npm - @vikukumar/propvault - Versions diffs - 0.1.5 - Mend

@vikukumar/propvault 0.1.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (1156) hide show

package/.next/server/chunks/_0o0ouha._.js ADDED Viewed

@@ -0,0 +1,406 @@
+module.exports=[817374,(e,t,r)=>{"use strict";Object.defineProperty(r,"__esModule",{value:!0});var a={ActionDidNotRevalidate:function(){return i},ActionDidRevalidateDynamicOnly:function(){return s},ActionDidRevalidateStaticAndDynamic:function(){return o}};for(var n in a)Object.defineProperty(r,n,{enumerable:!0,get:a[n]});let i=0,o=1,s=2},830240,(e,t,r)=>{"use strict";Object.defineProperty(r,"__esModule",{value:!0});var a={MutableRequestCookiesAdapter:function(){return h},ReadonlyRequestCookiesError:function(){return d},RequestCookiesAdapter:function(){return l},appendMutableCookies:function(){return p},areCookiesMutableInCurrentPhase:function(){return y},createCookiesWithMutableAccessCheck:function(){return b},getModifiedCookieValues:function(){return f},responseCookiesToRequestCookies:function(){return g}};for(var n in a)Object.defineProperty(r,n,{enumerable:!0,get:a[n]});let i=e.r(365716),o=e.r(130759),s=e.r(556704),c=e.r(817374);class d extends Error{constructor(){super("Cookies can only be modified in a Server Action or Route Handler. Read more: https://nextjs.org/docs/app/api-reference/functions/cookies#options")}static callable(){throw new d}}class l{static seal(e){return new Proxy(e,{get(e,t,r){switch(t){case"clear":case"delete":case"set":return d.callable;default:return o.ReflectAdapter.get(e,t,r)}}})}}let u=Symbol.for("next.mutated.cookies");function f(e){let t=e[u];return t&&Array.isArray(t)&&0!==t.length?t:[]}function p(e,t){let r=f(t);if(0===r.length)return!1;let a=new i.ResponseCookies(e),n=a.getAll();for(let e of r)a.set(e);for(let e of n)a.set(e);return!0}class h{static wrap(e,t){let r=new i.ResponseCookies(new Headers);for(let t of e.getAll())r.set(t);let a=[],n=new Set,d=()=>{let e=s.workAsyncStorage.getStore();if(e&&(e.pathWasRevalidated=c.ActionDidRevalidateStaticAndDynamic),a=r.getAll().filter(e=>n.has(e.name)),t){let e=[];for(let t of a){let r=new i.ResponseCookies(new Headers);r.set(t),e.push(r.toString())}t(e)}},l=new Proxy(r,{get(e,t,r){switch(t){case u:return a;case"delete":return function(...t){n.add("string"==typeof t[0]?t[0]:t[0].name);try{return e.delete(...t),l}finally{d()}};case"set":return function(...t){n.add("string"==typeof t[0]?t[0]:t[0].name);try{return e.set(...t),l}finally{d()}};default:return o.ReflectAdapter.get(e,t,r)}}});return l}}function b(e){let t=new Proxy(e.mutableCookies,{get(r,a,n){switch(a){case"delete":return function(...a){return m(e,"cookies().delete"),r.delete(...a),t};case"set":return function(...a){return m(e,"cookies().set"),r.set(...a),t};default:return o.ReflectAdapter.get(r,a,n)}}});return t}function y(e){return"action"===e.phase}function m(e,t){if(!y(e))throw new d}function g(e){let t=new i.RequestCookies(new Headers);for(let r of e.getAll())t.set(r);return t}},213884,(e,t,r)=>{"use strict";Object.defineProperty(r,"__esModule",{value:!0}),Object.defineProperty(r,"createDedupedByCallsiteServerErrorLoggerDev",{enumerable:!0,get:function(){return c}});let a=function(e){if(e&&e.__esModule)return e;if(null===e||"object"!=typeof e&&"function"!=typeof e)return{default:e};var t=n(void 0);if(t&&t.has(e))return t.get(e);var r={__proto__:null},a=Object.defineProperty&&Object.getOwnPropertyDescriptor;for(var i in e)if("default"!==i&&Object.prototype.hasOwnProperty.call(e,i)){var o=a?Object.getOwnPropertyDescriptor(e,i):null;o&&(o.get||o.set)?Object.defineProperty(r,i,o):r[i]=e[i]}return r.default=e,t&&t.set(e,r),r}(e.r(347540));function n(e){if("function"!=typeof WeakMap)return null;var t=new WeakMap,r=new WeakMap;return(n=function(e){return e?r:t})(e)}let i={current:null},o="function"==typeof a.cache?a.cache:e=>e,s=console.warn;function c(e){return function(...t){s(e(...t))}}o(e=>{try{s(i.current)}finally{i.current=null}})},307460,(e,t,r)=>{"use strict";Object.defineProperty(r,"__esModule",{value:!0}),Object.defineProperty(r,"cookies",{enumerable:!0,get:function(){return p}});let a=e.r(830240),n=e.r(365716),i=e.r(556704),o=e.r(832319),s=e.r(868665),c=e.r(97573),d=e.r(204642),l=e.r(213884),u=e.r(543824),f=e.r(276414);function p(){let e="cookies",t=i.workAsyncStorage.getStore(),r=o.workUnitAsyncStorage.getStore();if(t){if(r&&"after"===r.phase&&!(0,u.isRequestAPICallableInsideAfter)())throw Object.defineProperty(Error(`Route ${t.route} used \`cookies()\` inside \`after()\`. This is not supported. If you need this data inside an \`after()\` callback, use \`cookies()\` outside of the callback. See more info here: https://nextjs.org/docs/canary/app/api-reference/functions/after`),"__NEXT_ERROR_CODE",{value:"E843",enumerable:!1,configurable:!0});if(t.forceStatic)return b(a.RequestCookiesAdapter.seal(new n.RequestCookies(new Headers({}))));if(t.dynamicShouldError)throw Object.defineProperty(new c.StaticGenBailoutError(`Route ${t.route} with \`dynamic = "error"\` couldn't be rendered statically because it used \`cookies()\`. See more info here: https://nextjs.org/docs/app/building-your-application/rendering/static-and-dynamic#dynamic-rendering`),"__NEXT_ERROR_CODE",{value:"E849",enumerable:!1,configurable:!0});if(r)switch(r.type){case"cache":let i=Object.defineProperty(Error(`Route ${t.route} used \`cookies()\` inside "use cache". Accessing Dynamic data sources inside a cache scope is not supported. If you need this data inside a cached function use \`cookies()\` outside of the cached function and pass the required dynamic data in as an argument. See more info here: https://nextjs.org/docs/messages/next-request-in-use-cache`),"__NEXT_ERROR_CODE",{value:"E831",enumerable:!1,configurable:!0});throw Error.captureStackTrace(i,p),t.invalidDynamicUsageError??=i,i;case"unstable-cache":throw Object.defineProperty(Error(`Route ${t.route} used \`cookies()\` inside a function cached with \`unstable_cache()\`. Accessing Dynamic data sources inside a cache scope is not supported. If you need this data inside a cached function use \`cookies()\` outside of the cached function and pass the required dynamic data in as an argument. See more info here: https://nextjs.org/docs/app/api-reference/functions/unstable_cache`),"__NEXT_ERROR_CODE",{value:"E846",enumerable:!1,configurable:!0});case"generate-static-params":throw Object.defineProperty(Error(`Route ${t.route} used \`cookies()\` inside \`generateStaticParams\`. This is not supported because \`generateStaticParams\` runs at build time without an HTTP request. Read more: https://nextjs.org/docs/messages/next-dynamic-api-wrong-context`),"__NEXT_ERROR_CODE",{value:"E1123",enumerable:!1,configurable:!0});case"prerender":var l=t,y=r;let m=h.get(y);if(m)return m;let g=(0,d.makeHangingPromise)(y.renderSignal,l.route,"`cookies()`");return h.set(y,g),g;case"prerender-client":case"validation-client":let x="`cookies`";throw Object.defineProperty(new f.InvariantError(`${x} must not be used within a Client Component. Next.js should be preventing ${x} from being included in Client Components statically, but did not in this case.`),"__NEXT_ERROR_CODE",{value:"E1037",enumerable:!1,configurable:!0});case"prerender-ppr":return(0,s.postponeWithTracking)(t.route,e,r.dynamicTracking);case"prerender-legacy":return(0,s.throwToInterruptStaticGeneration)(e,t,r);case"prerender-runtime":return(0,d.delayUntilRuntimeStage)(r,b(r.cookies));case"private-cache":return b(r.cookies);case"request":let w;if((0,s.trackDynamicDataInDynamicRender)(r),w=(0,a.areCookiesMutableInCurrentPhase)(r)?r.userspaceMutableCookies:r.cookies,!r.asyncApiPromises)return b(w);{let e=(0,o.isInEarlyRenderStage)(r);if(w===r.mutableCookies)return e?r.asyncApiPromises.earlyMutableCookies:r.asyncApiPromises.mutableCookies;return e?r.asyncApiPromises.earlyCookies:r.asyncApiPromises.cookies}}}(0,o.throwForMissingRequestStore)(e)}e.r(518185);let h=new WeakMap;function b(e){let t=h.get(e);if(t)return t;let r=Promise.resolve(e);return h.set(e,r),r}(0,l.createDedupedByCallsiteServerErrorLoggerDev)(function(e,t){let r=e?`Route "${e}" `:"This route ";return Object.defineProperty(Error(`${r}used ${t}. \`cookies()\` returns a Promise and must be unwrapped with \`await\` or \`React.use()\` before accessing its properties. Learn more: https://nextjs.org/docs/messages/sync-dynamic-apis`),"__NEXT_ERROR_CODE",{value:"E830",enumerable:!1,configurable:!0})})},536052,(e,t,r)=>{"use strict";Object.defineProperty(r,"__esModule",{value:!0});var a={HeadersAdapter:function(){return s},ReadonlyHeadersError:function(){return o}};for(var n in a)Object.defineProperty(r,n,{enumerable:!0,get:a[n]});let i=e.r(130759);class o extends Error{constructor(){super("Headers cannot be modified. Read more: https://nextjs.org/docs/app/api-reference/functions/headers")}static callable(){throw new o}}class s extends Headers{constructor(e){super(),this.headers=new Proxy(e,{get(t,r,a){if("symbol"==typeof r)return i.ReflectAdapter.get(t,r,a);let n=r.toLowerCase(),o=Object.keys(e).find(e=>e.toLowerCase()===n);if(void 0!==o)return i.ReflectAdapter.get(t,o,a)},set(t,r,a,n){if("symbol"==typeof r)return i.ReflectAdapter.set(t,r,a,n);let o=r.toLowerCase(),s=Object.keys(e).find(e=>e.toLowerCase()===o);return i.ReflectAdapter.set(t,s??r,a,n)},has(t,r){if("symbol"==typeof r)return i.ReflectAdapter.has(t,r);let a=r.toLowerCase(),n=Object.keys(e).find(e=>e.toLowerCase()===a);return void 0!==n&&i.ReflectAdapter.has(t,n)},deleteProperty(t,r){if("symbol"==typeof r)return i.ReflectAdapter.deleteProperty(t,r);let a=r.toLowerCase(),n=Object.keys(e).find(e=>e.toLowerCase()===a);return void 0===n||i.ReflectAdapter.deleteProperty(t,n)}})}static seal(e){return new Proxy(e,{get(e,t,r){switch(t){case"append":case"delete":case"set":return o.callable;default:return i.ReflectAdapter.get(e,t,r)}}})}merge(e){return Array.isArray(e)?e.join(", "):e}static from(e){return e instanceof Headers?e:new s(e)}append(e,t){let r=this.headers[e];"string"==typeof r?this.headers[e]=[r,t]:Array.isArray(r)?r.push(t):this.headers[e]=t}delete(e){delete this.headers[e]}get(e){let t=this.headers[e];return void 0!==t?this.merge(t):null}has(e){return void 0!==this.headers[e]}set(e,t){this.headers[e]=t}forEach(e,t){for(let[r,a]of this.entries())e.call(t,a,r,this)}*entries(){for(let e of Object.keys(this.headers)){let t=e.toLowerCase(),r=this.get(t);yield[t,r]}}*keys(){for(let e of Object.keys(this.headers)){let t=e.toLowerCase();yield t}}*values(){for(let e of Object.keys(this.headers)){let t=this.get(e);yield t}}[Symbol.iterator](){return this.entries()}}},719971,(e,t,r)=>{"use strict";Object.defineProperty(r,"__esModule",{value:!0}),Object.defineProperty(r,"headers",{enumerable:!0,get:function(){return f}});let a=e.r(536052),n=e.r(556704),i=e.r(832319),o=e.r(868665),s=e.r(97573),c=e.r(204642),d=e.r(213884),l=e.r(543824),u=e.r(276414);function f(){let e="headers",t=n.workAsyncStorage.getStore(),r=i.workUnitAsyncStorage.getStore();if(t){if(r&&"after"===r.phase&&!(0,l.isRequestAPICallableInsideAfter)())throw Object.defineProperty(Error(`Route ${t.route} used \`headers()\` inside \`after()\`. This is not supported. If you need this data inside an \`after()\` callback, use \`headers()\` outside of the callback. See more info here: https://nextjs.org/docs/canary/app/api-reference/functions/after`),"__NEXT_ERROR_CODE",{value:"E839",enumerable:!1,configurable:!0});if(t.forceStatic)return h(a.HeadersAdapter.seal(new Headers({})));if(r)switch(r.type){case"cache":{let e=Object.defineProperty(Error(`Route ${t.route} used \`headers()\` inside "use cache". Accessing Dynamic data sources inside a cache scope is not supported. If you need this data inside a cached function use \`headers()\` outside of the cached function and pass the required dynamic data in as an argument. See more info here: https://nextjs.org/docs/messages/next-request-in-use-cache`),"__NEXT_ERROR_CODE",{value:"E833",enumerable:!1,configurable:!0});throw Error.captureStackTrace(e,f),t.invalidDynamicUsageError??=e,e}case"unstable-cache":throw Object.defineProperty(Error(`Route ${t.route} used \`headers()\` inside a function cached with \`unstable_cache()\`. Accessing Dynamic data sources inside a cache scope is not supported. If you need this data inside a cached function use \`headers()\` outside of the cached function and pass the required dynamic data in as an argument. See more info here: https://nextjs.org/docs/app/api-reference/functions/unstable_cache`),"__NEXT_ERROR_CODE",{value:"E838",enumerable:!1,configurable:!0});case"generate-static-params":throw Object.defineProperty(Error(`Route ${t.route} used \`headers()\` inside \`generateStaticParams\`. This is not supported because \`generateStaticParams\` runs at build time without an HTTP request. Read more: https://nextjs.org/docs/messages/next-dynamic-api-wrong-context`),"__NEXT_ERROR_CODE",{value:"E1134",enumerable:!1,configurable:!0})}if(t.dynamicShouldError)throw Object.defineProperty(new s.StaticGenBailoutError(`Route ${t.route} with \`dynamic = "error"\` couldn't be rendered statically because it used \`headers()\`. See more info here: https://nextjs.org/docs/app/building-your-application/rendering/static-and-dynamic#dynamic-rendering`),"__NEXT_ERROR_CODE",{value:"E828",enumerable:!1,configurable:!0});if(r)switch(r.type){case"prerender":var d=t,b=r;let n=p.get(b);if(n)return n;let y=(0,c.makeHangingPromise)(b.renderSignal,d.route,"`headers()`");return p.set(b,y),y;case"prerender-client":case"validation-client":let m="`headers`";throw Object.defineProperty(new u.InvariantError(`${m} must not be used within a client component. Next.js should be preventing ${m} from being included in client components statically, but did not in this case.`),"__NEXT_ERROR_CODE",{value:"E1017",enumerable:!1,configurable:!0});case"prerender-ppr":return(0,o.postponeWithTracking)(t.route,e,r.dynamicTracking);case"prerender-legacy":return(0,o.throwToInterruptStaticGeneration)(e,t,r);case"prerender-runtime":return(0,c.delayUntilRuntimeStage)(r,h(r.headers));case"private-cache":return h(r.headers);case"request":if((0,o.trackDynamicDataInDynamicRender)(r),r.asyncApiPromises)return(0,i.isInEarlyRenderStage)(r)?r.asyncApiPromises.earlyHeaders:r.asyncApiPromises.headers;return h(r.headers)}}(0,i.throwForMissingRequestStore)(e)}e.r(518185);let p=new WeakMap;function h(e){let t=p.get(e);if(t)return t;let r=Promise.resolve(e);return p.set(e,r),r}(0,d.createDedupedByCallsiteServerErrorLoggerDev)(function(e,t){let r=e?`Route "${e}" `:"This route ";return Object.defineProperty(Error(`${r}used ${t}. \`headers()\` returns a Promise and must be unwrapped with \`await\` or \`React.use()\` before accessing its properties. Learn more: https://nextjs.org/docs/messages/sync-dynamic-apis`),"__NEXT_ERROR_CODE",{value:"E836",enumerable:!1,configurable:!0})})},721423,(e,t,r)=>{"use strict";Object.defineProperty(r,"__esModule",{value:!0}),Object.defineProperty(r,"draftMode",{enumerable:!0,get:function(){return u}});let a=e.r(832319),n=e.r(556704),i=e.r(868665),o=e.r(213884),s=e.r(97573),c=e.r(865252),d=e.r(276414),l=e.r(204642);function u(){let e="draftMode",t=n.workAsyncStorage.getStore(),r=a.workUnitAsyncStorage.getStore();switch((!t||!r)&&(0,a.throwForMissingRequestStore)(e),r.type){case"prerender-runtime":return(0,l.delayUntilRuntimeStage)(r,f(r.draftMode,t));case"request":return f(r.draftMode,t);case"cache":case"private-cache":case"unstable-cache":let i=(0,a.getDraftModeProviderForCacheScope)(t,r);if(i)return f(i,t);case"prerender":case"prerender-ppr":case"prerender-legacy":return f(null,t);case"prerender-client":case"validation-client":{let e="`draftMode`";throw Object.defineProperty(new d.InvariantError(`${e} must not be used within a Client Component. Next.js should be preventing ${e} from being included in Client Components statically, but did not in this case.`),"__NEXT_ERROR_CODE",{value:"E1046",enumerable:!1,configurable:!0})}case"generate-static-params":throw Object.defineProperty(Error(`Route ${t.route} used \`${e}()\` inside \`generateStaticParams\`. This is not supported because \`generateStaticParams\` runs at build time without an HTTP request. Read more: https://nextjs.org/docs/messages/next-dynamic-api-wrong-context`),"__NEXT_ERROR_CODE",{value:"E1132",enumerable:!1,configurable:!0});default:return r}}function f(e,t){let r=h.get(e??p);return r||Promise.resolve(new b(e))}e.r(130759);let p={},h=new WeakMap;class b{constructor(e){this._provider=e}get isEnabled(){return null!==this._provider&&this._provider.isEnabled}enable(){y("draftMode().enable()",this.enable),null!==this._provider&&this._provider.enable()}disable(){y("draftMode().disable()",this.disable),null!==this._provider&&this._provider.disable()}}function y(e,t){let r=n.workAsyncStorage.getStore(),o=a.workUnitAsyncStorage.getStore();if(r){if((null==o?void 0:o.phase)==="after")throw Object.defineProperty(Error(`Route ${r.route} used "${e}" inside \`after()\`. The enabled status of \`draftMode()\` can be read inside \`after()\` but you cannot enable or disable \`draftMode()\`. See more info here: https://nextjs.org/docs/app/api-reference/functions/after`),"__NEXT_ERROR_CODE",{value:"E845",enumerable:!1,configurable:!0});if(r.dynamicShouldError)throw Object.defineProperty(new s.StaticGenBailoutError(`Route ${r.route} with \`dynamic = "error"\` couldn't be rendered statically because it used \`${e}\`. See more info here: https://nextjs.org/docs/app/building-your-application/rendering/static-and-dynamic#dynamic-rendering`),"__NEXT_ERROR_CODE",{value:"E553",enumerable:!1,configurable:!0});if(o)switch(o.type){case"cache":case"private-cache":{let a=Object.defineProperty(Error(`Route ${r.route} used "${e}" inside "use cache". The enabled status of \`draftMode()\` can be read in caches but you must not enable or disable \`draftMode()\` inside a cache. See more info here: https://nextjs.org/docs/messages/next-request-in-use-cache`),"__NEXT_ERROR_CODE",{value:"E829",enumerable:!1,configurable:!0});throw Error.captureStackTrace(a,t),r.invalidDynamicUsageError??=a,a}case"unstable-cache":throw Object.defineProperty(Error(`Route ${r.route} used "${e}" inside a function cached with \`unstable_cache()\`. The enabled status of \`draftMode()\` can be read in caches but you must not enable or disable \`draftMode()\` inside a cache. See more info here: https://nextjs.org/docs/app/api-reference/functions/unstable_cache`),"__NEXT_ERROR_CODE",{value:"E844",enumerable:!1,configurable:!0});case"prerender":case"prerender-runtime":{let t=Object.defineProperty(Error(`Route ${r.route} used ${e} without first calling \`await connection()\`. See more info here: https://nextjs.org/docs/messages/next-prerender-sync-headers`),"__NEXT_ERROR_CODE",{value:"E126",enumerable:!1,configurable:!0});return(0,i.abortAndThrowOnSynchronousRequestDataAccess)(r.route,e,t,o)}case"prerender-client":case"validation-client":let a="`draftMode`";throw Object.defineProperty(new d.InvariantError(`${a} must not be used within a Client Component. Next.js should be preventing ${a} from being included in Client Components statically, but did not in this case.`),"__NEXT_ERROR_CODE",{value:"E1046",enumerable:!1,configurable:!0});case"prerender-ppr":return(0,i.postponeWithTracking)(r.route,e,o.dynamicTracking);case"prerender-legacy":o.revalidate=0;let n=Object.defineProperty(new c.DynamicServerError(`Route ${r.route} couldn't be rendered statically because it used \`${e}\`. See more info here: https://nextjs.org/docs/messages/dynamic-server-error`),"__NEXT_ERROR_CODE",{value:"E558",enumerable:!1,configurable:!0});throw r.dynamicUsageDescription=e,r.dynamicUsageStack=n.stack,n;case"request":(0,i.trackDynamicDataInDynamicRender)(o);break;case"generate-static-params":throw Object.defineProperty(Error(`Route ${r.route} used \`${e}\` inside \`generateStaticParams\`. This is not supported because \`generateStaticParams\` runs at build time without an HTTP request. Read more: https://nextjs.org/docs/messages/next-dynamic-api-wrong-context`),"__NEXT_ERROR_CODE",{value:"E1121",enumerable:!1,configurable:!0})}}}(0,o.createDedupedByCallsiteServerErrorLoggerDev)(function(e,t){let r=e?`Route "${e}" `:"This route ";return Object.defineProperty(Error(`${r}used ${t}. \`draftMode()\` returns a Promise and must be unwrapped with \`await\` or \`React.use()\` before accessing its properties. Learn more: https://nextjs.org/docs/messages/sync-dynamic-apis`),"__NEXT_ERROR_CODE",{value:"E835",enumerable:!1,configurable:!0})})},493458,(e,t,r)=>{t.exports.cookies=e.r(307460).cookies,t.exports.headers=e.r(719971).headers,t.exports.draftMode=e.r(721423).draftMode},708595,(e,t,r)=>{"use strict";Object.defineProperty(r,"__esModule",{value:!0}),Object.defineProperty(r,"ReadonlyURLSearchParams",{enumerable:!0,get:function(){return n}});class a extends Error{constructor(){super("Method unavailable on `ReadonlyURLSearchParams`. Read more: https://nextjs.org/docs/app/api-reference/functions/use-search-params#updating-searchparams")}}class n extends URLSearchParams{append(){throw new a}delete(){throw new a}set(){throw new a}sort(){throw new a}}("function"==typeof r.default||"object"==typeof r.default&&null!==r.default)&&void 0===r.default.__esModule&&(Object.defineProperty(r.default,"__esModule",{value:!0}),Object.assign(r.default,r),t.exports=r.default)},950723,(e,t,r)=>{"use strict";Object.defineProperty(r,"__esModule",{value:!0}),Object.defineProperty(r,"RedirectStatusCode",{enumerable:!0,get:function(){return n}});var a,n=((a={})[a.SeeOther=303]="SeeOther",a[a.TemporaryRedirect=307]="TemporaryRedirect",a[a.PermanentRedirect=308]="PermanentRedirect",a);("function"==typeof r.default||"object"==typeof r.default&&null!==r.default)&&void 0===r.default.__esModule&&(Object.defineProperty(r.default,"__esModule",{value:!0}),Object.assign(r.default,r),t.exports=r.default)},319334,(e,t,r)=>{"use strict";Object.defineProperty(r,"__esModule",{value:!0});var a={REDIRECT_ERROR_CODE:function(){return o},isRedirectError:function(){return s}};for(var n in a)Object.defineProperty(r,n,{enumerable:!0,get:a[n]});let i=e.r(950723),o="NEXT_REDIRECT";function s(e){if("object"!=typeof e||null===e||!("digest"in e)||"string"!=typeof e.digest)return!1;let t=e.digest.split(";"),[r,a]=t,n=t.slice(2,-2).join(";"),s=Number(t.at(-2));return r===o&&("replace"===a||"push"===a)&&"string"==typeof n&&!isNaN(s)&&s in i.RedirectStatusCode}("function"==typeof r.default||"object"==typeof r.default&&null!==r.default)&&void 0===r.default.__esModule&&(Object.defineProperty(r.default,"__esModule",{value:!0}),Object.assign(r.default,r),t.exports=r.default)},922349,(e,t,r)=>{"use strict";Object.defineProperty(r,"__esModule",{value:!0});var a={getRedirectError:function(){return c},getRedirectStatusCodeFromError:function(){return p},getRedirectTypeFromError:function(){return f},getURLFromRedirectError:function(){return u},permanentRedirect:function(){return l},redirect:function(){return d}};for(var n in a)Object.defineProperty(r,n,{enumerable:!0,get:a[n]});let i=e.r(950723),o=e.r(319334),s=e.r(120635).actionAsyncStorage;function c(e,t,r=i.RedirectStatusCode.TemporaryRedirect){let a=Object.defineProperty(Error(o.REDIRECT_ERROR_CODE),"__NEXT_ERROR_CODE",{value:"E394",enumerable:!1,configurable:!0});return a.digest=`${o.REDIRECT_ERROR_CODE};${t};${e};${r};`,a}function d(e,t){throw c(e,t??=s?.getStore()?.isAction?"push":"replace",i.RedirectStatusCode.TemporaryRedirect)}function l(e,t="replace"){throw c(e,t,i.RedirectStatusCode.PermanentRedirect)}function u(e){return(0,o.isRedirectError)(e)?e.digest.split(";").slice(2,-2).join(";"):null}function f(e){if(!(0,o.isRedirectError)(e))throw Object.defineProperty(Error("Not a redirect error"),"__NEXT_ERROR_CODE",{value:"E260",enumerable:!1,configurable:!0});return e.digest.split(";",2)[1]}function p(e){if(!(0,o.isRedirectError)(e))throw Object.defineProperty(Error("Not a redirect error"),"__NEXT_ERROR_CODE",{value:"E260",enumerable:!1,configurable:!0});return Number(e.digest.split(";").at(-2))}("function"==typeof r.default||"object"==typeof r.default&&null!==r.default)&&void 0===r.default.__esModule&&(Object.defineProperty(r.default,"__esModule",{value:!0}),Object.assign(r.default,r),t.exports=r.default)},712053,(e,t,r)=>{"use strict";Object.defineProperty(r,"__esModule",{value:!0});var a={HTTPAccessErrorStatus:function(){return i},HTTP_ERROR_FALLBACK_ERROR_CODE:function(){return s},getAccessFallbackErrorTypeByStatus:function(){return l},getAccessFallbackHTTPStatus:function(){return d},isHTTPAccessFallbackError:function(){return c}};for(var n in a)Object.defineProperty(r,n,{enumerable:!0,get:a[n]});let i={NOT_FOUND:404,FORBIDDEN:403,UNAUTHORIZED:401},o=new Set(Object.values(i)),s="NEXT_HTTP_ERROR_FALLBACK";function c(e){if("object"!=typeof e||null===e||!("digest"in e)||"string"!=typeof e.digest)return!1;let[t,r]=e.digest.split(";");return t===s&&o.has(Number(r))}function d(e){return Number(e.digest.split(";")[1])}function l(e){switch(e){case 401:return"unauthorized";case 403:return"forbidden";case 404:return"not-found";default:return}}("function"==typeof r.default||"object"==typeof r.default&&null!==r.default)&&void 0===r.default.__esModule&&(Object.defineProperty(r.default,"__esModule",{value:!0}),Object.assign(r.default,r),t.exports=r.default)},102507,(e,t,r)=>{"use strict";Object.defineProperty(r,"__esModule",{value:!0}),Object.defineProperty(r,"notFound",{enumerable:!0,get:function(){return i}});let a=e.r(712053),n=`${a.HTTP_ERROR_FALLBACK_ERROR_CODE};404`;function i(){let e=Object.defineProperty(Error(n),"__NEXT_ERROR_CODE",{value:"E1041",enumerable:!1,configurable:!0});throw e.digest=n,e}("function"==typeof r.default||"object"==typeof r.default&&null!==r.default)&&void 0===r.default.__esModule&&(Object.defineProperty(r.default,"__esModule",{value:!0}),Object.assign(r.default,r),t.exports=r.default)},647658,(e,t,r)=>{"use strict";function a(){throw Object.defineProperty(Error("`forbidden()` is experimental and only allowed to be enabled when `experimental.authInterrupts` is enabled."),"__NEXT_ERROR_CODE",{value:"E488",enumerable:!1,configurable:!0})}Object.defineProperty(r,"__esModule",{value:!0}),Object.defineProperty(r,"forbidden",{enumerable:!0,get:function(){return a}}),e.r(712053).HTTP_ERROR_FALLBACK_ERROR_CODE,("function"==typeof r.default||"object"==typeof r.default&&null!==r.default)&&void 0===r.default.__esModule&&(Object.defineProperty(r.default,"__esModule",{value:!0}),Object.assign(r.default,r),t.exports=r.default)},235458,(e,t,r)=>{"use strict";function a(){throw Object.defineProperty(Error("`unauthorized()` is experimental and only allowed to be used when `experimental.authInterrupts` is enabled."),"__NEXT_ERROR_CODE",{value:"E411",enumerable:!1,configurable:!0})}Object.defineProperty(r,"__esModule",{value:!0}),Object.defineProperty(r,"unauthorized",{enumerable:!0,get:function(){return a}}),e.r(712053).HTTP_ERROR_FALLBACK_ERROR_CODE,("function"==typeof r.default||"object"==typeof r.default&&null!==r.default)&&void 0===r.default.__esModule&&(Object.defineProperty(r.default,"__esModule",{value:!0}),Object.assign(r.default,r),t.exports=r.default)},267539,(e,t,r)=>{"use strict";Object.defineProperty(r,"__esModule",{value:!0}),Object.defineProperty(r,"isPostpone",{enumerable:!0,get:function(){return n}});let a=Symbol.for("react.postpone");function n(e){return"object"==typeof e&&null!==e&&e.$$typeof===a}},462782,(e,t,r)=>{"use strict";Object.defineProperty(r,"__esModule",{value:!0}),Object.defineProperty(r,"isNextRouterError",{enumerable:!0,get:function(){return i}});let a=e.r(712053),n=e.r(319334);function i(e){return(0,n.isRedirectError)(e)||(0,a.isHTTPAccessFallbackError)(e)}("function"==typeof r.default||"object"==typeof r.default&&null!==r.default)&&void 0===r.default.__esModule&&(Object.defineProperty(r.default,"__esModule",{value:!0}),Object.assign(r.default,r),t.exports=r.default)},817387,(e,t,r)=>{"use strict";Object.defineProperty(r,"__esModule",{value:!0}),Object.defineProperty(r,"unstable_rethrow",{enumerable:!0,get:function(){return function e(t){if((0,o.isNextRouterError)(t)||(0,i.isBailoutToCSRError)(t)||(0,c.isDynamicServerError)(t)||(0,s.isDynamicPostpone)(t)||(0,n.isPostpone)(t)||(0,a.isHangingPromiseRejectionError)(t)||(0,s.isPrerenderInterruptedError)(t))throw t;t instanceof Error&&"cause"in t&&e(t.cause)}}});let a=e.r(204642),n=e.r(267539),i=e.r(331584),o=e.r(462782),s=e.r(868665),c=e.r(865252);("function"==typeof r.default||"object"==typeof r.default&&null!==r.default)&&void 0===r.default.__esModule&&(Object.defineProperty(r.default,"__esModule",{value:!0}),Object.assign(r.default,r),t.exports=r.default)},109811,(e,t,r)=>{"use strict";Object.defineProperty(r,"__esModule",{value:!0}),Object.defineProperty(r,"unstable_rethrow",{enumerable:!0,get:function(){return a}});let a=e.r(817387).unstable_rethrow;("function"==typeof r.default||"object"==typeof r.default&&null!==r.default)&&void 0===r.default.__esModule&&(Object.defineProperty(r.default,"__esModule",{value:!0}),Object.assign(r.default,r),t.exports=r.default)},379509,(e,t,r)=>{"use strict";Object.defineProperty(r,"__esModule",{value:!0});var a={ReadonlyURLSearchParams:function(){return i.ReadonlyURLSearchParams},RedirectType:function(){return f},forbidden:function(){return c.forbidden},notFound:function(){return s.notFound},permanentRedirect:function(){return o.permanentRedirect},redirect:function(){return o.redirect},unauthorized:function(){return d.unauthorized},unstable_isUnrecognizedActionError:function(){return u},unstable_rethrow:function(){return l.unstable_rethrow}};for(var n in a)Object.defineProperty(r,n,{enumerable:!0,get:a[n]});let i=e.r(708595),o=e.r(922349),s=e.r(102507),c=e.r(647658),d=e.r(235458),l=e.r(109811);function u(){throw Object.defineProperty(Error("`unstable_isUnrecognizedActionError` can only be used on the client."),"__NEXT_ERROR_CODE",{value:"E776",enumerable:!1,configurable:!0})}let f={push:"push",replace:"replace"};("function"==typeof r.default||"object"==typeof r.default&&null!==r.default)&&void 0===r.default.__esModule&&(Object.defineProperty(r.default,"__esModule",{value:!0}),Object.assign(r.default,r),t.exports=r.default)},79832,e=>{"use strict";let t,r,a,n,i,o;e.i(893145);var s=e.i(522734);e.i(814747);var c=e.i(254799);let d="./data/config.json";try{if(s.default.existsSync(d)){let e=s.default.readFileSync(d,"utf8"),t=JSON.parse(e);for(let[e,r]of Object.entries(t))null!=r&&(process.env[e]=String(r))}}catch(e){console.error("[ConfigManager] Synchronous bootstrap failed:",e)}e.i(289064);var l="function"==typeof setImmediate?setImmediate:"object"==typeof scheduler&&"function"==typeof scheduler.postTask?scheduler.postTask.bind(scheduler):setTimeout,u="./ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789".split(""),f=[-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,0,1,54,55,56,57,58,59,60,61,62,63,-1,-1,-1,-1,-1,-1,-1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,-1,-1,-1,-1,-1,-1,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,-1,-1,-1,-1,-1];function p(e,t){var r,a,n=0,i=[];if(t<=0||t>e.length)throw Error("Illegal len: "+t);for(;n<t;){if(r=255&e[n++],i.push(u[r>>2&63]),r=(3&r)<<4,n>=t||(r|=(a=255&e[n++])>>4&15,i.push(u[63&r]),r=(15&a)<<2,n>=t)){i.push(u[63&r]);break}r|=(a=255&e[n++])>>6&3,i.push(u[63&r]),i.push(u[63&a])}return i.join("")}var h=16,b=10,y=[0x243f6a88,0x85a308d3,0x13198a2e,0x3707344,0xa4093822,0x299f31d0,0x82efa98,0xec4e6c89,0x452821e6,0x38d01377,0xbe5466cf,0x34e90c6c,0xc0ac29b7,0xc97c50dd,0x3f84d5b5,0xb5470917,0x9216d5d9,0x8979fb1b],m=[0xd1310ba6,0x98dfb5ac,0x2ffd72db,0xd01adfb7,0xb8e1afed,0x6a267e96,0xba7c9045,0xf12c7f99,0x24a19947,0xb3916cf7,0x801f2e2,0x858efc16,0x636920d8,0x71574e69,0xa458fea3,0xf4933d7e,0xd95748f,0x728eb658,0x718bcd58,0x82154aee,0x7b54a41d,0xc25a59b5,0x9c30d539,0x2af26013,0xc5d1b023,0x286085f0,0xca417918,0xb8db38ef,0x8e79dcb0,0x603a180e,0x6c9e0e8b,0xb01e8a3e,0xd71577c1,0xbd314b27,0x78af2fda,0x55605c60,0xe65525f3,0xaa55ab94,0x57489862,0x63e81440,0x55ca396a,0x2aab10b6,0xb4cc5c34,0x1141e8ce,0xa15486af,0x7c72e993,0xb3ee1411,0x636fbc2a,0x2ba9c55d,0x741831f6,0xce5c3e16,0x9b87931e,0xafd6ba33,0x6c24cf5c,0x7a325381,0x28958677,0x3b8f4898,0x6b4bb9af,0xc4bfe81b,0x66282193,0x61d809cc,0xfb21a991,0x487cac60,0x5dec8032,0xef845d5d,0xe98575b1,0xdc262302,0xeb651b88,0x23893e81,0xd396acc5,0xf6d6ff3,0x83f44239,0x2e0b4482,0xa4842004,0x69c8f04a,0x9e1f9b5e,0x21c66842,0xf6e96c9a,0x670c9c61,0xabd388f0,0x6a51a0d2,0xd8542f68,0x960fa728,0xab5133a3,0x6eef0b6c,0x137a3be4,0xba3bf050,0x7efb2a98,0xa1f1651d,0x39af0176,0x66ca593e,0x82430e88,0x8cee8619,0x456f9fb4,0x7d84a5c3,0x3b8b5ebe,0xe06f75d8,0x85c12073,0x401a449f,0x56c16aa6,0x4ed3aa62,0x363f7706,0x1bfedf72,0x429b023d,0x37d0d724,0xd00a1248,0xdb0fead3,0x49f1c09b,0x75372c9,0x80991b7b,0x25d479d8,0xf6e8def7,0xe3fe501a,0xb6794c3b,0x976ce0bd,0x4c006ba,0xc1a94fb6,0x409f60c4,0x5e5c9ec2,0x196a2463,0x68fb6faf,0x3e6c53b5,0x1339b2eb,0x3b52ec6f,0x6dfc511f,0x9b30952c,0xcc814544,0xaf5ebd09,0xbee3d004,0xde334afd,0x660f2807,0x192e4bb3,0xc0cba857,0x45c8740f,0xd20b5f39,0xb9d3fbdb,0x5579c0bd,0x1a60320a,0xd6a100c6,0x402c7279,0x679f25fe,0xfb1fa3cc,0x8ea5e9f8,0xdb3222f8,0x3c7516df,0xfd616b15,0x2f501ec8,0xad0552ab,0x323db5fa,0xfd238760,0x53317b48,0x3e00df82,0x9e5c57bb,0xca6f8ca0,0x1a87562e,0xdf1769db,0xd542a8f6,0x287effc3,0xac6732c6,0x8c4f5573,0x695b27b0,0xbbca58c8,0xe1ffa35d,0xb8f011a0,0x10fa3d98,0xfd2183b8,0x4afcb56c,0x2dd1d35b,0x9a53e479,0xb6f84565,0xd28e49bc,0x4bfb9790,0xe1ddf2da,0xa4cb7e33,0x62fb1341,0xcee4c6e8,0xef20cada,0x36774c01,0xd07e9efe,0x2bf11fb4,0x95dbda4d,0xae909198,0xeaad8e71,0x6b93d5a0,0xd08ed1d0,0xafc725e0,0x8e3c5b2f,0x8e7594b7,0x8ff6e2fb,0xf2122b64,0x8888b812,0x900df01c,0x4fad5ea0,0x688fc31c,0xd1cff191,0xb3a8c1ad,0x2f2f2218,0xbe0e1777,0xea752dfe,0x8b021fa1,0xe5a0cc0f,0xb56f74e8,0x18acf3d6,0xce89e299,0xb4a84fe0,0xfd13e0b7,0x7cc43b81,0xd2ada8d9,0x165fa266,0x80957705,0x93cc7314,0x211a1477,0xe6ad2065,0x77b5fa86,0xc75442f5,0xfb9d35cf,0xebcdaf0c,0x7b3e89a0,0xd6411bd3,0xae1e7e49,2428461,0x2071b35e,0x226800bb,0x57b8e0af,0x2464369b,0xf009b91e,0x5563911d,0x59dfa6aa,0x78c14389,0xd95a537f,0x207d5ba2,0x2e5b9c5,0x83260376,0x6295cfa9,0x11c81968,0x4e734a41,0xb3472dca,0x7b14a94a,0x1b510052,0x9a532915,0xd60f573f,0xbc9bc6e4,0x2b60a476,0x81e67400,0x8ba6fb5,0x571be91f,0xf296ec6b,0x2a0dd915,0xb6636521,0xe7b9f9b6,0xff34052e,0xc5855664,0x53b02d5d,0xa99f8fa1,0x8ba4799,0x6e85076a,0x4b7a70e9,0xb5b32944,0xdb75092e,0xc4192623,290971e4,0x49a7df7d,0x9cee60b8,0x8fedb266,0xecaa8c71,0x699a17ff,0x5664526c,0xc2b19ee1,0x193602a5,0x75094c29,0xa0591340,0xe4183a3e,0x3f54989a,0x5b429d65,0x6b8fe4d6,0x99f73fd6,0xa1d29c07,0xefe830f5,0x4d2d38e6,0xf0255dc1,0x4cdd2086,0x8470eb26,0x6382e9c6,0x21ecc5e,0x9686b3f,0x3ebaefc9,0x3c971814,0x6b6a70a1,0x687f3584,0x52a0e286,0xb79c5305,0xaa500737,0x3e07841c,0x7fdeae5c,0x8e7d44ec,0x5716f2b8,0xb03ada37,0xf0500c0d,0xf01c1f04,0x200b3ff,0xae0cf51a,0x3cb574b2,0x25837a58,0xdc0921bd,0xd19113f9,0x7ca92ff6,0x94324773,0x22f54701,0x3ae5e581,0x37c2dadc,0xc8b57634,0x9af3dda7,0xa9446146,0xfd0030e,0xecc8c73e,0xa4751e41,0xe238cd99,0x3bea0e2f,0x3280bba1,0x183eb331,0x4e548b38,0x4f6db908,0x6f420d03,0xf60a04bf,0x2cb81290,0x24977c79,0x5679b072,0xbcaf89af,0xde9a771f,0xd9930810,0xb38bae12,0xdccf3f2e,0x5512721f,0x2e6b7124,0x501adde6,0x9f84cd87,0x7a584718,0x7408da17,0xbc9f9abc,0xe94b7d8c,0xec7aec3a,0xdb851dfa,0x63094366,0xc464c3d2,0xef1c1847,0x3215d908,0xdd433b37,0x24c2ba16,0x12a14d43,0x2a65c451,0x50940002,0x133ae4dd,0x71dff89e,0x10314e55,0x81ac77d6,0x5f11199b,0x43556f1,0xd7a3c76b,0x3c11183b,0x5924a509,0xf28fe6ed,0x97f1fbfa,0x9ebabf2c,0x1e153c6e,0x86e34570,0xeae96fb1,0x860e5e0a,0x5a3e2ab3,0x771fe71c,0x4e3d06fa,0x2965dcb9,0x99e71d0f,0x803e89d6,0x5266c825,0x2e4cc978,0x9c10b36a,0xc6150eba,0x94e2ea78,0xa5fc3c53,0x1e0a2df4,0xf2f74ea7,0x361d2b3d,0x1939260f,0x19c27960,0x5223a708,0xf71312b6,0xebadfe6e,0xeac31f66,0xe3bc4595,0xa67bc883,0xb17f37d1,0x18cff28,0xc332ddef,0xbe6c5aa5,0x65582185,0x68ab9802,0xeecea50f,0xdb2f953b,0x2aef7dad,0x5b6e2f84,0x1521b628,0x29076170,0xecdd4775,0x619f1510,0x13cca830,0xeb61bd96,0x334fe1e,0xaa0363cf,0xb5735c90,0x4c70a239,0xd59e9e0b,0xcbaade14,0xeecc86bc,0x60622ca7,0x9cab5cab,0xb2f3846e,0x648b1eaf,0x19bdf0ca,0xa02369b9,0x655abb50,0x40685a32,0x3c2ab4b3,0x319ee9d5,0xc021b8f7,0x9b540b19,0x875fa099,0x95f7997e,0x623d7da8,0xf837889a,0x97e32d77,0x11ed935f,0x16681281,0xe358829,0xc7e61fd6,0x96dedfa1,0x7858ba99,0x57f584a5,0x1b227263,0x9b83c3ff,0x1ac24696,0xcdb30aeb,0x532e3054,0x8fd948e4,0x6dbc3128,0x58ebf2ef,0x34c6ffea,0xfe28ed61,0xee7c3c73,0x5d4a14d9,0xe864b7e3,0x42105d14,0x203e13e0,0x45eee2b6,0xa3aaabea,0xdb6c4f15,0xfacb4fd0,0xc742f442,0xef6abbb5,0x654f3b1d,0x41cd2105,0xd81e799e,0x86854dc7,0xe44b476a,0x3d816250,0xcf62a1f2,0x5b8d2646,0xfc8883a0,0xc1c7b6a3,0x7f1524c3,0x69cb7492,0x47848a0b,0x5692b285,0x95bbf00,0xad19489d,0x1462b174,0x23820e00,0x58428d2a,0xc55f5ea,0x1dadf43e,0x233f7061,0x3372f092,0x8d937e41,0xd65fecf1,0x6c223bdb,0x7cde3759,0xcbee7460,0x4085f2a7,0xce77326e,0xa6078084,0x19f8509e,0xe8efd855,0x61d99735,0xa969a7aa,0xc50c06c2,0x5a04abfc,0x800bcadc,0x9e447a2e,0xc3453484,0xfdd56705,0xe1e9ec9,0xdb73dbd3,0x105588cd,0x675fda79,0xe3674340,0xc5c43465,0x713e38d8,0x3d28f89e,0xf16dff20,0x153e21e7,0x8fb03d4a,0xe6e39f2b,0xdb83adf7,0xe93d5a68,0x948140f7,0xf64c261c,0x94692934,0x411520f7,0x7602d4f7,0xbcf46b2e,0xd4a20068,0xd4082471,0x3320f46a,0x43b7d4b7,0x500061af,0x1e39f62e,0x97244546,0x14214f74,0xbf8b8840,0x4d95fc1d,0x96b591af,0x70f4ddd3,0x66a02f45,0xbfbc09ec,0x3bd9785,0x7fac6dd0,0x31cb8504,0x96eb27b3,0x55fd3941,0xda2547e6,0xabca0a9a,0x28507825,0x530429f4,0xa2c86da,0xe9b66dfb,0x68dc1462,0xd7486900,0x680ec0a4,0x27a18dee,0x4f3ffea2,0xe887ad8c,0xb58ce006,0x7af4d6b6,0xaace1e7c,0xd3375fec,0xce78a399,0x406b2a42,0x20fe9e35,0xd9f385b9,0xee39d7ab,0x3b124e8b,0x1dc9faf7,0x4b6d1856,0x26a36631,0xeae397b2,0x3a6efa74,0xdd5b4332,0x6841e7f7,0xca7820fb,0xfb0af54e,0xd8feb397,0x454056ac,0xba489527,0x55533a3a,0x20838d87,0xfe6ba9b7,0xd096954b,0x55a867bc,0xa1159a58,0xcca92963,0x99e1db33,0xa62a4a56,0x3f3125f9,0x5ef47e1c,0x9029317c,0xfdf8e802,0x4272f70,0x80bb155c,0x5282ce3,0x95c11548,0xe4c66d22,0x48c1133f,0xc70f86dc,0x7f9c9ee,0x41041f0f,0x404779a4,0x5d886e17,0x325f51eb,0xd59bc0d1,0xf2bcc18f,0x41113564,0x257b7834,0x602a9c60,0xdff8e8a3,0x1f636c1b,0xe12b4c2,0x2e1329e,0xaf664fd1,0xcad18115,0x6b2395e0,0x333e92e1,0x3b240b62,0xeebeb922,0x85b2a20e,0xe6ba0d99,0xde720c8c,0x2da2f728,0xd0127845,0x95b794fd,0x647d0862,0xe7ccf5f0,0x5449a36f,0x877d48fa,0xc39dfd27,0xf33e8d1e,0xa476341,0x992eff74,0x3a6f6eab,0xf4f8fd37,0xa812dc60,0xa1ebddf8,0x991be14c,0xdb6e6b0d,0xc67b5510,0x6d672c37,0x2765d43b,0xdcd0e804,0xf1290dc7,0xcc00ffa3,0xb5390f92,0x690fed0b,0x667b9ffb,0xcedb7d9c,0xa091cf0b,0xd9155ea3,0xbb132f88,0x515bad24,0x7b9479bf,0x763bd6eb,0x37392eb3,0xcc115979,0x8026e297,0xf42e312d,0x6842ada7,0xc66a2b3b,0x12754ccc,0x782ef11c,0x6a124237,0xb79251e7,0x6a1bbe6,0x4bfb6350,0x1a6b1018,0x11caedfa,0x3d25bdd8,0xe2e1c3c9,0x44421659,0xa121386,0xd90cec6e,0xd5abea2a,0x64af674e,0xda86a85f,0xbebfe988,0x64e4c3fe,0x9dbc8057,0xf0f7c086,0x60787bf8,0x6003604d,0xd1fd8346,0xf6381fb0,0x7745ae04,0xd736fccc,0x83426b33,0xf01eab71,0xb0804187,0x3c005e5f,0x77a057be,0xbde8ae24,0x55464299,0xbf582e61,0x4e58f48f,0xf2ddfda2,0xf474ef38,0x8789bdc2,0x5366f9c3,0xc8b38e74,0xb475f255,0x46fcd9b9,0x7aeb2661,0x8b1ddf84,0x846a0e79,0x915f95e2,0x466e598e,0x20b45770,0x8cd55591,0xc902de4c,0xb90bace1,0xbb8205d0,0x11a86248,0x7574a99e,0xb77f19b6,0xe0a9dc09,0x662d09a1,0xc4324633,0xe85a1f02,0x9f0be8c,0x4a99a025,0x1d6efe10,0x1ab93d1d,0xba5a4df,0xa186f20f,0x2868f169,0xdcb7da83,0x573906fe,0xa1e2ce9b,0x4fcd7f52,0x50115e01,0xa70683fa,0xa002b5c4,0xde6d027,0x9af88c27,0x773f8641,0xc3604c06,0x61a806b5,0xf0177a28,0xc0f586e0,6314154,0x30dc7d62,0x11e69ed7,0x2338ea63,0x53c2dd94,0xc2c21634,0xbbcbee56,0x90bcb6de,0xebfc7da1,0xce591d76,0x6f05e409,0x4b7c0188,0x39720a3d,0x7c927c24,0x86e3725f,0x724d9db9,0x1ac15bb4,0xd39eb8fc,0xed545578,0x8fca5b5,0xd83d7cd3,0x4dad0fc4,0x1e50ef5e,0xb161e6f8,0xa28514d9,0x6c51133c,0x6fd5c7e7,0x56e14ec4,0x362abfce,0xddc6c837,0xd79a3234,0x92638212,0x670efa8e,0x406000e0,0x3a39ce37,0xd3faf5cf,0xabc27737,0x5ac52d1b,0x5cb0679e,0x4fa33742,0xd3822740,0x99bc9bbe,0xd5118e9d,0xbf0f7315,0xd62d1c7e,0xc700c47b,0xb78c1b6b,0x21a19045,0xb26eb1be,0x6a366eb4,0x5748ab2f,0xbc946e79,0xc6a376d2,0x6549c2c8,0x530ff8ee,0x468dde7d,0xd5730a1d,0x4cd04dc6,0x2939bbdb,0xa9ba4650,0xac9526e8,0xbe5ee304,0xa1fad5f0,0x6a2d519a,0x63ef8ce2,0x9a86ee22,0xc089c2b8,0x43242ef6,0xa51e03aa,0x9cf2d0a4,0x83c061ba,0x9be96a4d,0x8fe51550,0xba645bd6,0x2826a2f9,0xa73a3ae1,0x4ba99586,0xef5562e9,0xc72fefd3,0xf752f7da,0x3f046f69,0x77fa0a59,0x80e4a915,0x87b08601,0x9b09e6ad,0x3b3ee593,0xe990fd5a,0x9e34d797,0x2cf0b7d9,0x22b8b51,0x96d5ac3a,0x17da67d,0xd1cf3ed6,0x7c7d2d28,0x1f9f25cf,0xadf2b89b,0x5ad6b472,0x5a88f54c,0xe029ac71,0xe019a5e6,0x47b0acfd,0xed93fa9b,0xe8d3c48d,0x283b57cc,0xf8d56629,0x79132e28,0x785f0191,0xed756055,0xf7960e44,0xe3d35e8c,0x15056dd4,0x88f46dba,0x3a16125,0x564f0bd,0xc3eb9e15,0x3c9057a2,0x97271aec,0xa93a072a,0x1b3f6d9b,0x1e6321f5,0xf59c66fb,0x26dcf319,0x7533d928,0xb155fdf5,0x3563482,0x8aba3cbb,0x28517711,0xc20ad9f8,0xabcc5167,0xccad925f,0x4de81751,0x3830dc8e,0x379d5862,0x9320f991,0xea7a90c2,0xfb3e7bce,0x5121ce64,0x774fbe32,0xa8b6e37e,0xc3293d46,0x48de5369,0x6413e680,0xa2ae0810,0xdd6db224,0x69852dfd,0x9072166,0xb39a460a,0x6445c0dd,0x586cdecf,0x1c20c8ae,0x5bbef7dd,0x1b588d40,0xccd2017f,0x6bb4e3bb,0xdda26a7e,0x3a59ff45,0x3e350a44,0xbcb4cdd5,0x72eacea8,0xfa6484bb,0x8d6612ae,0xbf3c6f47,0xd29be463,0x542f5d9e,0xaec2771b,0xf64e6370,0x740e0d8d,0xe75b1357,0xf8721671,0xaf537d5d,0x4040cb08,0x4eb4e2cc,0x34d2466a,0x115af84,3786409e3,0x95983a1d,0x6b89fb4,0xce6ea048,0x6f3f3b82,0x3520ab82,0x11a1d4b,0x277227f8,0x611560b1,0xe7933fdc,0xbb3a792b,0x344525bd,0xa08839e1,0x51ce794b,0x2f32c9b7,0xa01fbac9,0xe01cc87e,0xbcc7d1f6,0xcf0111c3,0xa1e8aac7,0x1a908749,0xd44fbd9a,0xd0dadecb,0xd50ada38,0x339c32a,0xc6913667,0x8df9317c,0xe0b12b4f,0xf79e59b7,0x43f5bb3a,0xf2d519ff,0x27d9459c,0xbf97222c,0x15e6fc2a,0xf91fc71,0x9b941525,0xfae59361,0xceb69ceb,0xc2a86459,0x12baa8d1,0xb6c1075e,0xe3056a0c,0x10d25065,0xcb03a442,0xe0ec6e0e,0x1698db3b,0x4c98a0be,0x3278e964,0x9f1f9532,0xe0d392df,0xd3a0342b,0x8971f21e,0x1b0a7441,0x4ba3348c,0xc5be7120,0xc37632d8,0xdf359f8d,0x9b992f2e,0xe60b6f47,0xfe3f11d,0xe54cda54,0x1edad891,0xce6279cf,0xcd3e7e6f,0x1618b166,0xfd2c1d05,0x848fd2c5,0xf6fb2299,0xf523f357,0xa6327623,0x93a83531,0x56cccd02,0xacf08162,0x5a75ebb5,0x6e163697,0x88d273cc,0xde966292,0x81b949d0,0x4c50901b,0x71c65614,0xe6c6c7bd,0x327a140a,0x45e1d006,0xc3f27b9a,0xc9aa53fd,0x62a80f00,0xbb25bfe2,0x35bdd2f6,0x71126905,0xb2040222,0xb6cbcf7c,0xcd769c2b,0x53113ec0,0x1640e3d3,0x38abbd60,0x2547adf0,0xba38209c,0xf746ce76,0x77afa1c5,0x20756060,0x85cbfe4e,0x8ae88dd8,0x7aaaf9b0,0x4cf9aa7e,0x1948c25c,0x2fb8a8c,0x1c36ae4,0xd6ebe1f9,0x90d4f869,0xa65cdea0,0x3f09252d,0xc208e69f,0xb74e6132,0xce77e25b,0x578fdfe3,0x3ac372e6],g=[0x4f727068,0x65616e42,0x65686f6c,0x64657253,0x63727944,0x6f756274];function x(e,t,r,a){var n=e[t],i=e[t+1];return n^=r[0],i^=(a[n>>>24]+a[256|n>>16&255]^a[512|n>>8&255])+a[768|255&n]^r[1],n^=(a[i>>>24]+a[256|i>>16&255]^a[512|i>>8&255])+a[768|255&i]^r[2],i^=(a[n>>>24]+a[256|n>>16&255]^a[512|n>>8&255])+a[768|255&n]^r[3],n^=(a[i>>>24]+a[256|i>>16&255]^a[512|i>>8&255])+a[768|255&i]^r[4],i^=(a[n>>>24]+a[256|n>>16&255]^a[512|n>>8&255])+a[768|255&n]^r[5],n^=(a[i>>>24]+a[256|i>>16&255]^a[512|i>>8&255])+a[768|255&i]^r[6],i^=(a[n>>>24]+a[256|n>>16&255]^a[512|n>>8&255])+a[768|255&n]^r[7],n^=(a[i>>>24]+a[256|i>>16&255]^a[512|i>>8&255])+a[768|255&i]^r[8],i^=(a[n>>>24]+a[256|n>>16&255]^a[512|n>>8&255])+a[768|255&n]^r[9],n^=(a[i>>>24]+a[256|i>>16&255]^a[512|i>>8&255])+a[768|255&i]^r[10],i^=(a[n>>>24]+a[256|n>>16&255]^a[512|n>>8&255])+a[768|255&n]^r[11],n^=(a[i>>>24]+a[256|i>>16&255]^a[512|i>>8&255])+a[768|255&i]^r[12],i^=(a[n>>>24]+a[256|n>>16&255]^a[512|n>>8&255])+a[768|255&n]^r[13],n^=(a[i>>>24]+a[256|i>>16&255]^a[512|i>>8&255])+a[768|255&i]^r[14],i^=(a[n>>>24]+a[256|n>>16&255]^a[512|n>>8&255])+a[768|255&n]^r[15],n^=(a[i>>>24]+a[256|i>>16&255]^a[512|i>>8&255])+a[768|255&i]^r[16],e[t]=i^r[17],e[t+1]=n,e}function w(e,t){for(var r=0,a=0;r<4;++r)a=a<<8|255&e[t],t=(t+1)%e.length;return{key:a,offp:t}}function _(e,t,r){for(var a,n=0,i=[0,0],o=t.length,s=r.length,c=0;c<o;c++)n=(a=w(e,n)).offp,t[c]=t[c]^a.key;for(c=0;c<o;c+=2)i=x(i,0,t,r),t[c]=i[0],t[c+1]=i[1];for(c=0;c<s;c+=2)i=x(i,0,t,r),r[c]=i[0],r[c+1]=i[1]}function v(e,t,r,a,n){var i,o,s=g.slice(),c=s.length;if(r<4||r>31){if(o=Error("Illegal number of rounds (4-31): "+r),a)return void l(a.bind(this,o));throw o}if(t.length!==h){if(o=Error("Illegal salt length: "+t.length+" != "+h),a)return void l(a.bind(this,o));throw o}r=1<<r>>>0;var d,u,f,p=0;function b(){if(n&&n(p/r),p<r)for(var i=Date.now();p<r&&(p+=1,_(e,d,u),_(t,d,u),!(Date.now()-i>100)););else{for(p=0;p<64;p++)for(f=0;f<c>>1;f++)x(s,f<<1,d,u);var o=[];for(p=0;p<c;p++)o.push((s[p]>>24&255)>>>0),o.push((s[p]>>16&255)>>>0),o.push((s[p]>>8&255)>>>0),o.push((255&s[p])>>>0);return a?void a(null,o):o}a&&l(b)}if("function"==typeof Int32Array?(d=new Int32Array(y),u=new Int32Array(m)):(d=y.slice(),u=m.slice()),!function(e,t,r,a){for(var n,i=0,o=[0,0],s=r.length,c=a.length,d=0;d<s;d++)i=(n=w(t,i)).offp,r[d]=r[d]^n.key;for(d=0,i=0;d<s;d+=2)i=(n=w(e,i)).offp,o[0]^=n.key,i=(n=w(e,i)).offp,o[1]^=n.key,o=x(o,0,r,a),r[d]=o[0],r[d+1]=o[1];for(d=0;d<c;d+=2)i=(n=w(e,i)).offp,o[0]^=n.key,i=(n=w(e,i)).offp,o[1]^=n.key,o=x(o,0,r,a),a[d]=o[0],a[d+1]=o[1]}(t,e,d,u),void 0!==a)b();else for(;;)if(void 0!==(i=b()))return i||[]}function k(e,t,r,a){if("string"!=typeof e||"string"!=typeof t){if(n=Error("Invalid string / salt: Not a string"),r)return void l(r.bind(this,n));throw n}if("$"!==t.charAt(0)||"2"!==t.charAt(1)){if(n=Error("Invalid salt version: "+t.substring(0,2)),r)return void l(r.bind(this,n));throw n}if("$"===t.charAt(2))i="\0",o=3;else{if("a"!==(i=t.charAt(2))&&"b"!==i&&"y"!==i||"$"!==t.charAt(3)){if(n=Error("Invalid salt revision: "+t.substring(2,4)),r)return void l(r.bind(this,n));throw n}o=4}if(t.charAt(o+2)>"$"){if(n=Error("Missing salt rounds"),r)return void l(r.bind(this,n));throw n}var n,i,o,s=10*parseInt(t.substring(o,o+1),10)+parseInt(t.substring(o+1,o+2),10),c=t.substring(o+3,o+25),d=function(e){for(var t,r,a=0,n=Array(function(e){for(var t=0,r=0,a=0;a<e.length;++a)(r=e.charCodeAt(a))<128?t+=1:r<2048?t+=2:(64512&r)==55296&&(64512&e.charCodeAt(a+1))==56320?(++a,t+=4):t+=3;return t}(e)),i=0,o=e.length;i<o;++i)(t=e.charCodeAt(i))<128?n[a++]=t:(t<2048?n[a++]=t>>6|192:((64512&t)==55296&&(64512&(r=e.charCodeAt(i+1)))==56320?(t=65536+((1023&t)<<10)+(1023&r),++i,n[a++]=t>>18|240,n[a++]=t>>12&63|128):n[a++]=t>>12|224,n[a++]=t>>6&63|128),n[a++]=63&t|128);return n}(e+=i>="a"?"\0":""),u=function(e,t){var r,a,n,i,o,s=0,c=e.length,d=0,l=[];if(t<=0)throw Error("Illegal len: "+t);for(;s<c-1&&d<t&&(r=(o=e.charCodeAt(s++))<f.length?f[o]:-1,a=(o=e.charCodeAt(s++))<f.length?f[o]:-1,-1!=r&&-1!=a)&&(i=r<<2>>>0|(48&a)>>4,l.push(String.fromCharCode(i)),!(++d>=t||s>=c||-1==(n=(o=e.charCodeAt(s++))<f.length?f[o]:-1)||(i=(15&a)<<4>>>0|(60&n)>>2,l.push(String.fromCharCode(i)),++d>=t||s>=c)));){;i=(3&n)<<6>>>0|((o=e.charCodeAt(s++))<f.length?f[o]:-1),l.push(String.fromCharCode(i)),++d}var u=[];for(s=0;s<d;s++)u.push(l[s].charCodeAt(0));return u}(c,h);function b(e){var t=[];return t.push("$2"),i>="a"&&t.push(i),t.push("$"),s<10&&t.push("0"),t.push(s.toString()),t.push("$"),t.push(p(u,u.length)),t.push(p(e,4*g.length-1)),t.join("")}if(void 0===r)return b(v(d,u,s));v(d,u,s,function(e,t){e?r(e,null):r(null,b(t))},a)}var E=function(e,t,r,a,n){if("m"===a)throw TypeError("Private method is not writable");if("a"===a&&!n)throw TypeError("Private accessor was defined without a setter");if("function"==typeof t?e!==t||!n:!t.has(e))throw TypeError("Cannot write private member to an object whose class did not declare it");return"a"===a?n.call(e,r):n?n.value=r:t.set(e,r),r},A=function(e,t,r,a){if("a"===r&&!a)throw TypeError("Private accessor was defined without a getter");if("function"==typeof t?e!==t||!a:!t.has(e))throw TypeError("Cannot read private member from an object whose class did not declare it");return"m"===r?a:"a"===r?a.call(e):a?a.value:t.get(e)};function S(e){let t=e?"__Secure-":"";return{sessionToken:{name:`${t}authjs.session-token`,options:{httpOnly:!0,sameSite:"lax",path:"/",secure:e}},callbackUrl:{name:`${t}authjs.callback-url`,options:{httpOnly:!0,sameSite:"lax",path:"/",secure:e}},csrfToken:{name:`${e?"__Host-":""}authjs.csrf-token`,options:{httpOnly:!0,sameSite:"lax",path:"/",secure:e}},pkceCodeVerifier:{name:`${t}authjs.pkce.code_verifier`,options:{httpOnly:!0,sameSite:"lax",path:"/",secure:e,maxAge:900}},state:{name:`${t}authjs.state`,options:{httpOnly:!0,sameSite:"lax",path:"/",secure:e,maxAge:900}},nonce:{name:`${t}authjs.nonce`,options:{httpOnly:!0,sameSite:"lax",path:"/",secure:e}},webauthnChallenge:{name:`${t}authjs.challenge`,options:{httpOnly:!0,sameSite:"lax",path:"/",secure:e,maxAge:900}}}}class R{constructor(e,t,r){if(rj.add(this),rI.set(this,{}),rH.set(this,void 0),rD.set(this,void 0),E(this,rD,r,"f"),E(this,rH,e,"f"),!t)return;const{name:a}=e;for(const[e,r]of Object.entries(t))e.startsWith(a)&&r&&(A(this,rI,"f")[e]=r)}get value(){return Object.keys(A(this,rI,"f")).sort((e,t)=>parseInt(e.split(".").pop()||"0")-parseInt(t.split(".").pop()||"0")).map(e=>A(this,rI,"f")[e]).join("")}chunk(e,t){let r=A(this,rj,"m",rL).call(this);for(let a of A(this,rj,"m",rW).call(this,{name:A(this,rH,"f").name,value:e,options:{...A(this,rH,"f").options,...t}}))r[a.name]=a;return Object.values(r)}clean(){return Object.values(A(this,rj,"m",rL).call(this))}}rI=new WeakMap,rH=new WeakMap,rD=new WeakMap,rj=new WeakSet,rW=function(e){let t=Math.ceil(e.value.length/3936);if(1===t)return A(this,rI,"f")[e.name]=e.value,[e];let r=[];for(let a=0;a<t;a++){let t=`${e.name}.${a}`,n=e.value.substr(3936*a,3936);r.push({...e,name:t,value:n}),A(this,rI,"f")[t]=n}return A(this,rD,"f").debug("CHUNKING_SESSION_COOKIE",{message:"Session cookie exceeds allowed 4096 bytes.",emptyCookieSize:160,valueSize:e.value.length,chunks:r.map(e=>e.value.length+160)}),r},rL=function(){let e={};for(let t in A(this,rI,"f"))delete A(this,rI,"f")?.[t],e[t]={name:t,value:"",options:{...A(this,rH,"f").options,maxAge:0}};return e};class T extends Error{constructor(e,t){e instanceof Error?super(void 0,{cause:{err:e,...e.cause,...t}}):"string"==typeof e?(t instanceof Error&&(t={err:t,...t.cause}),super(e,t)):super(void 0,e),this.name=this.constructor.name,this.type=this.constructor.type??"AuthError",this.kind=this.constructor.kind??"error",Error.captureStackTrace?.(this,this.constructor);const r=`https://errors.authjs.dev#${this.type.toLowerCase()}`;this.message+=`${this.message?". ":""}Read more at ${r}`}}class P extends T{}P.kind="signIn";class C extends T{}C.type="AdapterError";class O extends T{}O.type="AccessDenied";class U extends T{}U.type="CallbackRouteError";class $ extends T{}$.type="ErrorPageLoop";class j extends T{}j.type="EventError";class I extends T{}I.type="InvalidCallbackUrl";class H extends P{constructor(){super(...arguments),this.code="credentials"}}H.type="CredentialsSignin";class D extends T{}D.type="InvalidEndpoints";class W extends T{}W.type="InvalidCheck";class L extends T{}L.type="JWTSessionError";class M extends T{}M.type="MissingAdapter";class N extends T{}N.type="MissingAdapterMethods";class K extends T{}K.type="MissingAuthorize";class J extends T{}J.type="MissingSecret";class B extends P{}B.type="OAuthAccountNotLinked";class z extends P{}z.type="OAuthCallbackError";class q extends T{}q.type="OAuthProfileParseError";class F extends T{}F.type="SessionTokenError";class V extends T{}V.type="SignOutError";class G extends T{}G.type="UnknownAction";class X extends T{}X.type="UnsupportedStrategy";class Y extends T{}Y.type="InvalidProvider";class Z extends T{}Z.type="UntrustedHost";class Q extends T{}Q.type="Verification";class ee extends P{}ee.type="MissingCSRF";let et=new Set(["CredentialsSignin","OAuthAccountNotLinked","OAuthCallbackError","AccessDenied","Verification","MissingCSRF","AccountNotLinked","WebAuthnVerificationError"]);class er extends T{}er.type="DuplicateConditionalUI";class ea extends T{}ea.type="MissingWebAuthnAutocomplete";class en extends T{}en.type="WebAuthnVerificationError";class ei extends P{}ei.type="AccountNotLinked";class eo extends T{}eo.type="ExperimentalFeatureNotEnabled";let es=!1;function ec(e,t){try{return/^https?:/.test(new URL(e,e.startsWith("/")?t:void 0).protocol)}catch{return!1}}let ed=!1,el=!1,eu=!1,ef=["createVerificationToken","useVerificationToken","getUserByEmail"],ep=["createUser","getUser","getUserByEmail","getUserByAccount","updateUser","linkAccount","createSession","getSessionAndUser","updateSession","deleteSession"],eh=["createUser","getUser","linkAccount","getAccount","getAuthenticator","createAuthenticator","listAuthenticatorsByUserId","updateAuthenticatorCounter"];"function"!=typeof c.hkdf||process.versions.electron||(t=async(...e)=>new Promise((t,r)=>{c.hkdf(...e,(e,a)=>{e?r(e):t(new Uint8Array(a))})}));let eb=async(e,r,a,n,i)=>(t||((e,t,r,a,n)=>{let i=parseInt(e.substr(3),10)>>3||20,o=(0,c.createHmac)(e,r.byteLength?r:new Uint8Array(i)).update(t).digest(),s=Math.ceil(n/i),d=new Uint8Array(i*s+a.byteLength+1),l=0,u=0;for(let t=1;t<=s;t++)d.set(a,u),d[u+a.byteLength]=t,d.set((0,c.createHmac)(e,o).update(d.subarray(l,u+a.byteLength+1)).digest(),u),l=u,u+=i;return d.slice(0,n)}))(e,r,a,n,i);function ey(e,t){if("string"==typeof e)return new TextEncoder().encode(e);if(!(e instanceof Uint8Array))throw TypeError(`"${t}"" must be an instance of Uint8Array or a string`);return e}async function em(e,t,r,a,n){return eb(function(e){switch(e){case"sha256":case"sha384":case"sha512":case"sha1":return e;default:throw TypeError('unsupported "digest" value')}}(e),function(e){let t=ey(e,"ikm");if(!t.byteLength)throw TypeError('"ikm" must be at least one byte in length');return t}(t),ey(r,"salt"),function(e){let t=ey(e,"info");if(t.byteLength>1024)throw TypeError('"info" must not contain more than 1024 bytes');return t}(a),function(e,t){if("number"!=typeof e||!Number.isInteger(e)||e<1)throw TypeError('"keylen" must be a positive integer');if(e>255*(parseInt(t.substr(3),10)>>3||20))throw TypeError('"keylen" too large');return e}(n,e))}let eg=new TextEncoder,ex=new TextDecoder;function ew(...e){let t=new Uint8Array(e.reduce((e,{length:t})=>e+t,0)),r=0;for(let a of e)t.set(a,r),r+=a.length;return t}function e_(e,t,r){if(t<0||t>=0x100000000)throw RangeError(`value must be >= 0 and <= ${0x100000000-1}. Received ${t}`);e.set([t>>>24,t>>>16,t>>>8,255&t],r)}function ev(e){let t=Math.floor(e/0x100000000),r=new Uint8Array(8);return e_(r,t,0),e_(r,e%0x100000000,4),r}function ek(e){let t=new Uint8Array(4);return e_(t,e),t}function eE(e){let t=new Uint8Array(e.length);for(let r=0;r<e.length;r++){let a=e.charCodeAt(r);if(a>127)throw TypeError("non-ASCII string encountered in encode()");t[r]=a}return t}function eA(e){if(Uint8Array.fromBase64)return Uint8Array.fromBase64("string"==typeof e?e:ex.decode(e),{alphabet:"base64url"});let t=e;t instanceof Uint8Array&&(t=ex.decode(t)),t=t.replace(/-/g,"+").replace(/_/g,"/");try{var r=t;if(Uint8Array.fromBase64)return Uint8Array.fromBase64(r);let e=atob(r),a=new Uint8Array(e.length);for(let t=0;t<e.length;t++)a[t]=e.charCodeAt(t);return a}catch{throw TypeError("The input to be decoded is not correctly encoded.")}}function eS(e){let t=e;return("string"==typeof t&&(t=eg.encode(t)),Uint8Array.prototype.toBase64)?t.toBase64({alphabet:"base64url",omitPadding:!0}):(function(e){if(Uint8Array.prototype.toBase64)return e.toBase64();let t=[];for(let r=0;r<e.length;r+=32768)t.push(String.fromCharCode.apply(null,e.subarray(r,r+32768)));return btoa(t.join(""))})(t).replace(/=/g,"").replace(/\+/g,"-").replace(/\//g,"_")}e.s(["decode",0,eA,"encode",0,eS],663370);let eR=Symbol();function eT(e,t){if(e)throw TypeError(`${t} can only be called once`)}function eP(e,t,r){try{return eA(e)}catch{throw new r(`Failed to base64url decode the ${t}`)}}async function eC(e,t){let r=`SHA-${e.slice(-3)}`;return new Uint8Array(await crypto.subtle.digest(r,t))}let eO=(e,t="algorithm.name")=>TypeError(`CryptoKey does not support this operation, its ${t} must be ${e}`);function eU(e,t,r){switch(t){case"A128GCM":case"A192GCM":case"A256GCM":{if("AES-GCM"!==e.algorithm.name)throw eO("AES-GCM");let r=parseInt(t.slice(1,4),10);if(e.algorithm.length!==r)throw eO(r,"algorithm.length");break}case"A128KW":case"A192KW":case"A256KW":{if("AES-KW"!==e.algorithm.name)throw eO("AES-KW");let r=parseInt(t.slice(1,4),10);if(e.algorithm.length!==r)throw eO(r,"algorithm.length");break}case"ECDH":switch(e.algorithm.name){case"ECDH":case"X25519":break;default:throw eO("ECDH or X25519")}break;case"PBES2-HS256+A128KW":case"PBES2-HS384+A192KW":case"PBES2-HS512+A256KW":if("PBKDF2"!==e.algorithm.name)throw eO("PBKDF2");break;case"RSA-OAEP":case"RSA-OAEP-256":case"RSA-OAEP-384":case"RSA-OAEP-512":if("RSA-OAEP"!==e.algorithm.name)throw eO("RSA-OAEP");var a=e.algorithm,n=parseInt(t.slice(9),10)||1;if(parseInt(a.hash.name.slice(4),10)!==n)throw eO(`SHA-${n}`,"algorithm.hash");break;default:throw TypeError("CryptoKey does not support this operation")}if(r&&!e.usages.includes(r))throw TypeError(`CryptoKey does not support this operation, its usages must include ${r}.`)}function e$(e,t,...r){if((r=r.filter(Boolean)).length>2){let t=r.pop();e+=`one of type ${r.join(", ")}, or ${t}.`}else 2===r.length?e+=`one of type ${r[0]} or ${r[1]}.`:e+=`of type ${r[0]}.`;return null==t?e+=` Received ${t}`:"function"==typeof t&&t.name?e+=` Received function ${t.name}`:"object"==typeof t&&null!=t&&t.constructor?.name&&(e+=` Received an instance of ${t.constructor.name}`),e}let ej=(e,...t)=>e$("Key must be ",e,...t),eI=(e,t,...r)=>e$(`Key for the ${e} algorithm must be `,t,...r);class eH extends Error{static code="ERR_JOSE_GENERIC";code="ERR_JOSE_GENERIC";constructor(e,t){super(e,t),this.name=this.constructor.name,Error.captureStackTrace?.(this,this.constructor)}}class eD extends eH{static code="ERR_JWT_CLAIM_VALIDATION_FAILED";code="ERR_JWT_CLAIM_VALIDATION_FAILED";claim;reason;payload;constructor(e,t,r="unspecified",a="unspecified"){super(e,{cause:{claim:r,reason:a,payload:t}}),this.claim=r,this.reason=a,this.payload=t}}class eW extends eH{static code="ERR_JWT_EXPIRED";code="ERR_JWT_EXPIRED";claim;reason;payload;constructor(e,t,r="unspecified",a="unspecified"){super(e,{cause:{claim:r,reason:a,payload:t}}),this.claim=r,this.reason=a,this.payload=t}}class eL extends eH{static code="ERR_JOSE_ALG_NOT_ALLOWED";code="ERR_JOSE_ALG_NOT_ALLOWED"}class eM extends eH{static code="ERR_JOSE_NOT_SUPPORTED";code="ERR_JOSE_NOT_SUPPORTED"}class eN extends eH{static code="ERR_JWE_DECRYPTION_FAILED";code="ERR_JWE_DECRYPTION_FAILED";constructor(e="decryption operation failed",t){super(e,t)}}class eK extends eH{static code="ERR_JWE_INVALID";code="ERR_JWE_INVALID"}class eJ extends eH{static code="ERR_JWT_INVALID";code="ERR_JWT_INVALID"}class eB extends eH{static code="ERR_JWK_INVALID";code="ERR_JWK_INVALID"}class ez extends eH{[Symbol.asyncIterator];static code="ERR_JWKS_MULTIPLE_MATCHING_KEYS";code="ERR_JWKS_MULTIPLE_MATCHING_KEYS";constructor(e="multiple matching keys found in the JSON Web Key Set",t){super(e,t)}}function eq(e){if(!eF(e))throw Error("CryptoKey instance expected")}let eF=e=>{if(e?.[Symbol.toStringTag]==="CryptoKey")return!0;try{return e instanceof CryptoKey}catch{return!1}},eV=e=>e?.[Symbol.toStringTag]==="KeyObject",eG=e=>eF(e)||eV(e);function eX(e){switch(e){case"A128GCM":return 128;case"A192GCM":return 192;case"A256GCM":case"A128CBC-HS256":return 256;case"A192CBC-HS384":return 384;case"A256CBC-HS512":return 512;default:throw new eM(`Unsupported JWE Algorithm: ${e}`)}}let eY=e=>crypto.getRandomValues(new Uint8Array(eX(e)>>3));function eZ(e,t){let r=e.byteLength<<3;if(r!==t)throw new eK(`Invalid Content Encryption Key length. Expected ${t} bits, got ${r} bits`)}function eQ(e){switch(e){case"A128GCM":case"A128GCMKW":case"A192GCM":case"A192GCMKW":case"A256GCM":case"A256GCMKW":return 96;case"A128CBC-HS256":case"A192CBC-HS384":case"A256CBC-HS512":return 128;default:throw new eM(`Unsupported JWE Algorithm: ${e}`)}}function e0(e,t){if(t.length<<3!==eQ(e))throw new eK("Invalid Initialization Vector length")}async function e1(e,t,r){if(!(t instanceof Uint8Array))throw TypeError(ej(t,"Uint8Array"));let a=parseInt(e.slice(1,4),10);return{encKey:await crypto.subtle.importKey("raw",t.subarray(a>>3),"AES-CBC",!1,[r]),macKey:await crypto.subtle.importKey("raw",t.subarray(0,a>>3),{hash:`SHA-${a<<1}`,name:"HMAC"},!1,["sign"]),keySize:a}}async function e2(e,t,r){return new Uint8Array((await crypto.subtle.sign("HMAC",e,t)).slice(0,r>>3))}async function e5(e,t,r,a,n){let{encKey:i,macKey:o,keySize:s}=await e1(e,r,"encrypt"),c=new Uint8Array(await crypto.subtle.encrypt({iv:a,name:"AES-CBC"},i,t)),d=ew(n,a,c,ev(n.length<<3));return{ciphertext:c,tag:await e2(o,d,s),iv:a}}async function e6(e,t){if(!(e instanceof Uint8Array))throw TypeError("First argument must be a buffer");if(!(t instanceof Uint8Array))throw TypeError("Second argument must be a buffer");let r={name:"HMAC",hash:"SHA-256"},a=await crypto.subtle.generateKey(r,!1,["sign"]),n=new Uint8Array(await crypto.subtle.sign(r,a,e)),i=new Uint8Array(await crypto.subtle.sign(r,a,t)),o=0,s=-1;for(;++s<32;)o|=n[s]^i[s];return 0===o}async function e3(e,t,r,a,n,i){let o,s,{encKey:c,macKey:d,keySize:l}=await e1(e,t,"decrypt"),u=ew(i,a,r,ev(i.length<<3)),f=await e2(d,u,l);try{o=await e6(n,f)}catch{}if(!o)throw new eN;try{s=new Uint8Array(await crypto.subtle.decrypt({iv:a,name:"AES-CBC"},c,r))}catch{}if(!s)throw new eN;return s}async function e8(e,t,r,a,n){let i;r instanceof Uint8Array?i=await crypto.subtle.importKey("raw",r,"AES-GCM",!1,["encrypt"]):(eU(r,e,"encrypt"),i=r);let o=new Uint8Array(await crypto.subtle.encrypt({additionalData:n,iv:a,name:"AES-GCM",tagLength:128},i,t)),s=o.slice(-16);return{ciphertext:o.slice(0,-16),tag:s,iv:a}}async function e4(e,t,r,a,n,i){let o;t instanceof Uint8Array?o=await crypto.subtle.importKey("raw",t,"AES-GCM",!1,["decrypt"]):(eU(t,e,"decrypt"),o=t);try{return new Uint8Array(await crypto.subtle.decrypt({additionalData:i,iv:a,name:"AES-GCM",tagLength:128},o,ew(r,n)))}catch{throw new eN}}let e9="Unsupported JWE Content Encryption Algorithm";async function e7(e,t,r,a,n){if(!eF(r)&&!(r instanceof Uint8Array))throw TypeError(ej(r,"CryptoKey","KeyObject","Uint8Array","JSON Web Key"));if(a)e0(e,a);else a=crypto.getRandomValues(new Uint8Array(eQ(e)>>3));switch(e){case"A128CBC-HS256":case"A192CBC-HS384":case"A256CBC-HS512":return r instanceof Uint8Array&&eZ(r,parseInt(e.slice(-3),10)),e5(e,t,r,a,n);case"A128GCM":case"A192GCM":case"A256GCM":return r instanceof Uint8Array&&eZ(r,parseInt(e.slice(1,4),10)),e8(e,t,r,a,n);default:throw new eM(e9)}}async function te(e,t,r,a,n,i){if(!eF(t)&&!(t instanceof Uint8Array))throw TypeError(ej(t,"CryptoKey","KeyObject","Uint8Array","JSON Web Key"));if(!a)throw new eK("JWE Initialization Vector missing");if(!n)throw new eK("JWE Authentication Tag missing");switch(e0(e,a),e){case"A128CBC-HS256":case"A192CBC-HS384":case"A256CBC-HS512":return t instanceof Uint8Array&&eZ(t,parseInt(e.slice(-3),10)),e3(e,t,r,a,n,i);case"A128GCM":case"A192GCM":case"A256GCM":return t instanceof Uint8Array&&eZ(t,parseInt(e.slice(1,4),10)),e4(e,t,r,a,n,i);default:throw new eM(e9)}}function tt(e,t){if(e.algorithm.length!==parseInt(t.slice(1,4),10))throw TypeError(`Invalid key size for alg: ${t}`)}function tr(e,t,r){return e instanceof Uint8Array?crypto.subtle.importKey("raw",e,"AES-KW",!0,[r]):(eU(e,t,r),e)}async function ta(e,t,r){let a=await tr(t,e,"wrapKey");tt(a,e);let n=await crypto.subtle.importKey("raw",r,{hash:"SHA-256",name:"HMAC"},!0,["sign"]);return new Uint8Array(await crypto.subtle.wrapKey("raw",n,a,"AES-KW"))}async function tn(e,t,r){let a=await tr(t,e,"unwrapKey");tt(a,e);let n=await crypto.subtle.unwrapKey("raw",r,a,"AES-KW",{hash:"SHA-256",name:"HMAC"},!0,["sign"]);return new Uint8Array(await crypto.subtle.exportKey("raw",n))}function ti(e){return ew(ek(e.length),e)}async function to(e,t,r){let a=t>>3,n=Math.ceil(a/32),i=new Uint8Array(32*n);for(let t=1;t<=n;t++){let a=new Uint8Array(4+e.length+r.length);a.set(ek(t),0),a.set(e,4),a.set(r,4+e.length);let n=await eC("sha256",a);i.set(n,(t-1)*32)}return i.slice(0,a)}async function ts(e,t,r,a,n=new Uint8Array,i=new Uint8Array){var o;eU(e,"ECDH"),eU(t,"ECDH","deriveBits");let s=ew(ti(eE(r)),ti(n),ti(i),ek(a),new Uint8Array);return to(new Uint8Array(await crypto.subtle.deriveBits({name:e.algorithm.name,public:e},t,"X25519"===(o=e).algorithm.name?256:Math.ceil(parseInt(o.algorithm.namedCurve.slice(-3),10)/8)<<3)),a,s)}function tc(e){switch(e.algorithm.namedCurve){case"P-256":case"P-384":case"P-521":return!0;default:return"X25519"===e.algorithm.name}}async function td(e,t,r,a){if(!(e instanceof Uint8Array)||e.length<8)throw new eK("PBES2 Salt Input must be 8 or more octets");if(!Number.isSafeInteger(r)||1!==Math.sign(r))throw new eK("PBES2 Count Input must be a positive integer");let n=ew(eE(t),Uint8Array.of(0),e),i=parseInt(t.slice(13,16),10),o={hash:`SHA-${t.slice(8,11)}`,iterations:r,name:"PBKDF2",salt:n},s=await (a instanceof Uint8Array?crypto.subtle.importKey("raw",a,"PBKDF2",!1,["deriveBits"]):(eU(a,t,"deriveBits"),a));return new Uint8Array(await crypto.subtle.deriveBits(o,s,i))}async function tl(e,t,r,a=2048,n=crypto.getRandomValues(new Uint8Array(16))){let i=await td(n,e,a,t);return{encryptedKey:await ta(e.slice(-6),i,r),p2c:a,p2s:eS(n)}}async function tu(e,t,r,a,n){let i=await td(n,e,a,t);return tn(e.slice(-6),i,r)}function tf(e,t){if(e.startsWith("RS")||e.startsWith("PS")){let{modulusLength:r}=t.algorithm;if("number"!=typeof r||r<2048)throw TypeError(`${e} requires key modulusLength to be 2048 bits or larger`)}}let tp=e=>{switch(e){case"RSA-OAEP":case"RSA-OAEP-256":case"RSA-OAEP-384":case"RSA-OAEP-512":return"RSA-OAEP";default:throw new eM(`alg ${e} is not supported either by JOSE or your javascript runtime`)}};async function th(e,t,r){return eU(t,e,"encrypt"),tf(e,t),new Uint8Array(await crypto.subtle.encrypt(tp(e),t,r))}async function tb(e,t,r){return eU(t,e,"decrypt"),tf(e,t),new Uint8Array(await crypto.subtle.decrypt(tp(e),t,r))}function ty(e){if("object"!=typeof e||null===e||"[object Object]"!==Object.prototype.toString.call(e))return!1;if(null===Object.getPrototypeOf(e))return!0;let t=e;for(;null!==Object.getPrototypeOf(t);)t=Object.getPrototypeOf(t);return Object.getPrototypeOf(e)===t}function tm(...e){let t,r=e.filter(Boolean);if(0===r.length||1===r.length)return!0;for(let e of r){let r=Object.keys(e);if(!t||0===t.size){t=new Set(r);continue}for(let e of r){if(t.has(e))return!1;t.add(e)}}return!0}let tg=e=>ty(e)&&"string"==typeof e.kty,tx='Invalid or unsupported JWK "alg" (Algorithm) Parameter value';async function tw(e){if(!e.alg)throw TypeError('"alg" argument is required when "jwk.alg" is not present');let{algorithm:t,keyUsages:r}=function(e){let t,r;switch(e.kty){case"AKP":switch(e.alg){case"ML-DSA-44":case"ML-DSA-65":case"ML-DSA-87":t={name:e.alg},r=e.priv?["sign"]:["verify"];break;default:throw new eM(tx)}break;case"RSA":switch(e.alg){case"PS256":case"PS384":case"PS512":t={name:"RSA-PSS",hash:`SHA-${e.alg.slice(-3)}`},r=e.d?["sign"]:["verify"];break;case"RS256":case"RS384":case"RS512":t={name:"RSASSA-PKCS1-v1_5",hash:`SHA-${e.alg.slice(-3)}`},r=e.d?["sign"]:["verify"];break;case"RSA-OAEP":case"RSA-OAEP-256":case"RSA-OAEP-384":case"RSA-OAEP-512":t={name:"RSA-OAEP",hash:`SHA-${parseInt(e.alg.slice(-3),10)||1}`},r=e.d?["decrypt","unwrapKey"]:["encrypt","wrapKey"];break;default:throw new eM(tx)}break;case"EC":switch(e.alg){case"ES256":case"ES384":case"ES512":t={name:"ECDSA",namedCurve:({ES256:"P-256",ES384:"P-384",ES512:"P-521"})[e.alg]},r=e.d?["sign"]:["verify"];break;case"ECDH-ES":case"ECDH-ES+A128KW":case"ECDH-ES+A192KW":case"ECDH-ES+A256KW":t={name:"ECDH",namedCurve:e.crv},r=e.d?["deriveBits"]:[];break;default:throw new eM(tx)}break;case"OKP":switch(e.alg){case"Ed25519":case"EdDSA":t={name:"Ed25519"},r=e.d?["sign"]:["verify"];break;case"ECDH-ES":case"ECDH-ES+A128KW":case"ECDH-ES+A192KW":case"ECDH-ES+A256KW":t={name:e.crv},r=e.d?["deriveBits"]:[];break;default:throw new eM(tx)}break;default:throw new eM('Invalid or unsupported JWK "kty" (Key Type) Parameter value')}return{algorithm:t,keyUsages:r}}(e),a={...e};return"AKP"!==a.kty&&delete a.alg,delete a.use,crypto.subtle.importKey("jwk",a,t,e.ext??(!e.d&&!e.priv),e.key_ops??r)}let t_="given KeyObject instance cannot be used for this algorithm",tv=async(e,t,a,n=!1)=>{let i=(r||=new WeakMap).get(e);if(i?.[a])return i[a];let o=await tw({...t,alg:a});return n&&Object.freeze(e),i?i[a]=o:r.set(e,{[a]:o}),o};async function tk(e,t){if(e instanceof Uint8Array||eF(e))return e;if(eV(e)){if("secret"===e.type)return e.export();if("toCryptoKey"in e&&"function"==typeof e.toCryptoKey)try{return((e,t)=>{let a,n=(r||=new WeakMap).get(e);if(n?.[t])return n[t];let i="public"===e.type,o=!!i;if("x25519"===e.asymmetricKeyType){switch(t){case"ECDH-ES":case"ECDH-ES+A128KW":case"ECDH-ES+A192KW":case"ECDH-ES+A256KW":break;default:throw TypeError(t_)}a=e.toCryptoKey(e.asymmetricKeyType,o,i?[]:["deriveBits"])}if("ed25519"===e.asymmetricKeyType){if("EdDSA"!==t&&"Ed25519"!==t)throw TypeError(t_);a=e.toCryptoKey(e.asymmetricKeyType,o,[i?"verify":"sign"])}switch(e.asymmetricKeyType){case"ml-dsa-44":case"ml-dsa-65":case"ml-dsa-87":if(t!==e.asymmetricKeyType.toUpperCase())throw TypeError(t_);a=e.toCryptoKey(e.asymmetricKeyType,o,[i?"verify":"sign"])}if("rsa"===e.asymmetricKeyType){let r;switch(t){case"RSA-OAEP":r="SHA-1";break;case"RS256":case"PS256":case"RSA-OAEP-256":r="SHA-256";break;case"RS384":case"PS384":case"RSA-OAEP-384":r="SHA-384";break;case"RS512":case"PS512":case"RSA-OAEP-512":r="SHA-512";break;default:throw TypeError(t_)}if(t.startsWith("RSA-OAEP"))return e.toCryptoKey({name:"RSA-OAEP",hash:r},o,i?["encrypt"]:["decrypt"]);a=e.toCryptoKey({name:t.startsWith("PS")?"RSA-PSS":"RSASSA-PKCS1-v1_5",hash:r},o,[i?"verify":"sign"])}if("ec"===e.asymmetricKeyType){let r=new Map([["prime256v1","P-256"],["secp384r1","P-384"],["secp521r1","P-521"]]).get(e.asymmetricKeyDetails?.namedCurve);if(!r)throw TypeError(t_);let n={ES256:"P-256",ES384:"P-384",ES512:"P-521"};n[t]&&r===n[t]&&(a=e.toCryptoKey({name:"ECDSA",namedCurve:r},o,[i?"verify":"sign"])),t.startsWith("ECDH-ES")&&(a=e.toCryptoKey({name:"ECDH",namedCurve:r},o,i?[]:["deriveBits"]))}if(!a)throw TypeError(t_);return n?n[t]=a:r.set(e,{[t]:a}),a})(e,t)}catch(e){if(e instanceof TypeError)throw e}let a=e.export({format:"jwk"});return tv(e,a,t)}if(tg(e))return e.k?eA(e.k):tv(e,e,t,!0);throw Error("unreachable")}async function tE(e,t,r){let a;if(!ty(e))throw TypeError("JWK must be an object");switch(t??=e.alg,a??=r?.extractable??e.ext,e.kty){case"oct":if("string"!=typeof e.k||!e.k)throw TypeError('missing "k" (Key Value) Parameter value');return eA(e.k);case"RSA":if("oth"in e&&void 0!==e.oth)throw new eM('RSA JWK "oth" (Other Primes Info) Parameter value is not supported');return tw({...e,alg:t,ext:a});case"AKP":if("string"!=typeof e.alg||!e.alg)throw TypeError('missing "alg" (Algorithm) Parameter value');if(void 0!==t&&t!==e.alg)throw TypeError("JWK alg and alg option value mismatch");return tw({...e,ext:a});case"EC":case"OKP":return tw({...e,alg:t,ext:a});default:throw new eM('Unsupported "kty" (Key Type) Parameter value')}}async function tA(e){if(eV(e))if("secret"!==e.type)return e.export({format:"jwk"});else e=e.export();if(e instanceof Uint8Array)return{kty:"oct",k:eS(e)};if(!eF(e))throw TypeError(ej(e,"CryptoKey","KeyObject","Uint8Array"));if(!e.extractable)throw TypeError("non-extractable CryptoKey cannot be exported as a JWK");let{ext:t,key_ops:r,alg:a,use:n,...i}=await crypto.subtle.exportKey("jwk",e);return"AKP"===i.kty&&(i.alg=a),i}async function tS(e){return tA(e)}async function tR(e,t,r,a){let n=e.slice(0,7),i=await e7(n,r,t,a,new Uint8Array);return{encryptedKey:i.ciphertext,iv:eS(i.iv),tag:eS(i.tag)}}async function tT(e,t,r,a,n){return te(e.slice(0,7),t,r,a,n,new Uint8Array)}let tP='Invalid or unsupported "alg" (JWE Algorithm) header value';function tC(e){if(void 0===e)throw new eK("JWE Encrypted Key missing")}async function tO(e,t,r,a,n){switch(e){case"dir":if(void 0!==r)throw new eK("Encountered unexpected JWE Encrypted Key");return t;case"ECDH-ES":if(void 0!==r)throw new eK("Encountered unexpected JWE Encrypted Key");case"ECDH-ES+A128KW":case"ECDH-ES+A192KW":case"ECDH-ES+A256KW":{let n,i;if(!ty(a.epk))throw new eK('JOSE Header "epk" (Ephemeral Public Key) missing or invalid');if(eq(t),!tc(t))throw new eM("ECDH with the provided key is not allowed or not supported by your javascript runtime");let o=await tE(a.epk,e);if(eq(o),void 0!==a.apu){if("string"!=typeof a.apu)throw new eK('JOSE Header "apu" (Agreement PartyUInfo) invalid');n=eP(a.apu,"apu",eK)}if(void 0!==a.apv){if("string"!=typeof a.apv)throw new eK('JOSE Header "apv" (Agreement PartyVInfo) invalid');i=eP(a.apv,"apv",eK)}let s=await ts(o,t,"ECDH-ES"===e?a.enc:e,"ECDH-ES"===e?eX(a.enc):parseInt(e.slice(-5,-2),10),n,i);if("ECDH-ES"===e)return s;return tC(r),tn(e.slice(-6),s,r)}case"RSA-OAEP":case"RSA-OAEP-256":case"RSA-OAEP-384":case"RSA-OAEP-512":return tC(r),eq(t),tb(e,t,r);case"PBES2-HS256+A128KW":case"PBES2-HS384+A192KW":case"PBES2-HS512+A256KW":{let i;if(tC(r),"number"!=typeof a.p2c)throw new eK('JOSE Header "p2c" (PBES2 Count) missing or invalid');let o=n?.maxPBES2Count||1e4;if(a.p2c>o)throw new eK('JOSE Header "p2c" (PBES2 Count) out is of acceptable bounds');if("string"!=typeof a.p2s)throw new eK('JOSE Header "p2s" (PBES2 Salt) missing or invalid');return i=eP(a.p2s,"p2s",eK),tu(e,t,r,a.p2c,i)}case"A128KW":case"A192KW":case"A256KW":return tC(r),tn(e,t,r);case"A128GCMKW":case"A192GCMKW":case"A256GCMKW":if(tC(r),"string"!=typeof a.iv)throw new eK('JOSE Header "iv" (Initialization Vector) missing or invalid');if("string"!=typeof a.tag)throw new eK('JOSE Header "tag" (Authentication Tag) missing or invalid');return tT(e,t,r,eP(a.iv,"iv",eK),eP(a.tag,"tag",eK));default:throw new eM(tP)}}async function tU(e,t,r,a,n={}){let i,o,s;switch(e){case"dir":s=r;break;case"ECDH-ES":case"ECDH-ES+A128KW":case"ECDH-ES+A192KW":case"ECDH-ES+A256KW":{let c;if(eq(r),!tc(r))throw new eM("ECDH with the provided key is not allowed or not supported by your javascript runtime");let{apu:d,apv:l}=n;c=n.epk?await tk(n.epk,e):(await crypto.subtle.generateKey(r.algorithm,!0,["deriveBits"])).privateKey;let{x:u,y:f,crv:p,kty:h}=await tS(c),b=await ts(r,c,"ECDH-ES"===e?t:e,"ECDH-ES"===e?eX(t):parseInt(e.slice(-5,-2),10),d,l);if(o={epk:{x:u,crv:p,kty:h}},"EC"===h&&(o.epk.y=f),d&&(o.apu=eS(d)),l&&(o.apv=eS(l)),"ECDH-ES"===e){s=b;break}s=a||eY(t);let y=e.slice(-6);i=await ta(y,b,s);break}case"RSA-OAEP":case"RSA-OAEP-256":case"RSA-OAEP-384":case"RSA-OAEP-512":s=a||eY(t),eq(r),i=await th(e,r,s);break;case"PBES2-HS256+A128KW":case"PBES2-HS384+A192KW":case"PBES2-HS512+A256KW":{s=a||eY(t);let{p2c:c,p2s:d}=n;({encryptedKey:i,...o}=await tl(e,r,s,c,d));break}case"A128KW":case"A192KW":case"A256KW":s=a||eY(t),i=await ta(e,r,s);break;case"A128GCMKW":case"A192GCMKW":case"A256GCMKW":{s=a||eY(t);let{iv:c}=n;({encryptedKey:i,...o}=await tR(e,r,s,c));break}default:throw new eM(tP)}return{cek:s,encryptedKey:i,parameters:o}}function t$(e,t,r,a,n){let i;if(void 0!==n.crit&&a?.crit===void 0)throw new e('"crit" (Critical) Header Parameter MUST be integrity protected');if(!a||void 0===a.crit)return new Set;if(!Array.isArray(a.crit)||0===a.crit.length||a.crit.some(e=>"string"!=typeof e||0===e.length))throw new e('"crit" (Critical) Header Parameter MUST be an array of non-empty strings when present');for(let o of(i=void 0!==r?new Map([...Object.entries(r),...t.entries()]):t,a.crit)){if(!i.has(o))throw new eM(`Extension Header Parameter "${o}" is not recognized`);if(void 0===n[o])throw new e(`Extension Header Parameter "${o}" is missing`);if(i.get(o)&&void 0===a[o])throw new e(`Extension Header Parameter "${o}" MUST be integrity protected`)}return new Set(a.crit)}let tj=e=>e?.[Symbol.toStringTag],tI=(e,t,r)=>{if(void 0!==t.use){let e;switch(r){case"sign":case"verify":e="sig";break;case"encrypt":case"decrypt":e="enc"}if(t.use!==e)throw TypeError(`Invalid key for this operation, its "use" must be "${e}" when present`)}if(void 0!==t.alg&&t.alg!==e)throw TypeError(`Invalid key for this operation, its "alg" must be "${e}" when present`);if(Array.isArray(t.key_ops)){let a;switch(!0){case"sign"===r||"verify"===r:case"dir"===e:case e.includes("CBC-HS"):a=r;break;case e.startsWith("PBES2"):a="deriveBits";break;case/^A\d{3}(?:GCM)?(?:KW)?$/.test(e):a=!e.includes("GCM")&&e.endsWith("KW")?"encrypt"===r?"wrapKey":"unwrapKey":r;break;case"encrypt"===r&&e.startsWith("RSA"):a="wrapKey";break;case"decrypt"===r:a=e.startsWith("RSA")?"unwrapKey":"deriveBits"}if(a&&t.key_ops?.includes?.(a)===!1)throw TypeError(`Invalid key for this operation, its "key_ops" must include "${a}" when present`)}return!0};function tH(e,t,r){switch(e.substring(0,2)){case"A1":case"A2":case"di":case"HS":case"PB":((e,t,r)=>{if(!(t instanceof Uint8Array)){if(tg(t)){if("oct"===t.kty&&"string"==typeof t.k&&tI(e,t,r))return;throw TypeError('JSON Web Key for symmetric algorithms must have JWK "kty" (Key Type) equal to "oct" and the JWK "k" (Key Value) present')}if(!eG(t))throw TypeError(eI(e,t,"CryptoKey","KeyObject","JSON Web Key","Uint8Array"));if("secret"!==t.type)throw TypeError(`${tj(t)} instances for symmetric algorithms must be of type "secret"`)}})(e,t,r);break;default:((e,t,r)=>{if(tg(t))switch(r){case"decrypt":case"sign":if("oct"!==t.kty&&("AKP"===t.kty&&"string"==typeof t.priv||"string"==typeof t.d)&&tI(e,t,r))return;throw TypeError("JSON Web Key for this operation must be a private JWK");case"encrypt":case"verify":if("oct"!==t.kty&&void 0===t.d&&void 0===t.priv&&tI(e,t,r))return;throw TypeError("JSON Web Key for this operation must be a public JWK")}if(!eG(t))throw TypeError(eI(e,t,"CryptoKey","KeyObject","JSON Web Key"));if("secret"===t.type)throw TypeError(`${tj(t)} instances for asymmetric algorithms must not be of type "secret"`);if("public"===t.type)switch(r){case"sign":throw TypeError(`${tj(t)} instances for asymmetric algorithm signing must be of type "private"`);case"decrypt":throw TypeError(`${tj(t)} instances for asymmetric algorithm decryption must be of type "private"`)}if("private"===t.type)switch(r){case"verify":throw TypeError(`${tj(t)} instances for asymmetric algorithm verifying must be of type "public"`);case"encrypt":throw TypeError(`${tj(t)} instances for asymmetric algorithm encryption must be of type "public"`)}})(e,t,r)}}function tD(e){if(void 0===globalThis[e])throw new eM(`JWE "zip" (Compression Algorithm) Header Parameter requires the ${e} API.`)}async function tW(e){tD("CompressionStream");let t=new CompressionStream("deflate-raw"),r=t.writable.getWriter();r.write(e).catch(()=>{}),r.close().catch(()=>{});let a=[],n=t.readable.getReader();for(;;){let{value:e,done:t}=await n.read();if(t)break;a.push(e)}return ew(...a)}async function tL(e,t){tD("DecompressionStream");let r=new DecompressionStream("deflate-raw"),a=r.writable.getWriter();a.write(e).catch(()=>{}),a.close().catch(()=>{});let n=[],i=0,o=r.readable.getReader();for(;;){let{value:e,done:r}=await o.read();if(r)break;if(n.push(e),i+=e.byteLength,t!==1/0&&i>t)throw new eK("Decompressed plaintext exceeded the configured limit")}return ew(...n)}class tM{#e;#t;#r;#a;#n;#i;#o;#s;constructor(e){if(!(e instanceof Uint8Array))throw TypeError("plaintext must be an instance of Uint8Array");this.#e=e}setKeyManagementParameters(e){return eT(this.#s,"setKeyManagementParameters"),this.#s=e,this}setProtectedHeader(e){return eT(this.#t,"setProtectedHeader"),this.#t=e,this}setSharedUnprotectedHeader(e){return eT(this.#r,"setSharedUnprotectedHeader"),this.#r=e,this}setUnprotectedHeader(e){return eT(this.#a,"setUnprotectedHeader"),this.#a=e,this}setAdditionalAuthenticatedData(e){return this.#n=e,this}setContentEncryptionKey(e){return eT(this.#i,"setContentEncryptionKey"),this.#i=e,this}setInitializationVector(e){return eT(this.#o,"setInitializationVector"),this.#o=e,this}async encrypt(e,t){let r,a,n,i,o,s;if(!this.#t&&!this.#a&&!this.#r)throw new eK("either setProtectedHeader, setUnprotectedHeader, or sharedUnprotectedHeader must be called before #encrypt()");if(!tm(this.#t,this.#a,this.#r))throw new eK("JWE Protected, JWE Shared Unprotected and JWE Per-Recipient Header Parameter names must be disjoint");let c={...this.#t,...this.#a,...this.#r};if(t$(eK,new Map,t?.crit,this.#t,c),void 0!==c.zip&&"DEF"!==c.zip)throw new eM('Unsupported JWE "zip" (Compression Algorithm) Header Parameter value.');if(void 0!==c.zip&&!this.#t?.zip)throw new eK('JWE "zip" (Compression Algorithm) Header Parameter MUST be in a protected header.');let{alg:d,enc:l}=c;if("string"!=typeof d||!d)throw new eK('JWE "alg" (Algorithm) Header Parameter missing or invalid');if("string"!=typeof l||!l)throw new eK('JWE "enc" (Encryption Algorithm) Header Parameter missing or invalid');if(this.#i&&("dir"===d||"ECDH-ES"===d))throw TypeError(`setContentEncryptionKey cannot be called with JWE "alg" (Algorithm) Header ${d}`);tH("dir"===d?l:d,e,"encrypt");{let n,i=await tk(e,d);({cek:a,encryptedKey:r,parameters:n}=await tU(d,l,i,this.#i,this.#s)),n&&(t&&eR in t?this.#a?this.#a={...this.#a,...n}:this.setUnprotectedHeader(n):this.#t?this.#t={...this.#t,...n}:this.setProtectedHeader(n))}if(this.#t?o=eE(i=eS(JSON.stringify(this.#t))):(i="",o=new Uint8Array),this.#n){let e=eE(s=eS(this.#n));n=ew(o,eE("."),e)}else n=o;let u=this.#e;"DEF"===c.zip&&(u=await tW(u).catch(e=>{throw new eK("Failed to compress plaintext",{cause:e})}));let{ciphertext:f,tag:p,iv:h}=await e7(l,u,a,this.#o,n),b={ciphertext:eS(f)};return h&&(b.iv=eS(h)),p&&(b.tag=eS(p)),r&&(b.encrypted_key=eS(r)),s&&(b.aad=s),this.#t&&(b.protected=i),this.#r&&(b.unprotected=this.#r),this.#a&&(b.header=this.#a),b}}class tN{#c;constructor(e){this.#c=new tM(e)}setContentEncryptionKey(e){return this.#c.setContentEncryptionKey(e),this}setInitializationVector(e){return this.#c.setInitializationVector(e),this}setProtectedHeader(e){return this.#c.setProtectedHeader(e),this}setKeyManagementParameters(e){return this.#c.setKeyManagementParameters(e),this}async encrypt(e,t){let r=await this.#c.encrypt(e,t);return[r.protected,r.encrypted_key,r.iv,r.ciphertext,r.tag].join(".")}}let tK=e=>Math.floor(e.getTime()/1e3),tJ=/^(\+|\-)? ?(\d+|\d+\.\d+) ?(seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|weeks?|w|years?|yrs?|y)(?: (ago|from now))?$/i;function tB(e){let t,r=tJ.exec(e);if(!r||r[4]&&r[1])throw TypeError("Invalid time period format");let a=parseFloat(r[2]);switch(r[3].toLowerCase()){case"sec":case"secs":case"second":case"seconds":case"s":t=Math.round(a);break;case"minute":case"minutes":case"min":case"mins":case"m":t=Math.round(60*a);break;case"hour":case"hours":case"hr":case"hrs":case"h":t=Math.round(3600*a);break;case"day":case"days":case"d":t=Math.round(86400*a);break;case"week":case"weeks":case"w":t=Math.round(604800*a);break;default:t=Math.round(0x1e187e0*a)}return"-"===r[1]||"ago"===r[4]?-t:t}function tz(e,t){if(!Number.isFinite(t))throw TypeError(`Invalid ${e} input`);return t}let tq=e=>e.includes("/")?e.toLowerCase():`application/${e.toLowerCase()}`;class tF{#d;constructor(e){if(!ty(e))throw TypeError("JWT Claims Set MUST be an object");this.#d=structuredClone(e)}data(){return eg.encode(JSON.stringify(this.#d))}get iss(){return this.#d.iss}set iss(e){this.#d.iss=e}get sub(){return this.#d.sub}set sub(e){this.#d.sub=e}get aud(){return this.#d.aud}set aud(e){this.#d.aud=e}set jti(e){this.#d.jti=e}set nbf(e){"number"==typeof e?this.#d.nbf=tz("setNotBefore",e):e instanceof Date?this.#d.nbf=tz("setNotBefore",tK(e)):this.#d.nbf=tK(new Date)+tB(e)}set exp(e){"number"==typeof e?this.#d.exp=tz("setExpirationTime",e):e instanceof Date?this.#d.exp=tz("setExpirationTime",tK(e)):this.#d.exp=tK(new Date)+tB(e)}set iat(e){void 0===e?this.#d.iat=tK(new Date):e instanceof Date?this.#d.iat=tz("setIssuedAt",tK(e)):"string"==typeof e?this.#d.iat=tz("setIssuedAt",tK(new Date)+tB(e)):this.#d.iat=tz("setIssuedAt",e)}}class tV{#i;#o;#s;#t;#l;#u;#f;#p;constructor(e={}){this.#p=new tF(e)}setIssuer(e){return this.#p.iss=e,this}setSubject(e){return this.#p.sub=e,this}setAudience(e){return this.#p.aud=e,this}setJti(e){return this.#p.jti=e,this}setNotBefore(e){return this.#p.nbf=e,this}setExpirationTime(e){return this.#p.exp=e,this}setIssuedAt(e){return this.#p.iat=e,this}setProtectedHeader(e){return eT(this.#t,"setProtectedHeader"),this.#t=e,this}setKeyManagementParameters(e){return eT(this.#s,"setKeyManagementParameters"),this.#s=e,this}setContentEncryptionKey(e){return eT(this.#i,"setContentEncryptionKey"),this.#i=e,this}setInitializationVector(e){return eT(this.#o,"setInitializationVector"),this.#o=e,this}replicateIssuerAsHeader(){return this.#l=!0,this}replicateSubjectAsHeader(){return this.#u=!0,this}replicateAudienceAsHeader(){return this.#f=!0,this}async encrypt(e,t){let r=new tN(this.#p.data());return this.#t&&(this.#l||this.#u||this.#f)&&(this.#t={...this.#t,iss:this.#l?this.#p.iss:void 0,sub:this.#u?this.#p.sub:void 0,aud:this.#f?this.#p.aud:void 0}),r.setProtectedHeader(this.#t),this.#o&&r.setInitializationVector(this.#o),this.#i&&r.setContentEncryptionKey(this.#i),this.#s&&r.setKeyManagementParameters(this.#s),r.encrypt(e,t)}}var tG=e.i(663370),tG=tG;let tX=(e,t)=>{if("string"!=typeof e||!e)throw new eB(`${t} missing or invalid`)};async function tY(e,t){let r,a;if(tg(e))r=e;else if(eG(e))r=await tS(e);else throw TypeError(ej(e,"CryptoKey","KeyObject","JSON Web Key"));if("sha256"!==(t??="sha256")&&"sha384"!==t&&"sha512"!==t)throw TypeError('digestAlgorithm must one of "sha256", "sha384", or "sha512"');switch(r.kty){case"AKP":tX(r.alg,'"alg" (Algorithm) Parameter'),tX(r.pub,'"pub" (Public key) Parameter'),a={alg:r.alg,kty:r.kty,pub:r.pub};break;case"EC":tX(r.crv,'"crv" (Curve) Parameter'),tX(r.x,'"x" (X Coordinate) Parameter'),tX(r.y,'"y" (Y Coordinate) Parameter'),a={crv:r.crv,kty:r.kty,x:r.x,y:r.y};break;case"OKP":tX(r.crv,'"crv" (Subtype of Key Pair) Parameter'),tX(r.x,'"x" (Public Key) Parameter'),a={crv:r.crv,kty:r.kty,x:r.x};break;case"RSA":tX(r.e,'"e" (Exponent) Parameter'),tX(r.n,'"n" (Modulus) Parameter'),a={e:r.e,kty:r.kty,n:r.n};break;case"oct":tX(r.k,'"k" (Key Value) Parameter'),a={k:r.k,kty:r.kty};break;default:throw new eM('"kty" (Key Type) Parameter missing or unsupported')}let n=eE(JSON.stringify(a));return eS(await eC(t,n))}function tZ(e,t){if(void 0!==t&&(!Array.isArray(t)||t.some(e=>"string"!=typeof e)))throw TypeError(`"${e}" option must be an array of strings`);if(t)return new Set(t)}async function tQ(e,t,r){let a,n,i,o,s,c;if(!ty(e))throw new eK("Flattened JWE must be an object");if(void 0===e.protected&&void 0===e.header&&void 0===e.unprotected)throw new eK("JOSE Header missing");if(void 0!==e.iv&&"string"!=typeof e.iv)throw new eK("JWE Initialization Vector incorrect type");if("string"!=typeof e.ciphertext)throw new eK("JWE Ciphertext missing or incorrect type");if(void 0!==e.tag&&"string"!=typeof e.tag)throw new eK("JWE Authentication Tag incorrect type");if(void 0!==e.protected&&"string"!=typeof e.protected)throw new eK("JWE Protected Header incorrect type");if(void 0!==e.encrypted_key&&"string"!=typeof e.encrypted_key)throw new eK("JWE Encrypted Key incorrect type");if(void 0!==e.aad&&"string"!=typeof e.aad)throw new eK("JWE AAD incorrect type");if(void 0!==e.header&&!ty(e.header))throw new eK("JWE Shared Unprotected Header incorrect type");if(void 0!==e.unprotected&&!ty(e.unprotected))throw new eK("JWE Per-Recipient Unprotected Header incorrect type");if(e.protected)try{let t=eA(e.protected);a=JSON.parse(ex.decode(t))}catch{throw new eK("JWE Protected Header is invalid")}if(!tm(a,e.header,e.unprotected))throw new eK("JWE Protected, JWE Unprotected Header, and JWE Per-Recipient Unprotected Header Parameter names must be disjoint");let d={...a,...e.header,...e.unprotected};if(t$(eK,new Map,r?.crit,a,d),void 0!==d.zip&&"DEF"!==d.zip)throw new eM('Unsupported JWE "zip" (Compression Algorithm) Header Parameter value.');if(void 0!==d.zip&&!a?.zip)throw new eK('JWE "zip" (Compression Algorithm) Header Parameter MUST be in a protected header.');let{alg:l,enc:u}=d;if("string"!=typeof l||!l)throw new eK("missing JWE Algorithm (alg) in JWE Header");if("string"!=typeof u||!u)throw new eK("missing JWE Encryption Algorithm (enc) in JWE Header");let f=r&&tZ("keyManagementAlgorithms",r.keyManagementAlgorithms),p=r&&tZ("contentEncryptionAlgorithms",r.contentEncryptionAlgorithms);if(f&&!f.has(l)||!f&&l.startsWith("PBES2"))throw new eL('"alg" (Algorithm) Header Parameter value not allowed');if(p&&!p.has(u))throw new eL('"enc" (Encryption Algorithm) Header Parameter value not allowed');void 0!==e.encrypted_key&&(n=eP(e.encrypted_key,"encrypted_key",eK));let h=!1;"function"==typeof t&&(t=await t(a,e),h=!0),tH("dir"===l?u:l,t,"decrypt");let b=await tk(t,l);try{i=await tO(l,b,n,d,r)}catch(e){if(e instanceof TypeError||e instanceof eK||e instanceof eM)throw e;i=eY(u)}void 0!==e.iv&&(o=eP(e.iv,"iv",eK)),void 0!==e.tag&&(s=eP(e.tag,"tag",eK));let y=void 0!==e.protected?eE(e.protected):new Uint8Array;c=void 0!==e.aad?ew(y,eE("."),eE(e.aad)):y;let m=eP(e.ciphertext,"ciphertext",eK),g=await te(u,i,m,o,s,c),x={plaintext:g};if("DEF"===d.zip){let e=r?.maxDecompressedLength??25e4;if(0===e)throw new eM('JWE "zip" (Compression Algorithm) Header Parameter is not supported.');if(e!==1/0&&(!Number.isSafeInteger(e)||e<1))throw TypeError("maxDecompressedLength must be 0, a positive safe integer, or Infinity");x.plaintext=await tL(g,e).catch(e=>{if(e instanceof eK)throw e;throw new eK("Failed to decompress plaintext",{cause:e})})}return(void 0!==e.protected&&(x.protectedHeader=a),void 0!==e.aad&&(x.additionalAuthenticatedData=eP(e.aad,"aad",eK)),void 0!==e.unprotected&&(x.sharedUnprotectedHeader=e.unprotected),void 0!==e.header&&(x.unprotectedHeader=e.header),h)?{...x,key:b}:x}async function t0(e,t,r){if(e instanceof Uint8Array&&(e=ex.decode(e)),"string"!=typeof e)throw new eK("Compact JWE must be a string or Uint8Array");let{0:a,1:n,2:i,3:o,4:s,length:c}=e.split(".");if(5!==c)throw new eK("Invalid Compact JWE");let d=await tQ({ciphertext:o,iv:i||void 0,protected:a,tag:s||void 0,encrypted_key:n||void 0},t,r),l={plaintext:d.plaintext,protectedHeader:d.protectedHeader};return"function"==typeof t?{...l,key:d.key}:l}async function t1(e,t,r){let a=await t0(e,t,r),n=function(e,t,r={}){var a,n;let i,o;try{i=JSON.parse(ex.decode(t))}catch{}if(!ty(i))throw new eJ("JWT Claims Set must be a top-level JSON object");let{typ:s}=r;if(s&&("string"!=typeof e.typ||tq(e.typ)!==tq(s)))throw new eD('unexpected "typ" JWT header value',i,"typ","check_failed");let{requiredClaims:c=[],issuer:d,subject:l,audience:u,maxTokenAge:f}=r,p=[...c];for(let e of(void 0!==f&&p.push("iat"),void 0!==u&&p.push("aud"),void 0!==l&&p.push("sub"),void 0!==d&&p.push("iss"),new Set(p.reverse())))if(!(e in i))throw new eD(`missing required "${e}" claim`,i,e,"missing");if(d&&!(Array.isArray(d)?d:[d]).includes(i.iss))throw new eD('unexpected "iss" claim value',i,"iss","check_failed");if(l&&i.sub!==l)throw new eD('unexpected "sub" claim value',i,"sub","check_failed");if(u&&(a=i.aud,n="string"==typeof u?[u]:u,"string"==typeof a?!n.includes(a):!(Array.isArray(a)&&n.some(Set.prototype.has.bind(new Set(a))))))throw new eD('unexpected "aud" claim value',i,"aud","check_failed");switch(typeof r.clockTolerance){case"string":o=tB(r.clockTolerance);break;case"number":o=r.clockTolerance;break;case"undefined":o=0;break;default:throw TypeError("Invalid clockTolerance option type")}let{currentDate:h}=r,b=tK(h||new Date);if((void 0!==i.iat||f)&&"number"!=typeof i.iat)throw new eD('"iat" claim must be a number',i,"iat","invalid");if(void 0!==i.nbf){if("number"!=typeof i.nbf)throw new eD('"nbf" claim must be a number',i,"nbf","invalid");if(i.nbf>b+o)throw new eD('"nbf" claim timestamp check failed',i,"nbf","check_failed")}if(void 0!==i.exp){if("number"!=typeof i.exp)throw new eD('"exp" claim must be a number',i,"exp","invalid");if(i.exp<=b-o)throw new eW('"exp" claim timestamp check failed',i,"exp","check_failed")}if(f){let e=b-i.iat;if(e-o>("number"==typeof f?f:tB(f)))throw new eW('"iat" claim timestamp check failed (too far in the past)',i,"iat","check_failed");if(e<0-o)throw new eD('"iat" claim timestamp check failed (it should be in the past)',i,"iat","check_failed")}return i}(a.protectedHeader,a.plaintext,r),{protectedHeader:i}=a;if(void 0!==i.iss&&i.iss!==n.iss)throw new eD('replicated "iss" claim header parameter mismatch',n,"iss","mismatch");if(void 0!==i.sub&&i.sub!==n.sub)throw new eD('replicated "sub" claim header parameter mismatch',n,"sub","mismatch");if(void 0!==i.aud&&JSON.stringify(i.aud)!==JSON.stringify(n.aud))throw new eD('replicated "aud" claim header parameter mismatch',n,"aud","mismatch");let o={payload:n,protectedHeader:i};return"function"==typeof t?{...o,key:a.key}:o}let t2=/^[!#$%&'*+\-.^_`|~0-9A-Za-z]+$/,t5=/^("?)[\u0021\u0023-\u002B\u002D-\u003A\u003C-\u005B\u005D-\u007E]*\1$/,t6=/^([.]?[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?)([.][a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?)*$/i,t3=/^[\u0020-\u003A\u003D-\u007E]*$/,t8=Object.prototype.toString,t4=((o=function(){}).prototype=Object.create(null),o);function t9(e,t,r){do{let r=e.charCodeAt(t);if(32!==r&&9!==r)return t}while(++t<r)return r}function t7(e,t,r){for(;t>r;){let r=e.charCodeAt(--t);if(32!==r&&9!==r)return t+1}return r}function re(e){if(-1===e.indexOf("%"))return e;try{return decodeURIComponent(e)}catch(t){return e}}e.s(["parse",0,function(e,t){let r=new t4,a=e.length;if(a<2)return r;let n=t?.decode||re,i=0;do{let t=e.indexOf("=",i);if(-1===t)break;let o=e.indexOf(";",i),s=-1===o?a:o;if(t>s){i=e.lastIndexOf(";",t-1)+1;continue}let c=t9(e,i,t),d=t7(e,t,c),l=e.slice(c,d);if(void 0===r[l]){let a=t9(e,t+1,s),i=t7(e,s,a),o=n(e.slice(a,i));r[l]=o}i=s+1}while(i<a)return r},"serialize",0,function(e,t,r){let a=r?.encode||encodeURIComponent;if(!t2.test(e))throw TypeError(`argument name is invalid: ${e}`);let n=a(t);if(!t5.test(n))throw TypeError(`argument val is invalid: ${t}`);let i=e+"="+n;if(!r)return i;if(void 0!==r.maxAge){if(!Number.isInteger(r.maxAge))throw TypeError(`option maxAge is invalid: ${r.maxAge}`);i+="; Max-Age="+r.maxAge}if(r.domain){if(!t6.test(r.domain))throw TypeError(`option domain is invalid: ${r.domain}`);i+="; Domain="+r.domain}if(r.path){if(!t3.test(r.path))throw TypeError(`option path is invalid: ${r.path}`);i+="; Path="+r.path}if(r.expires){var o;if(o=r.expires,"[object Date]"!==t8.call(o)||!Number.isFinite(r.expires.valueOf()))throw TypeError(`option expires is invalid: ${r.expires}`);i+="; Expires="+r.expires.toUTCString()}if(r.httpOnly&&(i+="; HttpOnly"),r.secure&&(i+="; Secure"),r.partitioned&&(i+="; Partitioned"),r.priority)switch("string"==typeof r.priority?r.priority.toLowerCase():void 0){case"low":i+="; Priority=Low";break;case"medium":i+="; Priority=Medium";break;case"high":i+="; Priority=High";break;default:throw TypeError(`option priority is invalid: ${r.priority}`)}if(r.sameSite)switch("string"==typeof r.sameSite?r.sameSite.toLowerCase():r.sameSite){case!0:case"strict":i+="; SameSite=Strict";break;case"lax":i+="; SameSite=Lax";break;case"none":i+="; SameSite=None";break;default:throw TypeError(`option sameSite is invalid: ${r.sameSite}`)}return i}],26280);var rt=e.i(26280);let{parse:rr}=rt,ra="A256CBC-HS512";async function rn(e){let{token:t={},secret:r,maxAge:a=2592e3,salt:n}=e,i=Array.isArray(r)?r:[r],o=await ro(ra,i[0],n),s=await tY({kty:"oct",k:tG.encode(o)},`sha${o.byteLength<<3}`);return await new tV(t).setProtectedHeader({alg:"dir",enc:ra,kid:s}).setIssuedAt().setExpirationTime((Date.now()/1e3|0)+a).setJti(crypto.randomUUID()).encrypt(o)}async function ri(e){let{token:t,secret:r,salt:a}=e,n=Array.isArray(r)?r:[r];if(!t)return null;let{payload:i}=await t1(t,async({kid:e,enc:t})=>{for(let r of n){let n=await ro(t,r,a);if(void 0===e||e===await tY({kty:"oct",k:tG.encode(n)},`sha${n.byteLength<<3}`))return n}throw Error("no matching decryption secret")},{clockTolerance:15,keyManagementAlgorithms:["dir"],contentEncryptionAlgorithms:[ra,"A256GCM"]});return i}async function ro(e,t,r){let a;switch(e){case"A256CBC-HS512":a=64;break;case"A256GCM":a=32;break;default:throw Error("Unsupported JWT Content Encryption Algorithm")}return await em("sha256",t,r,`Auth.js Generated Encryption Key (${r})`,a)}async function rs({options:e,paramValue:t,cookieValue:r}){let{url:a,callbacks:n}=e,i=a.origin;return t?i=await n.redirect({url:t,baseUrl:a.origin}):r&&(i=await n.redirect({url:r,baseUrl:a.origin})),{callbackUrl:i,callbackUrlCookie:i!==r?i:void 0}}let rc="\x1b[31m",rd="\x1b[0m",rl={error(e){let t=e instanceof T?e.type:e.name;if(console.error(`${rc}[auth][error]${rd} ${t}: ${e.message}`),e.cause&&"object"==typeof e.cause&&"err"in e.cause&&e.cause.err instanceof Error){let{err:t,...r}=e.cause;console.error(`${rc}[auth][cause]${rd}:`,t.stack),r&&console.error(`${rc}[auth][details]${rd}:`,JSON.stringify(r,null,2))}else e.stack&&console.error(e.stack.replace(/.*/,"").substring(1))},warn(e){console.warn(`\x1b[33m[auth][warn][${e}]${rd}`,"Read more: https://warnings.authjs.dev")},debug(e,t){console.log(`\x1b[90m[auth][debug]:${rd} ${e}`,JSON.stringify(t,null,2))}};function ru(e){let t={...rl};return e.debug||(t.debug=()=>{}),e.logger?.error&&(t.error=e.logger.error),e.logger?.warn&&(t.warn=e.logger.warn),e.logger?.debug&&(t.debug=e.logger.debug),e.logger??(e.logger=t),t}let rf=["providers","session","csrf","signin","signout","callback","verify-request","error","webauthn-options"],{parse:rp,serialize:rh}=rt;async function rb(e){if(!("body"in e)||!e.body||"POST"!==e.method)return;let t=e.headers.get("content-type");return t?.includes("application/json")?await e.json():t?.includes("application/x-www-form-urlencoded")?Object.fromEntries(new URLSearchParams(await e.text())):void 0}async function ry(e,t){try{if("GET"!==e.method&&"POST"!==e.method)throw new G("Only GET and POST requests are supported");t.basePath??(t.basePath="/auth");let r=new URL(e.url),{action:a,providerId:n}=function(e,t){let r=e.match(RegExp(`^${t}(.+)`));if(null===r)throw new G(`Cannot parse action at ${e}`);let a=r.at(-1).replace(/^\//,"").split("/").filter(Boolean);if(1!==a.length&&2!==a.length)throw new G(`Cannot parse action at ${e}`);let[n,i]=a;if(!rf.includes(n)||i&&!["signin","callback","webauthn-options"].includes(n))throw new G(`Cannot parse action at ${e}`);return{action:n,providerId:"undefined"==i?void 0:i}}(r.pathname,t.basePath);return{url:r,action:a,providerId:n,method:e.method,headers:Object.fromEntries(e.headers),body:e.body?await rb(e):void 0,cookies:rp(e.headers.get("cookie")??"")??{},error:r.searchParams.get("error")??void 0,query:Object.fromEntries(r.searchParams)}}catch(a){let r=ru(t);r.error(a),r.debug("request",e)}}function rm(e){let t=new Headers(e.headers);e.cookies?.forEach(e=>{let{name:r,value:a,options:n}=e,i=rh(r,a,n);t.has("Set-Cookie")?t.append("Set-Cookie",i):t.set("Set-Cookie",i)});let r=e.body;"application/json"===t.get("content-type")?r=JSON.stringify(e.body):"application/x-www-form-urlencoded"===t.get("content-type")&&(r=new URLSearchParams(e.body).toString());let a=new Response(r,{headers:t,status:e.redirect?302:e.status??200});return e.redirect&&a.headers.set("Location",e.redirect),a}async function rg(e){let t=new TextEncoder().encode(e);return Array.from(new Uint8Array(await crypto.subtle.digest("SHA-256",t))).map(e=>e.toString(16).padStart(2,"0")).join("").toString()}function rx(e){return Array.from(crypto.getRandomValues(new Uint8Array(e))).reduce((e,t)=>e+("0"+t.toString(16)).slice(-2),"")}async function rw({options:e,cookieValue:t,isPost:r,bodyValue:a}){if(t){let[n,i]=t.split("|");if(i===await rg(`${n}${e.secret}`))return{csrfTokenVerified:r&&n===a,csrfToken:n}}let n=rx(32),i=await rg(`${n}${e.secret}`);return{cookie:`${n}|${i}`,csrfToken:n}}function r_(e,t){if(!t)throw new ee(`CSRF token was missing during an action ${e}`)}function rv(e){return null!==e&&"object"==typeof e}function rk(e,...t){if(!t.length)return e;let r=t.shift();if(rv(e)&&rv(r))for(let t in r)rv(r[t])?(rv(e[t])||(e[t]=Array.isArray(r[t])?[]:{}),rk(e[t],r[t])):void 0!==r[t]&&(e[t]=r[t]);return rk(e,...t)}let rE=Symbol("skip-csrf-check"),rA=Symbol("return-type-raw"),rS=Symbol("custom-fetch"),rR=Symbol("conform-internal"),rT=e=>rC({id:e.sub??e.id??crypto.randomUUID(),name:e.name??e.nickname??e.preferred_username,email:e.email,image:e.picture}),rP=e=>rC({access_token:e.access_token,id_token:e.id_token,refresh_token:e.refresh_token,expires_at:e.expires_at,scope:e.scope,token_type:e.token_type,session_state:e.session_state});function rC(e){let t={};for(let[r,a]of Object.entries(e))void 0!==a&&(t[r]=a);return t}function rO(e,t){if(!e&&t)return;if("string"==typeof e)return{url:new URL(e)};let r=new URL(e?.url??"https://authjs.dev");if(e?.params!=null)for(let[t,a]of Object.entries(e.params))"claims"===t&&(a=JSON.stringify(a)),r.searchParams.set(t,String(a));return{url:r,request:e?.request,conform:e?.conform,...e?.clientPrivateKey?{clientPrivateKey:e?.clientPrivateKey}:null}}let rU={signIn:()=>!0,redirect:({url:e,baseUrl:t})=>e.startsWith("/")?`${t}${e}`:new URL(e).origin===t?e:t,session:({session:e})=>({user:{name:e.user?.name,email:e.user?.email,image:e.user?.image},expires:e.expires?.toISOString?.()??e.expires}),jwt:({token:e})=>e};async function r$({authOptions:e,providerId:t,action:r,url:a,cookies:n,callbackUrl:i,csrfToken:o,csrfDisabled:s,isPost:c}){var d,l;let u=ru(e),{providers:f,provider:p}=function(e){let{providerId:t,config:r}=e,a=new URL(r.basePath??"/auth",e.url.origin),n=r.providers.map(e=>{let t="function"==typeof e?e():e,{options:n,...i}=t,o=n?.id??i.id,s=rk(i,n,{signinUrl:`${a}/signin/${o}`,callbackUrl:`${a}/callback/${o}`});if("oauth"===t.type||"oidc"===t.type){var c;let e,t,a,i;s.redirectProxyUrl??(s.redirectProxyUrl=n?.redirectProxyUrl??r.redirectProxyUrl);let o=((c=s).issuer&&(c.wellKnown??(c.wellKnown=`${c.issuer}/.well-known/openid-configuration`)),(e=rO(c.authorization,c.issuer))&&!e.url?.searchParams.has("scope")&&e.url.searchParams.set("scope","openid profile email"),t=rO(c.token,c.issuer),a=rO(c.userinfo,c.issuer),i=c.checks??["pkce"],c.redirectProxyUrl&&(i.includes("state")||i.push("state"),c.redirectProxyUrl=`${c.redirectProxyUrl}/callback/${c.id}`),{...c,authorization:e,token:t,checks:i,userinfo:a,profile:c.profile??rT,account:c.account??rP});return o.authorization?.url.searchParams.get("response_mode")==="form_post"&&delete o.redirectProxyUrl,o[rS]??(o[rS]=n?.[rS]),o}return s}),i=n.find(({id:e})=>e===t);if(t&&!i){let e=n.map(e=>e.id).join(", ");throw Error(`Provider with id "${t}" not found. Available providers: [${e}].`)}return{providers:n,provider:i}}({url:a,providerId:t,config:e}),h=!1;if((p?.type==="oauth"||p?.type==="oidc")&&p.redirectProxyUrl)try{h=new URL(p.redirectProxyUrl).origin===a.origin}catch{throw TypeError(`redirectProxyUrl must be a valid URL. Received: ${p.redirectProxyUrl}`)}let b={debug:!1,pages:{},theme:{colorScheme:"auto",logo:"",brandColor:"",buttonText:""},...e,url:a,action:r,provider:p,cookies:rk(S(e.useSecureCookies??"https:"===a.protocol),e.cookies),providers:f,session:{strategy:e.adapter?"database":"jwt",maxAge:2592e3,updateAge:86400,generateSessionToken:()=>crypto.randomUUID(),...e.session},jwt:{secret:e.secret,maxAge:e.session?.maxAge??2592e3,encode:rn,decode:ri,...e.jwt},events:(d=e.events??{},l=u,Object.keys(d).reduce((e,t)=>(e[t]=async(...e)=>{try{let r=d[t];return await r(...e)}catch(e){l.error(new j(e))}},e),{})),adapter:function(e,t){if(e)return Object.keys(e).reduce((r,a)=>(r[a]=async(...r)=>{try{t.debug(`adapter_${a}`,{args:r});let n=e[a];return await n(...r)}catch(r){let e=new C(r);throw t.error(e),e}},r),{})}(e.adapter,u),callbacks:{...rU,...e.callbacks},logger:u,callbackUrl:a.origin,isOnRedirectProxy:h,experimental:{...e.experimental}},y=[];if(s)b.csrfTokenVerified=!0;else{let{csrfToken:e,cookie:t,csrfTokenVerified:r}=await rw({options:b,cookieValue:n?.[b.cookies.csrfToken.name],isPost:c,bodyValue:o});b.csrfToken=e,b.csrfTokenVerified=r,t&&y.push({name:b.cookies.csrfToken.name,value:t,options:b.cookies.csrfToken.options})}let{callbackUrl:m,callbackUrlCookie:g}=await rs({options:b,cookieValue:n?.[b.cookies.callbackUrl.name],paramValue:i});return b.callbackUrl=m,g&&y.push({name:b.cookies.callbackUrl.name,value:g,options:b.cookies.callbackUrl.options}),{options:b,cookies:y}}var rj,rI,rH,rD,rW,rL,rM,rN,rK,rJ,rB,rz,rq,rF,rV,rG,rX={},rY=[],rZ=/acit|ex(?:s|g|n|p|$)|rph|grid|ows|mnc|ntw|ine[ch]|zoo|^ord|itera/i,rQ=Array.isArray;function r0(e,t){for(var r in t)e[r]=t[r];return e}function r1(e){e&&e.parentNode&&e.parentNode.removeChild(e)}function r2(e,t,r,a,n){var i={type:e,props:t,key:r,ref:a,__k:null,__:null,__b:0,__e:null,__d:void 0,__c:null,constructor:void 0,__v:null==n?++rK:n,__i:-1,__u:0};return null==n&&null!=rN.vnode&&rN.vnode(i),i}function r5(e){return e.children}function r6(e,t){this.props=e,this.context=t}function r3(e,t){if(null==t)return e.__?r3(e.__,e.__i+1):null;for(var r;t<e.__k.length;t++)if(null!=(r=e.__k[t])&&null!=r.__e)return r.__e;return"function"==typeof e.type?r3(e):null}function r8(e){(!e.__d&&(e.__d=!0)&&rJ.push(e)&&!r4.__r++||rB!==rN.debounceRendering)&&((rB=rN.debounceRendering)||rz)(r4)}function r4(){var e,t,r,a,n,i,o,s;for(rJ.sort(rq);e=rJ.shift();)e.__d&&(t=rJ.length,a=void 0,i=(n=(r=e).__v).__e,o=[],s=[],r.__P&&((a=r0({},n)).__v=n.__v+1,rN.vnode&&rN.vnode(a),ar(r.__P,a,n,r.__n,r.__P.namespaceURI,32&n.__u?[i]:null,o,null==i?r3(n):i,!!(32&n.__u),s),a.__v=n.__v,a.__.__k[a.__i]=a,function(e,t,r){t.__d=void 0;for(var a=0;a<r.length;a++)aa(r[a],r[++a],r[++a]);rN.__c&&rN.__c(t,e),e.some(function(t){try{e=t.__h,t.__h=[],e.some(function(e){e.call(t)})}catch(e){rN.__e(e,t.__v)}})}(o,a,s),a.__e!=i&&function e(t){var r,a;if(null!=(t=t.__)&&null!=t.__c){for(t.__e=t.__c.base=null,r=0;r<t.__k.length;r++)if(null!=(a=t.__k[r])&&null!=a.__e){t.__e=t.__c.base=a.__e;break}return e(t)}}(a)),rJ.length>t&&rJ.sort(rq));r4.__r=0}function r9(e,t,r,a,n,i,o,s,c,d,l){var u,f,p,h,b,y=a&&a.__k||rY,m=t.length;for(r.__d=c,function(e,t,r){var a,n,i,o,s,c=t.length,d=r.length,l=d,u=0;for(e.__k=[],a=0;a<c;a++)null!=(n=t[a])&&"boolean"!=typeof n&&"function"!=typeof n?(o=a+u,(n=e.__k[a]="string"==typeof n||"number"==typeof n||"bigint"==typeof n||n.constructor==String?r2(null,n,null,null,null):rQ(n)?r2(r5,{children:n},null,null,null):void 0===n.constructor&&n.__b>0?r2(n.type,n.props,n.key,n.ref?n.ref:null,n.__v):n).__=e,n.__b=e.__b+1,i=null,-1!==(s=n.__i=function(e,t,r,a){var n=e.key,i=e.type,o=r-1,s=r+1,c=t[r];if(null===c||c&&n==c.key&&i===c.type&&0==(131072&c.__u))return r;if(a>+(null!=c&&0==(131072&c.__u)))for(;o>=0||s<t.length;){if(o>=0){if((c=t[o])&&0==(131072&c.__u)&&n==c.key&&i===c.type)return o;o--}if(s<t.length){if((c=t[s])&&0==(131072&c.__u)&&n==c.key&&i===c.type)return s;s++}}return -1}(n,r,o,l))&&(l--,(i=r[s])&&(i.__u|=131072)),null==i||null===i.__v?(-1==s&&u--,"function"!=typeof n.type&&(n.__u|=65536)):s!==o&&(s==o-1?u--:s==o+1?u++:(s>o?u--:u++,n.__u|=65536))):n=e.__k[a]=null;if(l)for(a=0;a<d;a++)null!=(i=r[a])&&0==(131072&i.__u)&&(i.__e==e.__d&&(e.__d=r3(i)),function e(t,r,a){var n,i;if(rN.unmount&&rN.unmount(t),(n=t.ref)&&(n.current&&n.current!==t.__e||aa(n,null,r)),null!=(n=t.__c)){if(n.componentWillUnmount)try{n.componentWillUnmount()}catch(e){rN.__e(e,r)}n.base=n.__P=null}if(n=t.__k)for(i=0;i<n.length;i++)n[i]&&e(n[i],r,a||"function"!=typeof t.type);a||r1(t.__e),t.__c=t.__=t.__e=t.__d=void 0}(i,i))}(r,t,y),c=r.__d,u=0;u<m;u++)null!=(p=r.__k[u])&&(f=-1===p.__i?rX:y[p.__i]||rX,p.__i=u,ar(e,p,f,n,i,o,s,c,d,l),h=p.__e,p.ref&&f.ref!=p.ref&&(f.ref&&aa(f.ref,null,p),l.push(p.ref,p.__c||h,p)),null==b&&null!=h&&(b=h),65536&p.__u||f.__k===p.__k?c=function e(t,r,a){var n,i;if("function"==typeof t.type){for(n=t.__k,i=0;n&&i<n.length;i++)n[i]&&(n[i].__=t,r=e(n[i],r,a));return r}t.__e!=r&&(r&&t.type&&!a.contains(r)&&(r=r3(t)),a.insertBefore(t.__e,r||null),r=t.__e);do r=r&&r.nextSibling;while(null!=r&&8===r.nodeType)return r}(p,c,e):"function"==typeof p.type&&void 0!==p.__d?c=p.__d:h&&(c=h.nextSibling),p.__d=void 0,p.__u&=-196609);r.__d=c,r.__e=b}function r7(e,t,r){"-"===t[0]?e.setProperty(t,null==r?"":r):e[t]=null==r?"":"number"!=typeof r||rZ.test(t)?r:r+"px"}function ae(e,t,r,a,n){var i;e:if("style"===t)if("string"==typeof r)e.style.cssText=r;else{if("string"==typeof a&&(e.style.cssText=a=""),a)for(t in a)r&&t in r||r7(e.style,t,"");if(r)for(t in r)a&&r[t]===a[t]||r7(e.style,t,r[t])}else if("o"===t[0]&&"n"===t[1])i=t!==(t=t.replace(/(PointerCapture)$|Capture$/i,"$1")),t=t.toLowerCase()in e||"onFocusOut"===t||"onFocusIn"===t?t.toLowerCase().slice(2):t.slice(2),e.l||(e.l={}),e.l[t+i]=r,r?a?r.u=a.u:(r.u=rF,e.addEventListener(t,i?rG:rV,i)):e.removeEventListener(t,i?rG:rV,i);else{if("http://www.w3.org/2000/svg"==n)t=t.replace(/xlink(H|:h)/,"h").replace(/sName$/,"s");else if("width"!=t&&"height"!=t&&"href"!=t&&"list"!=t&&"form"!=t&&"tabIndex"!=t&&"download"!=t&&"rowSpan"!=t&&"colSpan"!=t&&"role"!=t&&"popover"!=t&&t in e)try{e[t]=null==r?"":r;break e}catch(e){}"function"==typeof r||(null==r||!1===r&&"-"!==t[4]?e.removeAttribute(t):e.setAttribute(t,"popover"==t&&1==r?"":r))}}function at(e){return function(t){if(this.l){var r=this.l[t.type+e];if(null==t.t)t.t=rF++;else if(t.t<r.u)return;return r(rN.event?rN.event(t):t)}}}function ar(e,t,r,a,n,i,o,s,c,d){var l,u,f,p,h,b,y,m,g,x,w,_,v,k,E,A,S=t.type;if(void 0!==t.constructor)return null;128&r.__u&&(c=!!(32&r.__u),i=[s=t.__e=r.__e]),(l=rN.__b)&&l(t);e:if("function"==typeof S)try{if(m=t.props,g="prototype"in S&&S.prototype.render,x=(l=S.contextType)&&a[l.__c],w=l?x?x.props.value:l.__:a,r.__c?y=(u=t.__c=r.__c).__=u.__E:(g?t.__c=u=new S(m,w):(t.__c=u=new r6(m,w),u.constructor=S,u.render=an),x&&x.sub(u),u.props=m,u.state||(u.state={}),u.context=w,u.__n=a,f=u.__d=!0,u.__h=[],u._sb=[]),g&&null==u.__s&&(u.__s=u.state),g&&null!=S.getDerivedStateFromProps&&(u.__s==u.state&&(u.__s=r0({},u.__s)),r0(u.__s,S.getDerivedStateFromProps(m,u.__s))),p=u.props,h=u.state,u.__v=t,f)g&&null==S.getDerivedStateFromProps&&null!=u.componentWillMount&&u.componentWillMount(),g&&null!=u.componentDidMount&&u.__h.push(u.componentDidMount);else{if(g&&null==S.getDerivedStateFromProps&&m!==p&&null!=u.componentWillReceiveProps&&u.componentWillReceiveProps(m,w),!u.__e&&(null!=u.shouldComponentUpdate&&!1===u.shouldComponentUpdate(m,u.__s,w)||t.__v===r.__v)){for(t.__v!==r.__v&&(u.props=m,u.state=u.__s,u.__d=!1),t.__e=r.__e,t.__k=r.__k,t.__k.some(function(e){e&&(e.__=t)}),_=0;_<u._sb.length;_++)u.__h.push(u._sb[_]);u._sb=[],u.__h.length&&o.push(u);break e}null!=u.componentWillUpdate&&u.componentWillUpdate(m,u.__s,w),g&&null!=u.componentDidUpdate&&u.__h.push(function(){u.componentDidUpdate(p,h,b)})}if(u.context=w,u.props=m,u.__P=e,u.__e=!1,v=rN.__r,k=0,g){for(u.state=u.__s,u.__d=!1,v&&v(t),l=u.render(u.props,u.state,u.context),E=0;E<u._sb.length;E++)u.__h.push(u._sb[E]);u._sb=[]}else do u.__d=!1,v&&v(t),l=u.render(u.props,u.state,u.context),u.state=u.__s;while(u.__d&&++k<25)u.state=u.__s,null!=u.getChildContext&&(a=r0(r0({},a),u.getChildContext())),g&&!f&&null!=u.getSnapshotBeforeUpdate&&(b=u.getSnapshotBeforeUpdate(p,h)),r9(e,rQ(A=null!=l&&l.type===r5&&null==l.key?l.props.children:l)?A:[A],t,r,a,n,i,o,s,c,d),u.base=t.__e,t.__u&=-161,u.__h.length&&o.push(u),y&&(u.__E=u.__=null)}catch(e){if(t.__v=null,c||null!=i){for(t.__u|=c?160:128;s&&8===s.nodeType&&s.nextSibling;)s=s.nextSibling;i[i.indexOf(s)]=null,t.__e=s}else t.__e=r.__e,t.__k=r.__k;rN.__e(e,t,r)}else null==i&&t.__v===r.__v?(t.__k=r.__k,t.__e=r.__e):t.__e=function(e,t,r,a,n,i,o,s,c){var d,l,u,f,p,h,b,y=r.props,m=t.props,g=t.type;if("svg"===g?n="http://www.w3.org/2000/svg":"math"===g?n="http://www.w3.org/1998/Math/MathML":n||(n="http://www.w3.org/1999/xhtml"),null!=i){for(d=0;d<i.length;d++)if((p=i[d])&&"setAttribute"in p==!!g&&(g?p.localName===g:3===p.nodeType)){e=p,i[d]=null;break}}if(null==e){if(null===g)return document.createTextNode(m);e=document.createElementNS(n,g,m.is&&m),s&&(rN.__m&&rN.__m(t,i),s=!1),i=null}if(null===g)y===m||s&&e.data===m||(e.data=m);else{if(i=i&&rM.call(e.childNodes),y=r.props||rX,!s&&null!=i)for(y={},d=0;d<e.attributes.length;d++)y[(p=e.attributes[d]).name]=p.value;for(d in y)if(p=y[d],"children"==d);else if("dangerouslySetInnerHTML"==d)u=p;else if(!(d in m)){if("value"==d&&"defaultValue"in m||"checked"==d&&"defaultChecked"in m)continue;ae(e,d,null,p,n)}for(d in m)p=m[d],"children"==d?f=p:"dangerouslySetInnerHTML"==d?l=p:"value"==d?h=p:"checked"==d?b=p:s&&"function"!=typeof p||y[d]===p||ae(e,d,p,y[d],n);if(l)s||u&&(l.__html===u.__html||l.__html===e.innerHTML)||(e.innerHTML=l.__html),t.__k=[];else if(u&&(e.innerHTML=""),r9(e,rQ(f)?f:[f],t,r,a,"foreignObject"===g?"http://www.w3.org/1999/xhtml":n,i,o,i?i[0]:r.__k&&r3(r,0),s,c),null!=i)for(d=i.length;d--;)r1(i[d]);s||(d="value","progress"===g&&null==h?e.removeAttribute("value"):void 0===h||h===e[d]&&("progress"!==g||h)&&("option"!==g||h===y[d])||ae(e,d,h,y[d],n),d="checked",void 0!==b&&b!==e[d]&&ae(e,d,b,y[d],n))}return e}(r.__e,t,r,a,n,i,o,c,d);(l=rN.diffed)&&l(t)}function aa(e,t,r){try{if("function"==typeof e){var a="function"==typeof e.__u;a&&e.__u(),a&&null==t||(e.__u=e(t))}else e.current=t}catch(e){rN.__e(e,r)}}function an(e,t,r){return this.constructor(e,r)}rM=rY.slice,rN={__e:function(e,t,r,a){for(var n,i,o;t=t.__;)if((n=t.__c)&&!n.__)try{if((i=n.constructor)&&null!=i.getDerivedStateFromError&&(n.setState(i.getDerivedStateFromError(e)),o=n.__d),null!=n.componentDidCatch&&(n.componentDidCatch(e,a||{}),o=n.__d),o)return n.__E=n}catch(t){e=t}throw e}},rK=0,r6.prototype.setState=function(e,t){var r;r=null!=this.__s&&this.__s!==this.state?this.__s:this.__s=r0({},this.state),"function"==typeof e&&(e=e(r0({},r),this.props)),e&&r0(r,e),null!=e&&this.__v&&(t&&this._sb.push(t),r8(this))},r6.prototype.forceUpdate=function(e){this.__v&&(this.__e=!0,e&&this.__h.push(e),r8(this))},r6.prototype.render=r5,rJ=[],rz="function"==typeof Promise?Promise.prototype.then.bind(Promise.resolve()):setTimeout,rq=function(e,t){return e.__v.__b-t.__v.__b},r4.__r=0,rF=0,rV=at(!1),rG=at(!0);var ai=/[\s\n\\/='"\0<>]/,ao=/^(xlink|xmlns|xml)([A-Z])/,as=/^accessK|^auto[A-Z]|^cell|^ch|^col|cont|cross|dateT|encT|form[A-Z]|frame|hrefL|inputM|maxL|minL|noV|playsI|popoverT|readO|rowS|src[A-Z]|tabI|useM|item[A-Z]/,ac=/^ac|^ali|arabic|basel|cap|clipPath$|clipRule$|color|dominant|enable|fill|flood|font|glyph[^R]|horiz|image|letter|lighting|marker[^WUH]|overline|panose|pointe|paint|rendering|shape|stop|strikethrough|stroke|text[^L]|transform|underline|unicode|units|^v[^i]|^w|^xH/,ad=new Set(["draggable","spellcheck"]),al=/["&<]/;function au(e){if(0===e.length||!1===al.test(e))return e;for(var t=0,r=0,a="",n="";r<e.length;r++){switch(e.charCodeAt(r)){case 34:n="&quot;";break;case 38:n="&amp;";break;case 60:n="&lt;";break;default:continue}r!==t&&(a+=e.slice(t,r)),a+=n,t=r+1}return r!==t&&(a+=e.slice(t,r)),a}var af={},ap=new Set(["animation-iteration-count","border-image-outset","border-image-slice","border-image-width","box-flex","box-flex-group","box-ordinal-group","column-count","fill-opacity","flex","flex-grow","flex-negative","flex-order","flex-positive","flex-shrink","flood-opacity","font-weight","grid-column","grid-row","line-clamp","line-height","opacity","order","orphans","stop-opacity","stroke-dasharray","stroke-dashoffset","stroke-miterlimit","stroke-opacity","stroke-width","tab-size","widows","z-index","zoom"]),ah=/[A-Z]/g;function ab(){this.__d=!0}function ay(e,t,r){if(!e.s){if(r instanceof a_){if(!r.s)return void(r.o=ay.bind(null,e,t));1&t&&(t=r.s),r=r.v}if(r&&r.then)return void r.then(ay.bind(null,e,t),ay.bind(null,e,2));e.s=t,e.v=r;let a=e.o;a&&a(e)}}var am,ag,ax,aw,a_=function(){function e(){}return e.prototype.then=function(t,r){var a=new e,n=this.s;if(n){var i=1&n?t:r;if(i){try{ay(a,1,i(this.v))}catch(e){ay(a,2,e)}return a}return this}return this.o=function(e){try{var n=e.v;1&e.s?ay(a,1,t?t(n):n):r?ay(a,1,r(n)):ay(a,2,n)}catch(e){ay(a,2,e)}},a},e}(),av={},ak=[],aE=Array.isArray,aA=Object.assign;function aS(e,t){var r,a=e.type,n=!0;return e.__c?(n=!1,(r=e.__c).state=r.__s):r=new a(e.props,t),e.__c=r,r.__v=e,r.props=e.props,r.context=t,r.__d=!0,null==r.state&&(r.state=av),null==r.__s&&(r.__s=r.state),a.getDerivedStateFromProps?r.state=aA({},r.state,a.getDerivedStateFromProps(r.props,r.state)):n&&r.componentWillMount?(r.componentWillMount(),r.state=r.__s!==r.state?r.__s:r.state):!n&&r.componentWillUpdate&&r.componentWillUpdate(),ax&&ax(e),r.render(r.props,r.state,t)}var aR=new Set(["area","base","br","col","command","embed","hr","img","input","keygen","link","meta","param","source","track","wbr"]),aT=0;function aP(e,t,r,a,n,i){t||(t={});var o,s,c=t;"ref"in t&&(o=t.ref,delete t.ref);var d={type:e,props:c,key:r,ref:o,__k:null,__:null,__b:0,__e:null,__d:void 0,__c:null,constructor:void 0,__v:--aT,__i:-1,__u:0,__source:n,__self:i};if("function"==typeof e&&(o=e.defaultProps))for(s in o)void 0===c[s]&&(c[s]=o[s]);return rN.vnode&&rN.vnode(d),d}async function aC(e,t){let r=window.SimpleWebAuthnBrowser;async function a(r){let a=new URL(`${e}/webauthn-options/${t}`);r&&a.searchParams.append("action",r),i().forEach(e=>{a.searchParams.append(e.name,e.value)});let n=await fetch(a);return n.ok?n.json():void console.error("Failed to fetch options",n)}function n(){let e=`#${t}-form`,r=document.querySelector(e);if(!r)throw Error(`Form '${e}' not found`);return r}function i(){return Array.from(n().querySelectorAll("input[data-form-field]"))}async function o(e,t){let r=n();if(e){let t=document.createElement("input");t.type="hidden",t.name="action",t.value=e,r.appendChild(t)}if(t){let e=document.createElement("input");e.type="hidden",e.name="data",e.value=JSON.stringify(t),r.appendChild(e)}return r.submit()}async function s(e,t){let a=await r.startAuthentication(e,t);return await o("authenticate",a)}async function c(e){i().forEach(e=>{if(e.required&&!e.value)throw Error(`Missing required field: ${e.name}`)});let t=await r.startRegistration(e);return await o("register",t)}async function d(){if(!r.browserSupportsWebAuthnAutofill())return;let e=await a("authenticate");if(!e)return void console.error("Failed to fetch option for autofill authentication");try{await s(e.options,!0)}catch(e){console.error(e)}}(async function(){let e=n();if(!r.browserSupportsWebAuthn()){e.style.display="none";return}e&&e.addEventListener("submit",async e=>{e.preventDefault();let t=await a(void 0);if(!t)return void console.error("Failed to fetch options for form submission");if("authenticate"===t.action)try{await s(t.options,!1)}catch(e){console.error(e)}else if("register"===t.action)try{await c(t.options)}catch(e){console.error(e)}})})(),d()}let aO={default:"Unable to sign in.",Signin:"Try signing in with a different account.",OAuthSignin:"Try signing in with a different account.",OAuthCallbackError:"Try signing in with a different account.",OAuthCreateAccount:"Try signing in with a different account.",EmailCreateAccount:"Try signing in with a different account.",Callback:"Try signing in with a different account.",OAuthAccountNotLinked:"To confirm your identity, sign in with the same account you used originally.",EmailSignin:"The e-mail could not be sent.",CredentialsSignin:"Sign in failed. Check the details you provided are correct.",SessionRequired:"Please sign in to access this page."},aU=`:root {
+  --border-width: 1px;
+  --border-radius: 0.5rem;
+  --color-error: #c94b4b;
+  --color-info: #157efb;
+  --color-info-hover: #0f6ddb;
+  --color-info-text: #fff;
+}
+.__next-auth-theme-auto,
+.__next-auth-theme-light {
+  --color-background: #ececec;
+  --color-background-hover: rgba(236, 236, 236, 0.8);
+  --color-background-card: #fff;
+  --color-text: #000;
+  --color-primary: #444;
+  --color-control-border: #bbb;
+  --color-button-active-background: #f9f9f9;
+  --color-button-active-border: #aaa;
+  --color-separator: #ccc;
+  --provider-bg: #fff;
+  --provider-bg-hover: color-mix(
+    in srgb,
+    var(--provider-brand-color) 30%,
+    #fff
+  );
+}
+.__next-auth-theme-dark {
+  --color-background: #161b22;
+  --color-background-hover: rgba(22, 27, 34, 0.8);
+  --color-background-card: #0d1117;
+  --color-text: #fff;
+  --color-primary: #ccc;
+  --color-control-border: #555;
+  --color-button-active-background: #060606;
+  --color-button-active-border: #666;
+  --color-separator: #444;
+  --provider-bg: #161b22;
+  --provider-bg-hover: color-mix(
+    in srgb,
+    var(--provider-brand-color) 30%,
+    #000
+  );
+}
+.__next-auth-theme-dark img[src$="42-school.svg"],
+  .__next-auth-theme-dark img[src$="apple.svg"],
+  .__next-auth-theme-dark img[src$="boxyhq-saml.svg"],
+  .__next-auth-theme-dark img[src$="eveonline.svg"],
+  .__next-auth-theme-dark img[src$="github.svg"],
+  .__next-auth-theme-dark img[src$="mailchimp.svg"],
+  .__next-auth-theme-dark img[src$="medium.svg"],
+  .__next-auth-theme-dark img[src$="okta.svg"],
+  .__next-auth-theme-dark img[src$="patreon.svg"],
+  .__next-auth-theme-dark img[src$="ping-id.svg"],
+  .__next-auth-theme-dark img[src$="roblox.svg"],
+  .__next-auth-theme-dark img[src$="threads.svg"],
+  .__next-auth-theme-dark img[src$="wikimedia.svg"] {
+    filter: invert(1);
+  }
+.__next-auth-theme-dark #submitButton {
+    background-color: var(--provider-bg, var(--color-info));
+  }
+@media (prefers-color-scheme: dark) {
+  .__next-auth-theme-auto {
+    --color-background: #161b22;
+    --color-background-hover: rgba(22, 27, 34, 0.8);
+    --color-background-card: #0d1117;
+    --color-text: #fff;
+    --color-primary: #ccc;
+    --color-control-border: #555;
+    --color-button-active-background: #060606;
+    --color-button-active-border: #666;
+    --color-separator: #444;
+    --provider-bg: #161b22;
+    --provider-bg-hover: color-mix(
+      in srgb,
+      var(--provider-brand-color) 30%,
+      #000
+    );
+  }
+    .__next-auth-theme-auto img[src$="42-school.svg"],
+    .__next-auth-theme-auto img[src$="apple.svg"],
+    .__next-auth-theme-auto img[src$="boxyhq-saml.svg"],
+    .__next-auth-theme-auto img[src$="eveonline.svg"],
+    .__next-auth-theme-auto img[src$="github.svg"],
+    .__next-auth-theme-auto img[src$="mailchimp.svg"],
+    .__next-auth-theme-auto img[src$="medium.svg"],
+    .__next-auth-theme-auto img[src$="okta.svg"],
+    .__next-auth-theme-auto img[src$="patreon.svg"],
+    .__next-auth-theme-auto img[src$="ping-id.svg"],
+    .__next-auth-theme-auto img[src$="roblox.svg"],
+    .__next-auth-theme-auto img[src$="threads.svg"],
+    .__next-auth-theme-auto img[src$="wikimedia.svg"] {
+      filter: invert(1);
+    }
+    .__next-auth-theme-auto #submitButton {
+      background-color: var(--provider-bg, var(--color-info));
+    }
+}
+html {
+  box-sizing: border-box;
+}
+*,
+*:before,
+*:after {
+  box-sizing: inherit;
+  margin: 0;
+  padding: 0;
+}
+body {
+  background-color: var(--color-background);
+  margin: 0;
+  padding: 0;
+  font-family:
+    ui-sans-serif,
+    system-ui,
+    -apple-system,
+    BlinkMacSystemFont,
+    "Segoe UI",
+    Roboto,
+    "Helvetica Neue",
+    Arial,
+    "Noto Sans",
+    sans-serif,
+    "Apple Color Emoji",
+    "Segoe UI Emoji",
+    "Segoe UI Symbol",
+    "Noto Color Emoji";
+}
+h1 {
+  margin-bottom: 1.5rem;
+  padding: 0 1rem;
+  font-weight: 400;
+  color: var(--color-text);
+}
+p {
+  margin-bottom: 1.5rem;
+  padding: 0 1rem;
+  color: var(--color-text);
+}
+form {
+  margin: 0;
+  padding: 0;
+}
+label {
+  font-weight: 500;
+  text-align: left;
+  margin-bottom: 0.25rem;
+  display: block;
+  color: var(--color-text);
+}
+input[type] {
+  box-sizing: border-box;
+  display: block;
+  width: 100%;
+  padding: 0.5rem 1rem;
+  border: var(--border-width) solid var(--color-control-border);
+  background: var(--color-background-card);
+  font-size: 1rem;
+  border-radius: var(--border-radius);
+  color: var(--color-text);
+}
+p {
+  font-size: 1.1rem;
+  line-height: 2rem;
+}
+a.button {
+  text-decoration: none;
+  line-height: 1rem;
+}
+a.button:link,
+  a.button:visited {
+    background-color: var(--color-background);
+    color: var(--color-primary);
+  }
+button,
+a.button {
+  padding: 0.75rem 1rem;
+  color: var(--provider-color, var(--color-primary));
+  background-color: var(--provider-bg, var(--color-background));
+  border: 1px solid #00000031;
+  font-size: 0.9rem;
+  height: 50px;
+  border-radius: var(--border-radius);
+  transition: background-color 250ms ease-in-out;
+  font-weight: 300;
+  position: relative;
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+}
+:is(button,a.button):hover {
+    background-color: var(--provider-bg-hover, var(--color-background-hover));
+    cursor: pointer;
+  }
+:is(button,a.button):active {
+    cursor: pointer;
+  }
+:is(button,a.button) span {
+    color: var(--provider-bg);
+  }
+#submitButton {
+  color: var(--button-text-color, var(--color-info-text));
+  background-color: var(--brand-color, var(--color-info));
+  width: 100%;
+}
+#submitButton:hover {
+    background-color: var(
+      --button-hover-bg,
+      var(--color-info-hover)
+    ) !important;
+  }
+a.site {
+  color: var(--color-primary);
+  text-decoration: none;
+  font-size: 1rem;
+  line-height: 2rem;
+}
+a.site:hover {
+    text-decoration: underline;
+  }
+.page {
+  position: absolute;
+  width: 100%;
+  height: 100%;
+  display: grid;
+  place-items: center;
+  margin: 0;
+  padding: 0;
+  box-sizing: border-box;
+}
+.page > div {
+    text-align: center;
+  }
+.error a.button {
+    padding-left: 2rem;
+    padding-right: 2rem;
+    margin-top: 0.5rem;
+  }
+.error .message {
+    margin-bottom: 1.5rem;
+  }
+.signin input[type="text"] {
+    margin-left: auto;
+    margin-right: auto;
+    display: block;
+  }
+.signin hr {
+    display: block;
+    border: 0;
+    border-top: 1px solid var(--color-separator);
+    margin: 2rem auto 1rem auto;
+    overflow: visible;
+  }
+.signin hr::before {
+      content: "or";
+      background: var(--color-background-card);
+      color: #888;
+      padding: 0 0.4rem;
+      position: relative;
+      top: -0.7rem;
+    }
+.signin .error {
+    background: #f5f5f5;
+    font-weight: 500;
+    border-radius: 0.3rem;
+    background: var(--color-error);
+  }
+.signin .error p {
+      text-align: left;
+      padding: 0.5rem 1rem;
+      font-size: 0.9rem;
+      line-height: 1.2rem;
+      color: var(--color-info-text);
+    }
+.signin > div,
+  .signin form {
+    display: block;
+  }
+.signin > div input[type], .signin form input[type] {
+      margin-bottom: 0.5rem;
+    }
+.signin > div button, .signin form button {
+      width: 100%;
+    }
+.signin .provider + .provider {
+    margin-top: 1rem;
+  }
+.logo {
+  display: inline-block;
+  max-width: 150px;
+  margin: 1.25rem 0;
+  max-height: 70px;
+}
+.card {
+  background-color: var(--color-background-card);
+  border-radius: 1rem;
+  padding: 1.25rem 2rem;
+}
+.card .header {
+    color: var(--color-primary);
+  }
+.card input[type]::-moz-placeholder {
+    color: color-mix(
+      in srgb,
+      var(--color-text) 20%,
+      var(--color-button-active-background)
+    );
+  }
+.card input[type]::placeholder {
+    color: color-mix(
+      in srgb,
+      var(--color-text) 20%,
+      var(--color-button-active-background)
+    );
+  }
+.card input[type] {
+    background: color-mix(in srgb, var(--color-background-card) 95%, black);
+  }
+.section-header {
+  color: var(--color-text);
+}
+@media screen and (min-width: 450px) {
+  .card {
+    margin: 2rem 0;
+    width: 368px;
+  }
+}
+@media screen and (max-width: 450px) {
+  .card {
+    margin: 1rem 0;
+    width: 343px;
+  }
+}
+`;function a$({html:e,title:t,status:r,cookies:a,theme:n,headTags:i}){return{cookies:a,status:r,headers:{"Content-Type":"text/html"},body:`<!DOCTYPE html><html lang="en"><head><meta charset="UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width, initial-scale=1.0"><style>${aU}</style><title>${t}</title>${i??""}</head><body class="__next-auth-theme-${n?.colorScheme??"auto"}"><div class="page">${function(e){var t=rN.__s;rN.__s=!0,am=rN.__b,ag=rN.diffed,ax=rN.__r,aw=rN.unmount;var r=function(e,t,r){var a,n,i,o={};for(i in t)"key"==i?a=t[i]:"ref"==i?n=t[i]:o[i]=t[i];if(arguments.length>2&&(o.children=arguments.length>3?rM.call(arguments,2):r),"function"==typeof e&&null!=e.defaultProps)for(i in e.defaultProps)void 0===o[i]&&(o[i]=e.defaultProps[i]);return r2(e,o,a,n,null)}(r5,null);r.__k=[e];try{var a=function e(t,r,a,n,i,o,s){if(null==t||!0===t||!1===t||""===t)return"";var c=typeof t;if("object"!=c)return"function"==c?"":"string"==c?au(t):t+"";if(aE(t)){var d,l="";i.__k=t;for(var u=0;u<t.length;u++){var f=t[u];if(null!=f&&"boolean"!=typeof f){var p,h=e(f,r,a,n,i,o,s);"string"==typeof h?l+=h:(d||(d=[]),l&&d.push(l),l="",aE(h)?(p=d).push.apply(p,h):d.push(h))}}return d?(l&&d.push(l),d):l}if(void 0!==t.constructor)return"";t.__=i,am&&am(t);var b=t.type,y=t.props;if("function"==typeof b){var m,g,x,w=r;if(b===r5){if("tpl"in y){for(var _="",v=0;v<y.tpl.length;v++)if(_+=y.tpl[v],y.exprs&&v<y.exprs.length){var k=y.exprs[v];if(null==k)continue;"object"==typeof k&&(void 0===k.constructor||aE(k))?_+=e(k,r,a,n,t,o,s):_+=k}return _}if("UNSTABLE_comment"in y)return"<!--"+au(y.UNSTABLE_comment)+"-->";g=y.children}else{if(null!=(m=b.contextType)){var E=r[m.__c];w=E?E.props.value:m.__}var A=b.prototype&&"function"==typeof b.prototype.render;if(A)g=aS(t,w),x=t.__c;else{t.__c=x={__v:t,context:w,props:t.props,setState:ab,forceUpdate:ab,__d:!0,__h:[]};for(var S=0;x.__d&&S++<25;)x.__d=!1,ax&&ax(t),g=b.call(x,y,w);x.__d=!0}if(null!=x.getChildContext&&(r=aA({},r,x.getChildContext())),A&&rN.errorBoundaries&&(b.getDerivedStateFromError||x.componentDidCatch)){g=null!=g&&g.type===r5&&null==g.key&&null==g.props.tpl?g.props.children:g;try{return e(g,r,a,n,t,o,s)}catch(i){return b.getDerivedStateFromError&&(x.__s=b.getDerivedStateFromError(i)),x.componentDidCatch&&x.componentDidCatch(i,av),x.__d?(g=aS(t,r),null!=(x=t.__c).getChildContext&&(r=aA({},r,x.getChildContext())),e(g=null!=g&&g.type===r5&&null==g.key&&null==g.props.tpl?g.props.children:g,r,a,n,t,o,s)):""}finally{ag&&ag(t),t.__=null,aw&&aw(t)}}}g=null!=g&&g.type===r5&&null==g.key&&null==g.props.tpl?g.props.children:g;try{var R=e(g,r,a,n,t,o,s);return ag&&ag(t),t.__=null,rN.unmount&&rN.unmount(t),R}catch(i){if(!o&&s&&s.onError){var T=s.onError(i,t,function(i){return e(i,r,a,n,t,o,s)});if(void 0!==T)return T;var P=rN.__e;return P&&P(i,t),""}if(!o||!i||"function"!=typeof i.then)throw i;return i.then(function i(){try{return e(g,r,a,n,t,o,s)}catch(c){if(!c||"function"!=typeof c.then)throw c;return c.then(function(){return e(g,r,a,n,t,o,s)},i)}})}}var C,O="<"+b,U="";for(var $ in y){var j=y[$];if("function"!=typeof j||"class"===$||"className"===$){switch($){case"children":C=j;continue;case"key":case"ref":case"__self":case"__source":continue;case"htmlFor":if("for"in y)continue;$="for";break;case"className":if("class"in y)continue;$="class";break;case"defaultChecked":$="checked";break;case"defaultSelected":$="selected";break;case"defaultValue":case"value":switch($="value",b){case"textarea":C=j;continue;case"select":n=j;continue;case"option":n!=j||"selected"in y||(O+=" selected")}break;case"dangerouslySetInnerHTML":U=j&&j.__html;continue;case"style":"object"==typeof j&&(j=function(e){var t="";for(var r in e){var a=e[r];if(null!=a&&""!==a){var n="-"==r[0]?r:af[r]||(af[r]=r.replace(ah,"-$&").toLowerCase()),i=";";"number"!=typeof a||n.startsWith("--")||ap.has(n)||(i="px;"),t=t+n+":"+a+i}}return t||void 0}(j));break;case"acceptCharset":$="accept-charset";break;case"httpEquiv":$="http-equiv";break;default:if(ao.test($))$=$.replace(ao,"$1:$2").toLowerCase();else{if(ai.test($))continue;("-"===$[4]||ad.has($))&&null!=j?j+="":a?ac.test($)&&($="panose1"===$?"panose-1":$.replace(/([A-Z])/g,"-$1").toLowerCase()):as.test($)&&($=$.toLowerCase())}}null!=j&&!1!==j&&(O=!0===j||""===j?O+" "+$:O+" "+$+'="'+("string"==typeof j?au(j):j+"")+'"')}}if(ai.test(b))throw Error(b+" is not a valid HTML tag name in "+O+">");if(U||("string"==typeof C?U=au(C):null!=C&&!1!==C&&!0!==C&&(U=e(C,r,"svg"===b||"foreignObject"!==b&&a,n,t,o,s))),ag&&ag(t),t.__=null,aw&&aw(t),!U&&aR.has(b))return O+"/>";var I="</"+b+">",H=O+">";return aE(U)?[H].concat(U,[I]):"string"!=typeof U?[H,U,I]:H+U+I}(e,av,!1,void 0,r,!1,void 0);return aE(a)?a.join(""):a}catch(e){if(e.then)throw Error('Use "renderToStringAsync" for suspenseful rendering.');throw e}finally{rN.__c&&rN.__c(e,ak),rN.__s=t,ak.length=0}}(e)}</div></body></html>`}}function aj(e){let{url:t,theme:r,query:a,cookies:n,pages:i,providers:o}=e;return{csrf:(e,t,r)=>e?(t.logger.warn("csrf-disabled"),r.push({name:t.cookies.csrfToken.name,value:"",options:{...t.cookies.csrfToken.options,maxAge:0}}),{status:404,cookies:r}):{headers:{"Content-Type":"application/json","Cache-Control":"private, no-cache, no-store",Expires:"0",Pragma:"no-cache"},body:{csrfToken:t.csrfToken},cookies:r},providers:e=>({headers:{"Content-Type":"application/json"},body:e.reduce((e,{id:t,name:r,type:a,signinUrl:n,callbackUrl:i})=>(e[t]={id:t,name:r,type:a,signinUrl:n,callbackUrl:i},e),{})}),signin(t,s){if(t)throw new G("Unsupported action");if(i?.signIn){let t=`${i.signIn}${i.signIn.includes("?")?"&":"?"}${new URLSearchParams({callbackUrl:e.callbackUrl??"/"})}`;return s&&(t=`${t}&${new URLSearchParams({error:s})}`),{redirect:t,cookies:n}}let c=o?.find(e=>"webauthn"===e.type&&e.enableConditionalUI&&!!e.simpleWebAuthnBrowserVersion),d="";if(c){let{simpleWebAuthnBrowserVersion:e}=c;d=`<script src="https://unpkg.com/@simplewebauthn/browser@${e}/dist/bundle/index.umd.min.js" crossorigin="anonymous"></script>`}return a$({cookies:n,theme:r,html:function(e){let{csrfToken:t,providers:r=[],callbackUrl:a,theme:n,email:i,error:o}=e;"u">typeof document&&n?.brandColor&&document.documentElement.style.setProperty("--brand-color",n.brandColor),"u">typeof document&&n?.buttonText&&document.documentElement.style.setProperty("--button-text-color",n.buttonText);let s=o&&(aO[o]??aO.default),c=r.find(e=>"webauthn"===e.type&&e.enableConditionalUI)?.id;return aP("div",{className:"signin",children:[n?.brandColor&&aP("style",{dangerouslySetInnerHTML:{__html:`:root {--brand-color: ${n.brandColor}}`}}),n?.buttonText&&aP("style",{dangerouslySetInnerHTML:{__html:`
+        :root {
+          --button-text-color: ${n.buttonText}
+        }
+      `}}),aP("div",{className:"card",children:[s&&aP("div",{className:"error",children:aP("p",{children:s})}),n?.logo&&aP("img",{src:n.logo,alt:"Logo",className:"logo"}),r.map((e,n)=>{let o,s,c;("oauth"===e.type||"oidc"===e.type)&&({bg:o="#fff",brandColor:s,logo:c=`https://authjs.dev/img/providers/${e.id}.svg`}=e.style??{});let d=s??o??"#fff";return aP("div",{className:"provider",children:["oauth"===e.type||"oidc"===e.type?aP("form",{action:e.signinUrl,method:"POST",children:[aP("input",{type:"hidden",name:"csrfToken",value:t}),a&&aP("input",{type:"hidden",name:"callbackUrl",value:a}),aP("button",{type:"submit",className:"button",style:{"--provider-brand-color":d},tabIndex:0,children:[aP("span",{style:{filter:"invert(1) grayscale(1) brightness(1.3) contrast(9000)","mix-blend-mode":"luminosity",opacity:.95},children:["Sign in with ",e.name]}),c&&aP("img",{loading:"lazy",height:24,src:c})]})]}):null,("email"===e.type||"credentials"===e.type||"webauthn"===e.type)&&n>0&&"email"!==r[n-1].type&&"credentials"!==r[n-1].type&&"webauthn"!==r[n-1].type&&aP("hr",{}),"email"===e.type&&aP("form",{action:e.signinUrl,method:"POST",children:[aP("input",{type:"hidden",name:"csrfToken",value:t}),aP("label",{className:"section-header",htmlFor:`input-email-for-${e.id}-provider`,children:"Email"}),aP("input",{id:`input-email-for-${e.id}-provider`,autoFocus:!0,type:"email",name:"email",value:i,placeholder:"email@example.com",required:!0}),aP("button",{id:"submitButton",type:"submit",tabIndex:0,children:["Sign in with ",e.name]})]}),"credentials"===e.type&&aP("form",{action:e.callbackUrl,method:"POST",children:[aP("input",{type:"hidden",name:"csrfToken",value:t}),Object.keys(e.credentials).map(t=>aP("div",{children:[aP("label",{className:"section-header",htmlFor:`input-${t}-for-${e.id}-provider`,children:e.credentials[t].label??t}),aP("input",{name:t,id:`input-${t}-for-${e.id}-provider`,type:e.credentials[t].type??"text",placeholder:e.credentials[t].placeholder??"",...e.credentials[t]})]},`input-group-${e.id}`)),aP("button",{id:"submitButton",type:"submit",tabIndex:0,children:["Sign in with ",e.name]})]}),"webauthn"===e.type&&aP("form",{action:e.callbackUrl,method:"POST",id:`${e.id}-form`,children:[aP("input",{type:"hidden",name:"csrfToken",value:t}),Object.keys(e.formFields).map(t=>aP("div",{children:[aP("label",{className:"section-header",htmlFor:`input-${t}-for-${e.id}-provider`,children:e.formFields[t].label??t}),aP("input",{name:t,"data-form-field":!0,id:`input-${t}-for-${e.id}-provider`,type:e.formFields[t].type??"text",placeholder:e.formFields[t].placeholder??"",...e.formFields[t]})]},`input-group-${e.id}`)),aP("button",{id:`submitButton-${e.id}`,type:"submit",tabIndex:0,children:["Sign in with ",e.name]})]}),("email"===e.type||"credentials"===e.type||"webauthn"===e.type)&&n+1<r.length&&aP("hr",{})]},e.id)})]}),c&&aP(r5,{children:aP("script",{dangerouslySetInnerHTML:{__html:`
+const currentURL = window.location.href;
+const authURL = currentURL.substring(0, currentURL.lastIndexOf('/'));
+(${aC})(authURL, "${c}");
+`}})})]})}({csrfToken:e.csrfToken,providers:e.providers?.filter(e=>["email","oauth","oidc"].includes(e.type)||"credentials"===e.type&&e.credentials||"webauthn"===e.type&&e.formFields||!1),callbackUrl:e.callbackUrl,theme:e.theme,error:s,...a}),title:"Sign In",headTags:d})},signout:()=>i?.signOut?{redirect:i.signOut,cookies:n}:a$({cookies:n,theme:r,html:function(e){let{url:t,csrfToken:r,theme:a}=e;return aP("div",{className:"signout",children:[a?.brandColor&&aP("style",{dangerouslySetInnerHTML:{__html:`
+        :root {
+          --brand-color: ${a.brandColor}
+        }
+      `}}),a?.buttonText&&aP("style",{dangerouslySetInnerHTML:{__html:`
+        :root {
+          --button-text-color: ${a.buttonText}
+        }
+      `}}),aP("div",{className:"card",children:[a?.logo&&aP("img",{src:a.logo,alt:"Logo",className:"logo"}),aP("h1",{children:"Signout"}),aP("p",{children:"Are you sure you want to sign out?"}),aP("form",{action:t?.toString(),method:"POST",children:[aP("input",{type:"hidden",name:"csrfToken",value:r}),aP("button",{id:"submitButton",type:"submit",children:"Sign out"})]})]})]})}({csrfToken:e.csrfToken,url:t,theme:r}),title:"Sign Out"}),verifyRequest:e=>i?.verifyRequest?{redirect:`${i.verifyRequest}${t?.search??""}`,cookies:n}:a$({cookies:n,theme:r,html:function(e){let{url:t,theme:r}=e;return aP("div",{className:"verify-request",children:[r.brandColor&&aP("style",{dangerouslySetInnerHTML:{__html:`
+        :root {
+          --brand-color: ${r.brandColor}
+        }
+      `}}),aP("div",{className:"card",children:[r.logo&&aP("img",{src:r.logo,alt:"Logo",className:"logo"}),aP("h1",{children:"Check your email"}),aP("p",{children:"A sign in link has been sent to your email address."}),aP("p",{children:aP("a",{className:"site",href:t.origin,children:t.host})})]})]})}({url:t,theme:r,...e}),title:"Verify Request"}),error:e=>i?.error?{redirect:`${i.error}${i.error.includes("?")?"&":"?"}error=${e}`,cookies:n}:a$({cookies:n,theme:r,...function(e){let{url:t,error:r="default",theme:a}=e,n=`${t}/signin`,i={default:{status:200,heading:"Error",message:aP("p",{children:aP("a",{className:"site",href:t?.origin,children:t?.host})})},Configuration:{status:500,heading:"Server error",message:aP("div",{children:[aP("p",{children:"There is a problem with the server configuration."}),aP("p",{children:"Check the server logs for more information."})]})},AccessDenied:{status:403,heading:"Access Denied",message:aP("div",{children:[aP("p",{children:"You do not have permission to sign in."}),aP("p",{children:aP("a",{className:"button",href:n,children:"Sign in"})})]})},Verification:{status:403,heading:"Unable to sign in",message:aP("div",{children:[aP("p",{children:"The sign in link is no longer valid."}),aP("p",{children:"It may have been used already or it may have expired."})]}),signin:aP("a",{className:"button",href:n,children:"Sign in"})}},{status:o,heading:s,message:c,signin:d}=i[r]??i.default;return{status:o,html:aP("div",{className:"error",children:[a?.brandColor&&aP("style",{dangerouslySetInnerHTML:{__html:`
+        :root {
+          --brand-color: ${a?.brandColor}
+        }
+      `}}),aP("div",{className:"card",children:[a?.logo&&aP("img",{src:a?.logo,alt:"Logo",className:"logo"}),aP("h1",{children:s}),aP("div",{className:"message",children:c}),d]})]})}}({url:t,theme:r,error:e}),title:"Error"})}}function aI(e,t=Date.now()){return new Date(t+1e3*e)}async function aH(e,t,r,a){if(!r?.providerAccountId||!r.type)throw Error("Missing or invalid provider account");if(!["email","oauth","oidc","webauthn"].includes(r.type))throw Error("Provider not supported");let{adapter:n,jwt:i,events:o,session:{strategy:s,generateSessionToken:c}}=a;if(!n)return{user:t,account:r};let d=r,{createUser:l,updateUser:u,getUser:f,getUserByAccount:p,getUserByEmail:h,linkAccount:b,createSession:y,getSessionAndUser:m,deleteSession:g}=n,x=null,w=null,_=!1,v="jwt"===s;if(e)if(v)try{let t=a.cookies.sessionToken.name;(x=await i.decode({...i,token:e,salt:t}))&&"sub"in x&&x.sub&&(w=await f(x.sub))}catch{}else{let t=await m(e);t&&(x=t.session,w=t.user)}if("email"===d.type){let r=await h(t.email);return r?(w?.id!==r.id&&!v&&e&&await g(e),w=await u({id:r.id,emailVerified:new Date}),await o.updateUser?.({user:w})):(w=await l({...t,emailVerified:new Date}),await o.createUser?.({user:w}),_=!0),{session:x=v?{}:await y({sessionToken:c(),userId:w.id,expires:aI(a.session.maxAge)}),user:w,isNewUser:_}}if("webauthn"===d.type){let e=await p({providerAccountId:d.providerAccountId,provider:d.provider});if(e){if(w){if(e.id===w.id){let e={...d,userId:w.id};return{session:x,user:w,isNewUser:_,account:e}}throw new ei("The account is already associated with another user",{provider:d.provider})}x=v?{}:await y({sessionToken:c(),userId:e.id,expires:aI(a.session.maxAge)});let t={...d,userId:e.id};return{session:x,user:e,isNewUser:_,account:t}}{if(w){await b({...d,userId:w.id}),await o.linkAccount?.({user:w,account:d,profile:t});let e={...d,userId:w.id};return{session:x,user:w,isNewUser:_,account:e}}if(t.email?await h(t.email):null)throw new ei("Another account already exists with the same e-mail address",{provider:d.provider});w=await l({...t}),await o.createUser?.({user:w}),await b({...d,userId:w.id}),await o.linkAccount?.({user:w,account:d,profile:t}),x=v?{}:await y({sessionToken:c(),userId:w.id,expires:aI(a.session.maxAge)});let e={...d,userId:w.id};return{session:x,user:w,isNewUser:!0,account:e}}}let k=await p({providerAccountId:d.providerAccountId,provider:d.provider});if(k){if(w){if(k.id===w.id)return{session:x,user:w,isNewUser:_};throw new B("The account is already associated with another user",{provider:d.provider})}return{session:x=v?{}:await y({sessionToken:c(),userId:k.id,expires:aI(a.session.maxAge)}),user:k,isNewUser:_}}{let{provider:e}=a,{type:r,provider:n,providerAccountId:i,userId:s,...u}=d;if(d=Object.assign(e.account(u)??{},{providerAccountId:i,provider:n,type:r,userId:s}),w)return await b({...d,userId:w.id}),await o.linkAccount?.({user:w,account:d,profile:t}),{session:x,user:w,isNewUser:_};let f=t.email?await h(t.email):null;if(f){let e=a.provider;if(e?.allowDangerousEmailAccountLinking)w=f,_=!1;else throw new B("Another account already exists with the same e-mail address",{provider:d.provider})}else w=await l({...t,emailVerified:null}),_=!0;return await o.createUser?.({user:w}),await b({...d,userId:w.id}),await o.linkAccount?.({user:w,account:d,profile:t}),{session:x=v?{}:await y({sessionToken:c(),userId:w.id,expires:aI(a.session.maxAge)}),user:w,isNewUser:_}}}function aD(e,t){if(null==e)return!1;try{return e instanceof t||Object.getPrototypeOf(e)[Symbol.toStringTag]===t.prototype[Symbol.toStringTag]}catch{return!1}}("u"<typeof navigator||!navigator.userAgent?.startsWith?.("Mozilla/5.0 "))&&(a="oauth4webapi/v3.8.6");let aW="ERR_INVALID_ARG_VALUE",aL="ERR_INVALID_ARG_TYPE";function aM(e,t,r){let a=TypeError(e,{cause:r});return Object.assign(a,{code:t}),a}let aN=Symbol(),aK=Symbol(),aJ=Symbol(),aB=Symbol(),az=Symbol(),aq=Symbol();Symbol();let aF=new TextEncoder,aV=new TextDecoder;function aG(e){return"string"==typeof e?aF.encode(e):aV.decode(e)}function aX(e){return"string"==typeof e?i(e):n(e)}n=Uint8Array.prototype.toBase64?e=>(e instanceof ArrayBuffer&&(e=new Uint8Array(e)),e.toBase64({alphabet:"base64url",omitPadding:!0})):e=>{e instanceof ArrayBuffer&&(e=new Uint8Array(e));let t=[];for(let r=0;r<e.byteLength;r+=32768)t.push(String.fromCharCode.apply(null,e.subarray(r,r+32768)));return btoa(t.join("")).replace(/=/g,"").replace(/\+/g,"-").replace(/\//g,"_")},i=Uint8Array.fromBase64?e=>{try{return Uint8Array.fromBase64(e,{alphabet:"base64url"})}catch(e){throw aM("The input to be decoded is not correctly encoded.",aW,e)}}:e=>{try{let t=atob(e.replace(/-/g,"+").replace(/_/g,"/").replace(/\s/g,"")),r=new Uint8Array(t.length);for(let e=0;e<t.length;e++)r[e]=t.charCodeAt(e);return r}catch(e){throw aM("The input to be decoded is not correctly encoded.",aW,e)}};class aY extends Error{code;constructor(e,t){super(e,t),this.name=this.constructor.name,this.code=nZ,Error.captureStackTrace?.(this,this.constructor)}}class aZ extends Error{code;constructor(e,t){super(e,t),this.name=this.constructor.name,t?.code&&(this.code=t?.code),Error.captureStackTrace?.(this,this.constructor)}}function aQ(e,t,r){return new aZ(e,{code:t,cause:r})}function a0(e){return!(null===e||"object"!=typeof e||Array.isArray(e))}function a1(e){aD(e,Headers)&&(e=Object.fromEntries(e.entries()));let t=new Headers(e??{});if(a&&!t.has("user-agent")&&t.set("user-agent",a),t.has("authorization"))throw aM('"options.headers" must not include the "authorization" header name',aW);return t}function a2(e,t){if(void 0!==t){if("function"==typeof t&&(t=t(e.href)),!(t instanceof AbortSignal))throw aM('"options.signal" must return or be an instance of AbortSignal',aL);return t}}function a5(e){return e.includes("//")?e.replace("//","/"):e}async function a6(e,t,r,a){if(!(e instanceof URL))throw aM(`"${t}" must be an instance of URL`,aL);nl(e,a?.[aN]!==!0);let n=r(new URL(e.href)),i=a1(a?.headers);return i.set("accept","application/json"),(a?.[aB]||fetch)(n.href,{body:void 0,headers:Object.fromEntries(i.entries()),method:"GET",redirect:"manual",signal:a2(n,a?.signal)})}async function a3(e,t){return a6(e,"issuerIdentifier",e=>{switch(t?.algorithm){case void 0:case"oidc":e.pathname=a5(`${e.pathname}/.well-known/openid-configuration`);break;case"oauth2":!function(e,t,r=!1){"/"===e.pathname?e.pathname=t:e.pathname=a5(`${t}/${r?e.pathname:e.pathname.replace(/(\/)$/,"")}`)}(e,".well-known/oauth-authorization-server");break;default:throw aM('"options.algorithm" must be "oidc" (default), or "oauth2"',aW)}return e},t)}function a8(e,t,r,a,n){try{if("number"!=typeof e||!Number.isFinite(e))throw aM(`${r} must be a number`,aL,n);if(e>0)return;if(t){if(0!==e)throw aM(`${r} must be a non-negative number`,aW,n);return}throw aM(`${r} must be a positive number`,aW,n)}catch(e){if(a)throw aQ(e.message,a,n);throw e}}function a4(e,t,r,a){try{if("string"!=typeof e)throw aM(`${t} must be a string`,aL,a);if(0===e.length)throw aM(`${t} must not be empty`,aW,a)}catch(e){if(r)throw aQ(e.message,r,a);throw e}}async function a9(e,t){if(!(e instanceof URL)&&e!==iu)throw aM('"expectedIssuerIdentifier" must be an instance of URL',aL);if(!aD(t,Response))throw aM('"response" must be an instance of Response',aL);if(200!==t.status)throw aQ('"response" is not a conform Authorization Server Metadata response (unexpected HTTP status code)',n6,t);ir(t);let r=await il(t);if(a4(r.issuer,'"response" body "issuer" property',n2,{body:r}),e!==iu&&new URL(r.issuer).href!==e.href)throw aQ('"response" body "issuer" property does not match the expected value',n7,{expected:e.href,body:r,attribute:"issuer"});return r}function a7(e){var t=e,r="application/json";if(nR(t)!==r)throw function(e,...t){let r='"response" content-type must be ';if(t.length>2){let e=t.pop();r+=`${t.join(", ")}, or ${e}`}else 2===t.length?r+=`${t[0]} or ${t[1]}`:r+=t[0];return aQ(r,n5,e)}(t,r)}function ne(){return aX(crypto.getRandomValues(new Uint8Array(32)))}async function nt(e){return a4(e,"codeVerifier"),aX(await crypto.subtle.digest("SHA-256",aG(e)))}function nr(e){let t=e?.[aK];return"number"==typeof t&&Number.isFinite(t)?t:0}function na(e){let t=e?.[aJ];return"number"==typeof t&&Number.isFinite(t)&&-1!==Math.sign(t)?t:30}function nn(){return Math.floor(Date.now()/1e3)}function ni(e){if("object"!=typeof e||null===e)throw aM('"as" must be an object',aL);a4(e.issuer,'"as.issuer"')}function no(e){if("object"!=typeof e||null===e)throw aM('"client" must be an object',aL);a4(e.client_id,'"client.client_id"')}function ns(e,t){let r=nn()+nr(t);return{jti:ne(),aud:e.issuer,exp:r+60,iat:r,nbf:r,iss:t.client_id,sub:t.client_id}}async function nc(e,t,r){if(!r.usages.includes("sign"))throw aM('CryptoKey instances used for signing assertions must include "sign" in their "usages"',aW);let a=`${aX(aG(JSON.stringify(e)))}.${aX(aG(JSON.stringify(t)))}`,n=aX(await crypto.subtle.sign(function(e){switch(e.algorithm.name){case"ECDSA":return{name:e.algorithm.name,hash:function(e){let{algorithm:t}=e;switch(t.namedCurve){case"P-256":return"SHA-256";case"P-384":return"SHA-384";case"P-521":return"SHA-512";default:throw new aY("unsupported ECDSA namedCurve",{cause:e})}}(e)};case"RSA-PSS":switch(ia(e),e.algorithm.hash.name){case"SHA-256":case"SHA-384":case"SHA-512":return{name:e.algorithm.name,saltLength:parseInt(e.algorithm.hash.name.slice(-3),10)>>3};default:throw new aY("unsupported RSA-PSS hash name",{cause:e})}case"RSASSA-PKCS1-v1_5":return ia(e),e.algorithm.name;case"ML-DSA-44":case"ML-DSA-65":case"ML-DSA-87":case"Ed25519":return e.algorithm.name}throw new aY("unsupported CryptoKey algorithm name",{cause:e})}(r),r,aG(a)));return`${a}.${n}`}let nd=URL.parse?(e,t)=>URL.parse(e,t):(e,t)=>{try{return new URL(e,t)}catch{return null}};function nl(e,t){if(t&&"https:"!==e.protocol)throw aQ("only requests to HTTPS are allowed",n3,e);if("https:"!==e.protocol&&"http:"!==e.protocol)throw aQ("only HTTP and HTTPS requests are allowed",n8,e)}function nu(e,t,r,a){let n;if("string"!=typeof e||!(n=nd(e)))throw aQ(`authorization server metadata does not contain a valid ${r?`"as.mtls_endpoint_aliases.${t}"`:`"as.${t}"`}`,void 0===e?ie:it,{attribute:r?`mtls_endpoint_aliases.${t}`:t});return nl(n,a),n}function nf(e,t,r,a){return r&&e.mtls_endpoint_aliases&&t in e.mtls_endpoint_aliases?nu(e.mtls_endpoint_aliases[t],t,r,a):nu(e[t],t,r,a)}class np extends Error{cause;code;error;status;error_description;response;constructor(e,t){super(e,t),this.name=this.constructor.name,this.code=nY,this.cause=t.cause,this.error=t.cause.error,this.status=t.response.status,this.error_description=t.cause.error_description,Object.defineProperty(this,"response",{enumerable:!1,value:t.response}),Error.captureStackTrace?.(this,this.constructor)}}class nh extends Error{cause;code;error;error_description;constructor(e,t){super(e,t),this.name=this.constructor.name,this.code=nQ,this.cause=t.cause,this.error=t.cause.get("error"),this.error_description=t.cause.get("error_description")??void 0,Error.captureStackTrace?.(this,this.constructor)}}class nb extends Error{cause;code;response;status;constructor(e,t){super(e,t),this.name=this.constructor.name,this.code=nX,this.cause=t.cause,this.status=t.response.status,this.response=t.response,Object.defineProperty(this,"response",{enumerable:!1}),Error.captureStackTrace?.(this,this.constructor)}}let ny="[a-zA-Z0-9!#$%&\\'\\*\\+\\-\\.\\^_`\\|~]+",nm=RegExp("^[,\\s]*("+ny+")"),ng=RegExp("^[,\\s]*("+ny+')\\s*=\\s*"((?:[^"\\\\]|\\\\[\\s\\S])*)"[,\\s]*(.*)'),nx=RegExp("^[,\\s]*"+("("+ny+")\\s*=\\s*(")+ny+")[,\\s]*(.*)"),nw=RegExp("^([a-zA-Z0-9\\-\\._\\~\\+\\/]+={0,2})(?:$|[,\\s])(.*)");async function n_(e){if(e.status>399&&e.status<500){ir(e),a7(e);try{let t=await e.clone().json();if(a0(t)&&"string"==typeof t.error&&t.error.length)return t}catch{}}}async function nv(e,t,r){if(e.status!==t){let t;if(nI(e),t=await n_(e))throw await e.body?.cancel(),new np("server responded with an error in the response body",{cause:t,response:e});throw aQ(`"response" is not a conform ${r} response (unexpected HTTP status code)`,n6,e)}}function nk(e){if(!nM.has(e))throw aM('"options.DPoP" is not a valid DPoPHandle',aW)}async function nE(e,t,r,a,n,i){if(a4(e,'"accessToken"'),!(r instanceof URL))throw aM('"url" must be an instance of URL',aL);nl(r,i?.[aN]!==!0),a=a1(a),i?.DPoP&&(nk(i.DPoP),await i.DPoP.addProof(r,a,t.toUpperCase(),e)),a.set("authorization",`${a.has("dpop")?"DPoP":"Bearer"} ${e}`);let o=await (i?.[aB]||fetch)(r.href,{duplex:aD(n,ReadableStream)?"half":void 0,body:n,headers:Object.fromEntries(a.entries()),method:t,redirect:"manual",signal:a2(r,i?.signal)});return i?.DPoP?.cacheNonce(o,r),o}async function nA(e,t,r,a){ni(e),no(t);let n=nf(e,"userinfo_endpoint",t.use_mtls_endpoint_aliases,a?.[aN]!==!0),i=a1(a?.headers);return t.userinfo_signed_response_alg?i.set("accept","application/jwt"):(i.set("accept","application/json"),i.append("accept","application/jwt")),nE(r,"GET",n,i,null,{...a,[aK]:nr(t)})}let nS=Symbol();function nR(e){return e.headers.get("content-type")?.split(";")[0]}async function nT(e,t,r,a,n){let i;if(ni(e),no(t),!aD(a,Response))throw aM('"response" must be an instance of Response',aL);if(nI(a),200!==a.status)throw aQ('"response" is not a conform UserInfo Endpoint response (unexpected HTTP status code)',n6,a);if(ir(a),"application/jwt"===nR(a)){let{claims:r,jwt:o}=await ii(await a.text(),io.bind(void 0,t.userinfo_signed_response_alg,e.userinfo_signing_alg_values_supported,void 0),nr(t),na(t),n?.[aq]).then(nH.bind(void 0,t.client_id)).then(nW.bind(void 0,e));nU.set(a,o),i=r}else{if(t.userinfo_signed_response_alg)throw aQ("JWT UserInfo Response expected",n0,a);i=await il(a)}if(a4(i.sub,'"response" body "sub" property',n2,{body:i}),r===nS);else if(a4(r,'"expectedSubject"'),i.sub!==r)throw aQ('unexpected "response" body "sub" property value',n7,{expected:r,body:i,attribute:"sub"});return i}async function nP(e,t,r,a,n,i,o){return await r(e,t,n,i),i.set("content-type","application/x-www-form-urlencoded;charset=UTF-8"),(o?.[aB]||fetch)(a.href,{body:n,headers:Object.fromEntries(i.entries()),method:"POST",redirect:"manual",signal:a2(a,o?.signal)})}async function nC(e,t,r,a,n,i){let o=nf(e,"token_endpoint",t.use_mtls_endpoint_aliases,i?.[aN]!==!0);n.set("grant_type",a);let s=a1(i?.headers);s.set("accept","application/json"),i?.DPoP!==void 0&&(nk(i.DPoP),await i.DPoP.addProof(o,s,"POST"));let c=await nP(e,t,r,o,n,s,i);return i?.DPoP?.cacheNonce(c,o),c}let nO=new WeakMap,nU=new WeakMap;function n$(e){if(!e.id_token)return;let t=nO.get(e);if(!t)throw aM('"ref" was already garbage collected or did not resolve from the proper sources',aW);return t}async function nj(e,t,r,a,n,i){if(ni(e),no(t),!aD(r,Response))throw aM('"response" must be an instance of Response',aL);await nv(r,200,"Token Endpoint"),ir(r);let o=await il(r);if(a4(o.access_token,'"response" body "access_token" property',n2,{body:o}),a4(o.token_type,'"response" body "token_type" property',n2,{body:o}),o.token_type=o.token_type.toLowerCase(),void 0!==o.expires_in){let e="number"!=typeof o.expires_in?parseFloat(o.expires_in):o.expires_in;a8(e,!0,'"response" body "expires_in" property',n2,{body:o}),o.expires_in=e}if(void 0!==o.refresh_token&&a4(o.refresh_token,'"response" body "refresh_token" property',n2,{body:o}),void 0!==o.scope&&"string"!=typeof o.scope)throw aQ('"response" body "scope" property must be a string',n2,{body:o});if(void 0!==o.id_token){a4(o.id_token,'"response" body "id_token" property',n2,{body:o});let i=["aud","exp","iat","iss","sub"];!0===t.require_auth_time&&i.push("auth_time"),void 0!==t.default_max_age&&(a8(t.default_max_age,!0,'"client.default_max_age"'),i.push("auth_time")),a?.length&&i.push(...a);let{claims:s,jwt:c}=await ii(o.id_token,io.bind(void 0,t.id_token_signed_response_alg,e.id_token_signing_alg_values_supported,"RS256"),nr(t),na(t),n).then(nB.bind(void 0,i)).then(nL.bind(void 0,e)).then(nD.bind(void 0,t.client_id));if(Array.isArray(s.aud)&&1!==s.aud.length){if(void 0===s.azp)throw aQ('ID Token "aud" (audience) claim includes additional untrusted audiences',n9,{claims:s,claim:"aud"});if(s.azp!==t.client_id)throw aQ('unexpected ID Token "azp" (authorized party) claim value',n9,{expected:t.client_id,claims:s,claim:"azp"})}void 0!==s.auth_time&&a8(s.auth_time,!0,'ID Token "auth_time" (authentication time)',n2,{claims:s}),nU.set(r,c),nO.set(o,s)}if(i?.[o.token_type]!==void 0)i[o.token_type](r,o);else if("dpop"!==o.token_type&&"bearer"!==o.token_type)throw new aY("unsupported `token_type` value",{cause:{body:o}});return o}function nI(e){let t;if(t=function(e){if(!aD(e,Response))throw aM('"response" must be an instance of Response',aL);let t=e.headers.get("www-authenticate");if(null===t)return;let r=[],a=t;for(;a;){let e,t=a.match(nm),n=t?.["1"].toLowerCase();if(!n)return;let i=a.substring(t[0].length);if(i&&!i.match(/^[\s,]/))return;let o=i.match(/^\s+(.*)$/),s=!!o;a=o?o[1]:void 0;let c={};if(s)for(;a;){let r,n;if(t=a.match(ng)){if([,r,n,a]=t,n.includes("\\"))try{n=JSON.parse(`"${n}"`)}catch{}c[r.toLowerCase()]=n;continue}if(t=a.match(nx)){[,r,n,a]=t,c[r.toLowerCase()]=n;continue}if(t=a.match(nw)){if(Object.keys(c).length)break;[,e,a]=t;break}return}else a=i||void 0;let d={scheme:n,parameters:c};e&&(d.token68=e),r.push(d)}if(r.length)return r}(e))throw new nb("server responded with a challenge in the WWW-Authenticate HTTP Header",{cause:t,response:e})}function nH(e,t){return void 0!==t.claims.aud?nD(e,t):t}function nD(e,t){if(Array.isArray(t.claims.aud)){if(!t.claims.aud.includes(e))throw aQ('unexpected JWT "aud" (audience) claim value',n9,{expected:e,claims:t.claims,claim:"aud"})}else if(t.claims.aud!==e)throw aQ('unexpected JWT "aud" (audience) claim value',n9,{expected:e,claims:t.claims,claim:"aud"});return t}function nW(e,t){return void 0!==t.claims.iss?nL(e,t):t}function nL(e,t){let r=e[ip]?.(t)??e.issuer;if(t.claims.iss!==r)throw aQ('unexpected JWT "iss" (issuer) claim value',n9,{expected:r,claims:t.claims,claim:"iss"});return t}let nM=new WeakSet,nN=Symbol();async function nK(e,t,r,a,n,i,o){if(ni(e),no(t),!nM.has(a))throw aM('"callbackParameters" must be an instance of URLSearchParams obtained from "validateAuthResponse()", or "validateJwtAuthResponse()',aW);a4(n,'"redirectUri"');let s=is(a,"code");if(!s)throw aQ('no authorization code in "callbackParameters"',n2);let c=new URLSearchParams(o?.additionalParameters);return c.set("redirect_uri",n),c.set("code",s),i!==nN&&(a4(i,'"codeVerifier"'),c.set("code_verifier",i)),nC(e,t,r,"authorization_code",c,o)}let nJ={aud:"audience",c_hash:"code hash",client_id:"client id",exp:"expiration time",iat:"issued at",iss:"issuer",jti:"jwt id",nonce:"nonce",s_hash:"state hash",sub:"subject",ath:"access token hash",htm:"http method",htu:"http uri",cnf:"confirmation",auth_time:"authentication time"};function nB(e,t){for(let r of e)if(void 0===t.claims[r])throw aQ(`JWT "${r}" (${nJ[r]}) claim missing`,n2,{claims:t.claims});return t}let nz=Symbol(),nq=Symbol();async function nF(e,t,r,a){return"string"==typeof a?.expectedNonce||"number"==typeof a?.maxAge||a?.requireIdToken?nV(e,t,r,a.expectedNonce,a.maxAge,a[aq],a.recognizedTokenTypes):nG(e,t,r,a?.[aq],a?.recognizedTokenTypes)}async function nV(e,t,r,a,n,i,o){let s=[];switch(a){case void 0:a=nz;break;case nz:break;default:a4(a,'"expectedNonce" argument'),s.push("nonce")}switch(n??=t.default_max_age){case void 0:n=nq;break;case nq:break;default:a8(n,!0,'"maxAge" argument'),s.push("auth_time")}let c=await nj(e,t,r,s,i,o);a4(c.id_token,'"response" body "id_token" property',n2,{body:c});let d=n$(c);if(n!==nq){let e=nn()+nr(t),r=na(t);if(d.auth_time+n<e-r)throw aQ("too much time has elapsed since the last End-User authentication",n4,{claims:d,now:e,tolerance:r,claim:"auth_time"})}if(a===nz){if(void 0!==d.nonce)throw aQ('unexpected ID Token "nonce" claim value',n9,{expected:void 0,claims:d,claim:"nonce"})}else if(d.nonce!==a)throw aQ('unexpected ID Token "nonce" claim value',n9,{expected:a,claims:d,claim:"nonce"});return c}async function nG(e,t,r,a,n){let i=await nj(e,t,r,void 0,a,n),o=n$(i);if(o){if(void 0!==t.default_max_age){a8(t.default_max_age,!0,'"client.default_max_age"');let e=nn()+nr(t),r=na(t);if(o.auth_time+t.default_max_age<e-r)throw aQ("too much time has elapsed since the last End-User authentication",n4,{claims:o,now:e,tolerance:r,claim:"auth_time"})}if(void 0!==o.nonce)throw aQ('unexpected ID Token "nonce" claim value',n9,{expected:void 0,claims:o,claim:"nonce"})}return i}let nX="OAUTH_WWW_AUTHENTICATE_CHALLENGE",nY="OAUTH_RESPONSE_BODY_ERROR",nZ="OAUTH_UNSUPPORTED_OPERATION",nQ="OAUTH_AUTHORIZATION_RESPONSE_ERROR",n0="OAUTH_JWT_USERINFO_EXPECTED",n1="OAUTH_PARSE_ERROR",n2="OAUTH_INVALID_RESPONSE",n5="OAUTH_RESPONSE_IS_NOT_JSON",n6="OAUTH_RESPONSE_IS_NOT_CONFORM",n3="OAUTH_HTTP_REQUEST_FORBIDDEN",n8="OAUTH_REQUEST_PROTOCOL_FORBIDDEN",n4="OAUTH_JWT_TIMESTAMP_CHECK_FAILED",n9="OAUTH_JWT_CLAIM_COMPARISON_FAILED",n7="OAUTH_JSON_ATTRIBUTE_COMPARISON_FAILED",ie="OAUTH_MISSING_SERVER_METADATA",it="OAUTH_INVALID_SERVER_METADATA";function ir(e){if(e.bodyUsed)throw aM('"response" body has been used already',aW)}function ia(e){let{algorithm:t}=e;if("number"!=typeof t.modulusLength||t.modulusLength<2048)throw new aY(`unsupported ${t.name} modulusLength`,{cause:e})}async function ii(e,t,r,a,n){let i,o,{0:s,1:c,length:d}=e.split(".");if(5===d)if(void 0!==n)e=await n(e),{0:s,1:c,length:d}=e.split(".");else throw new aY("JWE decryption is not configured",{cause:e});if(3!==d)throw aQ("Invalid JWT",n2,e);try{i=JSON.parse(aG(aX(s)))}catch(e){throw aQ("failed to parse JWT Header body as base64url encoded JSON",n1,e)}if(!a0(i))throw aQ("JWT Header must be a top level object",n2,e);if(t(i),void 0!==i.crit)throw new aY('no JWT "crit" header parameter extensions are supported',{cause:{header:i}});try{o=JSON.parse(aG(aX(c)))}catch(e){throw aQ("failed to parse JWT Payload body as base64url encoded JSON",n1,e)}if(!a0(o))throw aQ("JWT Payload must be a top level object",n2,e);let l=nn()+r;if(void 0!==o.exp){if("number"!=typeof o.exp)throw aQ('unexpected JWT "exp" (expiration time) claim type',n2,{claims:o});if(o.exp<=l-a)throw aQ('unexpected JWT "exp" (expiration time) claim value, expiration is past current timestamp',n4,{claims:o,now:l,tolerance:a,claim:"exp"})}if(void 0!==o.iat&&"number"!=typeof o.iat)throw aQ('unexpected JWT "iat" (issued at) claim type',n2,{claims:o});if(void 0!==o.iss&&"string"!=typeof o.iss)throw aQ('unexpected JWT "iss" (issuer) claim type',n2,{claims:o});if(void 0!==o.nbf){if("number"!=typeof o.nbf)throw aQ('unexpected JWT "nbf" (not before) claim type',n2,{claims:o});if(o.nbf>l+a)throw aQ('unexpected JWT "nbf" (not before) claim value',n4,{claims:o,now:l,tolerance:a,claim:"nbf"})}if(void 0!==o.aud&&"string"!=typeof o.aud&&!Array.isArray(o.aud))throw aQ('unexpected JWT "aud" (audience) claim type',n2,{claims:o});return{header:i,claims:o,jwt:e}}function io(e,t,r,a){if(void 0!==e){if("string"==typeof e?a.alg!==e:!e.includes(a.alg))throw aQ('unexpected JWT "alg" header parameter',n2,{header:a,expected:e,reason:"client configuration"});return}if(Array.isArray(t)){if(!t.includes(a.alg))throw aQ('unexpected JWT "alg" header parameter',n2,{header:a,expected:t,reason:"authorization server metadata"});return}if(void 0!==r){if("string"==typeof r?a.alg!==r:"function"==typeof r?!r(a.alg):!r.includes(a.alg))throw aQ('unexpected JWT "alg" header parameter',n2,{header:a,expected:r,reason:"default value"});return}throw aQ('missing client or server configuration to verify used JWT "alg" header parameter',void 0,{client:e,issuer:t,fallback:r})}function is(e,t){let{0:r,length:a}=e.getAll(t);if(a>1)throw aQ(`"${t}" parameter must be provided only once`,n2);return r}let ic=Symbol(),id=Symbol();async function il(e,t=a7){let r;try{r=await e.json()}catch(r){throw t(e),aQ('failed to parse "response" body as JSON',n1,r)}if(!a0(r))throw aQ('"response" body must be a top level object',n2,{body:r});return r}let iu=Symbol(),ip=Symbol();async function ih(e,t,r){let{cookies:a,logger:n}=r,i=a[e],o=new Date;o.setTime(o.getTime()+9e5),n.debug(`CREATE_${e.toUpperCase()}`,{name:i.name,payload:t,COOKIE_TTL:900,expires:o});let s=await rn({...r.jwt,maxAge:900,token:{value:t},salt:i.name}),c={...i.options,expires:o};return{name:i.name,value:s,options:c}}async function ib(e,t,r){try{let{logger:a,cookies:n,jwt:i}=r;if(a.debug(`PARSE_${e.toUpperCase()}`,{cookie:t}),!t)throw new W(`${e} cookie was missing`);let o=await ri({...i,token:t,salt:n[e].name});if(o?.value)return o.value;throw Error("Invalid cookie")}catch(t){throw new W(`${e} value could not be parsed`,{cause:t})}}function iy(e,t,r){let{logger:a,cookies:n}=t,i=n[e];a.debug(`CLEAR_${e.toUpperCase()}`,{cookie:i}),r.push({name:i.name,value:"",options:{...n[e].options,maxAge:0}})}function im(e,t){return async function(r,a,n){let{provider:i,logger:o}=n;if(!i?.checks?.includes(e))return;let s=r?.[n.cookies[t].name];o.debug(`USE_${t.toUpperCase()}`,{value:s});let c=await ib(t,s,n);return iy(t,n,a),c}}let ig={async create(e){let t=ne(),r=await nt(t);return{cookie:await ih("pkceCodeVerifier",t,e),value:r}},use:im("pkce","pkceCodeVerifier")},ix="encodedState",iw={async create(e,t){let{provider:r}=e;if(!r.checks.includes("state")){if(t)throw new W("State data was provided but the provider is not configured to use state");return}let a={origin:t,random:ne()},n=await rn({secret:e.jwt.secret,token:a,salt:ix,maxAge:900});return{cookie:await ih("state",n,e),value:n}},use:im("state","state"),async decode(e,t){try{t.logger.debug("DECODE_STATE",{state:e});let r=await ri({secret:t.jwt.secret,token:e,salt:ix});if(r)return r;throw Error("Invalid state")}catch(e){throw new W("State could not be decoded",{cause:e})}}},i_={async create(e){if(!e.provider.checks.includes("nonce"))return;let t=ne();return{cookie:await ih("nonce",t,e),value:t}},use:im("nonce","nonce")},iv="encodedWebauthnChallenge",ik={create:async(e,t,r)=>({cookie:await ih("webauthnChallenge",await rn({secret:e.jwt.secret,token:{challenge:t,registerData:r},salt:iv,maxAge:900}),e)}),async use(e,t,r){let a=t?.[e.cookies.webauthnChallenge.name],n=await ib("webauthnChallenge",a,e),i=await ri({secret:e.jwt.secret,token:n,salt:iv});if(iy("webauthnChallenge",e,r),!i)throw new W("WebAuthn challenge was missing");return i}};function iE(e){return encodeURIComponent(e).replace(/%20/g,"+")}async function iA(e,t,r){var a,n;let i,o,s,c,d,{logger:l,provider:u}=r,{token:f,userinfo:p}=u;if(f?.url&&"authjs.dev"!==f.url.host||p?.url&&"authjs.dev"!==p.url.host)i={issuer:u.issuer??"https://authjs.dev",token_endpoint:f?.url.toString(),userinfo_endpoint:p?.url.toString()};else{let e=new URL(u.issuer),t=await a3(e,{[aN]:!0,[aB]:u[rS]});if(!(i=await a9(e,t)).token_endpoint)throw TypeError("TODO: Authorization server did not provide a token endpoint.");if(!i.userinfo_endpoint)throw TypeError("TODO: Authorization server did not provide a userinfo endpoint.")}let h={client_id:u.clientId,...u.client};switch(h.token_endpoint_auth_method){case void 0:case"client_secret_basic":o=(e,t,r,a)=>{var n,i;let o,s,c;a.set("authorization",(n=u.clientId,i=u.clientSecret,o=iE(n),s=iE(i),c=btoa(`${o}:${s}`),`Basic ${c}`))};break;case"client_secret_post":a4(a=u.clientSecret,'"clientSecret"'),o=(e,t,r,n)=>{r.set("client_id",t.client_id),r.set("client_secret",a)};break;case"client_secret_jwt":a4(n=u.clientSecret,'"clientSecret"'),d=void 0,o=async(e,t,r,a)=>{c||=await crypto.subtle.importKey("raw",aG(n),{hash:"SHA-256",name:"HMAC"},!1,["sign"]);let i={alg:"HS256"},o=ns(e,t);d?.(i,o);let s=`${aX(aG(JSON.stringify(i)))}.${aX(aG(JSON.stringify(o)))}`,l=await crypto.subtle.sign(c.algorithm,c,aG(s));r.set("client_id",t.client_id),r.set("client_assertion_type","urn:ietf:params:oauth:client-assertion-type:jwt-bearer"),r.set("client_assertion",`${s}.${aX(new Uint8Array(l))}`)};break;case"private_key_jwt":o=function(e,t){let{key:r,kid:a}=e instanceof CryptoKey?{key:e}:e?.key instanceof CryptoKey?(void 0!==e.kid&&a4(e.kid,'"kid"'),{key:e.key,kid:e.kid}):{};var n='"clientPrivateKey.key"';if(!(r instanceof CryptoKey))throw aM(`${n} must be a CryptoKey`,aL);if("private"!==r.type)throw aM(`${n} must be a private CryptoKey`,aW);return async(e,n,i,o)=>{let s={alg:function(e){switch(e.algorithm.name){case"RSA-PSS":switch(e.algorithm.hash.name){case"SHA-256":return"PS256";case"SHA-384":return"PS384";case"SHA-512":return"PS512";default:throw new aY("unsupported RsaHashedKeyAlgorithm hash name",{cause:e})}case"RSASSA-PKCS1-v1_5":switch(e.algorithm.hash.name){case"SHA-256":return"RS256";case"SHA-384":return"RS384";case"SHA-512":return"RS512";default:throw new aY("unsupported RsaHashedKeyAlgorithm hash name",{cause:e})}case"ECDSA":switch(e.algorithm.namedCurve){case"P-256":return"ES256";case"P-384":return"ES384";case"P-521":return"ES512";default:throw new aY("unsupported EcKeyAlgorithm namedCurve",{cause:e})}case"Ed25519":case"ML-DSA-44":case"ML-DSA-65":case"ML-DSA-87":return e.algorithm.name;case"EdDSA":return"Ed25519";default:throw new aY("unsupported CryptoKey algorithm name",{cause:e})}}(r),kid:a},c=ns(e,n);t?.[az]?.(s,c),i.set("client_id",n.client_id),i.set("client_assertion_type","urn:ietf:params:oauth:client-assertion-type:jwt-bearer"),i.set("client_assertion",await nc(s,c,r))}}(u.token.clientPrivateKey,{[az](e,t){t.aud=[i.issuer,i.token_endpoint]}});break;case"none":o=(e,t,r,a)=>{r.set("client_id",t.client_id)};break;default:throw Error("unsupported client authentication method")}let b=[],y=await iw.use(t,b,r);try{s=function(e,t,r,a){var n;if(ni(e),no(t),r instanceof URL&&(r=r.searchParams),!(r instanceof URLSearchParams))throw aM('"parameters" must be an instance of URLSearchParams, or URL',aL);if(is(r,"response"))throw aQ('"parameters" contains a JARM response, use validateJwtAuthResponse() instead of validateAuthResponse()',n2,{parameters:r});let i=is(r,"iss"),o=is(r,"state");if(!i&&e.authorization_response_iss_parameter_supported)throw aQ('response parameter "iss" (issuer) missing',n2,{parameters:r});if(i&&i!==e.issuer)throw aQ('unexpected "iss" (issuer) response parameter value',n2,{expected:e.issuer,parameters:r});switch(a){case void 0:case id:if(void 0!==o)throw aQ('unexpected "state" response parameter encountered',n2,{expected:void 0,parameters:r});break;case ic:break;default:if(a4(a,'"expectedState" argument'),o!==a)throw aQ(void 0===o?'response parameter "state" missing':'unexpected "state" response parameter value',n2,{expected:a,parameters:r})}if(is(r,"error"))throw new nh("authorization response from the server is an error",{cause:r});let s=is(r,"id_token"),c=is(r,"token");if(void 0!==s||void 0!==c)throw new aY("implicit and hybrid flows are not supported");return n=new URLSearchParams(r),nM.add(n),n}(i,h,new URLSearchParams(e),u.checks.includes("state")?y:ic)}catch(e){if(e instanceof nh){let t={providerId:u.id,...Object.fromEntries(e.cause.entries())};throw l.debug("OAuthCallbackError",t),new z("OAuth Provider returned an error",t)}throw e}let m=await ig.use(t,b,r),g=u.callbackUrl;!r.isOnRedirectProxy&&u.redirectProxyUrl&&(g=u.redirectProxyUrl);let x=await nK(i,h,o,s,g,m??"decoy",{[aN]:!0,[aB]:(...e)=>(u.checks.includes("pkce")||e[1].body.delete("code_verifier"),(u[rS]??fetch)(...e))});u.token?.conform&&(x=await u.token.conform(x.clone())??x);let w={},_="oidc"===u.type;if(u[rR])switch(u.id){case"microsoft-entra-id":case"azure-ad":{let e=await x.clone().json();if(e.error){let t={providerId:u.id,...e};throw new z(`OAuth Provider returned an error: ${e.error}`,t)}let{tid:t}=function(e){let t,r;if("string"!=typeof e)throw new eJ("JWTs must use Compact JWS serialization, JWT must be a string");let{1:a,length:n}=e.split(".");if(5===n)throw new eJ("Only JWTs using Compact JWS serialization can be decoded");if(3!==n)throw new eJ("Invalid JWT");if(!a)throw new eJ("JWTs must contain a payload");try{t=eA(a)}catch{throw new eJ("Failed to base64url decode the payload")}try{r=JSON.parse(ex.decode(t))}catch{throw new eJ("Failed to parse the decoded payload as JSON")}if(!ty(r))throw new eJ("Invalid JWT Claims Set");return r}(e.id_token);if("string"==typeof t){let e=i.issuer?.match(/microsoftonline\.com\/(\w+)\/v2\.0/)?.[1]??"common",r=new URL(i.issuer.replace(e,t)),a=await a3(r,{[aB]:u[rS]});i=await a9(r,a)}}}let v=await nF(i,h,x,{expectedNonce:await i_.use(t,b,r),requireIdToken:_});if(_){let t=n$(v);if(w=t,u[rR]&&"apple"===u.id)try{w.user=JSON.parse(e?.user)}catch{}if(!1===u.idToken){let e=await nA(i,h,v.access_token,{[aB]:u[rS],[aN]:!0});w=await nT(i,h,t.sub,e)}}else if(p?.request){let e=await p.request({tokens:v,provider:u});e instanceof Object&&(w=e)}else if(p?.url){let e=await nA(i,h,v.access_token,{[aB]:u[rS],[aN]:!0});w=await e.json()}else throw TypeError("No userinfo endpoint configured");return v.expires_in&&(v.expires_at=Math.floor(Date.now()/1e3)+Number(v.expires_in)),{...await iS(w,u,v,l),profile:w,cookies:b}}async function iS(e,t,r,a){try{let a=await t.profile(e,r);return{user:{...a,id:crypto.randomUUID(),email:a.email?.toLowerCase()},account:{...r,provider:t.id,type:t.type,providerAccountId:a.id??crypto.randomUUID()}}}catch(r){a.debug("getProfile error details",e),a.error(new q(r,{provider:t.id}))}}async function iR(e,t,r,a){let n=await iU(e,t,r),{cookie:i}=await ik.create(e,n.challenge,r);return{status:200,cookies:[...a??[],i],body:{action:"register",options:n},headers:{"Content-Type":"application/json"}}}async function iT(e,t,r,a){let n=await iO(e,t,r),{cookie:i}=await ik.create(e,n.challenge);return{status:200,cookies:[...a??[],i],body:{action:"authenticate",options:n},headers:{"Content-Type":"application/json"}}}async function iP(e,t,r){let a,{adapter:n,provider:i}=e,o=t.body&&"string"==typeof t.body.data?JSON.parse(t.body.data):void 0;if(!o||"object"!=typeof o||!("id"in o)||"string"!=typeof o.id)throw new T("Invalid WebAuthn Authentication response");let s=iI(ij(o.id)),c=await n.getAuthenticator(s);if(!c)throw new T(`WebAuthn authenticator not found in database: ${JSON.stringify({credentialID:s})}`);let{challenge:d}=await ik.use(e,t.cookies,r);try{var l;let r=i.getRelayingParty(e,t);a=await i.simpleWebAuthn.verifyAuthenticationResponse({...i.verifyAuthenticationOptions,expectedChallenge:d,response:o,authenticator:{...l=c,credentialDeviceType:l.credentialDeviceType,transports:iH(l.transports),credentialID:ij(l.credentialID),credentialPublicKey:ij(l.credentialPublicKey)},expectedOrigin:r.origin,expectedRPID:r.id})}catch(e){throw new en(e)}let{verified:u,authenticationInfo:f}=a;if(!u)throw new en("WebAuthn authentication response could not be verified");try{let{newCounter:e}=f;await n.updateAuthenticatorCounter(c.credentialID,e)}catch(e){throw new C(`Failed to update authenticator counter. This may cause future authentication attempts to fail. ${JSON.stringify({credentialID:s,oldCounter:c.counter,newCounter:f.newCounter})}`,e)}let p=await n.getAccount(c.providerAccountId,i.id);if(!p)throw new T(`WebAuthn account not found in database: ${JSON.stringify({credentialID:s,providerAccountId:c.providerAccountId})}`);let h=await n.getUser(p.userId);if(!h)throw new T(`WebAuthn user not found in database: ${JSON.stringify({credentialID:s,providerAccountId:c.providerAccountId,userID:p.userId})}`);return{account:p,user:h}}async function iC(e,t,r){var a;let n,{provider:i}=e,o=t.body&&"string"==typeof t.body.data?JSON.parse(t.body.data):void 0;if(!o||"object"!=typeof o||!("id"in o)||"string"!=typeof o.id)throw new T("Invalid WebAuthn Registration response");let{challenge:s,registerData:c}=await ik.use(e,t.cookies,r);if(!c)throw new T("Missing user registration data in WebAuthn challenge cookie");try{let r=i.getRelayingParty(e,t);n=await i.simpleWebAuthn.verifyRegistrationResponse({...i.verifyRegistrationOptions,expectedChallenge:s,response:o,expectedOrigin:r.origin,expectedRPID:r.id})}catch(e){throw new en(e)}if(!n.verified||!n.registrationInfo)throw new en("WebAuthn registration response could not be verified");let d={providerAccountId:iI(n.registrationInfo.credentialID),provider:e.provider.id,type:i.type},l={providerAccountId:d.providerAccountId,counter:n.registrationInfo.counter,credentialID:iI(n.registrationInfo.credentialID),credentialPublicKey:iI(n.registrationInfo.credentialPublicKey),credentialBackedUp:n.registrationInfo.credentialBackedUp,credentialDeviceType:n.registrationInfo.credentialDeviceType,transports:(a=o.response.transports,a?.join(","))};return{user:c,account:d,authenticator:l}}async function iO(e,t,r){let{provider:a,adapter:n}=e,i=r&&r.id?await n.listAuthenticatorsByUserId(r.id):null,o=a.getRelayingParty(e,t);return await a.simpleWebAuthn.generateAuthenticationOptions({...a.authenticationOptions,rpID:o.id,allowCredentials:i?.map(e=>({id:ij(e.credentialID),type:"public-key",transports:iH(e.transports)}))})}async function iU(e,t,r){let{provider:a,adapter:n}=e,i=r.id?await n.listAuthenticatorsByUserId(r.id):null,o=rx(32),s=a.getRelayingParty(e,t);return await a.simpleWebAuthn.generateRegistrationOptions({...a.registrationOptions,userID:o,userName:r.email,userDisplayName:r.name??void 0,rpID:s.id,rpName:s.name,excludeCredentials:i?.map(e=>({id:ij(e.credentialID),type:"public-key",transports:iH(e.transports)}))})}function i$(e){let{provider:t,adapter:r}=e;if(!r)throw new M("An adapter is required for the WebAuthn provider");if(!t||"webauthn"!==t.type)throw new Y("Provider must be WebAuthn");return{...e,provider:t,adapter:r}}function ij(e){return new Uint8Array(Buffer.from(e,"base64"))}function iI(e){return Buffer.from(e).toString("base64")}function iH(e){return e?e.split(","):void 0}async function iD(e,t,r,a){if(!t.provider)throw new Y("Callback route called without provider");let{query:n,body:i,method:o,headers:s}=e,{provider:c,adapter:d,url:l,callbackUrl:u,pages:f,jwt:p,events:h,callbacks:b,session:{strategy:y,maxAge:m},logger:g}=t,x="jwt"===y;try{if("oauth"===c.type||"oidc"===c.type){let o,s=c.authorization?.url.searchParams.get("response_mode")==="form_post"?i:n;if(t.isOnRedirectProxy&&s?.state){let e=await iw.decode(s.state,t);if(e?.origin&&new URL(e.origin).origin!==t.url.origin){let t=`${e.origin}?${new URLSearchParams(s)}`;return g.debug("Proxy redirecting to",t),{redirect:t,cookies:a}}}let y=await iA(s,e.cookies,t);y.cookies.length&&a.push(...y.cookies),g.debug("authorization result",y);let{user:w,account:_,profile:v}=y;if(!w||!_||!v)return{redirect:`${l}/signin`,cookies:a};if(d){let{getUserByAccount:e}=d;o=await e({providerAccountId:_.providerAccountId,provider:c.id})}let k=await iW({user:o??w,account:_,profile:v},t);if(k)return{redirect:k,cookies:a};let{user:E,session:A,isNewUser:S}=await aH(r.value,w,_,t);if(x){let e={name:E.name,email:E.email,picture:E.image,sub:E.id?.toString()},n=await b.jwt({token:e,user:E,account:_,profile:v,isNewUser:S,trigger:S?"signUp":"signIn"});if(null===n)a.push(...r.clean());else{let e=t.cookies.sessionToken.name,i=await p.encode({...p,token:n,salt:e}),o=new Date;o.setTime(o.getTime()+1e3*m);let s=r.chunk(i,{expires:o});a.push(...s)}}else a.push({name:t.cookies.sessionToken.name,value:A.sessionToken,options:{...t.cookies.sessionToken.options,expires:A.expires}});if(await h.signIn?.({user:E,account:_,profile:v,isNewUser:S}),S&&f.newUser)return{redirect:`${f.newUser}${f.newUser.includes("?")?"&":"?"}${new URLSearchParams({callbackUrl:u})}`,cookies:a};return{redirect:u,cookies:a}}if("email"===c.type){let e=n?.token,i=n?.email;if(!e){let t=TypeError("Missing token. The sign-in URL was manually opened without token or the link was not sent correctly in the email.",{cause:{hasToken:!!e}});throw t.name="Configuration",t}let o=c.secret??t.secret,s=await d.useVerificationToken({identifier:i,token:await rg(`${e}${o}`)}),l=!!s,y=l&&s.expires.valueOf()<Date.now();if(!l||y||i&&s.identifier!==i)throw new Q({hasInvite:l,expired:y});let{identifier:g}=s,w=await d.getUserByEmail(g)??{id:crypto.randomUUID(),email:g,emailVerified:null},_={providerAccountId:w.email,userId:w.id,type:"email",provider:c.id},v=await iW({user:w,account:_},t);if(v)return{redirect:v,cookies:a};let{user:k,session:E,isNewUser:A}=await aH(r.value,w,_,t);if(x){let e={name:k.name,email:k.email,picture:k.image,sub:k.id?.toString()},n=await b.jwt({token:e,user:k,account:_,isNewUser:A,trigger:A?"signUp":"signIn"});if(null===n)a.push(...r.clean());else{let e=t.cookies.sessionToken.name,i=await p.encode({...p,token:n,salt:e}),o=new Date;o.setTime(o.getTime()+1e3*m);let s=r.chunk(i,{expires:o});a.push(...s)}}else a.push({name:t.cookies.sessionToken.name,value:E.sessionToken,options:{...t.cookies.sessionToken.options,expires:E.expires}});if(await h.signIn?.({user:k,account:_,isNewUser:A}),A&&f.newUser)return{redirect:`${f.newUser}${f.newUser.includes("?")?"&":"?"}${new URLSearchParams({callbackUrl:u})}`,cookies:a};return{redirect:u,cookies:a}}if("credentials"===c.type&&"POST"===o){let e=i??{};Object.entries(n??{}).forEach(([e,t])=>l.searchParams.set(e,t));let d=await c.authorize(e,new Request(l,{headers:s,method:o,body:JSON.stringify(i)}));if(d)d.id=d.id?.toString()??crypto.randomUUID();else throw new H;let f={providerAccountId:d.id,type:"credentials",provider:c.id},y=await iW({user:d,account:f,credentials:e},t);if(y)return{redirect:y,cookies:a};let g={name:d.name,email:d.email,picture:d.image,sub:d.id},x=await b.jwt({token:g,user:d,account:f,isNewUser:!1,trigger:"signIn"});if(null===x)a.push(...r.clean());else{let e=t.cookies.sessionToken.name,n=await p.encode({...p,token:x,salt:e}),i=new Date;i.setTime(i.getTime()+1e3*m);let o=r.chunk(n,{expires:i});a.push(...o)}return await h.signIn?.({user:d,account:f}),{redirect:u,cookies:a}}else if("webauthn"===c.type&&"POST"===o){let n,i,o,s=e.body?.action;if("string"!=typeof s||"authenticate"!==s&&"register"!==s)throw new T("Invalid action parameter");let c=i$(t);switch(s){case"authenticate":{let t=await iP(c,e,a);n=t.user,i=t.account;break}case"register":{let r=await iC(t,e,a);n=r.user,i=r.account,o=r.authenticator}}await iW({user:n,account:i},t);let{user:d,isNewUser:l,session:y,account:g}=await aH(r.value,n,i,t);if(!g)throw new T("Error creating or finding account");if(o&&d.id&&await c.adapter.createAuthenticator({...o,userId:d.id}),x){let e={name:d.name,email:d.email,picture:d.image,sub:d.id?.toString()},n=await b.jwt({token:e,user:d,account:g,isNewUser:l,trigger:l?"signUp":"signIn"});if(null===n)a.push(...r.clean());else{let e=t.cookies.sessionToken.name,i=await p.encode({...p,token:n,salt:e}),o=new Date;o.setTime(o.getTime()+1e3*m);let s=r.chunk(i,{expires:o});a.push(...s)}}else a.push({name:t.cookies.sessionToken.name,value:y.sessionToken,options:{...t.cookies.sessionToken.options,expires:y.expires}});if(await h.signIn?.({user:d,account:g,isNewUser:l}),l&&f.newUser)return{redirect:`${f.newUser}${f.newUser.includes("?")?"&":"?"}${new URLSearchParams({callbackUrl:u})}`,cookies:a};return{redirect:u,cookies:a}}throw new Y(`Callback for provider type (${c.type}) is not supported`)}catch(t){if(t instanceof T)throw t;let e=new U(t,{provider:c.id});throw g.debug("callback route error details",{method:o,query:n,body:i}),e}}async function iW(e,t){let r,{signIn:a,redirect:n}=t.callbacks;try{r=await a(e)}catch(e){if(e instanceof T)throw e;throw new O(e)}if(!r)throw new O("AccessDenied");if("string"==typeof r)return await n({url:r,baseUrl:t.url.origin})}async function iL(e,t,r,a,n){let{adapter:i,jwt:o,events:s,callbacks:c,logger:d,session:{strategy:l,maxAge:u}}=e,f={body:null,headers:{"Content-Type":"application/json",...!a&&{"Cache-Control":"private, no-cache, no-store",Expires:"0",Pragma:"no-cache"}},cookies:r},p=t.value;if(!p)return f;if("jwt"===l){try{let r=e.cookies.sessionToken.name,i=await o.decode({...o,token:p,salt:r});if(!i)throw Error("Invalid JWT");let d=await c.jwt({token:i,...a&&{trigger:"update"},session:n}),l=aI(u);if(null!==d){let e={user:{name:d.name,email:d.email,image:d.picture},expires:l.toISOString()},a=await c.session({session:e,token:d});f.body=a;let n=await o.encode({...o,token:d,salt:r}),i=t.chunk(n,{expires:l});f.cookies?.push(...i),await s.session?.({session:a,token:d})}else f.cookies?.push(...t.clean())}catch(e){d.error(new L(e)),f.cookies?.push(...t.clean())}return f}try{let{getSessionAndUser:r,deleteSession:o,updateSession:d}=i,l=await r(p);if(l&&l.session.expires.valueOf()<Date.now()&&(await o(p),l=null),l){let{user:t,session:r}=l,i=e.session.updateAge,o=r.expires.valueOf()-1e3*u+1e3*i,h=aI(u);o<=Date.now()&&await d({sessionToken:p,expires:h});let b=await c.session({session:{...r,user:t},user:t,newSession:n,...a?{trigger:"update"}:{}});f.body=b,f.cookies?.push({name:e.cookies.sessionToken.name,value:p,options:{...e.cookies.sessionToken.options,expires:h}}),await s.session?.({session:b})}else p&&f.cookies?.push(...t.clean())}catch(e){d.error(new F(e))}return f}async function iM(e,t){let r,a,{logger:n,provider:i}=t,o=i.authorization?.url;if(!o||"authjs.dev"===o.host){let e=new URL(i.issuer),t=await a3(e,{[aB]:i[rS],[aN]:!0}),r=await a9(e,t).catch(t=>{if(!(t instanceof TypeError)||"Invalid URL"!==t.message)throw t;throw TypeError(`Discovery request responded with an invalid issuer. expected: ${e}`)});if(!r.authorization_endpoint)throw TypeError("Authorization server did not provide an authorization endpoint.");o=new URL(r.authorization_endpoint)}let s=o.searchParams,c=i.callbackUrl;!t.isOnRedirectProxy&&i.redirectProxyUrl&&(c=i.redirectProxyUrl,a=i.callbackUrl,n.debug("using redirect proxy",{redirect_uri:c,data:a}));let d=Object.assign({response_type:"code",client_id:i.clientId,redirect_uri:c,...i.authorization?.params},Object.fromEntries(i.authorization?.url.searchParams??[]),e);for(let e in d)s.set(e,d[e]);let l=[];i.authorization?.url.searchParams.get("response_mode")==="form_post"&&(t.cookies.state.options.sameSite="none",t.cookies.state.options.secure=!0,t.cookies.nonce.options.sameSite="none",t.cookies.nonce.options.secure=!0);let u=await iw.create(t,a);if(u&&(s.set("state",u.value),l.push(u.cookie)),i.checks?.includes("pkce"))if(r&&!r.code_challenge_methods_supported?.includes("S256"))"oidc"===i.type&&(i.checks=["nonce"]);else{let{value:e,cookie:r}=await ig.create(t);s.set("code_challenge",e),s.set("code_challenge_method","S256"),l.push(r)}let f=await i_.create(t);return f&&(s.set("nonce",f.value),l.push(f.cookie)),"oidc"!==i.type||o.searchParams.has("scope")||o.searchParams.set("scope","openid profile email"),n.debug("authorization url is ready",{url:o,cookies:l,provider:i}),{redirect:o.toString(),cookies:l}}async function iN(e,t){let r,{body:a}=e,{provider:n,callbacks:i,adapter:o}=t,s=(n.normalizeIdentifier??function(e){if(!e)throw Error("Missing email from request body.");let t=e.toLowerCase().trim();if(t.includes('"'))throw Error("Invalid email address format.");let[r,a]=t.split("@");if(!r||!a||2!==t.split("@").length||!(a=a.split(",")[0]))throw Error("Invalid email address format.");return`${r}@${a}`})(a?.email),c={id:crypto.randomUUID(),email:s,emailVerified:null},d=await o.getUserByEmail(s)??c,l={providerAccountId:s,userId:d.id,type:"email",provider:n.id};try{r=await i.signIn({user:d,account:l,email:{verificationRequest:!0}})}catch(e){throw new O(e)}if(!r)throw new O("AccessDenied");if("string"==typeof r)return{redirect:await i.redirect({url:r,baseUrl:t.url.origin})};let{callbackUrl:u,theme:f}=t,p=await n.generateVerificationToken?.()??rx(32),h=new Date(Date.now()+(n.maxAge??86400)*1e3),b=n.secret??t.secret,y=new URL(t.basePath,t.url.origin),m=n.sendVerificationRequest({identifier:s,token:p,expires:h,url:`${y}/callback/${n.id}?${new URLSearchParams({callbackUrl:u,token:p,email:s})}`,provider:n,theme:f,request:new Request(e.url,{headers:e.headers,method:e.method,body:"POST"===e.method?JSON.stringify(e.body??{}):void 0})}),g=o.createVerificationToken?.({identifier:s,token:await rg(`${p}${b}`),expires:h});return await Promise.all([m,g]),{redirect:`${y}/verify-request?${new URLSearchParams({provider:n.id,type:n.type})}`}}async function iK(e,t,r){let a=`${r.url.origin}${r.basePath}/signin`;if(!r.provider)return{redirect:a,cookies:t};switch(r.provider.type){case"oauth":case"oidc":{let{redirect:a,cookies:n}=await iM(e.query,r);return n&&t.push(...n),{redirect:a,cookies:t}}case"email":return{...await iN(e,r),cookies:t};default:return{redirect:a,cookies:t}}}async function iJ(e,t,r){let{jwt:a,events:n,callbackUrl:i,logger:o,session:s}=r,c=t.value;if(!c)return{redirect:i,cookies:e};try{if("jwt"===s.strategy){let e=r.cookies.sessionToken.name,t=await a.decode({...a,token:c,salt:e});await n.signOut?.({token:t})}else{let e=await r.adapter?.deleteSession(c);await n.signOut?.({session:e})}}catch(e){o.error(new V(e))}return e.push(...t.clean()),{redirect:i,cookies:e}}async function iB(e,t){let{adapter:r,jwt:a,session:{strategy:n}}=e,i=t.value;if(!i)return null;if("jwt"===n){let t=e.cookies.sessionToken.name,r=await a.decode({...a,token:i,salt:t});if(r&&r.sub)return{id:r.sub,name:r.name,email:r.email,image:r.picture}}else{let e=await r?.getSessionAndUser(i);if(e)return e.user}return null}async function iz(e,t,r,a){let n=i$(t),{provider:i}=n,{action:o}=e.query??{};if("register"!==o&&"authenticate"!==o&&void 0!==o)return{status:400,body:{error:"Invalid action"},cookies:a,headers:{"Content-Type":"application/json"}};let s=await iB(t,r),c=s?{user:s,exists:!0}:await i.getUserInfo(t,e),d=c?.user;switch(function(e,t,r){let{user:a,exists:n=!1}=r??{};switch(e){case"authenticate":return"authenticate";case"register":if(a&&t===n)return"register";break;case void 0:if(!t)if(!a)return"authenticate";else if(n)return"authenticate";else return"register"}return null}(o,!!s,c)){case"authenticate":return iT(n,e,d,a);case"register":if("string"==typeof d?.email)return iR(n,e,d,a);break;default:return{status:400,body:{error:"Invalid request"},cookies:a,headers:{"Content-Type":"application/json"}}}}async function iq(e,t){let{action:r,providerId:a,error:n,method:i}=e,o=t.skipCSRFCheck===rE,{options:s,cookies:c}=await r$({authOptions:t,action:r,providerId:a,url:e.url,callbackUrl:e.body?.callbackUrl??e.query?.callbackUrl,csrfToken:e.body?.csrfToken,cookies:e.cookies,isPost:"POST"===i,csrfDisabled:o}),d=new R(s.cookies.sessionToken,e.cookies,s.logger);if("GET"===i){let t=aj({...s,query:e.query,cookies:c});switch(r){case"callback":return await iD(e,s,d,c);case"csrf":return t.csrf(o,s,c);case"error":return t.error(n);case"providers":return t.providers(s.providers);case"session":return await iL(s,d,c);case"signin":return t.signin(a,n);case"signout":return t.signout();case"verify-request":return t.verifyRequest();case"webauthn-options":return await iz(e,s,d,c)}}else{let{csrfTokenVerified:t}=s;switch(r){case"callback":return"credentials"===s.provider.type&&r_(r,t),await iD(e,s,d,c);case"session":return r_(r,t),await iL(s,d,c,!0,e.body?.data);case"signin":return r_(r,t),await iK(e,c,s);case"signout":return r_(r,t),await iJ(c,d,s)}}throw new G(`Cannot handle action: ${r}`)}function iF(e,t,r,a,n){let i,o=n?.basePath,s=a.AUTH_URL??a.NEXTAUTH_URL;if(s)i=new URL(s),o&&"/"!==o&&"/"!==i.pathname&&(i.pathname!==o&&ru(n).warn("env-url-basepath-mismatch"),i.pathname="/");else{let e=r.get("x-forwarded-host")??r.get("host"),a=r.get("x-forwarded-proto")??t??"https",n=a.endsWith(":")?a:a+":";i=new URL(`${n}//${e}`)}let c=i.toString().replace(/\/$/,"");if(o){let t=o?.replace(/(^\/|\/$)/g,"")??"";return new URL(`${c}/${t}/${e}`)}return new URL(`${c}/${e}`)}async function iV(e,t){let r=ru(t),a=await ry(e,t);if(!a)return Response.json("Bad request.",{status:400});let n=function(e,t){let{url:r}=e,a=[];if(!es&&t.debug&&a.push("debug-enabled"),!t.trustHost)return new Z(`Host must be trusted. URL was: ${e.url}`);if(!t.secret?.length)return new J("Please define a `secret`");let n=e.query?.callbackUrl;if(n&&!ec(n,r.origin))return new I(`Invalid callback URL. Received: ${n}`);let{callbackUrl:i}=S(t.useSecureCookies??"https:"===r.protocol),o=e.cookies?.[t.cookies?.callbackUrl?.name??i.name];if(o&&!ec(o,r.origin))return new I(`Invalid callback URL. Received: ${o}`);let s=!1;for(let e of t.providers){let t="function"==typeof e?e():e;if(("oauth"===t.type||"oidc"===t.type)&&!(t.issuer??t.options?.issuer)){let e,{authorization:r,token:a,userinfo:n}=t;if("string"==typeof r||r?.url?"string"==typeof a||a?.url?"string"==typeof n||n?.url||(e="userinfo"):e="token":e="authorization",e)return new D(`Provider "${t.id}" is missing both \`issuer\` and \`${e}\` endpoint config. At least one of them is required`)}if("credentials"===t.type)ed=!0;else if("email"===t.type)el=!0;else if("webauthn"===t.type){var c;if(eu=!0,t.simpleWebAuthnBrowserVersion&&(c=t.simpleWebAuthnBrowserVersion,!/^v\d+(?:\.\d+){0,2}$/.test(c)))return new T(`Invalid provider config for "${t.id}": simpleWebAuthnBrowserVersion "${t.simpleWebAuthnBrowserVersion}" must be a valid semver string.`);if(t.enableConditionalUI){if(s)return new er("Multiple webauthn providers have 'enableConditionalUI' set to True. Only one provider can have this option enabled at a time");if(s=!0,!Object.values(t.formFields).some(e=>e.autocomplete&&e.autocomplete.toString().indexOf("webauthn")>-1))return new ea(`Provider "${t.id}" has 'enableConditionalUI' set to True, but none of its formFields have 'webauthn' in their autocomplete param`)}}}if(ed){let e=t.session?.strategy==="database",r=!t.providers.some(e=>"credentials"!==("function"==typeof e?e():e).type);if(e&&r)return new X("Signing in with credentials only supported if JWT strategy is enabled");if(t.providers.some(e=>{let t="function"==typeof e?e():e;return"credentials"===t.type&&!t.authorize}))return new K("Must define an authorize() handler to use credentials authentication provider")}let{adapter:d,session:l}=t,u=[];if(el||l?.strategy==="database"||!l?.strategy&&d)if(el){if(!d)return new M("Email login requires an adapter");u.push(...ef)}else{if(!d)return new M("Database session requires an adapter");u.push(...ep)}if(eu){if(!t.experimental?.enableWebAuthn)return new eo("WebAuthn is an experimental feature. To enable it, set `experimental.enableWebAuthn` to `true` in your config");if(a.push("experimental-webauthn"),!d)return new M("WebAuthn requires an adapter");u.push(...eh)}if(d){let e=u.filter(e=>!(e in d));if(e.length)return new N(`Required adapter methods were missing: ${e.join(", ")}`)}return es||(es=!0),a}(a,t);if(Array.isArray(n))n.forEach(r.warn);else if(n){if(r.error(n),!new Set(["signin","signout","error","verify-request"]).has(a.action)||"GET"!==a.method)return Response.json({message:"There was a problem with the server configuration. Check the server logs for more information."},{status:500});let{pages:e,theme:i}=t,o=e?.error&&a.url.searchParams.get("callbackUrl")?.startsWith(e.error);if(!e?.error||o)return o&&r.error(new $(`The error page ${e?.error} should not require authentication`)),rm(aj({theme:i}).error("Configuration"));let s=`${a.url.origin}${e.error}?error=Configuration`;return Response.redirect(s)}let i=e.headers?.has("X-Auth-Return-Redirect"),o=t.raw===rA;try{let e=await iq(a,t);if(o)return e;let r=rm(e),n=r.headers.get("Location");if(!i||!n)return r;return Response.json({url:n},{headers:r.headers})}catch(u){r.error(u);let n=u instanceof T;if(n&&o&&!i)throw u;if("POST"===e.method&&"session"===a.action)return Response.json(null,{status:400});let s=new URLSearchParams({error:u instanceof T&&et.has(u.type)?u.type:"Configuration"});u instanceof H&&s.set("code",u.code);let c=n&&u.kind||"error",d=t.pages?.[c]??`${t.basePath}/${c.toLowerCase()}`,l=`${a.url.origin}${d}?${s}`;if(i)return Response.json({url:l});return Response.redirect(l)}}var iG=e.i(89171);function iX(e){let t=process.env.AUTH_URL??process.env.NEXTAUTH_URL;if(!t)return e;let{origin:r}=new URL(t),{href:a,origin:n}=e.nextUrl;return new iG.NextRequest(a.replace(n,r),e)}function iY(e){try{e.secret??(e.secret=process.env.AUTH_SECRET??process.env.NEXTAUTH_SECRET);let t=process.env.AUTH_URL??process.env.NEXTAUTH_URL;if(!t)return;let{pathname:r}=new URL(t);if("/"===r)return;e.basePath||(e.basePath=r)}catch{}finally{e.basePath||(e.basePath="/api/auth"),function(e,t,r=!1){try{let a=e.AUTH_URL;a&&(t.basePath?r||ru(t).warn("env-url-basepath-redundant"):t.basePath=new URL(a).pathname)}catch{}finally{t.basePath??(t.basePath="/auth")}if(!t.secret?.length){t.secret=[];let r=e.AUTH_SECRET;for(let a of(r&&t.secret.push(r),[1,2,3])){let r=e[`AUTH_SECRET_${a}`];r&&t.secret.unshift(r)}}t.redirectProxyUrl??(t.redirectProxyUrl=e.AUTH_REDIRECT_PROXY_URL),t.trustHost??(t.trustHost=!!(e.AUTH_URL??e.AUTH_TRUST_HOST??e.VERCEL??e.CF_PAGES??"production"!==e.NODE_ENV)),t.providers=t.providers.map(t=>{let{id:r}="function"==typeof t?t({}):t,a=r.toUpperCase().replace(/-/g,"_"),n=e[`AUTH_${a}_ID`],i=e[`AUTH_${a}_SECRET`],o=e[`AUTH_${a}_ISSUER`],s=e[`AUTH_${a}_KEY`],c="function"==typeof t?t({clientId:n,clientSecret:i,issuer:o,apiKey:s}):t;return"oauth"===c.type||"oidc"===c.type?(c.clientId??(c.clientId=n),c.clientSecret??(c.clientSecret=i),c.issuer??(c.issuer=o)):"email"===c.type&&(c.apiKey??(c.apiKey=s)),c})}(process.env,e,!0)}}var iZ=e.i(493458);async function iQ(e,t){return iV(new Request(iF("session",e.get("x-forwarded-proto"),e,process.env,t),{headers:{cookie:e.get("cookie")??""}}),{...t,callbacks:{...t.callbacks,async session(...e){let r=await t.callbacks?.session?.(...e)??{...e[0].session,expires:e[0].session.expires?.toISOString?.()??e[0].session.expires};return{user:e[0].user??e[0].token,...r}}}})}function i0(e){return"function"==typeof e}function i1(e,t){return"function"==typeof e?async(...r)=>{if(!r.length){let r=await (0,iZ.headers)(),a=await e(void 0);return t?.(a),iQ(r,a).then(e=>e.json())}if(r[0]instanceof Request){let a=r[0],n=r[1],i=await e(a);return t?.(i),i2([a,n],i)}if(i0(r[0])){let a=r[0];return async(...r)=>{let n=await e(r[0]);return t?.(n),i2(r,n,a)}}let a="req"in r[0]?r[0].req:r[0],n="res"in r[0]?r[0].res:r[1],i=await e(a);return t?.(i),iQ(new Headers(a.headers),i).then(async e=>{let t=await e.json();for(let t of e.headers.getSetCookie())"headers"in n?n.headers.append("set-cookie",t):n.appendHeader("set-cookie",t);return t})}:(...t)=>{if(!t.length)return Promise.resolve((0,iZ.headers)()).then(t=>iQ(t,e).then(e=>e.json()));if(t[0]instanceof Request)return i2([t[0],t[1]],e);if(i0(t[0])){let r=t[0];return async(...t)=>i2(t,e,r).then(e=>e)}let r="req"in t[0]?t[0].req:t[0],a="res"in t[0]?t[0].res:t[1];return iQ(new Headers(r.headers),e).then(async e=>{let t=await e.json();for(let t of e.headers.getSetCookie())"headers"in a?a.headers.append("set-cookie",t):a.appendHeader("set-cookie",t);return t})}}async function i2(e,t,r){let a=iX(e[0]),n=await iQ(a.headers,t),i=await n.json(),o=!0;t.callbacks?.authorized&&(o=await t.callbacks.authorized({request:a,auth:i}));let s=iG.NextResponse.next?.();if(o instanceof Response){var c,d,l;let e,r;s=o;let n=o.headers.get("Location"),{pathname:i}=a.nextUrl;n&&(c=i,d=new URL(n).pathname,l=t,e=d.replace(`${c}/`,""),r=Object.values(l.pages??{}),(i5.has(e)||r.includes(d))&&d===c)&&(o=!0)}else if(r)a.auth=i,s=await r(a,e[1])??iG.NextResponse.next();else if(!o){let e=t.pages?.signIn??`${t.basePath}/signin`;if(a.nextUrl.pathname!==e){let t=a.nextUrl.clone();t.pathname=e,t.searchParams.set("callbackUrl",a.nextUrl.href),s=iG.NextResponse.redirect(t)}}let u=new Response(s?.body,s);for(let e of n.headers.getSetCookie())u.headers.append("set-cookie",e);return u}let i5=new Set(["providers","session","csrf","signin","signout","callback","verify-request","error"]);var i6=e.i(379509);async function i3(e,t={},r,a){let n=new Headers(await (0,iZ.headers)()),{redirect:i=!0,redirectTo:o,...s}=t instanceof FormData?Object.fromEntries(t):t,c=o?.toString()??n.get("Referer")??"/",d=iF("signin",n.get("x-forwarded-proto"),n,process.env,a);if(!e)return d.searchParams.append("callbackUrl",c),i&&(0,i6.redirect)(d.toString()),d.toString();let l=`${d}/${e}?${new URLSearchParams(r)}`,u={};for(let t of a.providers){let{options:r,...a}="function"==typeof t?t():t,n=r?.id??a.id;if(n===e){u={id:n,type:r?.type??a.type};break}}if(!u.id){let e=`${d}?${new URLSearchParams({callbackUrl:c})}`;return i&&(0,i6.redirect)(e),e}"credentials"===u.type&&(l=l.replace("signin","callback")),n.set("Content-Type","application/x-www-form-urlencoded");let f=new Request(l,{method:"POST",headers:n,body:new URLSearchParams({...s,callbackUrl:c})}),p=await iV(f,{...a,raw:rA,skipCSRFCheck:rE}),h=await (0,iZ.cookies)();for(let e of p?.cookies??[])h.set(e.name,e.value,e.options);let b=(p instanceof Response?p.headers.get("Location"):p.redirect)??l;return i?(0,i6.redirect)(b):b}async function i8(e,t){let r=new Headers(await (0,iZ.headers)());r.set("Content-Type","application/x-www-form-urlencoded");let a=iF("signout",r.get("x-forwarded-proto"),r,process.env,t),n=new URLSearchParams({callbackUrl:e?.redirectTo??r.get("Referer")??"/"}),i=new Request(a,{method:"POST",headers:r,body:n}),o=await iV(i,{...t,raw:rA,skipCSRFCheck:rE}),s=await (0,iZ.cookies)();for(let e of o?.cookies??[])s.set(e.name,e.value,e.options);return e?.redirect??!0?(0,i6.redirect)(o.redirect):o}async function i4(e,t){let r=new Headers(await (0,iZ.headers)());r.set("Content-Type","application/json");let a=new Request(iF("session",r.get("x-forwarded-proto"),r,process.env,t),{method:"POST",headers:r,body:JSON.stringify({data:e})}),n=await iV(a,{...t,raw:rA,skipCSRFCheck:rE}),i=await (0,iZ.cookies)();for(let e of n?.cookies??[])i.set(e.name,e.value,e.options);return n.body}var i9=e.i(618889),i7=e.i(834557);let{handlers:oe,auth:ot,signIn:or,signOut:oa}=function(e){if("function"==typeof e){let t=async t=>{let r=await e(t);return iY(r),iV(iX(t),r)};return{handlers:{GET:t,POST:t},auth:i1(e,e=>iY(e)),signIn:async(t,r,a)=>{let n=await e(void 0);return iY(n),i3(t,r,a,n)},signOut:async t=>{let r=await e(void 0);return iY(r),i8(t,r)},unstable_update:async t=>{let r=await e(void 0);return iY(r),i4(t,r)}}}iY(e);let t=t=>iV(iX(t),e);return{handlers:{GET:t,POST:t},auth:i1(e),signIn:(t,r,a)=>i3(t,r,a,e),signOut:t=>i8(t,e),unstable_update:t=>i4(t,e)}}({secret:process.env.APP_KEY||"propvault-default-development-app-key-32-chars-max",providers:[{id:"credentials",name:"Credentials",type:"credentials",credentials:{},authorize:()=>null,options:{name:"credentials",credentials:{email:{label:"Email",type:"email"},password:{label:"Password",type:"password"}},async authorize(e){var t,r;if(!e?.email||!e.password)return null;let a=await i9.repositories.users.findByEmail(e.email);if(!a||!a.password_hash||!a.is_active||!await (t=e.password,r=a.password_hash,new Promise(function(e,a){!function(e){"string"!=typeof t||"string"!=typeof r?l(e.bind(this,Error("Illegal arguments: "+typeof t+", "+typeof r))):60!==r.length?l(e.bind(this,null,!1)):function(e,t,r,a){function n(r){"string"==typeof e&&"number"==typeof t?function(e,t,r){if("function"==typeof t&&(r=t,t=void 0),"function"==typeof e&&(r=e,e=void 0),void 0===e)e=b;else if("number"!=typeof e)throw Error("illegal arguments: "+typeof e);function a(t){l(function(){try{t(null,function(e){if("number"!=typeof(e=e||b))throw Error("Illegal arguments: "+typeof e+", undefined");e<4?e=4:e>31&&(e=31);var t=[];return t.push("$2b$"),e<10&&t.push("0"),t.push(e.toString()),t.push("$"),t.push(p(function(e){try{return crypto.getRandomValues(new Uint8Array(e))}catch{}try{return c.default.randomBytes(e)}catch{}!0;throw Error("Neither WebCryptoAPI nor a crypto module is available. Use bcrypt.setRandomFallback to set an alternative")}(h),h)),t.join("")}(e))}catch(e){t(e)}})}if(!r)return new Promise(function(e,t){a(function(r,a){r?t(r):e(a)})});if("function"!=typeof r)throw Error("Illegal callback: "+typeof r);a(r)}(t,function(t,n){k(e,n,r,a)}):"string"==typeof e&&"string"==typeof t?k(e,t,r,a):l(r.bind(this,Error("Illegal arguments: "+typeof e+", "+typeof t)))}if(!r)return new Promise(function(e,t){n(function(r,a){r?t(r):e(a)})});if("function"!=typeof r)throw Error("Illegal callback: "+typeof r);n(r)}(t,r.substring(0,29),function(t,a){t?e(t):e(null,function(e,t){for(var r=e.length^t.length,a=0;a<e.length;++a)r|=e.charCodeAt(a)^t.charCodeAt(a);return 0===r}(a,r))},void 0)}(function(t,r){t?a(t):e(r)})})))return null;await i9.repositories.users.updateLastLogin(a.id);let n=await i9.repositories.userRoles.getUserRoles(a.id),i=await i9.repositories.userRoles.getUserPermissions(a.id);return{id:a.id,name:a.name,email:a.email,image:a.image,role:n[0]?.slug??"viewer",permissions:i.map(e=>e.slug)}}}},...process.env.GOOGLE_CLIENT_ID&&process.env.GOOGLE_CLIENT_SECRET?[{id:"google",name:"Google",type:"oidc",issuer:"https://accounts.google.com",style:{brandColor:"#1a73e8"},options:{clientId:process.env.GOOGLE_CLIENT_ID,clientSecret:process.env.GOOGLE_CLIENT_SECRET}}]:[]],session:{strategy:"jwt",maxAge:2592e3},callbacks:{jwt:async({token:e,user:t})=>(t&&(e.id=t.id,e.role=t.role,e.permissions=t.permissions),e),session:async({session:e,token:t})=>(t&&(e.user.id=t.id,e.user.role=t.role,e.user.permissions=t.permissions??[]),e),async signIn({user:e,account:t,profile:r}){if(t?.provider==="google"&&r?.email){let t=await i9.repositories.users.findByEmail(r.email);if(t)await i9.repositories.users.updateLastLogin(t.id);else{t=await i9.repositories.users.create({name:r.name??"User",email:r.email,image:r.picture??null,is_active:!0,is_verified:!0,email_verified:(0,i7.nowISO)(),login_count:1,last_login:(0,i7.nowISO)()});let e=await i9.repositories.roles.findBySlug("viewer");e&&await i9.repositories.userRoles.assignRole(t.id,e.id)}e.id=t.id}return!0}},pages:{signIn:"/login",error:"/login"},trustHost:!0});e.s(["auth",0,ot,"handlers",0,oe],79832)}];
+//# sourceMappingURL=_0o0ouha._.js.map