDK","config","timer","heartbeat","tabSync","sessionData","jwtToken","endReason","jwtParamName","autoStart","marketplaceUrl","enableHeartbeat","enableTabSync","pauseOnHidden","useBackendValidation","hooks","hookTimeoutMs","validator","on","handler","executeHook","hookName","hook","context","isStrict","Promise","_","reject","race","resolve","calculateActualDuration","ceil","JWT_STORAGE_KEY","sessionStorage","verifiedClaims","validateWithBackend","onSessionStart","startContext","email","expiresAt","warningContext","showWarningModal","endSession","handleTabSyncMessage","initializeVisibilityHandling","session_jwt","valid","hidden","pauseTimer","resumeTimer","startTimer","extendSession","additionalMinutes","additional_minutes","new_expires_at","onSessionExtend","extendContext","newExpiresAt","completeSession","actualUsageMinutes","actual_usage_minutes","metadata","endContext","actualDurationMinutes","getSessionData","getRemainingTime","isTimerRunning","container","mounted","mount","targetElement","unmount","target","querySelector","getTimeCallback","onExtendCallback","position","justifyContent","timerWrapper","clockIcon","buttonContainer","children","startUpdating","newTime","map","Number","isNaN","color","isMounted","updateTheme","parentElement","parent","trim"],"mappings":"0uBA6LO,MAAMA,UAAiBC,MAC5B,WAAAC,CACEC,EACOC,EACAC,GAEPC,MAAMH,GAHCI,KAAAH,KAAAA,EACAG,KAAAF,WAAAA,EAGPE,KAAKC,KAAO,WAGRP,MAAMQ,mBACRR,MAAMQ,kBAAkBF,KAAMP,EAElC,ECpMK,MAAMU,EAMX,aAAOC,CAAOC,GACZ,IAAKA,GAA0B,iBAAVA,EACnB,MAAM,IAAIZ,EAAS,2BAA4B,iBAGjD,MAAMa,EAAQD,EAAME,MAAM,KAC1B,GAAqB,IAAjBD,EAAME,OACR,MAAM,IAAIf,EAAS,yCAA0C,mBAG/D,IACE,MAAMgB,EAAUH,EAAM,GAChBI,EAAUV,KAAKW,gBAAgBF,GACrC,OAAOG,KAAKC,MAAMH,EACpB,OAASI,GACP,MAAM,IAAIrB,EACR,iCAAiCqB,aAAiBpB,MAAQoB,EAAMlB,QAAU,kBAC1E,eAEJ,CACF,CAOA,mBAAOmB,CAAaV,GAClB,IAAKA,GAA0B,iBAAVA,EACnB,MAAM,IAAIZ,EAAS,2BAA4B,iBAGjD,MAAMa,EAAQD,EAAME,MAAM,KAC1B,GAAqB,IAAjBD,EAAME,OACR,MAAM,IAAIf,EAAS,yCAA0C,mBAG/D,IACE,MAAMuB,EAASV,EAAM,GACfI,EAAUV,KAAKW,gBAAgBK,GACrC,OAAOJ,KAAKC,MAAMH,EACpB,OAASI,GACP,MAAM,IAAIrB,EACR,gCAAgCqB,aAAiBpB,MAAQoB,EAAMlB,QAAU,kBACzE,eAEJ,CACF,CAQA,mBAAOqB,CAAsBZ,EAAea,GAE1C,OADgBlB,KAAKI,OAAOC,GACJa,EAC1B,CAOA,gBAAOC,CAAUd,GACf,MACMe,EADUpB,KAAKI,OAAOC,GACRe,IAEpB,QAAKA,GAKEC,KAAKC,OAAe,IAANF,CACvB,CAOA,uBAAOG,CAAiBlB,GACtB,MACMe,EADUpB,KAAKI,OAAOC,GACRe,IAEpB,IAAKA,EACH,OAAO,EAGT,MAAMI,EAAYJ,EAAMK,KAAKC,MAAML,KAAKC,MAAQ,KAChD,OAAOG,KAAKE,IAAI,EAAGH,EACrB,CAOA,sBAAeb,CAAgBiB,GAE7B,IAAIC,EAASD,EAAIE,QAAQ,KAAM,KAAKA,QAAQ,KAAM,KAGlD,MAAMC,EAAUF,EAAOrB,OAAS,EAC5BuB,IACFF,GAAU,IAAIG,OAAO,EAAID,IAG3B,IAEE,GAAsB,oBAAXE,OACT,OAAOA,OAAOC,KAAKL,EAAQ,UAAUM,SAAS,SAChD,GAA2B,oBAATC,KAChB,OAAOA,KAAKP,GAEZ,MAAM,IAAInC,MAAM,+BAEpB,OAASoB,GACP,MAAM,IAAIrB,EACR,0BACA,iBAEJ,CACF,ECxIK,MAAM4C,EAAU,IAAIC,YACdC,EAAU,IAAIC,YCCpB,SAASpC,EAAOqC,GACnB,GAAIC,WAAWC,WACX,OAAOD,WAAWC,WAA4B,iBAAVF,EAAqBA,EAAQF,EAAQnC,OAAOqC,GAAQ,CACpFG,SAAU,cAGlB,IAAIC,EAAUJ,EACVI,aAAmBH,aACnBG,EAAUN,EAAQnC,OAAOyC,IAE7BA,EAAUA,EAAQf,QAAQ,KAAM,KAAKA,QAAQ,KAAM,KAAKA,QAAQ,MAAO,IACvE,IACI,OCHD,SAAsBe,GACzB,GAAIH,WAAWC,WACX,OAAOD,WAAWC,WAAWE,GAEjC,MAAMC,EAASV,KAAKS,GACdE,EAAQ,IAAIL,WAAWI,EAAOtC,QACpC,IAAA,IAASwC,EAAI,EAAGA,EAAIF,EAAOtC,OAAQwC,IAC/BD,EAAMC,GAAKF,EAAOG,WAAWD,GAEjC,OAAOD,CACX,CDPeG,CAAaL,EACxB,CAAA,MAEI,MAAM,IAAIM,UAAU,oDACxB,CACJ,CEnBO,MAAMC,UAAkB1D,MAG3B,WAAAC,CAAYC,EAASyD,GACjBtD,MAAMH,EAASyD,GAFnBC,EAAAtD,KAAA,OAAO,oBAGHA,KAAKC,KAAOD,KAAKL,YAAYM,KAC7BP,MAAMQ,oBAAoBF,KAAMA,KAAKL,YACzC,EANA2D,EADSF,EACF,OAAO,oBAQX,MAAMG,UAAiCH,EAM1C,WAAAzD,CAAYC,EAASa,EAASS,EAAQ,cAAesC,EAAS,eAC1DzD,MAAMH,EAAS,CAAE6D,MAAO,CAAEvC,QAAOsC,SAAQ/C,aAL7C6C,EAAAtD,KAAA,OAAO,mCACPsD,EAAAtD,KAAA,SACAsD,EAAAtD,KAAA,UACAsD,EAAAtD,KAAA,WAGIA,KAAKkB,MAAQA,EACblB,KAAKwD,OAASA,EACdxD,KAAKS,QAAUA,CACnB,EAVA6C,EADSC,EACF,OAAO,mCAYX,MAAMG,UAAmBN,EAM5B,WAAAzD,CAAYC,EAASa,EAASS,EAAQ,cAAesC,EAAS,eAC1DzD,MAAMH,EAAS,CAAE6D,MAAO,CAAEvC,QAAOsC,SAAQ/C,aAL7C6C,EAAAtD,KAAA,OAAO,mBACPsD,EAAAtD,KAAA,SACAsD,EAAAtD,KAAA,UACAsD,EAAAtD,KAAA,WAGIA,KAAKkB,MAAQA,EACblB,KAAKwD,OAASA,EACdxD,KAAKS,QAAUA,CACnB,EAVA6C,EADSI,EACF,OAAO,mBAYX,MAAMC,UAA0BP,EAAhC,WAAAzD,GAAAI,SAAA6D,WAEHN,EAAAtD,KAAA,OAAO,2BAAA,EADPsD,EADSK,EACF,OAAO,4BAGX,MAAME,UAAyBT,EAA/B,WAAAzD,GAAAI,SAAA6D,WAEHN,EAAAtD,KAAA,OAAO,yBAAA,EADPsD,EADSO,EACF,OAAO,0BAcX,MAAMC,UAAmBV,EAAzB,WAAAzD,GAAAI,SAAA6D,WAEHN,EAAAtD,KAAA,OAAO,kBAAA,EADPsD,EADSQ,EACF,OAAO,mBAGX,MAAMC,UAAmBX,EAAzB,WAAAzD,GAAAI,SAAA6D,WAEHN,EAAAtD,KAAA,OAAO,kBAAA,EADPsD,EADSS,EACF,OAAO,mBAOX,MAAMC,UAAoBZ,EAA1B,WAAAzD,GAAAI,SAAA6D,WAEHN,EAAAtD,KAAA,OAAO,mBAAA,EADPsD,EADSU,EACF,OAAO,oBAGX,MAAMC,UAA0Bb,EAGnC,WAAAzD,CAAYC,EAAU,kDAAmDyD,GACrEtD,MAAMH,EAASyD,GAFnBC,EAAAtD,KAAA,OAAO,2BAGP,EAJAsD,EADSW,EACF,OAAO,4BAMX,MAAMC,UAAiCC,EAAAf,EACzCgB,EAAAC,OAAOC,cADkCH,GAI1C,WAAAxE,CAAYC,EAAU,uDAAwDyD,GAC1EtD,MAAMH,EAASyD,GAJnBC,EAAAtD,KAACoE,GAEDd,EAAAtD,KAAA,OAAO,kCAGP,EAJAsD,EAFSY,EAEF,OAAO,mCAMX,MAAMK,UAAoBnB,EAG7B,WAAAzD,CAAYC,EAAU,oBAAqByD,GACvCtD,MAAMH,EAASyD,GAFnBC,EAAAtD,KAAA,OAAO,mBAGP,EAJAsD,EADSiB,EACF,OAAO,oBAMX,MAAMC,UAAuCpB,EAGhD,WAAAzD,CAAYC,EAAU,gCAAiCyD,GACnDtD,MAAMH,EAASyD,GAFnBC,EAAAtD,KAAA,OAAO,wCAGP,ECjGJ,SAASyE,EAASxE,EAAMyE,EAAO,kBAC3B,OAAO,IAAIvB,UAAU,kDAAkDuB,aAAgBzE,IAC3F,CACA,SAAS0E,EAAYC,EAAW3E,GAC5B,OAAO2E,EAAU3E,OAASA,CAC9B,CACA,SAAS4E,EAAcC,GACnB,OAAOC,SAASD,EAAK7E,KAAK+E,MAAM,GAAI,GACxC,CAkBO,SAASC,EAAkBC,EAAKC,EAAKC,GACxC,OAAQD,GACJ,IAAK,QACL,IAAK,QACL,IAAK,QAAS,CACV,IAAKR,EAAYO,EAAIN,UAAW,QAC5B,MAAMH,EAAS,QACnB,MAAMY,EAAWN,SAASI,EAAIH,MAAM,GAAI,IAExC,GADeH,EAAcK,EAAIN,UAAUE,QAC5BO,EACX,MAAMZ,EAAS,OAAOY,IAAY,kBACtC,KACJ,CACA,IAAK,QACL,IAAK,QACL,IAAK,QAAS,CACV,IAAKV,EAAYO,EAAIN,UAAW,qBAC5B,MAAMH,EAAS,qBACnB,MAAMY,EAAWN,SAASI,EAAIH,MAAM,GAAI,IAExC,GADeH,EAAcK,EAAIN,UAAUE,QAC5BO,EACX,MAAMZ,EAAS,OAAOY,IAAY,kBACtC,KACJ,CACA,IAAK,QACL,IAAK,QACL,IAAK,QAAS,CACV,IAAKV,EAAYO,EAAIN,UAAW,WAC5B,MAAMH,EAAS,WACnB,MAAMY,EAAWN,SAASI,EAAIH,MAAM,GAAI,IAExC,GADeH,EAAcK,EAAIN,UAAUE,QAC5BO,EACX,MAAMZ,EAAS,OAAOY,IAAY,kBACtC,KACJ,CACA,IAAK,UACL,IAAK,QACD,IAAKV,EAAYO,EAAIN,UAAW,WAC5B,MAAMH,EAAS,WACnB,MAEJ,IAAK,YACL,IAAK,YACL,IAAK,YACD,IAAKE,EAAYO,EAAIN,UAAWO,GAC5B,MAAMV,EAASU,GACnB,MAEJ,IAAK,QACL,IAAK,QACL,IAAK,QAAS,CACV,IAAKR,EAAYO,EAAIN,UAAW,SAC5B,MAAMH,EAAS,SACnB,MAAMY,EAtElB,SAAuBF,GACnB,OAAQA,GACJ,IAAK,QACD,MAAO,QACX,IAAK,QACD,MAAO,QACX,IAAK,QACD,MAAO,QACX,QACI,MAAM,IAAIzF,MAAM,eAE5B,CA2D6B4F,CAAcH,GAE/B,GADeD,EAAIN,UAAUW,aACdF,EACX,MAAMZ,EAASY,EAAU,wBAC7B,KACJ,CACA,QACI,MAAM,IAAIlC,UAAU,8CAjEhC,SAAoB+B,EAAKE,GACrB,IAAcF,EAAIM,OAAOC,SAASL,GAC9B,MAAM,IAAIjC,UAAU,sEAAsEiC,KAElG,CA+DIM,CAAWR,EAAKE,EACpB,CCzFA,SAASxF,EAAQ+F,EAAKC,KAAWC,GAE7B,IADAA,EAAQA,EAAMC,OAAOC,UACXvF,OAAS,EAAG,CAClB,MAAMwF,EAAOH,EAAMI,MACnBN,GAAO,eAAeE,EAAMK,KAAK,aAAaF,IAClD,MAC0B,IAAjBH,EAAMrF,OACXmF,GAAO,eAAeE,EAAM,SAASA,EAAM,MAG3CF,GAAO,WAAWE,EAAM,MAa5B,OAXc,MAAVD,EACAD,GAAO,aAAaC,IAEG,mBAAXA,GAAyBA,EAAO3F,KAC5C0F,GAAO,sBAAsBC,EAAO3F,OAEb,iBAAX2F,GAAiC,MAAVA,GAC/BA,EAAOjG,aAAaM,OACpB0F,GAAO,4BAA4BC,EAAOjG,YAAYM,QAGvD0F,CACX,CFqEIrC,EADSkB,EACF,OAAO,yCEjEX,SAAS2B,EAAQhB,EAAKS,KAAWC,GACpC,OAAOjG,EAAQ,eAAeuF,uBAA0BS,KAAWC,EACvE,CCzBO,SAASO,EAAYlB,GACxB,MAAqC,cAA9BA,IAAMb,OAAOgC,YACxB,CACO,SAASC,EAAYpB,GACxB,MAAqC,cAA9BA,IAAMb,OAAOgC,YACxB,CACA,MAAAE,EAAgBrB,GACLkB,EAAYlB,IAAQoB,EAAYpB,GCT3C,MAAAsB,EAAgB/D,IACZ,GAHwB,iBADNgE,EAIAhE,IAH4B,OAAVgE,GAGkC,oBAA1CC,OAAOC,UAAUxE,SAASyE,KAAKnE,GACvD,OAAO,EALf,IAAsBgE,EAOlB,GAAqC,OAAjCC,OAAOG,eAAepE,GACtB,OAAO,EAEX,IAAIqE,EAAQrE,EACZ,KAAwC,OAAjCiE,OAAOG,eAAeC,IACzBA,EAAQJ,OAAOG,eAAeC,GAElC,OAAOJ,OAAOG,eAAepE,KAAWqE,GCmF5C,MAAAC,EAAeC,MAAOC,IAClB,IAAKA,EAAI9B,IACL,MAAM,IAAIhC,UAAU,4DAExB,MAAMyB,UAAEA,EAAAsC,UAAWA,GApGvB,SAAuBD,GACnB,IAAIrC,EACAsC,EACJ,OAAQD,EAAIE,KACR,IAAK,MACD,OAAQF,EAAI9B,KACR,IAAK,YACL,IAAK,YACL,IAAK,YACDP,EAAY,CAAE3E,KAAMgH,EAAI9B,KACxB+B,EAAYD,EAAIG,KAAO,CAAC,QAAU,CAAC,UACnC,MACJ,QACI,MAAM,IAAIvD,EAAiB,gEAEnC,MAEJ,IAAK,MACD,OAAQoD,EAAI9B,KACR,IAAK,QACL,IAAK,QACL,IAAK,QACDP,EAAY,CAAE3E,KAAM,UAAW6E,KAAM,OAAOmC,EAAI9B,IAAIH,OAAM,MAC1DkC,EAAYD,EAAII,EAAI,CAAC,QAAU,CAAC,UAChC,MACJ,IAAK,QACL,IAAK,QACL,IAAK,QACDzC,EAAY,CAAE3E,KAAM,oBAAqB6E,KAAM,OAAOmC,EAAI9B,IAAIH,OAAM,MACpEkC,EAAYD,EAAII,EAAI,CAAC,QAAU,CAAC,UAChC,MACJ,IAAK,WACL,IAAK,eACL,IAAK,eACL,IAAK,eACDzC,EAAY,CACR3E,KAAM,WACN6E,KAAM,OAAOC,SAASkC,EAAI9B,IAAIH,OAAM,GAAK,KAAO,KAEpDkC,EAAYD,EAAII,EAAI,CAAC,UAAW,aAAe,CAAC,UAAW,WAC3D,MACJ,QACI,MAAM,IAAIxD,EAAiB,gEAEnC,MAEJ,IAAK,KACD,OAAQoD,EAAI9B,KACR,IAAK,QACDP,EAAY,CAAE3E,KAAM,QAASsF,WAAY,SACzC2B,EAAYD,EAAII,EAAI,CAAC,QAAU,CAAC,UAChC,MACJ,IAAK,QACDzC,EAAY,CAAE3E,KAAM,QAASsF,WAAY,SACzC2B,EAAYD,EAAII,EAAI,CAAC,QAAU,CAAC,UAChC,MACJ,IAAK,QACDzC,EAAY,CAAE3E,KAAM,QAASsF,WAAY,SACzC2B,EAAYD,EAAII,EAAI,CAAC,QAAU,CAAC,UAChC,MACJ,IAAK,UACL,IAAK,iBACL,IAAK,iBACL,IAAK,iBACDzC,EAAY,CAAE3E,KAAM,OAAQsF,WAAY0B,EAAIK,KAC5CJ,EAAYD,EAAII,EAAI,CAAC,cAAgB,GACrC,MACJ,QACI,MAAM,IAAIxD,EAAiB,gEAEnC,MAEJ,IAAK,MACD,OAAQoD,EAAI9B,KACR,IAAK,UACL,IAAK,QACDP,EAAY,CAAE3E,KAAM,WACpBiH,EAAYD,EAAII,EAAI,CAAC,QAAU,CAAC,UAChC,MACJ,IAAK,UACL,IAAK,iBACL,IAAK,iBACL,IAAK,iBACDzC,EAAY,CAAE3E,KAAMgH,EAAIK,KACxBJ,EAAYD,EAAII,EAAI,CAAC,cAAgB,GACrC,MACJ,QACI,MAAM,IAAIxD,EAAiB,gEAEnC,MAEJ,QACI,MAAM,IAAIA,EAAiB,+DAEnC,MAAO,CAAEe,YAAWsC,YACxB,CAKqCK,CAAcN,GACzCO,EAAU,IAAKP,GAKrB,MAJoB,QAAhBO,EAAQL,YACDK,EAAQrC,WAEZqC,EAAQC,IACRC,OAAOC,OAAOC,UAAU,MAAOJ,EAAS5C,EAAWqC,EAAIY,OAAQZ,EAAII,IAAKJ,EAAIG,MAAsBH,EAAIa,SAAWZ,IC1GrH,SAASa,EAAM7C,GAClB,OAAOsB,EAAStB,IAA2B,iBAAZA,EAAIiC,GACvC,CCCA,IAAIa,EACJ,MAAMC,EAAYjB,MAAO9B,EAAK+B,EAAK9B,EAAK+C,GAAS,KAC7CF,IAAAA,MAAcG,SACd,IAAIC,EAASJ,EAAMK,IAAInD,GACvB,GAAIkD,IAASjD,GACT,OAAOiD,EAAOjD,GAElB,MAAMmD,QAAkBC,EAAU,IAAKtB,EAAK9B,QAS5C,OARI+C,GACAxB,OAAOwB,OAAOhD,GACbkD,EAIDA,EAAOjD,GAAOmD,EAHdN,EAAMQ,IAAItD,EAAK,CAAEC,CAACA,GAAMmD,IAKrBA,GA4HXG,EAAezB,MAAO9B,EAAKC,KACvB,GAAID,aAAexC,WACf,OAAOwC,EAEX,GAAIkB,EAAYlB,GACZ,OAAOA,EAEX,GAAIoB,EAAYpB,GAAM,CAClB,GAAiB,WAAbA,EAAIwD,KACJ,OAAOxD,EAAIyD,SAEf,GAAI,gBAAiBzD,GAAkC,mBAApBA,EAAI0D,YACnC,IACI,MAvIQ,EAACC,EAAW1D,KAChC6C,IAAAA,MAAcG,SACd,IAAIC,EAASJ,EAAMK,IAAIQ,GACvB,GAAIT,IAASjD,GACT,OAAOiD,EAAOjD,GAElB,MAAM2D,EAA8B,WAAnBD,EAAUH,KACrBK,IAAcD,EACpB,IAAIR,EACJ,GAAoC,WAAhCO,EAAUG,kBAAgC,CAC1C,OAAQ7D,GACJ,IAAK,UACL,IAAK,iBACL,IAAK,iBACL,IAAK,iBACD,MACJ,QACI,MAAM,IAAIhC,UAAU,8DAE5BmF,EAAYO,EAAUD,YAAYC,EAAUG,kBAAmBD,EAAaD,EAAW,GAAK,CAAC,cACjG,CACA,GAAoC,YAAhCD,EAAUG,kBAAiC,CAC3C,GAAY,UAAR7D,GAA2B,YAARA,EACnB,MAAM,IAAIhC,UAAU,8DAExBmF,EAAYO,EAAUD,YAAYC,EAAUG,kBAAmBD,EAAa,CACxED,EAAW,SAAW,QAE9B,CACA,OAAQD,EAAUG,mBACd,IAAK,YACL,IAAK,YACL,IAAK,YACD,GAAI7D,IAAQ0D,EAAUG,kBAAkBC,cACpC,MAAM,IAAI9F,UAAU,8DAExBmF,EAAYO,EAAUD,YAAYC,EAAUG,kBAAmBD,EAAa,CACxED,EAAW,SAAW,SAIlC,GAAoC,QAAhCD,EAAUG,kBAA6B,CACvC,IAAIlE,EACJ,OAAQK,GACJ,IAAK,WACDL,EAAO,QACP,MACJ,IAAK,QACL,IAAK,QACL,IAAK,eACDA,EAAO,UACP,MACJ,IAAK,QACL,IAAK,QACL,IAAK,eACDA,EAAO,UACP,MACJ,IAAK,QACL,IAAK,QACL,IAAK,eACDA,EAAO,UACP,MACJ,QACI,MAAM,IAAI3B,UAAU,8DAE5B,GAAIgC,EAAI+D,WAAW,YACf,OAAOL,EAAUD,YAAY,CACzB3I,KAAM,WACN6E,QACDiE,EAAaD,EAAW,CAAC,WAAa,CAAC,YAE9CR,EAAYO,EAAUD,YAAY,CAC9B3I,KAAMkF,EAAI+D,WAAW,MAAQ,UAAY,oBACzCpE,QACDiE,EAAa,CAACD,EAAW,SAAW,QAC3C,CACA,GAAoC,OAAhCD,EAAUG,kBAA4B,CACtC,MAKMzD,MALW4D,IAAI,CACjB,CAAC,aAAc,SACf,CAAC,YAAa,SACd,CAAC,YAAa,WAEMd,IAAIQ,EAAUO,sBAAsB7D,YAC5D,IAAKA,EACD,MAAM,IAAIpC,UAAU,8DAEZ,UAARgC,GAAkC,UAAfI,IACnB+C,EAAYO,EAAUD,YAAY,CAC9B3I,KAAM,QACNsF,cACDwD,EAAa,CAACD,EAAW,SAAW,UAE/B,UAAR3D,GAAkC,UAAfI,IACnB+C,EAAYO,EAAUD,YAAY,CAC9B3I,KAAM,QACNsF,cACDwD,EAAa,CAACD,EAAW,SAAW,UAE/B,UAAR3D,GAAkC,UAAfI,IACnB+C,EAAYO,EAAUD,YAAY,CAC9B3I,KAAM,QACNsF,cACDwD,EAAa,CAACD,EAAW,SAAW,UAEvC3D,EAAI+D,WAAW,aACfZ,EAAYO,EAAUD,YAAY,CAC9B3I,KAAM,OACNsF,cACDwD,EAAaD,EAAW,GAAK,CAAC,eAEzC,CACA,IAAKR,EACD,MAAM,IAAInF,UAAU,8DAQxB,OANKiF,EAIDA,EAAOjD,GAAOmD,EAHdN,EAAMQ,IAAIK,EAAW,CAAE1D,CAACA,GAAMmD,IAK3BA,GAeYe,CAAgBnE,EAAKC,EAChC,OACOmE,GACH,GAAIA,aAAenG,UACf,MAAMmG,CAEd,CAEJ,IAAIrC,EAAM/B,EAAIyD,OAAO,CAAEY,OAAQ,QAC/B,OAAOtB,EAAU/C,EAAK+B,EAAK9B,EAC/B,CACA,GAAI4C,EAAM7C,GACN,OAAIA,EAAIsE,EACGpJ,EAAO8E,EAAIsE,GAEfvB,EAAU/C,EAAKA,EAAKC,GAAK,GAEpC,MAAM,IAAIzF,MAAM,gBC3Kd+J,GAAOvE,GAAQA,IAAMb,OAAOgC,aAC5BqD,GAAe,CAACvE,EAAKD,EAAKE,KAC5B,QAAgB,IAAZF,EAAIuC,IAAmB,CACvB,IAAIpC,EACJ,OAAQD,GACJ,IAAK,OACL,IAAK,SACDC,EAAW,MACX,MACJ,IAAK,UACL,IAAK,UACDA,EAAW,MAGnB,GAAIH,EAAIuC,MAAQpC,EACZ,MAAM,IAAIlC,UAAU,sDAAsDkC,kBAElF,CACA,QAAgB,IAAZH,EAAIC,KAAqBD,EAAIC,MAAQA,EACrC,MAAM,IAAIhC,UAAU,sDAAsDgC,mBAE9E,GAAIwE,MAAMC,QAAQ1E,EAAI4C,SAAU,CAC5B,IAAI+B,EACJ,QAAQ,GACJ,IAAmC,WAAVzE,EACzB,IAAa,QAARD,EACL,KAAKA,EAAIM,SAAS,UACdoE,EAAgBzE,EAChB,MACJ,KAAKD,EAAI+D,WAAW,SAChBW,EAAgB,aAChB,MACJ,IAAK,0BAA0BC,KAAK3E,GAE5B0E,GADC1E,EAAIM,SAAS,QAAUN,EAAI4E,SAAS,MACa,YAGlC3E,EAEpB,MACJ,IAAe,YAAVA,EACDyE,EAAgB,UAChB,MACJ,IAAe,YAAVzE,EACDyE,EAAgB1E,EAAI+D,WAAW,OAAS,YAAc,aAG9D,GAAIW,IAA4D,IAA3C3E,EAAI4C,SAASrC,WAAWoE,GACzC,MAAM,IAAI1G,UAAU,+DAA+D0G,kBAE3F,CACA,OAAO,GA2DXG,GAAe,CAAC7E,EAAKD,EAAKE,KACJD,EAAI+D,WAAW,OACrB,QAAR/D,GACAA,EAAI+D,WAAW,UACf,oCAAoCY,KAAK3E,IACzC,0CAA0C2E,KAAK3E,GA9D5B,EAACA,EAAKD,EAAKE,KAClC,KAAIF,aAAexC,YAAnB,CAEA,GAAIuH,EAAU/E,GAAM,CAChB,GFjDD,SAAqBA,GACxB,MAAmB,QAAZA,EAAIiC,KAAkC,iBAAVjC,EAAIsE,CAC3C,CE+CYU,CAAgBhF,IAAQwE,GAAavE,EAAKD,EAAKE,GAC/C,OACJ,MAAM,IAAIjC,UAAU,0HACxB,CACA,IAAKoD,EAAUrB,GACX,MAAM,IAAI/B,UAAUgH,EAAgBhF,EAAKD,EAAK,YAAa,YAAa,eAAgB,eAE5F,GAAiB,WAAbA,EAAIwD,KACJ,MAAM,IAAIvF,UAAU,GAAGsG,GAAIvE,iEAV3B,GA8DAkF,CAAmBjF,EAAKD,EAAKE,GAjDT,EAACD,EAAKD,EAAKE,KACnC,GAAI6E,EAAU/E,GACV,OAAQE,GACJ,IAAK,UACL,IAAK,OACD,GFxET,SAAsBF,GACzB,MAAoB,QAAZA,EAAIiC,MACM,QAAZjC,EAAIiC,KAAqC,iBAAbjC,EAAIkC,MAAuC,iBAAVlC,EAAImC,EAC3E,CEqEoBgD,CAAiBnF,IAAQwE,GAAavE,EAAKD,EAAKE,GAChD,OACJ,MAAM,IAAIjC,UAAU,oDACxB,IAAK,UACL,IAAK,SACD,GFzET,SAAqB+B,GACxB,MAAmB,QAAZA,EAAIiC,UAAkC,IAAVjC,EAAImC,QAAyC,IAAbnC,EAAIkC,IAC3E,CEuEoBkD,CAAgBpF,IAAQwE,GAAavE,EAAKD,EAAKE,GAC/C,OACJ,MAAM,IAAIjC,UAAU,mDAGhC,IAAKoD,EAAUrB,GACX,MAAM,IAAI/B,UAAUgH,EAAgBhF,EAAKD,EAAK,YAAa,YAAa,iBAE5E,GAAiB,WAAbA,EAAIwD,KACJ,MAAM,IAAIvF,UAAU,GAAGsG,GAAIvE,uEAE/B,GAAiB,WAAbA,EAAIwD,KACJ,OAAQtD,GACJ,IAAK,OACD,MAAM,IAAIjC,UAAU,GAAGsG,GAAIvE,2EAC/B,IAAK,UACD,MAAM,IAAI/B,UAAU,GAAGsG,GAAIvE,8EAKvC,GAAiB,YAAbA,EAAIwD,KACJ,OAAQtD,GACJ,IAAK,SACD,MAAM,IAAIjC,UAAU,GAAGsG,GAAIvE,4EAC/B,IAAK,UACD,MAAM,IAAI/B,UAAU,GAAGsG,GAAIvE,+EAgBnCqF,CAAoBpF,EAAKD,EAAKE,ICzHtCoF,GAAexD,MAAO7B,EAAKD,EAAKE,KAC5B,GAAIF,aAAexC,WAAY,CAC3B,IAAKyC,EAAI+D,WAAW,MAChB,MAAM,IAAI/F,UPoBP,EAACyC,KAAWC,IAChBjG,EAAQ,eAAgBgG,KAAWC,GOrBdsE,CAAgBjF,EAAK,YAAa,YAAa,iBAEvE,OAAOwC,OAAOC,OAAOC,UAAU,MAAO1C,EAAK,CAAEJ,KAAM,OAAOK,EAAIH,OAAM,KAAO/E,KAAM,SAAU,EAAO,CAACmF,GACvG,CAEA,OADAH,EAAkBC,EAAKC,EAAKC,GACrBF,GCPXuF,GAAezD,MAAO7B,EAAKD,EAAKwF,EAAWC,KACvC,MAAMrC,QAAkBsC,GAAazF,EAAKD,EAAK,UCJpC,EAACC,EAAKD,KACjB,GAAIC,EAAI+D,WAAW,OAAS/D,EAAI+D,WAAW,MAAO,CAC9C,MAAM2B,cAAEA,GAAkB3F,EAAIN,UAC9B,GAA6B,iBAAlBiG,GAA8BA,EAAgB,KACrD,MAAM,IAAI1H,UAAU,GAAGgC,yDAE/B,GDDA2F,CAAe3F,EAAKmD,GACpB,MAAM1D,EELK,EAACO,EAAKP,KACjB,MAAME,EAAO,OAAOK,EAAIH,YACxB,OAAQG,GACJ,IAAK,QACL,IAAK,QACL,IAAK,QACD,MAAO,CAAEL,OAAM7E,KAAM,QACzB,IAAK,QACL,IAAK,QACL,IAAK,QACD,MAAO,CAAE6E,OAAM7E,KAAM,UAAW8K,WAAYhG,SAASI,EAAIH,OAAM,GAAK,KAAO,GAC/E,IAAK,QACL,IAAK,QACL,IAAK,QACD,MAAO,CAAEF,OAAM7E,KAAM,qBACzB,IAAK,QACL,IAAK,QACL,IAAK,QACD,MAAO,CAAE6E,OAAM7E,KAAM,QAASsF,WAAYX,EAAUW,YACxD,IAAK,UACL,IAAK,QACD,MAAO,CAAEtF,KAAM,WACnB,IAAK,YACL,IAAK,YACL,IAAK,YACD,MAAO,CAAEA,KAAMkF,GACnB,QACI,MAAM,IAAItB,EAAiB,OAAOsB,kEFtBxB6F,CAAgB7F,EAAKmD,EAAU1D,WACjD,IACI,aAAa8C,OAAOC,OAAO8C,OAAO7F,EAAW0D,EAAWoC,EAAWC,EACvE,CAAA,MAEI,OAAO,CACX,GGFG3D,eAAeiE,GAAgBC,EAAKhG,EAAK7B,GAC5C,IAAKmD,EAAS0E,GACV,MAAM,IAAIpH,EAAW,mCAEzB,QAAsB,IAAlBoH,EAAIC,gBAA0C,IAAfD,EAAIlK,OACnC,MAAM,IAAI8C,EAAW,yEAEzB,QAAsB,IAAlBoH,EAAIC,WAAoD,iBAAlBD,EAAIC,UAC1C,MAAM,IAAIrH,EAAW,uCAEzB,QAAoB,IAAhBoH,EAAIzK,QACJ,MAAM,IAAIqD,EAAW,uBAEzB,GAA6B,iBAAlBoH,EAAIR,UACX,MAAM,IAAI5G,EAAW,2CAEzB,QAAmB,IAAfoH,EAAIlK,SAAyBwF,EAAS0E,EAAIlK,QAC1C,MAAM,IAAI8C,EAAW,yCAEzB,IAAIsH,EAAa,CAAA,EACjB,GAAIF,EAAIC,UACJ,IACI,MAAME,EAAkBC,EAAKJ,EAAIC,WACjCC,EAAaxK,KAAKC,MAAM0B,EAAQnC,OAAOiL,GAC3C,CAAA,MAEI,MAAM,IAAIvH,EAAW,kCACzB,CAEJ,ICvCW,KAAIyH,KACf,MAAMC,EAAUD,EAAQzF,OAAOC,SAC/B,GAAuB,IAAnByF,EAAQhL,QAAmC,IAAnBgL,EAAQhL,OAChC,OAAO,EAEX,IAAIiL,EACJ,IAAA,MAAWzK,KAAUwK,EAAS,CAC1B,MAAME,EAAahF,OAAOiF,KAAK3K,GAC/B,GAAKyK,GAAoB,IAAbA,EAAIG,KAIhB,IAAA,MAAWC,KAAaH,EAAY,CAChC,GAAID,EAAIK,IAAID,GACR,OAAO,EAEXJ,EAAIM,IAAIF,EACZ,MARIJ,EAAM,IAAIO,IAAIN,EAStB,CACA,OAAO,GDoBFO,CAAWb,EAAYF,EAAIlK,QAC5B,MAAM,IAAI8C,EAAW,6EAEzB,MAAMoI,EAAa,IACZd,KACAF,EAAIlK,QAELmL,EE7CK,EAACC,EAAKC,EAAmBC,EAAkBjB,EAAiBa,KACvE,QAAwB,IAApBA,EAAWK,WAAgD,IAA1BlB,GAAiBkB,KAClD,MAAM,IAAIH,EAAI,kEAElB,IAAKf,QAA4C,IAAzBA,EAAgBkB,KACpC,WAAWP,IAEf,IAAKrC,MAAMC,QAAQyB,EAAgBkB,OACC,IAAhClB,EAAgBkB,KAAK/L,QACrB6K,EAAgBkB,KAAKC,KAAM/J,GAA2B,iBAAVA,GAAuC,IAAjBA,EAAMjC,QACxE,MAAM,IAAI4L,EAAI,yFAElB,IAAIK,EAEAA,OADqB,IAArBH,EACa,IAAInD,IAAI,IAAIzC,OAAOgG,QAAQJ,MAAsBD,EAAkBK,YAGnEL,EAEjB,IAAA,MAAWR,KAAaR,EAAgBkB,KAAM,CAC1C,IAAKE,EAAWX,IAAID,GAChB,MAAM,IAAIhI,EAAiB,+BAA+BgI,wBAE9D,QAA8B,IAA1BK,EAAWL,GACX,MAAM,IAAIO,EAAI,+BAA+BP,iBAEjD,GAAIY,EAAWpE,IAAIwD,SAA6C,IAA/BR,EAAgBQ,GAC7C,MAAM,IAAIO,EAAI,+BAA+BP,iCAErD,CACA,OAAO,IAAIG,IAAIX,EAAgBkB,OFeZI,CAAa7I,EAAY,IAAIqF,IAAI,CAAC,CAAC,OAAO,KAAS9F,GAASkJ,KAAMnB,EAAYc,GACjG,IAAIU,GAAM,EACV,GAAIT,EAAWL,IAAI,SACfc,EAAMxB,EAAWwB,IACE,kBAARA,GACP,MAAM,IAAI9I,EAAW,2EAG7B,MAAMqB,IAAEA,GAAQ+G,EAChB,GAAmB,iBAAR/G,IAAqBA,EAC5B,MAAM,IAAIrB,EAAW,6DAEzB,MAAM+I,EAAaxJ,GG1DR,EAACyJ,EAAQD,KACpB,QAAmB,IAAfA,KACElD,MAAMC,QAAQiD,IAAeA,EAAWL,KAAMO,GAAmB,iBAANA,IAC7D,MAAM,IAAI5J,UAAU,IAAI2J,yCAE5B,GAAKD,EAGL,OAAO,IAAIb,IAAIa,IHkDeG,CAAmB,aAAc3J,EAAQwJ,YACvE,GAAIA,IAAeA,EAAWf,IAAI3G,GAC9B,MAAM,IAAIxB,EAAkB,wDAEhC,GAAIiJ,GACA,GAA2B,iBAAhB1B,EAAIzK,QACX,MAAM,IAAIqD,EAAW,qCAE7B,GACgC,iBAAhBoH,EAAIzK,WAA0ByK,EAAIzK,mBAAmBiC,YACjE,MAAM,IAAIoB,EAAW,0DAEzB,IAAImJ,GAAc,EACC,mBAAR/H,IACPA,QAAYA,EAAIkG,EAAYF,GAC5B+B,GAAc,GAElBjD,GAAa7E,EAAKD,EAAK,UACvB,MAAMyF,EhBzEH,YAAmBuC,GACtB,MAAMtB,EAAOsB,EAAQC,OAAO,CAAC1B,GAAOjL,YAAaiL,EAAMjL,EAAQ,GACzD4M,EAAM,IAAI1K,WAAWkJ,GAC3B,IAAI5I,EAAI,EACR,IAAA,MAAWqK,KAAUH,EACjBE,EAAI5E,IAAI6E,EAAQrK,GAChBA,GAAKqK,EAAO7M,OAEhB,OAAO4M,CACX,CgBgEiBE,CAAOjL,EAAQkL,OAAOrC,EAAIC,WAAa,IAAK9I,EAAQkL,OAAO,KAA6B,iBAAhBrC,EAAIzK,QAAuB4B,EAAQkL,OAAOrC,EAAIzK,SAAWyK,EAAIzK,SAClJ,IAAIiK,EACJ,IACIA,EAAYY,EAAKJ,EAAIR,UACzB,CAAA,MAEI,MAAM,IAAI5G,EAAW,2CACzB,CACA,MAAM0F,QAAUf,EAAavD,EAAKC,GAElC,WADuBsF,GAAOtF,EAAKqE,EAAGkB,EAAWC,IAE7C,MAAM,IAAInG,EAEd,IAAI/D,EACJ,GAAImM,EACA,IACInM,EAAU6K,EAAKJ,EAAIzK,QACvB,CAAA,MAEI,MAAM,IAAIqD,EAAW,yCACzB,MAGArD,EAD4B,iBAAhByK,EAAIzK,QACN4B,EAAQkL,OAAOrC,EAAIzK,SAGnByK,EAAIzK,QAElB,MAAM+M,EAAS,CAAE/M,WAOjB,YANsB,IAAlByK,EAAIC,YACJqC,EAAOnC,gBAAkBD,QAEV,IAAfF,EAAIlK,SACJwM,EAAOC,kBAAoBvC,EAAIlK,QAE/BiM,EACO,IAAKO,EAAQtI,IAAKsE,GAEtBgE,CACX,CInHA,MCEME,GAAMC,MAGNC,GAAQ,oIACdC,GAAgBjM,IACZ,MAAMkM,EAAUF,GAAMG,KAAKnM,GAC3B,IAAKkM,GAAYA,EAAQ,IAAMA,EAAQ,GACnC,MAAM,IAAI3K,UAAU,8BAExB,MAAMsD,EAAQuH,WAAWF,EAAQ,IAEjC,IAAIG,EACJ,OAFaH,EAAQ,GAAGI,eAGpB,IAAK,MACL,IAAK,OACL,IAAK,SACL,IAAK,UACL,IAAK,IACDD,EAAcxM,KAAK0M,MAAM1H,GACzB,MACJ,IAAK,SACL,IAAK,UACL,IAAK,MACL,IAAK,OACL,IAAK,IACDwH,EAAcxM,KAAK0M,MA3BhB,GA2BsB1H,GACzB,MACJ,IAAK,OACL,IAAK,QACL,IAAK,KACL,IAAK,MACL,IAAK,IACDwH,EAAcxM,KAAK0M,MAjClBC,KAiCwB3H,GACzB,MACJ,IAAK,MACL,IAAK,OACL,IAAK,IACDwH,EAAcxM,KAAK0M,MAAM1H,EAAQiH,IACjC,MACJ,IAAK,OACL,IAAK,QACL,IAAK,IACDO,EAAcxM,KAAK0M,MAzClBT,OAyCwBjH,GACzB,MACJ,QACIwH,EAAcxM,KAAK0M,MA3ClBT,SA2CwBjH,GAGjC,MAAmB,MAAfqH,EAAQ,IAA6B,QAAfA,EAAQ,IACtBG,EAELA,GCzCLI,GAAgB5H,GACdA,EAAMhB,SAAS,KACRgB,EAAMyH,cAEV,eAAezH,EAAMyH,gBAWzB,SAASI,GAAkBjD,EAAiBkD,EAAgBlL,EAAU,CAAA,GACzE,IAAI5C,EACJ,IACIA,EAAUG,KAAKC,MAAM0B,EAAQnC,OAAOmO,GACxC,CAAA,MAEA,CACA,IAAK/H,EAAS/F,GACV,MAAM,IAAIsD,EAAW,kDAEzB,MAAMyK,IAAEA,GAAQnL,EAChB,GAAImL,IACgC,iBAAxBnD,EAAgBmD,KACpBH,GAAahD,EAAgBmD,OAASH,GAAaG,IACvD,MAAM,IAAIjL,EAAyB,oCAAqC9C,EAAS,MAAO,gBAE5F,MAAMgO,eAAEA,EAAiB,UAAIC,UAAQC,EAAAC,SAASA,EAAAC,YAAUA,GAAgBxL,EAClEyL,EAAgB,IAAIL,QACN,IAAhBI,GACAC,EAAcC,KAAK,YACN,IAAbH,GACAE,EAAcC,KAAK,YACP,IAAZJ,GACAG,EAAcC,KAAK,YACR,IAAXL,GACAI,EAAcC,KAAK,OACvB,IAAA,MAAW7N,KAAS,IAAI8K,IAAI8C,EAAcE,WACtC,KAAM9N,KAAST,GACX,MAAM,IAAI8C,EAAyB,qBAAqBrC,WAAgBT,EAASS,EAAO,WAGhG,GAAIwN,KACE/E,MAAMC,QAAQ8E,GAAUA,EAAS,CAACA,IAASjJ,SAAShF,EAAQwO,KAC9D,MAAM,IAAI1L,EAAyB,+BAAgC9C,EAAS,MAAO,gBAEvF,GAAIkO,GAAWlO,EAAQyO,MAAQP,EAC3B,MAAM,IAAIpL,EAAyB,+BAAgC9C,EAAS,MAAO,gBAEvF,GAAImO,IA/CuBO,EAgDA1O,EAAQ2O,IAhDIC,EAgDqB,iBAAbT,EAAwB,CAACA,GAAYA,IA/C1D,iBAAfO,EACAE,EAAU5J,SAAS0J,GAE1BxF,MAAMC,QAAQuF,IACPE,EAAU7C,KAAKR,IAAIrF,UAAUmF,IAAIwD,KAAK,IAAItD,IAAImD,OA4CrD,MAAM,IAAI5L,EAAyB,+BAAgC9C,EAAS,MAAO,gBAjD7D,IAAC0O,EAAYE,EAmDvC,IAAIE,EACJ,cAAelM,EAAQmM,gBACnB,IAAK,SACDD,EAAY1B,GAAKxK,EAAQmM,gBACzB,MACJ,IAAK,SACDD,EAAYlM,EAAQmM,eACpB,MACJ,IAAK,YACDD,EAAY,EACZ,MACJ,QACI,MAAM,IAAIpM,UAAU,sCAE5B,MAAMsM,YAAEA,GAAgBpM,EAClB/B,GFpFMoO,EEoFMD,GAAe,IAAIpO,KFpFhBI,KAAKC,MAAMgO,EAAKC,UAAY,MAAtC,IAACD,EEqFZ,SAAqB,IAAhBjP,EAAQmP,KAAqBf,IAAuC,iBAAhBpO,EAAQmP,IAC7D,MAAM,IAAIrM,EAAyB,+BAAgC9C,EAAS,MAAO,WAEvF,QAAoB,IAAhBA,EAAQoP,IAAmB,CAC3B,GAA2B,iBAAhBpP,EAAQoP,IACf,MAAM,IAAItM,EAAyB,+BAAgC9C,EAAS,MAAO,WAEvF,GAAIA,EAAQoP,IAAMvO,EAAMiO,EACpB,MAAM,IAAIhM,EAAyB,qCAAsC9C,EAAS,MAAO,eAEjG,CACA,QAAoB,IAAhBA,EAAQW,IAAmB,CAC3B,GAA2B,iBAAhBX,EAAQW,IACf,MAAM,IAAImC,EAAyB,+BAAgC9C,EAAS,MAAO,WAEvF,GAAIA,EAAQW,KAAOE,EAAMiO,EACrB,MAAM,IAAI7L,EAAW,qCAAsCjD,EAAS,MAAO,eAEnF,CACA,GAAIoO,EAAa,CACb,MAAMiB,EAAMxO,EAAMb,EAAQmP,IAE1B,GAAIE,EAAMP,GADyB,iBAAhBV,EAA2BA,EAAchB,GAAKgB,IAE7D,MAAM,IAAInL,EAAW,2DAA4DjD,EAAS,MAAO,gBAErG,GAAIqP,EAAM,EAAIP,EACV,MAAM,IAAIhM,EAAyB,gEAAiE9C,EAAS,MAAO,eAE5H,CACA,OAAOA,CACX,CChHOuG,eAAe+I,GAAUC,EAAK9K,EAAK7B,GACtC,MAAM4M,QCDHjJ,eAA6BkE,EAAKhG,EAAK7B,GAI1C,GAHI6H,aAAexI,aACfwI,EAAM3I,EAAQnC,OAAO8K,IAEN,iBAARA,EACP,MAAM,IAAIpH,EAAW,8CAEzB,MAAQ,EAAGuH,EAAiB,EAAG5K,EAAS,EAAGiK,EAAAlK,OAAWA,GAAW0K,EAAI3K,MAAM,KAC3E,GAAe,IAAXC,EACA,MAAM,IAAIsD,EAAW,uBAEzB,MAAMmM,QAAiBhF,GAAgB,CAAExK,UAAS0K,UAAWE,EAAiBX,aAAaxF,EAAK7B,GAC1FmK,EAAS,CAAE/M,QAASwP,EAASxP,QAAS4K,gBAAiB4E,EAAS5E,iBACtE,MAAmB,mBAARnG,EACA,IAAKsI,EAAQtI,IAAK+K,EAAS/K,KAE/BsI,CACX,CDhB2B0C,CAAcF,EAAK9K,EAAK7B,GAC/C,GAAI4M,EAAS5E,gBAAgBkB,MAAM9G,SAAS,SAA2C,IAAjCwK,EAAS5E,gBAAgBuB,IAC3E,MAAM,IAAI7I,EAAW,uCAEzB,MACMyJ,EAAS,CAAE/M,QADD6N,GAAkB2B,EAAS5E,gBAAiB4E,EAASxP,QAAS4C,GACpDgI,gBAAiB4E,EAAS5E,iBACpD,MAAmB,mBAARnG,EACA,IAAKsI,EAAQtI,IAAK+K,EAAS/K,KAE/BsI,CACX,CEUA,SAAS2C,GAAUjL,GACf,OAAOsB,EAAStB,EACpB,CACA,MAAMkL,GAGF,WAAAzQ,CAAY0Q,GACR,GAHJC,EAAAtQ,KAAAuQ,GACAD,EAAAtQ,KAAAwQ,MAAcrI,UAXlB,SAAoBkI,GAChB,OAAQA,GACY,iBAATA,GACP1G,MAAMC,QAAQyG,EAAK1E,OACnB0E,EAAK1E,KAAK8E,MAAMN,GACxB,CAQaO,CAAWL,GACZ,MAAM,IAAIrM,EAAY,8BAE1B2M,EAAA3Q,KAAKuQ,EAAQK,gBAAgBP,GACjC,CACA,IAAAA,GACI,OAAOQ,EAAA7Q,KAAKuQ,EAChB,CACA,YAAMO,CAAOzF,EAAiBhL,GAC1B,MAAM8E,IAAEA,MAAK4L,GAAQ,IAAK1F,KAAoBhL,GAAOW,QAC/CmG,EAtCd,SAAuBhC,GACnB,OAAuB,iBAARA,GAAoBA,EAAIH,MAAM,EAAG,IAC5C,IAAK,KACL,IAAK,KACD,MAAO,MACX,IAAK,KACD,MAAO,KACX,IAAK,KACD,MAAO,MACX,IAAK,KACD,MAAO,MACX,QACI,MAAM,IAAInB,EAAiB,kDAEvC,CAwBoBmN,CAAc7L,GACpB8L,EAAaJ,EAAA7Q,KAAKuQ,GAAM5E,KAAK7F,OAAQmB,IACvC,IAAIiK,EAAY/J,IAAQF,EAAIE,IAa5B,GAZI+J,GAA4B,iBAARH,IACpBG,EAAYH,IAAQ9J,EAAI8J,MAExBG,GAAiC,iBAAZjK,EAAI9B,KAA4B,QAARgC,IAC7C+J,EAAY/L,IAAQ8B,EAAI9B,KAExB+L,GAAgC,iBAAZjK,EAAIQ,MACxByJ,EAAwB,QAAZjK,EAAIQ,KAEhByJ,GAAavH,MAAMC,QAAQ3C,EAAIa,WAC/BoJ,EAAYjK,EAAIa,QAAQrC,SAAS,WAEjCyL,EACA,OAAQ/L,GACJ,IAAK,QACD+L,EAAwB,UAAZjK,EAAIK,IAChB,MACJ,IAAK,QACD4J,EAAwB,UAAZjK,EAAIK,IAChB,MACJ,IAAK,QACD4J,EAAwB,UAAZjK,EAAIK,IAChB,MACJ,IAAK,UACL,IAAK,QACD4J,EAAwB,YAAZjK,EAAIK,IAI5B,OAAO4J,KAEH,EAAGjK,EAAAzG,OAAKA,GAAWyQ,EAC3B,GAAe,IAAXzQ,EACA,MAAM,IAAIyD,EAEd,GAAe,IAAXzD,EAAc,CACd,MAAMM,EAAQ,IAAIoD,EACZsM,EAAUK,EAAA7Q,KAAKwQ,GASrB,MARA1P,EAAMuD,OAAOC,eAAiB0C,kBAC1B,IAAA,MAAWC,KAAOgK,EACd,gBACgBE,GAAmBX,EAASvJ,EAAK9B,EACjD,CAAA,MACQ,CAEhB,EACMrE,CACV,CACA,OAAOqQ,GAAmBN,EAAA7Q,KAAKwQ,GAASvJ,EAAK9B,EACjD,EAEJ6B,eAAemK,GAAmBnJ,EAAOf,EAAK9B,GAC1C,MAAMiD,EAASJ,EAAMK,IAAIpB,IAAQe,EAAMQ,IAAIvB,EAAK,CAAA,GAAIoB,IAAIpB,GACxD,QAAoB,IAAhBmB,EAAOjD,GAAoB,CAC3B,MAAMD,QC3EP8B,eAAyBC,EAAK9B,GACjC,IAAKqB,EAASS,GACV,MAAM,IAAI9D,UAAU,yBAExB,IAAI0E,EAGJ,OAFA1C,IAAAA,EAAQ8B,EAAI9B,KACZ0C,IAAAA,EAAgCZ,EAAIY,KAC5BZ,EAAIE,KACR,IAAK,MACD,GAAqB,iBAAVF,EAAIuC,IAAmBvC,EAAIuC,EAClC,MAAM,IAAIrG,UAAU,2CAExB,OAAOiO,EAAgBnK,EAAIuC,GAC/B,IAAK,MACD,GAAI,QAASvC,QAAmB,IAAZA,EAAIoK,IACpB,MAAM,IAAIxN,EAAiB,sEAE/B,OAAO+E,EAAY,IAAK3B,EAAK9B,MAAK0C,QACtC,IAAK,MACD,GAAuB,iBAAZZ,EAAI9B,MAAqB8B,EAAI9B,IACpC,MAAM,IAAIhC,UAAU,6CAExB,QAAY,IAARgC,GAAqBA,IAAQ8B,EAAI9B,IACjC,MAAM,IAAIhC,UAAU,yCAExB,OAAOyF,EAAY,IAAK3B,EAAKY,QAEjC,IAAK,KACL,IAAK,MACD,OAAOe,EAAY,IAAK3B,EAAK9B,MAAK0C,QACtC,QACI,MAAM,IAAIhE,EAAiB,gDAEvC,CD0C0B0E,CAAU,IAAKtB,EAAKY,KAAK,GAAQ1C,GACnD,GAAID,aAAexC,YAA2B,WAAbwC,EAAIwD,KACjC,MAAM,IAAI1E,EAAY,gDAE1BoE,EAAOjD,GAAOD,CAClB,CACA,OAAOkD,EAAOjD,EAClB,CACO,SAASmM,GAAkBjB,GAC9B,MAAM7H,EAAM,IAAI4H,GAAYC,GACtBkB,EAAcvK,MAAOqE,EAAiBhL,IAAUmI,EAAIsI,OAAOzF,EAAiBhL,GASlF,OARAqG,OAAO8K,iBAAiBD,EAAa,CACjClB,KAAM,CACF5J,MAAO,IAAMmK,gBAAgBpI,EAAI6H,QACjCoB,YAAY,EACZC,cAAc,EACdC,UAAU,KAGXJ,CACX,CE9GA,IAAIK,GACJ,GFmBIrB,EAAA,IAAApI,QACAqI,EAAA,IAAArI,QEpBqB,oBAAd0J,YAA8BA,UAAUC,WAAW5I,aAAa,gBAAiB,CAGxF0I,GAAa,GAFA,UACG,UAEpB,CACO,MAAMG,GAAc1N,SAuBpB,MAAM2N,GAAY3N,SAgBzB,MAAM4N,GAWF,WAAAtS,CAAYuS,EAAK7O,GACb,GAXJiN,EAAAtQ,KAAAmS,GACA7B,EAAAtQ,KAAAoS,GACA9B,EAAAtQ,KAAAqS,GACA/B,EAAAtQ,KAAAsS,GACAhC,EAAAtQ,KAAAuS,GACAjC,EAAAtQ,KAAAwS,GACAlC,EAAAtQ,KAAAyS,GACAnC,EAAAtQ,KAAA0S,GACApC,EAAAtQ,KAAA2S,GACArC,EAAAtQ,KAAA4S,KAEUV,aAAeW,KACjB,MAAM,IAAI1P,UAAU,kCA5BhC,IAA0BV,EAAOqQ,EA8BzBnC,EAAA3Q,KAAKmS,EAAO,IAAIU,IAAIX,EAAIa,OACxBpC,EAAA3Q,KAAKoS,EACmC,iBAA7B/O,GAAS2P,gBAA+B3P,GAAS2P,gBAAkB,KAC9ErC,EAAA3Q,KAAKqS,EACoC,iBAA9BhP,GAAS4P,iBAAgC5P,GAAS4P,iBAAmB,KAChFtC,EAAA3Q,KAAKsS,EAA+C,iBAAzBjP,GAASyP,YAA2BzP,GAASyP,YAAc,KACtFnC,EAAA3Q,KAAKyS,EAAW,IAAIS,QAAQ7P,GAASkI,UACjCqG,KAAef,EAAA7Q,KAAKyS,GAAS3G,IAAI,eACjC+E,EAAA7Q,KAAKyS,GAASjK,IAAI,aAAcoJ,IAE/Bf,EAAA7Q,KAAKyS,GAAS3G,IAAI,YACnB+E,EAAA7Q,KAAKyS,GAASjK,IAAI,SAAU,oBAC5BqI,EAAA7Q,KAAKyS,GAASU,OAAO,SAAU,6BAEnCxC,EAAA3Q,KAAK0S,EAAerP,IAAU0O,UACD,IAAzB1O,IAAU2O,MACVrB,EAAA3Q,KAAK4S,EAASvP,IAAU2O,KA9CVvP,EA+COY,IAAU2O,IA/CVc,EA+CsBjC,EAAA7Q,KAAKsS,GA9CnC,iBAAV7P,GAAgC,OAAVA,GAG3B,QAASA,GAA+B,iBAAdA,EAAM2Q,OAAoB/R,KAAKC,MAAQmB,EAAM2Q,KAAON,IAG9E,SAAUrQ,GACX+D,EAAS/D,EAAM4N,OACf1G,MAAMC,QAAQnH,EAAM4N,KAAK1E,OACzBhC,MAAMhD,UAAU8J,MAAM7J,KAAKnE,EAAM4N,KAAK1E,KAAMnF,KAsCrCmK,EAAA3Q,KAAKuS,EAAiB1B,OAAK+B,GAAOQ,KAClCzC,EAAA3Q,KAAK2S,EAASrB,GAAkBT,EAAA7Q,KAAK4S,GAAOvC,QAGxD,CACA,YAAAgD,GACI,QAASxC,EAAA7Q,KAAKwS,EAClB,CACA,WAAAc,GACI,MAAsC,iBAAxBzC,EAAA7Q,KAAKuS,IACblR,KAAKC,MAAQuP,EAAA7Q,KAAKuS,GAAiB1B,EAAA7Q,KAAKqS,EAElD,CACA,KAAAkB,GACI,MAAsC,iBAAxB1C,EAAA7Q,KAAKuS,IACblR,KAAKC,MAAQuP,EAAA7Q,KAAKuS,GAAiB1B,EAAA7Q,KAAKsS,EAElD,CACA,IAAAjC,GACI,OAAOQ,EAAA7Q,KAAK2S,IAAQtC,MACxB,CACA,YAAMS,CAAOzF,EAAiBhL,GACrBwQ,EAAA7Q,KAAK2S,IAAW3S,KAAKuT,eAChBvT,KAAKwT,SAEf,IACI,aAAa3C,EAAA7Q,KAAK2S,GAAL/L,KAAA5G,KAAYqL,EAAiBhL,EAC9C,OACOiJ,GACH,GAAIA,aAAerF,IACY,IAAvBjE,KAAKsT,cAEL,aADMtT,KAAKwT,SACJ3C,EAAA7Q,KAAK2S,GAAL/L,KAAA5G,KAAYqL,EAAiBhL,GAG5C,MAAMiJ,CACV,CACJ,CACA,YAAMkK,GACE3C,EAAA7Q,KAAKwS,KAzHoB,oBAAlBiB,eACW,oBAAd5B,WAAqD,uBAAxBA,UAAUC,WACvB,oBAAhB4B,aAA+C,WAAhBA,cAwHnC/C,EAAA3Q,KAAKwS,OAAgB,GAEzB3B,EAAA7Q,KAAKwS,IAAL7B,EAAA3Q,KAAKwS,EAjHbxL,eAAyBkL,EAAK3G,EAASoI,EAAQC,EAAYC,OACvD,MAAMC,QAAiBF,EAAU1B,EAAK,CAClC6B,OAAQ,MACRJ,SACAK,SAAU,SACVzI,YACD0I,MAAO3K,IACN,GAAiB,iBAAbA,EAAIrJ,KACJ,MAAM,IAAIsE,EAEd,MAAM+E,IAEV,GAAwB,MAApBwK,EAASI,OACT,MAAM,IAAI9Q,EAAU,2DAExB,IACI,aAAa0Q,EAASK,MAC1B,CAAA,MAEI,MAAM,IAAI/Q,EAAU,6DACxB,CACJ,CA4F+BgR,CAAUvD,EAAA7Q,KAAKmS,GAAKY,KAAMlC,EAAA7Q,KAAKyS,GAAU4B,YAAYC,QAAQzD,EAAA7Q,KAAKoS,IAAmBvB,EAAA7Q,KAAK0S,IAC5G6B,KAAMJ,IACPxD,EAAA3Q,KAAK2S,EAASrB,GAAkB6C,IAC5BtD,OAAK+B,KACL/B,EAAA7Q,KAAK4S,GAAOQ,IAAM/R,KAAKC,MACvBuP,EAAA7Q,KAAK4S,GAAOvC,KAAO8D,GAEvBxD,EAAA3Q,KAAKuS,EAAiBlR,KAAKC,OAC3BqP,EAAA3Q,KAAKwS,OAAgB,KAEpByB,MAAO3K,IAER,MADAqH,EAAA3Q,KAAKwS,OAAgB,GACflJ,WAEJuH,EAAA7Q,KAAKwS,EACf,EAEG,SAASgC,GAAmBtC,EAAK7O,GACpC,MAAMmF,EAAM,IAAIyJ,GAAaC,EAAK7O,GAC5BoR,EAAezN,MAAOqE,EAAiBhL,IAAUmI,EAAIsI,OAAOzF,EAAiBhL,GA8BnF,OA7BAqG,OAAO8K,iBAAiBiD,EAAc,CAClCnB,YAAa,CACTjL,IAAK,IAAMG,EAAI8K,cACf7B,YAAY,EACZC,cAAc,GAElB6B,MAAO,CACHlL,IAAK,IAAMG,EAAI+K,QACf9B,YAAY,EACZC,cAAc,GAElB8B,OAAQ,CACJ/M,MAAO,IAAM+B,EAAIgL,SACjB/B,YAAY,EACZC,cAAc,EACdC,UAAU,GAEd+C,UAAW,CACPrM,IAAK,IAAMG,EAAI6K,eACf5B,YAAY,EACZC,cAAc,GAElBrB,KAAM,CACF5J,MAAO,IAAM+B,EAAI6H,OACjBoB,YAAY,EACZC,cAAc,EACdC,UAAU,KAGX8C,CACX,CA5HItC,EAAA,IAAAhK,QACAiK,EAAA,IAAAjK,QACAkK,EAAA,IAAAlK,QACAmK,EAAA,IAAAnK,QACAoK,EAAA,IAAApK,QACAqK,EAAA,IAAArK,QACAsK,EAAA,IAAAtK,QACAuK,EAAA,IAAAvK,QACAwK,EAAA,IAAAxK,QACAyK,EAAA,IAAAzK,QC5DG,MAAMwM,GAIX,WAAAhV,CAAYiV,GAAiB,EAAOC,EAAiB,oBACnD7U,KAAK4U,MAAQA,EACb5U,KAAK6U,OAASA,CAChB,CAKA,GAAAC,IAAOC,GACD/U,KAAK4U,KAGX,CAKA,IAAAI,IAAQD,GACF/U,KAAK4U,KAGX,CAKA,IAAAK,IAAQF,GAER,CAKA,KAAAjU,IAASiU,GAET,EClCK,MAAMG,GAKX,WAAAvV,CAAYwV,EAAiBP,GAAiB,GAC5C5U,KAAKmV,QAAUA,EACfnV,KAAKoV,OAAS,IAAIT,GAAOC,EAAO,mBAIhC,MAAMS,EAAcrV,KAAKmV,QAAQjM,WAAW,QACxC,IAAI2J,IAAI7S,KAAKmV,SACb,IAAItC,IAAI7S,KAAKmV,QAA2B,oBAAXG,OAAyBA,OAAOC,SAASC,YAAS,GACnFxV,KAAKqQ,KAAOmE,GAAmBa,GAE/BrV,KAAKoV,OAAOJ,KAAK,6BAA8BhV,KAAKmV,QACtD,CASA,YAAM1K,CACJpK,EACAoV,EAAyB,oBACzBC,GAEA1V,KAAKoV,OAAON,IAAI,8BAEhB,IAEE,MAKMrU,SALgCsP,GAAU1P,EAAOL,KAAKqQ,KAAM,CAChE3B,OAAQ+G,EACR5I,WAAY,CAAC,YAGQpM,QAGjBgO,EAAsC,CAC1C,YACA,SACA,QACA,gBACA,MACA,OAGF,IAAA,MAAWvN,KAASuN,EAClB,KAAMvN,KAAST,GACb,MAAM,IAAIhB,EACR,2BAA2ByB,IAC3B,iBAMN,GAAIwU,GAAyBjV,EAAQkV,gBAAkBD,EAIrD,MAHA1V,KAAKoV,OAAOtU,MACV,qCAAqC4U,UAA8BjV,EAAQkV,iBAEvE,IAAIlW,EACR,uCACA,wBAIJ,MAAMmW,EAAoB,CACxBC,UAAWpV,EAAQoV,UACnBF,cAAelV,EAAQkV,cACvBG,OAAQrV,EAAQqV,OAChBC,MAAOtV,EAAQsV,MACfC,UAAWvV,EAAQuV,UACnBC,gBAAiBxV,EAAQwV,gBACzBrG,IAAKnP,EAAQmP,IACbxO,IAAKX,EAAQW,IACb6N,IAAKxO,EAAQwO,IACbC,IAAKzO,EAAQyO,KAIf,OADAlP,KAAKoV,OAAON,IAAI,6BACTc,CAET,OAAS9U,GAGP,GAFAd,KAAKoV,OAAOtU,MAAM,2BAA4BA,GAE1CA,aAAiBrB,EACnB,MAAMqB,EAIR,MAAMoV,EAAepV,aAAiBpB,MAAQoB,EAAMlB,QAAU,gBACxDuW,EAAYrV,aAAiBpB,MAAQoB,EAAMb,KAAO,QAExD,GAAkB,eAAdkW,GAA8BD,EAAazQ,SAAS,WACtD,MAAM,IAAIhG,EAAS,kBAAmB,mBAGxC,GAAkB,mCAAd0W,EACF,MAAM,IAAI1W,EAAS,wBAAyB,qBAG9C,GAAkB,6BAAd0W,EACF,MAAM,IAAI1W,EAAS,gCAAgCyW,IAAgB,iBAGrE,MAAM,IAAIzW,EACR,4BAA4ByW,IAC5B,sBAEJ,CACF,CAMA,aAAAE,CAAcjB,GACZnV,KAAKmV,QAAUA,EACf,MAAME,EAAcrV,KAAKmV,QAAQjM,WAAW,QACxC,IAAI2J,IAAI7S,KAAKmV,SACb,IAAItC,IAAI7S,KAAKmV,QAA2B,oBAAXG,OAAyBA,OAAOC,SAASC,YAAS,GACnFxV,KAAKqQ,KAAOmE,GAAmBa,GAC/BrV,KAAKoV,OAAOJ,KAAK,oBAAqBhV,KAAKmV,QAC7C,ECnIK,MAAMkB,GAQX,WAAA1W,CACE2W,EACAC,EAAkC,IAClCC,EAA6B,CAAA,EAC7B5B,GAAiB,GAVnB5U,KAAQyW,WAA4B,KAEpCzW,KAAQ0W,cAAwB,EAU9B1W,KAAK2W,iBAAmBL,EACxBtW,KAAK4W,iBAAmBL,EACxBvW,KAAKwW,OAASA,EACdxW,KAAKoV,OAAS,IAAIT,GAAOC,EAAO,kBAEhC5U,KAAKoV,OAAON,IAAI,6BAA8BwB,EAAiB,UACjE,CAKA,KAAAO,GAC0B,OAApB7W,KAAKyW,YAKTzW,KAAKoV,OAAON,IAAI,sBAAuB9U,KAAK2W,iBAAkB,qBAE9D3W,KAAKyW,WAAanB,OAAOwB,YAAY,KACnC9W,KAAK2W,oBAIF3W,KAAK0W,cACN1W,KAAK2W,kBAAoB3W,KAAK4W,kBAC9B5W,KAAK2W,iBAAmB,IAExB3W,KAAK0W,cAAe,EACpB1W,KAAKoV,OAAOH,KAAK,6BAA8BjV,KAAK2W,iBAAkB,qBACtE3W,KAAKwW,OAAOO,mBAAmB,CAC7BJ,iBAAkB3W,KAAK2W,oBAKvB3W,KAAK2W,kBAAoB,IAC3B3W,KAAKoV,OAAOH,KAAK,mBACjBjV,KAAKgX,OACLhX,KAAKwW,OAAOS,mBAEb,MA5BDjX,KAAKoV,OAAOH,KAAK,wBA6BrB,CAKA,IAAA+B,GAC0B,OAApBhX,KAAKyW,aACPS,cAAclX,KAAKyW,YACnBzW,KAAKyW,WAAa,KAClBzW,KAAKoV,OAAON,IAAI,iBAEpB,CAKA,KAAAqC,GACEnX,KAAKgX,OACLhX,KAAKoV,OAAON,IAAI,mBAAoB9U,KAAK2W,iBAAkB,UAC7D,CAKA,MAAAS,GAC0B,OAApBpX,KAAKyW,YAAuBzW,KAAK2W,iBAAmB,IACtD3W,KAAK6W,QACL7W,KAAKoV,OAAON,IAAI,oBAAqB9U,KAAK2W,iBAAkB,WAEhE,CAKA,mBAAAU,GACE,OAAOrX,KAAK2W,gBACd,CAKA,gBAAAW,GAGE,MAAO,GAFS7V,KAAKC,MAAM1B,KAAK2W,iBAAmB,QACnC3W,KAAK2W,iBAAmB,IACXxU,WAAWoV,SAAS,EAAG,MACtD,CAKA,yBAAAC,GACE,MAAMC,EAAQhW,KAAKC,MAAM1B,KAAK2W,iBAAmB,MAC3Ce,EAAUjW,KAAKC,MAAO1B,KAAK2W,iBAAmB,KAAQ,IACtDgB,EAAU3X,KAAK2W,iBAAmB,GAExC,OAAIc,EAAQ,EACH,GAAGA,KAASC,EAAQvV,WAAWoV,SAAS,EAAG,QAAQI,EAAQxV,WAAWoV,SAAS,EAAG,OAGpFvX,KAAKsX,kBACd,CAKA,SAAAM,GACE,OAA2B,OAApB5X,KAAKyW,UACd,CAKA,mBAAAoB,GACE,OAAO7X,KAAK0W,YACd,CAKA,mBAAAoB,CAAoBH,GAClB3X,KAAK2W,iBAAmBgB,EACxB3X,KAAKoV,OAAON,IAAI,6BAA8B6C,EAAS,UACzD,ECzIK,MAAMI,GAQX,WAAApY,CACUkW,EACAmC,EACA3X,EACA4X,EACAC,EACRC,EAAmC,GACnCvD,GAAiB,GANT5U,KAAA6V,UAAAA,EACA7V,KAAAgY,YAAAA,EACAhY,KAAAK,MAAAA,EACAL,KAAAiY,OAAAA,EACAjY,KAAAkY,QAAAA,EAZVlY,KAAQyW,WAA4B,KAEpCzW,KAAQoY,aAAuB,EAC/BpY,KAAQqY,YAAsB,EAC9BrY,KAAQsY,WAAqB,EAY3BtY,KAAKuY,kBAA+C,IAA3BJ,EACzBnY,KAAKoV,OAAS,IAAIT,GAAOC,EAAO,sBAChC5U,KAAKoV,OAAON,IAAI,mBAAoBqD,EAA0B,kBAChE,CAKA,KAAAtB,GAC0B,OAApB7W,KAAKyW,YAKTzW,KAAKsY,WAAY,EACjBtY,KAAKoV,OAAON,IAAI,kCAAmC9U,KAAK6V,WAGxD7V,KAAKwY,gBAGLxY,KAAKyW,WAAanB,OAAOwB,YAAY,KACnC9W,KAAKwY,iBACJxY,KAAKuY,oBAbNvY,KAAKoV,OAAOH,KAAK,4BAcrB,CAKA,IAAA+B,GAC0B,OAApBhX,KAAKyW,aACPS,cAAclX,KAAKyW,YACnBzW,KAAKyW,WAAa,KAClBzW,KAAKsY,WAAY,EACjBtY,KAAKoV,OAAON,IAAI,qBAEpB,CAKA,mBAAc0D,GACZ,GAAKxY,KAAKsY,UAAV,CAIAtY,KAAKoV,OAAON,IAAI,wBAEhB,IACE,MAAMhB,QAAiBD,MACrB,GAAG7T,KAAKgY,wBAAwBhY,KAAK6V,sBACrC,CACE9B,OAAQ,OACRxI,QAAS,CACPkN,cAAiB,UAAUzY,KAAKK,QAChC,eAAgB,oBAElBqY,KAAM9X,KAAK+X,UAAU,CACnBC,UAAWvX,KAAKC,MAChBuX,QAAQ,MAKd,IAAK/E,EAASgF,GACZ,MAAM,IAAIrZ,EACR,gCAAgCqU,EAASI,SACzC,mBACAJ,EAASI,QAIb,MAAMvJ,QAAamJ,EAASK,OAG5BnU,KAAKoY,aAAe,EAGkB,iBAA3BzN,EAAKoO,oBACd/Y,KAAKoV,OAAON,IAAI,iBAAkBnK,EAAKoO,kBAAmB,qBAC1D/Y,KAAKiY,SAAStN,EAAKoO,oBAGrB/Y,KAAKoV,OAAON,IAAI,yBAElB,OAAShU,GAIP,GAHAd,KAAKoY,eACLpY,KAAKoV,OAAOtU,MAAM,oBAAqBA,EAAO,IAAId,KAAKoY,gBAAgBpY,KAAKqY,gBAExErY,KAAKoY,cAAgBpY,KAAKqY,YAAa,CACzCrY,KAAKoV,OAAOtU,MAAM,4CAClBd,KAAKgX,OAEL,MAAMgC,EAAWlY,aAAiBrB,EAAWqB,EAAQ,IAAIrB,EACvDqB,aAAiBpB,MAAQoB,EAAMlB,QAAU,mBACzC,mBAEFI,KAAKkY,UAAUc,EACjB,CACF,CAvDA,CAwDF,CAKA,SAAApB,GACE,OAA2B,OAApB5X,KAAKyW,UACd,CAKA,eAAAwC,GACE,OAAOjZ,KAAKoY,YACd,CAKA,cAAAc,CAAevB,GACb,MAAMwB,EAAanZ,KAAK4X,YAEpBuB,GACFnZ,KAAKgX,OAGPhX,KAAKuY,kBAA8B,IAAVZ,EACzB3X,KAAKoV,OAAON,IAAI,gCAAiC6C,EAAS,WAEtDwB,GACFnZ,KAAK6W,OAET,EC/IK,MAAMuC,GAMX,WAAAzZ,CACUkW,EACAwD,EACRzE,GAAiB,GAFT5U,KAAA6V,UAAAA,EACA7V,KAAAqZ,UAAAA,EAPVrZ,KAAQsZ,QAAmC,KAG3CtZ,KAAQuZ,UAAoB,EAsE5BvZ,KAAQwZ,mBAAsBC,IAC5B,GAAIA,EAAMvU,MAAQlF,KAAK0Z,YAAcD,EAAME,SACzC,IACE,MAAMhP,EAAO/J,KAAKC,MAAM4Y,EAAME,UAC9B3Z,KAAK4Z,cAAcjP,EACrB,OAAS7J,GACPd,KAAKoV,OAAOtU,MAAM,iCAAkCA,EACtD,GAtEFd,KAAK0Z,WAAa,mBAAmB7D,IACrC7V,KAAKoV,OAAS,IAAIT,GAAOC,EAAO,oBAEhC5U,KAAK6Z,YACP,CAKQ,UAAAA,GAE0B,oBAArBC,kBACT9Z,KAAKoV,OAAON,IAAI,uCAChB9U,KAAKsZ,QAAU,IAAIQ,iBAAiB,cAAc9Z,KAAK6V,aACvD7V,KAAKsZ,QAAQS,UAAaN,IACxBzZ,KAAK4Z,cAAcH,EAAM9O,SAI3B3K,KAAKoV,OAAON,IAAI,8CAChBQ,OAAO0E,iBAAiB,UAAWha,KAAKwZ,qBAI1CxZ,KAAKia,aACP,CAKA,SAAAC,CAAUxR,EAA8BiC,GACtC,MAAM/K,EAA0B,CAC9B8I,OACAmN,UAAW7V,KAAK6V,UAChB+C,UAAWvX,KAAKC,SACbqJ,GAGD3K,KAAKsZ,SACPtZ,KAAKsZ,QAAQa,YAAYva,GACzBI,KAAKoV,OAAON,IAAI,eAAgBpM,KAGhC0R,aAAaC,QAAQra,KAAK0Z,WAAY9Y,KAAK+X,UAAU/Y,IACrDI,KAAKoV,OAAON,IAAI,gCAAiCpM,GAErD,CAKQ,aAAAkR,CAAcjP,GAChBA,EAAKkL,YAAc7V,KAAK6V,YAI5B7V,KAAKoV,OAAON,IAAI,oBAAqBnK,EAAKjC,MAC1C1I,KAAKqZ,UAAU1O,GACjB,CAoBQ,WAAAsP,GACN,MAAMK,EAAY,qBAAqBta,KAAK6V,YACrBuE,aAAaG,QAAQD,IAuB1Cta,KAAKoV,OAAON,IAAI,yBAGhBgC,YAAY,KACV,MAAM0D,EAAkBJ,aAAaG,QAAQD,GAC7C,GAAIE,EAAiB,CACPnZ,KAAKC,MAAQyD,SAASyV,GACxB,MAERxa,KAAKoV,OAAOH,KAAK,4CACjBjV,KAAKuZ,UAAW,EAChBa,aAAaC,QAAQC,EAAWjZ,KAAKC,MAAMa,YAE/C,GACC,OAjCHnC,KAAKuZ,UAAW,EAChBa,aAAaC,QAAQC,EAAWjZ,KAAKC,MAAMa,YAC3CnC,KAAKoV,OAAON,IAAI,yBAGhBgC,YAAY,KACN9W,KAAKuZ,UACPa,aAAaC,QAAQC,EAAWjZ,KAAKC,MAAMa,aAE5C,KAGHmT,OAAO0E,iBAAiB,eAAgB,KAClCha,KAAKuZ,WACPa,aAAaK,WAAWH,GACxBta,KAAKoV,OAAON,IAAI,4BAoBxB,CAKA,WAAA4F,GACE,OAAO1a,KAAKuZ,QACd,CAKA,OAAAoB,GACM3a,KAAKsZ,SACPtZ,KAAKsZ,QAAQsB,QACb5a,KAAKsZ,QAAU,MAEfhE,OAAOuF,oBAAoB,UAAW7a,KAAKwZ,oBAI7CY,aAAaK,WAAWza,KAAK0Z,YAEzB1Z,KAAKuZ,UACPa,aAAaK,WAAW,qBAAqBza,KAAK6V,aAGpD7V,KAAKoV,OAAON,IAAI,qBAClB,ECxEK,MAAMgG,GAAoB,CAC/BC,OAAQ,CAENC,WAAY,iBACZC,WAAY,sBAGZC,KAAM,iBACNC,eAAgB,sBAGhBC,QAAS,iBACTC,kBAAmB,sBAGnBC,QAAS,yBACTC,kBAAmB,mBAGnBC,UAAW,qBACXC,oBAAqB,yBAGrBC,MAAO,qBACPC,gBAAiB,yBAGjBC,OAAQ,qBACRC,iBAAkB,yBAGlBC,YAAa,qBACbC,sBAAuB,mBAGvBC,QAAS,mBACTC,kBAAmB,iBAGnBC,OAAQ,yBACRzZ,MAAO,yBACP0Z,KAAM,0BAERC,WAAY,CACVC,WAAY,6FACZC,SAAU,CACRC,GAAI,OACJC,GAAI,OACJC,KAAM,OACNC,GAAI,OACJC,GAAI,OACJ,MAAO,QAETC,WAAY,CACVC,OAAQ,MACRC,OAAQ,MACRC,SAAU,MACVC,KAAM,OAERC,WAAY,CACVC,MAAO,OACPL,OAAQ,MACRM,QAAS,SAGbC,QAAS,CACPC,aAAc,CACZb,GAAI,MACJc,GAAI,MACJZ,GAAI,OAEN3a,QAAS,CACPya,GAAI,MACJc,GAAI,OACJZ,GAAI,OACJC,GAAI,QAENY,IAAK,CACHf,GAAI,MACJc,GAAI,OACJZ,GAAI,UAQGc,GAAmB,CAC9BzC,OAAQ,CAENC,WAAY,sBACZC,WAAY,mBAGZC,KAAM,sBACNC,eAAgB,mBAGhBC,QAAS,sBACTC,kBAAmB,mBAGnBC,QAAS,yBACTC,kBAAmB,yBAGnBC,UAAW,yBACXC,oBAAqB,mBAGrBC,MAAO,yBACPC,gBAAiB,uBAGjBC,OAAQ,yBACRC,iBAAkB,mBAGlBC,YAAa,qBACbC,sBAAuB,mBAGvBC,QAAS,mBACTC,kBAAmB,iBAGnBC,OAAQ,yBACRzZ,MAAO,yBACP0Z,KAAM,wBAERC,WAAY,CACVC,WAAY,6FACZC,SAAU,CACRC,GAAI,OACJC,GAAI,OACJC,KAAM,OACNC,GAAI,OACJC,GAAI,OACJ,MAAO,QAETC,WAAY,CACVC,OAAQ,MACRC,OAAQ,MACRC,SAAU,MACVC,KAAM,OAERC,WAAY,CACVC,MAAO,OACPL,OAAQ,MACRM,QAAS,SAGbC,QAAS,CACPC,aAAc,CACZb,GAAI,MACJc,GAAI,MACJZ,GAAI,OAEN3a,QAAS,CACPya,GAAI,MACJc,GAAI,OACJZ,GAAI,OACJC,GAAI,QAENY,IAAK,CACHf,GAAI,MACJc,GAAI,OACJZ,GAAI,UAQH,SAASe,GAASC,GAEvB,QAAoB,IAAhBA,EACF,OAAOA,EAAcF,GAAY1C,GAInC,GAAsB,oBAAXxF,QAA0BA,OAAOqI,WAAY,CAEtD,OADmBrI,OAAOqI,WAAW,gCAAgCC,QACjDJ,GAAY1C,EAClC,CAGA,OAAOA,EACT,CC3RO,MAAM+C,GAUX,WAAAle,CAAYme,EAAuB,QAASC,GAT5C/d,KAAQge,MAA+B,KAEvChe,KAAQie,aAAmC,KAC3Cje,KAAQkZ,eAAgC,KACxClZ,KAAQke,YAAkC,KAC1Cle,KAAQgW,UAAoB,EAC5BhW,KAAQme,eAAyB,EACjCne,KAAQoe,mBAA0C,EAIhD,MAAMV,EAA4B,SAAdI,GAAuC,SAAdA,GAAwB9d,KAAKqe,iBAC1Ere,KAAKse,MAAQb,GAASC,GAGlBK,IACF/d,KAAKie,aAAe,CAClBM,gBAAiBR,EAAaQ,iBAAmB,UACjDC,UAAWT,EAAaS,WAAa,UACrCC,aAAcV,EAAaU,cAAgB,UAC3CpB,aAAcU,EAAaV,cAAgB,MAC3ChB,WACE0B,EAAa1B,YACb,qEAGR,CAEQ,cAAAgC,GACN,QAAsB,oBAAX/I,SAA0BA,OAAOqI,aACnCrI,OAAOqI,WAAW,gCAAgCC,OAG7D,CAKA,IAAAc,CAAKrb,GAMHrD,KAAK2e,OAGL3e,KAAKge,MAAQY,SAASC,cAAc,OACpC7e,KAAKge,MAAMc,GAAK,2BAChB9e,KAAKge,MAAMe,MAAMC,QAAU,8QAWVhf,KAAKie,cAAc5B,YAAcrc,KAAKse,MAAMlC,WAAWC,oBAIxE,MAAM4C,EAAUL,SAASC,cAAc,OACjCK,EAAUlf,KAAKie,cAAcM,iBAAmBve,KAAKse,MAAMvD,OAAOG,KAClEsD,EAAYxe,KAAKie,cAAcO,WAAaxe,KAAKse,MAAMvD,OAAOI,eAC9DkC,EAAerd,KAAKie,cAAcZ,cAAgBrd,KAAKse,MAAMlB,QAAQC,aAAaX,GAExFuC,EAAQF,MAAMC,QAAU,6BACFE,oBACXV,4BACQnB,sBACNrd,KAAKse,MAAMlB,QAAQrb,QAAQ2a,6HAIlB1c,KAAKse,MAAMvD,OAAOmB,gBAGxClc,KAAKme,eAAiB9a,EAAQsT,iBAC9B3W,KAAKgW,UAAY3U,KAAKC,MACtBtB,KAAKoe,cAAgB/a,EAAQ8b,MAE7B,MAAMzH,EAAUjW,KAAKC,MAAM2B,EAAQsT,iBAAmB,IAChDgB,EAAUtU,EAAQsT,iBAAmB,GAE3CsI,EAAQG,UAAY,kCACOpf,KAAKse,MAAMlB,QAAQrb,QAAQub,oBAAoBtd,KAAKse,MAAMlC,WAAWE,SAASK,oBAAoB3c,KAAKse,MAAMlC,WAAWQ,WAAWG,oBAAoByB,+EAGxJxe,KAAKse,MAAMlB,QAAQrb,QAAQ2a,oBAAoB1c,KAAKse,MAAMlC,WAAWE,SAASG,sBAAsBzc,KAAKse,MAAMlC,WAAWa,WAAWJ,kBAAkB7c,KAAKse,MAAMvD,OAAOY,sGACtH6C,OAAe9G,KAAWC,EAAQxV,WAAWoV,SAAS,EAAG,qEAElGvX,KAAKse,MAAMlB,QAAQG,IAAID,6IAGjCtd,KAAKse,MAAMvD,OAAOS,gCAC7Bxb,KAAKse,MAAMvD,OAAOU,qDACPzb,KAAKse,MAAMvD,OAAOmB,qCACrBlc,KAAKse,MAAMlB,QAAQC,aAAab,6BACpCxc,KAAKse,MAAMlC,WAAWE,SAASE,+BAC7Bxc,KAAKse,MAAMlC,WAAWQ,WAAWE,gGAGjC9c,KAAKse,MAAMlC,WAAWC,2EAKrChZ,EAAQgc,SACJ,8GAEsBrf,KAAKse,MAAMvD,OAAOiB,oCAC7Bhc,KAAKse,MAAMvD,OAAOkB,qFAEVjc,KAAKse,MAAMlB,QAAQC,aAAab,mCACpCxc,KAAKse,MAAMlC,WAAWE,SAASE,qCAC7Bxc,KAAKse,MAAMlC,WAAWQ,WAAWE,kHAGjC9c,KAAKse,MAAMlC,WAAWC,yFAIvC,eAGJhZ,EAAQ8b,MACJ,2GAEsBnf,KAAKse,MAAMvD,OAAOe,wCAC7B9b,KAAKse,MAAMvD,OAAOgB,yFAEV/b,KAAKse,MAAMlB,QAAQC,aAAab,mCACpCxc,KAAKse,MAAMlC,WAAWE,SAASE,qCAC7Bxc,KAAKse,MAAMlC,WAAWQ,WAAWE,kHAGjC9c,KAAKse,MAAMlC,WAAWC,sFAIvC,yBAKVrc,KAAKge,MAAMsB,YAAYL,GACvBL,SAASlG,KAAK4G,YAAYtf,KAAKge,OAG/B,MAAMuB,EAAYX,SAASY,eAAe,iBACtCD,GAAalc,EAAQgc,UACvBE,EAAUvF,iBAAiB,QAAS,KAClC3W,EAAQgc,aACRrf,KAAK2e,SAIT,MAAMc,EAAab,SAASY,eAAe,kBACvCC,GACFA,EAAWzF,iBAAiB,QAAS,KACnCha,KAAK2e,SAIT,MAAMe,EAASd,SAASY,eAAe,cACnCE,GAAUrc,EAAQ8b,OACpBO,EAAO1F,iBAAiB,QAAS,KAC/B3W,EAAQ8b,YAOIF,EAAQU,iBAAiB,UACjCC,QAASC,IACfA,EAAO7F,iBAAiB,aAAc,KACnC6F,EAAuBd,MAAMe,QAAU,QAE1CD,EAAO7F,iBAAiB,aAAc,KACnC6F,EAAuBd,MAAMe,QAAU,MAG1CD,EAAO7F,iBAAiB,QAAS,KAC9B6F,EAAuBd,MAAMgB,QAAU,aAAa/f,KAAKse,MAAMvD,OAAOoB,OACtE0D,EAAuBd,MAAMiB,cAAgB,QAEhDH,EAAO7F,iBAAiB,OAAQ,KAC7B6F,EAAuBd,MAAMgB,QAAU,WAK5C/f,KAAKke,YAAcU,SAASY,eAAe,mBAC3Cxf,KAAKkZ,eAAiB5D,OAAOwB,YAAY,KACvC,MAAMmJ,EAAUxe,KAAKC,OAAOL,KAAKC,MAAQtB,KAAKgW,WAAa,KACrDxU,EAAYC,KAAKE,IAAI,EAAG3B,KAAKme,eAAiB8B,GAE9CvI,EAAUjW,KAAKC,MAAMF,EAAY,IACjCmW,EAAUnW,EAAY,GAExBxB,KAAKke,cACPle,KAAKke,YAAYgC,YAAc,GAAGxI,KAAWC,EAAQxV,WAAWoV,SAAS,EAAG,QAI5D,IAAd/V,IACExB,KAAKoe,eACPpe,KAAKoe,gBAEPpe,KAAK2e,SAEN,IACL,CAKA,IAAAA,GAE8B,OAAxB3e,KAAKkZ,iBACPhC,cAAclX,KAAKkZ,gBACnBlZ,KAAKkZ,eAAiB,MAIpBlZ,KAAKge,OAAShe,KAAKge,MAAMmC,aAC3BngB,KAAKge,MAAMmC,WAAWC,YAAYpgB,KAAKge,OACvChe,KAAKge,MAAQ,KACbhe,KAAKke,YAAc,KAEvB,CAKA,OAAAmC,GACE,OAAsB,OAAfrgB,KAAKge,KACd,CAMA,iBAAAsC,CAAkBC,EAAwBC,EAAqB,KAE7DxgB,KAAK2e,OAEL,MAAMO,EAAUlf,KAAKie,cAAcM,iBAAmBve,KAAKse,MAAMvD,OAAOG,KAClEsD,EAAYxe,KAAKie,cAAcO,WAAaxe,KAAKse,MAAMvD,OAAOI,eAC9DkC,EAAerd,KAAKie,cAAcZ,cAAgBrd,KAAKse,MAAMlB,QAAQC,aAAaX,GAGxF1c,KAAKge,MAAQY,SAASC,cAAc,OACpC7e,KAAKge,MAAMc,GAAK,0BAChB9e,KAAKge,MAAMe,MAAMC,QAAU,8QAWVhf,KAAKie,cAAc5B,YAAcrc,KAAKse,MAAMlC,WAAWC,2DAKxE,MAAM4C,EAAUL,SAASC,cAAc,OACvCI,EAAQF,MAAMC,QAAU,6BACFE,oBACXV,4BACQnB,sBACNrd,KAAKse,MAAMlB,QAAQrb,QAAQ4a,iMAMlB3c,KAAKse,MAAMvD,OAAOmB,gBAGxC+C,EAAQG,UAAY,uDAC4Bpf,KAAKse,MAAMlB,QAAQrb,QAAQ2a,+CAChD1c,KAAKse,MAAMlB,QAAQrb,QAAQub,oBAAoBtd,KAAKse,MAAMlC,WAAWE,SAAS,wBAAwBtc,KAAKse,MAAMlC,WAAWQ,WAAWG,oBAAoB/c,KAAKse,MAAMvD,OAAOe,oFAG9K9b,KAAKse,MAAMlB,QAAQrb,QAAQ2a,oBAAoB1c,KAAKse,MAAMlC,WAAWE,SAASG,sBAAsBzc,KAAKse,MAAMlC,WAAWa,WAAWJ,kBAAkB7c,KAAKse,MAAMvD,OAAOY,sMAOjL3b,KAAKse,MAAMvD,OAAOW,kCACf1b,KAAKse,MAAMlB,QAAQC,aAAab,uDAEnCxc,KAAKse,MAAMlB,QAAQrb,QAAQ2a,2JAKF1c,KAAKse,MAAMvD,OAAOe,gBAAgB9b,KAAKse,MAAMvD,OAAOO,+CAChEkF,6DAM/B,MAAMzB,EAAQH,SAASC,cAAc,SACrCE,EAAMmB,YAAc,iWAcpBtB,SAAS6B,KAAKnB,YAAYP,GAE1B/e,KAAKge,MAAMsB,YAAYL,GACvBL,SAASlG,KAAK4G,YAAYtf,KAAKge,OAG/B0C,WAAW,KACT1gB,KAAK2e,OACL4B,KACCC,EACL,ECnVK,SAASG,GACdC,EAAoB,YACpB1O,GAEA,IACE,MAAM2O,EAAY3O,IAA0B,oBAAXoD,OAAyBA,OAAOC,SAASxC,KAAO,IAEjF,IAAK8N,EACH,OAAO,KAGT,MAAMC,EAAS,IAAIjO,IAAIgO,GAGvB,OAFcC,EAAOC,aAAa1Y,IAAIuY,EAGxC,OAAS9f,GACP,MAAM,IAAIrB,EACR,qCAAqCqB,aAAiBpB,MAAQoB,EAAMlB,QAAU,kBAC9E,kBAEJ,CACF,CCXO,MAAMohB,GAaX,WAAArhB,CAAYshB,GAVZjhB,KAAQkhB,MAA6B,KACrClhB,KAAQmhB,UAAqC,KAC7CnhB,KAAQohB,QAAiC,KACzCphB,KAAQge,MAA6B,KAErChe,KAAQwW,OAA6B,CAAA,EACrCxW,KAAQqhB,YAAkC,KAC1CrhB,KAAQshB,SAA0B,KAClCthB,KAAQuhB,UAA4C,SAGlDvhB,KAAKihB,OAAS,CACZ9L,QAAS8L,EAAO9L,SAAW,sDAC3BqM,aAAcP,EAAOO,cAAgB,YACrCxJ,YAAaiJ,EAAOjJ,aAAe,wBACnCpD,MAAOqM,EAAOrM,QAAS,EACvB6M,UAAWR,EAAOQ,YAAa,EAC/BlL,wBAAyB0K,EAAO1K,yBAA2B,IAC3DwH,aAAckD,EAAOlD,cAAgB,CAAA,EACrCD,UAAWmD,EAAOnD,WAAa,QAC/BnI,cAAesL,EAAOtL,eAAiB,GACvC+L,eAAgBT,EAAOS,gBAAkB,yCAEzCC,gBAAiBV,EAAOU,kBAAmB,EAC3CxJ,yBAA0B8I,EAAO9I,0BAA4B,GAC7DyJ,cAAeX,EAAOW,gBAAiB,EACvCC,cAAeZ,EAAOY,gBAAiB,EACvCC,qBAAsBb,EAAOa,uBAAwB,EAErDC,MAAOd,EAAOc,OAAS,CAAA,EACvBC,cAAef,EAAOe,eAAiB,KAGzChiB,KAAKiiB,UAAY,IAAI/M,GAAclV,KAAKihB,OAAO9L,QAASnV,KAAKihB,OAAOrM,OACpE5U,KAAKoV,OAAS,IAAIT,GAAO3U,KAAKihB,OAAOrM,MAAO,oBAE5C5U,KAAKoV,OAAOJ,KAAK,+BAAgC,CAC/CG,QAASnV,KAAKihB,OAAO9L,QACrBqM,aAAcxhB,KAAKihB,OAAOO,aAC1BxJ,YAAahY,KAAKihB,OAAOjJ,YACzB2J,gBAAiB3hB,KAAKihB,OAAOU,gBAC7BC,cAAe5hB,KAAKihB,OAAOW,cAC3BC,cAAe7hB,KAAKihB,OAAOY,eAE/B,CAKA,EAAAK,CAA8BzI,EAAU0I,GACtCniB,KAAKwW,OAAOiD,GAAS0I,EACrBniB,KAAKoV,OAAON,IAAI,4BAA6B2E,EAC/C,CAKA,iBAAc2I,CACZC,EACAC,EACAC,EACAC,GAAoB,GAEpB,IAAKF,EAAM,OAEXtiB,KAAKoV,OAAON,IAAI,WAAWuN,UAE3B,MAAM/N,EAAU,IAAImO,QAAe,CAACC,EAAGC,IACrCjC,WACE,IAAMiC,EAAO,IAAIljB,EAAS,GAAG4iB,wBAA+BriB,KAAKihB,OAAOe,kBAAmB,iBAC3FhiB,KAAKihB,OAAOe,gBAIhB,UACQS,QAAQG,KAAK,CACjBH,QAAQI,QAAQP,EAAKC,IACrBjO,IAEFtU,KAAKoV,OAAON,IAAI,GAAGuN,gCACrB,OAASvhB,GAGP,GAFAd,KAAKoV,OAAOtU,MAAM,GAAGuhB,iBAAyBvhB,GAE1C0hB,EAEF,MAAM,IAAI/iB,EACR,GAAG4iB,kBAAyBvhB,aAAiBpB,MAAQoB,EAAMlB,QAAU,kBACrE,cAIFI,KAAKoV,OAAOH,KAAK,GAAGoN,8CAExB,CACF,CAKQ,uBAAAS,GACN,IAAK9iB,KAAKqhB,YAAa,OACvB,MACM/K,EADM7U,KAAKC,MAAML,KAAKC,MAAQ,KACNtB,KAAKqhB,YAAYrL,UAC/C,OAAOvU,KAAKshB,KAAKzM,EAAkB,GACrC,CAKA,gBAAMuD,GACJ7Z,KAAKoV,OAAOJ,KAAK,2BAEjB,IAEE,MAAMgO,EAAkB,qBAcxB,GAXAhjB,KAAKshB,SAAWX,GAAoB3gB,KAAKihB,OAAOO,cAG3CxhB,KAAKshB,UAAsC,oBAAnB2B,iBAC3BjjB,KAAKshB,SAAW2B,eAAe1I,QAAQyI,GACnChjB,KAAKshB,UACPthB,KAAKoV,OAAON,IAAI,sCAKf9U,KAAKshB,SACR,MAAM,IAAI7hB,EACR,oCAAoCO,KAAKihB,OAAOO,2BAChD,iBAaJ,IAAI0B,EAR0B,oBAAnBD,iBACTA,eAAe5I,QAAQ2I,EAAiBhjB,KAAKshB,UAC7CthB,KAAKoV,OAAON,IAAI,uCAGlB9U,KAAKoV,OAAON,IAAI,gCAIZ9U,KAAKihB,OAAOa,sBAEd9hB,KAAKoV,OAAON,IAAI,4BAChBoO,QAAuBljB,KAAKmjB,oBAAoBnjB,KAAKshB,YAGrDthB,KAAKoV,OAAON,IAAI,yBAChBoO,QAAuBljB,KAAKiiB,UAAUxX,OACpCzK,KAAKshB,SACL,oBACAthB,KAAKihB,OAAOtL,oBAAiB,IAIjC3V,KAAKoV,OAAON,IAAI,6BAGhB9U,KAAKqhB,YAAc,CACjBxL,UAAWqN,EAAerN,UAC1BF,cAAeuN,EAAevN,cAC9BG,OAAQoN,EAAepN,OACvBC,MAAOmN,EAAenN,MACtBC,UAAWkN,EAAelN,UAC1BC,gBAAiBiN,EAAejN,gBAChCrG,IAAKsT,EAAetT,IACpBxO,IAAK8hB,EAAe9hB,IACpB6N,IAAKiU,EAAejU,IACpBC,IAAKgU,EAAehU,KAItB,MAAM5N,EAAMG,KAAKC,MAAML,KAAKC,MAAQ,KAC9BqV,EAAmBlV,KAAKE,IAAI,EAAG3B,KAAKqhB,YAAYjgB,IAAME,GAE5D,GAAIqV,GAAoB,EACtB,MAAM,IAAIlX,EACR,8BACA,mBAOJ,GAHAO,KAAKoV,OAAON,IAAI,kBAAmB6B,EAAkB,WAGjD3W,KAAKihB,OAAOc,OAAOqB,eAAgB,CACrC,MAAMC,EAAoC,CACxCxN,UAAW7V,KAAKqhB,YAAYxL,UAC5BC,OAAQ9V,KAAKqhB,YAAYvL,OACzBwN,MAAQJ,EAAuBI,MAC/BvN,MAAO/V,KAAKqhB,YAAYtL,MACxBJ,cAAe3V,KAAKqhB,YAAY1L,cAChCM,gBAAiBjW,KAAKqhB,YAAYpL,gBAClCsN,UAAWvjB,KAAKqhB,YAAYjgB,IAC5B4O,IAAKhQ,KAAKshB,gBAGNthB,KAAKoiB,YAAY,iBAAkBpiB,KAAKihB,OAAOc,MAAMqB,eAAgBC,GAAc,GACzFrjB,KAAKoV,OAAON,IAAI,yDAClB,CAgEA,GA7DA9U,KAAKkhB,MAAQ,IAAI7K,GACfM,EACA3W,KAAKihB,OAAO1K,wBACZ,CACEQ,iBAAmBpM,IAEjB,GAAI3K,KAAKihB,OAAOc,OAAOhL,iBAAkB,CACvC,MAAMyM,EAAwC,CAC5C3N,UAAW7V,KAAKqhB,YAAaxL,UAC7BC,OAAQ9V,KAAKqhB,YAAavL,OAC1Ba,iBAAkBhM,EAAKgM,kBAEzB3W,KAAKoiB,YAAY,mBAAoBpiB,KAAKihB,OAAOc,MAAMhL,iBAAkByM,GAAgB,GACtFvP,SAAejU,KAAKoV,OAAOtU,MAAM,gCAAiCA,GACvE,CAEAd,KAAKyjB,iBAAiB9Y,EAAKgM,kBAC3B3W,KAAKwW,OAAOO,mBAAmBpM,IAEjCsM,aAAc,KACZjX,KAAKuhB,UAAY,UACjBvhB,KAAK0jB,eAGT1jB,KAAKihB,OAAOrM,OAIV5U,KAAKihB,OAAOU,iBAAmB3hB,KAAKshB,WACtCthB,KAAKmhB,UAAY,IAAIpJ,GACnB/X,KAAKqhB,YAAYxL,UACjB7V,KAAKihB,OAAOjJ,YACZhY,KAAKshB,SACJ3K,IAEC3W,KAAKkhB,OAAOpJ,oBAAoBnB,IAEjC7V,IACCd,KAAKoV,OAAOtU,MAAM,mBAAoBA,GACtCd,KAAKwW,OAAO0B,UAAUpX,IAExBd,KAAKihB,OAAO9I,yBACZnY,KAAKihB,OAAOrM,QAKZ5U,KAAKihB,OAAOW,gBACd5hB,KAAKohB,QAAU,IAAIhI,GACjBpZ,KAAKqhB,YAAYxL,UAChBjW,GAAYI,KAAK2jB,qBAAqB/jB,GACvCI,KAAKihB,OAAOrM,QAKZ5U,KAAKihB,OAAOY,eACd7hB,KAAK4jB,+BAIH5jB,KAAKihB,OAAOQ,YACdzhB,KAAKkhB,MAAMrK,QACX7W,KAAKoV,OAAON,IAAI,+BAGZ9U,KAAKihB,OAAOU,iBAAmB3hB,KAAKmhB,WAAW,EAC/BnhB,KAAKohB,SAAWphB,KAAKohB,QAAQ1G,eAE7C1a,KAAKmhB,UAAUtK,QACf7W,KAAKoV,OAAON,IAAI,mCAEhB9U,KAAKoV,OAAON,IAAI,oCAEpB,CAOF,OAHA9U,KAAKwW,OAAO4M,iBAAiBpjB,KAAKqhB,aAElCrhB,KAAKoV,OAAOJ,KAAK,oCACVhV,KAAKqhB,WAEd,OAASvgB,GACPd,KAAKoV,OAAOtU,MAAM,yBAA0BA,GAC5C,MAAMkY,EAAWlY,aAAiBrB,EAAWqB,EAAQ,IAAIrB,EACvDqB,aAAiBpB,MAAQoB,EAAMlB,QAAU,gBACzC,wBAGF,MADAI,KAAKwW,OAAO0B,UAAUc,GAChBA,CACR,CACF,CAKA,yBAAcmK,CAAoB9iB,GAChC,MAAMyT,QAAiBD,MACrB,GAAG7T,KAAKihB,OAAOjJ,gCACf,CACEjE,OAAQ,OACRxI,QAAS,CACPkN,cAAiB,UAAUpY,IAC3B,eAAgB,oBAElBqY,KAAM9X,KAAK+X,UAAU,CAAEkL,YAAaxjB,MAIxC,IAAKyT,EAASgF,GACZ,MAAM,IAAIrZ,EACR,4BACA,4BACAqU,EAASI,QAIb,MAAMvJ,QAAamJ,EAASK,OAC5B,IAAKxJ,EAAKmZ,MACR,MAAM,IAAIrkB,EACRkL,EAAK7J,OAAS,4BACd,mBAMJ,OADgBX,EAAUC,OAAOC,EAEnC,CAKQ,oBAAAsjB,CAAqB/jB,GAG3B,OAFAI,KAAKoV,OAAON,IAAI,oBAAqBlV,EAAQ8I,MAErC9I,EAAQ8I,MACd,IAAK,QACH1I,KAAKkhB,OAAO/J,QACZ,MACF,IAAK,SACHnX,KAAKkhB,OAAO9J,SACZ,MACF,IAAK,MACHpX,KAAK0jB,aACL,MACF,IAAK,oBAC8B,IAA7B9jB,EAAQ+W,kBACV3W,KAAKkhB,OAAOpJ,oBAAoBlY,EAAQ+W,kBAIhD,CAKQ,4BAAAiN,GACNhF,SAAS5E,iBAAiB,mBAAoB,KACxC4E,SAASmF,QACX/jB,KAAKoV,OAAON,IAAI,6BAChB9U,KAAKgkB,eAELhkB,KAAKoV,OAAON,IAAI,+BAChB9U,KAAKikB,iBAGTjkB,KAAKoV,OAAON,IAAI,qCAClB,CAKA,UAAAoP,GACE,IAAKlkB,KAAKkhB,MACR,MAAM,IAAIzhB,EACR,gDACA,mBAGJO,KAAKkhB,MAAMrK,QACX7W,KAAKohB,SAASlH,UAAU,UACxBla,KAAKoV,OAAOJ,KAAK,yBACnB,CAKA,UAAAgP,GACEhkB,KAAKkhB,OAAO/J,QACZnX,KAAKohB,SAASlH,UAAU,SACxBla,KAAKoV,OAAOJ,KAAK,eACnB,CAKA,WAAAiP,GACEjkB,KAAKkhB,OAAO9J,SACZpX,KAAKohB,SAASlH,UAAU,UACxBla,KAAKoV,OAAOJ,KAAK,gBACnB,CAKA,mBAAMmP,CAAcC,GAClB,IAAKpkB,KAAKqhB,cAAgBrhB,KAAKshB,SAC7B,MAAM,IAAI7hB,EAAS,oBAAqB,cAG1CO,KAAKoV,OAAOJ,KAAK,uBAAwBoP,EAAmB,WAE5D,IACE,MAAMtQ,QAAiBD,MACrB,GAAG7T,KAAKihB,OAAOjJ,wBAAwBhY,KAAKqhB,YAAYxL,kBACxD,CACE9B,OAAQ,MACRxI,QAAS,CACPkN,cAAiB,UAAUzY,KAAKshB,WAChC,eAAgB,oBAElB5I,KAAM9X,KAAK+X,UAAU,CACnB0L,mBAAoBD,MAK1B,IAAKtQ,EAASgF,GACZ,MAAM,IAAIrZ,EACR,2BACA,mBACAqU,EAASI,QAIb,MAAMvJ,QAAamJ,EAASK,OAG5BnU,KAAKqhB,YAAYjgB,IAAMuJ,EAAK2Z,eAG5B,MAAMhjB,EAAMG,KAAKC,MAAML,KAAKC,MAAQ,KAC9BqV,EAAmBhM,EAAK2Z,eAAiBhjB,EAO/C,GANAtB,KAAKkhB,OAAOpJ,oBAAoBnB,GAGhC3W,KAAKohB,SAASlH,UAAU,eAAgB,CAAEvD,qBAGtC3W,KAAKihB,OAAOc,OAAOwC,gBAAiB,CACtC,MAAMC,EAAsC,CAC1C3O,UAAW7V,KAAKqhB,YAAYxL,UAC5BC,OAAQ9V,KAAKqhB,YAAYvL,OACzBsO,oBACAK,aAAc9Z,EAAK2Z,sBAGftkB,KAAKoiB,YAAY,kBAAmBpiB,KAAKihB,OAAOc,MAAMwC,gBAAiBC,GAAe,EAC9F,CAEAxkB,KAAKoV,OAAOJ,KAAK,gCAEnB,OAASlU,GACPd,KAAKoV,OAAOtU,MAAM,4BAA6BA,GAC/C,MAAMkY,EAAWlY,aAAiBrB,EAAWqB,EAAQ,IAAIrB,EACvDqB,aAAiBpB,MAAQoB,EAAMlB,QAAU,mBACzC,mBAGF,MADAI,KAAKwW,OAAO0B,UAAUc,GAChBA,CACR,CACF,CAKA,qBAAM0L,CAAgBC,GACpB,IAAK3kB,KAAKqhB,cAAgBrhB,KAAKshB,SAC7B,MAAM,IAAI7hB,EAAS,oBAAqB,cAG1CO,KAAKoV,OAAOJ,KAAK,yBAEjB,IACE,MAAMlB,QAAiBD,MACrB,GAAG7T,KAAKihB,OAAOjJ,wBAAwBhY,KAAKqhB,YAAYxL,qBACxD,CACE9B,OAAQ,OACRxI,QAAS,CACPkN,cAAiB,UAAUzY,KAAKshB,WAChC,eAAgB,oBAElB5I,KAAM9X,KAAK+X,UAAU,CACnBiM,qBAAsBD,EACtBE,SAAU,CAAA,MAKhB,IAAK/Q,EAASgF,GACZ,MAAM,IAAIrZ,EACR,4BACA,oBACAqU,EAASI,QAIb,MAAMvJ,QAAamJ,EAASK,OAC5BnU,KAAKoV,OAAOJ,KAAK,qBAAsBrK,GAGvC3K,KAAK0jB,YAEP,OAAS5iB,GACPd,KAAKoV,OAAOtU,MAAM,8BAA+BA,GACjD,MAAMkY,EAAWlY,aAAiBrB,EAAWqB,EAAQ,IAAIrB,EACvDqB,aAAiBpB,MAAQoB,EAAMlB,QAAU,oBACzC,oBAGF,MADAI,KAAKwW,OAAO0B,UAAUc,GAChBA,CACR,CACF,CAKA,gBAAM0K,GACJ1jB,KAAKoV,OAAOJ,KAAK,qBAGjB,MAAM8P,EAAgC,CACpCjP,UAAW7V,KAAKqhB,aAAaxL,WAAa,GAC1CC,OAAQ9V,KAAKqhB,aAAavL,QAAU,GACpCtS,OAAQxD,KAAKuhB,UACbwD,sBAAuB/kB,KAAK8iB,2BAI9B,GAAI9iB,KAAKihB,OAAOc,OAAO9K,aACrB,UACQjX,KAAKoiB,YAAY,eAAgBpiB,KAAKihB,OAAOc,MAAM9K,aAAc6N,GAAY,GACnF9kB,KAAKoV,OAAON,IAAI,qCAClB,OAAShU,GAEPd,KAAKoV,OAAOtU,MAAM,+CAAgDA,EACpE,CAIFd,KAAKkhB,OAAOlK,OAGZhX,KAAKmhB,WAAWnK,OAGhBhX,KAAKohB,SAASlH,UAAU,OAGM,oBAAnB+I,iBACTA,eAAexI,WAAW,sBAC1Bza,KAAKoV,OAAON,IAAI,mCAIlB9U,KAAKwW,OAAOS,iBAEZjX,KAAKoV,OAAOJ,KAAK,iBAGK,oBAAXM,SAEJtV,KAAKge,QACRhe,KAAKge,MAAQ,IAAIH,GACf7d,KAAKihB,OAAOnD,WAAa,QACzB9d,KAAKihB,OAAOlD,eAKhB/d,KAAKge,MAAMsC,kBAAkB,KAC3BhL,OAAOC,SAASxC,KAAO/S,KAAKihB,OAAOS,gBAClC,KAEP,CAKQ,gBAAA+B,CAAiB9M,GAClB3W,KAAKge,QACRhe,KAAKge,MAAQ,IAAIH,GACf7d,KAAKihB,OAAOnD,WAAa,QACzB9d,KAAKihB,OAAOlD,eAIhB/d,KAAKge,MAAMU,KAAK,CACd/H,mBACA0I,SAAUrY,UAER,UACQhH,KAAKmkB,cAAc,IACzBnkB,KAAKge,OAAOW,OACZ3e,KAAKoV,OAAON,IAAI,2CAClB,OAAShU,GAEPd,KAAKoV,OAAOtU,MAAM,gDAAiDA,GACnE,MAAM4gB,EAAiB,GAAG1hB,KAAKihB,OAAOS,0CAA0C1hB,KAAKqhB,aAAaxL,YAG5E,oBAAXP,SACJtV,KAAKge,QACRhe,KAAKge,MAAQ,IAAIH,GACf7d,KAAKihB,OAAOnD,WAAa,QACzB9d,KAAKihB,OAAOlD,eAGhB/d,KAAKge,MAAMsC,kBAAkB,KAC3BhL,OAAOC,SAASxC,KAAO2O,GACtB,KAEP,GAEFvC,MAAO,KAELnf,KAAK0jB,eAGX,CAKA,cAAAsB,GACE,OAAOhlB,KAAKqhB,WACd,CAKA,gBAAA4D,GACE,OAAOjlB,KAAKkhB,OAAO7J,uBAAyB,CAC9C,CAKA,gBAAAC,GACE,OAAOtX,KAAKkhB,OAAO5J,oBAAsB,MAC3C,CAKA,yBAAAE,GACE,OAAOxX,KAAKkhB,OAAO1J,6BAA+B,SACpD,CAKA,cAAA0N,GACE,OAAOllB,KAAKkhB,OAAOtJ,cAAe,CACpC,CAKA,OAAA+C,GACE3a,KAAKoV,OAAOJ,KAAK,8BACjBhV,KAAKkhB,OAAOlK,OACZhX,KAAKmhB,WAAWnK,OAChBhX,KAAKohB,SAASzG,UACd3a,KAAKge,OAAOW,OAGkB,oBAAnBsE,iBACTA,eAAexI,WAAW,sBAC1Bza,KAAKoV,OAAON,IAAI,mCAGlB9U,KAAKqhB,YAAc,KACnBrhB,KAAKshB,SAAW,IAClB,sHClsBK,MAUL,WAAA3hB,CAAYme,EAAuB,QATnC9d,KAAQmlB,UAAmC,KAE3CnlB,KAAQkZ,eAAgC,KACxClZ,KAAQke,YAAkC,KAI1Cle,KAAQolB,SAAmB,EAGzB,MAAM1H,EAA4B,SAAdI,GAAuC,SAAdA,GAAwB9d,KAAKqe,iBAC1Ere,KAAKse,MAAQb,GAASC,EACxB,CAEQ,cAAAW,GACN,QAAsB,oBAAX/I,SAA0BA,OAAOqI,aACnCrI,OAAOqI,WAAW,gCAAgCC,OAG7D,CAOA,KAAAyH,CACEC,EACAjiB,GAQIrD,KAAKolB,SACPplB,KAAKulB,UAIP,MAAMC,EACqB,iBAAlBF,EACH1G,SAAS6G,cAA2BH,GACpCA,EAEN,IAAKE,EAEH,OAGFxlB,KAAK0lB,gBAAkBriB,EAAQsM,QAC/B3P,KAAK2lB,iBAAmBtiB,EAAQgc,SAChCrf,KAAKoe,cAAgB/a,EAAQ8b,MAG7Bnf,KAAKmlB,UAAYvG,SAASC,cAAc,OACxC7e,KAAKmlB,UAAUrG,GAAK,oBAEpB,MAAM8G,EAAWviB,EAAQuiB,UAAY,QAC/BC,EACS,SAAbD,EAAsB,aACT,WAAbA,EAAwB,SACxB,WAEF5lB,KAAKmlB,UAAUpG,MAAMC,QAAU,8EAGV6G,kBACZ7lB,KAAKse,MAAMlB,QAAQG,IAAID,uBACnBtd,KAAKse,MAAMlB,QAAQrb,QAAQya,MAAMxc,KAAKse,MAAMlB,QAAQrb,QAAQub,gCACnDtd,KAAKse,MAAMvD,OAAOG,kCAClBlb,KAAKse,MAAMvD,OAAOmB,iCACrBlc,KAAKse,MAAMlB,QAAQC,aAAaC,2BAClCtd,KAAKse,MAAMlC,WAAWC,qEAKvC,MAAMyJ,EAAelH,SAASC,cAAc,OAC5CiH,EAAa/G,MAAMC,QAAU,kEAGpBhf,KAAKse,MAAMlB,QAAQG,IAAIf,qBACrBxc,KAAKse,MAAMvD,OAAOE,iCACdjb,KAAKse,MAAMlC,WAAWE,SAASE,2BAC7Bxc,KAAKse,MAAMlC,WAAWQ,WAAWE,gBAGlD,MAAMiJ,EAAYnH,SAASC,cAAc,QACzCkH,EAAU7F,YAAc,KACxB6F,EAAUhH,MAAMzC,SAAWtc,KAAKse,MAAMlC,WAAWE,SAASG,KAE1Dzc,KAAKke,YAAcU,SAASC,cAAc,QAC1C7e,KAAKke,YAAYY,GAAK,kBACtB9e,KAAKke,YAAYgC,YAAclgB,KAAK0lB,qBAAuB,QAC3D1lB,KAAKke,YAAYa,MAAMC,QAAU,uGAMjC8G,EAAaxG,YAAYyG,GACzBD,EAAaxG,YAAYtf,KAAKke,aAC9Ble,KAAKmlB,UAAU7F,YAAYwG,GAG3B,MAAME,EAAkBpH,SAASC,cAAc,OAO/C,GANAmH,EAAgBjH,MAAMC,QAAU,sCAEvBhf,KAAKse,MAAMlB,QAAQG,IAAIf,YAI5Bxc,KAAK2lB,iBAAkB,CACzB,MAAMpG,EAAYX,SAASC,cAAc,UACzCU,EAAUW,YAAc,SACxBX,EAAUR,MAAMC,QAAU,sBACbhf,KAAKse,MAAMlB,QAAQrb,QAAQya,kCAClBxc,KAAKse,MAAMvD,OAAOiB,4BAC7Bhc,KAAKse,MAAMvD,OAAOkB,qEAEVjc,KAAKse,MAAMlB,QAAQC,aAAab,2BACpCxc,KAAKse,MAAMlC,WAAWE,SAASE,6BAC7Bxc,KAAKse,MAAMlC,WAAWQ,WAAWE,iCACjC9c,KAAKse,MAAMlC,WAAWC,mFAIvCkD,EAAUvF,iBAAiB,aAAc,KACvCuF,EAAUR,MAAMe,QAAU,QAE5BP,EAAUvF,iBAAiB,aAAc,KACvCuF,EAAUR,MAAMe,QAAU,MAE5BP,EAAUvF,iBAAiB,QAAS,KAClCha,KAAK2lB,uBAEPK,EAAgB1G,YAAYC,EAC9B,CAGA,GAAIvf,KAAKoe,cAAe,CACtB,MAAMsB,EAASd,SAASC,cAAc,UACtCa,EAAOQ,YAAc,MACrBR,EAAOX,MAAMC,QAAU,sBACVhf,KAAKse,MAAMlB,QAAQrb,QAAQya,kCAClBxc,KAAKse,MAAMvD,OAAOS,8BAC7Bxb,KAAKse,MAAMvD,OAAOU,mDACPzb,KAAKse,MAAMvD,OAAOmB,mCACrBlc,KAAKse,MAAMlB,QAAQC,aAAab,2BACpCxc,KAAKse,MAAMlC,WAAWE,SAASE,6BAC7Bxc,KAAKse,MAAMlC,WAAWQ,WAAWE,iCACjC9c,KAAKse,MAAMlC,WAAWC,mFAIvCqD,EAAO1F,iBAAiB,aAAc,KACpC0F,EAAOX,MAAMe,QAAU,QAEzBJ,EAAO1F,iBAAiB,aAAc,KACpC0F,EAAOX,MAAMe,QAAU,MAEzBJ,EAAO1F,iBAAiB,QAAS,KAC/Bha,KAAKoe,oBAEP4H,EAAgB1G,YAAYI,EAC9B,CAEIsG,EAAgBC,SAASzlB,OAAS,GACpCR,KAAKmlB,UAAU7F,YAAY0G,GAI7BR,EAAOlG,YAAYtf,KAAKmlB,WACxBnlB,KAAKolB,SAAU,EAGfplB,KAAKkmB,eACP,CAKQ,aAAAA,GACFlmB,KAAKkZ,gBACPhC,cAAclX,KAAKkZ,gBAGrBlZ,KAAKkZ,eAAiB5D,OAAOwB,YAAY,KACvC,GAAI9W,KAAKke,aAAele,KAAK0lB,gBAAiB,CAC5C,MAAMS,EAAUnmB,KAAK0lB,kBACrB1lB,KAAKke,YAAYgC,YAAciG,EAG/B,MAAOzO,GAAWyO,EAAQ5lB,MAAM,KAAK6lB,IAAIC,SACpCC,MAAM5O,IAAYA,EAAU,GAC/B1X,KAAKke,YAAYa,MAAMwH,MAAQvmB,KAAKse,MAAMvD,OAAOe,YACjD9b,KAAKke,YAAYa,MAAMnC,WAAa5c,KAAKse,MAAMlC,WAAWQ,WAAWI,OAErEhd,KAAKke,YAAYa,MAAMwH,MAAQvmB,KAAKse,MAAMvD,OAAOE,WACjDjb,KAAKke,YAAYa,MAAMnC,WAAa5c,KAAKse,MAAMlC,WAAWQ,WAAWE,OAEzE,GACC,IACL,CAKA,OAAAyI,GACMvlB,KAAKkZ,iBACPhC,cAAclX,KAAKkZ,gBACnBlZ,KAAKkZ,eAAiB,MAGpBlZ,KAAKmlB,WAAanlB,KAAKmlB,UAAUhF,YACnCngB,KAAKmlB,UAAUhF,WAAWC,YAAYpgB,KAAKmlB,WAG7CnlB,KAAKmlB,UAAY,KACjBnlB,KAAKke,YAAc,KACnBle,KAAKolB,SAAU,CACjB,CAKA,SAAAoB,GACE,OAAOxmB,KAAKolB,OACd,CAKA,WAAAqB,CAAY3I,GACV,MAAMJ,EAA4B,SAAdI,GAAuC,SAAdA,GAAwB9d,KAAKqe,iBAI1E,GAHAre,KAAKse,MAAQb,GAASC,GAGlB1d,KAAKolB,SAAWplB,KAAKmlB,WAAanlB,KAAKmlB,UAAUuB,cAAe,CAClE,MAAMC,EAAS3mB,KAAKmlB,UAAUuB,cACxBrjB,EAAU,CACdsM,QAAS3P,KAAK0lB,gBACdrG,SAAUrf,KAAK2lB,iBACfxG,MAAOnf,KAAKoe,eAEdpe,KAAKulB,UACLvlB,KAAKqlB,MAAMsB,EAAQtjB,EACrB,CACF,uIJoCK,SAA8Bib,GACnC,MAAO,0BACcA,EAAMvD,OAAOC,qCACbsD,EAAMvD,OAAOE,+BACnBqD,EAAMvD,OAAOG,oCACFoD,EAAMvD,OAAOI,sCACrBmD,EAAMvD,OAAOO,0CACFgD,EAAMvD,OAAOQ,2CACtB+C,EAAMvD,OAAOS,8CACF8C,EAAMvD,OAAOU,yCAC5B6C,EAAMvD,OAAOW,sCACF4C,EAAMvD,OAAOY,sCACvB2C,EAAMvD,OAAOa,wCACF0C,EAAMvD,OAAOc,4CACnByC,EAAMvD,OAAOe,kDACFwC,EAAMvD,OAAOgB,6CAC5BuC,EAAMvD,OAAOiB,0CACFsC,EAAMvD,OAAOkB,wCACzBqC,EAAMvD,OAAOmB,4BACdoC,EAAMvD,OAAOtY,0BACd6b,EAAMvD,OAAOoB,YAC1ByK,MACJ,4BE1RO,WACL,MAAyB,oBAAXtR,aAAqD,IAApBA,OAAOsJ,QACxD","x_google_ignoreList":[2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29]}