@nice2dev/ui-security 1.0.10

package/dist/index.mjs

@@ -0,0 +1,3997 @@
+import { jsx as c, jsxs as R, Fragment as Re } from "react/jsx-runtime";
+import { useContext as Ce, createContext as Pe, useRef as V, useState as j, useCallback as G, useEffect as te, useMemo as se } from "react";
+const Ee = {
+  low: 0.7,
+  medium: 0.8,
+  high: 0.85,
+  critical: 0.95
+}, Fe = {
+  matchThreshold: 0.85,
+  timeout: 3e4,
+  maxRetries: 3,
+  livenessDetection: !0,
+  verifyEndpoint: "",
+  authToken: "",
+  showFeedback: !0,
+  hapticFeedback: !0,
+  locale: "en",
+  securityLevel: "high",
+  antiSpoofing: !0
+};
+function de(e) {
+  const t = { ...Fe, ...e };
+  return e != null && e.matchThreshold || (t.matchThreshold = Ee[t.securityLevel]), t;
+}
+async function ce(e) {
+  const t = new TextEncoder().encode(e), r = await crypto.subtle.digest("SHA-256", t);
+  return Array.from(new Uint8Array(r)).map((n) => n.toString(16).padStart(2, "0")).join("");
+}
+function he(e = 8) {
+  const t = new Uint8Array(e);
+  return crypto.getRandomValues(t), Array.from(t).map((r) => r.toString(36).padStart(2, "0")).join("").slice(0, e);
+}
+function ze(e) {
+  const t = new Uint32Array(1);
+  return crypto.getRandomValues(t), t[0] % e;
+}
+function Ne(e, t) {
+  return Math.sqrt((e.x - t.x) ** 2 + (e.y - t.y) ** 2);
+}
+async function fe(e = "user") {
+  return navigator.mediaDevices.getUserMedia({
+    video: { facingMode: e, width: { ideal: 1280 }, height: { ideal: 720 } },
+    audio: !1
+  });
+}
+function ae(e, t, r) {
+  const n = t ?? e.videoWidth, i = r ?? e.videoHeight, s = document.createElement("canvas");
+  s.width = n, s.height = i;
+  const o = s.getContext("2d");
+  o.drawImage(e, 0, 0, n, i);
+  const a = o.getImageData(0, 0, n, i);
+  return { canvas: s, ctx: o, imageData: a };
+}
+function oe(e) {
+  const t = new Uint8Array(e.width * e.height), r = e.data;
+  for (let n = 0; n < t.length; n++) {
+    const i = n * 4;
+    t[n] = Math.round(0.299 * r[i] + 0.587 * r[i + 1] + 0.114 * r[i + 2]);
+  }
+  return t;
+}
+function Se(e, t, r) {
+  const n = new Uint8Array(t * r), i = [1, 2, 1, 2, 4, 2, 1, 2, 1], s = 16;
+  for (let o = 1; o < r - 1; o++)
+    for (let a = 1; a < t - 1; a++) {
+      let g = 0, v = 0;
+      for (let f = -1; f <= 1; f++)
+        for (let m = -1; m <= 1; m++)
+          g += e[(o + f) * t + (a + m)] * i[v++];
+      n[o * t + a] = Math.round(g / s);
+    }
+  return n;
+}
+function Le(e, t, r) {
+  const n = new Uint8Array(t * r);
+  for (let i = 1; i < r - 1; i++)
+    for (let s = 1; s < t - 1; s++) {
+      const o = -e[(i - 1) * t + (s - 1)] + e[(i - 1) * t + (s + 1)] + -2 * e[i * t + (s - 1)] + 2 * e[i * t + (s + 1)] + -e[(i + 1) * t + (s - 1)] + e[(i + 1) * t + (s + 1)], a = -e[(i - 1) * t + (s - 1)] - 2 * e[(i - 1) * t + s] - e[(i - 1) * t + (s + 1)] + e[(i + 1) * t + (s - 1)] + 2 * e[(i + 1) * t + s] + e[(i + 1) * t + (s + 1)];
+      n[i * t + s] = Math.min(255, Math.round(Math.sqrt(o * o + a * a)));
+    }
+  return n;
+}
+function $e(e) {
+  const t = new Array(256).fill(0);
+  for (const v of e)
+    t[v]++;
+  const r = e.length;
+  let n = 0;
+  for (let v = 0; v < 256; v++)
+    n += v * t[v];
+  let i = 0, s = 0, o = 0, a = 0;
+  for (let v = 0; v < 256; v++) {
+    if (s += t[v], s === 0)
+      continue;
+    const f = r - s;
+    if (f === 0)
+      break;
+    i += v * t[v];
+    const m = i / s, k = (n - i) / f, p = s * f * (m - k) ** 2;
+    p > o && (o = p, a = v);
+  }
+  const g = new Uint8Array(e.length);
+  for (let v = 0; v < e.length; v++)
+    g[v] = e[v] > a ? 255 : 0;
+  return { threshold: a, binary: g };
+}
+function je(e, t = 0.3) {
+  var y;
+  const r = e.width, n = e.height, i = oe(e), s = Se(i, r, n), o = Le(s, r, n), { binary: a } = $e(o), g = [], v = [], f = [];
+  for (let S = 2; S < n - 2; S++)
+    for (let u = 2; u < r - 2; u++) {
+      if (a[S * r + u] === 0)
+        continue;
+      const x = [
+        a[(S - 1) * r + u],
+        a[(S - 1) * r + (u + 1)],
+        a[S * r + (u + 1)],
+        a[(S + 1) * r + (u + 1)],
+        a[(S + 1) * r + u],
+        a[(S + 1) * r + (u - 1)],
+        a[S * r + (u - 1)],
+        a[(S - 1) * r + (u - 1)]
+      ];
+      let l = 0;
+      for (let W = 0; W < 8; W++) {
+        const H = x[W] > 0 ? 1 : 0, Z = x[(W + 1) % 8] > 0 ? 1 : 0;
+        l += Math.abs(H - Z);
+      }
+      l /= 2;
+      let h = 0, L = 0;
+      for (let W = -2; W <= 2; W++)
+        for (let H = -2; H <= 2; H++)
+          h += o[(S + W) * r + (u + H)], L++;
+      const q = h / L / 255;
+      if (q < t)
+        continue;
+      const Y = Math.atan2(
+        i[(S + 1) * r + u] - i[(S - 1) * r + u],
+        i[S * r + (u + 1)] - i[S * r + (u - 1)]
+      );
+      l === 1 ? g.push({ x: u / r, y: S / n, angle: Y, type: "ending", quality: q }) : l === 3 && g.push({ x: u / r, y: S / n, angle: Y, type: "bifurcation", quality: q });
+    }
+  g.sort((S, u) => u.quality - S.quality);
+  const m = g.slice(0, 120);
+  if (m.length > 5) {
+    const S = m.reduce((x, l) => x + l.x, 0) / m.length, u = m.reduce((x, l) => x + l.y, 0) / m.length;
+    v.push({ x: S, y: u });
+  }
+  const k = m.length, p = m.filter((S) => S.type === "ending").length, C = m.filter((S) => S.type === "bifurcation").length / (p + 1);
+  let b = "loop-right";
+  C > 1.5 ? b = "whorl" : C < 0.5 ? b = "arch" : ((y = v[0]) == null ? void 0 : y.x) < 0.45 && (b = "loop-left");
+  const T = m.length > 20 ? m.reduce((S, u) => S + u.quality, 0) / m.length : 0;
+  return {
+    minutiae: m,
+    corePoints: v,
+    deltaPoints: f,
+    ridgeCount: k,
+    patternType: b,
+    quality: T
+  };
+}
+function Be(e, t) {
+  if (e.minutiae.length < 5 || t.minutiae.length < 5)
+    return 0;
+  let r = 0;
+  const n = 0.05, i = 0.5, s = /* @__PURE__ */ new Set();
+  for (const a of e.minutiae) {
+    let g = 1 / 0, v = -1;
+    for (let f = 0; f < t.minutiae.length; f++) {
+      if (s.has(f))
+        continue;
+      const m = t.minutiae[f];
+      if (a.type !== m.type)
+        continue;
+      const k = Ne(a, m), p = Math.abs(a.angle - m.angle);
+      k < n && p < i && k < g && (g = k, v = f);
+    }
+    v >= 0 && (r++, s.add(v));
+  }
+  const o = Math.min(e.minutiae.length, t.minutiae.length);
+  return o > 0 ? r / o : 0;
+}
+async function We(e, t) {
+  const r = JSON.stringify(e), n = await ce(r);
+  return {
+    id: `fp_${Date.now()}_${he()}`,
+    method: "fingerprint",
+    templateData: btoa(r),
+    enrolled: Date.now(),
+    label: t,
+    hash: n
+  };
+}
+function _e(e) {
+  return JSON.parse(atob(e.templateData));
+}
+function Ue(e, t = "left") {
+  const r = e.width, n = e.height, i = oe(e), s = Se(i, r, n);
+  let o = { cx: r / 2, cy: n / 2, r: Math.min(r, n) * 0.08, score: 1 / 0 };
+  for (let D = Math.round(n * 0.3); D < Math.round(n * 0.7); D += 2)
+    for (let C = Math.round(r * 0.3); C < Math.round(r * 0.7); C += 2)
+      for (let b = Math.round(Math.min(r, n) * 0.04); b < Math.round(Math.min(r, n) * 0.15); b += 2) {
+        let T = 0, y = 0;
+        for (let l = 0; l < Math.PI * 2; l += 0.3) {
+          const h = Math.round(C + b * Math.cos(l)), L = Math.round(D + b * Math.sin(l));
+          h >= 0 && h < r && L >= 0 && L < n && (T += s[L * r + h], y++);
+        }
+        const S = y > 0 ? T / y : 255, u = s[D * r + C], x = S * 0.5 + u * 0.5;
+        x < o.score && (o = { cx: C, cy: D, r: b, score: x });
+      }
+  const a = o.r * 3, g = {
+    cx: o.cx,
+    cy: o.cy,
+    r: Math.min(a, Math.min(r, n) * 0.4)
+  }, v = 256, f = [];
+  for (let D = 0; D < v; D++) {
+    const C = D / v * Math.PI * 2, b = o.r + (g.r - o.r) * 0.5, T = Math.round(o.cx + b * Math.cos(C)), y = Math.round(o.cy + b * Math.sin(C));
+    if (T >= 0 && T < r && y >= 0 && y < n) {
+      const S = Math.round(o.cx + b * Math.cos(C + 0.1)), u = Math.round(o.cy + b * Math.sin(C + 0.1)), x = s[y * r + T], l = S >= 0 && S < r && u >= 0 && u < n ? s[u * r + S] : x;
+      f.push(x > l ? 1 : 0);
+    } else
+      f.push(0);
+  }
+  const m = f.join(""), k = Math.PI * o.r ** 2, p = Math.min(1, Math.max(0, k / (r * n) * 100));
+  return {
+    irisCode: m,
+    pupil: o,
+    iris: g,
+    quality: p,
+    eye: t
+  };
+}
+function He(e, t) {
+  if (!e.irisCode || !t.irisCode)
+    return 0;
+  const r = Math.min(e.irisCode.length, t.irisCode.length);
+  if (r === 0)
+    return 0;
+  let n = 0, i = r;
+  for (let o = -8; o <= 8; o++) {
+    let a = 0;
+    for (let g = 0; g < r; g++) {
+      const v = (g + o + r) % r;
+      e.irisCode[g] !== t.irisCode[v] && a++;
+    }
+    a < i && (i = a);
+  }
+  n = i;
+  const s = n / r;
+  return Math.max(0, 1 - s * 2.5);
+}
+async function Oe(e, t) {
+  const r = JSON.stringify(e), n = await ce(r);
+  return {
+    id: `iris_${Date.now()}_${he()}`,
+    method: "iris",
+    templateData: btoa(r),
+    enrolled: Date.now(),
+    label: t,
+    hash: n
+  };
+}
+function qe(e) {
+  return JSON.parse(atob(e.templateData));
+}
+function ue(e) {
+  const t = e.width, r = e.height, n = e.data, i = new Uint8Array(t * r);
+  for (let u = 0; u < t * r; u++) {
+    const x = u * 4, l = n[x], h = n[x + 1], L = n[x + 2], q = 0.299 * l + 0.587 * h + 0.114 * L, Y = 128 - 0.169 * l - 0.331 * h + 0.5 * L, W = 128 + 0.5 * l - 0.419 * h - 0.081 * L;
+    Y >= 77 && Y <= 127 && W >= 133 && W <= 173 && q > 80 && (i[u] = 1);
+  }
+  let s = t, o = r, a = 0, g = 0, v = 0;
+  for (let u = 0; u < r; u++)
+    for (let x = 0; x < t; x++)
+      i[u * t + x] && (v++, x < s && (s = x), x > a && (a = x), u < o && (o = u), u > g && (g = u));
+  const f = a - s, m = g - o;
+  if (f < t * 0.1 || m < r * 0.1)
+    return null;
+  const k = { x: s, y: o, width: f, height: m }, p = [], D = oe(e), C = Math.max(1, Math.floor(f / 8)), b = Math.max(1, Math.floor(m / 16));
+  for (let u = 0; u < 16; u++)
+    for (let x = 0; x < 8; x++) {
+      const l = s + x * C + Math.floor(C / 2), h = o + u * b + Math.floor(b / 2);
+      l < t && h < r ? p.push(D[h * t + l] / 255) : p.push(0);
+    }
+  const T = [], y = { x: s + f / 2, y: o + m / 2 };
+  for (let u = 0; u < 68; u++) {
+    const x = u / 68 * Math.PI * 2, l = f * 0.4 * Math.cos(x), h = m * 0.45 * Math.sin(x);
+    T.push({
+      x: (y.x + l) / t,
+      y: (y.y + h) / r
+    });
+  }
+  const S = Math.min(1, v / (f * m) * 2);
+  return {
+    embedding: p,
+    boundingBox: k,
+    landmarks: T,
+    headPose: { yaw: 0, pitch: 0, roll: 0 },
+    quality: S
+  };
+}
+function ke(e, t) {
+  if (e.embedding.length !== t.embedding.length)
+    return 0;
+  let r = 0, n = 0, i = 0;
+  for (let o = 0; o < e.embedding.length; o++)
+    r += e.embedding[o] * t.embedding[o], n += e.embedding[o] ** 2, i += t.embedding[o] ** 2;
+  const s = Math.sqrt(n) * Math.sqrt(i);
+  return s > 0 ? (r / s + 1) / 2 : 0;
+}
+function Ke(e, t) {
+  const r = ue(e), n = ue(t);
+  return !r || !n ? { similarity: 0, cameraFeatures: r, refFeatures: n } : { similarity: ke(r, n), cameraFeatures: r, refFeatures: n };
+}
+async function Ge(e, t) {
+  const r = JSON.stringify(e), n = await ce(r);
+  return {
+    id: `face_${Date.now()}_${he()}`,
+    method: "face",
+    templateData: btoa(r),
+    enrolled: Date.now(),
+    label: t,
+    hash: n
+  };
+}
+function Je(e) {
+  return JSON.parse(atob(e.templateData));
+}
+function It() {
+  const e = [
+    "blink",
+    "smile",
+    "turn-left",
+    "turn-right",
+    "nod",
+    "raise-eyebrows"
+  ], t = e[ze(e.length)];
+  return { type: t, instruction: {
+    blink: "Please blink your eyes",
+    smile: "Please smile",
+    "turn-left": "Please turn your head left",
+    "turn-right": "Please turn your head right",
+    nod: "Please nod your head",
+    "raise-eyebrows": "Please raise your eyebrows"
+  }[t], completed: !1, confidence: 0 };
+}
+function Ae(e, t = 0.02) {
+  if (e.length < 2)
+    return { isLive: !1, confidence: 0, motionScore: 0 };
+  let r = 0;
+  for (let o = 1; o < e.length; o++) {
+    const a = oe(e[o - 1]), g = oe(e[o]);
+    let v = 0;
+    for (let f = 0; f < a.length; f++)
+      v += Math.abs(a[f] - g[f]);
+    r += v / (a.length * 255);
+  }
+  const n = r / (e.length - 1), i = n > t, s = Math.min(1, n / (t * 3));
+  return { isLive: i, confidence: s, motionScore: n };
+}
+function Te() {
+  return {
+    userAgent: navigator.userAgent,
+    platform: navigator.platform,
+    language: navigator.language,
+    screenResolution: [screen.width, screen.height],
+    timezone: Intl.DateTimeFormat().resolvedOptions().timeZone,
+    touchSupport: "ontouchstart" in window || navigator.maxTouchPoints > 0,
+    hardwareConcurrency: navigator.hardwareConcurrency ?? 0
+  };
+}
+async function le() {
+  const e = Te(), t = JSON.stringify(e);
+  return ce(t);
+}
+function Ie() {
+  return typeof window < "u" && !!window.PublicKeyCredential;
+}
+async function Ze() {
+  if (!Ie())
+    return !1;
+  try {
+    return await PublicKeyCredential.isUserVerifyingPlatformAuthenticatorAvailable();
+  } catch {
+    return !1;
+  }
+}
+async function Ye(e) {
+  const t = {
+    rp: { name: e.rpName, id: e.rpId },
+    user: {
+      id: new TextEncoder().encode(e.userId),
+      name: e.userName,
+      displayName: e.userDisplayName
+    },
+    challenge: e.challenge,
+    pubKeyCredParams: [
+      { alg: -7, type: "public-key" },
+      // ES256
+      { alg: -257, type: "public-key" }
+      // RS256
+    ],
+    authenticatorSelection: {
+      authenticatorAttachment: "platform",
+      userVerification: "required",
+      residentKey: "preferred"
+    },
+    timeout: e.timeout ?? 6e4,
+    attestation: "none"
+  };
+  return await navigator.credentials.create({ publicKey: t });
+}
+async function Xe(e) {
+  const t = {
+    rpId: e.rpId,
+    challenge: e.challenge,
+    allowCredentials: e.allowCredentials,
+    userVerification: "required",
+    timeout: e.timeout ?? 6e4
+  };
+  return await navigator.credentials.get({ publicKey: t });
+}
+async function ye(e, t, r) {
+  const n = { "Content-Type": "application/json" };
+  r && (n.Authorization = `Bearer ${r}`);
+  const i = await fetch(e, {
+    method: "POST",
+    headers: n,
+    body: JSON.stringify(t)
+  });
+  return i.ok ? i.json() : { verified: !1, message: `Server error: ${i.status}` };
+}
+const Qe = (e, t) => t, De = Pe(Qe), Dt = ({ t: e, children: t }) => /* @__PURE__ */ c(De.Provider, { value: e, children: t });
+function ee() {
+  return { t: Ce(De) };
+}
+const Ve = { sm: 200, md: 280, lg: 380 }, Mt = (e) => {
+  const {
+    mode: t,
+    enrolledTemplates: r = [],
+    fingerPosition: n = "right-index",
+    onEnroll: i,
+    onVerify: s,
+    onStatusChange: o,
+    onError: a,
+    className: g,
+    size: v = "md",
+    label: f,
+    showQuality: m = !0,
+    showMinutiae: k = !1,
+    instructionText: p,
+    cameraFacing: D = "environment",
+    ...C
+  } = e, { t: b } = ee(), T = de(C), y = Ve[v], S = V(null), u = V(null), x = V(null), [l, h] = j("idle"), [L, q] = j(0), [Y, W] = j(null), [H, Z] = j(0), [_, $] = j(""), B = G(
+    (E) => {
+      h(E), o == null || o(E);
+    },
+    [o]
+  ), F = G(async () => {
+    try {
+      const E = await fe(D);
+      x.current = E, S.current && (S.current.srcObject = E, await S.current.play()), B("idle"), $(b("security.fingerprint.placeFingerPrompt", "Place your finger on the scanner"));
+    } catch (E) {
+      a == null || a(E instanceof Error ? E : new Error(String(E))), $(b("security.fingerprint.cameraError", "Camera access denied")), B("error");
+    }
+  }, [D, b, B, a]), K = G(() => {
+    var E;
+    (E = x.current) == null || E.getTracks().forEach((I) => I.stop()), x.current = null;
+  }, []);
+  te(() => (F(), K), [F, K]);
+  const U = G(async () => {
+    if (!(!S.current || l === "processing" || l === "success")) {
+      B("scanning"), $(b("security.fingerprint.scanning", "Scanning…"));
+      try {
+        const { imageData: E } = ae(S.current);
+        B("processing"), $(b("security.fingerprint.processing", "Processing fingerprint…"));
+        const I = je(E);
+        if (W(I), q(I.quality), I.quality < 0.2) {
+          $(b("security.fingerprint.lowQuality", "Low quality — try again")), B("idle");
+          return;
+        }
+        if (t === "enroll") {
+          const z = await We(I, f ?? n);
+          i == null || i(z, I), $(b("security.fingerprint.enrolled", "Fingerprint enrolled successfully")), B("success");
+        } else {
+          let z = 0;
+          for (const d of r) {
+            const A = _e(d), N = Be(I, A);
+            N > z && (z = N);
+          }
+          const M = z >= T.matchThreshold, w = {
+            success: M,
+            confidence: z,
+            method: "fingerprint",
+            timestamp: Date.now(),
+            duration: 0,
+            payload: btoa(JSON.stringify(I))
+          };
+          if (M && T.verifyEndpoint) {
+            const d = await le(), A = await ye(
+              T.verifyEndpoint,
+              {
+                method: "fingerprint",
+                templateData: w.payload,
+                matchScore: z,
+                deviceFingerprint: d
+              },
+              T.authToken
+            );
+            w.success = A.verified;
+          }
+          w.success ? ($(b("security.fingerprint.verified", "Fingerprint verified")), B("success")) : (Z((d) => d + 1), H + 1 >= T.maxRetries ? ($(b("security.fingerprint.maxAttempts", "Maximum attempts reached")), B("failure")) : ($(b("security.fingerprint.noMatch", "No match — try again")), B("idle"))), s == null || s(w);
+        }
+      } catch (E) {
+        a == null || a(E instanceof Error ? E : new Error(String(E))), $(b("security.fingerprint.error", "Scan error — try again")), B("error");
+      }
+    }
+  }, [
+    l,
+    t,
+    r,
+    T,
+    b,
+    B,
+    i,
+    s,
+    a,
+    f,
+    n,
+    H
+  ]);
+  te(() => {
+    if (!k || !Y || !u.current)
+      return;
+    const E = u.current.getContext("2d");
+    E && (E.clearRect(0, 0, y, y), Y.minutiae.forEach((I) => {
+      E.beginPath(), E.arc(I.x * y, I.y * y, 2, 0, Math.PI * 2), E.fillStyle = I.type === "ending" ? "#10b981" : "#f59e0b", E.fill(), E.beginPath(), E.moveTo(I.x * y, I.y * y), E.lineTo(I.x * y + Math.cos(I.angle) * 8, I.y * y + Math.sin(I.angle) * 8), E.strokeStyle = E.fillStyle, E.lineWidth = 1, E.stroke();
+    }));
+  }, [Y, k, y]);
+  const X = l === "success" ? "var(--security-success)" : l === "failure" || l === "error" ? "var(--security-error)" : l === "scanning" || l === "processing" ? "var(--security-biometric)" : "var(--security-border)";
+  return /* @__PURE__ */ R(
+    "div",
+    {
+      className: g,
+      style: { display: "inline-flex", flexDirection: "column", alignItems: "center", gap: 12 },
+      children: [
+        f && /* @__PURE__ */ c("div", { style: { fontSize: 14, fontWeight: 600, color: "var(--security-text)" }, children: f }),
+        /* @__PURE__ */ R(
+          "div",
+          {
+            style: {
+              width: y,
+              height: y,
+              position: "relative",
+              borderRadius: "var(--security-radius-lg)",
+              overflow: "hidden",
+              border: `3px solid ${X}`,
+              boxShadow: l === "scanning" ? `0 0 20px ${X}` : "var(--security-shadow)",
+              transition: "border-color 0.3s, box-shadow 0.3s"
+            },
+            children: [
+              /* @__PURE__ */ c(
+                "video",
+                {
+                  ref: S,
+                  style: { width: "100%", height: "100%", objectFit: "cover" },
+                  playsInline: !0,
+                  muted: !0
+                }
+              ),
+              k && /* @__PURE__ */ c(
+                "canvas",
+                {
+                  ref: u,
+                  width: y,
+                  height: y,
+                  style: { position: "absolute", inset: 0, pointerEvents: "none" }
+                }
+              ),
+              /* @__PURE__ */ R(
+                "svg",
+                {
+                  viewBox: "0 0 100 100",
+                  style: {
+                    position: "absolute",
+                    inset: 0,
+                    width: "100%",
+                    height: "100%",
+                    pointerEvents: "none",
+                    opacity: 0.3
+                  },
+                  children: [
+                    /* @__PURE__ */ c(
+                      "ellipse",
+                      {
+                        cx: "50",
+                        cy: "50",
+                        rx: "28",
+                        ry: "38",
+                        fill: "none",
+                        stroke: "white",
+                        strokeWidth: "1",
+                        strokeDasharray: "4 3"
+                      }
+                    ),
+                    /* @__PURE__ */ c(
+                      "ellipse",
+                      {
+                        cx: "50",
+                        cy: "50",
+                        rx: "20",
+                        ry: "28",
+                        fill: "none",
+                        stroke: "white",
+                        strokeWidth: "0.5",
+                        strokeDasharray: "2 3"
+                      }
+                    )
+                  ]
+                }
+              ),
+              (l === "scanning" || l === "processing") && /* @__PURE__ */ c(
+                "div",
+                {
+                  style: {
+                    position: "absolute",
+                    inset: 0,
+                    display: "flex",
+                    alignItems: "center",
+                    justifyContent: "center",
+                    background: "rgba(0,0,0,0.3)"
+                  },
+                  children: /* @__PURE__ */ c(
+                    "div",
+                    {
+                      style: {
+                        width: 60,
+                        height: 60,
+                        borderRadius: "50%",
+                        border: "3px solid transparent",
+                        borderTopColor: X,
+                        animation: "spin 0.8s linear infinite"
+                      }
+                    }
+                  )
+                }
+              )
+            ]
+          }
+        ),
+        m && L > 0 && /* @__PURE__ */ c(
+          "div",
+          {
+            style: {
+              width: y,
+              height: 4,
+              background: "var(--security-bg-panel)",
+              borderRadius: 2,
+              overflow: "hidden"
+            },
+            children: /* @__PURE__ */ c(
+              "div",
+              {
+                style: {
+                  width: `${L * 100}%`,
+                  height: "100%",
+                  background: L > 0.6 ? "var(--security-success)" : L > 0.3 ? "var(--security-warning)" : "var(--security-error)",
+                  transition: "width 0.3s"
+                }
+              }
+            )
+          }
+        ),
+        /* @__PURE__ */ c(
+          "div",
+          {
+            style: {
+              fontSize: 13,
+              color: "var(--security-text-secondary)",
+              textAlign: "center",
+              minHeight: 20
+            },
+            children: p ?? _
+          }
+        ),
+        l !== "success" && l !== "failure" && /* @__PURE__ */ c(
+          "button",
+          {
+            onClick: U,
+            disabled: l === "scanning" || l === "processing",
+            style: {
+              padding: "10px 24px",
+              fontSize: 14,
+              fontWeight: 600,
+              background: "var(--security-biometric)",
+              color: "#fff",
+              border: "none",
+              borderRadius: "var(--security-radius)",
+              cursor: "pointer",
+              opacity: l === "scanning" || l === "processing" ? 0.6 : 1
+            },
+            children: t === "enroll" ? b("security.fingerprint.captureBtn", "🖐️ Capture Fingerprint") : b("security.fingerprint.verifyBtn", "🖐️ Verify Fingerprint")
+          }
+        ),
+        (l === "failure" || l === "error") && /* @__PURE__ */ c(
+          "button",
+          {
+            onClick: () => {
+              Z(0), B("idle"), $("");
+            },
+            style: {
+              padding: "8px 20px",
+              fontSize: 13,
+              background: "var(--security-bg-panel)",
+              color: "var(--security-text)",
+              border: "1px solid var(--security-border)",
+              borderRadius: "var(--security-radius)",
+              cursor: "pointer"
+            },
+            children: b("security.common.retry", "Try Again")
+          }
+        ),
+        /* @__PURE__ */ c("style", { children: "@keyframes spin { to { transform: rotate(360deg); } }" })
+      ]
+    }
+  );
+}, et = { sm: 220, md: 300, lg: 400 }, Rt = (e) => {
+  const {
+    mode: t,
+    enrolledTemplates: r = [],
+    eye: n = "right",
+    onEnroll: i,
+    onVerify: s,
+    onStatusChange: o,
+    onError: a,
+    className: g,
+    size: v = "md",
+    label: f,
+    showQuality: m = !0,
+    showSegmentation: k = !0,
+    showGuide: p = !0,
+    instructionText: D,
+    ...C
+  } = e, { t: b } = ee(), T = de(C), y = et[v], S = V(null), u = V(null), x = V(null), l = V([]), [h, L] = j("idle"), [q, Y] = j(0), [W, H] = j(null), [Z, _] = j(0), [$, B] = j(""), F = G(
+    (I) => {
+      L(I), o == null || o(I);
+    },
+    [o]
+  ), K = G(async () => {
+    try {
+      const I = await fe("user");
+      x.current = I, S.current && (S.current.srcObject = I, await S.current.play()), F("idle"), B(b("security.iris.alignEyePrompt", "Align your eye with the circle"));
+    } catch (I) {
+      a == null || a(I instanceof Error ? I : new Error(String(I))), B(b("security.iris.cameraError", "Camera access denied")), F("error");
+    }
+  }, [b, F, a]), U = G(() => {
+    var I;
+    (I = x.current) == null || I.getTracks().forEach((z) => z.stop()), x.current = null;
+  }, []);
+  te(() => (K(), U), [K, U]);
+  const X = G(async () => {
+    if (!(!S.current || h === "processing" || h === "success")) {
+      F("scanning"), B(b("security.iris.scanning", "Scanning iris…"));
+      try {
+        const I = [];
+        for (let w = 0; w < 5; w++) {
+          const { imageData: d } = ae(S.current);
+          I.push(d), await new Promise((A) => setTimeout(A, 200));
+        }
+        if (l.current = I, T.livenessDetection && !Ae(I).isLive) {
+          B(
+            b("security.iris.notLive", "Liveness check failed — please blink or move slightly")
+          ), F("idle");
+          return;
+        }
+        F("processing"), B(b("security.iris.processing", "Processing iris pattern…"));
+        const z = I[I.length - 1], M = Ue(z, n === "both" ? "left" : n);
+        if (!M) {
+          B(b("security.iris.noIrisDetected", "No iris detected — adjust position")), F("idle");
+          return;
+        }
+        if (H(M), Y(M.quality), M.quality < 0.1) {
+          B(b("security.iris.lowQuality", "Low quality — move closer")), F("idle");
+          return;
+        }
+        if (k && u.current) {
+          const w = u.current.getContext("2d");
+          if (w) {
+            w.clearRect(0, 0, y, y);
+            const d = y / z.width, A = y / z.height;
+            w.beginPath(), w.arc(
+              M.pupil.cx * d,
+              M.pupil.cy * A,
+              M.pupil.r * d,
+              0,
+              Math.PI * 2
+            ), w.strokeStyle = "#ef4444", w.lineWidth = 2, w.stroke(), w.beginPath(), w.arc(
+              M.iris.cx * d,
+              M.iris.cy * A,
+              M.iris.r * d,
+              0,
+              Math.PI * 2
+            ), w.strokeStyle = "#3b82f6", w.lineWidth = 2, w.stroke();
+          }
+        }
+        if (t === "enroll") {
+          const w = await Oe(M, f ?? `${n} eye`);
+          i == null || i(w, M), B(b("security.iris.enrolled", "Iris enrolled successfully")), F("success");
+        } else {
+          let w = 0;
+          for (const N of r) {
+            const P = qe(N), O = He(M, P);
+            O > w && (w = O);
+          }
+          const d = w >= T.matchThreshold, A = {
+            success: d,
+            confidence: w,
+            method: "iris",
+            timestamp: Date.now(),
+            duration: 0,
+            livenessPassed: T.livenessDetection ? !0 : void 0,
+            payload: btoa(JSON.stringify(M))
+          };
+          if (d && T.verifyEndpoint) {
+            const N = await le(), P = await ye(
+              T.verifyEndpoint,
+              {
+                method: "iris",
+                templateData: A.payload,
+                matchScore: w,
+                deviceFingerprint: N
+              },
+              T.authToken
+            );
+            A.success = P.verified;
+          }
+          A.success ? (B(b("security.iris.verified", "Iris verified")), F("success")) : (_((N) => N + 1), Z + 1 >= T.maxRetries ? (B(b("security.iris.maxAttempts", "Maximum attempts reached")), F("failure")) : (B(b("security.iris.noMatch", "No match — try again")), F("idle"))), s == null || s(A);
+        }
+      } catch (I) {
+        a == null || a(I instanceof Error ? I : new Error(String(I))), B(b("security.iris.error", "Scan error")), F("error");
+      }
+    }
+  }, [
+    h,
+    t,
+    r,
+    T,
+    b,
+    F,
+    i,
+    s,
+    a,
+    f,
+    n,
+    Z,
+    k,
+    y
+  ]), E = h === "success" ? "var(--security-success)" : h === "failure" || h === "error" ? "var(--security-error)" : h === "scanning" || h === "processing" ? "var(--security-biometric)" : "var(--security-border)";
+  return /* @__PURE__ */ R(
+    "div",
+    {
+      className: g,
+      style: { display: "inline-flex", flexDirection: "column", alignItems: "center", gap: 12 },
+      children: [
+        f && /* @__PURE__ */ c("div", { style: { fontSize: 14, fontWeight: 600, color: "var(--security-text)" }, children: f }),
+        /* @__PURE__ */ R(
+          "div",
+          {
+            style: {
+              width: y,
+              height: y,
+              position: "relative",
+              borderRadius: "50%",
+              overflow: "hidden",
+              border: `3px solid ${E}`,
+              boxShadow: h === "scanning" ? `0 0 30px ${E}` : "var(--security-shadow)",
+              transition: "border-color 0.3s, box-shadow 0.3s"
+            },
+            children: [
+              /* @__PURE__ */ c(
+                "video",
+                {
+                  ref: S,
+                  style: { width: "100%", height: "100%", objectFit: "cover" },
+                  playsInline: !0,
+                  muted: !0
+                }
+              ),
+              k && /* @__PURE__ */ c(
+                "canvas",
+                {
+                  ref: u,
+                  width: y,
+                  height: y,
+                  style: { position: "absolute", inset: 0, pointerEvents: "none" }
+                }
+              ),
+              p && h === "idle" && /* @__PURE__ */ R(
+                "svg",
+                {
+                  viewBox: "0 0 100 100",
+                  style: {
+                    position: "absolute",
+                    inset: 0,
+                    width: "100%",
+                    height: "100%",
+                    pointerEvents: "none",
+                    opacity: 0.4
+                  },
+                  children: [
+                    /* @__PURE__ */ c(
+                      "circle",
+                      {
+                        cx: "50",
+                        cy: "50",
+                        r: "35",
+                        fill: "none",
+                        stroke: "white",
+                        strokeWidth: "1",
+                        strokeDasharray: "5 3"
+                      }
+                    ),
+                    /* @__PURE__ */ c(
+                      "circle",
+                      {
+                        cx: "50",
+                        cy: "50",
+                        r: "15",
+                        fill: "none",
+                        stroke: "white",
+                        strokeWidth: "0.5",
+                        strokeDasharray: "3 3"
+                      }
+                    ),
+                    /* @__PURE__ */ c("line", { x1: "50", y1: "10", x2: "50", y2: "25", stroke: "white", strokeWidth: "0.5", opacity: "0.5" }),
+                    /* @__PURE__ */ c("line", { x1: "50", y1: "75", x2: "50", y2: "90", stroke: "white", strokeWidth: "0.5", opacity: "0.5" }),
+                    /* @__PURE__ */ c("line", { x1: "10", y1: "50", x2: "25", y2: "50", stroke: "white", strokeWidth: "0.5", opacity: "0.5" }),
+                    /* @__PURE__ */ c("line", { x1: "75", y1: "50", x2: "90", y2: "50", stroke: "white", strokeWidth: "0.5", opacity: "0.5" })
+                  ]
+                }
+              ),
+              (h === "scanning" || h === "processing") && /* @__PURE__ */ c(
+                "div",
+                {
+                  style: {
+                    position: "absolute",
+                    inset: 0,
+                    display: "flex",
+                    alignItems: "center",
+                    justifyContent: "center",
+                    background: "rgba(0,0,0,0.2)"
+                  },
+                  children: /* @__PURE__ */ c(
+                    "div",
+                    {
+                      style: {
+                        width: y * 0.7,
+                        height: 3,
+                        background: E,
+                        animation: "irisLineAnim 1.5s ease-in-out infinite",
+                        position: "absolute",
+                        opacity: 0.7
+                      }
+                    }
+                  )
+                }
+              )
+            ]
+          }
+        ),
+        /* @__PURE__ */ c(
+          "div",
+          {
+            style: {
+              fontSize: 11,
+              color: "var(--security-text-muted)",
+              textTransform: "uppercase",
+              letterSpacing: 1
+            },
+            children: n === "both" ? b("security.iris.bothEyes", "Both eyes") : n === "left" ? b("security.iris.leftEye", "Left eye") : b("security.iris.rightEye", "Right eye")
+          }
+        ),
+        m && q > 0 && /* @__PURE__ */ c(
+          "div",
+          {
+            style: {
+              width: y * 0.6,
+              height: 4,
+              background: "var(--security-bg-panel)",
+              borderRadius: 2,
+              overflow: "hidden"
+            },
+            children: /* @__PURE__ */ c(
+              "div",
+              {
+                style: {
+                  width: `${Math.min(100, q * 300)}%`,
+                  height: "100%",
+                  background: q > 0.3 ? "var(--security-success)" : q > 0.1 ? "var(--security-warning)" : "var(--security-error)",
+                  transition: "width 0.3s"
+                }
+              }
+            )
+          }
+        ),
+        /* @__PURE__ */ c(
+          "div",
+          {
+            style: {
+              fontSize: 13,
+              color: "var(--security-text-secondary)",
+              textAlign: "center",
+              minHeight: 20
+            },
+            children: D ?? $
+          }
+        ),
+        h !== "success" && h !== "failure" && /* @__PURE__ */ c(
+          "button",
+          {
+            onClick: X,
+            disabled: h === "scanning" || h === "processing",
+            style: {
+              padding: "10px 24px",
+              fontSize: 14,
+              fontWeight: 600,
+              background: "var(--security-biometric)",
+              color: "#fff",
+              border: "none",
+              borderRadius: "var(--security-radius)",
+              cursor: "pointer",
+              opacity: h === "scanning" || h === "processing" ? 0.6 : 1
+            },
+            children: t === "enroll" ? b("security.iris.captureBtn", "👁️ Capture Iris") : b("security.iris.verifyBtn", "👁️ Verify Iris")
+          }
+        ),
+        (h === "failure" || h === "error") && /* @__PURE__ */ c(
+          "button",
+          {
+            onClick: () => {
+              _(0), F("idle"), B("");
+            },
+            style: {
+              padding: "8px 20px",
+              fontSize: 13,
+              background: "var(--security-bg-panel)",
+              color: "var(--security-text)",
+              border: "1px solid var(--security-border)",
+              borderRadius: "var(--security-radius)",
+              cursor: "pointer"
+            },
+            children: b("security.common.retry", "Try Again")
+          }
+        ),
+        /* @__PURE__ */ c("style", { children: `
+        @keyframes irisLineAnim {
+          0%, 100% { transform: translateY(-${y * 0.3}px); opacity: 0.3; }
+          50% { transform: translateY(${y * 0.3}px); opacity: 0.8; }
+        }
+      ` })
+      ]
+    }
+  );
+}, tt = { sm: 240, md: 320, lg: 440 }, Ct = (e) => {
+  const {
+    mode: t,
+    enrolledTemplates: r = [],
+    referencePhoto: n,
+    onEnroll: i,
+    onVerify: s,
+    onStatusChange: o,
+    onError: a,
+    className: g,
+    size: v = "md",
+    label: f,
+    showQuality: m = !0,
+    showBoundingBox: k = !0,
+    livenessSteps: p = 1,
+    showReference: D = !0,
+    instructionText: C,
+    ...b
+  } = e, { t: T } = ee(), y = de(b), S = tt[v], u = V(null), x = V(null), l = V(null), [h, L] = j("idle"), [q, Y] = j(0), [W, H] = j(0), [Z, _] = j(""), [$, B] = j(null), [F, K] = j(0), U = G(
+    (w) => {
+      L(w), o == null || o(w);
+    },
+    [o]
+  ), X = G(async () => {
+    try {
+      const w = await fe("user");
+      l.current = w, u.current && (u.current.srcObject = w, await u.current.play()), U("idle"), _(T("security.face.lookAtCamera", "Look at the camera"));
+    } catch (w) {
+      a == null || a(w instanceof Error ? w : new Error(String(w))), _(T("security.face.cameraError", "Camera access denied")), U("error");
+    }
+  }, [T, U, a]), E = G(() => {
+    var w;
+    (w = l.current) == null || w.getTracks().forEach((d) => d.stop()), l.current = null;
+  }, []);
+  te(() => (X(), E), [X, E]);
+  const I = G(
+    (w) => {
+      var ge, me, ve;
+      const d = (ge = x.current) == null ? void 0 : ge.getContext("2d");
+      if (!d)
+        return;
+      const A = x.current.width, N = x.current.height;
+      if (d.clearRect(0, 0, A, N), !w || !k)
+        return;
+      const P = w.boundingBox, O = A / (((me = u.current) == null ? void 0 : me.videoWidth) ?? A), J = N / (((ve = u.current) == null ? void 0 : ve.videoHeight) ?? N);
+      d.strokeStyle = h === "success" ? "#10b981" : "#3b82f6", d.lineWidth = 2, d.setLineDash([6, 4]), d.strokeRect(P.x * O, P.y * J, P.width * O, P.height * J), d.setLineDash([]);
+      const Q = [
+        [P.x * O, P.y * J],
+        [(P.x + P.width) * O, P.y * J],
+        [P.x * O, (P.y + P.height) * J],
+        [(P.x + P.width) * O, (P.y + P.height) * J]
+      ], re = 12;
+      d.lineWidth = 3;
+      for (const [ne, ie] of Q)
+        d.beginPath(), d.moveTo(ne === P.x * O ? ne : ne - re, ie), d.lineTo(ne, ie), d.lineTo(ne, ie === P.y * J ? ie + re : ie - re), d.stroke();
+    },
+    [k, h]
+  ), z = G(async () => {
+    if (!(!u.current || h === "processing" || h === "success")) {
+      U("scanning"), _(T("security.face.scanning", "Scanning face…"));
+      try {
+        if (y.livenessDetection) {
+          const A = [];
+          for (let P = 0; P < 8; P++)
+            A.push(ae(u.current).imageData), await new Promise((O) => setTimeout(O, 200));
+          if (!Ae(A).isLive) {
+            _(T("security.face.notLive", "Liveness check failed — move naturally")), U("idle");
+            return;
+          }
+        }
+        U("processing"), _(T("security.face.processing", "Analysing face…"));
+        const { imageData: w } = ae(u.current);
+        if (t === "compare" && n) {
+          const A = typeof n == "string" ? await rt(n) : nt(n), { similarity: N, cameraFeatures: P, refFeatures: O } = Ke(w, A);
+          K(N), Y((P == null ? void 0 : P.quality) ?? 0), I(P);
+          const Q = {
+            success: N >= y.matchThreshold,
+            confidence: N,
+            method: "face",
+            timestamp: Date.now(),
+            duration: 0,
+            livenessPassed: y.livenessDetection
+          };
+          Q.success ? (_(T("security.face.matchFound", `Match: ${(N * 100).toFixed(0)}%`)), U("success")) : (H((re) => re + 1), W + 1 >= y.maxRetries ? (_(T("security.face.maxAttempts", "Maximum attempts reached")), U("failure")) : (_(T("security.face.noMatch", "No match — try again")), U("idle"))), s == null || s(Q);
+          return;
+        }
+        const d = ue(w);
+        if (!d) {
+          _(T("security.face.noFaceDetected", "No face detected")), U("idle");
+          return;
+        }
+        if (Y(d.quality), I(d), t === "enroll") {
+          const A = await Ge(d, f ?? "face");
+          i == null || i(A, d), _(T("security.face.enrolled", "Face enrolled successfully")), U("success");
+        } else {
+          let A = 0;
+          for (const O of r) {
+            const J = Je(O), Q = ke(d, J);
+            Q > A && (A = Q);
+          }
+          K(A);
+          const N = A >= y.matchThreshold, P = {
+            success: N,
+            confidence: A,
+            method: "face",
+            timestamp: Date.now(),
+            duration: 0,
+            livenessPassed: y.livenessDetection
+          };
+          if (N && y.verifyEndpoint) {
+            const O = await le(), J = await ye(
+              y.verifyEndpoint,
+              {
+                method: "face",
+                templateData: btoa(JSON.stringify(d)),
+                matchScore: A,
+                deviceFingerprint: O
+              },
+              y.authToken
+            );
+            P.success = J.verified;
+          }
+          P.success ? (_(T("security.face.verified", "Face verified")), U("success")) : (H((O) => O + 1), W + 1 >= y.maxRetries ? (_(T("security.face.maxAttempts", "Maximum attempts reached")), U("failure")) : (_(T("security.face.noMatch", "No match — try again")), U("idle"))), s == null || s(P);
+        }
+      } catch (w) {
+        a == null || a(w instanceof Error ? w : new Error(String(w))), _(T("security.face.error", "Error — try again")), U("error");
+      }
+    }
+  }, [
+    h,
+    t,
+    r,
+    n,
+    y,
+    T,
+    U,
+    i,
+    s,
+    a,
+    f,
+    W,
+    I
+  ]), M = h === "success" ? "var(--security-success)" : h === "failure" || h === "error" ? "var(--security-error)" : h === "scanning" || h === "processing" ? "var(--security-biometric)" : "var(--security-border)";
+  return /* @__PURE__ */ R(
+    "div",
+    {
+      className: g,
+      style: {
+        display: "inline-flex",
+        flexDirection: "column",
+        alignItems: "center",
+        gap: 12
+      },
+      children: [
+        f && /* @__PURE__ */ c("div", { style: { fontSize: 14, fontWeight: 600, color: "var(--security-text)" }, children: f }),
+        /* @__PURE__ */ R("div", { style: { display: "flex", gap: 16, alignItems: "center" }, children: [
+          /* @__PURE__ */ R(
+            "div",
+            {
+              style: {
+                width: S,
+                height: S * 0.75,
+                position: "relative",
+                borderRadius: "var(--security-radius-lg)",
+                overflow: "hidden",
+                border: `3px solid ${M}`,
+                boxShadow: h === "scanning" ? `0 0 20px ${M}` : "var(--security-shadow)",
+                transition: "border-color 0.3s, box-shadow 0.3s"
+              },
+              children: [
+                /* @__PURE__ */ c(
+                  "video",
+                  {
+                    ref: u,
+                    style: { width: "100%", height: "100%", objectFit: "cover", transform: "scaleX(-1)" },
+                    playsInline: !0,
+                    muted: !0
+                  }
+                ),
+                /* @__PURE__ */ c(
+                  "canvas",
+                  {
+                    ref: x,
+                    width: S,
+                    height: S * 0.75,
+                    style: {
+                      position: "absolute",
+                      inset: 0,
+                      pointerEvents: "none",
+                      transform: "scaleX(-1)"
+                    }
+                  }
+                ),
+                /* @__PURE__ */ c(
+                  "svg",
+                  {
+                    viewBox: "0 0 100 75",
+                    style: {
+                      position: "absolute",
+                      inset: 0,
+                      width: "100%",
+                      height: "100%",
+                      pointerEvents: "none",
+                      opacity: 0.3
+                    },
+                    children: /* @__PURE__ */ c(
+                      "ellipse",
+                      {
+                        cx: "50",
+                        cy: "37",
+                        rx: "22",
+                        ry: "30",
+                        fill: "none",
+                        stroke: "white",
+                        strokeWidth: "0.8",
+                        strokeDasharray: "4 3"
+                      }
+                    )
+                  }
+                ),
+                (h === "scanning" || h === "processing") && /* @__PURE__ */ c(
+                  "div",
+                  {
+                    style: {
+                      position: "absolute",
+                      inset: 0,
+                      background: "rgba(0,0,0,0.15)",
+                      display: "flex",
+                      alignItems: "center",
+                      justifyContent: "center"
+                    },
+                    children: /* @__PURE__ */ c(
+                      "div",
+                      {
+                        style: {
+                          width: 50,
+                          height: 50,
+                          borderRadius: "50%",
+                          border: "3px solid transparent",
+                          borderTopColor: M,
+                          animation: "spin 0.8s linear infinite"
+                        }
+                      }
+                    )
+                  }
+                )
+              ]
+            }
+          ),
+          t === "compare" && D && n && /* @__PURE__ */ R(
+            "div",
+            {
+              style: {
+                width: S * 0.4,
+                height: S * 0.5,
+                borderRadius: "var(--security-radius)",
+                overflow: "hidden",
+                border: "2px solid var(--security-border)"
+              },
+              children: [
+                /* @__PURE__ */ c(
+                  "img",
+                  {
+                    src: typeof n == "string" ? n : void 0,
+                    alt: "Reference",
+                    style: { width: "100%", height: "100%", objectFit: "cover" }
+                  }
+                ),
+                /* @__PURE__ */ c(
+                  "div",
+                  {
+                    style: {
+                      textAlign: "center",
+                      fontSize: 10,
+                      padding: 4,
+                      color: "var(--security-text-muted)",
+                      background: "var(--security-bg-panel)"
+                    },
+                    children: T("security.face.reference", "Reference")
+                  }
+                )
+              ]
+            }
+          )
+        ] }),
+        F > 0 && /* @__PURE__ */ R("div", { style: { display: "flex", alignItems: "center", gap: 8, fontSize: 13 }, children: [
+          /* @__PURE__ */ R("span", { style: { color: "var(--security-text-secondary)" }, children: [
+            T("security.face.confidence", "Confidence"),
+            ":"
+          ] }),
+          /* @__PURE__ */ c(
+            "div",
+            {
+              style: {
+                width: 100,
+                height: 6,
+                background: "var(--security-bg-panel)",
+                borderRadius: 3,
+                overflow: "hidden"
+              },
+              children: /* @__PURE__ */ c(
+                "div",
+                {
+                  style: {
+                    width: `${F * 100}%`,
+                    height: "100%",
+                    background: F >= y.matchThreshold ? "var(--security-success)" : "var(--security-warning)"
+                  }
+                }
+              )
+            }
+          ),
+          /* @__PURE__ */ R(
+            "span",
+            {
+              style: {
+                fontWeight: 600,
+                color: F >= y.matchThreshold ? "var(--security-success)" : "var(--security-warning)"
+              },
+              children: [
+                (F * 100).toFixed(0),
+                "%"
+              ]
+            }
+          )
+        ] }),
+        /* @__PURE__ */ c(
+          "div",
+          {
+            style: {
+              fontSize: 13,
+              color: "var(--security-text-secondary)",
+              textAlign: "center",
+              minHeight: 20
+            },
+            children: C ?? Z
+          }
+        ),
+        h !== "success" && h !== "failure" && /* @__PURE__ */ c(
+          "button",
+          {
+            onClick: z,
+            disabled: h === "scanning" || h === "processing",
+            style: {
+              padding: "10px 24px",
+              fontSize: 14,
+              fontWeight: 600,
+              background: "var(--security-biometric)",
+              color: "#fff",
+              border: "none",
+              borderRadius: "var(--security-radius)",
+              cursor: "pointer",
+              opacity: h === "scanning" || h === "processing" ? 0.6 : 1
+            },
+            children: t === "enroll" ? T("security.face.captureBtn", "📸 Capture Face") : t === "compare" ? T("security.face.compareBtn", "📸 Compare") : T("security.face.verifyBtn", "📸 Verify Face")
+          }
+        ),
+        (h === "failure" || h === "error") && /* @__PURE__ */ c(
+          "button",
+          {
+            onClick: () => {
+              H(0), K(0), U("idle"), _("");
+            },
+            style: {
+              padding: "8px 20px",
+              fontSize: 13,
+              background: "var(--security-bg-panel)",
+              color: "var(--security-text)",
+              border: "1px solid var(--security-border)",
+              borderRadius: "var(--security-radius)",
+              cursor: "pointer"
+            },
+            children: T("security.common.retry", "Try Again")
+          }
+        ),
+        /* @__PURE__ */ c("style", { children: "@keyframes spin { to { transform: rotate(360deg); } }" })
+      ]
+    }
+  );
+};
+async function rt(e) {
+  return new Promise((t, r) => {
+    const n = new Image();
+    n.crossOrigin = "anonymous", n.onload = () => {
+      const i = document.createElement("canvas");
+      i.width = n.naturalWidth, i.height = n.naturalHeight;
+      const s = i.getContext("2d");
+      s.drawImage(n, 0, 0), t(s.getImageData(0, 0, i.width, i.height));
+    }, n.onerror = () => r(new Error("Failed to load reference image")), n.src = e;
+  });
+}
+function nt(e) {
+  const t = document.createElement("canvas");
+  t.width = e.naturalWidth || e.width, t.height = e.naturalHeight || e.height;
+  const r = t.getContext("2d");
+  return r.drawImage(e, 0, 0), r.getImageData(0, 0, t.width, t.height);
+}
+const it = 4, st = 5, ot = 3e4, Pt = (e) => {
+  const {
+    length: t = it,
+    scramble: r = !1,
+    showDigits: n = !1,
+    maxAttempts: i = st,
+    lockoutDuration: s = ot,
+    keySize: o = 64,
+    haptic: a = !0,
+    keyLabels: g,
+    expectedHash: v,
+    expectedPin: f,
+    mode: m = "verify",
+    onComplete: k,
+    onVerify: p,
+    onStatusChange: D,
+    onError: C,
+    showBiometricFallback: b = !1,
+    onBiometricFallback: T,
+    label: y,
+    className: S
+  } = e, { t: u } = ee(), [x, l] = j([]), [h, L] = j("idle"), [q, Y] = j(0), [W, H] = j(0), [Z, _] = j(null), $ = V(), B = se(() => {
+    const z = ["1", "2", "3", "4", "5", "6", "7", "8", "9", "", "0", "back"];
+    if (!r)
+      return z;
+    const M = ["0", "1", "2", "3", "4", "5", "6", "7", "8", "9"];
+    for (let w = M.length - 1; w > 0; w--) {
+      const d = new Uint32Array(1);
+      crypto.getRandomValues(d);
+      const A = d[0] % (w + 1);
+      [M[w], M[A]] = [M[A], M[w]];
+    }
+    return [
+      M[0],
+      M[1],
+      M[2],
+      M[3],
+      M[4],
+      M[5],
+      M[6],
+      M[7],
+      M[8],
+      "",
+      M[9],
+      "back"
+    ];
+  }, [r, h]), F = G(
+    (z) => {
+      L(z), D == null || D(z);
+    },
+    [D]
+  );
+  te(() => {
+    if (!(W <= Date.now()))
+      return $.current = setInterval(() => {
+        Date.now() >= W && (clearInterval($.current), F("idle"), Y(0), l([]));
+      }, 500), () => clearInterval($.current);
+  }, [W, F]);
+  const K = W > Date.now(), U = G(() => {
+    a && navigator.vibrate && navigator.vibrate(20);
+  }, [a]), X = G(
+    async (z) => {
+      if (K || h === "success")
+        return;
+      if (U(), z === "back") {
+        l((A) => A.slice(0, -1));
+        return;
+      }
+      if (z === "")
+        return;
+      const M = [...x, z];
+      if (l(M), M.length < t)
+        return;
+      const w = M.join("");
+      if (F("processing"), m === "set") {
+        if (Z === null) {
+          _(w), l([]), F("idle");
+          return;
+        }
+        if (Z !== w) {
+          _(null), l([]), F("failure"), setTimeout(() => F("idle"), 1200);
+          return;
+        }
+        k == null || k(w), F("success");
+        return;
+      }
+      let d = !1;
+      if (v) {
+        const A = new TextEncoder(), N = await crypto.subtle.digest("SHA-256", A.encode(w));
+        d = Array.from(new Uint8Array(N)).map((O) => O.toString(16).padStart(2, "0")).join("") === v;
+      } else if (f)
+        d = w === f;
+      else {
+        k == null || k(w), F("success");
+        return;
+      }
+      if (d)
+        F("success"), p == null || p({
+          success: !0,
+          confidence: 1,
+          method: "pin",
+          timestamp: Date.now(),
+          duration: 0
+        }), k == null || k(w);
+      else {
+        const A = q + 1;
+        if (Y(A), A >= i) {
+          const N = Date.now() + s;
+          H(N), F("failure"), C == null || C(new Error("Too many failed PIN attempts"));
+        } else
+          F("failure"), setTimeout(() => {
+            F("idle"), l([]);
+          }, 800);
+        p == null || p({
+          success: !1,
+          confidence: 0,
+          method: "pin",
+          timestamp: Date.now(),
+          duration: 0
+        });
+      }
+    },
+    [
+      x,
+      t,
+      K,
+      h,
+      m,
+      Z,
+      v,
+      f,
+      q,
+      i,
+      s,
+      U,
+      F,
+      k,
+      p,
+      C
+    ]
+  ), E = Math.max(0, Math.ceil((W - Date.now()) / 1e3)), I = h === "success" ? "var(--security-success)" : h === "failure" ? "var(--security-error)" : "var(--security-border)";
+  return /* @__PURE__ */ R(
+    "div",
+    {
+      className: S,
+      style: {
+        display: "inline-flex",
+        flexDirection: "column",
+        alignItems: "center",
+        gap: 16,
+        fontFamily: "var(--security-font)",
+        color: "var(--security-text)"
+      },
+      children: [
+        y && /* @__PURE__ */ c("div", { style: { fontSize: 14, fontWeight: 600 }, children: y }),
+        /* @__PURE__ */ c(
+          "div",
+          {
+            style: {
+              fontSize: 13,
+              color: "var(--security-text-secondary)",
+              minHeight: 18,
+              textAlign: "center"
+            },
+            children: K ? u("security.pin.locked", `Locked — try again in ${E}s`) : m === "set" && Z !== null ? u("security.pin.confirm", "Confirm your PIN") : m === "set" ? u("security.pin.setNew", "Enter a new PIN") : u("security.pin.enter", "Enter your PIN")
+          }
+        ),
+        /* @__PURE__ */ c("div", { style: { display: "flex", gap: 12 }, children: Array.from({ length: t }, (z, M) => /* @__PURE__ */ c(
+          "div",
+          {
+            style: {
+              width: 16,
+              height: 16,
+              borderRadius: "50%",
+              border: `2px solid ${I}`,
+              background: M < x.length ? I : "transparent",
+              transition: "background 0.15s, border-color 0.15s"
+            }
+          },
+          M
+        )) }),
+        /* @__PURE__ */ c(
+          "div",
+          {
+            style: {
+              display: "grid",
+              gridTemplateColumns: `repeat(3, ${o}px)`,
+              gap: 10,
+              opacity: K ? 0.4 : 1,
+              pointerEvents: K ? "none" : "auto"
+            },
+            children: B.map((z, M) => {
+              if (z === "")
+                return /* @__PURE__ */ c("div", {}, M);
+              const w = z === "back";
+              return /* @__PURE__ */ c(
+                "button",
+                {
+                  onClick: () => X(z),
+                  disabled: K || h === "success",
+                  "aria-label": w ? "Backspace" : z,
+                  style: {
+                    width: o,
+                    height: o,
+                    borderRadius: "var(--security-key-border-radius, 50%)",
+                    border: "1px solid var(--security-key-border, var(--security-border))",
+                    background: "var(--security-key-bg, var(--security-bg-panel))",
+                    color: "var(--security-key-text, var(--security-text))",
+                    fontSize: w ? 20 : 22,
+                    fontWeight: 600,
+                    cursor: "pointer",
+                    display: "flex",
+                    alignItems: "center",
+                    justifyContent: "center",
+                    transition: "background 0.1s, transform 0.1s",
+                    userSelect: "none"
+                  },
+                  onMouseDown: (d) => {
+                    d.currentTarget.style.transform = "scale(0.92)";
+                  },
+                  onMouseUp: (d) => {
+                    d.currentTarget.style.transform = "";
+                  },
+                  onMouseLeave: (d) => {
+                    d.currentTarget.style.transform = "";
+                  },
+                  children: w ? "⌫" : (g == null ? void 0 : g[z]) ?? z
+                },
+                M
+              );
+            })
+          }
+        ),
+        x.length > 0 && h !== "success" && /* @__PURE__ */ c(
+          "button",
+          {
+            onClick: () => l([]),
+            style: {
+              fontSize: 12,
+              background: "none",
+              border: "none",
+              color: "var(--security-text-secondary)",
+              cursor: "pointer",
+              textDecoration: "underline"
+            },
+            children: u("security.pin.clear", "Clear")
+          }
+        ),
+        b && /* @__PURE__ */ R(
+          "button",
+          {
+            onClick: T,
+            style: {
+              fontSize: 13,
+              padding: "8px 16px",
+              background: "none",
+              border: "1px solid var(--security-border)",
+              borderRadius: "var(--security-radius)",
+              color: "var(--security-biometric)",
+              cursor: "pointer"
+            },
+            children: [
+              "🔐 ",
+              u("security.pin.biometricFallback", "Use biometrics instead")
+            ]
+          }
+        ),
+        q > 0 && h !== "success" && !K && /* @__PURE__ */ c("div", { style: { fontSize: 11, color: "var(--security-warning)" }, children: u("security.pin.attempts", `${q}/${i} attempts`) })
+      ]
+    }
+  );
+}, at = 3, ct = 4, lt = 5, ut = 14, Et = (e) => {
+  const {
+    gridSize: t = at,
+    minLength: r = ct,
+    showTrail: n = !0,
+    showError: i = !0,
+    maxAttempts: s = lt,
+    dotSize: o = ut,
+    trailColor: a,
+    mode: g = "verify",
+    expectedHash: v,
+    expectedPattern: f,
+    onComplete: m,
+    onVerify: k,
+    onStatusChange: p,
+    onError: D,
+    label: C,
+    className: b,
+    canvasSize: T
+  } = e, { t: y } = ee(), S = V(null), [u, x] = j([]), [l, h] = j(!1), [L, q] = j("idle"), [Y, W] = j(0), [H, Z] = j(null), [_, $] = j(null), B = T ?? t * 80, F = B / t, K = G(
+    (d) => {
+      q(d), p == null || p(d);
+    },
+    [p]
+  ), U = G(() => {
+    const d = [];
+    for (let A = 0; A < t; A++)
+      for (let N = 0; N < t; N++)
+        d.push({ x: N * F + F / 2, y: A * F + F / 2 });
+    return d;
+  }, [t, F]), X = G((d) => {
+    const A = S.current.getBoundingClientRect(), N = "touches" in d ? d.touches[0].clientX : d.clientX, P = "touches" in d ? d.touches[0].clientY : d.clientY;
+    return { x: N - A.left, y: P - A.top };
+  }, []), E = G(
+    (d, A) => {
+      const N = U(), P = F * 0.38;
+      for (let O = 0; O < N.length; O++) {
+        const J = N[O].x - d, Q = N[O].y - A;
+        if (J * J + Q * Q < P * P)
+          return O;
+      }
+      return -1;
+    },
+    [U, F]
+  ), I = G(() => {
+    var O;
+    const d = (O = S.current) == null ? void 0 : O.getContext("2d");
+    if (!d)
+      return;
+    d.clearRect(0, 0, B, B);
+    const A = U(), P = L === "failure" && i ? "var(--security-error)" : a ?? "var(--security-biometric)";
+    for (let J = 0; J < A.length; J++) {
+      const Q = u.includes(J);
+      d.beginPath(), d.arc(A[J].x, A[J].y, Q ? o * 0.75 : o * 0.5, 0, Math.PI * 2), d.fillStyle = Q ? P : "var(--security-border)", d.fill(), Q && (d.beginPath(), d.arc(A[J].x, A[J].y, o * 1.2, 0, Math.PI * 2), d.strokeStyle = P, d.lineWidth = 1.5, d.globalAlpha = 0.3, d.stroke(), d.globalAlpha = 1);
+    }
+    if (n && u.length > 1) {
+      d.beginPath(), d.moveTo(A[u[0]].x, A[u[0]].y);
+      for (let J = 1; J < u.length; J++)
+        d.lineTo(A[u[J]].x, A[u[J]].y);
+      l && _ && d.lineTo(_.x, _.y), d.strokeStyle = P, d.lineWidth = 3, d.lineCap = "round", d.lineJoin = "round", d.globalAlpha = 0.5, d.stroke(), d.globalAlpha = 1;
+    } else n && u.length === 1 && l && _ && (d.beginPath(), d.moveTo(A[u[0]].x, A[u[0]].y), d.lineTo(_.x, _.y), d.strokeStyle = a ?? "var(--security-biometric)", d.lineWidth = 3, d.globalAlpha = 0.4, d.stroke(), d.globalAlpha = 1);
+  }, [
+    B,
+    U,
+    o,
+    u,
+    l,
+    _,
+    L,
+    n,
+    i,
+    a
+  ]);
+  te(() => {
+    I();
+  }, [I]);
+  const z = G(
+    (d) => {
+      if (L === "success" || L === "failure")
+        return;
+      d.preventDefault();
+      const { x: A, y: N } = X(d), P = E(A, N);
+      P >= 0 && (h(!0), x([P]), $({ x: A, y: N }));
+    },
+    [L, X, E]
+  ), M = G(
+    (d) => {
+      if (!l)
+        return;
+      d.preventDefault();
+      const { x: A, y: N } = X(d);
+      $({ x: A, y: N });
+      const P = E(A, N);
+      P >= 0 && !u.includes(P) && x((O) => [...O, P]);
+    },
+    [l, X, E, u]
+  ), w = G(async () => {
+    if (!l)
+      return;
+    if (h(!1), $(null), u.length < r) {
+      x([]);
+      return;
+    }
+    const d = u.join(",");
+    if (g === "set") {
+      if (H === null) {
+        Z([...u]), x([]);
+        return;
+      }
+      if (H.join(",") !== d) {
+        Z(null), K("failure"), setTimeout(() => {
+          K("idle"), x([]);
+        }, 800);
+        return;
+      }
+      m == null || m([...u]), K("success");
+      return;
+    }
+    K("processing");
+    let A = !1;
+    if (v) {
+      const N = new TextEncoder(), P = await crypto.subtle.digest("SHA-256", N.encode(d));
+      A = Array.from(new Uint8Array(P)).map((J) => J.toString(16).padStart(2, "0")).join("") === v;
+    } else if (f)
+      A = d === f;
+    else {
+      m == null || m([...u]), K("success");
+      return;
+    }
+    if (A)
+      K("success"), k == null || k({
+        success: !0,
+        confidence: 1,
+        method: "pattern",
+        timestamp: Date.now(),
+        duration: 0
+      }), m == null || m([...u]);
+    else {
+      const N = Y + 1;
+      W(N), K("failure"), N >= s && (D == null || D(new Error("Too many failed pattern attempts"))), setTimeout(() => {
+        K("idle"), x([]);
+      }, 900), k == null || k({
+        success: !1,
+        confidence: 0,
+        method: "pattern",
+        timestamp: Date.now(),
+        duration: 0
+      });
+    }
+  }, [
+    l,
+    u,
+    r,
+    g,
+    H,
+    v,
+    f,
+    Y,
+    s,
+    K,
+    m,
+    k,
+    D
+  ]);
+  return /* @__PURE__ */ R(
+    "div",
+    {
+      className: b,
+      style: {
+        display: "inline-flex",
+        flexDirection: "column",
+        alignItems: "center",
+        gap: 12,
+        fontFamily: "var(--security-font)",
+        color: "var(--security-text)"
+      },
+      children: [
+        C && /* @__PURE__ */ c("div", { style: { fontSize: 14, fontWeight: 600 }, children: C }),
+        /* @__PURE__ */ c(
+          "div",
+          {
+            style: {
+              fontSize: 13,
+              color: "var(--security-text-secondary)",
+              minHeight: 18,
+              textAlign: "center"
+            },
+            children: L === "success" ? y("security.pattern.success", "Pattern accepted") : L === "failure" ? y("security.pattern.wrong", "Wrong pattern") : g === "set" && H !== null ? y("security.pattern.confirm", "Draw pattern again to confirm") : g === "set" ? y("security.pattern.setNew", "Draw a new pattern") : y("security.pattern.draw", "Draw your pattern")
+          }
+        ),
+        /* @__PURE__ */ c(
+          "canvas",
+          {
+            ref: S,
+            width: B,
+            height: B,
+            style: {
+              touchAction: "none",
+              borderRadius: "var(--security-radius-lg)",
+              background: "var(--security-bg-panel)",
+              border: `1px solid ${L === "failure" ? "var(--security-error)" : "var(--security-border)"}`,
+              cursor: "pointer",
+              transition: "border-color 0.3s"
+            },
+            onMouseDown: z,
+            onMouseMove: M,
+            onMouseUp: w,
+            onMouseLeave: w,
+            onTouchStart: z,
+            onTouchMove: M,
+            onTouchEnd: w
+          }
+        ),
+        (L === "failure" || L === "success") && /* @__PURE__ */ c(
+          "button",
+          {
+            onClick: () => {
+              x([]), W(0), Z(null), K("idle");
+            },
+            style: {
+              fontSize: 13,
+              padding: "6px 16px",
+              background: "var(--security-bg-panel)",
+              border: "1px solid var(--security-border)",
+              borderRadius: "var(--security-radius)",
+              color: "var(--security-text)",
+              cursor: "pointer"
+            },
+            children: y("security.common.retry", "Try Again")
+          }
+        ),
+        Y > 0 && L !== "success" && /* @__PURE__ */ c("div", { style: { fontSize: 11, color: "var(--security-warning)" }, children: y("security.pattern.attempts", `${Y}/${s} attempts`) })
+      ]
+    }
+  );
+}, dt = { sm: "8px 16px", md: "12px 24px", lg: "14px 32px" }, ht = { sm: 13, md: 14, lg: 16 }, Ft = (e) => {
+  const {
+    mode: t,
+    credentialIds: r = [],
+    challenge: n,
+    rpName: i = window.location.hostname,
+    rpId: s = window.location.hostname,
+    user: o,
+    attestation: a = "none",
+    authenticatorAttachment: g,
+    residentKey: v = "preferred",
+    userVerification: f = "preferred",
+    onRegister: m,
+    onAuthenticate: k,
+    onVerify: p,
+    onStatusChange: D,
+    onError: C,
+    label: b,
+    className: T,
+    variant: y = "primary",
+    size: S = "md",
+    fullWidth: u = !1,
+    icon: x
+  } = e, { t: l } = ee(), [h, L] = j("idle"), [q, Y] = j(!0), [W, H] = j(!1), Z = G(
+    (I) => {
+      L(I), D == null || D(I);
+    },
+    [D]
+  );
+  te(() => {
+    Y(Ie()), Ze().then(H);
+  }, []);
+  const _ = G(() => {
+    if (n) {
+      const I = atob(n.replace(/-/g, "+").replace(/_/g, "/")), z = new Uint8Array(I.length);
+      for (let M = 0; M < I.length; M++)
+        z[M] = I.charCodeAt(M);
+      return z.buffer;
+    }
+    return crypto.getRandomValues(new Uint8Array(32)).buffer;
+  }, [n]), $ = G(async () => {
+    if (!q) {
+      C == null || C(new Error("WebAuthn not available"));
+      return;
+    }
+    Z("processing");
+    try {
+      if (t === "register") {
+        const I = (o == null ? void 0 : o.id) ?? crypto.getRandomValues(new Uint8Array(16)), z = (o == null ? void 0 : o.name) ?? "user", M = (o == null ? void 0 : o.displayName) ?? z, w = _(), d = await Ye({
+          rpName: i,
+          rpId: s,
+          userId: typeof I == "string" ? I : Array.from(I).join(""),
+          userName: z,
+          userDisplayName: M,
+          challenge: w
+        });
+        Z("success"), d && (m == null || m(d)), p == null || p({
+          success: !0,
+          confidence: 1,
+          method: "webauthn",
+          timestamp: Date.now(),
+          duration: 0
+        });
+      } else {
+        const I = await Xe({
+          rpId: s,
+          challenge: _(),
+          allowCredentials: r == null ? void 0 : r.map((z) => ({
+            id: new TextEncoder().encode(z),
+            type: "public-key"
+          }))
+        });
+        Z("success"), I && (k == null || k(I)), p == null || p({
+          success: !0,
+          confidence: 1,
+          method: "webauthn",
+          timestamp: Date.now(),
+          duration: 0
+        });
+      }
+    } catch (I) {
+      const z = I instanceof Error ? I : new Error(String(I));
+      z.name === "NotAllowedError" ? Z("idle") : (Z("error"), C == null || C(z), p == null || p({
+        success: !1,
+        confidence: 0,
+        method: "webauthn",
+        timestamp: Date.now(),
+        duration: 0
+      }));
+    }
+  }, [
+    q,
+    t,
+    r,
+    o,
+    i,
+    s,
+    a,
+    g,
+    v,
+    f,
+    _,
+    Z,
+    m,
+    k,
+    p,
+    C
+  ]), B = t === "register" ? W ? l("security.webauthn.registerPasskey", "🔑 Register Passkey") : l("security.webauthn.register", "🔐 Register Security Key") : W ? l("security.webauthn.signInPasskey", "🔑 Sign in with Passkey") : l("security.webauthn.signIn", "🔐 Sign in with Security Key"), F = b ?? B, K = {
+    primary: "var(--security-biometric)",
+    outline: "transparent",
+    ghost: "transparent"
+  }, U = {
+    primary: "none",
+    outline: "2px solid var(--security-biometric)",
+    ghost: "none"
+  }, X = {
+    primary: "#fff",
+    outline: "var(--security-biometric)",
+    ghost: "var(--security-biometric)"
+  }, E = !q || h === "processing" || h === "success";
+  return /* @__PURE__ */ R(
+    "div",
+    {
+      className: T,
+      style: { display: u ? "block" : "inline-block", textAlign: "center" },
+      children: [
+        /* @__PURE__ */ R(
+          "button",
+          {
+            onClick: $,
+            disabled: E,
+            style: {
+              width: u ? "100%" : "auto",
+              padding: dt[S],
+              fontSize: ht[S],
+              fontWeight: 600,
+              fontFamily: "var(--security-font)",
+              background: K[y],
+              color: X[y],
+              border: U[y],
+              borderRadius: "var(--security-radius)",
+              cursor: E ? "not-allowed" : "pointer",
+              opacity: E ? 0.6 : 1,
+              display: "inline-flex",
+              alignItems: "center",
+              justifyContent: "center",
+              gap: 8,
+              transition: "opacity 0.2s, transform 0.1s"
+            },
+            children: [
+              h === "processing" && /* @__PURE__ */ c(
+                "span",
+                {
+                  style: {
+                    display: "inline-block",
+                    width: 16,
+                    height: 16,
+                    borderRadius: "50%",
+                    border: "2px solid transparent",
+                    borderTopColor: "currentColor",
+                    animation: "spin 0.6s linear infinite"
+                  }
+                }
+              ),
+              h === "success" && /* @__PURE__ */ c("span", { children: "✓" }),
+              x && h !== "processing" && h !== "success" && x,
+              F
+            ]
+          }
+        ),
+        !q && /* @__PURE__ */ c("div", { style: { fontSize: 11, marginTop: 6, color: "var(--security-warning)" }, children: l("security.webauthn.notAvailable", "WebAuthn is not supported in this browser") }),
+        h === "error" && /* @__PURE__ */ c("div", { style: { fontSize: 11, marginTop: 6, color: "var(--security-error)" }, children: l("security.webauthn.error", "Authentication failed — try again") }),
+        /* @__PURE__ */ c("style", { children: "@keyframes spin { to { transform: rotate(360deg); } }" })
+      ]
+    }
+  );
+}, ft = {
+  success: "✅",
+  failure: "❌",
+  error: "⚠️",
+  idle: "⏸️",
+  scanning: "🔍",
+  processing: "⏳",
+  timeout: "⏰"
+}, yt = (e) => e >= 80 ? "var(--security-error)" : e >= 50 ? "var(--security-warning)" : "var(--security-success)", zt = ({
+  entries: e,
+  pageSize: t = 20,
+  showExport: r = !0,
+  filterMethods: n,
+  onEntryClick: i,
+  className: s,
+  label: o
+}) => {
+  const { t: a } = ee(), [g, v] = j("all"), [f, m] = j("all"), [k, p] = j(0), D = se(() => {
+    let l = [...e];
+    return g !== "all" && (l = l.filter((h) => h.method === g)), f !== "all" && (l = l.filter((h) => h.status === f)), l.sort((h, L) => L.timestamp - h.timestamp), l;
+  }, [e, g, f]), C = Math.max(1, Math.ceil(D.length / t)), b = D.slice(k * t, (k + 1) * t), T = se(() => n || Array.from(new Set(e.map((l) => l.method))), [e, n]), y = se(() => Array.from(new Set(e.map((l) => l.status))), [e]), S = G(() => {
+    const l = new Blob([JSON.stringify(D, null, 2)], { type: "application/json" }), h = URL.createObjectURL(l), L = document.createElement("a");
+    L.href = h, L.download = `security-audit-${(/* @__PURE__ */ new Date()).toISOString().slice(0, 10)}.json`, L.click(), URL.revokeObjectURL(h);
+  }, [D]), u = (l) => new Date(l).toLocaleString(), x = {
+    padding: "8px 12px",
+    borderBottom: "1px solid var(--security-border)",
+    fontSize: 13,
+    whiteSpace: "nowrap"
+  };
+  return /* @__PURE__ */ R(
+    "div",
+    {
+      className: s,
+      style: {
+        fontFamily: "var(--security-font)",
+        color: "var(--security-text)",
+        background: "var(--security-bg)",
+        borderRadius: "var(--security-radius-lg)",
+        border: "1px solid var(--security-border)",
+        overflow: "hidden"
+      },
+      children: [
+        /* @__PURE__ */ R(
+          "div",
+          {
+            style: {
+              display: "flex",
+              alignItems: "center",
+              justifyContent: "space-between",
+              padding: "12px 16px",
+              background: "var(--security-bg-panel)",
+              borderBottom: "1px solid var(--security-border)"
+            },
+            children: [
+              /* @__PURE__ */ c("div", { style: { fontWeight: 600, fontSize: 15 }, children: o ?? a("security.audit.title", "🔒 Security Audit Log") }),
+              /* @__PURE__ */ R("div", { style: { display: "flex", gap: 8, alignItems: "center" }, children: [
+                /* @__PURE__ */ R(
+                  "select",
+                  {
+                    value: g,
+                    onChange: (l) => {
+                      v(l.target.value), p(0);
+                    },
+                    style: be,
+                    children: [
+                      /* @__PURE__ */ c("option", { value: "all", children: a("security.audit.allMethods", "All methods") }),
+                      T.map((l) => /* @__PURE__ */ c("option", { value: l, children: l }, l))
+                    ]
+                  }
+                ),
+                /* @__PURE__ */ R(
+                  "select",
+                  {
+                    value: f,
+                    onChange: (l) => {
+                      m(l.target.value), p(0);
+                    },
+                    style: be,
+                    children: [
+                      /* @__PURE__ */ c("option", { value: "all", children: a("security.audit.allStatuses", "All statuses") }),
+                      y.map((l) => /* @__PURE__ */ c("option", { value: l, children: l }, l))
+                    ]
+                  }
+                ),
+                r && /* @__PURE__ */ c("button", { onClick: S, style: pt, title: "Export JSON", children: "📥" })
+              ] })
+            ]
+          }
+        ),
+        /* @__PURE__ */ c("div", { style: { overflowX: "auto" }, children: /* @__PURE__ */ R("table", { style: { width: "100%", borderCollapse: "collapse" }, children: [
+          /* @__PURE__ */ c("thead", { children: /* @__PURE__ */ R(
+            "tr",
+            {
+              style: {
+                background: "var(--security-bg-panel)",
+                fontSize: 12,
+                color: "var(--security-text-secondary)",
+                textTransform: "uppercase",
+                letterSpacing: 0.5
+              },
+              children: [
+                /* @__PURE__ */ c("th", { style: { ...x, textAlign: "left" }, children: a("security.audit.time", "Time") }),
+                /* @__PURE__ */ c("th", { style: { ...x, textAlign: "left" }, children: a("security.audit.action", "Action") }),
+                /* @__PURE__ */ c("th", { style: { ...x, textAlign: "center" }, children: a("security.audit.method", "Method") }),
+                /* @__PURE__ */ c("th", { style: { ...x, textAlign: "center" }, children: a("security.audit.status", "Status") }),
+                /* @__PURE__ */ c("th", { style: { ...x, textAlign: "center" }, children: a("security.audit.risk", "Risk") }),
+                /* @__PURE__ */ c("th", { style: { ...x, textAlign: "left" }, children: a("security.audit.device", "Device") })
+              ]
+            }
+          ) }),
+          /* @__PURE__ */ R("tbody", { children: [
+            b.length === 0 && /* @__PURE__ */ c("tr", { children: /* @__PURE__ */ c(
+              "td",
+              {
+                colSpan: 6,
+                style: {
+                  ...x,
+                  textAlign: "center",
+                  color: "var(--security-text-muted)",
+                  padding: 24
+                },
+                children: a("security.audit.noEntries", "No entries to show")
+              }
+            ) }),
+            b.map((l) => /* @__PURE__ */ R(
+              "tr",
+              {
+                onClick: () => i == null ? void 0 : i(l),
+                style: { cursor: i ? "pointer" : "default" },
+                onMouseEnter: (h) => {
+                  h.currentTarget.style.background = "var(--security-bg-panel)";
+                },
+                onMouseLeave: (h) => {
+                  h.currentTarget.style.background = "";
+                },
+                children: [
+                  /* @__PURE__ */ c("td", { style: x, children: u(l.timestamp) }),
+                  /* @__PURE__ */ c("td", { style: x, children: l.action }),
+                  /* @__PURE__ */ c("td", { style: { ...x, textAlign: "center" }, children: /* @__PURE__ */ c(
+                    "span",
+                    {
+                      style: {
+                        padding: "2px 8px",
+                        borderRadius: 12,
+                        fontSize: 11,
+                        fontWeight: 600,
+                        background: "var(--security-bg-panel)",
+                        border: "1px solid var(--security-border)"
+                      },
+                      children: l.method
+                    }
+                  ) }),
+                  /* @__PURE__ */ R("td", { style: { ...x, textAlign: "center" }, children: [
+                    ft[l.status] ?? "•",
+                    " ",
+                    l.status
+                  ] }),
+                  /* @__PURE__ */ c("td", { style: { ...x, textAlign: "center" }, children: l.riskScore != null && /* @__PURE__ */ c("span", { style: { color: yt(l.riskScore), fontWeight: 600 }, children: l.riskScore }) }),
+                  /* @__PURE__ */ c(
+                    "td",
+                    {
+                      style: {
+                        ...x,
+                        maxWidth: 200,
+                        overflow: "hidden",
+                        textOverflow: "ellipsis"
+                      },
+                      children: l.device ?? "—"
+                    }
+                  )
+                ]
+              },
+              l.id
+            ))
+          ] })
+        ] }) }),
+        C > 1 && /* @__PURE__ */ R(
+          "div",
+          {
+            style: {
+              display: "flex",
+              justifyContent: "center",
+              alignItems: "center",
+              gap: 12,
+              padding: "10px 16px",
+              fontSize: 13,
+              color: "var(--security-text-secondary)",
+              borderTop: "1px solid var(--security-border)"
+            },
+            children: [
+              /* @__PURE__ */ R("button", { disabled: k === 0, onClick: () => p(k - 1), style: xe, children: [
+                "← ",
+                a("security.audit.prev", "Prev")
+              ] }),
+              /* @__PURE__ */ R("span", { children: [
+                k + 1,
+                " / ",
+                C
+              ] }),
+              /* @__PURE__ */ R(
+                "button",
+                {
+                  disabled: k >= C - 1,
+                  onClick: () => p(k + 1),
+                  style: xe,
+                  children: [
+                    a("security.audit.next", "Next"),
+                    " →"
+                  ]
+                }
+              )
+            ]
+          }
+        ),
+        /* @__PURE__ */ c(
+          "div",
+          {
+            style: {
+              padding: "6px 16px",
+              fontSize: 11,
+              color: "var(--security-text-muted)",
+              textAlign: "right"
+            },
+            children: a("security.audit.total", `${D.length} entries`)
+          }
+        )
+      ]
+    }
+  );
+}, be = {
+  fontSize: 12,
+  padding: "4px 8px",
+  background: "var(--security-bg)",
+  color: "var(--security-text)",
+  border: "1px solid var(--security-border)",
+  borderRadius: "var(--security-radius)"
+}, pt = {
+  background: "none",
+  border: "1px solid var(--security-border)",
+  borderRadius: "var(--security-radius)",
+  padding: "4px 8px",
+  cursor: "pointer",
+  fontSize: 16
+}, xe = {
+  background: "none",
+  border: "none",
+  cursor: "pointer",
+  color: "var(--security-biometric)",
+  fontWeight: 600,
+  fontSize: 13
+}, gt = {
+  fingerprint: "👆",
+  iris: "👁️",
+  face: "🧑",
+  voice: "🎙️",
+  webauthn: "🔑",
+  pattern: "✦",
+  pin: "🔢",
+  passphrase: "🔤"
+}, Nt = ({
+  options: e,
+  requiredCount: t = 1,
+  onSelect: r,
+  onComplete: n,
+  className: i,
+  label: s,
+  layout: o = "grid"
+}) => {
+  const { t: a } = ee(), g = e.filter((f) => f.verified).length, v = g >= t;
+  return /* @__PURE__ */ R(
+    "div",
+    {
+      className: i,
+      style: {
+        fontFamily: "var(--security-font)",
+        color: "var(--security-text)",
+        display: "flex",
+        flexDirection: "column",
+        gap: 16
+      },
+      children: [
+        s && /* @__PURE__ */ c("div", { style: { fontSize: 15, fontWeight: 600 }, children: s }),
+        t > 1 && /* @__PURE__ */ c("div", { style: { fontSize: 13, color: "var(--security-text-secondary)" }, children: a("security.mfa.progress", `Verified ${g} of ${t} required`) }),
+        /* @__PURE__ */ c(
+          "div",
+          {
+            style: {
+              display: o === "grid" ? "grid" : "flex",
+              gridTemplateColumns: o === "grid" ? "repeat(auto-fill, minmax(140px, 1fr))" : void 0,
+              flexDirection: o === "list" ? "column" : void 0,
+              gap: 12
+            },
+            children: e.map((f) => {
+              const m = f.verified ?? !1, k = f.disabled || v;
+              return /* @__PURE__ */ R(
+                "button",
+                {
+                  onClick: () => !k && !m && (r == null ? void 0 : r(f.method)),
+                  disabled: k || m,
+                  style: {
+                    display: "flex",
+                    flexDirection: o === "grid" ? "column" : "row",
+                    alignItems: "center",
+                    gap: o === "grid" ? 8 : 12,
+                    padding: o === "grid" ? "20px 16px" : "12px 16px",
+                    background: m ? "rgba(16,185,129,0.08)" : "var(--security-bg-panel)",
+                    border: `2px solid ${m ? "var(--security-success)" : "var(--security-border)"}`,
+                    borderRadius: "var(--security-radius-lg)",
+                    cursor: k || m ? "default" : "pointer",
+                    opacity: k && !m ? 0.5 : 1,
+                    transition: "border-color 0.2s, background 0.2s",
+                    textAlign: o === "grid" ? "center" : "left"
+                  },
+                  children: [
+                    /* @__PURE__ */ c("span", { style: { fontSize: 28 }, children: m ? "✅" : f.icon ?? gt[f.method] ?? "🔐" }),
+                    /* @__PURE__ */ R("div", { children: [
+                      /* @__PURE__ */ c("div", { style: { fontSize: 14, fontWeight: 600, color: "var(--security-text)" }, children: f.label ?? f.method }),
+                      f.description && /* @__PURE__ */ c("div", { style: { fontSize: 11, color: "var(--security-text-muted)", marginTop: 2 }, children: f.description })
+                    ] })
+                  ]
+                },
+                f.method
+              );
+            })
+          }
+        ),
+        v && /* @__PURE__ */ R(
+          "div",
+          {
+            style: {
+              textAlign: "center",
+              fontSize: 14,
+              fontWeight: 600,
+              color: "var(--security-success)",
+              padding: 8
+            },
+            children: [
+              "✅ ",
+              a("security.mfa.complete", "All factors verified")
+            ]
+          }
+        )
+      ]
+    }
+  );
+}, Lt = ({
+  sessions: e,
+  onRevoke: t,
+  onRevokeAll: r,
+  onTrust: n,
+  className: i,
+  label: s,
+  showRevokeAll: o = !0
+}) => {
+  const { t: a } = ee(), [g, v] = j(/* @__PURE__ */ new Set()), f = se(
+    () => [...e].sort(
+      (p, D) => (D.current ? 1 : 0) - (p.current ? 1 : 0) || D.lastActive - p.lastActive
+    ),
+    [e]
+  ), m = (p) => {
+    const D = new Date(p), b = Date.now() - p;
+    return b < 6e4 ? a("security.session.justNow", "Just now") : b < 36e5 ? `${Math.floor(b / 6e4)}m ago` : b < 864e5 ? `${Math.floor(b / 36e5)}h ago` : D.toLocaleDateString();
+  }, k = (p) => {
+    v((D) => new Set(D).add(p)), t == null || t(p);
+  };
+  return /* @__PURE__ */ R(
+    "div",
+    {
+      className: i,
+      style: {
+        fontFamily: "var(--security-font)",
+        color: "var(--security-text)",
+        background: "var(--security-bg)",
+        borderRadius: "var(--security-radius-lg)",
+        border: "1px solid var(--security-border)",
+        overflow: "hidden"
+      },
+      children: [
+        /* @__PURE__ */ R(
+          "div",
+          {
+            style: {
+              display: "flex",
+              alignItems: "center",
+              justifyContent: "space-between",
+              padding: "12px 16px",
+              background: "var(--security-bg-panel)",
+              borderBottom: "1px solid var(--security-border)"
+            },
+            children: [
+              /* @__PURE__ */ c("div", { style: { fontSize: 15, fontWeight: 600 }, children: s ?? a("security.session.title", "🖥️ Active Sessions") }),
+              o && e.length > 1 && /* @__PURE__ */ c(
+                "button",
+                {
+                  onClick: r,
+                  style: {
+                    fontSize: 12,
+                    padding: "4px 12px",
+                    background: "none",
+                    border: "1px solid var(--security-error)",
+                    borderRadius: "var(--security-radius)",
+                    color: "var(--security-error)",
+                    cursor: "pointer"
+                  },
+                  children: a("security.session.revokeAll", "Revoke all others")
+                }
+              )
+            ]
+          }
+        ),
+        /* @__PURE__ */ R("div", { children: [
+          f.map((p) => /* @__PURE__ */ R(
+            "div",
+            {
+              style: {
+                display: "flex",
+                alignItems: "center",
+                justifyContent: "space-between",
+                padding: "12px 16px",
+                borderBottom: "1px solid var(--security-border)",
+                opacity: g.has(p.id) ? 0.5 : 1,
+                background: p.current ? "rgba(59,130,246,0.04)" : void 0
+              },
+              children: [
+                /* @__PURE__ */ R("div", { style: { display: "flex", gap: 12, alignItems: "center" }, children: [
+                  /* @__PURE__ */ c("span", { style: { fontSize: 24 }, children: p.device.toLowerCase().includes("mobile") ? "📱" : "💻" }),
+                  /* @__PURE__ */ R("div", { children: [
+                    /* @__PURE__ */ R("div", { style: { fontSize: 14, fontWeight: 500 }, children: [
+                      p.device,
+                      p.current && /* @__PURE__ */ c(
+                        "span",
+                        {
+                          style: {
+                            marginLeft: 8,
+                            fontSize: 10,
+                            padding: "1px 6px",
+                            background: "var(--security-biometric)",
+                            color: "#fff",
+                            borderRadius: 8
+                          },
+                          children: a("security.session.current", "Current")
+                        }
+                      ),
+                      p.trusted && /* @__PURE__ */ c(
+                        "span",
+                        {
+                          style: {
+                            marginLeft: 6,
+                            fontSize: 10,
+                            padding: "1px 6px",
+                            background: "var(--security-success)",
+                            color: "#fff",
+                            borderRadius: 8
+                          },
+                          children: a("security.session.trusted", "Trusted")
+                        }
+                      )
+                    ] }),
+                    /* @__PURE__ */ c("div", { style: { fontSize: 12, color: "var(--security-text-muted)", marginTop: 2 }, children: [p.browser, p.os, p.location].filter(Boolean).join(" · ") }),
+                    /* @__PURE__ */ R("div", { style: { fontSize: 11, color: "var(--security-text-muted)", marginTop: 1 }, children: [
+                      a("security.session.lastActive", "Last active"),
+                      ":",
+                      " ",
+                      m(p.lastActive)
+                    ] })
+                  ] })
+                ] }),
+                /* @__PURE__ */ R("div", { style: { display: "flex", gap: 6 }, children: [
+                  n && !p.current && /* @__PURE__ */ c(
+                    "button",
+                    {
+                      onClick: () => n(p.id, !p.trusted),
+                      style: {
+                        fontSize: 11,
+                        padding: "4px 8px",
+                        background: "none",
+                        border: "1px solid var(--security-border)",
+                        borderRadius: "var(--security-radius)",
+                        cursor: "pointer",
+                        color: "var(--security-text-secondary)"
+                      },
+                      children: p.trusted ? "🚫" : "✅"
+                    }
+                  ),
+                  !p.current && /* @__PURE__ */ c(
+                    "button",
+                    {
+                      onClick: () => k(p.id),
+                      disabled: g.has(p.id),
+                      style: {
+                        fontSize: 11,
+                        padding: "4px 10px",
+                        background: "none",
+                        border: "1px solid var(--security-error)",
+                        borderRadius: "var(--security-radius)",
+                        cursor: "pointer",
+                        color: "var(--security-error)"
+                      },
+                      children: a("security.session.revoke", "Revoke")
+                    }
+                  )
+                ] })
+              ]
+            },
+            p.id
+          )),
+          e.length === 0 && /* @__PURE__ */ c(
+            "div",
+            {
+              style: {
+                padding: 24,
+                textAlign: "center",
+                color: "var(--security-text-muted)",
+                fontSize: 13
+              },
+              children: a("security.session.noSessions", "No active sessions")
+            }
+          )
+        ] })
+      ]
+    }
+  );
+}, $t = ({
+  trustScore: e,
+  onScoreComputed: t,
+  trustThreshold: r = 60,
+  showFactors: n = !0,
+  showFingerprint: i = !1,
+  className: s,
+  label: o
+}) => {
+  const { t: a } = ee(), [g, v] = j(e ?? null), [f, m] = j(!e), k = G(async () => {
+    var D;
+    m(!0);
+    try {
+      const C = Te(), b = await le(), T = [];
+      let y = 50;
+      C.platform && !C.platform.includes("Linux") && (T.push({
+        name: "Known platform",
+        score: 5,
+        description: "Running on a recognized platform",
+        weight: 0.05
+      }), y += 5), navigator.cookieEnabled && (T.push({
+        name: "Cookies enabled",
+        score: 5,
+        description: "Browser cookies are enabled",
+        weight: 0.05
+      }), y += 5), C.screenResolution[0] >= 360 && C.screenResolution[1] >= 640 && (T.push({
+        name: "Standard resolution",
+        score: 5,
+        description: "Screen resolution within normal range",
+        weight: 0.05
+      }), y += 5), typeof window < "u" && window.isSecureContext && (T.push({
+        name: "Secure context",
+        score: 10,
+        description: "Running in HTTPS secure context",
+        weight: 0.1
+      }), y += 10), ((D = navigator.languages) == null ? void 0 : D.length) > 0 && (T.push({
+        name: "Language configured",
+        score: 5,
+        description: "Browser language is set",
+        weight: 0.05
+      }), y += 5), C.touchSupport && (T.push({
+        name: "Touch device",
+        score: 5,
+        description: "Touch input is supported",
+        weight: 0.05
+      }), y += 5);
+      try {
+        const l = document.createElement("canvas").getContext("webgl");
+        l && l.getExtension("WEBGL_debug_renderer_info") && (T.push({
+          name: "Hardware GPU",
+          score: 10,
+          description: "Hardware GPU detected",
+          weight: 0.1
+        }), y += 10);
+      } catch {
+      }
+      navigator.credentials && (T.push({
+        name: "Credential API",
+        score: 5,
+        description: "Credential Management API available",
+        weight: 0.05
+      }), y += 5), y = Math.min(100, Math.max(0, y));
+      const S = Date.now(), u = {
+        score: y,
+        factors: T,
+        trusted: y >= r,
+        firstSeen: S,
+        lastSeen: S,
+        fingerprint: b
+      };
+      v(u), t == null || t(u);
+    } finally {
+      m(!1);
+    }
+  }, [r, t]);
+  te(() => {
+    e || k();
+  }, [e, k]), te(() => {
+    e && v(e);
+  }, [e]);
+  const p = g ? g.score >= 80 ? "var(--security-success)" : g.score >= 50 ? "var(--security-warning)" : "var(--security-error)" : "var(--security-text-muted)";
+  return /* @__PURE__ */ R(
+    "div",
+    {
+      className: s,
+      style: {
+        fontFamily: "var(--security-font)",
+        color: "var(--security-text)",
+        background: "var(--security-bg-panel)",
+        borderRadius: "var(--security-radius-lg)",
+        border: "1px solid var(--security-border)",
+        padding: 20,
+        display: "flex",
+        flexDirection: "column",
+        gap: 14,
+        alignItems: "center"
+      },
+      children: [
+        /* @__PURE__ */ c("div", { style: { fontSize: 15, fontWeight: 600 }, children: o ?? a("security.trust.title", "🛡️ Device Trust") }),
+        f ? /* @__PURE__ */ c("div", { style: { fontSize: 13, color: "var(--security-text-muted)" }, children: a("security.trust.computing", "Analysing device…") }) : g ? /* @__PURE__ */ R(Re, { children: [
+          /* @__PURE__ */ R("div", { style: { position: "relative", width: 100, height: 100 }, children: [
+            /* @__PURE__ */ R(
+              "svg",
+              {
+                viewBox: "0 0 36 36",
+                style: { width: "100%", height: "100%", transform: "rotate(-90deg)" },
+                children: [
+                  /* @__PURE__ */ c(
+                    "circle",
+                    {
+                      cx: "18",
+                      cy: "18",
+                      r: "15.9",
+                      fill: "none",
+                      stroke: "var(--security-border)",
+                      strokeWidth: "2.5"
+                    }
+                  ),
+                  /* @__PURE__ */ c(
+                    "circle",
+                    {
+                      cx: "18",
+                      cy: "18",
+                      r: "15.9",
+                      fill: "none",
+                      stroke: p,
+                      strokeWidth: "2.5",
+                      strokeDasharray: `${g.score}, 100`,
+                      strokeLinecap: "round"
+                    }
+                  )
+                ]
+              }
+            ),
+            /* @__PURE__ */ R(
+              "div",
+              {
+                style: {
+                  position: "absolute",
+                  inset: 0,
+                  display: "flex",
+                  flexDirection: "column",
+                  alignItems: "center",
+                  justifyContent: "center"
+                },
+                children: [
+                  /* @__PURE__ */ c("span", { style: { fontSize: 24, fontWeight: 700, color: p }, children: g.score }),
+                  /* @__PURE__ */ c("span", { style: { fontSize: 10, color: "var(--security-text-muted)" }, children: "/100" })
+                ]
+              }
+            )
+          ] }),
+          /* @__PURE__ */ c(
+            "div",
+            {
+              style: {
+                fontSize: 14,
+                fontWeight: 600,
+                color: g.trusted ? "var(--security-success)" : "var(--security-warning)"
+              },
+              children: g.trusted ? a("security.trust.trusted", "✅ Device Trusted") : a("security.trust.untrusted", "⚠️ Low Trust Score")
+            }
+          ),
+          n && g.factors.length > 0 && /* @__PURE__ */ R("div", { style: { width: "100%", fontSize: 12 }, children: [
+            /* @__PURE__ */ R(
+              "div",
+              {
+                style: {
+                  fontWeight: 600,
+                  marginBottom: 6,
+                  color: "var(--security-text-secondary)"
+                },
+                children: [
+                  a("security.trust.factors", "Contributing factors"),
+                  ":"
+                ]
+              }
+            ),
+            /* @__PURE__ */ c("ul", { style: { margin: 0, paddingLeft: 18, color: "var(--security-text-muted)" }, children: g.factors.map((D, C) => /* @__PURE__ */ c("li", { style: { marginBottom: 2 }, children: D.name }, C)) })
+          ] }),
+          i && g.fingerprint && /* @__PURE__ */ c(
+            "div",
+            {
+              style: {
+                fontSize: 10,
+                color: "var(--security-text-muted)",
+                wordBreak: "break-all",
+                textAlign: "center",
+                maxWidth: 280,
+                fontFamily: "monospace"
+              },
+              children: g.fingerprint
+            }
+          )
+        ] }) : null
+      ]
+    }
+  );
+};
+function mt(e) {
+  if (!e)
+    return 0;
+  let t = 0;
+  return e.length >= 8 && t++, e.length >= 12 && t++, /[a-z]/.test(e) && /[A-Z]/.test(e) && t++, /\d/.test(e) && t++, /[^a-zA-Z0-9]/.test(e) && t++, /(.)\1{3,}/.test(e) && t--, Math.max(0, Math.min(4, t));
+}
+const vt = ["Very weak", "Weak", "Fair", "Strong", "Very strong"], we = ["#ef4444", "#f97316", "#eab308", "#22c55e", "#10b981"], jt = ({
+  mode: e = "verify",
+  expectedHash: t,
+  minStrength: r = 2,
+  minLength: n = 8,
+  onComplete: i,
+  onVerify: s,
+  onStatusChange: o,
+  onError: a,
+  label: g,
+  placeholder: v,
+  className: f,
+  showStrength: m = !0,
+  maxAttempts: k = 5
+}) => {
+  const { t: p } = ee(), [D, C] = j(""), [b, T] = j(""), [y, S] = j(!1), [u, x] = j("idle"), [l, h] = j(0), [L, q] = j(""), Y = V(null), W = mt(D), H = G(
+    ($) => {
+      x($), o == null || o($);
+    },
+    [o]
+  ), Z = G(async () => {
+    if (q(""), H("processing"), e === "set") {
+      if (D.length < n) {
+        q(p("security.passphrase.tooShort", `Minimum ${n} characters`)), H("idle");
+        return;
+      }
+      if (W < r) {
+        q(p("security.passphrase.tooWeak", "Passphrase is too weak")), H("idle");
+        return;
+      }
+      if (D !== b) {
+        q(p("security.passphrase.noMatch", "Passphrases do not match")), H("failure"), setTimeout(() => H("idle"), 1e3);
+        return;
+      }
+      i == null || i(D), H("success");
+      return;
+    }
+    if (t) {
+      const $ = new TextEncoder(), B = await crypto.subtle.digest("SHA-256", $.encode(D));
+      if (Array.from(new Uint8Array(B)).map((U) => U.toString(16).padStart(2, "0")).join("") === t)
+        H("success"), s == null || s({
+          success: !0,
+          confidence: 1,
+          method: "passphrase",
+          timestamp: Date.now(),
+          duration: 0
+        }), i == null || i(D);
+      else {
+        const U = l + 1;
+        h(U), U >= k ? (H("failure"), a == null || a(new Error("Too many failed attempts"))) : (q(p("security.passphrase.incorrect", "Incorrect passphrase")), H("idle")), s == null || s({
+          success: !1,
+          confidence: 0,
+          method: "passphrase",
+          timestamp: Date.now(),
+          duration: 0
+        });
+      }
+    } else
+      i == null || i(D), H("success");
+  }, [
+    D,
+    b,
+    e,
+    t,
+    W,
+    r,
+    n,
+    l,
+    k,
+    p,
+    H,
+    i,
+    s,
+    a
+  ]), _ = {
+    width: "100%",
+    padding: "10px 14px",
+    fontSize: 14,
+    background: "var(--security-bg)",
+    color: "var(--security-text)",
+    border: `1px solid ${u === "failure" ? "var(--security-error)" : "var(--security-border)"}`,
+    borderRadius: "var(--security-radius)",
+    boxSizing: "border-box",
+    fontFamily: "var(--security-font)"
+  };
+  return /* @__PURE__ */ R(
+    "div",
+    {
+      className: f,
+      style: {
+        display: "flex",
+        flexDirection: "column",
+        gap: 10,
+        maxWidth: 340,
+        fontFamily: "var(--security-font)",
+        color: "var(--security-text)"
+      },
+      children: [
+        g && /* @__PURE__ */ c("label", { style: { fontSize: 14, fontWeight: 600 }, children: g }),
+        /* @__PURE__ */ R("div", { style: { position: "relative" }, children: [
+          /* @__PURE__ */ c(
+            "input",
+            {
+              ref: Y,
+              type: y ? "text" : "password",
+              value: D,
+              onChange: ($) => C($.target.value),
+              placeholder: v ?? p("security.passphrase.placeholder", "Enter passphrase"),
+              style: _,
+              disabled: u === "success",
+              onKeyDown: ($) => $.key === "Enter" && Z()
+            }
+          ),
+          /* @__PURE__ */ c(
+            "button",
+            {
+              type: "button",
+              onClick: () => S(!y),
+              style: {
+                position: "absolute",
+                right: 8,
+                top: "50%",
+                transform: "translateY(-50%)",
+                background: "none",
+                border: "none",
+                cursor: "pointer",
+                fontSize: 16,
+                color: "var(--security-text-muted)"
+              },
+              tabIndex: -1,
+              children: y ? "🙈" : "👁️"
+            }
+          )
+        ] }),
+        e === "set" && m && D.length > 0 && /* @__PURE__ */ R("div", { children: [
+          /* @__PURE__ */ c("div", { style: { display: "flex", gap: 3, height: 4 }, children: [0, 1, 2, 3].map(($) => /* @__PURE__ */ c(
+            "div",
+            {
+              style: {
+                flex: 1,
+                borderRadius: 2,
+                background: $ < W ? we[W] : "var(--security-border)",
+                transition: "background 0.2s"
+              }
+            },
+            $
+          )) }),
+          /* @__PURE__ */ c("div", { style: { fontSize: 11, marginTop: 4, color: we[W] }, children: p(`security.passphrase.strength${W}`, vt[W]) })
+        ] }),
+        e === "set" && /* @__PURE__ */ c(
+          "input",
+          {
+            type: y ? "text" : "password",
+            value: b,
+            onChange: ($) => T($.target.value),
+            placeholder: p("security.passphrase.confirmPlaceholder", "Confirm passphrase"),
+            style: _,
+            disabled: u === "success",
+            onKeyDown: ($) => $.key === "Enter" && Z(),
+            onPaste: ($) => $.preventDefault()
+          }
+        ),
+        L && /* @__PURE__ */ c("div", { style: { fontSize: 12, color: "var(--security-error)" }, children: L }),
+        /* @__PURE__ */ c(
+          "button",
+          {
+            onClick: Z,
+            disabled: !D || u === "processing" || u === "success",
+            style: {
+              padding: "10px 20px",
+              fontSize: 14,
+              fontWeight: 600,
+              background: u === "success" ? "var(--security-success)" : "var(--security-biometric)",
+              color: "#fff",
+              border: "none",
+              borderRadius: "var(--security-radius)",
+              cursor: u === "success" ? "default" : "pointer",
+              opacity: !D || u === "processing" ? 0.6 : 1
+            },
+            children: u === "success" ? "✓ " + p("security.passphrase.accepted", "Accepted") : e === "set" ? p("security.passphrase.setBtn", "Set Passphrase") : p("security.passphrase.verifyBtn", "Verify")
+          }
+        ),
+        l > 0 && u !== "success" && /* @__PURE__ */ c("div", { style: { fontSize: 11, color: "var(--security-warning)" }, children: p("security.passphrase.attempts", `${l}/${k} attempts`) })
+      ]
+    }
+  );
+};
+function Bt(e) {
+  const t = [], r = {
+    defaultSrc: "default-src",
+    scriptSrc: "script-src",
+    styleSrc: "style-src",
+    imgSrc: "img-src",
+    fontSrc: "font-src",
+    connectSrc: "connect-src",
+    frameSrc: "frame-src",
+    objectSrc: "object-src",
+    mediaSrc: "media-src",
+    workerSrc: "worker-src",
+    childSrc: "child-src",
+    formAction: "form-action",
+    frameAncestors: "frame-ancestors",
+    baseUri: "base-uri",
+    reportUri: "report-uri",
+    reportTo: "report-to",
+    upgradeInsecureRequests: "upgrade-insecure-requests",
+    blockAllMixedContent: "block-all-mixed-content"
+  };
+  return Object.entries(e.directives).forEach(([n, i]) => {
+    const s = r[n];
+    if (s) {
+      if (typeof i == "boolean")
+        i && t.push(s);
+      else if (typeof i == "string")
+        t.push(`${s} ${i}`);
+      else if (Array.isArray(i)) {
+        let o = i;
+        e.nonce && (n === "scriptSrc" || n === "styleSrc") && (o = [...o, `'nonce-${e.nonce}'`]), t.push(`${s} ${o.join(" ")}`);
+      }
+    }
+  }), t.join("; ");
+}
+function Wt(e) {
+  const t = "'self'";
+  return {
+    defaultSrc: [t],
+    scriptSrc: [t],
+    styleSrc: [t, "'unsafe-inline'"],
+    // Some CSS-in-JS libraries need this
+    imgSrc: [t, "data:", "blob:", e == null ? void 0 : e.cdnDomain].filter(Boolean),
+    fontSrc: [t, "data:", e == null ? void 0 : e.cdnDomain].filter(Boolean),
+    connectSrc: [t, e == null ? void 0 : e.apiDomain, "wss:"].filter(Boolean),
+    frameSrc: ["'none'"],
+    objectSrc: ["'none'"],
+    baseUri: [t],
+    formAction: [t],
+    frameAncestors: ["'none'"],
+    upgradeInsecureRequests: !0,
+    reportUri: e == null ? void 0 : e.reportUri
+  };
+}
+function _t() {
+  return typeof crypto < "u" && crypto.randomUUID ? crypto.randomUUID().replace(/-/g, "") : Math.random().toString(36).substring(2) + Date.now().toString(36);
+}
+const bt = {
+  "&": "&amp;",
+  "<": "&lt;",
+  ">": "&gt;",
+  '"': "&quot;",
+  "'": "&#x27;",
+  "/": "&#x2F;",
+  "`": "&#x60;",
+  "=": "&#x3D;"
+};
+function xt(e) {
+  return e.replace(/[&<>"'`=/]/g, (t) => bt[t] || t);
+}
+function Ut(e, t) {
+  let r = xt(e);
+  return t != null && t.maxLength && r.length > t.maxLength && (r = r.substring(0, t.maxLength)), r;
+}
+function Ht(e) {
+  if (!e)
+    return null;
+  try {
+    const t = new URL(e);
+    return !["http:", "https:", "mailto:", "tel:"].includes(t.protocol) || e.toLowerCase().includes("javascript:") ? null : t.toString();
+  } catch {
+    return null;
+  }
+}
+function Ot(e) {
+  const t = ["script", "iframe", "object", "embed", "form"];
+  let r = e;
+  t.forEach((s) => {
+    const o = new RegExp(`<${s}[^>]*>.*?</${s}>`, "gi");
+    r = r.replace(o, "");
+    const a = new RegExp(`<${s}[^>]*/>`, "gi");
+    r = r.replace(a, "");
+  });
+  const n = /\s+on\w+\s*=/gi;
+  r = r.replace(n, " data-removed=");
+  const i = /javascript:/gi;
+  return r = r.replace(i, ""), r;
+}
+function qt(e, t) {
+  let r = e;
+  if (t != null && t.allowedTags) {
+    const n = /<\/?([a-z][a-z0-9]*)[^>]*>/gi;
+    r = r.replace(n, (i, s) => t.allowedTags.includes(s.toLowerCase()) ? i : "");
+  }
+  return r = r.replace(/\s+on\w+\s*=/gi, " data-removed="), r = r.replace(/javascript:/gi, ""), { __html: r };
+}
+const pe = {
+  headerName: "X-CSRF-Token",
+  cookieName: "XSRF-TOKEN",
+  fieldName: "_csrf"
+};
+function Kt() {
+  if (typeof crypto < "u") {
+    const e = new Uint8Array(32);
+    return crypto.getRandomValues(e), Array.from(e, (t) => t.toString(16).padStart(2, "0")).join("");
+  }
+  return Math.random().toString(36).substring(2) + Date.now().toString(36);
+}
+function Me(e = pe.cookieName) {
+  if (typeof document > "u")
+    return null;
+  const t = document.cookie.match(new RegExp(`(^| )${e}=([^;]+)`));
+  return t ? decodeURIComponent(t[2]) : null;
+}
+function Gt(e = pe) {
+  return async function(r, n = {}) {
+    const i = Me(e.cookieName);
+    i || console.warn("CSRF token not found");
+    const s = new Headers(n.headers);
+    return i && e.headerName && s.set(e.headerName, i), fetch(r, { ...n, headers: s });
+  };
+}
+function Jt(e = pe) {
+  const t = Me(e.cookieName);
+  return {
+    token: t,
+    inputProps: {
+      type: "hidden",
+      name: e.fieldName,
+      value: t || ""
+    },
+    headerName: e.headerName
+  };
+}
+function wt(e) {
+  const t = /* @__PURE__ */ new Map(), r = e.keyGenerator || ((s) => s.url);
+  function n(s) {
+    const o = r(s), a = Date.now();
+    let g = t.get(o);
+    (!g || a > g.resetAt) && (g = {
+      count: 0,
+      resetAt: a + e.windowMs
+    }), g.count++, t.set(o, g);
+    const v = g.count <= e.maxRequests, f = Math.max(0, e.maxRequests - g.count);
+    return { allowed: v, remaining: f, resetAt: g.resetAt };
+  }
+  function i(s) {
+    s ? t.delete(s) : t.clear();
+  }
+  return { checkLimit: n, reset: i };
+}
+function Zt(e) {
+  const t = wt(e);
+  return { checkAndFetch: async (n, i) => {
+    const s = t.checkLimit({ url: n, method: i == null ? void 0 : i.method });
+    if (!s.allowed) {
+      const o = Math.ceil((s.resetAt - Date.now()) / 1e3);
+      throw new Error(`Rate limit exceeded. Retry after ${o} seconds.`);
+    }
+    return fetch(n, i);
+  }, checkLimit: t.checkLimit, reset: t.reset };
+}
+function St(e, t) {
+  const r = [];
+  if (t.allowedTypes && t.allowedTypes.length > 0 && (t.allowedTypes.includes(e.type) || r.push(
+    `File type '${e.type}' is not allowed. Allowed types: ${t.allowedTypes.join(", ")}`
+  )), t.maxSize && e.size > t.maxSize) {
+    const s = (t.maxSize / 1048576).toFixed(2), o = (e.size / (1024 * 1024)).toFixed(2);
+    r.push(`File size (${o}MB) exceeds maximum allowed size (${s}MB)`);
+  }
+  const n = [".exe", ".bat", ".cmd", ".sh", ".ps1", ".vbs", ".js", ".jar"], i = e.name.toLowerCase();
+  for (const s of n)
+    if (i.includes(s + ".") || i.endsWith(s)) {
+      r.push(`File extension '${s}' is not allowed`);
+      break;
+    }
+  return {
+    valid: r.length === 0,
+    errors: r,
+    file: r.length === 0 ? e : void 0
+  };
+}
+function Yt(e, t) {
+  const r = [], n = [], i = [];
+  t.maxFiles && e.length > t.maxFiles && r.push(`Too many files. Maximum allowed: ${t.maxFiles}`);
+  const s = e.reduce((o, a) => o + a.size, 0);
+  if (t.maxTotalSize && s > t.maxTotalSize) {
+    const o = (t.maxTotalSize / 1048576).toFixed(2), a = (s / (1024 * 1024)).toFixed(2);
+    r.push(`Total file size (${a}MB) exceeds maximum (${o}MB)`);
+  }
+  return e.forEach((o) => {
+    const a = St(o, t);
+    a.valid ? n.push(o) : i.push({ file: o, errors: a.errors });
+  }), {
+    valid: r.length === 0 && i.length === 0,
+    errors: [...r, ...i.flatMap((o) => o.errors)],
+    validFiles: n,
+    invalidFiles: i
+  };
+}
+async function Xt(e, t) {
+  const r = new FormData();
+  r.append("file", e);
+  try {
+    const n = await fetch(t, {
+      method: "POST",
+      body: r
+    });
+    if (!n.ok)
+      throw new Error("Virus scan failed");
+    return await n.json();
+  } catch (n) {
+    return console.error("Virus scan error:", n), { clean: !1, threat: "Scan failed" };
+  }
+}
+function kt() {
+  if (typeof localStorage > "u")
+    return null;
+  const e = localStorage.getItem("nice2dev_consent");
+  if (!e)
+    return null;
+  try {
+    return JSON.parse(e);
+  } catch {
+    return null;
+  }
+}
+function Qt(e) {
+  typeof localStorage > "u" || localStorage.setItem(
+    "nice2dev_consent",
+    JSON.stringify({
+      ...e,
+      necessary: !0,
+      // Always required
+      timestamp: (/* @__PURE__ */ new Date()).toISOString()
+    })
+  );
+}
+function Vt(e) {
+  const t = kt();
+  return t ? t[e] === !0 : !1;
+}
+function er(e) {
+  if (typeof document > "u")
+    return;
+  document.cookie.split(";").forEach((r) => {
+    const [n] = r.trim().split("=");
+    e.includes(n) || (document.cookie = `${n}=; expires=Thu, 01 Jan 1970 00:00:00 UTC; path=/;`);
+  });
+}
+async function tr(e, t, r = fetch) {
+  const n = {
+    exportDate: (/* @__PURE__ */ new Date()).toISOString(),
+    userId: e
+  };
+  return await Promise.all(
+    Object.entries(t).map(async ([i, s]) => {
+      try {
+        const o = await r(s);
+        o.ok && (n[i] = await o.json());
+      } catch (o) {
+        console.error(`Failed to fetch ${i} data:`, o), n[i] = { error: "Failed to retrieve data" };
+      }
+    })
+  ), n;
+}
+async function rr(e, t, r = fetch) {
+  try {
+    const n = await r(t, {
+      method: "DELETE",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ userId: e, timestamp: (/* @__PURE__ */ new Date()).toISOString() })
+    });
+    return n.ok ? { success: !0, confirmationId: (await n.json()).confirmationId } : { success: !1, error: "Deletion request failed" };
+  } catch (n) {
+    return { success: !1, error: String(n) };
+  }
+}
+function nr(e, t) {
+  var n;
+  const r = {
+    ...e,
+    id: ((n = crypto.randomUUID) == null ? void 0 : n.call(crypto)) || Math.random().toString(36),
+    timestamp: /* @__PURE__ */ new Date()
+  };
+  return t && fetch(t, {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify(r)
+  }).catch(console.error), process.env.NODE_ENV === "development" && console.warn("[HIPAA] PHI Access:", r), r;
+}
+function ir(e) {
+  let t = null, r = null, n = Date.now();
+  const i = e.timeoutMinutes * 60 * 1e3, s = e.warningBeforeMs || 6e4;
+  function o() {
+    n = Date.now(), t && clearTimeout(t), r && clearTimeout(r), e.onWarning && (r = setTimeout(() => {
+      var f;
+      const v = i - (Date.now() - n);
+      (f = e.onWarning) == null || f.call(e, v);
+    }, i - s)), t = setTimeout(e.onTimeout, i);
+  }
+  function a() {
+    t && clearTimeout(t), r && clearTimeout(r);
+  }
+  function g() {
+    return Math.max(0, i - (Date.now() - n));
+  }
+  return o(), typeof window < "u" && ["mousedown", "keypress", "touchstart", "scroll"].forEach((f) => {
+    window.addEventListener(f, o, { passive: !0 });
+  }), { resetTimer: o, destroy: a, getTimeRemaining: g };
+}
+function sr(e, t) {
+  const r = (o) => {
+    const a = o.replace("#", ""), g = parseInt(a.substr(0, 2), 16) / 255, v = parseInt(a.substr(2, 2), 16) / 255, f = parseInt(a.substr(4, 2), 16) / 255, m = (k) => k <= 0.03928 ? k / 12.92 : Math.pow((k + 0.055) / 1.055, 2.4);
+    return 0.2126 * m(g) + 0.7152 * m(v) + 0.0722 * m(f);
+  }, n = r(e), i = r(t), s = (Math.max(n, i) + 0.05) / (Math.min(n, i) + 0.05);
+  return {
+    ratio: Math.round(s * 100) / 100,
+    passesAA: s >= 4.5,
+    // Normal text
+    passesAAA: s >= 7,
+    // Normal text enhanced
+    passesAALarge: s >= 3,
+    // Large text (18pt+ or 14pt bold)
+    passesAAALarge: s >= 4.5
+    // Large text enhanced
+  };
+}
+function or(e) {
+  var r, n, i;
+  if (e.getAttribute("aria-label"))
+    return !0;
+  const t = e.getAttribute("aria-labelledby");
+  if (t) {
+    const s = document.getElementById(t);
+    if ((r = s == null ? void 0 : s.textContent) != null && r.trim())
+      return !0;
+  }
+  if (e.id) {
+    const s = document.querySelector(`label[for="${e.id}"]`);
+    if ((n = s == null ? void 0 : s.textContent) != null && n.trim())
+      return !0;
+  }
+  return !!((i = e.textContent) != null && i.trim() || e.getAttribute("title") || e.placeholder);
+}
+function ar(e) {
+  const r = (e || document.body).querySelectorAll("h1, h2, h3, h4, h5, h6"), n = [];
+  let i = 0, s = !1;
+  return r.forEach((o) => {
+    const a = parseInt(o.tagName[1]);
+    a === 1 && (s && n.push({
+      level: a,
+      element: o,
+      issue: "Multiple H1 elements found"
+    }), s = !0), a > i + 1 && i !== 0 && n.push({
+      level: a,
+      element: o,
+      issue: `Skipped heading level: H${i} to H${a}`
+    }), i = a;
+  }), !s && r.length > 0 && n.push({
+    level: 0,
+    element: r[0],
+    issue: "Missing H1 element"
+  }), { valid: n.length === 0, issues: n };
+}
+function cr(e) {
+  const t = [];
+  let r = null;
+  const n = e.batchSize || 10, i = e.flushInterval || 5e3;
+  async function s() {
+    if (t.length === 0)
+      return;
+    const v = t.splice(0, n);
+    try {
+      await fetch(e.endpoint, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ entries: v })
+      });
+    } catch (f) {
+      console.error("Failed to send audit logs:", f), t.unshift(...v);
+    }
+  }
+  function o() {
+    r || (r = setTimeout(() => {
+      r = null, s();
+    }, i));
+  }
+  function a(v) {
+    var m;
+    const f = {
+      ...v,
+      id: ((m = crypto.randomUUID) == null ? void 0 : m.call(crypto)) || Math.random().toString(36),
+      timestamp: /* @__PURE__ */ new Date(),
+      userAgent: e.includeUserAgent && typeof navigator < "u" ? navigator.userAgent : void 0
+    };
+    t.push(f), t.length >= n ? s() : o();
+  }
+  function g() {
+    r && clearTimeout(r), s();
+  }
+  return { log: a, flush: s, destroy: g };
+}
+function lr() {
+  return [
+    // Security
+    {
+      controlId: "CC6.1",
+      name: "Logical and Physical Access Controls",
+      category: "security",
+      status: "in_progress",
+      lastAssessed: /* @__PURE__ */ new Date()
+    },
+    {
+      controlId: "CC6.2",
+      name: "User Registration and Authorization",
+      category: "security",
+      status: "in_progress",
+      lastAssessed: /* @__PURE__ */ new Date()
+    },
+    {
+      controlId: "CC6.3",
+      name: "Access Control Removal",
+      category: "security",
+      status: "in_progress",
+      lastAssessed: /* @__PURE__ */ new Date()
+    },
+    // Availability
+    {
+      controlId: "A1.1",
+      name: "System Capacity",
+      category: "availability",
+      status: "in_progress",
+      lastAssessed: /* @__PURE__ */ new Date()
+    },
+    {
+      controlId: "A1.2",
+      name: "Backup and Recovery",
+      category: "availability",
+      status: "in_progress",
+      lastAssessed: /* @__PURE__ */ new Date()
+    },
+    // Confidentiality
+    {
+      controlId: "C1.1",
+      name: "Confidential Information Classification",
+      category: "confidentiality",
+      status: "in_progress",
+      lastAssessed: /* @__PURE__ */ new Date()
+    },
+    {
+      controlId: "C1.2",
+      name: "Confidential Information Disposal",
+      category: "confidentiality",
+      status: "in_progress",
+      lastAssessed: /* @__PURE__ */ new Date()
+    },
+    // Privacy
+    {
+      controlId: "P1.1",
+      name: "Privacy Notice",
+      category: "privacy",
+      status: "in_progress",
+      lastAssessed: /* @__PURE__ */ new Date()
+    },
+    {
+      controlId: "P2.1",
+      name: "Consent",
+      category: "privacy",
+      status: "in_progress",
+      lastAssessed: /* @__PURE__ */ new Date()
+    },
+    {
+      controlId: "P3.1",
+      name: "Collection",
+      category: "privacy",
+      status: "in_progress",
+      lastAssessed: /* @__PURE__ */ new Date()
+    }
+  ];
+}
+const ur = {
+  // Hardcoded secrets
+  hardcodedSecrets: [
+    { pattern: /password\s*[:=]\s*["'][^"']+["']/gi, name: "Hardcoded password" },
+    { pattern: /api[_-]?key\s*[:=]\s*["'][^"']+["']/gi, name: "Hardcoded API key" },
+    { pattern: /secret\s*[:=]\s*["'][^"']+["']/gi, name: "Hardcoded secret" },
+    { pattern: /token\s*[:=]\s*["'][^"']+["']/gi, name: "Hardcoded token" }
+  ],
+  // SQL Injection
+  sqlInjection: [
+    { pattern: /execute\s*\(\s*["'`].*\$\{/gi, name: "Potential SQL injection (template literal)" },
+    { pattern: /query\s*\(\s*["'`].*\+/gi, name: "Potential SQL injection (string concatenation)" }
+  ],
+  // XSS vulnerabilities
+  xss: [
+    { pattern: /dangerouslySetInnerHTML/g, name: "dangerouslySetInnerHTML usage" },
+    { pattern: /innerHTML\s*=/g, name: "innerHTML assignment" },
+    { pattern: /document\.write\s*\(/g, name: "document.write usage" },
+    { pattern: /eval\s*\(/g, name: "eval usage" }
+  ],
+  // Insecure functions
+  insecureFunctions: [
+    { pattern: /Math\.random\s*\(\)/g, name: "Insecure random (use crypto)" },
+    { pattern: /new Function\s*\(/g, name: "Function constructor (code injection risk)" },
+    { pattern: /setTimeout\s*\(\s*["']/g, name: "setTimeout with string (code injection)" },
+    { pattern: /setInterval\s*\(\s*["']/g, name: "setInterval with string (code injection)" }
+  ],
+  // Information exposure
+  infoExposure: [
+    {
+      pattern: /console\.(log|info|warn|error)\s*\(/g,
+      name: "Console logging (remove in production)"
+    },
+    { pattern: /debugger/g, name: "Debugger statement" },
+    { pattern: /TODO.*password/gi, name: "TODO mentioning password" }
+  ]
+};
+function dr() {
+  return `# .github/workflows/sast.yml
+name: Security Scan (SAST)
+
+on:
+  push:
+    branches: [main, develop]
+  pull_request:
+    branches: [main]
+
+jobs:
+  sast:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      
+      - name: Run Semgrep
+        uses: returntocorp/semgrep-action@v2
+        with:
+          config: >-
+            p/security-audit
+            p/secrets
+            p/javascript
+            p/typescript
+            
+      - name: Run ESLint Security
+        run: |
+          npm ci
+          npx eslint --config eslint.security.config.js --format json --output-file eslint-security.json ./src
+          
+      - name: Upload SARIF
+        uses: github/codeql-action/upload-sarif@v3
+        with:
+          sarif_file: semgrep.sarif
+          
+  codeql:
+    runs-on: ubuntu-latest
+    permissions:
+      security-events: write
+    steps:
+      - uses: actions/checkout@v4
+      
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@v3
+        with:
+          languages: javascript-typescript
+          
+      - name: Perform Analysis
+        uses: github/codeql-action/analyze@v3
+`;
+}
+function hr() {
+  return `# .github/workflows/sca.yml
+name: Dependency Security (SCA)
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+  schedule:
+    - cron: '0 0 * * *' # Daily at midnight
+
+jobs:
+  npm-audit:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      
+      - name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+          
+      - name: Install dependencies
+        run: npm ci
+        
+      - name: Run npm audit
+        run: npm audit --audit-level=high --json > npm-audit.json || true
+        
+      - name: Check critical vulnerabilities
+        run: |
+          CRITICAL=$(cat npm-audit.json | jq '.metadata.vulnerabilities.critical')
+          HIGH=$(cat npm-audit.json | jq '.metadata.vulnerabilities.high')
+          if [ "$CRITICAL" -gt 0 ] || [ "$HIGH" -gt 0 ]; then
+            echo "Critical: $CRITICAL, High: $HIGH vulnerabilities found"
+            exit 1
+          fi
+          
+      - name: Upload audit results
+        uses: actions/upload-artifact@v4
+        with:
+          name: npm-audit
+          path: npm-audit.json
+
+  license-check:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      
+      - name: Check licenses
+        run: |
+          npx license-checker --production --onlyAllow "MIT;Apache-2.0;BSD-2-Clause;BSD-3-Clause;ISC;CC0-1.0"
+
+  snyk:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      
+      - name: Run Snyk
+        uses: snyk/actions/node@master
+        env:
+          SNYK_TOKEN: \${{ secrets.SNYK_TOKEN }}
+        with:
+          args: --severity-threshold=high
+`;
+}
+const fr = [
+  // API Keys
+  { name: "AWS Access Key ID", pattern: /AKIA[0-9A-Z]{16}/g, severity: "critical" },
+  { name: "AWS Secret Access Key", pattern: /[A-Za-z0-9/+=]{40}/g, severity: "critical" },
+  { name: "Google API Key", pattern: /AIza[0-9A-Za-z-_]{35}/g, severity: "high" },
+  { name: "GitHub Token", pattern: /gh[ps]_[A-Za-z0-9_]{36}/g, severity: "critical" },
+  { name: "GitLab Token", pattern: /glpat-[A-Za-z0-9-_]{20}/g, severity: "critical" },
+  {
+    name: "Slack Token",
+    pattern: /xox[baprs]-[0-9]{10,13}-[0-9]{10,13}[a-zA-Z0-9-]*/g,
+    severity: "high"
+  },
+  { name: "Stripe Key", pattern: /sk_live_[0-9a-zA-Z]{24}/g, severity: "critical" },
+  { name: "SendGrid Key", pattern: /SG\.[a-zA-Z0-9_-]{22}\.[a-zA-Z0-9_-]{43}/g, severity: "high" },
+  // Private Keys
+  { name: "RSA Private Key", pattern: /-----BEGIN RSA PRIVATE KEY-----/g, severity: "critical" },
+  {
+    name: "SSH Private Key",
+    pattern: /-----BEGIN OPENSSH PRIVATE KEY-----/g,
+    severity: "critical"
+  },
+  {
+    name: "PGP Private Key",
+    pattern: /-----BEGIN PGP PRIVATE KEY BLOCK-----/g,
+    severity: "critical"
+  },
+  // Credentials
+  { name: "Basic Auth", pattern: /basic [a-zA-Z0-9_\-:.=]+/gi, severity: "high" },
+  { name: "Bearer Token", pattern: /bearer [a-zA-Z0-9_\-.=]+/gi, severity: "high" },
+  { name: "Connection String", pattern: /[a-z]+:\/\/[^:]+:[^@]+@[^/]+/gi, severity: "critical" }
+];
+function yr() {
+  return `#!/bin/sh
+# .git/hooks/pre-commit
+
+echo "Scanning for secrets..."
+
+# Define patterns to check
+PATTERNS=(
+  'AKIA[0-9A-Z]{16}'
+  'gh[ps]_[A-Za-z0-9_]{36}'
+  'sk_live_[0-9a-zA-Z]{24}'
+  '-----BEGIN.*PRIVATE KEY-----'
+  'password.*=.*["'][^'"]+["']'
+)
+
+FILES=$(git diff --cached --name-only --diff-filter=ACM)
+
+for FILE in $FILES; do
+  for PATTERN in "\${PATTERNS[@]}"; do
+    if grep -qE "$PATTERN" "$FILE" 2>/dev/null; then
+      echo "ERROR: Potential secret found in $FILE"
+      echo "Pattern: $PATTERN"
+      exit 1
+    fi
+  done
+done
+
+echo "No secrets detected."
+exit 0
+`;
+}
+function pr() {
+  return `# .github/workflows/secret-scanning.yml
+name: Secret Scanning
+
+on:
+  push:
+    branches: [main, develop]
+  pull_request:
+    branches: [main]
+
+jobs:
+  gitleaks:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+          
+      - name: Run Gitleaks
+        uses: gitleaks/gitleaks-action@v2
+        env:
+          GITHUB_TOKEN: \${{ secrets.GITHUB_TOKEN }}
+          
+  trufflehog:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+          
+      - name: Run TruffleHog
+        uses: trufflesecurity/trufflehog@main
+        with:
+          path: ./
+          base: \${{ github.event.repository.default_branch }}
+          head: HEAD
+`;
+}
+function gr(e) {
+  return `# Security Advisory
+
+## ${e.cves.join(", ")} - ${e.description}
+
+**Severity:** ${e.severity.toUpperCase()}
+**Date:** ${e.date}
+
+### Affected Versions
+
+${e.affectedVersions}
+
+### Fixed In
+
+${e.fixedIn}
+
+### Description
+
+${e.description}
+
+### Remediation
+
+Update to version ${e.version} or later:
+
+\`\`\`bash
+npm install @nice2dev/ui@${e.version}
+\`\`\`
+
+${e.acknowledgments ? `### Acknowledgments
+
+Thank you to the following researchers for responsibly disclosing this issue:
+
+${e.acknowledgments.map((t) => `- ${t}`).join(`
+`)}
+` : ""}
+
+### Timeline
+
+- **Date reported:** ${e.date}
+- **Date fixed:** ${e.date}
+- **Date disclosed:** ${e.date}
+
+### References
+
+${e.cves.map((t) => `- [${t}](https://www.cve.org/CVERecord?id=${t})`).join(`
+`)}
+`;
+}
+function mr() {
+  return `# Security Policy
+
+## Supported Versions
+
+| Version | Supported          |
+| ------- | ------------------ |
+| 1.0.x   | :white_check_mark: |
+| < 1.0   | :x:                |
+
+## Reporting a Vulnerability
+
+We take security seriously. If you discover a security vulnerability, please follow these steps:
+
+### 1. Do Not Create a Public Issue
+
+**Please do not report security vulnerabilities through public GitHub issues.**
+
+### 2. Report Privately
+
+Send an email to **security@nice2dev.com** with:
+
+- Description of the vulnerability
+- Steps to reproduce
+- Potential impact
+- Any suggested fixes (optional)
+
+### 3. Encryption
+
+For sensitive reports, use our PGP key:
+
+\`\`\`
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+[PGP KEY HERE]
+-----END PGP PUBLIC KEY BLOCK-----
+\`\`\`
+
+## Response Timeline
+
+- **Initial Response:** Within 24 hours
+- **Severity Assessment:** Within 48 hours
+- **Fix Development:** Depends on severity
+  - Critical: Within 24 hours
+  - High: Within 72 hours
+  - Medium: Within 1 week
+  - Low: Within 2 weeks
+- **Disclosure:** After fix is released
+
+## Bug Bounty
+
+We offer bug bounties for qualifying vulnerabilities:
+
+| Severity | Bounty Range |
+| -------- | ------------ |
+| Critical | $1,000 - $5,000 |
+| High     | $500 - $1,000 |
+| Medium   | $100 - $500 |
+| Low      | Acknowledgment |
+
+## Safe Harbor
+
+We will not pursue legal action against researchers who:
+
+- Make good faith efforts to comply with this policy
+- Report vulnerabilities in a timely manner
+- Do not access, modify, or delete user data
+- Do not disrupt our services
+- Do not disclose vulnerabilities before they are fixed
+`;
+}
+export {
+  $t as NiceDeviceTrust,
+  Ct as NiceFaceRecognition,
+  Mt as NiceFingerprintScanner,
+  Dt as NiceI18nProvider,
+  Rt as NiceIrisScanner,
+  Nt as NiceMfaSelector,
+  jt as NicePassphraseInput,
+  Et as NicePatternLock,
+  Pt as NicePinKeypad,
+  zt as NiceSecurityAuditLog,
+  Lt as NiceSessionManager,
+  Ft as NiceWebAuthnButton,
+  fr as SECRET_PATTERNS,
+  ur as SECURITY_PATTERNS,
+  Xe as authenticateWebAuthn,
+  ae as captureFrame,
+  sr as checkColorContrast,
+  ar as checkHeadingHierarchy,
+  Ae as checkLiveness,
+  er as clearNonEssentialCookies,
+  Te as collectDeviceInfo,
+  Ke as compareFaceToPhoto,
+  cr as createAuditLogger,
+  Gt as createCSRFFetch,
+  ir as createHIPAASession,
+  wt as createRateLimiter,
+  qt as createSafeHtml,
+  Ue as detectIris,
+  xt as escapeHtml,
+  ue as extractFaceFeatures,
+  je as extractMinutiae,
+  Ge as faceToTemplate,
+  We as fingerprintToTemplate,
+  Bt as generateCSPHeader,
+  Kt as generateCSRFToken,
+  tr as generateDataExport,
+  le as generateDeviceFingerprint,
+  It as generateLivenessChallenge,
+  _t as generateNonce,
+  yr as generatePreCommitHook,
+  dr as generateSASTConfig,
+  hr as generateSCAConfig,
+  pr as generateSecretScanningConfig,
+  gr as generateSecurityAdvisory,
+  mr as generateSecurityMd,
+  Me as getCSRFTokenFromCookie,
+  fe as getCameraStream,
+  kt as getConsentPreferences,
+  Wt as getRecommendedCSP,
+  lr as getSOC2Checklist,
+  or as hasAccessibleName,
+  Vt as hasConsent,
+  Oe as irisToTemplate,
+  Ze as isPasskeyAvailable,
+  Ie as isWebAuthnAvailable,
+  nr as logPHIAccess,
+  ke as matchFaces,
+  Be as matchFingerprints,
+  He as matchIris,
+  Ye as registerWebAuthn,
+  rr as requestDataDeletion,
+  de as resolveConfig,
+  Ut as sanitizeInput,
+  Ot as sanitizeSvg,
+  Ht as sanitizeUrl,
+  Qt as saveConsentPreferences,
+  Xt as scanFileForViruses,
+  Je as templateToFace,
+  _e as templateToFingerprint,
+  qe as templateToIris,
+  Jt as useCSRFToken,
+  ee as useNiceTranslation,
+  Zt as useRateLimiter,
+  St as validateFile,
+  Yt as validateFiles,
+  ye as verifyWithBackend
+};