@wix/cli-app 1.1.71 → 1.1.73

package/build/platform-sdk/browser-5P5TLLCL.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../node_modules/jose/dist/browser/runtime/webcrypto.js","../../../node_modules/jose/dist/browser/runtime/digest.js","../../../node_modules/jose/dist/browser/lib/buffer_utils.js","../../../node_modules/jose/dist/browser/runtime/base64url.js","../../../node_modules/jose/dist/browser/util/errors.js","../../../node_modules/jose/dist/browser/runtime/random.js","../../../node_modules/jose/dist/browser/lib/iv.js","../../../node_modules/jose/dist/browser/lib/check_iv_length.js","../../../node_modules/jose/dist/browser/runtime/check_cek_length.js","../../../node_modules/jose/dist/browser/runtime/timing_safe_equal.js","../../../node_modules/jose/dist/browser/lib/crypto_key.js","../../../node_modules/jose/dist/browser/lib/invalid_key_input.js","../../../node_modules/jose/dist/browser/runtime/is_key_like.js","../../../node_modules/jose/dist/browser/runtime/decrypt.js","../../../node_modules/jose/dist/browser/lib/is_disjoint.js","../../../node_modules/jose/dist/browser/lib/is_object.js","../../../node_modules/jose/dist/browser/runtime/bogus.js","../../../node_modules/jose/dist/browser/runtime/aeskw.js","../../../node_modules/jose/dist/browser/runtime/ecdhes.js","../../../node_modules/jose/dist/browser/lib/check_p2s.js","../../../node_modules/jose/dist/browser/runtime/pbes2kw.js","../../../node_modules/jose/dist/browser/runtime/subtle_rsaes.js","../../../node_modules/jose/dist/browser/runtime/check_key_length.js","../../../node_modules/jose/dist/browser/runtime/rsaes.js","../../../node_modules/jose/dist/browser/lib/is_jwk.js","../../../node_modules/jose/dist/browser/runtime/jwk_to_key.js","../../../node_modules/jose/dist/browser/runtime/normalize_key.js","../../../node_modules/jose/dist/browser/lib/cek.js","../../../node_modules/jose/dist/browser/lib/format_pem.js","../../../node_modules/jose/dist/browser/runtime/asn1.js","../../../node_modules/jose/dist/browser/key/import.js","../../../node_modules/jose/dist/browser/lib/check_key_type.js","../../../node_modules/jose/dist/browser/runtime/encrypt.js","../../../node_modules/jose/dist/browser/lib/aesgcmkw.js","../../../node_modules/jose/dist/browser/lib/decrypt_key_management.js","../../../node_modules/jose/dist/browser/lib/validate_crit.js","../../../node_modules/jose/dist/browser/lib/validate_algorithms.js","../../../node_modules/jose/dist/browser/jwe/flattened/decrypt.js","../../../node_modules/jose/dist/browser/jwe/compact/decrypt.js","../../../node_modules/jose/dist/browser/jwe/general/decrypt.js","../../../node_modules/jose/dist/browser/lib/private_symbols.js","../../../node_modules/jose/dist/browser/runtime/key_to_jwk.js","../../../node_modules/jose/dist/browser/key/export.js","../../../node_modules/jose/dist/browser/lib/encrypt_key_management.js","../../../node_modules/jose/dist/browser/jwe/flattened/encrypt.js","../../../node_modules/jose/dist/browser/jwe/general/encrypt.js","../../../node_modules/jose/dist/browser/runtime/subtle_dsa.js","../../../node_modules/jose/dist/browser/runtime/get_sign_verify_key.js","../../../node_modules/jose/dist/browser/runtime/verify.js","../../../node_modules/jose/dist/browser/jws/flattened/verify.js","../../../node_modules/jose/dist/browser/jws/compact/verify.js","../../../node_modules/jose/dist/browser/jws/general/verify.js","../../../node_modules/jose/dist/browser/lib/epoch.js","../../../node_modules/jose/dist/browser/lib/secs.js","../../../node_modules/jose/dist/browser/lib/jwt_claims_set.js","../../../node_modules/jose/dist/browser/jwt/verify.js","../../../node_modules/jose/dist/browser/jwt/decrypt.js","../../../node_modules/jose/dist/browser/jwe/compact/encrypt.js","../../../node_modules/jose/dist/browser/runtime/sign.js","../../../node_modules/jose/dist/browser/jws/flattened/sign.js","../../../node_modules/jose/dist/browser/jws/compact/sign.js","../../../node_modules/jose/dist/browser/jws/general/sign.js","../../../node_modules/jose/dist/browser/jwt/produce.js","../../../node_modules/jose/dist/browser/jwt/sign.js","../../../node_modules/jose/dist/browser/jwt/encrypt.js","../../../node_modules/jose/dist/browser/jwk/thumbprint.js","../../../node_modules/jose/dist/browser/jwk/embedded.js","../../../node_modules/jose/dist/browser/jwks/local.js","../../../node_modules/jose/dist/browser/runtime/fetch_jwks.js","../../../node_modules/jose/dist/browser/jwks/remote.js","../../../node_modules/jose/dist/browser/jwt/unsecured.js","../../../node_modules/jose/dist/browser/util/base64url.js","../../../node_modules/jose/dist/browser/util/decode_protected_header.js","../../../node_modules/jose/dist/browser/util/decode_jwt.js","../../../node_modules/jose/dist/browser/runtime/generate.js","../../../node_modules/jose/dist/browser/key/generate_key_pair.js","../../../node_modules/jose/dist/browser/key/generate_secret.js","../../../node_modules/jose/dist/browser/runtime/runtime.js","../../../node_modules/jose/dist/browser/util/runtime.js"],"sourcesContent":["export default crypto;\nexport const isCryptoKey = (key) => key instanceof CryptoKey;\n","import crypto from './webcrypto.js';\nconst digest = async (algorithm, data) => {\n    const subtleDigest = `SHA-${algorithm.slice(-3)}`;\n    return new Uint8Array(await crypto.subtle.digest(subtleDigest, data));\n};\nexport default digest;\n","import digest from '../runtime/digest.js';\nexport const encoder = new TextEncoder();\nexport const decoder = new TextDecoder();\nconst MAX_INT32 = 2 ** 32;\nexport function concat(...buffers) {\n    const size = buffers.reduce((acc, { length }) => acc + length, 0);\n    const buf = new Uint8Array(size);\n    let i = 0;\n    for (const buffer of buffers) {\n        buf.set(buffer, i);\n        i += buffer.length;\n    }\n    return buf;\n}\nexport function p2s(alg, p2sInput) {\n    return concat(encoder.encode(alg), new Uint8Array([0]), p2sInput);\n}\nfunction writeUInt32BE(buf, value, offset) {\n    if (value < 0 || value >= MAX_INT32) {\n        throw new RangeError(`value must be >= 0 and <= ${MAX_INT32 - 1}. Received ${value}`);\n    }\n    buf.set([value >>> 24, value >>> 16, value >>> 8, value & 0xff], offset);\n}\nexport function uint64be(value) {\n    const high = Math.floor(value / MAX_INT32);\n    const low = value % MAX_INT32;\n    const buf = new Uint8Array(8);\n    writeUInt32BE(buf, high, 0);\n    writeUInt32BE(buf, low, 4);\n    return buf;\n}\nexport function uint32be(value) {\n    const buf = new Uint8Array(4);\n    writeUInt32BE(buf, value);\n    return buf;\n}\nexport function lengthAndInput(input) {\n    return concat(uint32be(input.length), input);\n}\nexport async function concatKdf(secret, bits, value) {\n    const iterations = Math.ceil((bits >> 3) / 32);\n    const res = new Uint8Array(iterations * 32);\n    for (let iter = 0; iter < iterations; iter++) {\n        const buf = new Uint8Array(4 + secret.length + value.length);\n        buf.set(uint32be(iter + 1));\n        buf.set(secret, 4);\n        buf.set(value, 4 + secret.length);\n        res.set(await digest('sha256', buf), iter * 32);\n    }\n    return res.slice(0, bits >> 3);\n}\n","import { encoder, decoder } from '../lib/buffer_utils.js';\nexport const encodeBase64 = (input) => {\n    let unencoded = input;\n    if (typeof unencoded === 'string') {\n        unencoded = encoder.encode(unencoded);\n    }\n    const CHUNK_SIZE = 0x8000;\n    const arr = [];\n    for (let i = 0; i < unencoded.length; i += CHUNK_SIZE) {\n        arr.push(String.fromCharCode.apply(null, unencoded.subarray(i, i + CHUNK_SIZE)));\n    }\n    return btoa(arr.join(''));\n};\nexport const encode = (input) => {\n    return encodeBase64(input).replace(/=/g, '').replace(/\\+/g, '-').replace(/\\//g, '_');\n};\nexport const decodeBase64 = (encoded) => {\n    const binary = atob(encoded);\n    const bytes = new Uint8Array(binary.length);\n    for (let i = 0; i < binary.length; i++) {\n        bytes[i] = binary.charCodeAt(i);\n    }\n    return bytes;\n};\nexport const decode = (input) => {\n    let encoded = input;\n    if (encoded instanceof Uint8Array) {\n        encoded = decoder.decode(encoded);\n    }\n    encoded = encoded.replace(/-/g, '+').replace(/_/g, '/').replace(/\\s/g, '');\n    try {\n        return decodeBase64(encoded);\n    }\n    catch {\n        throw new TypeError('The input to be decoded is not correctly encoded.');\n    }\n};\n","export class JOSEError extends Error {\n    constructor(message, options) {\n        super(message, options);\n        this.code = 'ERR_JOSE_GENERIC';\n        this.name = this.constructor.name;\n        Error.captureStackTrace?.(this, this.constructor);\n    }\n}\nJOSEError.code = 'ERR_JOSE_GENERIC';\nexport class JWTClaimValidationFailed extends JOSEError {\n    constructor(message, payload, claim = 'unspecified', reason = 'unspecified') {\n        super(message, { cause: { claim, reason, payload } });\n        this.code = 'ERR_JWT_CLAIM_VALIDATION_FAILED';\n        this.claim = claim;\n        this.reason = reason;\n        this.payload = payload;\n    }\n}\nJWTClaimValidationFailed.code = 'ERR_JWT_CLAIM_VALIDATION_FAILED';\nexport class JWTExpired extends JOSEError {\n    constructor(message, payload, claim = 'unspecified', reason = 'unspecified') {\n        super(message, { cause: { claim, reason, payload } });\n        this.code = 'ERR_JWT_EXPIRED';\n        this.claim = claim;\n        this.reason = reason;\n        this.payload = payload;\n    }\n}\nJWTExpired.code = 'ERR_JWT_EXPIRED';\nexport class JOSEAlgNotAllowed extends JOSEError {\n    constructor() {\n        super(...arguments);\n        this.code = 'ERR_JOSE_ALG_NOT_ALLOWED';\n    }\n}\nJOSEAlgNotAllowed.code = 'ERR_JOSE_ALG_NOT_ALLOWED';\nexport class JOSENotSupported extends JOSEError {\n    constructor() {\n        super(...arguments);\n        this.code = 'ERR_JOSE_NOT_SUPPORTED';\n    }\n}\nJOSENotSupported.code = 'ERR_JOSE_NOT_SUPPORTED';\nexport class JWEDecryptionFailed extends JOSEError {\n    constructor(message = 'decryption operation failed', options) {\n        super(message, options);\n        this.code = 'ERR_JWE_DECRYPTION_FAILED';\n    }\n}\nJWEDecryptionFailed.code = 'ERR_JWE_DECRYPTION_FAILED';\nexport class JWEInvalid extends JOSEError {\n    constructor() {\n        super(...arguments);\n        this.code = 'ERR_JWE_INVALID';\n    }\n}\nJWEInvalid.code = 'ERR_JWE_INVALID';\nexport class JWSInvalid extends JOSEError {\n    constructor() {\n        super(...arguments);\n        this.code = 'ERR_JWS_INVALID';\n    }\n}\nJWSInvalid.code = 'ERR_JWS_INVALID';\nexport class JWTInvalid extends JOSEError {\n    constructor() {\n        super(...arguments);\n        this.code = 'ERR_JWT_INVALID';\n    }\n}\nJWTInvalid.code = 'ERR_JWT_INVALID';\nexport class JWKInvalid extends JOSEError {\n    constructor() {\n        super(...arguments);\n        this.code = 'ERR_JWK_INVALID';\n    }\n}\nJWKInvalid.code = 'ERR_JWK_INVALID';\nexport class JWKSInvalid extends JOSEError {\n    constructor() {\n        super(...arguments);\n        this.code = 'ERR_JWKS_INVALID';\n    }\n}\nJWKSInvalid.code = 'ERR_JWKS_INVALID';\nexport class JWKSNoMatchingKey extends JOSEError {\n    constructor(message = 'no applicable key found in the JSON Web Key Set', options) {\n        super(message, options);\n        this.code = 'ERR_JWKS_NO_MATCHING_KEY';\n    }\n}\nJWKSNoMatchingKey.code = 'ERR_JWKS_NO_MATCHING_KEY';\nexport class JWKSMultipleMatchingKeys extends JOSEError {\n    constructor(message = 'multiple matching keys found in the JSON Web Key Set', options) {\n        super(message, options);\n        this.code = 'ERR_JWKS_MULTIPLE_MATCHING_KEYS';\n    }\n}\nSymbol.asyncIterator;\nJWKSMultipleMatchingKeys.code = 'ERR_JWKS_MULTIPLE_MATCHING_KEYS';\nexport class JWKSTimeout extends JOSEError {\n    constructor(message = 'request timed out', options) {\n        super(message, options);\n        this.code = 'ERR_JWKS_TIMEOUT';\n    }\n}\nJWKSTimeout.code = 'ERR_JWKS_TIMEOUT';\nexport class JWSSignatureVerificationFailed extends JOSEError {\n    constructor(message = 'signature verification failed', options) {\n        super(message, options);\n        this.code = 'ERR_JWS_SIGNATURE_VERIFICATION_FAILED';\n    }\n}\nJWSSignatureVerificationFailed.code = 'ERR_JWS_SIGNATURE_VERIFICATION_FAILED';\n","import crypto from './webcrypto.js';\nexport default crypto.getRandomValues.bind(crypto);\n","import { JOSENotSupported } from '../util/errors.js';\nimport random from '../runtime/random.js';\nexport function bitLength(alg) {\n    switch (alg) {\n        case 'A128GCM':\n        case 'A128GCMKW':\n        case 'A192GCM':\n        case 'A192GCMKW':\n        case 'A256GCM':\n        case 'A256GCMKW':\n            return 96;\n        case 'A128CBC-HS256':\n        case 'A192CBC-HS384':\n        case 'A256CBC-HS512':\n            return 128;\n        default:\n            throw new JOSENotSupported(`Unsupported JWE Algorithm: ${alg}`);\n    }\n}\nexport default (alg) => random(new Uint8Array(bitLength(alg) >> 3));\n","import { JWEInvalid } from '../util/errors.js';\nimport { bitLength } from './iv.js';\nconst checkIvLength = (enc, iv) => {\n    if (iv.length << 3 !== bitLength(enc)) {\n        throw new JWEInvalid('Invalid Initialization Vector length');\n    }\n};\nexport default checkIvLength;\n","import { JWEInvalid } from '../util/errors.js';\nconst checkCekLength = (cek, expected) => {\n    const actual = cek.byteLength << 3;\n    if (actual !== expected) {\n        throw new JWEInvalid(`Invalid Content Encryption Key length. Expected ${expected} bits, got ${actual} bits`);\n    }\n};\nexport default checkCekLength;\n","const timingSafeEqual = (a, b) => {\n    if (!(a instanceof Uint8Array)) {\n        throw new TypeError('First argument must be a buffer');\n    }\n    if (!(b instanceof Uint8Array)) {\n        throw new TypeError('Second argument must be a buffer');\n    }\n    if (a.length !== b.length) {\n        throw new TypeError('Input buffers must have the same length');\n    }\n    const len = a.length;\n    let out = 0;\n    let i = -1;\n    while (++i < len) {\n        out |= a[i] ^ b[i];\n    }\n    return out === 0;\n};\nexport default timingSafeEqual;\n","function unusable(name, prop = 'algorithm.name') {\n    return new TypeError(`CryptoKey does not support this operation, its ${prop} must be ${name}`);\n}\nfunction isAlgorithm(algorithm, name) {\n    return algorithm.name === name;\n}\nfunction getHashLength(hash) {\n    return parseInt(hash.name.slice(4), 10);\n}\nfunction getNamedCurve(alg) {\n    switch (alg) {\n        case 'ES256':\n            return 'P-256';\n        case 'ES384':\n            return 'P-384';\n        case 'ES512':\n            return 'P-521';\n        default:\n            throw new Error('unreachable');\n    }\n}\nfunction checkUsage(key, usages) {\n    if (usages.length && !usages.some((expected) => key.usages.includes(expected))) {\n        let msg = 'CryptoKey does not support this operation, its usages must include ';\n        if (usages.length > 2) {\n            const last = usages.pop();\n            msg += `one of ${usages.join(', ')}, or ${last}.`;\n        }\n        else if (usages.length === 2) {\n            msg += `one of ${usages[0]} or ${usages[1]}.`;\n        }\n        else {\n            msg += `${usages[0]}.`;\n        }\n        throw new TypeError(msg);\n    }\n}\nexport function checkSigCryptoKey(key, alg, ...usages) {\n    switch (alg) {\n        case 'HS256':\n        case 'HS384':\n        case 'HS512': {\n            if (!isAlgorithm(key.algorithm, 'HMAC'))\n                throw unusable('HMAC');\n            const expected = parseInt(alg.slice(2), 10);\n            const actual = getHashLength(key.algorithm.hash);\n            if (actual !== expected)\n                throw unusable(`SHA-${expected}`, 'algorithm.hash');\n            break;\n        }\n        case 'RS256':\n        case 'RS384':\n        case 'RS512': {\n            if (!isAlgorithm(key.algorithm, 'RSASSA-PKCS1-v1_5'))\n                throw unusable('RSASSA-PKCS1-v1_5');\n            const expected = parseInt(alg.slice(2), 10);\n            const actual = getHashLength(key.algorithm.hash);\n            if (actual !== expected)\n                throw unusable(`SHA-${expected}`, 'algorithm.hash');\n            break;\n        }\n        case 'PS256':\n        case 'PS384':\n        case 'PS512': {\n            if (!isAlgorithm(key.algorithm, 'RSA-PSS'))\n                throw unusable('RSA-PSS');\n            const expected = parseInt(alg.slice(2), 10);\n            const actual = getHashLength(key.algorithm.hash);\n            if (actual !== expected)\n                throw unusable(`SHA-${expected}`, 'algorithm.hash');\n            break;\n        }\n        case 'EdDSA': {\n            if (key.algorithm.name !== 'Ed25519' && key.algorithm.name !== 'Ed448') {\n                throw unusable('Ed25519 or Ed448');\n            }\n            break;\n        }\n        case 'ES256':\n        case 'ES384':\n        case 'ES512': {\n            if (!isAlgorithm(key.algorithm, 'ECDSA'))\n                throw unusable('ECDSA');\n            const expected = getNamedCurve(alg);\n            const actual = key.algorithm.namedCurve;\n            if (actual !== expected)\n                throw unusable(expected, 'algorithm.namedCurve');\n            break;\n        }\n        default:\n            throw new TypeError('CryptoKey does not support this operation');\n    }\n    checkUsage(key, usages);\n}\nexport function checkEncCryptoKey(key, alg, ...usages) {\n    switch (alg) {\n        case 'A128GCM':\n        case 'A192GCM':\n        case 'A256GCM': {\n            if (!isAlgorithm(key.algorithm, 'AES-GCM'))\n                throw unusable('AES-GCM');\n            const expected = parseInt(alg.slice(1, 4), 10);\n            const actual = key.algorithm.length;\n            if (actual !== expected)\n                throw unusable(expected, 'algorithm.length');\n            break;\n        }\n        case 'A128KW':\n        case 'A192KW':\n        case 'A256KW': {\n            if (!isAlgorithm(key.algorithm, 'AES-KW'))\n                throw unusable('AES-KW');\n            const expected = parseInt(alg.slice(1, 4), 10);\n            const actual = key.algorithm.length;\n            if (actual !== expected)\n                throw unusable(expected, 'algorithm.length');\n            break;\n        }\n        case 'ECDH': {\n            switch (key.algorithm.name) {\n                case 'ECDH':\n                case 'X25519':\n                case 'X448':\n                    break;\n                default:\n                    throw unusable('ECDH, X25519, or X448');\n            }\n            break;\n        }\n        case 'PBES2-HS256+A128KW':\n        case 'PBES2-HS384+A192KW':\n        case 'PBES2-HS512+A256KW':\n            if (!isAlgorithm(key.algorithm, 'PBKDF2'))\n                throw unusable('PBKDF2');\n            break;\n        case 'RSA-OAEP':\n        case 'RSA-OAEP-256':\n        case 'RSA-OAEP-384':\n        case 'RSA-OAEP-512': {\n            if (!isAlgorithm(key.algorithm, 'RSA-OAEP'))\n                throw unusable('RSA-OAEP');\n            const expected = parseInt(alg.slice(9), 10) || 1;\n            const actual = getHashLength(key.algorithm.hash);\n            if (actual !== expected)\n                throw unusable(`SHA-${expected}`, 'algorithm.hash');\n            break;\n        }\n        default:\n            throw new TypeError('CryptoKey does not support this operation');\n    }\n    checkUsage(key, usages);\n}\n","function message(msg, actual, ...types) {\n    types = types.filter(Boolean);\n    if (types.length > 2) {\n        const last = types.pop();\n        msg += `one of type ${types.join(', ')}, or ${last}.`;\n    }\n    else if (types.length === 2) {\n        msg += `one of type ${types[0]} or ${types[1]}.`;\n    }\n    else {\n        msg += `of type ${types[0]}.`;\n    }\n    if (actual == null) {\n        msg += ` Received ${actual}`;\n    }\n    else if (typeof actual === 'function' && actual.name) {\n        msg += ` Received function ${actual.name}`;\n    }\n    else if (typeof actual === 'object' && actual != null) {\n        if (actual.constructor?.name) {\n            msg += ` Received an instance of ${actual.constructor.name}`;\n        }\n    }\n    return msg;\n}\nexport default (actual, ...types) => {\n    return message('Key must be ', actual, ...types);\n};\nexport function withAlg(alg, actual, ...types) {\n    return message(`Key for the ${alg} algorithm must be `, actual, ...types);\n}\n","import { isCryptoKey } from './webcrypto.js';\nexport default (key) => {\n    if (isCryptoKey(key)) {\n        return true;\n    }\n    return key?.[Symbol.toStringTag] === 'KeyObject';\n};\nexport const types = ['CryptoKey'];\n","import { concat, uint64be } from '../lib/buffer_utils.js';\nimport checkIvLength from '../lib/check_iv_length.js';\nimport checkCekLength from './check_cek_length.js';\nimport timingSafeEqual from './timing_safe_equal.js';\nimport { JOSENotSupported, JWEDecryptionFailed, JWEInvalid } from '../util/errors.js';\nimport crypto, { isCryptoKey } from './webcrypto.js';\nimport { checkEncCryptoKey } from '../lib/crypto_key.js';\nimport invalidKeyInput from '../lib/invalid_key_input.js';\nimport { types } from './is_key_like.js';\nasync function cbcDecrypt(enc, cek, ciphertext, iv, tag, aad) {\n    if (!(cek instanceof Uint8Array)) {\n        throw new TypeError(invalidKeyInput(cek, 'Uint8Array'));\n    }\n    const keySize = parseInt(enc.slice(1, 4), 10);\n    const encKey = await crypto.subtle.importKey('raw', cek.subarray(keySize >> 3), 'AES-CBC', false, ['decrypt']);\n    const macKey = await crypto.subtle.importKey('raw', cek.subarray(0, keySize >> 3), {\n        hash: `SHA-${keySize << 1}`,\n        name: 'HMAC',\n    }, false, ['sign']);\n    const macData = concat(aad, iv, ciphertext, uint64be(aad.length << 3));\n    const expectedTag = new Uint8Array((await crypto.subtle.sign('HMAC', macKey, macData)).slice(0, keySize >> 3));\n    let macCheckPassed;\n    try {\n        macCheckPassed = timingSafeEqual(tag, expectedTag);\n    }\n    catch {\n    }\n    if (!macCheckPassed) {\n        throw new JWEDecryptionFailed();\n    }\n    let plaintext;\n    try {\n        plaintext = new Uint8Array(await crypto.subtle.decrypt({ iv, name: 'AES-CBC' }, encKey, ciphertext));\n    }\n    catch {\n    }\n    if (!plaintext) {\n        throw new JWEDecryptionFailed();\n    }\n    return plaintext;\n}\nasync function gcmDecrypt(enc, cek, ciphertext, iv, tag, aad) {\n    let encKey;\n    if (cek instanceof Uint8Array) {\n        encKey = await crypto.subtle.importKey('raw', cek, 'AES-GCM', false, ['decrypt']);\n    }\n    else {\n        checkEncCryptoKey(cek, enc, 'decrypt');\n        encKey = cek;\n    }\n    try {\n        return new Uint8Array(await crypto.subtle.decrypt({\n            additionalData: aad,\n            iv,\n            name: 'AES-GCM',\n            tagLength: 128,\n        }, encKey, concat(ciphertext, tag)));\n    }\n    catch {\n        throw new JWEDecryptionFailed();\n    }\n}\nconst decrypt = async (enc, cek, ciphertext, iv, tag, aad) => {\n    if (!isCryptoKey(cek) && !(cek instanceof Uint8Array)) {\n        throw new TypeError(invalidKeyInput(cek, ...types, 'Uint8Array'));\n    }\n    if (!iv) {\n        throw new JWEInvalid('JWE Initialization Vector missing');\n    }\n    if (!tag) {\n        throw new JWEInvalid('JWE Authentication Tag missing');\n    }\n    checkIvLength(enc, iv);\n    switch (enc) {\n        case 'A128CBC-HS256':\n        case 'A192CBC-HS384':\n        case 'A256CBC-HS512':\n            if (cek instanceof Uint8Array)\n                checkCekLength(cek, parseInt(enc.slice(-3), 10));\n            return cbcDecrypt(enc, cek, ciphertext, iv, tag, aad);\n        case 'A128GCM':\n        case 'A192GCM':\n        case 'A256GCM':\n            if (cek instanceof Uint8Array)\n                checkCekLength(cek, parseInt(enc.slice(1, 4), 10));\n            return gcmDecrypt(enc, cek, ciphertext, iv, tag, aad);\n        default:\n            throw new JOSENotSupported('Unsupported JWE Content Encryption Algorithm');\n    }\n};\nexport default decrypt;\n","const isDisjoint = (...headers) => {\n    const sources = headers.filter(Boolean);\n    if (sources.length === 0 || sources.length === 1) {\n        return true;\n    }\n    let acc;\n    for (const header of sources) {\n        const parameters = Object.keys(header);\n        if (!acc || acc.size === 0) {\n            acc = new Set(parameters);\n            continue;\n        }\n        for (const parameter of parameters) {\n            if (acc.has(parameter)) {\n                return false;\n            }\n            acc.add(parameter);\n        }\n    }\n    return true;\n};\nexport default isDisjoint;\n","function isObjectLike(value) {\n    return typeof value === 'object' && value !== null;\n}\nexport default function isObject(input) {\n    if (!isObjectLike(input) || Object.prototype.toString.call(input) !== '[object Object]') {\n        return false;\n    }\n    if (Object.getPrototypeOf(input) === null) {\n        return true;\n    }\n    let proto = input;\n    while (Object.getPrototypeOf(proto) !== null) {\n        proto = Object.getPrototypeOf(proto);\n    }\n    return Object.getPrototypeOf(input) === proto;\n}\n","const bogusWebCrypto = [\n    { hash: 'SHA-256', name: 'HMAC' },\n    true,\n    ['sign'],\n];\nexport default bogusWebCrypto;\n","import bogusWebCrypto from './bogus.js';\nimport crypto, { isCryptoKey } from './webcrypto.js';\nimport { checkEncCryptoKey } from '../lib/crypto_key.js';\nimport invalidKeyInput from '../lib/invalid_key_input.js';\nimport { types } from './is_key_like.js';\nfunction checkKeySize(key, alg) {\n    if (key.algorithm.length !== parseInt(alg.slice(1, 4), 10)) {\n        throw new TypeError(`Invalid key size for alg: ${alg}`);\n    }\n}\nfunction getCryptoKey(key, alg, usage) {\n    if (isCryptoKey(key)) {\n        checkEncCryptoKey(key, alg, usage);\n        return key;\n    }\n    if (key instanceof Uint8Array) {\n        return crypto.subtle.importKey('raw', key, 'AES-KW', true, [usage]);\n    }\n    throw new TypeError(invalidKeyInput(key, ...types, 'Uint8Array'));\n}\nexport const wrap = async (alg, key, cek) => {\n    const cryptoKey = await getCryptoKey(key, alg, 'wrapKey');\n    checkKeySize(cryptoKey, alg);\n    const cryptoKeyCek = await crypto.subtle.importKey('raw', cek, ...bogusWebCrypto);\n    return new Uint8Array(await crypto.subtle.wrapKey('raw', cryptoKeyCek, cryptoKey, 'AES-KW'));\n};\nexport const unwrap = async (alg, key, encryptedKey) => {\n    const cryptoKey = await getCryptoKey(key, alg, 'unwrapKey');\n    checkKeySize(cryptoKey, alg);\n    const cryptoKeyCek = await crypto.subtle.unwrapKey('raw', encryptedKey, cryptoKey, 'AES-KW', ...bogusWebCrypto);\n    return new Uint8Array(await crypto.subtle.exportKey('raw', cryptoKeyCek));\n};\n","import { encoder, concat, uint32be, lengthAndInput, concatKdf } from '../lib/buffer_utils.js';\nimport crypto, { isCryptoKey } from './webcrypto.js';\nimport { checkEncCryptoKey } from '../lib/crypto_key.js';\nimport invalidKeyInput from '../lib/invalid_key_input.js';\nimport { types } from './is_key_like.js';\nexport async function deriveKey(publicKey, privateKey, algorithm, keyLength, apu = new Uint8Array(0), apv = new Uint8Array(0)) {\n    if (!isCryptoKey(publicKey)) {\n        throw new TypeError(invalidKeyInput(publicKey, ...types));\n    }\n    checkEncCryptoKey(publicKey, 'ECDH');\n    if (!isCryptoKey(privateKey)) {\n        throw new TypeError(invalidKeyInput(privateKey, ...types));\n    }\n    checkEncCryptoKey(privateKey, 'ECDH', 'deriveBits');\n    const value = concat(lengthAndInput(encoder.encode(algorithm)), lengthAndInput(apu), lengthAndInput(apv), uint32be(keyLength));\n    let length;\n    if (publicKey.algorithm.name === 'X25519') {\n        length = 256;\n    }\n    else if (publicKey.algorithm.name === 'X448') {\n        length = 448;\n    }\n    else {\n        length =\n            Math.ceil(parseInt(publicKey.algorithm.namedCurve.substr(-3), 10) / 8) <<\n                3;\n    }\n    const sharedSecret = new Uint8Array(await crypto.subtle.deriveBits({\n        name: publicKey.algorithm.name,\n        public: publicKey,\n    }, privateKey, length));\n    return concatKdf(sharedSecret, keyLength, value);\n}\nexport async function generateEpk(key) {\n    if (!isCryptoKey(key)) {\n        throw new TypeError(invalidKeyInput(key, ...types));\n    }\n    return crypto.subtle.generateKey(key.algorithm, true, ['deriveBits']);\n}\nexport function ecdhAllowed(key) {\n    if (!isCryptoKey(key)) {\n        throw new TypeError(invalidKeyInput(key, ...types));\n    }\n    return (['P-256', 'P-384', 'P-521'].includes(key.algorithm.namedCurve) ||\n        key.algorithm.name === 'X25519' ||\n        key.algorithm.name === 'X448');\n}\n","import { JWEInvalid } from '../util/errors.js';\nexport default function checkP2s(p2s) {\n    if (!(p2s instanceof Uint8Array) || p2s.length < 8) {\n        throw new JWEInvalid('PBES2 Salt Input must be 8 or more octets');\n    }\n}\n","import random from './random.js';\nimport { p2s as concatSalt } from '../lib/buffer_utils.js';\nimport { encode as base64url } from './base64url.js';\nimport { wrap, unwrap } from './aeskw.js';\nimport checkP2s from '../lib/check_p2s.js';\nimport crypto, { isCryptoKey } from './webcrypto.js';\nimport { checkEncCryptoKey } from '../lib/crypto_key.js';\nimport invalidKeyInput from '../lib/invalid_key_input.js';\nimport { types } from './is_key_like.js';\nfunction getCryptoKey(key, alg) {\n    if (key instanceof Uint8Array) {\n        return crypto.subtle.importKey('raw', key, 'PBKDF2', false, ['deriveBits']);\n    }\n    if (isCryptoKey(key)) {\n        checkEncCryptoKey(key, alg, 'deriveBits', 'deriveKey');\n        return key;\n    }\n    throw new TypeError(invalidKeyInput(key, ...types, 'Uint8Array'));\n}\nasync function deriveKey(p2s, alg, p2c, key) {\n    checkP2s(p2s);\n    const salt = concatSalt(alg, p2s);\n    const keylen = parseInt(alg.slice(13, 16), 10);\n    const subtleAlg = {\n        hash: `SHA-${alg.slice(8, 11)}`,\n        iterations: p2c,\n        name: 'PBKDF2',\n        salt,\n    };\n    const wrapAlg = {\n        length: keylen,\n        name: 'AES-KW',\n    };\n    const cryptoKey = await getCryptoKey(key, alg);\n    if (cryptoKey.usages.includes('deriveBits')) {\n        return new Uint8Array(await crypto.subtle.deriveBits(subtleAlg, cryptoKey, keylen));\n    }\n    if (cryptoKey.usages.includes('deriveKey')) {\n        return crypto.subtle.deriveKey(subtleAlg, cryptoKey, wrapAlg, false, ['wrapKey', 'unwrapKey']);\n    }\n    throw new TypeError('PBKDF2 key \"usages\" must include \"deriveBits\" or \"deriveKey\"');\n}\nexport const encrypt = async (alg, key, cek, p2c = 2048, p2s = random(new Uint8Array(16))) => {\n    const derived = await deriveKey(p2s, alg, p2c, key);\n    const encryptedKey = await wrap(alg.slice(-6), derived, cek);\n    return { encryptedKey, p2c, p2s: base64url(p2s) };\n};\nexport const decrypt = async (alg, key, encryptedKey, p2c, p2s) => {\n    const derived = await deriveKey(p2s, alg, p2c, key);\n    return unwrap(alg.slice(-6), derived, encryptedKey);\n};\n","import { JOSENotSupported } from '../util/errors.js';\nexport default function subtleRsaEs(alg) {\n    switch (alg) {\n        case 'RSA-OAEP':\n        case 'RSA-OAEP-256':\n        case 'RSA-OAEP-384':\n        case 'RSA-OAEP-512':\n            return 'RSA-OAEP';\n        default:\n            throw new JOSENotSupported(`alg ${alg} is not supported either by JOSE or your javascript runtime`);\n    }\n}\n","export default (alg, key) => {\n    if (alg.startsWith('RS') || alg.startsWith('PS')) {\n        const { modulusLength } = key.algorithm;\n        if (typeof modulusLength !== 'number' || modulusLength < 2048) {\n            throw new TypeError(`${alg} requires key modulusLength to be 2048 bits or larger`);\n        }\n    }\n};\n","import subtleAlgorithm from './subtle_rsaes.js';\nimport bogusWebCrypto from './bogus.js';\nimport crypto, { isCryptoKey } from './webcrypto.js';\nimport { checkEncCryptoKey } from '../lib/crypto_key.js';\nimport checkKeyLength from './check_key_length.js';\nimport invalidKeyInput from '../lib/invalid_key_input.js';\nimport { types } from './is_key_like.js';\nexport const encrypt = async (alg, key, cek) => {\n    if (!isCryptoKey(key)) {\n        throw new TypeError(invalidKeyInput(key, ...types));\n    }\n    checkEncCryptoKey(key, alg, 'encrypt', 'wrapKey');\n    checkKeyLength(alg, key);\n    if (key.usages.includes('encrypt')) {\n        return new Uint8Array(await crypto.subtle.encrypt(subtleAlgorithm(alg), key, cek));\n    }\n    if (key.usages.includes('wrapKey')) {\n        const cryptoKeyCek = await crypto.subtle.importKey('raw', cek, ...bogusWebCrypto);\n        return new Uint8Array(await crypto.subtle.wrapKey('raw', cryptoKeyCek, key, subtleAlgorithm(alg)));\n    }\n    throw new TypeError('RSA-OAEP key \"usages\" must include \"encrypt\" or \"wrapKey\" for this operation');\n};\nexport const decrypt = async (alg, key, encryptedKey) => {\n    if (!isCryptoKey(key)) {\n        throw new TypeError(invalidKeyInput(key, ...types));\n    }\n    checkEncCryptoKey(key, alg, 'decrypt', 'unwrapKey');\n    checkKeyLength(alg, key);\n    if (key.usages.includes('decrypt')) {\n        return new Uint8Array(await crypto.subtle.decrypt(subtleAlgorithm(alg), key, encryptedKey));\n    }\n    if (key.usages.includes('unwrapKey')) {\n        const cryptoKeyCek = await crypto.subtle.unwrapKey('raw', encryptedKey, key, subtleAlgorithm(alg), ...bogusWebCrypto);\n        return new Uint8Array(await crypto.subtle.exportKey('raw', cryptoKeyCek));\n    }\n    throw new TypeError('RSA-OAEP key \"usages\" must include \"decrypt\" or \"unwrapKey\" for this operation');\n};\n","import isObject from './is_object.js';\nexport function isJWK(key) {\n    return isObject(key) && typeof key.kty === 'string';\n}\nexport function isPrivateJWK(key) {\n    return key.kty !== 'oct' && typeof key.d === 'string';\n}\nexport function isPublicJWK(key) {\n    return key.kty !== 'oct' && typeof key.d === 'undefined';\n}\nexport function isSecretJWK(key) {\n    return isJWK(key) && key.kty === 'oct' && typeof key.k === 'string';\n}\n","import crypto from './webcrypto.js';\nimport { JOSENotSupported } from '../util/errors.js';\nfunction subtleMapping(jwk) {\n    let algorithm;\n    let keyUsages;\n    switch (jwk.kty) {\n        case 'RSA': {\n            switch (jwk.alg) {\n                case 'PS256':\n                case 'PS384':\n                case 'PS512':\n                    algorithm = { name: 'RSA-PSS', hash: `SHA-${jwk.alg.slice(-3)}` };\n                    keyUsages = jwk.d ? ['sign'] : ['verify'];\n                    break;\n                case 'RS256':\n                case 'RS384':\n                case 'RS512':\n                    algorithm = { name: 'RSASSA-PKCS1-v1_5', hash: `SHA-${jwk.alg.slice(-3)}` };\n                    keyUsages = jwk.d ? ['sign'] : ['verify'];\n                    break;\n                case 'RSA-OAEP':\n                case 'RSA-OAEP-256':\n                case 'RSA-OAEP-384':\n                case 'RSA-OAEP-512':\n                    algorithm = {\n                        name: 'RSA-OAEP',\n                        hash: `SHA-${parseInt(jwk.alg.slice(-3), 10) || 1}`,\n                    };\n                    keyUsages = jwk.d ? ['decrypt', 'unwrapKey'] : ['encrypt', 'wrapKey'];\n                    break;\n                default:\n                    throw new JOSENotSupported('Invalid or unsupported JWK \"alg\" (Algorithm) Parameter value');\n            }\n            break;\n        }\n        case 'EC': {\n            switch (jwk.alg) {\n                case 'ES256':\n                    algorithm = { name: 'ECDSA', namedCurve: 'P-256' };\n                    keyUsages = jwk.d ? ['sign'] : ['verify'];\n                    break;\n                case 'ES384':\n                    algorithm = { name: 'ECDSA', namedCurve: 'P-384' };\n                    keyUsages = jwk.d ? ['sign'] : ['verify'];\n                    break;\n                case 'ES512':\n                    algorithm = { name: 'ECDSA', namedCurve: 'P-521' };\n                    keyUsages = jwk.d ? ['sign'] : ['verify'];\n                    break;\n                case 'ECDH-ES':\n                case 'ECDH-ES+A128KW':\n                case 'ECDH-ES+A192KW':\n                case 'ECDH-ES+A256KW':\n                    algorithm = { name: 'ECDH', namedCurve: jwk.crv };\n                    keyUsages = jwk.d ? ['deriveBits'] : [];\n                    break;\n                default:\n                    throw new JOSENotSupported('Invalid or unsupported JWK \"alg\" (Algorithm) Parameter value');\n            }\n            break;\n        }\n        case 'OKP': {\n            switch (jwk.alg) {\n                case 'EdDSA':\n                    algorithm = { name: jwk.crv };\n                    keyUsages = jwk.d ? ['sign'] : ['verify'];\n                    break;\n                case 'ECDH-ES':\n                case 'ECDH-ES+A128KW':\n                case 'ECDH-ES+A192KW':\n                case 'ECDH-ES+A256KW':\n                    algorithm = { name: jwk.crv };\n                    keyUsages = jwk.d ? ['deriveBits'] : [];\n                    break;\n                default:\n                    throw new JOSENotSupported('Invalid or unsupported JWK \"alg\" (Algorithm) Parameter value');\n            }\n            break;\n        }\n        default:\n            throw new JOSENotSupported('Invalid or unsupported JWK \"kty\" (Key Type) Parameter value');\n    }\n    return { algorithm, keyUsages };\n}\nconst parse = async (jwk) => {\n    if (!jwk.alg) {\n        throw new TypeError('\"alg\" argument is required when \"jwk.alg\" is not present');\n    }\n    const { algorithm, keyUsages } = subtleMapping(jwk);\n    const rest = [\n        algorithm,\n        jwk.ext ?? false,\n        jwk.key_ops ?? keyUsages,\n    ];\n    const keyData = { ...jwk };\n    delete keyData.alg;\n    delete keyData.use;\n    return crypto.subtle.importKey('jwk', keyData, ...rest);\n};\nexport default parse;\n","import { isJWK } from '../lib/is_jwk.js';\nimport { decode } from './base64url.js';\nimport importJWK from './jwk_to_key.js';\nconst exportKeyValue = (k) => decode(k);\nlet privCache;\nlet pubCache;\nconst isKeyObject = (key) => {\n    return key?.[Symbol.toStringTag] === 'KeyObject';\n};\nconst importAndCache = async (cache, key, jwk, alg, freeze = false) => {\n    let cached = cache.get(key);\n    if (cached?.[alg]) {\n        return cached[alg];\n    }\n    const cryptoKey = await importJWK({ ...jwk, alg });\n    if (freeze)\n        Object.freeze(key);\n    if (!cached) {\n        cache.set(key, { [alg]: cryptoKey });\n    }\n    else {\n        cached[alg] = cryptoKey;\n    }\n    return cryptoKey;\n};\nconst normalizePublicKey = (key, alg) => {\n    if (isKeyObject(key)) {\n        let jwk = key.export({ format: 'jwk' });\n        delete jwk.d;\n        delete jwk.dp;\n        delete jwk.dq;\n        delete jwk.p;\n        delete jwk.q;\n        delete jwk.qi;\n        if (jwk.k) {\n            return exportKeyValue(jwk.k);\n        }\n        pubCache || (pubCache = new WeakMap());\n        return importAndCache(pubCache, key, jwk, alg);\n    }\n    if (isJWK(key)) {\n        if (key.k)\n            return decode(key.k);\n        pubCache || (pubCache = new WeakMap());\n        const cryptoKey = importAndCache(pubCache, key, key, alg, true);\n        return cryptoKey;\n    }\n    return key;\n};\nconst normalizePrivateKey = (key, alg) => {\n    if (isKeyObject(key)) {\n        let jwk = key.export({ format: 'jwk' });\n        if (jwk.k) {\n            return exportKeyValue(jwk.k);\n        }\n        privCache || (privCache = new WeakMap());\n        return importAndCache(privCache, key, jwk, alg);\n    }\n    if (isJWK(key)) {\n        if (key.k)\n            return decode(key.k);\n        privCache || (privCache = new WeakMap());\n        const cryptoKey = importAndCache(privCache, key, key, alg, true);\n        return cryptoKey;\n    }\n    return key;\n};\nexport default { normalizePublicKey, normalizePrivateKey };\n","import { JOSENotSupported } from '../util/errors.js';\nimport random from '../runtime/random.js';\nexport function bitLength(alg) {\n    switch (alg) {\n        case 'A128GCM':\n            return 128;\n        case 'A192GCM':\n            return 192;\n        case 'A256GCM':\n        case 'A128CBC-HS256':\n            return 256;\n        case 'A192CBC-HS384':\n            return 384;\n        case 'A256CBC-HS512':\n            return 512;\n        default:\n            throw new JOSENotSupported(`Unsupported JWE Algorithm: ${alg}`);\n    }\n}\nexport default (alg) => random(new Uint8Array(bitLength(alg) >> 3));\n","export default (b64, descriptor) => {\n    const newlined = (b64.match(/.{1,64}/g) || []).join('\\n');\n    return `-----BEGIN ${descriptor}-----\\n${newlined}\\n-----END ${descriptor}-----`;\n};\n","import crypto, { isCryptoKey } from './webcrypto.js';\nimport invalidKeyInput from '../lib/invalid_key_input.js';\nimport { encodeBase64, decodeBase64 } from './base64url.js';\nimport formatPEM from '../lib/format_pem.js';\nimport { JOSENotSupported } from '../util/errors.js';\nimport { types } from './is_key_like.js';\nconst genericExport = async (keyType, keyFormat, key) => {\n    if (!isCryptoKey(key)) {\n        throw new TypeError(invalidKeyInput(key, ...types));\n    }\n    if (!key.extractable) {\n        throw new TypeError('CryptoKey is not extractable');\n    }\n    if (key.type !== keyType) {\n        throw new TypeError(`key is not a ${keyType} key`);\n    }\n    return formatPEM(encodeBase64(new Uint8Array(await crypto.subtle.exportKey(keyFormat, key))), `${keyType.toUpperCase()} KEY`);\n};\nexport const toSPKI = (key) => {\n    return genericExport('public', 'spki', key);\n};\nexport const toPKCS8 = (key) => {\n    return genericExport('private', 'pkcs8', key);\n};\nconst findOid = (keyData, oid, from = 0) => {\n    if (from === 0) {\n        oid.unshift(oid.length);\n        oid.unshift(0x06);\n    }\n    const i = keyData.indexOf(oid[0], from);\n    if (i === -1)\n        return false;\n    const sub = keyData.subarray(i, i + oid.length);\n    if (sub.length !== oid.length)\n        return false;\n    return sub.every((value, index) => value === oid[index]) || findOid(keyData, oid, i + 1);\n};\nconst getNamedCurve = (keyData) => {\n    switch (true) {\n        case findOid(keyData, [0x2a, 0x86, 0x48, 0xce, 0x3d, 0x03, 0x01, 0x07]):\n            return 'P-256';\n        case findOid(keyData, [0x2b, 0x81, 0x04, 0x00, 0x22]):\n            return 'P-384';\n        case findOid(keyData, [0x2b, 0x81, 0x04, 0x00, 0x23]):\n            return 'P-521';\n        case findOid(keyData, [0x2b, 0x65, 0x6e]):\n            return 'X25519';\n        case findOid(keyData, [0x2b, 0x65, 0x6f]):\n            return 'X448';\n        case findOid(keyData, [0x2b, 0x65, 0x70]):\n            return 'Ed25519';\n        case findOid(keyData, [0x2b, 0x65, 0x71]):\n            return 'Ed448';\n        default:\n            throw new JOSENotSupported('Invalid or unsupported EC Key Curve or OKP Key Sub Type');\n    }\n};\nconst genericImport = async (replace, keyFormat, pem, alg, options) => {\n    let algorithm;\n    let keyUsages;\n    const keyData = new Uint8Array(atob(pem.replace(replace, ''))\n        .split('')\n        .map((c) => c.charCodeAt(0)));\n    const isPublic = keyFormat === 'spki';\n    switch (alg) {\n        case 'PS256':\n        case 'PS384':\n        case 'PS512':\n            algorithm = { name: 'RSA-PSS', hash: `SHA-${alg.slice(-3)}` };\n            keyUsages = isPublic ? ['verify'] : ['sign'];\n            break;\n        case 'RS256':\n        case 'RS384':\n        case 'RS512':\n            algorithm = { name: 'RSASSA-PKCS1-v1_5', hash: `SHA-${alg.slice(-3)}` };\n            keyUsages = isPublic ? ['verify'] : ['sign'];\n            break;\n        case 'RSA-OAEP':\n        case 'RSA-OAEP-256':\n        case 'RSA-OAEP-384':\n        case 'RSA-OAEP-512':\n            algorithm = {\n                name: 'RSA-OAEP',\n                hash: `SHA-${parseInt(alg.slice(-3), 10) || 1}`,\n            };\n            keyUsages = isPublic ? ['encrypt', 'wrapKey'] : ['decrypt', 'unwrapKey'];\n            break;\n        case 'ES256':\n            algorithm = { name: 'ECDSA', namedCurve: 'P-256' };\n            keyUsages = isPublic ? ['verify'] : ['sign'];\n            break;\n        case 'ES384':\n            algorithm = { name: 'ECDSA', namedCurve: 'P-384' };\n            keyUsages = isPublic ? ['verify'] : ['sign'];\n            break;\n        case 'ES512':\n            algorithm = { name: 'ECDSA', namedCurve: 'P-521' };\n            keyUsages = isPublic ? ['verify'] : ['sign'];\n            break;\n        case 'ECDH-ES':\n        case 'ECDH-ES+A128KW':\n        case 'ECDH-ES+A192KW':\n        case 'ECDH-ES+A256KW': {\n            const namedCurve = getNamedCurve(keyData);\n            algorithm = namedCurve.startsWith('P-') ? { name: 'ECDH', namedCurve } : { name: namedCurve };\n            keyUsages = isPublic ? [] : ['deriveBits'];\n            break;\n        }\n        case 'EdDSA':\n            algorithm = { name: getNamedCurve(keyData) };\n            keyUsages = isPublic ? ['verify'] : ['sign'];\n            break;\n        default:\n            throw new JOSENotSupported('Invalid or unsupported \"alg\" (Algorithm) value');\n    }\n    return crypto.subtle.importKey(keyFormat, keyData, algorithm, options?.extractable ?? false, keyUsages);\n};\nexport const fromPKCS8 = (pem, alg, options) => {\n    return genericImport(/(?:-----(?:BEGIN|END) PRIVATE KEY-----|\\s)/g, 'pkcs8', pem, alg, options);\n};\nexport const fromSPKI = (pem, alg, options) => {\n    return genericImport(/(?:-----(?:BEGIN|END) PUBLIC KEY-----|\\s)/g, 'spki', pem, alg, options);\n};\nfunction getElement(seq) {\n    const result = [];\n    let next = 0;\n    while (next < seq.length) {\n        const nextPart = parseElement(seq.subarray(next));\n        result.push(nextPart);\n        next += nextPart.byteLength;\n    }\n    return result;\n}\nfunction parseElement(bytes) {\n    let position = 0;\n    let tag = bytes[0] & 0x1f;\n    position++;\n    if (tag === 0x1f) {\n        tag = 0;\n        while (bytes[position] >= 0x80) {\n            tag = tag * 128 + bytes[position] - 0x80;\n            position++;\n        }\n        tag = tag * 128 + bytes[position] - 0x80;\n        position++;\n    }\n    let length = 0;\n    if (bytes[position] < 0x80) {\n        length = bytes[position];\n        position++;\n    }\n    else if (length === 0x80) {\n        length = 0;\n        while (bytes[position + length] !== 0 || bytes[position + length + 1] !== 0) {\n            if (length > bytes.byteLength) {\n                throw new TypeError('invalid indefinite form length');\n            }\n            length++;\n        }\n        const byteLength = position + length + 2;\n        return {\n            byteLength,\n            contents: bytes.subarray(position, position + length),\n            raw: bytes.subarray(0, byteLength),\n        };\n    }\n    else {\n        const numberOfDigits = bytes[position] & 0x7f;\n        position++;\n        length = 0;\n        for (let i = 0; i < numberOfDigits; i++) {\n            length = length * 256 + bytes[position];\n            position++;\n        }\n    }\n    const byteLength = position + length;\n    return {\n        byteLength,\n        contents: bytes.subarray(position, byteLength),\n        raw: bytes.subarray(0, byteLength),\n    };\n}\nfunction spkiFromX509(buf) {\n    const tbsCertificate = getElement(getElement(parseElement(buf).contents)[0].contents);\n    return encodeBase64(tbsCertificate[tbsCertificate[0].raw[0] === 0xa0 ? 6 : 5].raw);\n}\nfunction getSPKI(x509) {\n    const pem = x509.replace(/(?:-----(?:BEGIN|END) CERTIFICATE-----|\\s)/g, '');\n    const raw = decodeBase64(pem);\n    return formatPEM(spkiFromX509(raw), 'PUBLIC KEY');\n}\nexport const fromX509 = (pem, alg, options) => {\n    let spki;\n    try {\n        spki = getSPKI(pem);\n    }\n    catch (cause) {\n        throw new TypeError('Failed to parse the X.509 certificate', { cause });\n    }\n    return fromSPKI(spki, alg, options);\n};\n","import { decode as decodeBase64URL } from '../runtime/base64url.js';\nimport { fromSPKI, fromPKCS8, fromX509 } from '../runtime/asn1.js';\nimport asKeyObject from '../runtime/jwk_to_key.js';\nimport { JOSENotSupported } from '../util/errors.js';\nimport isObject from '../lib/is_object.js';\nexport async function importSPKI(spki, alg, options) {\n    if (typeof spki !== 'string' || spki.indexOf('-----BEGIN PUBLIC KEY-----') !== 0) {\n        throw new TypeError('\"spki\" must be SPKI formatted string');\n    }\n    return fromSPKI(spki, alg, options);\n}\nexport async function importX509(x509, alg, options) {\n    if (typeof x509 !== 'string' || x509.indexOf('-----BEGIN CERTIFICATE-----') !== 0) {\n        throw new TypeError('\"x509\" must be X.509 formatted string');\n    }\n    return fromX509(x509, alg, options);\n}\nexport async function importPKCS8(pkcs8, alg, options) {\n    if (typeof pkcs8 !== 'string' || pkcs8.indexOf('-----BEGIN PRIVATE KEY-----') !== 0) {\n        throw new TypeError('\"pkcs8\" must be PKCS#8 formatted string');\n    }\n    return fromPKCS8(pkcs8, alg, options);\n}\nexport async function importJWK(jwk, alg) {\n    if (!isObject(jwk)) {\n        throw new TypeError('JWK must be an object');\n    }\n    alg || (alg = jwk.alg);\n    switch (jwk.kty) {\n        case 'oct':\n            if (typeof jwk.k !== 'string' || !jwk.k) {\n                throw new TypeError('missing \"k\" (Key Value) Parameter value');\n            }\n            return decodeBase64URL(jwk.k);\n        case 'RSA':\n            if (jwk.oth !== undefined) {\n                throw new JOSENotSupported('RSA JWK \"oth\" (Other Primes Info) Parameter value is not supported');\n            }\n        case 'EC':\n        case 'OKP':\n            return asKeyObject({ ...jwk, alg });\n        default:\n            throw new JOSENotSupported('Unsupported \"kty\" (Key Type) Parameter value');\n    }\n}\n","import { withAlg as invalidKeyInput } from './invalid_key_input.js';\nimport isKeyLike, { types } from '../runtime/is_key_like.js';\nimport * as jwk from './is_jwk.js';\nconst tag = (key) => key?.[Symbol.toStringTag];\nconst jwkMatchesOp = (alg, key, usage) => {\n    if (key.use !== undefined && key.use !== 'sig') {\n        throw new TypeError('Invalid key for this operation, when present its use must be sig');\n    }\n    if (key.key_ops !== undefined && key.key_ops.includes?.(usage) !== true) {\n        throw new TypeError(`Invalid key for this operation, when present its key_ops must include ${usage}`);\n    }\n    if (key.alg !== undefined && key.alg !== alg) {\n        throw new TypeError(`Invalid key for this operation, when present its alg must be ${alg}`);\n    }\n    return true;\n};\nconst symmetricTypeCheck = (alg, key, usage, allowJwk) => {\n    if (key instanceof Uint8Array)\n        return;\n    if (allowJwk && jwk.isJWK(key)) {\n        if (jwk.isSecretJWK(key) && jwkMatchesOp(alg, key, usage))\n            return;\n        throw new TypeError(`JSON Web Key for symmetric algorithms must have JWK \"kty\" (Key Type) equal to \"oct\" and the JWK \"k\" (Key Value) present`);\n    }\n    if (!isKeyLike(key)) {\n        throw new TypeError(invalidKeyInput(alg, key, ...types, 'Uint8Array', allowJwk ? 'JSON Web Key' : null));\n    }\n    if (key.type !== 'secret') {\n        throw new TypeError(`${tag(key)} instances for symmetric algorithms must be of type \"secret\"`);\n    }\n};\nconst asymmetricTypeCheck = (alg, key, usage, allowJwk) => {\n    if (allowJwk && jwk.isJWK(key)) {\n        switch (usage) {\n            case 'sign':\n                if (jwk.isPrivateJWK(key) && jwkMatchesOp(alg, key, usage))\n                    return;\n                throw new TypeError(`JSON Web Key for this operation be a private JWK`);\n            case 'verify':\n                if (jwk.isPublicJWK(key) && jwkMatchesOp(alg, key, usage))\n                    return;\n                throw new TypeError(`JSON Web Key for this operation be a public JWK`);\n        }\n    }\n    if (!isKeyLike(key)) {\n        throw new TypeError(invalidKeyInput(alg, key, ...types, allowJwk ? 'JSON Web Key' : null));\n    }\n    if (key.type === 'secret') {\n        throw new TypeError(`${tag(key)} instances for asymmetric algorithms must not be of type \"secret\"`);\n    }\n    if (usage === 'sign' && key.type === 'public') {\n        throw new TypeError(`${tag(key)} instances for asymmetric algorithm signing must be of type \"private\"`);\n    }\n    if (usage === 'decrypt' && key.type === 'public') {\n        throw new TypeError(`${tag(key)} instances for asymmetric algorithm decryption must be of type \"private\"`);\n    }\n    if (key.algorithm && usage === 'verify' && key.type === 'private') {\n        throw new TypeError(`${tag(key)} instances for asymmetric algorithm verifying must be of type \"public\"`);\n    }\n    if (key.algorithm && usage === 'encrypt' && key.type === 'private') {\n        throw new TypeError(`${tag(key)} instances for asymmetric algorithm encryption must be of type \"public\"`);\n    }\n};\nfunction checkKeyType(allowJwk, alg, key, usage) {\n    const symmetric = alg.startsWith('HS') ||\n        alg === 'dir' ||\n        alg.startsWith('PBES2') ||\n        /^A\\d{3}(?:GCM)?KW$/.test(alg);\n    if (symmetric) {\n        symmetricTypeCheck(alg, key, usage, allowJwk);\n    }\n    else {\n        asymmetricTypeCheck(alg, key, usage, allowJwk);\n    }\n}\nexport default checkKeyType.bind(undefined, false);\nexport const checkKeyTypeWithJwk = checkKeyType.bind(undefined, true);\n","import { concat, uint64be } from '../lib/buffer_utils.js';\nimport checkIvLength from '../lib/check_iv_length.js';\nimport checkCekLength from './check_cek_length.js';\nimport crypto, { isCryptoKey } from './webcrypto.js';\nimport { checkEncCryptoKey } from '../lib/crypto_key.js';\nimport invalidKeyInput from '../lib/invalid_key_input.js';\nimport generateIv from '../lib/iv.js';\nimport { JOSENotSupported } from '../util/errors.js';\nimport { types } from './is_key_like.js';\nasync function cbcEncrypt(enc, plaintext, cek, iv, aad) {\n    if (!(cek instanceof Uint8Array)) {\n        throw new TypeError(invalidKeyInput(cek, 'Uint8Array'));\n    }\n    const keySize = parseInt(enc.slice(1, 4), 10);\n    const encKey = await crypto.subtle.importKey('raw', cek.subarray(keySize >> 3), 'AES-CBC', false, ['encrypt']);\n    const macKey = await crypto.subtle.importKey('raw', cek.subarray(0, keySize >> 3), {\n        hash: `SHA-${keySize << 1}`,\n        name: 'HMAC',\n    }, false, ['sign']);\n    const ciphertext = new Uint8Array(await crypto.subtle.encrypt({\n        iv,\n        name: 'AES-CBC',\n    }, encKey, plaintext));\n    const macData = concat(aad, iv, ciphertext, uint64be(aad.length << 3));\n    const tag = new Uint8Array((await crypto.subtle.sign('HMAC', macKey, macData)).slice(0, keySize >> 3));\n    return { ciphertext, tag, iv };\n}\nasync function gcmEncrypt(enc, plaintext, cek, iv, aad) {\n    let encKey;\n    if (cek instanceof Uint8Array) {\n        encKey = await crypto.subtle.importKey('raw', cek, 'AES-GCM', false, ['encrypt']);\n    }\n    else {\n        checkEncCryptoKey(cek, enc, 'encrypt');\n        encKey = cek;\n    }\n    const encrypted = new Uint8Array(await crypto.subtle.encrypt({\n        additionalData: aad,\n        iv,\n        name: 'AES-GCM',\n        tagLength: 128,\n    }, encKey, plaintext));\n    const tag = encrypted.slice(-16);\n    const ciphertext = encrypted.slice(0, -16);\n    return { ciphertext, tag, iv };\n}\nconst encrypt = async (enc, plaintext, cek, iv, aad) => {\n    if (!isCryptoKey(cek) && !(cek instanceof Uint8Array)) {\n        throw new TypeError(invalidKeyInput(cek, ...types, 'Uint8Array'));\n    }\n    if (iv) {\n        checkIvLength(enc, iv);\n    }\n    else {\n        iv = generateIv(enc);\n    }\n    switch (enc) {\n        case 'A128CBC-HS256':\n        case 'A192CBC-HS384':\n        case 'A256CBC-HS512':\n            if (cek instanceof Uint8Array) {\n                checkCekLength(cek, parseInt(enc.slice(-3), 10));\n            }\n            return cbcEncrypt(enc, plaintext, cek, iv, aad);\n        case 'A128GCM':\n        case 'A192GCM':\n        case 'A256GCM':\n            if (cek instanceof Uint8Array) {\n                checkCekLength(cek, parseInt(enc.slice(1, 4), 10));\n            }\n            return gcmEncrypt(enc, plaintext, cek, iv, aad);\n        default:\n            throw new JOSENotSupported('Unsupported JWE Content Encryption Algorithm');\n    }\n};\nexport default encrypt;\n","import encrypt from '../runtime/encrypt.js';\nimport decrypt from '../runtime/decrypt.js';\nimport { encode as base64url } from '../runtime/base64url.js';\nexport async function wrap(alg, key, cek, iv) {\n    const jweAlgorithm = alg.slice(0, 7);\n    const wrapped = await encrypt(jweAlgorithm, cek, key, iv, new Uint8Array(0));\n    return {\n        encryptedKey: wrapped.ciphertext,\n        iv: base64url(wrapped.iv),\n        tag: base64url(wrapped.tag),\n    };\n}\nexport async function unwrap(alg, key, encryptedKey, iv, tag) {\n    const jweAlgorithm = alg.slice(0, 7);\n    return decrypt(jweAlgorithm, key, encryptedKey, iv, tag, new Uint8Array(0));\n}\n","import { unwrap as aesKw } from '../runtime/aeskw.js';\nimport * as ECDH from '../runtime/ecdhes.js';\nimport { decrypt as pbes2Kw } from '../runtime/pbes2kw.js';\nimport { decrypt as rsaEs } from '../runtime/rsaes.js';\nimport { decode as base64url } from '../runtime/base64url.js';\nimport normalize from '../runtime/normalize_key.js';\nimport { JOSENotSupported, JWEInvalid } from '../util/errors.js';\nimport { bitLength as cekLength } from '../lib/cek.js';\nimport { importJWK } from '../key/import.js';\nimport checkKeyType from './check_key_type.js';\nimport isObject from './is_object.js';\nimport { unwrap as aesGcmKw } from './aesgcmkw.js';\nasync function decryptKeyManagement(alg, key, encryptedKey, joseHeader, options) {\n    checkKeyType(alg, key, 'decrypt');\n    key = (await normalize.normalizePrivateKey?.(key, alg)) || key;\n    switch (alg) {\n        case 'dir': {\n            if (encryptedKey !== undefined)\n                throw new JWEInvalid('Encountered unexpected JWE Encrypted Key');\n            return key;\n        }\n        case 'ECDH-ES':\n            if (encryptedKey !== undefined)\n                throw new JWEInvalid('Encountered unexpected JWE Encrypted Key');\n        case 'ECDH-ES+A128KW':\n        case 'ECDH-ES+A192KW':\n        case 'ECDH-ES+A256KW': {\n            if (!isObject(joseHeader.epk))\n                throw new JWEInvalid(`JOSE Header \"epk\" (Ephemeral Public Key) missing or invalid`);\n            if (!ECDH.ecdhAllowed(key))\n                throw new JOSENotSupported('ECDH with the provided key is not allowed or not supported by your javascript runtime');\n            const epk = await importJWK(joseHeader.epk, alg);\n            let partyUInfo;\n            let partyVInfo;\n            if (joseHeader.apu !== undefined) {\n                if (typeof joseHeader.apu !== 'string')\n                    throw new JWEInvalid(`JOSE Header \"apu\" (Agreement PartyUInfo) invalid`);\n                try {\n                    partyUInfo = base64url(joseHeader.apu);\n                }\n                catch {\n                    throw new JWEInvalid('Failed to base64url decode the apu');\n                }\n            }\n            if (joseHeader.apv !== undefined) {\n                if (typeof joseHeader.apv !== 'string')\n                    throw new JWEInvalid(`JOSE Header \"apv\" (Agreement PartyVInfo) invalid`);\n                try {\n                    partyVInfo = base64url(joseHeader.apv);\n                }\n                catch {\n                    throw new JWEInvalid('Failed to base64url decode the apv');\n                }\n            }\n            const sharedSecret = await ECDH.deriveKey(epk, key, alg === 'ECDH-ES' ? joseHeader.enc : alg, alg === 'ECDH-ES' ? cekLength(joseHeader.enc) : parseInt(alg.slice(-5, -2), 10), partyUInfo, partyVInfo);\n            if (alg === 'ECDH-ES')\n                return sharedSecret;\n            if (encryptedKey === undefined)\n                throw new JWEInvalid('JWE Encrypted Key missing');\n            return aesKw(alg.slice(-6), sharedSecret, encryptedKey);\n        }\n        case 'RSA1_5':\n        case 'RSA-OAEP':\n        case 'RSA-OAEP-256':\n        case 'RSA-OAEP-384':\n        case 'RSA-OAEP-512': {\n            if (encryptedKey === undefined)\n                throw new JWEInvalid('JWE Encrypted Key missing');\n            return rsaEs(alg, key, encryptedKey);\n        }\n        case 'PBES2-HS256+A128KW':\n        case 'PBES2-HS384+A192KW':\n        case 'PBES2-HS512+A256KW': {\n            if (encryptedKey === undefined)\n                throw new JWEInvalid('JWE Encrypted Key missing');\n            if (typeof joseHeader.p2c !== 'number')\n                throw new JWEInvalid(`JOSE Header \"p2c\" (PBES2 Count) missing or invalid`);\n            const p2cLimit = options?.maxPBES2Count || 10000;\n            if (joseHeader.p2c > p2cLimit)\n                throw new JWEInvalid(`JOSE Header \"p2c\" (PBES2 Count) out is of acceptable bounds`);\n            if (typeof joseHeader.p2s !== 'string')\n                throw new JWEInvalid(`JOSE Header \"p2s\" (PBES2 Salt) missing or invalid`);\n            let p2s;\n            try {\n                p2s = base64url(joseHeader.p2s);\n            }\n            catch {\n                throw new JWEInvalid('Failed to base64url decode the p2s');\n            }\n            return pbes2Kw(alg, key, encryptedKey, joseHeader.p2c, p2s);\n        }\n        case 'A128KW':\n        case 'A192KW':\n        case 'A256KW': {\n            if (encryptedKey === undefined)\n                throw new JWEInvalid('JWE Encrypted Key missing');\n            return aesKw(alg, key, encryptedKey);\n        }\n        case 'A128GCMKW':\n        case 'A192GCMKW':\n        case 'A256GCMKW': {\n            if (encryptedKey === undefined)\n                throw new JWEInvalid('JWE Encrypted Key missing');\n            if (typeof joseHeader.iv !== 'string')\n                throw new JWEInvalid(`JOSE Header \"iv\" (Initialization Vector) missing or invalid`);\n            if (typeof joseHeader.tag !== 'string')\n                throw new JWEInvalid(`JOSE Header \"tag\" (Authentication Tag) missing or invalid`);\n            let iv;\n            try {\n                iv = base64url(joseHeader.iv);\n            }\n            catch {\n                throw new JWEInvalid('Failed to base64url decode the iv');\n            }\n            let tag;\n            try {\n                tag = base64url(joseHeader.tag);\n            }\n            catch {\n                throw new JWEInvalid('Failed to base64url decode the tag');\n            }\n            return aesGcmKw(alg, key, encryptedKey, iv, tag);\n        }\n        default: {\n            throw new JOSENotSupported('Invalid or unsupported \"alg\" (JWE Algorithm) header value');\n        }\n    }\n}\nexport default decryptKeyManagement;\n","import { JOSENotSupported } from '../util/errors.js';\nfunction validateCrit(Err, recognizedDefault, recognizedOption, protectedHeader, joseHeader) {\n    if (joseHeader.crit !== undefined && protectedHeader?.crit === undefined) {\n        throw new Err('\"crit\" (Critical) Header Parameter MUST be integrity protected');\n    }\n    if (!protectedHeader || protectedHeader.crit === undefined) {\n        return new Set();\n    }\n    if (!Array.isArray(protectedHeader.crit) ||\n        protectedHeader.crit.length === 0 ||\n        protectedHeader.crit.some((input) => typeof input !== 'string' || input.length === 0)) {\n        throw new Err('\"crit\" (Critical) Header Parameter MUST be an array of non-empty strings when present');\n    }\n    let recognized;\n    if (recognizedOption !== undefined) {\n        recognized = new Map([...Object.entries(recognizedOption), ...recognizedDefault.entries()]);\n    }\n    else {\n        recognized = recognizedDefault;\n    }\n    for (const parameter of protectedHeader.crit) {\n        if (!recognized.has(parameter)) {\n            throw new JOSENotSupported(`Extension Header Parameter \"${parameter}\" is not recognized`);\n        }\n        if (joseHeader[parameter] === undefined) {\n            throw new Err(`Extension Header Parameter \"${parameter}\" is missing`);\n        }\n        if (recognized.get(parameter) && protectedHeader[parameter] === undefined) {\n            throw new Err(`Extension Header Parameter \"${parameter}\" MUST be integrity protected`);\n        }\n    }\n    return new Set(protectedHeader.crit);\n}\nexport default validateCrit;\n","const validateAlgorithms = (option, algorithms) => {\n    if (algorithms !== undefined &&\n        (!Array.isArray(algorithms) || algorithms.some((s) => typeof s !== 'string'))) {\n        throw new TypeError(`\"${option}\" option must be an array of strings`);\n    }\n    if (!algorithms) {\n        return undefined;\n    }\n    return new Set(algorithms);\n};\nexport default validateAlgorithms;\n","import { decode as base64url } from '../../runtime/base64url.js';\nimport decrypt from '../../runtime/decrypt.js';\nimport { JOSEAlgNotAllowed, JOSENotSupported, JWEInvalid } from '../../util/errors.js';\nimport isDisjoint from '../../lib/is_disjoint.js';\nimport isObject from '../../lib/is_object.js';\nimport decryptKeyManagement from '../../lib/decrypt_key_management.js';\nimport { encoder, decoder, concat } from '../../lib/buffer_utils.js';\nimport generateCek from '../../lib/cek.js';\nimport validateCrit from '../../lib/validate_crit.js';\nimport validateAlgorithms from '../../lib/validate_algorithms.js';\nexport async function flattenedDecrypt(jwe, key, options) {\n    if (!isObject(jwe)) {\n        throw new JWEInvalid('Flattened JWE must be an object');\n    }\n    if (jwe.protected === undefined && jwe.header === undefined && jwe.unprotected === undefined) {\n        throw new JWEInvalid('JOSE Header missing');\n    }\n    if (jwe.iv !== undefined && typeof jwe.iv !== 'string') {\n        throw new JWEInvalid('JWE Initialization Vector incorrect type');\n    }\n    if (typeof jwe.ciphertext !== 'string') {\n        throw new JWEInvalid('JWE Ciphertext missing or incorrect type');\n    }\n    if (jwe.tag !== undefined && typeof jwe.tag !== 'string') {\n        throw new JWEInvalid('JWE Authentication Tag incorrect type');\n    }\n    if (jwe.protected !== undefined && typeof jwe.protected !== 'string') {\n        throw new JWEInvalid('JWE Protected Header incorrect type');\n    }\n    if (jwe.encrypted_key !== undefined && typeof jwe.encrypted_key !== 'string') {\n        throw new JWEInvalid('JWE Encrypted Key incorrect type');\n    }\n    if (jwe.aad !== undefined && typeof jwe.aad !== 'string') {\n        throw new JWEInvalid('JWE AAD incorrect type');\n    }\n    if (jwe.header !== undefined && !isObject(jwe.header)) {\n        throw new JWEInvalid('JWE Shared Unprotected Header incorrect type');\n    }\n    if (jwe.unprotected !== undefined && !isObject(jwe.unprotected)) {\n        throw new JWEInvalid('JWE Per-Recipient Unprotected Header incorrect type');\n    }\n    let parsedProt;\n    if (jwe.protected) {\n        try {\n            const protectedHeader = base64url(jwe.protected);\n            parsedProt = JSON.parse(decoder.decode(protectedHeader));\n        }\n        catch {\n            throw new JWEInvalid('JWE Protected Header is invalid');\n        }\n    }\n    if (!isDisjoint(parsedProt, jwe.header, jwe.unprotected)) {\n        throw new JWEInvalid('JWE Protected, JWE Unprotected Header, and JWE Per-Recipient Unprotected Header Parameter names must be disjoint');\n    }\n    const joseHeader = {\n        ...parsedProt,\n        ...jwe.header,\n        ...jwe.unprotected,\n    };\n    validateCrit(JWEInvalid, new Map(), options?.crit, parsedProt, joseHeader);\n    if (joseHeader.zip !== undefined) {\n        throw new JOSENotSupported('JWE \"zip\" (Compression Algorithm) Header Parameter is not supported.');\n    }\n    const { alg, enc } = joseHeader;\n    if (typeof alg !== 'string' || !alg) {\n        throw new JWEInvalid('missing JWE Algorithm (alg) in JWE Header');\n    }\n    if (typeof enc !== 'string' || !enc) {\n        throw new JWEInvalid('missing JWE Encryption Algorithm (enc) in JWE Header');\n    }\n    const keyManagementAlgorithms = options && validateAlgorithms('keyManagementAlgorithms', options.keyManagementAlgorithms);\n    const contentEncryptionAlgorithms = options &&\n        validateAlgorithms('contentEncryptionAlgorithms', options.contentEncryptionAlgorithms);\n    if ((keyManagementAlgorithms && !keyManagementAlgorithms.has(alg)) ||\n        (!keyManagementAlgorithms && alg.startsWith('PBES2'))) {\n        throw new JOSEAlgNotAllowed('\"alg\" (Algorithm) Header Parameter value not allowed');\n    }\n    if (contentEncryptionAlgorithms && !contentEncryptionAlgorithms.has(enc)) {\n        throw new JOSEAlgNotAllowed('\"enc\" (Encryption Algorithm) Header Parameter value not allowed');\n    }\n    let encryptedKey;\n    if (jwe.encrypted_key !== undefined) {\n        try {\n            encryptedKey = base64url(jwe.encrypted_key);\n        }\n        catch {\n            throw new JWEInvalid('Failed to base64url decode the encrypted_key');\n        }\n    }\n    let resolvedKey = false;\n    if (typeof key === 'function') {\n        key = await key(parsedProt, jwe);\n        resolvedKey = true;\n    }\n    let cek;\n    try {\n        cek = await decryptKeyManagement(alg, key, encryptedKey, joseHeader, options);\n    }\n    catch (err) {\n        if (err instanceof TypeError || err instanceof JWEInvalid || err instanceof JOSENotSupported) {\n            throw err;\n        }\n        cek = generateCek(enc);\n    }\n    let iv;\n    let tag;\n    if (jwe.iv !== undefined) {\n        try {\n            iv = base64url(jwe.iv);\n        }\n        catch {\n            throw new JWEInvalid('Failed to base64url decode the iv');\n        }\n    }\n    if (jwe.tag !== undefined) {\n        try {\n            tag = base64url(jwe.tag);\n        }\n        catch {\n            throw new JWEInvalid('Failed to base64url decode the tag');\n        }\n    }\n    const protectedHeader = encoder.encode(jwe.protected ?? '');\n    let additionalData;\n    if (jwe.aad !== undefined) {\n        additionalData = concat(protectedHeader, encoder.encode('.'), encoder.encode(jwe.aad));\n    }\n    else {\n        additionalData = protectedHeader;\n    }\n    let ciphertext;\n    try {\n        ciphertext = base64url(jwe.ciphertext);\n    }\n    catch {\n        throw new JWEInvalid('Failed to base64url decode the ciphertext');\n    }\n    const plaintext = await decrypt(enc, cek, ciphertext, iv, tag, additionalData);\n    const result = { plaintext };\n    if (jwe.protected !== undefined) {\n        result.protectedHeader = parsedProt;\n    }\n    if (jwe.aad !== undefined) {\n        try {\n            result.additionalAuthenticatedData = base64url(jwe.aad);\n        }\n        catch {\n            throw new JWEInvalid('Failed to base64url decode the aad');\n        }\n    }\n    if (jwe.unprotected !== undefined) {\n        result.sharedUnprotectedHeader = jwe.unprotected;\n    }\n    if (jwe.header !== undefined) {\n        result.unprotectedHeader = jwe.header;\n    }\n    if (resolvedKey) {\n        return { ...result, key };\n    }\n    return result;\n}\n","import { flattenedDecrypt } from '../flattened/decrypt.js';\nimport { JWEInvalid } from '../../util/errors.js';\nimport { decoder } from '../../lib/buffer_utils.js';\nexport async function compactDecrypt(jwe, key, options) {\n    if (jwe instanceof Uint8Array) {\n        jwe = decoder.decode(jwe);\n    }\n    if (typeof jwe !== 'string') {\n        throw new JWEInvalid('Compact JWE must be a string or Uint8Array');\n    }\n    const { 0: protectedHeader, 1: encryptedKey, 2: iv, 3: ciphertext, 4: tag, length, } = jwe.split('.');\n    if (length !== 5) {\n        throw new JWEInvalid('Invalid Compact JWE');\n    }\n    const decrypted = await flattenedDecrypt({\n        ciphertext,\n        iv: iv || undefined,\n        protected: protectedHeader,\n        tag: tag || undefined,\n        encrypted_key: encryptedKey || undefined,\n    }, key, options);\n    const result = { plaintext: decrypted.plaintext, protectedHeader: decrypted.protectedHeader };\n    if (typeof key === 'function') {\n        return { ...result, key: decrypted.key };\n    }\n    return result;\n}\n","import { flattenedDecrypt } from '../flattened/decrypt.js';\nimport { JWEDecryptionFailed, JWEInvalid } from '../../util/errors.js';\nimport isObject from '../../lib/is_object.js';\nexport async function generalDecrypt(jwe, key, options) {\n    if (!isObject(jwe)) {\n        throw new JWEInvalid('General JWE must be an object');\n    }\n    if (!Array.isArray(jwe.recipients) || !jwe.recipients.every(isObject)) {\n        throw new JWEInvalid('JWE Recipients missing or incorrect type');\n    }\n    if (!jwe.recipients.length) {\n        throw new JWEInvalid('JWE Recipients has no members');\n    }\n    for (const recipient of jwe.recipients) {\n        try {\n            return await flattenedDecrypt({\n                aad: jwe.aad,\n                ciphertext: jwe.ciphertext,\n                encrypted_key: recipient.encrypted_key,\n                header: recipient.header,\n                iv: jwe.iv,\n                protected: jwe.protected,\n                tag: jwe.tag,\n                unprotected: jwe.unprotected,\n            }, key, options);\n        }\n        catch {\n        }\n    }\n    throw new JWEDecryptionFailed();\n}\n","export const unprotected = Symbol();\n","import crypto, { isCryptoKey } from './webcrypto.js';\nimport invalidKeyInput from '../lib/invalid_key_input.js';\nimport { encode as base64url } from './base64url.js';\nimport { types } from './is_key_like.js';\nconst keyToJWK = async (key) => {\n    if (key instanceof Uint8Array) {\n        return {\n            kty: 'oct',\n            k: base64url(key),\n        };\n    }\n    if (!isCryptoKey(key)) {\n        throw new TypeError(invalidKeyInput(key, ...types, 'Uint8Array'));\n    }\n    if (!key.extractable) {\n        throw new TypeError('non-extractable CryptoKey cannot be exported as a JWK');\n    }\n    const { ext, key_ops, alg, use, ...jwk } = await crypto.subtle.exportKey('jwk', key);\n    return jwk;\n};\nexport default keyToJWK;\n","import { toSPKI as exportPublic } from '../runtime/asn1.js';\nimport { toPKCS8 as exportPrivate } from '../runtime/asn1.js';\nimport keyToJWK from '../runtime/key_to_jwk.js';\nexport async function exportSPKI(key) {\n    return exportPublic(key);\n}\nexport async function exportPKCS8(key) {\n    return exportPrivate(key);\n}\nexport async function exportJWK(key) {\n    return keyToJWK(key);\n}\n","import { wrap as aesKw } from '../runtime/aeskw.js';\nimport * as ECDH from '../runtime/ecdhes.js';\nimport { encrypt as pbes2Kw } from '../runtime/pbes2kw.js';\nimport { encrypt as rsaEs } from '../runtime/rsaes.js';\nimport { encode as base64url } from '../runtime/base64url.js';\nimport normalize from '../runtime/normalize_key.js';\nimport generateCek, { bitLength as cekLength } from '../lib/cek.js';\nimport { JOSENotSupported } from '../util/errors.js';\nimport { exportJWK } from '../key/export.js';\nimport checkKeyType from './check_key_type.js';\nimport { wrap as aesGcmKw } from './aesgcmkw.js';\nasync function encryptKeyManagement(alg, enc, key, providedCek, providedParameters = {}) {\n    let encryptedKey;\n    let parameters;\n    let cek;\n    checkKeyType(alg, key, 'encrypt');\n    key = (await normalize.normalizePublicKey?.(key, alg)) || key;\n    switch (alg) {\n        case 'dir': {\n            cek = key;\n            break;\n        }\n        case 'ECDH-ES':\n        case 'ECDH-ES+A128KW':\n        case 'ECDH-ES+A192KW':\n        case 'ECDH-ES+A256KW': {\n            if (!ECDH.ecdhAllowed(key)) {\n                throw new JOSENotSupported('ECDH with the provided key is not allowed or not supported by your javascript runtime');\n            }\n            const { apu, apv } = providedParameters;\n            let { epk: ephemeralKey } = providedParameters;\n            ephemeralKey || (ephemeralKey = (await ECDH.generateEpk(key)).privateKey);\n            const { x, y, crv, kty } = await exportJWK(ephemeralKey);\n            const sharedSecret = await ECDH.deriveKey(key, ephemeralKey, alg === 'ECDH-ES' ? enc : alg, alg === 'ECDH-ES' ? cekLength(enc) : parseInt(alg.slice(-5, -2), 10), apu, apv);\n            parameters = { epk: { x, crv, kty } };\n            if (kty === 'EC')\n                parameters.epk.y = y;\n            if (apu)\n                parameters.apu = base64url(apu);\n            if (apv)\n                parameters.apv = base64url(apv);\n            if (alg === 'ECDH-ES') {\n                cek = sharedSecret;\n                break;\n            }\n            cek = providedCek || generateCek(enc);\n            const kwAlg = alg.slice(-6);\n            encryptedKey = await aesKw(kwAlg, sharedSecret, cek);\n            break;\n        }\n        case 'RSA1_5':\n        case 'RSA-OAEP':\n        case 'RSA-OAEP-256':\n        case 'RSA-OAEP-384':\n        case 'RSA-OAEP-512': {\n            cek = providedCek || generateCek(enc);\n            encryptedKey = await rsaEs(alg, key, cek);\n            break;\n        }\n        case 'PBES2-HS256+A128KW':\n        case 'PBES2-HS384+A192KW':\n        case 'PBES2-HS512+A256KW': {\n            cek = providedCek || generateCek(enc);\n            const { p2c, p2s } = providedParameters;\n            ({ encryptedKey, ...parameters } = await pbes2Kw(alg, key, cek, p2c, p2s));\n            break;\n        }\n        case 'A128KW':\n        case 'A192KW':\n        case 'A256KW': {\n            cek = providedCek || generateCek(enc);\n            encryptedKey = await aesKw(alg, key, cek);\n            break;\n        }\n        case 'A128GCMKW':\n        case 'A192GCMKW':\n        case 'A256GCMKW': {\n            cek = providedCek || generateCek(enc);\n            const { iv } = providedParameters;\n            ({ encryptedKey, ...parameters } = await aesGcmKw(alg, key, cek, iv));\n            break;\n        }\n        default: {\n            throw new JOSENotSupported('Invalid or unsupported \"alg\" (JWE Algorithm) header value');\n        }\n    }\n    return { cek, encryptedKey, parameters };\n}\nexport default encryptKeyManagement;\n","import { encode as base64url } from '../../runtime/base64url.js';\nimport { unprotected } from '../../lib/private_symbols.js';\nimport encrypt from '../../runtime/encrypt.js';\nimport encryptKeyManagement from '../../lib/encrypt_key_management.js';\nimport { JOSENotSupported, JWEInvalid } from '../../util/errors.js';\nimport isDisjoint from '../../lib/is_disjoint.js';\nimport { encoder, decoder, concat } from '../../lib/buffer_utils.js';\nimport validateCrit from '../../lib/validate_crit.js';\nexport class FlattenedEncrypt {\n    constructor(plaintext) {\n        if (!(plaintext instanceof Uint8Array)) {\n            throw new TypeError('plaintext must be an instance of Uint8Array');\n        }\n        this._plaintext = plaintext;\n    }\n    setKeyManagementParameters(parameters) {\n        if (this._keyManagementParameters) {\n            throw new TypeError('setKeyManagementParameters can only be called once');\n        }\n        this._keyManagementParameters = parameters;\n        return this;\n    }\n    setProtectedHeader(protectedHeader) {\n        if (this._protectedHeader) {\n            throw new TypeError('setProtectedHeader can only be called once');\n        }\n        this._protectedHeader = protectedHeader;\n        return this;\n    }\n    setSharedUnprotectedHeader(sharedUnprotectedHeader) {\n        if (this._sharedUnprotectedHeader) {\n            throw new TypeError('setSharedUnprotectedHeader can only be called once');\n        }\n        this._sharedUnprotectedHeader = sharedUnprotectedHeader;\n        return this;\n    }\n    setUnprotectedHeader(unprotectedHeader) {\n        if (this._unprotectedHeader) {\n            throw new TypeError('setUnprotectedHeader can only be called once');\n        }\n        this._unprotectedHeader = unprotectedHeader;\n        return this;\n    }\n    setAdditionalAuthenticatedData(aad) {\n        this._aad = aad;\n        return this;\n    }\n    setContentEncryptionKey(cek) {\n        if (this._cek) {\n            throw new TypeError('setContentEncryptionKey can only be called once');\n        }\n        this._cek = cek;\n        return this;\n    }\n    setInitializationVector(iv) {\n        if (this._iv) {\n            throw new TypeError('setInitializationVector can only be called once');\n        }\n        this._iv = iv;\n        return this;\n    }\n    async encrypt(key, options) {\n        if (!this._protectedHeader && !this._unprotectedHeader && !this._sharedUnprotectedHeader) {\n            throw new JWEInvalid('either setProtectedHeader, setUnprotectedHeader, or sharedUnprotectedHeader must be called before #encrypt()');\n        }\n        if (!isDisjoint(this._protectedHeader, this._unprotectedHeader, this._sharedUnprotectedHeader)) {\n            throw new JWEInvalid('JWE Protected, JWE Shared Unprotected and JWE Per-Recipient Header Parameter names must be disjoint');\n        }\n        const joseHeader = {\n            ...this._protectedHeader,\n            ...this._unprotectedHeader,\n            ...this._sharedUnprotectedHeader,\n        };\n        validateCrit(JWEInvalid, new Map(), options?.crit, this._protectedHeader, joseHeader);\n        if (joseHeader.zip !== undefined) {\n            throw new JOSENotSupported('JWE \"zip\" (Compression Algorithm) Header Parameter is not supported.');\n        }\n        const { alg, enc } = joseHeader;\n        if (typeof alg !== 'string' || !alg) {\n            throw new JWEInvalid('JWE \"alg\" (Algorithm) Header Parameter missing or invalid');\n        }\n        if (typeof enc !== 'string' || !enc) {\n            throw new JWEInvalid('JWE \"enc\" (Encryption Algorithm) Header Parameter missing or invalid');\n        }\n        let encryptedKey;\n        if (this._cek && (alg === 'dir' || alg === 'ECDH-ES')) {\n            throw new TypeError(`setContentEncryptionKey cannot be called with JWE \"alg\" (Algorithm) Header ${alg}`);\n        }\n        let cek;\n        {\n            let parameters;\n            ({ cek, encryptedKey, parameters } = await encryptKeyManagement(alg, enc, key, this._cek, this._keyManagementParameters));\n            if (parameters) {\n                if (options && unprotected in options) {\n                    if (!this._unprotectedHeader) {\n                        this.setUnprotectedHeader(parameters);\n                    }\n                    else {\n                        this._unprotectedHeader = { ...this._unprotectedHeader, ...parameters };\n                    }\n                }\n                else if (!this._protectedHeader) {\n                    this.setProtectedHeader(parameters);\n                }\n                else {\n                    this._protectedHeader = { ...this._protectedHeader, ...parameters };\n                }\n            }\n        }\n        let additionalData;\n        let protectedHeader;\n        let aadMember;\n        if (this._protectedHeader) {\n            protectedHeader = encoder.encode(base64url(JSON.stringify(this._protectedHeader)));\n        }\n        else {\n            protectedHeader = encoder.encode('');\n        }\n        if (this._aad) {\n            aadMember = base64url(this._aad);\n            additionalData = concat(protectedHeader, encoder.encode('.'), encoder.encode(aadMember));\n        }\n        else {\n            additionalData = protectedHeader;\n        }\n        const { ciphertext, tag, iv } = await encrypt(enc, this._plaintext, cek, this._iv, additionalData);\n        const jwe = {\n            ciphertext: base64url(ciphertext),\n        };\n        if (iv) {\n            jwe.iv = base64url(iv);\n        }\n        if (tag) {\n            jwe.tag = base64url(tag);\n        }\n        if (encryptedKey) {\n            jwe.encrypted_key = base64url(encryptedKey);\n        }\n        if (aadMember) {\n            jwe.aad = aadMember;\n        }\n        if (this._protectedHeader) {\n            jwe.protected = decoder.decode(protectedHeader);\n        }\n        if (this._sharedUnprotectedHeader) {\n            jwe.unprotected = this._sharedUnprotectedHeader;\n        }\n        if (this._unprotectedHeader) {\n            jwe.header = this._unprotectedHeader;\n        }\n        return jwe;\n    }\n}\n","import { FlattenedEncrypt } from '../flattened/encrypt.js';\nimport { unprotected } from '../../lib/private_symbols.js';\nimport { JOSENotSupported, JWEInvalid } from '../../util/errors.js';\nimport generateCek from '../../lib/cek.js';\nimport isDisjoint from '../../lib/is_disjoint.js';\nimport encryptKeyManagement from '../../lib/encrypt_key_management.js';\nimport { encode as base64url } from '../../runtime/base64url.js';\nimport validateCrit from '../../lib/validate_crit.js';\nclass IndividualRecipient {\n    constructor(enc, key, options) {\n        this.parent = enc;\n        this.key = key;\n        this.options = options;\n    }\n    setUnprotectedHeader(unprotectedHeader) {\n        if (this.unprotectedHeader) {\n            throw new TypeError('setUnprotectedHeader can only be called once');\n        }\n        this.unprotectedHeader = unprotectedHeader;\n        return this;\n    }\n    addRecipient(...args) {\n        return this.parent.addRecipient(...args);\n    }\n    encrypt(...args) {\n        return this.parent.encrypt(...args);\n    }\n    done() {\n        return this.parent;\n    }\n}\nexport class GeneralEncrypt {\n    constructor(plaintext) {\n        this._recipients = [];\n        this._plaintext = plaintext;\n    }\n    addRecipient(key, options) {\n        const recipient = new IndividualRecipient(this, key, { crit: options?.crit });\n        this._recipients.push(recipient);\n        return recipient;\n    }\n    setProtectedHeader(protectedHeader) {\n        if (this._protectedHeader) {\n            throw new TypeError('setProtectedHeader can only be called once');\n        }\n        this._protectedHeader = protectedHeader;\n        return this;\n    }\n    setSharedUnprotectedHeader(sharedUnprotectedHeader) {\n        if (this._unprotectedHeader) {\n            throw new TypeError('setSharedUnprotectedHeader can only be called once');\n        }\n        this._unprotectedHeader = sharedUnprotectedHeader;\n        return this;\n    }\n    setAdditionalAuthenticatedData(aad) {\n        this._aad = aad;\n        return this;\n    }\n    async encrypt() {\n        if (!this._recipients.length) {\n            throw new JWEInvalid('at least one recipient must be added');\n        }\n        if (this._recipients.length === 1) {\n            const [recipient] = this._recipients;\n            const flattened = await new FlattenedEncrypt(this._plaintext)\n                .setAdditionalAuthenticatedData(this._aad)\n                .setProtectedHeader(this._protectedHeader)\n                .setSharedUnprotectedHeader(this._unprotectedHeader)\n                .setUnprotectedHeader(recipient.unprotectedHeader)\n                .encrypt(recipient.key, { ...recipient.options });\n            const jwe = {\n                ciphertext: flattened.ciphertext,\n                iv: flattened.iv,\n                recipients: [{}],\n                tag: flattened.tag,\n            };\n            if (flattened.aad)\n                jwe.aad = flattened.aad;\n            if (flattened.protected)\n                jwe.protected = flattened.protected;\n            if (flattened.unprotected)\n                jwe.unprotected = flattened.unprotected;\n            if (flattened.encrypted_key)\n                jwe.recipients[0].encrypted_key = flattened.encrypted_key;\n            if (flattened.header)\n                jwe.recipients[0].header = flattened.header;\n            return jwe;\n        }\n        let enc;\n        for (let i = 0; i < this._recipients.length; i++) {\n            const recipient = this._recipients[i];\n            if (!isDisjoint(this._protectedHeader, this._unprotectedHeader, recipient.unprotectedHeader)) {\n                throw new JWEInvalid('JWE Protected, JWE Shared Unprotected and JWE Per-Recipient Header Parameter names must be disjoint');\n            }\n            const joseHeader = {\n                ...this._protectedHeader,\n                ...this._unprotectedHeader,\n                ...recipient.unprotectedHeader,\n            };\n            const { alg } = joseHeader;\n            if (typeof alg !== 'string' || !alg) {\n                throw new JWEInvalid('JWE \"alg\" (Algorithm) Header Parameter missing or invalid');\n            }\n            if (alg === 'dir' || alg === 'ECDH-ES') {\n                throw new JWEInvalid('\"dir\" and \"ECDH-ES\" alg may only be used with a single recipient');\n            }\n            if (typeof joseHeader.enc !== 'string' || !joseHeader.enc) {\n                throw new JWEInvalid('JWE \"enc\" (Encryption Algorithm) Header Parameter missing or invalid');\n            }\n            if (!enc) {\n                enc = joseHeader.enc;\n            }\n            else if (enc !== joseHeader.enc) {\n                throw new JWEInvalid('JWE \"enc\" (Encryption Algorithm) Header Parameter must be the same for all recipients');\n            }\n            validateCrit(JWEInvalid, new Map(), recipient.options.crit, this._protectedHeader, joseHeader);\n            if (joseHeader.zip !== undefined) {\n                throw new JOSENotSupported('JWE \"zip\" (Compression Algorithm) Header Parameter is not supported.');\n            }\n        }\n        const cek = generateCek(enc);\n        const jwe = {\n            ciphertext: '',\n            iv: '',\n            recipients: [],\n            tag: '',\n        };\n        for (let i = 0; i < this._recipients.length; i++) {\n            const recipient = this._recipients[i];\n            const target = {};\n            jwe.recipients.push(target);\n            const joseHeader = {\n                ...this._protectedHeader,\n                ...this._unprotectedHeader,\n                ...recipient.unprotectedHeader,\n            };\n            const p2c = joseHeader.alg.startsWith('PBES2') ? 2048 + i : undefined;\n            if (i === 0) {\n                const flattened = await new FlattenedEncrypt(this._plaintext)\n                    .setAdditionalAuthenticatedData(this._aad)\n                    .setContentEncryptionKey(cek)\n                    .setProtectedHeader(this._protectedHeader)\n                    .setSharedUnprotectedHeader(this._unprotectedHeader)\n                    .setUnprotectedHeader(recipient.unprotectedHeader)\n                    .setKeyManagementParameters({ p2c })\n                    .encrypt(recipient.key, {\n                    ...recipient.options,\n                    [unprotected]: true,\n                });\n                jwe.ciphertext = flattened.ciphertext;\n                jwe.iv = flattened.iv;\n                jwe.tag = flattened.tag;\n                if (flattened.aad)\n                    jwe.aad = flattened.aad;\n                if (flattened.protected)\n                    jwe.protected = flattened.protected;\n                if (flattened.unprotected)\n                    jwe.unprotected = flattened.unprotected;\n                target.encrypted_key = flattened.encrypted_key;\n                if (flattened.header)\n                    target.header = flattened.header;\n                continue;\n            }\n            const { encryptedKey, parameters } = await encryptKeyManagement(recipient.unprotectedHeader?.alg ||\n                this._protectedHeader?.alg ||\n                this._unprotectedHeader?.alg, enc, recipient.key, cek, { p2c });\n            target.encrypted_key = base64url(encryptedKey);\n            if (recipient.unprotectedHeader || parameters)\n                target.header = { ...recipient.unprotectedHeader, ...parameters };\n        }\n        return jwe;\n    }\n}\n","import { JOSENotSupported } from '../util/errors.js';\nexport default function subtleDsa(alg, algorithm) {\n    const hash = `SHA-${alg.slice(-3)}`;\n    switch (alg) {\n        case 'HS256':\n        case 'HS384':\n        case 'HS512':\n            return { hash, name: 'HMAC' };\n        case 'PS256':\n        case 'PS384':\n        case 'PS512':\n            return { hash, name: 'RSA-PSS', saltLength: alg.slice(-3) >> 3 };\n        case 'RS256':\n        case 'RS384':\n        case 'RS512':\n            return { hash, name: 'RSASSA-PKCS1-v1_5' };\n        case 'ES256':\n        case 'ES384':\n        case 'ES512':\n            return { hash, name: 'ECDSA', namedCurve: algorithm.namedCurve };\n        case 'EdDSA':\n            return { name: algorithm.name };\n        default:\n            throw new JOSENotSupported(`alg ${alg} is not supported either by JOSE or your javascript runtime`);\n    }\n}\n","import crypto, { isCryptoKey } from './webcrypto.js';\nimport { checkSigCryptoKey } from '../lib/crypto_key.js';\nimport invalidKeyInput from '../lib/invalid_key_input.js';\nimport { types } from './is_key_like.js';\nimport normalize from './normalize_key.js';\nexport default async function getCryptoKey(alg, key, usage) {\n    if (usage === 'sign') {\n        key = await normalize.normalizePrivateKey(key, alg);\n    }\n    if (usage === 'verify') {\n        key = await normalize.normalizePublicKey(key, alg);\n    }\n    if (isCryptoKey(key)) {\n        checkSigCryptoKey(key, alg, usage);\n        return key;\n    }\n    if (key instanceof Uint8Array) {\n        if (!alg.startsWith('HS')) {\n            throw new TypeError(invalidKeyInput(key, ...types));\n        }\n        return crypto.subtle.importKey('raw', key, { hash: `SHA-${alg.slice(-3)}`, name: 'HMAC' }, false, [usage]);\n    }\n    throw new TypeError(invalidKeyInput(key, ...types, 'Uint8Array', 'JSON Web Key'));\n}\n","import subtleAlgorithm from './subtle_dsa.js';\nimport crypto from './webcrypto.js';\nimport checkKeyLength from './check_key_length.js';\nimport getVerifyKey from './get_sign_verify_key.js';\nconst verify = async (alg, key, signature, data) => {\n    const cryptoKey = await getVerifyKey(alg, key, 'verify');\n    checkKeyLength(alg, cryptoKey);\n    const algorithm = subtleAlgorithm(alg, cryptoKey.algorithm);\n    try {\n        return await crypto.subtle.verify(algorithm, cryptoKey, signature, data);\n    }\n    catch {\n        return false;\n    }\n};\nexport default verify;\n","import { decode as base64url } from '../../runtime/base64url.js';\nimport verify from '../../runtime/verify.js';\nimport { JOSEAlgNotAllowed, JWSInvalid, JWSSignatureVerificationFailed } from '../../util/errors.js';\nimport { concat, encoder, decoder } from '../../lib/buffer_utils.js';\nimport isDisjoint from '../../lib/is_disjoint.js';\nimport isObject from '../../lib/is_object.js';\nimport { checkKeyTypeWithJwk } from '../../lib/check_key_type.js';\nimport validateCrit from '../../lib/validate_crit.js';\nimport validateAlgorithms from '../../lib/validate_algorithms.js';\nimport { isJWK } from '../../lib/is_jwk.js';\nimport { importJWK } from '../../key/import.js';\nexport async function flattenedVerify(jws, key, options) {\n    if (!isObject(jws)) {\n        throw new JWSInvalid('Flattened JWS must be an object');\n    }\n    if (jws.protected === undefined && jws.header === undefined) {\n        throw new JWSInvalid('Flattened JWS must have either of the \"protected\" or \"header\" members');\n    }\n    if (jws.protected !== undefined && typeof jws.protected !== 'string') {\n        throw new JWSInvalid('JWS Protected Header incorrect type');\n    }\n    if (jws.payload === undefined) {\n        throw new JWSInvalid('JWS Payload missing');\n    }\n    if (typeof jws.signature !== 'string') {\n        throw new JWSInvalid('JWS Signature missing or incorrect type');\n    }\n    if (jws.header !== undefined && !isObject(jws.header)) {\n        throw new JWSInvalid('JWS Unprotected Header incorrect type');\n    }\n    let parsedProt = {};\n    if (jws.protected) {\n        try {\n            const protectedHeader = base64url(jws.protected);\n            parsedProt = JSON.parse(decoder.decode(protectedHeader));\n        }\n        catch {\n            throw new JWSInvalid('JWS Protected Header is invalid');\n        }\n    }\n    if (!isDisjoint(parsedProt, jws.header)) {\n        throw new JWSInvalid('JWS Protected and JWS Unprotected Header Parameter names must be disjoint');\n    }\n    const joseHeader = {\n        ...parsedProt,\n        ...jws.header,\n    };\n    const extensions = validateCrit(JWSInvalid, new Map([['b64', true]]), options?.crit, parsedProt, joseHeader);\n    let b64 = true;\n    if (extensions.has('b64')) {\n        b64 = parsedProt.b64;\n        if (typeof b64 !== 'boolean') {\n            throw new JWSInvalid('The \"b64\" (base64url-encode payload) Header Parameter must be a boolean');\n        }\n    }\n    const { alg } = joseHeader;\n    if (typeof alg !== 'string' || !alg) {\n        throw new JWSInvalid('JWS \"alg\" (Algorithm) Header Parameter missing or invalid');\n    }\n    const algorithms = options && validateAlgorithms('algorithms', options.algorithms);\n    if (algorithms && !algorithms.has(alg)) {\n        throw new JOSEAlgNotAllowed('\"alg\" (Algorithm) Header Parameter value not allowed');\n    }\n    if (b64) {\n        if (typeof jws.payload !== 'string') {\n            throw new JWSInvalid('JWS Payload must be a string');\n        }\n    }\n    else if (typeof jws.payload !== 'string' && !(jws.payload instanceof Uint8Array)) {\n        throw new JWSInvalid('JWS Payload must be a string or an Uint8Array instance');\n    }\n    let resolvedKey = false;\n    if (typeof key === 'function') {\n        key = await key(parsedProt, jws);\n        resolvedKey = true;\n        checkKeyTypeWithJwk(alg, key, 'verify');\n        if (isJWK(key)) {\n            key = await importJWK(key, alg);\n        }\n    }\n    else {\n        checkKeyTypeWithJwk(alg, key, 'verify');\n    }\n    const data = concat(encoder.encode(jws.protected ?? ''), encoder.encode('.'), typeof jws.payload === 'string' ? encoder.encode(jws.payload) : jws.payload);\n    let signature;\n    try {\n        signature = base64url(jws.signature);\n    }\n    catch {\n        throw new JWSInvalid('Failed to base64url decode the signature');\n    }\n    const verified = await verify(alg, key, signature, data);\n    if (!verified) {\n        throw new JWSSignatureVerificationFailed();\n    }\n    let payload;\n    if (b64) {\n        try {\n            payload = base64url(jws.payload);\n        }\n        catch {\n            throw new JWSInvalid('Failed to base64url decode the payload');\n        }\n    }\n    else if (typeof jws.payload === 'string') {\n        payload = encoder.encode(jws.payload);\n    }\n    else {\n        payload = jws.payload;\n    }\n    const result = { payload };\n    if (jws.protected !== undefined) {\n        result.protectedHeader = parsedProt;\n    }\n    if (jws.header !== undefined) {\n        result.unprotectedHeader = jws.header;\n    }\n    if (resolvedKey) {\n        return { ...result, key };\n    }\n    return result;\n}\n","import { flattenedVerify } from '../flattened/verify.js';\nimport { JWSInvalid } from '../../util/errors.js';\nimport { decoder } from '../../lib/buffer_utils.js';\nexport async function compactVerify(jws, key, options) {\n    if (jws instanceof Uint8Array) {\n        jws = decoder.decode(jws);\n    }\n    if (typeof jws !== 'string') {\n        throw new JWSInvalid('Compact JWS must be a string or Uint8Array');\n    }\n    const { 0: protectedHeader, 1: payload, 2: signature, length } = jws.split('.');\n    if (length !== 3) {\n        throw new JWSInvalid('Invalid Compact JWS');\n    }\n    const verified = await flattenedVerify({ payload, protected: protectedHeader, signature }, key, options);\n    const result = { payload: verified.payload, protectedHeader: verified.protectedHeader };\n    if (typeof key === 'function') {\n        return { ...result, key: verified.key };\n    }\n    return result;\n}\n","import { flattenedVerify } from '../flattened/verify.js';\nimport { JWSInvalid, JWSSignatureVerificationFailed } from '../../util/errors.js';\nimport isObject from '../../lib/is_object.js';\nexport async function generalVerify(jws, key, options) {\n    if (!isObject(jws)) {\n        throw new JWSInvalid('General JWS must be an object');\n    }\n    if (!Array.isArray(jws.signatures) || !jws.signatures.every(isObject)) {\n        throw new JWSInvalid('JWS Signatures missing or incorrect type');\n    }\n    for (const signature of jws.signatures) {\n        try {\n            return await flattenedVerify({\n                header: signature.header,\n                payload: jws.payload,\n                protected: signature.protected,\n                signature: signature.signature,\n            }, key, options);\n        }\n        catch {\n        }\n    }\n    throw new JWSSignatureVerificationFailed();\n}\n","export default (date) => Math.floor(date.getTime() / 1000);\n","const minute = 60;\nconst hour = minute * 60;\nconst day = hour * 24;\nconst week = day * 7;\nconst year = day * 365.25;\nconst REGEX = /^(\\+|\\-)? ?(\\d+|\\d+\\.\\d+) ?(seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|weeks?|w|years?|yrs?|y)(?: (ago|from now))?$/i;\nexport default (str) => {\n    const matched = REGEX.exec(str);\n    if (!matched || (matched[4] && matched[1])) {\n        throw new TypeError('Invalid time period format');\n    }\n    const value = parseFloat(matched[2]);\n    const unit = matched[3].toLowerCase();\n    let numericDate;\n    switch (unit) {\n        case 'sec':\n        case 'secs':\n        case 'second':\n        case 'seconds':\n        case 's':\n            numericDate = Math.round(value);\n            break;\n        case 'minute':\n        case 'minutes':\n        case 'min':\n        case 'mins':\n        case 'm':\n            numericDate = Math.round(value * minute);\n            break;\n        case 'hour':\n        case 'hours':\n        case 'hr':\n        case 'hrs':\n        case 'h':\n            numericDate = Math.round(value * hour);\n            break;\n        case 'day':\n        case 'days':\n        case 'd':\n            numericDate = Math.round(value * day);\n            break;\n        case 'week':\n        case 'weeks':\n        case 'w':\n            numericDate = Math.round(value * week);\n            break;\n        default:\n            numericDate = Math.round(value * year);\n            break;\n    }\n    if (matched[1] === '-' || matched[4] === 'ago') {\n        return -numericDate;\n    }\n    return numericDate;\n};\n","import { JWTClaimValidationFailed, JWTExpired, JWTInvalid } from '../util/errors.js';\nimport { decoder } from './buffer_utils.js';\nimport epoch from './epoch.js';\nimport secs from './secs.js';\nimport isObject from './is_object.js';\nconst normalizeTyp = (value) => value.toLowerCase().replace(/^application\\//, '');\nconst checkAudiencePresence = (audPayload, audOption) => {\n    if (typeof audPayload === 'string') {\n        return audOption.includes(audPayload);\n    }\n    if (Array.isArray(audPayload)) {\n        return audOption.some(Set.prototype.has.bind(new Set(audPayload)));\n    }\n    return false;\n};\nexport default (protectedHeader, encodedPayload, options = {}) => {\n    let payload;\n    try {\n        payload = JSON.parse(decoder.decode(encodedPayload));\n    }\n    catch {\n    }\n    if (!isObject(payload)) {\n        throw new JWTInvalid('JWT Claims Set must be a top-level JSON object');\n    }\n    const { typ } = options;\n    if (typ &&\n        (typeof protectedHeader.typ !== 'string' ||\n            normalizeTyp(protectedHeader.typ) !== normalizeTyp(typ))) {\n        throw new JWTClaimValidationFailed('unexpected \"typ\" JWT header value', payload, 'typ', 'check_failed');\n    }\n    const { requiredClaims = [], issuer, subject, audience, maxTokenAge } = options;\n    const presenceCheck = [...requiredClaims];\n    if (maxTokenAge !== undefined)\n        presenceCheck.push('iat');\n    if (audience !== undefined)\n        presenceCheck.push('aud');\n    if (subject !== undefined)\n        presenceCheck.push('sub');\n    if (issuer !== undefined)\n        presenceCheck.push('iss');\n    for (const claim of new Set(presenceCheck.reverse())) {\n        if (!(claim in payload)) {\n            throw new JWTClaimValidationFailed(`missing required \"${claim}\" claim`, payload, claim, 'missing');\n        }\n    }\n    if (issuer &&\n        !(Array.isArray(issuer) ? issuer : [issuer]).includes(payload.iss)) {\n        throw new JWTClaimValidationFailed('unexpected \"iss\" claim value', payload, 'iss', 'check_failed');\n    }\n    if (subject && payload.sub !== subject) {\n        throw new JWTClaimValidationFailed('unexpected \"sub\" claim value', payload, 'sub', 'check_failed');\n    }\n    if (audience &&\n        !checkAudiencePresence(payload.aud, typeof audience === 'string' ? [audience] : audience)) {\n        throw new JWTClaimValidationFailed('unexpected \"aud\" claim value', payload, 'aud', 'check_failed');\n    }\n    let tolerance;\n    switch (typeof options.clockTolerance) {\n        case 'string':\n            tolerance = secs(options.clockTolerance);\n            break;\n        case 'number':\n            tolerance = options.clockTolerance;\n            break;\n        case 'undefined':\n            tolerance = 0;\n            break;\n        default:\n            throw new TypeError('Invalid clockTolerance option type');\n    }\n    const { currentDate } = options;\n    const now = epoch(currentDate || new Date());\n    if ((payload.iat !== undefined || maxTokenAge) && typeof payload.iat !== 'number') {\n        throw new JWTClaimValidationFailed('\"iat\" claim must be a number', payload, 'iat', 'invalid');\n    }\n    if (payload.nbf !== undefined) {\n        if (typeof payload.nbf !== 'number') {\n            throw new JWTClaimValidationFailed('\"nbf\" claim must be a number', payload, 'nbf', 'invalid');\n        }\n        if (payload.nbf > now + tolerance) {\n            throw new JWTClaimValidationFailed('\"nbf\" claim timestamp check failed', payload, 'nbf', 'check_failed');\n        }\n    }\n    if (payload.exp !== undefined) {\n        if (typeof payload.exp !== 'number') {\n            throw new JWTClaimValidationFailed('\"exp\" claim must be a number', payload, 'exp', 'invalid');\n        }\n        if (payload.exp <= now - tolerance) {\n            throw new JWTExpired('\"exp\" claim timestamp check failed', payload, 'exp', 'check_failed');\n        }\n    }\n    if (maxTokenAge) {\n        const age = now - payload.iat;\n        const max = typeof maxTokenAge === 'number' ? maxTokenAge : secs(maxTokenAge);\n        if (age - tolerance > max) {\n            throw new JWTExpired('\"iat\" claim timestamp check failed (too far in the past)', payload, 'iat', 'check_failed');\n        }\n        if (age < 0 - tolerance) {\n            throw new JWTClaimValidationFailed('\"iat\" claim timestamp check failed (it should be in the past)', payload, 'iat', 'check_failed');\n        }\n    }\n    return payload;\n};\n","import { compactVerify } from '../jws/compact/verify.js';\nimport jwtPayload from '../lib/jwt_claims_set.js';\nimport { JWTInvalid } from '../util/errors.js';\nexport async function jwtVerify(jwt, key, options) {\n    const verified = await compactVerify(jwt, key, options);\n    if (verified.protectedHeader.crit?.includes('b64') && verified.protectedHeader.b64 === false) {\n        throw new JWTInvalid('JWTs MUST NOT use unencoded payload');\n    }\n    const payload = jwtPayload(verified.protectedHeader, verified.payload, options);\n    const result = { payload, protectedHeader: verified.protectedHeader };\n    if (typeof key === 'function') {\n        return { ...result, key: verified.key };\n    }\n    return result;\n}\n","import { compactDecrypt } from '../jwe/compact/decrypt.js';\nimport jwtPayload from '../lib/jwt_claims_set.js';\nimport { JWTClaimValidationFailed } from '../util/errors.js';\nexport async function jwtDecrypt(jwt, key, options) {\n    const decrypted = await compactDecrypt(jwt, key, options);\n    const payload = jwtPayload(decrypted.protectedHeader, decrypted.plaintext, options);\n    const { protectedHeader } = decrypted;\n    if (protectedHeader.iss !== undefined && protectedHeader.iss !== payload.iss) {\n        throw new JWTClaimValidationFailed('replicated \"iss\" claim header parameter mismatch', payload, 'iss', 'mismatch');\n    }\n    if (protectedHeader.sub !== undefined && protectedHeader.sub !== payload.sub) {\n        throw new JWTClaimValidationFailed('replicated \"sub\" claim header parameter mismatch', payload, 'sub', 'mismatch');\n    }\n    if (protectedHeader.aud !== undefined &&\n        JSON.stringify(protectedHeader.aud) !== JSON.stringify(payload.aud)) {\n        throw new JWTClaimValidationFailed('replicated \"aud\" claim header parameter mismatch', payload, 'aud', 'mismatch');\n    }\n    const result = { payload, protectedHeader };\n    if (typeof key === 'function') {\n        return { ...result, key: decrypted.key };\n    }\n    return result;\n}\n","import { FlattenedEncrypt } from '../flattened/encrypt.js';\nexport class CompactEncrypt {\n    constructor(plaintext) {\n        this._flattened = new FlattenedEncrypt(plaintext);\n    }\n    setContentEncryptionKey(cek) {\n        this._flattened.setContentEncryptionKey(cek);\n        return this;\n    }\n    setInitializationVector(iv) {\n        this._flattened.setInitializationVector(iv);\n        return this;\n    }\n    setProtectedHeader(protectedHeader) {\n        this._flattened.setProtectedHeader(protectedHeader);\n        return this;\n    }\n    setKeyManagementParameters(parameters) {\n        this._flattened.setKeyManagementParameters(parameters);\n        return this;\n    }\n    async encrypt(key, options) {\n        const jwe = await this._flattened.encrypt(key, options);\n        return [jwe.protected, jwe.encrypted_key, jwe.iv, jwe.ciphertext, jwe.tag].join('.');\n    }\n}\n","import subtleAlgorithm from './subtle_dsa.js';\nimport crypto from './webcrypto.js';\nimport checkKeyLength from './check_key_length.js';\nimport getSignKey from './get_sign_verify_key.js';\nconst sign = async (alg, key, data) => {\n    const cryptoKey = await getSignKey(alg, key, 'sign');\n    checkKeyLength(alg, cryptoKey);\n    const signature = await crypto.subtle.sign(subtleAlgorithm(alg, cryptoKey.algorithm), cryptoKey, data);\n    return new Uint8Array(signature);\n};\nexport default sign;\n","import { encode as base64url } from '../../runtime/base64url.js';\nimport sign from '../../runtime/sign.js';\nimport isDisjoint from '../../lib/is_disjoint.js';\nimport { JWSInvalid } from '../../util/errors.js';\nimport { encoder, decoder, concat } from '../../lib/buffer_utils.js';\nimport { checkKeyTypeWithJwk } from '../../lib/check_key_type.js';\nimport validateCrit from '../../lib/validate_crit.js';\nexport class FlattenedSign {\n    constructor(payload) {\n        if (!(payload instanceof Uint8Array)) {\n            throw new TypeError('payload must be an instance of Uint8Array');\n        }\n        this._payload = payload;\n    }\n    setProtectedHeader(protectedHeader) {\n        if (this._protectedHeader) {\n            throw new TypeError('setProtectedHeader can only be called once');\n        }\n        this._protectedHeader = protectedHeader;\n        return this;\n    }\n    setUnprotectedHeader(unprotectedHeader) {\n        if (this._unprotectedHeader) {\n            throw new TypeError('setUnprotectedHeader can only be called once');\n        }\n        this._unprotectedHeader = unprotectedHeader;\n        return this;\n    }\n    async sign(key, options) {\n        if (!this._protectedHeader && !this._unprotectedHeader) {\n            throw new JWSInvalid('either setProtectedHeader or setUnprotectedHeader must be called before #sign()');\n        }\n        if (!isDisjoint(this._protectedHeader, this._unprotectedHeader)) {\n            throw new JWSInvalid('JWS Protected and JWS Unprotected Header Parameter names must be disjoint');\n        }\n        const joseHeader = {\n            ...this._protectedHeader,\n            ...this._unprotectedHeader,\n        };\n        const extensions = validateCrit(JWSInvalid, new Map([['b64', true]]), options?.crit, this._protectedHeader, joseHeader);\n        let b64 = true;\n        if (extensions.has('b64')) {\n            b64 = this._protectedHeader.b64;\n            if (typeof b64 !== 'boolean') {\n                throw new JWSInvalid('The \"b64\" (base64url-encode payload) Header Parameter must be a boolean');\n            }\n        }\n        const { alg } = joseHeader;\n        if (typeof alg !== 'string' || !alg) {\n            throw new JWSInvalid('JWS \"alg\" (Algorithm) Header Parameter missing or invalid');\n        }\n        checkKeyTypeWithJwk(alg, key, 'sign');\n        let payload = this._payload;\n        if (b64) {\n            payload = encoder.encode(base64url(payload));\n        }\n        let protectedHeader;\n        if (this._protectedHeader) {\n            protectedHeader = encoder.encode(base64url(JSON.stringify(this._protectedHeader)));\n        }\n        else {\n            protectedHeader = encoder.encode('');\n        }\n        const data = concat(protectedHeader, encoder.encode('.'), payload);\n        const signature = await sign(alg, key, data);\n        const jws = {\n            signature: base64url(signature),\n            payload: '',\n        };\n        if (b64) {\n            jws.payload = decoder.decode(payload);\n        }\n        if (this._unprotectedHeader) {\n            jws.header = this._unprotectedHeader;\n        }\n        if (this._protectedHeader) {\n            jws.protected = decoder.decode(protectedHeader);\n        }\n        return jws;\n    }\n}\n","import { FlattenedSign } from '../flattened/sign.js';\nexport class CompactSign {\n    constructor(payload) {\n        this._flattened = new FlattenedSign(payload);\n    }\n    setProtectedHeader(protectedHeader) {\n        this._flattened.setProtectedHeader(protectedHeader);\n        return this;\n    }\n    async sign(key, options) {\n        const jws = await this._flattened.sign(key, options);\n        if (jws.payload === undefined) {\n            throw new TypeError('use the flattened module for creating JWS with b64: false');\n        }\n        return `${jws.protected}.${jws.payload}.${jws.signature}`;\n    }\n}\n","import { FlattenedSign } from '../flattened/sign.js';\nimport { JWSInvalid } from '../../util/errors.js';\nclass IndividualSignature {\n    constructor(sig, key, options) {\n        this.parent = sig;\n        this.key = key;\n        this.options = options;\n    }\n    setProtectedHeader(protectedHeader) {\n        if (this.protectedHeader) {\n            throw new TypeError('setProtectedHeader can only be called once');\n        }\n        this.protectedHeader = protectedHeader;\n        return this;\n    }\n    setUnprotectedHeader(unprotectedHeader) {\n        if (this.unprotectedHeader) {\n            throw new TypeError('setUnprotectedHeader can only be called once');\n        }\n        this.unprotectedHeader = unprotectedHeader;\n        return this;\n    }\n    addSignature(...args) {\n        return this.parent.addSignature(...args);\n    }\n    sign(...args) {\n        return this.parent.sign(...args);\n    }\n    done() {\n        return this.parent;\n    }\n}\nexport class GeneralSign {\n    constructor(payload) {\n        this._signatures = [];\n        this._payload = payload;\n    }\n    addSignature(key, options) {\n        const signature = new IndividualSignature(this, key, options);\n        this._signatures.push(signature);\n        return signature;\n    }\n    async sign() {\n        if (!this._signatures.length) {\n            throw new JWSInvalid('at least one signature must be added');\n        }\n        const jws = {\n            signatures: [],\n            payload: '',\n        };\n        for (let i = 0; i < this._signatures.length; i++) {\n            const signature = this._signatures[i];\n            const flattened = new FlattenedSign(this._payload);\n            flattened.setProtectedHeader(signature.protectedHeader);\n            flattened.setUnprotectedHeader(signature.unprotectedHeader);\n            const { payload, ...rest } = await flattened.sign(signature.key, signature.options);\n            if (i === 0) {\n                jws.payload = payload;\n            }\n            else if (jws.payload !== payload) {\n                throw new JWSInvalid('inconsistent use of JWS Unencoded Payload (RFC7797)');\n            }\n            jws.signatures.push(rest);\n        }\n        return jws;\n    }\n}\n","import epoch from '../lib/epoch.js';\nimport isObject from '../lib/is_object.js';\nimport secs from '../lib/secs.js';\nfunction validateInput(label, input) {\n    if (!Number.isFinite(input)) {\n        throw new TypeError(`Invalid ${label} input`);\n    }\n    return input;\n}\nexport class ProduceJWT {\n    constructor(payload = {}) {\n        if (!isObject(payload)) {\n            throw new TypeError('JWT Claims Set MUST be an object');\n        }\n        this._payload = payload;\n    }\n    setIssuer(issuer) {\n        this._payload = { ...this._payload, iss: issuer };\n        return this;\n    }\n    setSubject(subject) {\n        this._payload = { ...this._payload, sub: subject };\n        return this;\n    }\n    setAudience(audience) {\n        this._payload = { ...this._payload, aud: audience };\n        return this;\n    }\n    setJti(jwtId) {\n        this._payload = { ...this._payload, jti: jwtId };\n        return this;\n    }\n    setNotBefore(input) {\n        if (typeof input === 'number') {\n            this._payload = { ...this._payload, nbf: validateInput('setNotBefore', input) };\n        }\n        else if (input instanceof Date) {\n            this._payload = { ...this._payload, nbf: validateInput('setNotBefore', epoch(input)) };\n        }\n        else {\n            this._payload = { ...this._payload, nbf: epoch(new Date()) + secs(input) };\n        }\n        return this;\n    }\n    setExpirationTime(input) {\n        if (typeof input === 'number') {\n            this._payload = { ...this._payload, exp: validateInput('setExpirationTime', input) };\n        }\n        else if (input instanceof Date) {\n            this._payload = { ...this._payload, exp: validateInput('setExpirationTime', epoch(input)) };\n        }\n        else {\n            this._payload = { ...this._payload, exp: epoch(new Date()) + secs(input) };\n        }\n        return this;\n    }\n    setIssuedAt(input) {\n        if (typeof input === 'undefined') {\n            this._payload = { ...this._payload, iat: epoch(new Date()) };\n        }\n        else if (input instanceof Date) {\n            this._payload = { ...this._payload, iat: validateInput('setIssuedAt', epoch(input)) };\n        }\n        else if (typeof input === 'string') {\n            this._payload = {\n                ...this._payload,\n                iat: validateInput('setIssuedAt', epoch(new Date()) + secs(input)),\n            };\n        }\n        else {\n            this._payload = { ...this._payload, iat: validateInput('setIssuedAt', input) };\n        }\n        return this;\n    }\n}\n","import { CompactSign } from '../jws/compact/sign.js';\nimport { JWTInvalid } from '../util/errors.js';\nimport { encoder } from '../lib/buffer_utils.js';\nimport { ProduceJWT } from './produce.js';\nexport class SignJWT extends ProduceJWT {\n    setProtectedHeader(protectedHeader) {\n        this._protectedHeader = protectedHeader;\n        return this;\n    }\n    async sign(key, options) {\n        const sig = new CompactSign(encoder.encode(JSON.stringify(this._payload)));\n        sig.setProtectedHeader(this._protectedHeader);\n        if (Array.isArray(this._protectedHeader?.crit) &&\n            this._protectedHeader.crit.includes('b64') &&\n            this._protectedHeader.b64 === false) {\n            throw new JWTInvalid('JWTs MUST NOT use unencoded payload');\n        }\n        return sig.sign(key, options);\n    }\n}\n","import { CompactEncrypt } from '../jwe/compact/encrypt.js';\nimport { encoder } from '../lib/buffer_utils.js';\nimport { ProduceJWT } from './produce.js';\nexport class EncryptJWT extends ProduceJWT {\n    setProtectedHeader(protectedHeader) {\n        if (this._protectedHeader) {\n            throw new TypeError('setProtectedHeader can only be called once');\n        }\n        this._protectedHeader = protectedHeader;\n        return this;\n    }\n    setKeyManagementParameters(parameters) {\n        if (this._keyManagementParameters) {\n            throw new TypeError('setKeyManagementParameters can only be called once');\n        }\n        this._keyManagementParameters = parameters;\n        return this;\n    }\n    setContentEncryptionKey(cek) {\n        if (this._cek) {\n            throw new TypeError('setContentEncryptionKey can only be called once');\n        }\n        this._cek = cek;\n        return this;\n    }\n    setInitializationVector(iv) {\n        if (this._iv) {\n            throw new TypeError('setInitializationVector can only be called once');\n        }\n        this._iv = iv;\n        return this;\n    }\n    replicateIssuerAsHeader() {\n        this._replicateIssuerAsHeader = true;\n        return this;\n    }\n    replicateSubjectAsHeader() {\n        this._replicateSubjectAsHeader = true;\n        return this;\n    }\n    replicateAudienceAsHeader() {\n        this._replicateAudienceAsHeader = true;\n        return this;\n    }\n    async encrypt(key, options) {\n        const enc = new CompactEncrypt(encoder.encode(JSON.stringify(this._payload)));\n        if (this._replicateIssuerAsHeader) {\n            this._protectedHeader = { ...this._protectedHeader, iss: this._payload.iss };\n        }\n        if (this._replicateSubjectAsHeader) {\n            this._protectedHeader = { ...this._protectedHeader, sub: this._payload.sub };\n        }\n        if (this._replicateAudienceAsHeader) {\n            this._protectedHeader = { ...this._protectedHeader, aud: this._payload.aud };\n        }\n        enc.setProtectedHeader(this._protectedHeader);\n        if (this._iv) {\n            enc.setInitializationVector(this._iv);\n        }\n        if (this._cek) {\n            enc.setContentEncryptionKey(this._cek);\n        }\n        if (this._keyManagementParameters) {\n            enc.setKeyManagementParameters(this._keyManagementParameters);\n        }\n        return enc.encrypt(key, options);\n    }\n}\n","import digest from '../runtime/digest.js';\nimport { encode as base64url } from '../runtime/base64url.js';\nimport { JOSENotSupported, JWKInvalid } from '../util/errors.js';\nimport { encoder } from '../lib/buffer_utils.js';\nimport isObject from '../lib/is_object.js';\nconst check = (value, description) => {\n    if (typeof value !== 'string' || !value) {\n        throw new JWKInvalid(`${description} missing or invalid`);\n    }\n};\nexport async function calculateJwkThumbprint(jwk, digestAlgorithm) {\n    if (!isObject(jwk)) {\n        throw new TypeError('JWK must be an object');\n    }\n    digestAlgorithm ?? (digestAlgorithm = 'sha256');\n    if (digestAlgorithm !== 'sha256' &&\n        digestAlgorithm !== 'sha384' &&\n        digestAlgorithm !== 'sha512') {\n        throw new TypeError('digestAlgorithm must one of \"sha256\", \"sha384\", or \"sha512\"');\n    }\n    let components;\n    switch (jwk.kty) {\n        case 'EC':\n            check(jwk.crv, '\"crv\" (Curve) Parameter');\n            check(jwk.x, '\"x\" (X Coordinate) Parameter');\n            check(jwk.y, '\"y\" (Y Coordinate) Parameter');\n            components = { crv: jwk.crv, kty: jwk.kty, x: jwk.x, y: jwk.y };\n            break;\n        case 'OKP':\n            check(jwk.crv, '\"crv\" (Subtype of Key Pair) Parameter');\n            check(jwk.x, '\"x\" (Public Key) Parameter');\n            components = { crv: jwk.crv, kty: jwk.kty, x: jwk.x };\n            break;\n        case 'RSA':\n            check(jwk.e, '\"e\" (Exponent) Parameter');\n            check(jwk.n, '\"n\" (Modulus) Parameter');\n            components = { e: jwk.e, kty: jwk.kty, n: jwk.n };\n            break;\n        case 'oct':\n            check(jwk.k, '\"k\" (Key Value) Parameter');\n            components = { k: jwk.k, kty: jwk.kty };\n            break;\n        default:\n            throw new JOSENotSupported('\"kty\" (Key Type) Parameter missing or unsupported');\n    }\n    const data = encoder.encode(JSON.stringify(components));\n    return base64url(await digest(digestAlgorithm, data));\n}\nexport async function calculateJwkThumbprintUri(jwk, digestAlgorithm) {\n    digestAlgorithm ?? (digestAlgorithm = 'sha256');\n    const thumbprint = await calculateJwkThumbprint(jwk, digestAlgorithm);\n    return `urn:ietf:params:oauth:jwk-thumbprint:sha-${digestAlgorithm.slice(-3)}:${thumbprint}`;\n}\n","import { importJWK } from '../key/import.js';\nimport isObject from '../lib/is_object.js';\nimport { JWSInvalid } from '../util/errors.js';\nexport async function EmbeddedJWK(protectedHeader, token) {\n    const joseHeader = {\n        ...protectedHeader,\n        ...token?.header,\n    };\n    if (!isObject(joseHeader.jwk)) {\n        throw new JWSInvalid('\"jwk\" (JSON Web Key) Header Parameter must be a JSON object');\n    }\n    const key = await importJWK({ ...joseHeader.jwk, ext: true }, joseHeader.alg);\n    if (key instanceof Uint8Array || key.type !== 'public') {\n        throw new JWSInvalid('\"jwk\" (JSON Web Key) Header Parameter must be a public key');\n    }\n    return key;\n}\n","import { importJWK } from '../key/import.js';\nimport { JWKSInvalid, JOSENotSupported, JWKSNoMatchingKey, JWKSMultipleMatchingKeys, } from '../util/errors.js';\nimport isObject from '../lib/is_object.js';\nfunction getKtyFromAlg(alg) {\n    switch (typeof alg === 'string' && alg.slice(0, 2)) {\n        case 'RS':\n        case 'PS':\n            return 'RSA';\n        case 'ES':\n            return 'EC';\n        case 'Ed':\n            return 'OKP';\n        default:\n            throw new JOSENotSupported('Unsupported \"alg\" value for a JSON Web Key Set');\n    }\n}\nfunction isJWKSLike(jwks) {\n    return (jwks &&\n        typeof jwks === 'object' &&\n        Array.isArray(jwks.keys) &&\n        jwks.keys.every(isJWKLike));\n}\nfunction isJWKLike(key) {\n    return isObject(key);\n}\nfunction clone(obj) {\n    if (typeof structuredClone === 'function') {\n        return structuredClone(obj);\n    }\n    return JSON.parse(JSON.stringify(obj));\n}\nclass LocalJWKSet {\n    constructor(jwks) {\n        this._cached = new WeakMap();\n        if (!isJWKSLike(jwks)) {\n            throw new JWKSInvalid('JSON Web Key Set malformed');\n        }\n        this._jwks = clone(jwks);\n    }\n    async getKey(protectedHeader, token) {\n        const { alg, kid } = { ...protectedHeader, ...token?.header };\n        const kty = getKtyFromAlg(alg);\n        const candidates = this._jwks.keys.filter((jwk) => {\n            let candidate = kty === jwk.kty;\n            if (candidate && typeof kid === 'string') {\n                candidate = kid === jwk.kid;\n            }\n            if (candidate && typeof jwk.alg === 'string') {\n                candidate = alg === jwk.alg;\n            }\n            if (candidate && typeof jwk.use === 'string') {\n                candidate = jwk.use === 'sig';\n            }\n            if (candidate && Array.isArray(jwk.key_ops)) {\n                candidate = jwk.key_ops.includes('verify');\n            }\n            if (candidate && alg === 'EdDSA') {\n                candidate = jwk.crv === 'Ed25519' || jwk.crv === 'Ed448';\n            }\n            if (candidate) {\n                switch (alg) {\n                    case 'ES256':\n                        candidate = jwk.crv === 'P-256';\n                        break;\n                    case 'ES256K':\n                        candidate = jwk.crv === 'secp256k1';\n                        break;\n                    case 'ES384':\n                        candidate = jwk.crv === 'P-384';\n                        break;\n                    case 'ES512':\n                        candidate = jwk.crv === 'P-521';\n                        break;\n                }\n            }\n            return candidate;\n        });\n        const { 0: jwk, length } = candidates;\n        if (length === 0) {\n            throw new JWKSNoMatchingKey();\n        }\n        if (length !== 1) {\n            const error = new JWKSMultipleMatchingKeys();\n            const { _cached } = this;\n            error[Symbol.asyncIterator] = async function* () {\n                for (const jwk of candidates) {\n                    try {\n                        yield await importWithAlgCache(_cached, jwk, alg);\n                    }\n                    catch { }\n                }\n            };\n            throw error;\n        }\n        return importWithAlgCache(this._cached, jwk, alg);\n    }\n}\nasync function importWithAlgCache(cache, jwk, alg) {\n    const cached = cache.get(jwk) || cache.set(jwk, {}).get(jwk);\n    if (cached[alg] === undefined) {\n        const key = await importJWK({ ...jwk, ext: true }, alg);\n        if (key instanceof Uint8Array || key.type !== 'public') {\n            throw new JWKSInvalid('JSON Web Key Set members must be public keys');\n        }\n        cached[alg] = key;\n    }\n    return cached[alg];\n}\nexport function createLocalJWKSet(jwks) {\n    const set = new LocalJWKSet(jwks);\n    const localJWKSet = async (protectedHeader, token) => set.getKey(protectedHeader, token);\n    Object.defineProperties(localJWKSet, {\n        jwks: {\n            value: () => clone(set._jwks),\n            enumerable: true,\n            configurable: false,\n            writable: false,\n        },\n    });\n    return localJWKSet;\n}\n","import { JOSEError, JWKSTimeout } from '../util/errors.js';\nconst fetchJwks = async (url, timeout, options) => {\n    let controller;\n    let id;\n    let timedOut = false;\n    if (typeof AbortController === 'function') {\n        controller = new AbortController();\n        id = setTimeout(() => {\n            timedOut = true;\n            controller.abort();\n        }, timeout);\n    }\n    const response = await fetch(url.href, {\n        signal: controller ? controller.signal : undefined,\n        redirect: 'manual',\n        headers: options.headers,\n    }).catch((err) => {\n        if (timedOut)\n            throw new JWKSTimeout();\n        throw err;\n    });\n    if (id !== undefined)\n        clearTimeout(id);\n    if (response.status !== 200) {\n        throw new JOSEError('Expected 200 OK from the JSON Web Key Set HTTP response');\n    }\n    try {\n        return await response.json();\n    }\n    catch {\n        throw new JOSEError('Failed to parse the JSON Web Key Set HTTP response as JSON');\n    }\n};\nexport default fetchJwks;\n","import fetchJwks from '../runtime/fetch_jwks.js';\nimport { JWKSNoMatchingKey } from '../util/errors.js';\nimport { createLocalJWKSet } from './local.js';\nimport isObject from '../lib/is_object.js';\nfunction isCloudflareWorkers() {\n    return (typeof WebSocketPair !== 'undefined' ||\n        (typeof navigator !== 'undefined' && navigator.userAgent === 'Cloudflare-Workers') ||\n        (typeof EdgeRuntime !== 'undefined' && EdgeRuntime === 'vercel'));\n}\nlet USER_AGENT;\nif (typeof navigator === 'undefined' || !navigator.userAgent?.startsWith?.('Mozilla/5.0 ')) {\n    const NAME = 'jose';\n    const VERSION = 'v5.9.6';\n    USER_AGENT = `${NAME}/${VERSION}`;\n}\nexport const jwksCache = Symbol();\nfunction isFreshJwksCache(input, cacheMaxAge) {\n    if (typeof input !== 'object' || input === null) {\n        return false;\n    }\n    if (!('uat' in input) || typeof input.uat !== 'number' || Date.now() - input.uat >= cacheMaxAge) {\n        return false;\n    }\n    if (!('jwks' in input) ||\n        !isObject(input.jwks) ||\n        !Array.isArray(input.jwks.keys) ||\n        !Array.prototype.every.call(input.jwks.keys, isObject)) {\n        return false;\n    }\n    return true;\n}\nclass RemoteJWKSet {\n    constructor(url, options) {\n        if (!(url instanceof URL)) {\n            throw new TypeError('url must be an instance of URL');\n        }\n        this._url = new URL(url.href);\n        this._options = { agent: options?.agent, headers: options?.headers };\n        this._timeoutDuration =\n            typeof options?.timeoutDuration === 'number' ? options?.timeoutDuration : 5000;\n        this._cooldownDuration =\n            typeof options?.cooldownDuration === 'number' ? options?.cooldownDuration : 30000;\n        this._cacheMaxAge = typeof options?.cacheMaxAge === 'number' ? options?.cacheMaxAge : 600000;\n        if (options?.[jwksCache] !== undefined) {\n            this._cache = options?.[jwksCache];\n            if (isFreshJwksCache(options?.[jwksCache], this._cacheMaxAge)) {\n                this._jwksTimestamp = this._cache.uat;\n                this._local = createLocalJWKSet(this._cache.jwks);\n            }\n        }\n    }\n    coolingDown() {\n        return typeof this._jwksTimestamp === 'number'\n            ? Date.now() < this._jwksTimestamp + this._cooldownDuration\n            : false;\n    }\n    fresh() {\n        return typeof this._jwksTimestamp === 'number'\n            ? Date.now() < this._jwksTimestamp + this._cacheMaxAge\n            : false;\n    }\n    async getKey(protectedHeader, token) {\n        if (!this._local || !this.fresh()) {\n            await this.reload();\n        }\n        try {\n            return await this._local(protectedHeader, token);\n        }\n        catch (err) {\n            if (err instanceof JWKSNoMatchingKey) {\n                if (this.coolingDown() === false) {\n                    await this.reload();\n                    return this._local(protectedHeader, token);\n                }\n            }\n            throw err;\n        }\n    }\n    async reload() {\n        if (this._pendingFetch && isCloudflareWorkers()) {\n            this._pendingFetch = undefined;\n        }\n        const headers = new Headers(this._options.headers);\n        if (USER_AGENT && !headers.has('User-Agent')) {\n            headers.set('User-Agent', USER_AGENT);\n            this._options.headers = Object.fromEntries(headers.entries());\n        }\n        this._pendingFetch || (this._pendingFetch = fetchJwks(this._url, this._timeoutDuration, this._options)\n            .then((json) => {\n            this._local = createLocalJWKSet(json);\n            if (this._cache) {\n                this._cache.uat = Date.now();\n                this._cache.jwks = json;\n            }\n            this._jwksTimestamp = Date.now();\n            this._pendingFetch = undefined;\n        })\n            .catch((err) => {\n            this._pendingFetch = undefined;\n            throw err;\n        }));\n        await this._pendingFetch;\n    }\n}\nexport function createRemoteJWKSet(url, options) {\n    const set = new RemoteJWKSet(url, options);\n    const remoteJWKSet = async (protectedHeader, token) => set.getKey(protectedHeader, token);\n    Object.defineProperties(remoteJWKSet, {\n        coolingDown: {\n            get: () => set.coolingDown(),\n            enumerable: true,\n            configurable: false,\n        },\n        fresh: {\n            get: () => set.fresh(),\n            enumerable: true,\n            configurable: false,\n        },\n        reload: {\n            value: () => set.reload(),\n            enumerable: true,\n            configurable: false,\n            writable: false,\n        },\n        reloading: {\n            get: () => !!set._pendingFetch,\n            enumerable: true,\n            configurable: false,\n        },\n        jwks: {\n            value: () => set._local?.jwks(),\n            enumerable: true,\n            configurable: false,\n            writable: false,\n        },\n    });\n    return remoteJWKSet;\n}\nexport const experimental_jwksCache = jwksCache;\n","import * as base64url from '../runtime/base64url.js';\nimport { decoder } from '../lib/buffer_utils.js';\nimport { JWTInvalid } from '../util/errors.js';\nimport jwtPayload from '../lib/jwt_claims_set.js';\nimport { ProduceJWT } from './produce.js';\nexport class UnsecuredJWT extends ProduceJWT {\n    encode() {\n        const header = base64url.encode(JSON.stringify({ alg: 'none' }));\n        const payload = base64url.encode(JSON.stringify(this._payload));\n        return `${header}.${payload}.`;\n    }\n    static decode(jwt, options) {\n        if (typeof jwt !== 'string') {\n            throw new JWTInvalid('Unsecured JWT must be a string');\n        }\n        const { 0: encodedHeader, 1: encodedPayload, 2: signature, length } = jwt.split('.');\n        if (length !== 3 || signature !== '') {\n            throw new JWTInvalid('Invalid Unsecured JWT');\n        }\n        let header;\n        try {\n            header = JSON.parse(decoder.decode(base64url.decode(encodedHeader)));\n            if (header.alg !== 'none')\n                throw new Error();\n        }\n        catch {\n            throw new JWTInvalid('Invalid Unsecured JWT');\n        }\n        const payload = jwtPayload(header, base64url.decode(encodedPayload), options);\n        return { payload, header };\n    }\n}\n","import * as base64url from '../runtime/base64url.js';\nexport const encode = base64url.encode;\nexport const decode = base64url.decode;\n","import { decode as base64url } from './base64url.js';\nimport { decoder } from '../lib/buffer_utils.js';\nimport isObject from '../lib/is_object.js';\nexport function decodeProtectedHeader(token) {\n    let protectedB64u;\n    if (typeof token === 'string') {\n        const parts = token.split('.');\n        if (parts.length === 3 || parts.length === 5) {\n            ;\n            [protectedB64u] = parts;\n        }\n    }\n    else if (typeof token === 'object' && token) {\n        if ('protected' in token) {\n            protectedB64u = token.protected;\n        }\n        else {\n            throw new TypeError('Token does not contain a Protected Header');\n        }\n    }\n    try {\n        if (typeof protectedB64u !== 'string' || !protectedB64u) {\n            throw new Error();\n        }\n        const result = JSON.parse(decoder.decode(base64url(protectedB64u)));\n        if (!isObject(result)) {\n            throw new Error();\n        }\n        return result;\n    }\n    catch {\n        throw new TypeError('Invalid Token or Protected Header formatting');\n    }\n}\n","import { decode as base64url } from './base64url.js';\nimport { decoder } from '../lib/buffer_utils.js';\nimport isObject from '../lib/is_object.js';\nimport { JWTInvalid } from './errors.js';\nexport function decodeJwt(jwt) {\n    if (typeof jwt !== 'string')\n        throw new JWTInvalid('JWTs must use Compact JWS serialization, JWT must be a string');\n    const { 1: payload, length } = jwt.split('.');\n    if (length === 5)\n        throw new JWTInvalid('Only JWTs using Compact JWS serialization can be decoded');\n    if (length !== 3)\n        throw new JWTInvalid('Invalid JWT');\n    if (!payload)\n        throw new JWTInvalid('JWTs must contain a payload');\n    let decoded;\n    try {\n        decoded = base64url(payload);\n    }\n    catch {\n        throw new JWTInvalid('Failed to base64url decode the payload');\n    }\n    let result;\n    try {\n        result = JSON.parse(decoder.decode(decoded));\n    }\n    catch {\n        throw new JWTInvalid('Failed to parse the decoded payload as JSON');\n    }\n    if (!isObject(result))\n        throw new JWTInvalid('Invalid JWT Claims Set');\n    return result;\n}\n","import crypto from './webcrypto.js';\nimport { JOSENotSupported } from '../util/errors.js';\nimport random from './random.js';\nexport async function generateSecret(alg, options) {\n    let length;\n    let algorithm;\n    let keyUsages;\n    switch (alg) {\n        case 'HS256':\n        case 'HS384':\n        case 'HS512':\n            length = parseInt(alg.slice(-3), 10);\n            algorithm = { name: 'HMAC', hash: `SHA-${length}`, length };\n            keyUsages = ['sign', 'verify'];\n            break;\n        case 'A128CBC-HS256':\n        case 'A192CBC-HS384':\n        case 'A256CBC-HS512':\n            length = parseInt(alg.slice(-3), 10);\n            return random(new Uint8Array(length >> 3));\n        case 'A128KW':\n        case 'A192KW':\n        case 'A256KW':\n            length = parseInt(alg.slice(1, 4), 10);\n            algorithm = { name: 'AES-KW', length };\n            keyUsages = ['wrapKey', 'unwrapKey'];\n            break;\n        case 'A128GCMKW':\n        case 'A192GCMKW':\n        case 'A256GCMKW':\n        case 'A128GCM':\n        case 'A192GCM':\n        case 'A256GCM':\n            length = parseInt(alg.slice(1, 4), 10);\n            algorithm = { name: 'AES-GCM', length };\n            keyUsages = ['encrypt', 'decrypt'];\n            break;\n        default:\n            throw new JOSENotSupported('Invalid or unsupported JWK \"alg\" (Algorithm) Parameter value');\n    }\n    return crypto.subtle.generateKey(algorithm, options?.extractable ?? false, keyUsages);\n}\nfunction getModulusLengthOption(options) {\n    const modulusLength = options?.modulusLength ?? 2048;\n    if (typeof modulusLength !== 'number' || modulusLength < 2048) {\n        throw new JOSENotSupported('Invalid or unsupported modulusLength option provided, 2048 bits or larger keys must be used');\n    }\n    return modulusLength;\n}\nexport async function generateKeyPair(alg, options) {\n    let algorithm;\n    let keyUsages;\n    switch (alg) {\n        case 'PS256':\n        case 'PS384':\n        case 'PS512':\n            algorithm = {\n                name: 'RSA-PSS',\n                hash: `SHA-${alg.slice(-3)}`,\n                publicExponent: new Uint8Array([0x01, 0x00, 0x01]),\n                modulusLength: getModulusLengthOption(options),\n            };\n            keyUsages = ['sign', 'verify'];\n            break;\n        case 'RS256':\n        case 'RS384':\n        case 'RS512':\n            algorithm = {\n                name: 'RSASSA-PKCS1-v1_5',\n                hash: `SHA-${alg.slice(-3)}`,\n                publicExponent: new Uint8Array([0x01, 0x00, 0x01]),\n                modulusLength: getModulusLengthOption(options),\n            };\n            keyUsages = ['sign', 'verify'];\n            break;\n        case 'RSA-OAEP':\n        case 'RSA-OAEP-256':\n        case 'RSA-OAEP-384':\n        case 'RSA-OAEP-512':\n            algorithm = {\n                name: 'RSA-OAEP',\n                hash: `SHA-${parseInt(alg.slice(-3), 10) || 1}`,\n                publicExponent: new Uint8Array([0x01, 0x00, 0x01]),\n                modulusLength: getModulusLengthOption(options),\n            };\n            keyUsages = ['decrypt', 'unwrapKey', 'encrypt', 'wrapKey'];\n            break;\n        case 'ES256':\n            algorithm = { name: 'ECDSA', namedCurve: 'P-256' };\n            keyUsages = ['sign', 'verify'];\n            break;\n        case 'ES384':\n            algorithm = { name: 'ECDSA', namedCurve: 'P-384' };\n            keyUsages = ['sign', 'verify'];\n            break;\n        case 'ES512':\n            algorithm = { name: 'ECDSA', namedCurve: 'P-521' };\n            keyUsages = ['sign', 'verify'];\n            break;\n        case 'EdDSA': {\n            keyUsages = ['sign', 'verify'];\n            const crv = options?.crv ?? 'Ed25519';\n            switch (crv) {\n                case 'Ed25519':\n                case 'Ed448':\n                    algorithm = { name: crv };\n                    break;\n                default:\n                    throw new JOSENotSupported('Invalid or unsupported crv option provided');\n            }\n            break;\n        }\n        case 'ECDH-ES':\n        case 'ECDH-ES+A128KW':\n        case 'ECDH-ES+A192KW':\n        case 'ECDH-ES+A256KW': {\n            keyUsages = ['deriveKey', 'deriveBits'];\n            const crv = options?.crv ?? 'P-256';\n            switch (crv) {\n                case 'P-256':\n                case 'P-384':\n                case 'P-521': {\n                    algorithm = { name: 'ECDH', namedCurve: crv };\n                    break;\n                }\n                case 'X25519':\n                case 'X448':\n                    algorithm = { name: crv };\n                    break;\n                default:\n                    throw new JOSENotSupported('Invalid or unsupported crv option provided, supported values are P-256, P-384, P-521, X25519, and X448');\n            }\n            break;\n        }\n        default:\n            throw new JOSENotSupported('Invalid or unsupported JWK \"alg\" (Algorithm) Parameter value');\n    }\n    return crypto.subtle.generateKey(algorithm, options?.extractable ?? false, keyUsages);\n}\n","import { generateKeyPair as generate } from '../runtime/generate.js';\nexport async function generateKeyPair(alg, options) {\n    return generate(alg, options);\n}\n","import { generateSecret as generate } from '../runtime/generate.js';\nexport async function generateSecret(alg, options) {\n    return generate(alg, options);\n}\n","export default 'WebCryptoAPI';\n","import value from '../runtime/runtime.js';\nexport default value;\n"],"mappings":"yCAAA,IAAOA,EAAQ,OACFC,EAAeC,GAAQA,aAAe,UCAnD,IAAMC,GAAS,MAAOC,EAAWC,IAAS,CACtC,IAAMC,EAAe,OAAOF,EAAU,MAAM,EAAE,CAAC,GAC/C,OAAO,IAAI,WAAW,MAAMG,EAAO,OAAO,OAAOD,EAAcD,CAAI,CAAC,CACxE,EACOG,GAAQL,GCJR,IAAMM,EAAU,IAAI,YACdC,EAAU,IAAI,YACrBC,GAAY,GAAK,GAChB,SAASC,KAAUC,EAAS,CAC/B,IAAMC,EAAOD,EAAQ,OAAO,CAACE,EAAK,CAAE,OAAAC,CAAO,IAAMD,EAAMC,EAAQ,CAAC,EAC1DC,EAAM,IAAI,WAAWH,CAAI,EAC3BI,EAAI,EACR,QAAWC,KAAUN,EACjBI,EAAI,IAAIE,EAAQD,CAAC,EACjBA,GAAKC,EAAO,OAEhB,OAAOF,CACX,CACO,SAASG,GAAIC,EAAKC,EAAU,CAC/B,OAAOV,EAAOH,EAAQ,OAAOY,CAAG,EAAG,IAAI,WAAW,CAAC,CAAC,CAAC,EAAGC,CAAQ,CACpE,CACA,SAASC,GAAcN,EAAKO,EAAOC,EAAQ,CACvC,GAAID,EAAQ,GAAKA,GAASb,GACtB,MAAM,IAAI,WAAW,6BAA6BA,GAAY,CAAC,cAAca,CAAK,EAAE,EAExFP,EAAI,IAAI,CAACO,IAAU,GAAIA,IAAU,GAAIA,IAAU,EAAGA,EAAQ,GAAI,EAAGC,CAAM,CAC3E,CACO,SAASC,GAASF,EAAO,CAC5B,IAAMG,EAAO,KAAK,MAAMH,EAAQb,EAAS,EACnCiB,EAAMJ,EAAQb,GACdM,EAAM,IAAI,WAAW,CAAC,EAC5B,OAAAM,GAAcN,EAAKU,EAAM,CAAC,EAC1BJ,GAAcN,EAAKW,EAAK,CAAC,EAClBX,CACX,CACO,SAASY,GAASL,EAAO,CAC5B,IAAMP,EAAM,IAAI,WAAW,CAAC,EAC5B,OAAAM,GAAcN,EAAKO,CAAK,EACjBP,CACX,CACO,SAASa,GAAeC,EAAO,CAClC,OAAOnB,EAAOiB,GAASE,EAAM,MAAM,EAAGA,CAAK,CAC/C,CACA,eAAsBC,GAAUC,EAAQC,EAAMV,EAAO,CACjD,IAAMW,EAAa,KAAK,MAAMD,GAAQ,GAAK,EAAE,EACvCE,EAAM,IAAI,WAAWD,EAAa,EAAE,EAC1C,QAASE,EAAO,EAAGA,EAAOF,EAAYE,IAAQ,CAC1C,IAAMpB,EAAM,IAAI,WAAW,EAAIgB,EAAO,OAAST,EAAM,MAAM,EAC3DP,EAAI,IAAIY,GAASQ,EAAO,CAAC,CAAC,EAC1BpB,EAAI,IAAIgB,EAAQ,CAAC,EACjBhB,EAAI,IAAIO,EAAO,EAAIS,EAAO,MAAM,EAChCG,EAAI,IAAI,MAAME,GAAO,SAAUrB,CAAG,EAAGoB,EAAO,EAAE,CAClD,CACA,OAAOD,EAAI,MAAM,EAAGF,GAAQ,CAAC,CACjC,CCjDO,IAAMK,GAAgBC,GAAU,CACnC,IAAIC,EAAYD,EACZ,OAAOC,GAAc,WACrBA,EAAYC,EAAQ,OAAOD,CAAS,GAExC,IAAME,EAAa,MACbC,EAAM,CAAC,EACb,QAASC,EAAI,EAAGA,EAAIJ,EAAU,OAAQI,GAAKF,EACvCC,EAAI,KAAK,OAAO,aAAa,MAAM,KAAMH,EAAU,SAASI,EAAGA,EAAIF,CAAU,CAAC,CAAC,EAEnF,OAAO,KAAKC,EAAI,KAAK,EAAE,CAAC,CAC5B,EACaE,EAAUN,GACZD,GAAaC,CAAK,EAAE,QAAQ,KAAM,EAAE,EAAE,QAAQ,MAAO,GAAG,EAAE,QAAQ,MAAO,GAAG,EAE1EO,GAAgBC,GAAY,CACrC,IAAMC,EAAS,KAAKD,CAAO,EACrBE,EAAQ,IAAI,WAAWD,EAAO,MAAM,EAC1C,QAASJ,EAAI,EAAGA,EAAII,EAAO,OAAQJ,IAC/BK,EAAML,CAAC,EAAII,EAAO,WAAWJ,CAAC,EAElC,OAAOK,CACX,EACaC,EAAUX,GAAU,CAC7B,IAAIQ,EAAUR,EACVQ,aAAmB,aACnBA,EAAUI,EAAQ,OAAOJ,CAAO,GAEpCA,EAAUA,EAAQ,QAAQ,KAAM,GAAG,EAAE,QAAQ,KAAM,GAAG,EAAE,QAAQ,MAAO,EAAE,EACzE,GAAI,CACA,OAAOD,GAAaC,CAAO,CAC/B,MACM,CACF,MAAM,IAAI,UAAU,mDAAmD,CAC3E,CACJ,ECpCA,IAAAK,GAAA,GAAAC,GAAAD,GAAA,uBAAAE,EAAA,cAAAC,EAAA,qBAAAC,EAAA,wBAAAC,EAAA,eAAAC,EAAA,eAAAC,GAAA,gBAAAC,EAAA,6BAAAC,GAAA,sBAAAC,EAAA,gBAAAC,GAAA,eAAAC,EAAA,mCAAAC,EAAA,6BAAAC,EAAA,eAAAC,EAAA,eAAAC,IAAO,IAAMb,EAAN,cAAwB,KAAM,CACjC,YAAYc,EAASC,EAAS,CAC1B,MAAMD,EAASC,CAAO,EACtB,KAAK,KAAO,mBACZ,KAAK,KAAO,KAAK,YAAY,KAC7B,MAAM,oBAAoB,KAAM,KAAK,WAAW,CACpD,CACJ,EACAf,EAAU,KAAO,mBACV,IAAMW,EAAN,cAAuCX,CAAU,CACpD,YAAYc,EAASE,EAASC,EAAQ,cAAeC,EAAS,cAAe,CACzE,MAAMJ,EAAS,CAAE,MAAO,CAAE,MAAAG,EAAO,OAAAC,EAAQ,QAAAF,CAAQ,CAAE,CAAC,EACpD,KAAK,KAAO,kCACZ,KAAK,MAAQC,EACb,KAAK,OAASC,EACd,KAAK,QAAUF,CACnB,CACJ,EACAL,EAAyB,KAAO,kCACzB,IAAMC,EAAN,cAAyBZ,CAAU,CACtC,YAAYc,EAASE,EAASC,EAAQ,cAAeC,EAAS,cAAe,CACzE,MAAMJ,EAAS,CAAE,MAAO,CAAE,MAAAG,EAAO,OAAAC,EAAQ,QAAAF,CAAQ,CAAE,CAAC,EACpD,KAAK,KAAO,kBACZ,KAAK,MAAQC,EACb,KAAK,OAASC,EACd,KAAK,QAAUF,CACnB,CACJ,EACAJ,EAAW,KAAO,kBACX,IAAMb,EAAN,cAAgCC,CAAU,CAC7C,aAAc,CACV,MAAM,GAAG,SAAS,EAClB,KAAK,KAAO,0BAChB,CACJ,EACAD,EAAkB,KAAO,2BAClB,IAAME,EAAN,cAA+BD,CAAU,CAC5C,aAAc,CACV,MAAM,GAAG,SAAS,EAClB,KAAK,KAAO,wBAChB,CACJ,EACAC,EAAiB,KAAO,yBACjB,IAAMC,EAAN,cAAkCF,CAAU,CAC/C,YAAYc,EAAU,8BAA+BC,EAAS,CAC1D,MAAMD,EAASC,CAAO,EACtB,KAAK,KAAO,2BAChB,CACJ,EACAb,EAAoB,KAAO,4BACpB,IAAMC,EAAN,cAAyBH,CAAU,CACtC,aAAc,CACV,MAAM,GAAG,SAAS,EAClB,KAAK,KAAO,iBAChB,CACJ,EACAG,EAAW,KAAO,kBACX,IAAMM,EAAN,cAAyBT,CAAU,CACtC,aAAc,CACV,MAAM,GAAG,SAAS,EAClB,KAAK,KAAO,iBAChB,CACJ,EACAS,EAAW,KAAO,kBACX,IAAMI,EAAN,cAAyBb,CAAU,CACtC,aAAc,CACV,MAAM,GAAG,SAAS,EAClB,KAAK,KAAO,iBAChB,CACJ,EACAa,EAAW,KAAO,kBACX,IAAMT,GAAN,cAAyBJ,CAAU,CACtC,aAAc,CACV,MAAM,GAAG,SAAS,EAClB,KAAK,KAAO,iBAChB,CACJ,EACAI,GAAW,KAAO,kBACX,IAAMC,EAAN,cAA0BL,CAAU,CACvC,aAAc,CACV,MAAM,GAAG,SAAS,EAClB,KAAK,KAAO,kBAChB,CACJ,EACAK,EAAY,KAAO,mBACZ,IAAME,EAAN,cAAgCP,CAAU,CAC7C,YAAYc,EAAU,kDAAmDC,EAAS,CAC9E,MAAMD,EAASC,CAAO,EACtB,KAAK,KAAO,0BAChB,CACJ,EACAR,EAAkB,KAAO,2BAClB,IAAMD,GAAN,cAAuCN,CAAU,CACpD,YAAYc,EAAU,uDAAwDC,EAAS,CACnF,MAAMD,EAASC,CAAO,EACtB,KAAK,KAAO,iCAChB,CACJ,EAEAT,GAAyB,KAAO,kCACzB,IAAME,GAAN,cAA0BR,CAAU,CACvC,YAAYc,EAAU,oBAAqBC,EAAS,CAChD,MAAMD,EAASC,CAAO,EACtB,KAAK,KAAO,kBAChB,CACJ,EACAP,GAAY,KAAO,mBACZ,IAAME,EAAN,cAA6CV,CAAU,CAC1D,YAAYc,EAAU,gCAAiCC,EAAS,CAC5D,MAAMD,EAASC,CAAO,EACtB,KAAK,KAAO,uCAChB,CACJ,EACAL,EAA+B,KAAO,wCChHtC,IAAOS,EAAQC,EAAO,gBAAgB,KAAKA,CAAM,ECC1C,SAASC,GAAUC,EAAK,CAC3B,OAAQA,EAAK,CACT,IAAK,UACL,IAAK,YACL,IAAK,UACL,IAAK,YACL,IAAK,UACL,IAAK,YACD,MAAO,IACX,IAAK,gBACL,IAAK,gBACL,IAAK,gBACD,MAAO,KACX,QACI,MAAM,IAAIC,EAAiB,8BAA8BD,CAAG,EAAE,CACtE,CACJ,CACA,IAAOE,GAASF,GAAQG,EAAO,IAAI,WAAWJ,GAAUC,CAAG,GAAK,CAAC,CAAC,ECjBlE,IAAMI,GAAgB,CAACC,EAAKC,IAAO,CAC/B,GAAIA,EAAG,QAAU,IAAMC,GAAUF,CAAG,EAChC,MAAM,IAAIG,EAAW,sCAAsC,CAEnE,EACOC,GAAQL,GCNf,IAAMM,GAAiB,CAACC,EAAKC,IAAa,CACtC,IAAMC,EAASF,EAAI,YAAc,EACjC,GAAIE,IAAWD,EACX,MAAM,IAAIE,EAAW,mDAAmDF,CAAQ,cAAcC,CAAM,OAAO,CAEnH,EACOE,GAAQL,GCPf,IAAMM,GAAkB,CAACC,EAAGC,IAAM,CAC9B,GAAI,EAAED,aAAa,YACf,MAAM,IAAI,UAAU,iCAAiC,EAEzD,GAAI,EAAEC,aAAa,YACf,MAAM,IAAI,UAAU,kCAAkC,EAE1D,GAAID,EAAE,SAAWC,EAAE,OACf,MAAM,IAAI,UAAU,yCAAyC,EAEjE,IAAMC,EAAMF,EAAE,OACVG,EAAM,EACNC,EAAI,GACR,KAAO,EAAEA,EAAIF,GACTC,GAAOH,EAAEI,CAAC,EAAIH,EAAEG,CAAC,EAErB,OAAOD,IAAQ,CACnB,EACOE,GAAQN,GClBf,SAASO,EAASC,EAAMC,EAAO,iBAAkB,CAC7C,OAAO,IAAI,UAAU,kDAAkDA,CAAI,YAAYD,CAAI,EAAE,CACjG,CACA,SAASE,EAAYC,EAAWH,EAAM,CAClC,OAAOG,EAAU,OAASH,CAC9B,CACA,SAASI,GAAcC,EAAM,CACzB,OAAO,SAASA,EAAK,KAAK,MAAM,CAAC,EAAG,EAAE,CAC1C,CACA,SAASC,GAAcC,EAAK,CACxB,OAAQA,EAAK,CACT,IAAK,QACD,MAAO,QACX,IAAK,QACD,MAAO,QACX,IAAK,QACD,MAAO,QACX,QACI,MAAM,IAAI,MAAM,aAAa,CACrC,CACJ,CACA,SAASC,GAAWC,EAAKC,EAAQ,CAC7B,GAAIA,EAAO,QAAU,CAACA,EAAO,KAAMC,GAAaF,EAAI,OAAO,SAASE,CAAQ,CAAC,EAAG,CAC5E,IAAIC,EAAM,sEACV,GAAIF,EAAO,OAAS,EAAG,CACnB,IAAMG,EAAOH,EAAO,IAAI,EACxBE,GAAO,UAAUF,EAAO,KAAK,IAAI,CAAC,QAAQG,CAAI,GAClD,MACSH,EAAO,SAAW,EACvBE,GAAO,UAAUF,EAAO,CAAC,CAAC,OAAOA,EAAO,CAAC,CAAC,IAG1CE,GAAO,GAAGF,EAAO,CAAC,CAAC,IAEvB,MAAM,IAAI,UAAUE,CAAG,CAC3B,CACJ,CACO,SAASE,GAAkBL,EAAKF,KAAQG,EAAQ,CACnD,OAAQH,EAAK,CACT,IAAK,QACL,IAAK,QACL,IAAK,QAAS,CACV,GAAI,CAACL,EAAYO,EAAI,UAAW,MAAM,EAClC,MAAMV,EAAS,MAAM,EACzB,IAAMY,EAAW,SAASJ,EAAI,MAAM,CAAC,EAAG,EAAE,EAE1C,GADeH,GAAcK,EAAI,UAAU,IAAI,IAChCE,EACX,MAAMZ,EAAS,OAAOY,CAAQ,GAAI,gBAAgB,EACtD,KACJ,CACA,IAAK,QACL,IAAK,QACL,IAAK,QAAS,CACV,GAAI,CAACT,EAAYO,EAAI,UAAW,mBAAmB,EAC/C,MAAMV,EAAS,mBAAmB,EACtC,IAAMY,EAAW,SAASJ,EAAI,MAAM,CAAC,EAAG,EAAE,EAE1C,GADeH,GAAcK,EAAI,UAAU,IAAI,IAChCE,EACX,MAAMZ,EAAS,OAAOY,CAAQ,GAAI,gBAAgB,EACtD,KACJ,CACA,IAAK,QACL,IAAK,QACL,IAAK,QAAS,CACV,GAAI,CAACT,EAAYO,EAAI,UAAW,SAAS,EACrC,MAAMV,EAAS,SAAS,EAC5B,IAAMY,EAAW,SAASJ,EAAI,MAAM,CAAC,EAAG,EAAE,EAE1C,GADeH,GAAcK,EAAI,UAAU,IAAI,IAChCE,EACX,MAAMZ,EAAS,OAAOY,CAAQ,GAAI,gBAAgB,EACtD,KACJ,CACA,IAAK,QAAS,CACV,GAAIF,EAAI,UAAU,OAAS,WAAaA,EAAI,UAAU,OAAS,QAC3D,MAAMV,EAAS,kBAAkB,EAErC,KACJ,CACA,IAAK,QACL,IAAK,QACL,IAAK,QAAS,CACV,GAAI,CAACG,EAAYO,EAAI,UAAW,OAAO,EACnC,MAAMV,EAAS,OAAO,EAC1B,IAAMY,EAAWL,GAAcC,CAAG,EAElC,GADeE,EAAI,UAAU,aACdE,EACX,MAAMZ,EAASY,EAAU,sBAAsB,EACnD,KACJ,CACA,QACI,MAAM,IAAI,UAAU,2CAA2C,CACvE,CACAH,GAAWC,EAAKC,CAAM,CAC1B,CACO,SAASK,EAAkBN,EAAKF,KAAQG,EAAQ,CACnD,OAAQH,EAAK,CACT,IAAK,UACL,IAAK,UACL,IAAK,UAAW,CACZ,GAAI,CAACL,EAAYO,EAAI,UAAW,SAAS,EACrC,MAAMV,EAAS,SAAS,EAC5B,IAAMY,EAAW,SAASJ,EAAI,MAAM,EAAG,CAAC,EAAG,EAAE,EAE7C,GADeE,EAAI,UAAU,SACdE,EACX,MAAMZ,EAASY,EAAU,kBAAkB,EAC/C,KACJ,CACA,IAAK,SACL,IAAK,SACL,IAAK,SAAU,CACX,GAAI,CAACT,EAAYO,EAAI,UAAW,QAAQ,EACpC,MAAMV,EAAS,QAAQ,EAC3B,IAAMY,EAAW,SAASJ,EAAI,MAAM,EAAG,CAAC,EAAG,EAAE,EAE7C,GADeE,EAAI,UAAU,SACdE,EACX,MAAMZ,EAASY,EAAU,kBAAkB,EAC/C,KACJ,CACA,IAAK,OAAQ,CACT,OAAQF,EAAI,UAAU,KAAM,CACxB,IAAK,OACL,IAAK,SACL,IAAK,OACD,MACJ,QACI,MAAMV,EAAS,uBAAuB,CAC9C,CACA,KACJ,CACA,IAAK,qBACL,IAAK,qBACL,IAAK,qBACD,GAAI,CAACG,EAAYO,EAAI,UAAW,QAAQ,EACpC,MAAMV,EAAS,QAAQ,EAC3B,MACJ,IAAK,WACL,IAAK,eACL,IAAK,eACL,IAAK,eAAgB,CACjB,GAAI,CAACG,EAAYO,EAAI,UAAW,UAAU,EACtC,MAAMV,EAAS,UAAU,EAC7B,IAAMY,EAAW,SAASJ,EAAI,MAAM,CAAC,EAAG,EAAE,GAAK,EAE/C,GADeH,GAAcK,EAAI,UAAU,IAAI,IAChCE,EACX,MAAMZ,EAAS,OAAOY,CAAQ,GAAI,gBAAgB,EACtD,KACJ,CACA,QACI,MAAM,IAAI,UAAU,2CAA2C,CACvE,CACAH,GAAWC,EAAKC,CAAM,CAC1B,CCvJA,SAASM,GAAQC,EAAKC,KAAWC,EAAO,CAEpC,GADAA,EAAQA,EAAM,OAAO,OAAO,EACxBA,EAAM,OAAS,EAAG,CAClB,IAAMC,EAAOD,EAAM,IAAI,EACvBF,GAAO,eAAeE,EAAM,KAAK,IAAI,CAAC,QAAQC,CAAI,GACtD,MACSD,EAAM,SAAW,EACtBF,GAAO,eAAeE,EAAM,CAAC,CAAC,OAAOA,EAAM,CAAC,CAAC,IAG7CF,GAAO,WAAWE,EAAM,CAAC,CAAC,IAE9B,OAAID,GAAU,KACVD,GAAO,aAAaC,CAAM,GAErB,OAAOA,GAAW,YAAcA,EAAO,KAC5CD,GAAO,sBAAsBC,EAAO,IAAI,GAEnC,OAAOA,GAAW,UAAYA,GAAU,MACzCA,EAAO,aAAa,OACpBD,GAAO,4BAA4BC,EAAO,YAAY,IAAI,IAG3DD,CACX,CACA,IAAOI,EAAQ,CAACH,KAAWC,IAChBH,GAAQ,eAAgBE,EAAQ,GAAGC,CAAK,EAE5C,SAASG,GAAQC,EAAKL,KAAWC,EAAO,CAC3C,OAAOH,GAAQ,eAAeO,CAAG,sBAAuBL,EAAQ,GAAGC,CAAK,CAC5E,CC7BA,IAAOK,GAASC,GACRC,EAAYD,CAAG,EACR,GAEJA,IAAM,OAAO,WAAW,IAAM,YAE5BE,EAAQ,CAAC,WAAW,ECEjC,eAAeC,GAAWC,EAAKC,EAAKC,EAAYC,EAAIC,EAAKC,EAAK,CAC1D,GAAI,EAAEJ,aAAe,YACjB,MAAM,IAAI,UAAUK,EAAgBL,EAAK,YAAY,CAAC,EAE1D,IAAMM,EAAU,SAASP,EAAI,MAAM,EAAG,CAAC,EAAG,EAAE,EACtCQ,EAAS,MAAMC,EAAO,OAAO,UAAU,MAAOR,EAAI,SAASM,GAAW,CAAC,EAAG,UAAW,GAAO,CAAC,SAAS,CAAC,EACvGG,EAAS,MAAMD,EAAO,OAAO,UAAU,MAAOR,EAAI,SAAS,EAAGM,GAAW,CAAC,EAAG,CAC/E,KAAM,OAAOA,GAAW,CAAC,GACzB,KAAM,MACV,EAAG,GAAO,CAAC,MAAM,CAAC,EACZI,EAAUC,EAAOP,EAAKF,EAAID,EAAYW,GAASR,EAAI,QAAU,CAAC,CAAC,EAC/DS,EAAc,IAAI,YAAY,MAAML,EAAO,OAAO,KAAK,OAAQC,EAAQC,CAAO,GAAG,MAAM,EAAGJ,GAAW,CAAC,CAAC,EACzGQ,EACJ,GAAI,CACAA,EAAiBC,GAAgBZ,EAAKU,CAAW,CACrD,MACM,CACN,CACA,GAAI,CAACC,EACD,MAAM,IAAIE,EAEd,IAAIC,EACJ,GAAI,CACAA,EAAY,IAAI,WAAW,MAAMT,EAAO,OAAO,QAAQ,CAAE,GAAAN,EAAI,KAAM,SAAU,EAAGK,EAAQN,CAAU,CAAC,CACvG,MACM,CACN,CACA,GAAI,CAACgB,EACD,MAAM,IAAID,EAEd,OAAOC,CACX,CACA,eAAeC,GAAWnB,EAAKC,EAAKC,EAAYC,EAAIC,EAAKC,EAAK,CAC1D,IAAIG,EACAP,aAAe,WACfO,EAAS,MAAMC,EAAO,OAAO,UAAU,MAAOR,EAAK,UAAW,GAAO,CAAC,SAAS,CAAC,GAGhFmB,EAAkBnB,EAAKD,EAAK,SAAS,EACrCQ,EAASP,GAEb,GAAI,CACA,OAAO,IAAI,WAAW,MAAMQ,EAAO,OAAO,QAAQ,CAC9C,eAAgBJ,EAChB,GAAAF,EACA,KAAM,UACN,UAAW,GACf,EAAGK,EAAQI,EAAOV,EAAYE,CAAG,CAAC,CAAC,CACvC,MACM,CACF,MAAM,IAAIa,CACd,CACJ,CACA,IAAMI,GAAU,MAAOrB,EAAKC,EAAKC,EAAYC,EAAIC,EAAKC,IAAQ,CAC1D,GAAI,CAACiB,EAAYrB,CAAG,GAAK,EAAEA,aAAe,YACtC,MAAM,IAAI,UAAUK,EAAgBL,EAAK,GAAGsB,EAAO,YAAY,CAAC,EAEpE,GAAI,CAACpB,EACD,MAAM,IAAIqB,EAAW,mCAAmC,EAE5D,GAAI,CAACpB,EACD,MAAM,IAAIoB,EAAW,gCAAgC,EAGzD,OADAC,GAAczB,EAAKG,CAAE,EACbH,EAAK,CACT,IAAK,gBACL,IAAK,gBACL,IAAK,gBACD,OAAIC,aAAe,YACfyB,GAAezB,EAAK,SAASD,EAAI,MAAM,EAAE,EAAG,EAAE,CAAC,EAC5CD,GAAWC,EAAKC,EAAKC,EAAYC,EAAIC,EAAKC,CAAG,EACxD,IAAK,UACL,IAAK,UACL,IAAK,UACD,OAAIJ,aAAe,YACfyB,GAAezB,EAAK,SAASD,EAAI,MAAM,EAAG,CAAC,EAAG,EAAE,CAAC,EAC9CmB,GAAWnB,EAAKC,EAAKC,EAAYC,EAAIC,EAAKC,CAAG,EACxD,QACI,MAAM,IAAIsB,EAAiB,8CAA8C,CACjF,CACJ,EACOC,GAAQP,GC1Ff,IAAMQ,GAAa,IAAIC,IAAY,CAC/B,IAAMC,EAAUD,EAAQ,OAAO,OAAO,EACtC,GAAIC,EAAQ,SAAW,GAAKA,EAAQ,SAAW,EAC3C,MAAO,GAEX,IAAIC,EACJ,QAAWC,KAAUF,EAAS,CAC1B,IAAMG,EAAa,OAAO,KAAKD,CAAM,EACrC,GAAI,CAACD,GAAOA,EAAI,OAAS,EAAG,CACxBA,EAAM,IAAI,IAAIE,CAAU,EACxB,QACJ,CACA,QAAWC,KAAaD,EAAY,CAChC,GAAIF,EAAI,IAAIG,CAAS,EACjB,MAAO,GAEXH,EAAI,IAAIG,CAAS,CACrB,CACJ,CACA,MAAO,EACX,EACOC,EAAQP,GCrBf,SAASQ,GAAaC,EAAO,CACzB,OAAO,OAAOA,GAAU,UAAYA,IAAU,IAClD,CACe,SAARC,EAA0BC,EAAO,CACpC,GAAI,CAACH,GAAaG,CAAK,GAAK,OAAO,UAAU,SAAS,KAAKA,CAAK,IAAM,kBAClE,MAAO,GAEX,GAAI,OAAO,eAAeA,CAAK,IAAM,KACjC,MAAO,GAEX,IAAIC,EAAQD,EACZ,KAAO,OAAO,eAAeC,CAAK,IAAM,MACpCA,EAAQ,OAAO,eAAeA,CAAK,EAEvC,OAAO,OAAO,eAAeD,CAAK,IAAMC,CAC5C,CCfA,IAAMC,GAAiB,CACnB,CAAE,KAAM,UAAW,KAAM,MAAO,EAChC,GACA,CAAC,MAAM,CACX,EACOC,GAAQD,GCAf,SAASE,GAAaC,EAAKC,EAAK,CAC5B,GAAID,EAAI,UAAU,SAAW,SAASC,EAAI,MAAM,EAAG,CAAC,EAAG,EAAE,EACrD,MAAM,IAAI,UAAU,6BAA6BA,CAAG,EAAE,CAE9D,CACA,SAASC,GAAaF,EAAKC,EAAKE,EAAO,CACnC,GAAIC,EAAYJ,CAAG,EACf,OAAAK,EAAkBL,EAAKC,EAAKE,CAAK,EAC1BH,EAEX,GAAIA,aAAe,WACf,OAAOM,EAAO,OAAO,UAAU,MAAON,EAAK,SAAU,GAAM,CAACG,CAAK,CAAC,EAEtE,MAAM,IAAI,UAAUI,EAAgBP,EAAK,GAAGQ,EAAO,YAAY,CAAC,CACpE,CACO,IAAMC,GAAO,MAAOR,EAAKD,EAAKU,IAAQ,CACzC,IAAMC,EAAY,MAAMT,GAAaF,EAAKC,EAAK,SAAS,EACxDF,GAAaY,EAAWV,CAAG,EAC3B,IAAMW,EAAe,MAAMN,EAAO,OAAO,UAAU,MAAOI,EAAK,GAAGG,EAAc,EAChF,OAAO,IAAI,WAAW,MAAMP,EAAO,OAAO,QAAQ,MAAOM,EAAcD,EAAW,QAAQ,CAAC,CAC/F,EACaG,GAAS,MAAOb,EAAKD,EAAKe,IAAiB,CACpD,IAAMJ,EAAY,MAAMT,GAAaF,EAAKC,EAAK,WAAW,EAC1DF,GAAaY,EAAWV,CAAG,EAC3B,IAAMW,EAAe,MAAMN,EAAO,OAAO,UAAU,MAAOS,EAAcJ,EAAW,SAAU,GAAGE,EAAc,EAC9G,OAAO,IAAI,WAAW,MAAMP,EAAO,OAAO,UAAU,MAAOM,CAAY,CAAC,CAC5E,EC1BA,eAAsBI,GAAUC,EAAWC,EAAYC,EAAWC,EAAWC,EAAM,IAAI,WAAW,CAAC,EAAGC,EAAM,IAAI,WAAW,CAAC,EAAG,CAC3H,GAAI,CAACC,EAAYN,CAAS,EACtB,MAAM,IAAI,UAAUO,EAAgBP,EAAW,GAAGQ,CAAK,CAAC,EAG5D,GADAC,EAAkBT,EAAW,MAAM,EAC/B,CAACM,EAAYL,CAAU,EACvB,MAAM,IAAI,UAAUM,EAAgBN,EAAY,GAAGO,CAAK,CAAC,EAE7DC,EAAkBR,EAAY,OAAQ,YAAY,EAClD,IAAMS,EAAQC,EAAOC,GAAeC,EAAQ,OAAOX,CAAS,CAAC,EAAGU,GAAeR,CAAG,EAAGQ,GAAeP,CAAG,EAAGS,GAASX,CAAS,CAAC,EACzHY,EACAf,EAAU,UAAU,OAAS,SAC7Be,EAAS,IAEJf,EAAU,UAAU,OAAS,OAClCe,EAAS,IAGTA,EACI,KAAK,KAAK,SAASf,EAAU,UAAU,WAAW,OAAO,EAAE,EAAG,EAAE,EAAI,CAAC,GACjE,EAEZ,IAAMgB,EAAe,IAAI,WAAW,MAAMC,EAAO,OAAO,WAAW,CAC/D,KAAMjB,EAAU,UAAU,KAC1B,OAAQA,CACZ,EAAGC,EAAYc,CAAM,CAAC,EACtB,OAAOG,GAAUF,EAAcb,EAAWO,CAAK,CACnD,CACA,eAAsBS,GAAYC,EAAK,CACnC,GAAI,CAACd,EAAYc,CAAG,EAChB,MAAM,IAAI,UAAUb,EAAgBa,EAAK,GAAGZ,CAAK,CAAC,EAEtD,OAAOS,EAAO,OAAO,YAAYG,EAAI,UAAW,GAAM,CAAC,YAAY,CAAC,CACxE,CACO,SAASC,GAAYD,EAAK,CAC7B,GAAI,CAACd,EAAYc,CAAG,EAChB,MAAM,IAAI,UAAUb,EAAgBa,EAAK,GAAGZ,CAAK,CAAC,EAEtD,MAAQ,CAAC,QAAS,QAAS,OAAO,EAAE,SAASY,EAAI,UAAU,UAAU,GACjEA,EAAI,UAAU,OAAS,UACvBA,EAAI,UAAU,OAAS,MAC/B,CC7Ce,SAARE,GAA0BC,EAAK,CAClC,GAAI,EAAEA,aAAe,aAAeA,EAAI,OAAS,EAC7C,MAAM,IAAIC,EAAW,2CAA2C,CAExE,CCIA,SAASC,GAAaC,EAAKC,EAAK,CAC5B,GAAID,aAAe,WACf,OAAOE,EAAO,OAAO,UAAU,MAAOF,EAAK,SAAU,GAAO,CAAC,YAAY,CAAC,EAE9E,GAAIG,EAAYH,CAAG,EACf,OAAAI,EAAkBJ,EAAKC,EAAK,aAAc,WAAW,EAC9CD,EAEX,MAAM,IAAI,UAAUK,EAAgBL,EAAK,GAAGM,EAAO,YAAY,CAAC,CACpE,CACA,eAAeC,GAAUC,EAAKP,EAAKQ,EAAKT,EAAK,CACzCU,GAASF,CAAG,EACZ,IAAMG,EAAOH,GAAWP,EAAKO,CAAG,EAC1BI,EAAS,SAASX,EAAI,MAAM,GAAI,EAAE,EAAG,EAAE,EACvCY,EAAY,CACd,KAAM,OAAOZ,EAAI,MAAM,EAAG,EAAE,CAAC,GAC7B,WAAYQ,EACZ,KAAM,SACN,KAAAE,CACJ,EACMG,EAAU,CACZ,OAAQF,EACR,KAAM,QACV,EACMG,EAAY,MAAMhB,GAAaC,EAAKC,CAAG,EAC7C,GAAIc,EAAU,OAAO,SAAS,YAAY,EACtC,OAAO,IAAI,WAAW,MAAMb,EAAO,OAAO,WAAWW,EAAWE,EAAWH,CAAM,CAAC,EAEtF,GAAIG,EAAU,OAAO,SAAS,WAAW,EACrC,OAAOb,EAAO,OAAO,UAAUW,EAAWE,EAAWD,EAAS,GAAO,CAAC,UAAW,WAAW,CAAC,EAEjG,MAAM,IAAI,UAAU,8DAA8D,CACtF,CACO,IAAME,GAAU,MAAOf,EAAKD,EAAKiB,EAAKR,EAAM,KAAMD,EAAMU,EAAO,IAAI,WAAW,EAAE,CAAC,IAAM,CAC1F,IAAMC,EAAU,MAAMZ,GAAUC,EAAKP,EAAKQ,EAAKT,CAAG,EAElD,MAAO,CAAE,aADY,MAAMoB,GAAKnB,EAAI,MAAM,EAAE,EAAGkB,EAASF,CAAG,EACpC,IAAAR,EAAK,IAAKY,EAAUb,CAAG,CAAE,CACpD,EACac,GAAU,MAAOrB,EAAKD,EAAKuB,EAAcd,EAAKD,IAAQ,CAC/D,IAAMW,EAAU,MAAMZ,GAAUC,EAAKP,EAAKQ,EAAKT,CAAG,EAClD,OAAOwB,GAAOvB,EAAI,MAAM,EAAE,EAAGkB,EAASI,CAAY,CACtD,ECjDe,SAARE,GAA6BC,EAAK,CACrC,OAAQA,EAAK,CACT,IAAK,WACL,IAAK,eACL,IAAK,eACL,IAAK,eACD,MAAO,WACX,QACI,MAAM,IAAIC,EAAiB,OAAOD,CAAG,6DAA6D,CAC1G,CACJ,CCXA,IAAOE,EAAQ,CAACC,EAAKC,IAAQ,CACzB,GAAID,EAAI,WAAW,IAAI,GAAKA,EAAI,WAAW,IAAI,EAAG,CAC9C,GAAM,CAAE,cAAAE,CAAc,EAAID,EAAI,UAC9B,GAAI,OAAOC,GAAkB,UAAYA,EAAgB,KACrD,MAAM,IAAI,UAAU,GAAGF,CAAG,uDAAuD,CAEzF,CACJ,ECAO,IAAMG,GAAU,MAAOC,EAAKC,EAAKC,IAAQ,CAC5C,GAAI,CAACC,EAAYF,CAAG,EAChB,MAAM,IAAI,UAAUG,EAAgBH,EAAK,GAAGI,CAAK,CAAC,EAItD,GAFAC,EAAkBL,EAAKD,EAAK,UAAW,SAAS,EAChDO,EAAeP,EAAKC,CAAG,EACnBA,EAAI,OAAO,SAAS,SAAS,EAC7B,OAAO,IAAI,WAAW,MAAMO,EAAO,OAAO,QAAQC,GAAgBT,CAAG,EAAGC,EAAKC,CAAG,CAAC,EAErF,GAAID,EAAI,OAAO,SAAS,SAAS,EAAG,CAChC,IAAMS,EAAe,MAAMF,EAAO,OAAO,UAAU,MAAON,EAAK,GAAGS,EAAc,EAChF,OAAO,IAAI,WAAW,MAAMH,EAAO,OAAO,QAAQ,MAAOE,EAAcT,EAAKQ,GAAgBT,CAAG,CAAC,CAAC,CACrG,CACA,MAAM,IAAI,UAAU,8EAA8E,CACtG,EACaY,GAAU,MAAOZ,EAAKC,EAAKY,IAAiB,CACrD,GAAI,CAACV,EAAYF,CAAG,EAChB,MAAM,IAAI,UAAUG,EAAgBH,EAAK,GAAGI,CAAK,CAAC,EAItD,GAFAC,EAAkBL,EAAKD,EAAK,UAAW,WAAW,EAClDO,EAAeP,EAAKC,CAAG,EACnBA,EAAI,OAAO,SAAS,SAAS,EAC7B,OAAO,IAAI,WAAW,MAAMO,EAAO,OAAO,QAAQC,GAAgBT,CAAG,EAAGC,EAAKY,CAAY,CAAC,EAE9F,GAAIZ,EAAI,OAAO,SAAS,WAAW,EAAG,CAClC,IAAMS,EAAe,MAAMF,EAAO,OAAO,UAAU,MAAOK,EAAcZ,EAAKQ,GAAgBT,CAAG,EAAG,GAAGW,EAAc,EACpH,OAAO,IAAI,WAAW,MAAMH,EAAO,OAAO,UAAU,MAAOE,CAAY,CAAC,CAC5E,CACA,MAAM,IAAI,UAAU,gFAAgF,CACxG,ECnCO,SAASI,EAAMC,EAAK,CACvB,OAAOC,EAASD,CAAG,GAAK,OAAOA,EAAI,KAAQ,QAC/C,CACO,SAASE,GAAaF,EAAK,CAC9B,OAAOA,EAAI,MAAQ,OAAS,OAAOA,EAAI,GAAM,QACjD,CACO,SAASG,GAAYH,EAAK,CAC7B,OAAOA,EAAI,MAAQ,OAAS,OAAOA,EAAI,EAAM,GACjD,CACO,SAASI,GAAYJ,EAAK,CAC7B,OAAOD,EAAMC,CAAG,GAAKA,EAAI,MAAQ,OAAS,OAAOA,EAAI,GAAM,QAC/D,CCVA,SAASK,GAAcC,EAAK,CACxB,IAAIC,EACAC,EACJ,OAAQF,EAAI,IAAK,CACb,IAAK,MAAO,CACR,OAAQA,EAAI,IAAK,CACb,IAAK,QACL,IAAK,QACL,IAAK,QACDC,EAAY,CAAE,KAAM,UAAW,KAAM,OAAOD,EAAI,IAAI,MAAM,EAAE,CAAC,EAAG,EAChEE,EAAYF,EAAI,EAAI,CAAC,MAAM,EAAI,CAAC,QAAQ,EACxC,MACJ,IAAK,QACL,IAAK,QACL,IAAK,QACDC,EAAY,CAAE,KAAM,oBAAqB,KAAM,OAAOD,EAAI,IAAI,MAAM,EAAE,CAAC,EAAG,EAC1EE,EAAYF,EAAI,EAAI,CAAC,MAAM,EAAI,CAAC,QAAQ,EACxC,MACJ,IAAK,WACL,IAAK,eACL,IAAK,eACL,IAAK,eACDC,EAAY,CACR,KAAM,WACN,KAAM,OAAO,SAASD,EAAI,IAAI,MAAM,EAAE,EAAG,EAAE,GAAK,CAAC,EACrD,EACAE,EAAYF,EAAI,EAAI,CAAC,UAAW,WAAW,EAAI,CAAC,UAAW,SAAS,EACpE,MACJ,QACI,MAAM,IAAIG,EAAiB,8DAA8D,CACjG,CACA,KACJ,CACA,IAAK,KAAM,CACP,OAAQH,EAAI,IAAK,CACb,IAAK,QACDC,EAAY,CAAE,KAAM,QAAS,WAAY,OAAQ,EACjDC,EAAYF,EAAI,EAAI,CAAC,MAAM,EAAI,CAAC,QAAQ,EACxC,MACJ,IAAK,QACDC,EAAY,CAAE,KAAM,QAAS,WAAY,OAAQ,EACjDC,EAAYF,EAAI,EAAI,CAAC,MAAM,EAAI,CAAC,QAAQ,EACxC,MACJ,IAAK,QACDC,EAAY,CAAE,KAAM,QAAS,WAAY,OAAQ,EACjDC,EAAYF,EAAI,EAAI,CAAC,MAAM,EAAI,CAAC,QAAQ,EACxC,MACJ,IAAK,UACL,IAAK,iBACL,IAAK,iBACL,IAAK,iBACDC,EAAY,CAAE,KAAM,OAAQ,WAAYD,EAAI,GAAI,EAChDE,EAAYF,EAAI,EAAI,CAAC,YAAY,EAAI,CAAC,EACtC,MACJ,QACI,MAAM,IAAIG,EAAiB,8DAA8D,CACjG,CACA,KACJ,CACA,IAAK,MAAO,CACR,OAAQH,EAAI,IAAK,CACb,IAAK,QACDC,EAAY,CAAE,KAAMD,EAAI,GAAI,EAC5BE,EAAYF,EAAI,EAAI,CAAC,MAAM,EAAI,CAAC,QAAQ,EACxC,MACJ,IAAK,UACL,IAAK,iBACL,IAAK,iBACL,IAAK,iBACDC,EAAY,CAAE,KAAMD,EAAI,GAAI,EAC5BE,EAAYF,EAAI,EAAI,CAAC,YAAY,EAAI,CAAC,EACtC,MACJ,QACI,MAAM,IAAIG,EAAiB,8DAA8D,CACjG,CACA,KACJ,CACA,QACI,MAAM,IAAIA,EAAiB,6DAA6D,CAChG,CACA,MAAO,CAAE,UAAAF,EAAW,UAAAC,CAAU,CAClC,CACA,IAAME,GAAQ,MAAOJ,GAAQ,CACzB,GAAI,CAACA,EAAI,IACL,MAAM,IAAI,UAAU,0DAA0D,EAElF,GAAM,CAAE,UAAAC,EAAW,UAAAC,CAAU,EAAIH,GAAcC,CAAG,EAC5CK,EAAO,CACTJ,EACAD,EAAI,KAAO,GACXA,EAAI,SAAWE,CACnB,EACMI,EAAU,CAAE,GAAGN,CAAI,EACzB,cAAOM,EAAQ,IACf,OAAOA,EAAQ,IACRC,EAAO,OAAO,UAAU,MAAOD,EAAS,GAAGD,CAAI,CAC1D,EACOG,GAAQJ,GChGf,IAAMK,GAAkBC,GAAMC,EAAOD,CAAC,EAClCE,GACAC,GACEC,GAAeC,GACVA,IAAM,OAAO,WAAW,IAAM,YAEnCC,GAAiB,MAAOC,EAAOF,EAAKG,EAAKC,EAAKC,EAAS,KAAU,CACnE,IAAIC,EAASJ,EAAM,IAAIF,CAAG,EAC1B,GAAIM,IAASF,CAAG,EACZ,OAAOE,EAAOF,CAAG,EAErB,IAAMG,EAAY,MAAMC,GAAU,CAAE,GAAGL,EAAK,IAAAC,CAAI,CAAC,EACjD,OAAIC,GACA,OAAO,OAAOL,CAAG,EAChBM,EAIDA,EAAOF,CAAG,EAAIG,EAHdL,EAAM,IAAIF,EAAK,CAAE,CAACI,CAAG,EAAGG,CAAU,CAAC,EAKhCA,CACX,EACME,GAAqB,CAACT,EAAKI,IAAQ,CACrC,GAAIL,GAAYC,CAAG,EAAG,CAClB,IAAIG,EAAMH,EAAI,OAAO,CAAE,OAAQ,KAAM,CAAC,EAOtC,OANA,OAAOG,EAAI,EACX,OAAOA,EAAI,GACX,OAAOA,EAAI,GACX,OAAOA,EAAI,EACX,OAAOA,EAAI,EACX,OAAOA,EAAI,GACPA,EAAI,EACGT,GAAeS,EAAI,CAAC,GAE/BL,KAAaA,GAAW,IAAI,SACrBG,GAAeH,GAAUE,EAAKG,EAAKC,CAAG,EACjD,CACA,OAAIM,EAAMV,CAAG,EACLA,EAAI,EACGJ,EAAOI,EAAI,CAAC,GACvBF,KAAaA,GAAW,IAAI,SACVG,GAAeH,GAAUE,EAAKA,EAAKI,EAAK,EAAI,GAG3DJ,CACX,EACMW,GAAsB,CAACX,EAAKI,IAAQ,CACtC,GAAIL,GAAYC,CAAG,EAAG,CAClB,IAAIG,EAAMH,EAAI,OAAO,CAAE,OAAQ,KAAM,CAAC,EACtC,OAAIG,EAAI,EACGT,GAAeS,EAAI,CAAC,GAE/BN,KAAcA,GAAY,IAAI,SACvBI,GAAeJ,GAAWG,EAAKG,EAAKC,CAAG,EAClD,CACA,OAAIM,EAAMV,CAAG,EACLA,EAAI,EACGJ,EAAOI,EAAI,CAAC,GACvBH,KAAcA,GAAY,IAAI,SACZI,GAAeJ,GAAWG,EAAKA,EAAKI,EAAK,EAAI,GAG5DJ,CACX,EACOY,EAAQ,CAAE,mBAAAH,GAAoB,oBAAAE,EAAoB,ECjElD,SAASE,GAAUC,EAAK,CAC3B,OAAQA,EAAK,CACT,IAAK,UACD,MAAO,KACX,IAAK,UACD,MAAO,KACX,IAAK,UACL,IAAK,gBACD,MAAO,KACX,IAAK,gBACD,MAAO,KACX,IAAK,gBACD,MAAO,KACX,QACI,MAAM,IAAIC,EAAiB,8BAA8BD,CAAG,EAAE,CACtE,CACJ,CACA,IAAOE,EAASF,GAAQG,EAAO,IAAI,WAAWJ,GAAUC,CAAG,GAAK,CAAC,CAAC,ECnBlE,IAAOI,GAAQ,CAACC,EAAKC,IAAe,CAChC,IAAMC,GAAYF,EAAI,MAAM,UAAU,GAAK,CAAC,GAAG,KAAK;AAAA,CAAI,EACxD,MAAO,cAAcC,CAAU;AAAA,EAAUC,CAAQ;AAAA,WAAcD,CAAU,OAC7E,ECGA,IAAME,GAAgB,MAAOC,EAASC,EAAWC,IAAQ,CACrD,GAAI,CAACC,EAAYD,CAAG,EAChB,MAAM,IAAI,UAAUE,EAAgBF,EAAK,GAAGG,CAAK,CAAC,EAEtD,GAAI,CAACH,EAAI,YACL,MAAM,IAAI,UAAU,8BAA8B,EAEtD,GAAIA,EAAI,OAASF,EACb,MAAM,IAAI,UAAU,gBAAgBA,CAAO,MAAM,EAErD,OAAOM,GAAUC,GAAa,IAAI,WAAW,MAAMC,EAAO,OAAO,UAAUP,EAAWC,CAAG,CAAC,CAAC,EAAG,GAAGF,EAAQ,YAAY,CAAC,MAAM,CAChI,EACaS,GAAUP,GACZH,GAAc,SAAU,OAAQG,CAAG,EAEjCQ,GAAWR,GACbH,GAAc,UAAW,QAASG,CAAG,EAE1CS,EAAU,CAACC,EAASC,EAAKC,EAAO,IAAM,CACpCA,IAAS,IACTD,EAAI,QAAQA,EAAI,MAAM,EACtBA,EAAI,QAAQ,CAAI,GAEpB,IAAME,EAAIH,EAAQ,QAAQC,EAAI,CAAC,EAAGC,CAAI,EACtC,GAAIC,IAAM,GACN,MAAO,GACX,IAAMC,EAAMJ,EAAQ,SAASG,EAAGA,EAAIF,EAAI,MAAM,EAC9C,OAAIG,EAAI,SAAWH,EAAI,OACZ,GACJG,EAAI,MAAM,CAACC,EAAOC,IAAUD,IAAUJ,EAAIK,CAAK,CAAC,GAAKP,EAAQC,EAASC,EAAKE,EAAI,CAAC,CAC3F,EACMI,GAAiBP,GAAY,CAC/B,OAAQ,GAAM,CACV,KAAKD,EAAQC,EAAS,CAAC,GAAM,IAAM,GAAM,IAAM,GAAM,EAAM,EAAM,CAAI,CAAC,EAClE,MAAO,QACX,KAAKD,EAAQC,EAAS,CAAC,GAAM,IAAM,EAAM,EAAM,EAAI,CAAC,EAChD,MAAO,QACX,KAAKD,EAAQC,EAAS,CAAC,GAAM,IAAM,EAAM,EAAM,EAAI,CAAC,EAChD,MAAO,QACX,KAAKD,EAAQC,EAAS,CAAC,GAAM,IAAM,GAAI,CAAC,EACpC,MAAO,SACX,KAAKD,EAAQC,EAAS,CAAC,GAAM,IAAM,GAAI,CAAC,EACpC,MAAO,OACX,KAAKD,EAAQC,EAAS,CAAC,GAAM,IAAM,GAAI,CAAC,EACpC,MAAO,UACX,KAAKD,EAAQC,EAAS,CAAC,GAAM,IAAM,GAAI,CAAC,EACpC,MAAO,QACX,QACI,MAAM,IAAIQ,EAAiB,yDAAyD,CAC5F,CACJ,EACMC,GAAgB,MAAOC,EAASrB,EAAWsB,EAAKC,EAAKC,IAAY,CACnE,IAAIC,EACAC,EACEf,EAAU,IAAI,WAAW,KAAKW,EAAI,QAAQD,EAAS,EAAE,CAAC,EACvD,MAAM,EAAE,EACR,IAAKM,GAAMA,EAAE,WAAW,CAAC,CAAC,CAAC,EAC1BC,EAAW5B,IAAc,OAC/B,OAAQuB,EAAK,CACT,IAAK,QACL,IAAK,QACL,IAAK,QACDE,EAAY,CAAE,KAAM,UAAW,KAAM,OAAOF,EAAI,MAAM,EAAE,CAAC,EAAG,EAC5DG,EAAYE,EAAW,CAAC,QAAQ,EAAI,CAAC,MAAM,EAC3C,MACJ,IAAK,QACL,IAAK,QACL,IAAK,QACDH,EAAY,CAAE,KAAM,oBAAqB,KAAM,OAAOF,EAAI,MAAM,EAAE,CAAC,EAAG,EACtEG,EAAYE,EAAW,CAAC,QAAQ,EAAI,CAAC,MAAM,EAC3C,MACJ,IAAK,WACL,IAAK,eACL,IAAK,eACL,IAAK,eACDH,EAAY,CACR,KAAM,WACN,KAAM,OAAO,SAASF,EAAI,MAAM,EAAE,EAAG,EAAE,GAAK,CAAC,EACjD,EACAG,EAAYE,EAAW,CAAC,UAAW,SAAS,EAAI,CAAC,UAAW,WAAW,EACvE,MACJ,IAAK,QACDH,EAAY,CAAE,KAAM,QAAS,WAAY,OAAQ,EACjDC,EAAYE,EAAW,CAAC,QAAQ,EAAI,CAAC,MAAM,EAC3C,MACJ,IAAK,QACDH,EAAY,CAAE,KAAM,QAAS,WAAY,OAAQ,EACjDC,EAAYE,EAAW,CAAC,QAAQ,EAAI,CAAC,MAAM,EAC3C,MACJ,IAAK,QACDH,EAAY,CAAE,KAAM,QAAS,WAAY,OAAQ,EACjDC,EAAYE,EAAW,CAAC,QAAQ,EAAI,CAAC,MAAM,EAC3C,MACJ,IAAK,UACL,IAAK,iBACL,IAAK,iBACL,IAAK,iBAAkB,CACnB,IAAMC,EAAaX,GAAcP,CAAO,EACxCc,EAAYI,EAAW,WAAW,IAAI,EAAI,CAAE,KAAM,OAAQ,WAAAA,CAAW,EAAI,CAAE,KAAMA,CAAW,EAC5FH,EAAYE,EAAW,CAAC,EAAI,CAAC,YAAY,EACzC,KACJ,CACA,IAAK,QACDH,EAAY,CAAE,KAAMP,GAAcP,CAAO,CAAE,EAC3Ce,EAAYE,EAAW,CAAC,QAAQ,EAAI,CAAC,MAAM,EAC3C,MACJ,QACI,MAAM,IAAIT,EAAiB,gDAAgD,CACnF,CACA,OAAOZ,EAAO,OAAO,UAAUP,EAAWW,EAASc,EAAWD,GAAS,aAAe,GAAOE,CAAS,CAC1G,EACaI,GAAY,CAACR,EAAKC,EAAKC,IACzBJ,GAAc,8CAA+C,QAASE,EAAKC,EAAKC,CAAO,EAErFO,GAAW,CAACT,EAAKC,EAAKC,IACxBJ,GAAc,6CAA8C,OAAQE,EAAKC,EAAKC,CAAO,EAEhG,SAASQ,GAAWC,EAAK,CACrB,IAAMC,EAAS,CAAC,EACZC,EAAO,EACX,KAAOA,EAAOF,EAAI,QAAQ,CACtB,IAAMG,EAAWC,GAAaJ,EAAI,SAASE,CAAI,CAAC,EAChDD,EAAO,KAAKE,CAAQ,EACpBD,GAAQC,EAAS,UACrB,CACA,OAAOF,CACX,CACA,SAASG,GAAaC,EAAO,CACzB,IAAIC,EAAW,EACXC,EAAMF,EAAM,CAAC,EAAI,GAErB,GADAC,IACIC,IAAQ,GAAM,CAEd,IADAA,EAAM,EACCF,EAAMC,CAAQ,GAAK,KACtBC,EAAMA,EAAM,IAAMF,EAAMC,CAAQ,EAAI,IACpCA,IAEJC,EAAMA,EAAM,IAAMF,EAAMC,CAAQ,EAAI,IACpCA,GACJ,CACA,IAAIE,EAAS,EACb,GAAIH,EAAMC,CAAQ,EAAI,IAClBE,EAASH,EAAMC,CAAQ,EACvBA,YAEKE,IAAW,IAAM,CAEtB,IADAA,EAAS,EACFH,EAAMC,EAAWE,CAAM,IAAM,GAAKH,EAAMC,EAAWE,EAAS,CAAC,IAAM,GAAG,CACzE,GAAIA,EAASH,EAAM,WACf,MAAM,IAAI,UAAU,gCAAgC,EAExDG,GACJ,CACA,IAAMC,EAAaH,EAAWE,EAAS,EACvC,MAAO,CACH,WAAAC,EACA,SAAUJ,EAAM,SAASC,EAAUA,EAAWE,CAAM,EACpD,IAAKH,EAAM,SAAS,EAAGI,CAAU,CACrC,CACJ,KACK,CACD,IAAMC,EAAiBL,EAAMC,CAAQ,EAAI,IACzCA,IACAE,EAAS,EACT,QAAS,EAAI,EAAG,EAAIE,EAAgB,IAChCF,EAASA,EAAS,IAAMH,EAAMC,CAAQ,EACtCA,GAER,CACA,IAAMG,EAAaH,EAAWE,EAC9B,MAAO,CACH,WAAAC,EACA,SAAUJ,EAAM,SAASC,EAAUG,CAAU,EAC7C,IAAKJ,EAAM,SAAS,EAAGI,CAAU,CACrC,CACJ,CACA,SAASE,GAAaC,EAAK,CACvB,IAAMC,EAAiBd,GAAWA,GAAWK,GAAaQ,CAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EACpF,OAAOvC,GAAawC,EAAeA,EAAe,CAAC,EAAE,IAAI,CAAC,IAAM,IAAO,EAAI,CAAC,EAAE,GAAG,CACrF,CACA,SAASC,GAAQC,EAAM,CACnB,IAAM1B,EAAM0B,EAAK,QAAQ,8CAA+C,EAAE,EACpEC,EAAMC,GAAa5B,CAAG,EAC5B,OAAOjB,GAAUuC,GAAaK,CAAG,EAAG,YAAY,CACpD,CACO,IAAME,GAAW,CAAC7B,EAAKC,EAAKC,IAAY,CAC3C,IAAI4B,EACJ,GAAI,CACAA,EAAOL,GAAQzB,CAAG,CACtB,OACO+B,EAAO,CACV,MAAM,IAAI,UAAU,wCAAyC,CAAE,MAAAA,CAAM,CAAC,CAC1E,CACA,OAAOtB,GAASqB,EAAM7B,EAAKC,CAAO,CACtC,ECnMA,eAAsB8B,GAAWC,EAAMC,EAAKC,EAAS,CACjD,GAAI,OAAOF,GAAS,UAAYA,EAAK,QAAQ,4BAA4B,IAAM,EAC3E,MAAM,IAAI,UAAU,sCAAsC,EAE9D,OAAOG,GAASH,EAAMC,EAAKC,CAAO,CACtC,CACA,eAAsBE,GAAWC,EAAMJ,EAAKC,EAAS,CACjD,GAAI,OAAOG,GAAS,UAAYA,EAAK,QAAQ,6BAA6B,IAAM,EAC5E,MAAM,IAAI,UAAU,uCAAuC,EAE/D,OAAOC,GAASD,EAAMJ,EAAKC,CAAO,CACtC,CACA,eAAsBK,GAAYC,EAAOP,EAAKC,EAAS,CACnD,GAAI,OAAOM,GAAU,UAAYA,EAAM,QAAQ,6BAA6B,IAAM,EAC9E,MAAM,IAAI,UAAU,yCAAyC,EAEjE,OAAOC,GAAUD,EAAOP,EAAKC,CAAO,CACxC,CACA,eAAsBQ,EAAUC,EAAKV,EAAK,CACtC,GAAI,CAACW,EAASD,CAAG,EACb,MAAM,IAAI,UAAU,uBAAuB,EAG/C,OADAV,IAAQA,EAAMU,EAAI,KACVA,EAAI,IAAK,CACb,IAAK,MACD,GAAI,OAAOA,EAAI,GAAM,UAAY,CAACA,EAAI,EAClC,MAAM,IAAI,UAAU,yCAAyC,EAEjE,OAAOE,EAAgBF,EAAI,CAAC,EAChC,IAAK,MACD,GAAIA,EAAI,MAAQ,OACZ,MAAM,IAAIG,EAAiB,oEAAoE,EAEvG,IAAK,KACL,IAAK,MACD,OAAOC,GAAY,CAAE,GAAGJ,EAAK,IAAAV,CAAI,CAAC,EACtC,QACI,MAAM,IAAIa,EAAiB,8CAA8C,CACjF,CACJ,CCzCA,IAAME,GAAOC,GAAQA,IAAM,OAAO,WAAW,EACvCC,GAAe,CAACC,EAAKF,EAAKG,IAAU,CACtC,GAAIH,EAAI,MAAQ,QAAaA,EAAI,MAAQ,MACrC,MAAM,IAAI,UAAU,kEAAkE,EAE1F,GAAIA,EAAI,UAAY,QAAaA,EAAI,QAAQ,WAAWG,CAAK,IAAM,GAC/D,MAAM,IAAI,UAAU,yEAAyEA,CAAK,EAAE,EAExG,GAAIH,EAAI,MAAQ,QAAaA,EAAI,MAAQE,EACrC,MAAM,IAAI,UAAU,gEAAgEA,CAAG,EAAE,EAE7F,MAAO,EACX,EACME,GAAqB,CAACF,EAAKF,EAAKG,EAAOE,IAAa,CACtD,GAAI,EAAAL,aAAe,YAEnB,IAAIK,GAAgBC,EAAMN,CAAG,EAAG,CAC5B,GAAQO,GAAYP,CAAG,GAAKC,GAAaC,EAAKF,EAAKG,CAAK,EACpD,OACJ,MAAM,IAAI,UAAU,yHAAyH,CACjJ,CACA,GAAI,CAACK,GAAUR,CAAG,EACd,MAAM,IAAI,UAAUS,GAAgBP,EAAKF,EAAK,GAAGU,EAAO,aAAcL,EAAW,eAAiB,IAAI,CAAC,EAE3G,GAAIL,EAAI,OAAS,SACb,MAAM,IAAI,UAAU,GAAGD,GAAIC,CAAG,CAAC,8DAA8D,EAErG,EACMW,GAAsB,CAACT,EAAKF,EAAKG,EAAOE,IAAa,CACvD,GAAIA,GAAgBC,EAAMN,CAAG,EACzB,OAAQG,EAAO,CACX,IAAK,OACD,GAAQS,GAAaZ,CAAG,GAAKC,GAAaC,EAAKF,EAAKG,CAAK,EACrD,OACJ,MAAM,IAAI,UAAU,kDAAkD,EAC1E,IAAK,SACD,GAAQU,GAAYb,CAAG,GAAKC,GAAaC,EAAKF,EAAKG,CAAK,EACpD,OACJ,MAAM,IAAI,UAAU,iDAAiD,CAC7E,CAEJ,GAAI,CAACK,GAAUR,CAAG,EACd,MAAM,IAAI,UAAUS,GAAgBP,EAAKF,EAAK,GAAGU,EAAOL,EAAW,eAAiB,IAAI,CAAC,EAE7F,GAAIL,EAAI,OAAS,SACb,MAAM,IAAI,UAAU,GAAGD,GAAIC,CAAG,CAAC,mEAAmE,EAEtG,GAAIG,IAAU,QAAUH,EAAI,OAAS,SACjC,MAAM,IAAI,UAAU,GAAGD,GAAIC,CAAG,CAAC,uEAAuE,EAE1G,GAAIG,IAAU,WAAaH,EAAI,OAAS,SACpC,MAAM,IAAI,UAAU,GAAGD,GAAIC,CAAG,CAAC,0EAA0E,EAE7G,GAAIA,EAAI,WAAaG,IAAU,UAAYH,EAAI,OAAS,UACpD,MAAM,IAAI,UAAU,GAAGD,GAAIC,CAAG,CAAC,wEAAwE,EAE3G,GAAIA,EAAI,WAAaG,IAAU,WAAaH,EAAI,OAAS,UACrD,MAAM,IAAI,UAAU,GAAGD,GAAIC,CAAG,CAAC,yEAAyE,CAEhH,EACA,SAASc,GAAaT,EAAUH,EAAKF,EAAKG,EAAO,CAC3BD,EAAI,WAAW,IAAI,GACjCA,IAAQ,OACRA,EAAI,WAAW,OAAO,GACtB,qBAAqB,KAAKA,CAAG,EAE7BE,GAAmBF,EAAKF,EAAKG,EAAOE,CAAQ,EAG5CM,GAAoBT,EAAKF,EAAKG,EAAOE,CAAQ,CAErD,CACA,IAAOU,GAAQD,GAAa,KAAK,OAAW,EAAK,EACpCE,GAAsBF,GAAa,KAAK,OAAW,EAAI,ECnEpE,eAAeG,GAAWC,EAAKC,EAAWC,EAAKC,EAAIC,EAAK,CACpD,GAAI,EAAEF,aAAe,YACjB,MAAM,IAAI,UAAUG,EAAgBH,EAAK,YAAY,CAAC,EAE1D,IAAMI,EAAU,SAASN,EAAI,MAAM,EAAG,CAAC,EAAG,EAAE,EACtCO,EAAS,MAAMC,EAAO,OAAO,UAAU,MAAON,EAAI,SAASI,GAAW,CAAC,EAAG,UAAW,GAAO,CAAC,SAAS,CAAC,EACvGG,EAAS,MAAMD,EAAO,OAAO,UAAU,MAAON,EAAI,SAAS,EAAGI,GAAW,CAAC,EAAG,CAC/E,KAAM,OAAOA,GAAW,CAAC,GACzB,KAAM,MACV,EAAG,GAAO,CAAC,MAAM,CAAC,EACZI,EAAa,IAAI,WAAW,MAAMF,EAAO,OAAO,QAAQ,CAC1D,GAAAL,EACA,KAAM,SACV,EAAGI,EAAQN,CAAS,CAAC,EACfU,EAAUC,EAAOR,EAAKD,EAAIO,EAAYG,GAAST,EAAI,QAAU,CAAC,CAAC,EAC/DU,EAAM,IAAI,YAAY,MAAMN,EAAO,OAAO,KAAK,OAAQC,EAAQE,CAAO,GAAG,MAAM,EAAGL,GAAW,CAAC,CAAC,EACrG,MAAO,CAAE,WAAAI,EAAY,IAAAI,EAAK,GAAAX,CAAG,CACjC,CACA,eAAeY,GAAWf,EAAKC,EAAWC,EAAKC,EAAIC,EAAK,CACpD,IAAIG,EACAL,aAAe,WACfK,EAAS,MAAMC,EAAO,OAAO,UAAU,MAAON,EAAK,UAAW,GAAO,CAAC,SAAS,CAAC,GAGhFc,EAAkBd,EAAKF,EAAK,SAAS,EACrCO,EAASL,GAEb,IAAMe,EAAY,IAAI,WAAW,MAAMT,EAAO,OAAO,QAAQ,CACzD,eAAgBJ,EAChB,GAAAD,EACA,KAAM,UACN,UAAW,GACf,EAAGI,EAAQN,CAAS,CAAC,EACfa,EAAMG,EAAU,MAAM,GAAG,EAE/B,MAAO,CAAE,WADUA,EAAU,MAAM,EAAG,GAAG,EACpB,IAAAH,EAAK,GAAAX,CAAG,CACjC,CACA,IAAMe,GAAU,MAAOlB,EAAKC,EAAWC,EAAKC,EAAIC,IAAQ,CACpD,GAAI,CAACe,EAAYjB,CAAG,GAAK,EAAEA,aAAe,YACtC,MAAM,IAAI,UAAUG,EAAgBH,EAAK,GAAGkB,EAAO,YAAY,CAAC,EAQpE,OANIjB,EACAkB,GAAcrB,EAAKG,CAAE,EAGrBA,EAAKmB,GAAWtB,CAAG,EAEfA,EAAK,CACT,IAAK,gBACL,IAAK,gBACL,IAAK,gBACD,OAAIE,aAAe,YACfqB,GAAerB,EAAK,SAASF,EAAI,MAAM,EAAE,EAAG,EAAE,CAAC,EAE5CD,GAAWC,EAAKC,EAAWC,EAAKC,EAAIC,CAAG,EAClD,IAAK,UACL,IAAK,UACL,IAAK,UACD,OAAIF,aAAe,YACfqB,GAAerB,EAAK,SAASF,EAAI,MAAM,EAAG,CAAC,EAAG,EAAE,CAAC,EAE9Ce,GAAWf,EAAKC,EAAWC,EAAKC,EAAIC,CAAG,EAClD,QACI,MAAM,IAAIoB,EAAiB,8CAA8C,CACjF,CACJ,EACOC,GAAQP,GCxEf,eAAsBQ,GAAKC,EAAKC,EAAKC,EAAKC,EAAI,CAC1C,IAAMC,EAAeJ,EAAI,MAAM,EAAG,CAAC,EAC7BK,EAAU,MAAMC,GAAQF,EAAcF,EAAKD,EAAKE,EAAI,IAAI,WAAW,CAAC,CAAC,EAC3E,MAAO,CACH,aAAcE,EAAQ,WACtB,GAAIE,EAAUF,EAAQ,EAAE,EACxB,IAAKE,EAAUF,EAAQ,GAAG,CAC9B,CACJ,CACA,eAAsBG,GAAOR,EAAKC,EAAKQ,EAAcN,EAAIO,EAAK,CAC1D,IAAMN,EAAeJ,EAAI,MAAM,EAAG,CAAC,EACnC,OAAOW,GAAQP,EAAcH,EAAKQ,EAAcN,EAAIO,EAAK,IAAI,WAAW,CAAC,CAAC,CAC9E,CCHA,eAAeE,GAAqBC,EAAKC,EAAKC,EAAcC,EAAYC,EAAS,CAG7E,OAFAC,GAAaL,EAAKC,EAAK,SAAS,EAChCA,EAAO,MAAMK,EAAU,sBAAsBL,EAAKD,CAAG,GAAMC,EACnDD,EAAK,CACT,IAAK,MAAO,CACR,GAAIE,IAAiB,OACjB,MAAM,IAAIK,EAAW,0CAA0C,EACnE,OAAON,CACX,CACA,IAAK,UACD,GAAIC,IAAiB,OACjB,MAAM,IAAIK,EAAW,0CAA0C,EACvE,IAAK,iBACL,IAAK,iBACL,IAAK,iBAAkB,CACnB,GAAI,CAACC,EAASL,EAAW,GAAG,EACxB,MAAM,IAAII,EAAW,6DAA6D,EACtF,GAAI,CAAME,GAAYR,CAAG,EACrB,MAAM,IAAIS,EAAiB,uFAAuF,EACtH,IAAMC,EAAM,MAAMC,EAAUT,EAAW,IAAKH,CAAG,EAC3Ca,EACAC,EACJ,GAAIX,EAAW,MAAQ,OAAW,CAC9B,GAAI,OAAOA,EAAW,KAAQ,SAC1B,MAAM,IAAII,EAAW,kDAAkD,EAC3E,GAAI,CACAM,EAAaE,EAAUZ,EAAW,GAAG,CACzC,MACM,CACF,MAAM,IAAII,EAAW,oCAAoC,CAC7D,CACJ,CACA,GAAIJ,EAAW,MAAQ,OAAW,CAC9B,GAAI,OAAOA,EAAW,KAAQ,SAC1B,MAAM,IAAII,EAAW,kDAAkD,EAC3E,GAAI,CACAO,EAAaC,EAAUZ,EAAW,GAAG,CACzC,MACM,CACF,MAAM,IAAII,EAAW,oCAAoC,CAC7D,CACJ,CACA,IAAMS,EAAe,MAAWC,GAAUN,EAAKV,EAAKD,IAAQ,UAAYG,EAAW,IAAMH,EAAKA,IAAQ,UAAYkB,GAAUf,EAAW,GAAG,EAAI,SAASH,EAAI,MAAM,GAAI,EAAE,EAAG,EAAE,EAAGa,EAAYC,CAAU,EACrM,GAAId,IAAQ,UACR,OAAOgB,EACX,GAAId,IAAiB,OACjB,MAAM,IAAIK,EAAW,2BAA2B,EACpD,OAAOY,GAAMnB,EAAI,MAAM,EAAE,EAAGgB,EAAcd,CAAY,CAC1D,CACA,IAAK,SACL,IAAK,WACL,IAAK,eACL,IAAK,eACL,IAAK,eAAgB,CACjB,GAAIA,IAAiB,OACjB,MAAM,IAAIK,EAAW,2BAA2B,EACpD,OAAOa,GAAMpB,EAAKC,EAAKC,CAAY,CACvC,CACA,IAAK,qBACL,IAAK,qBACL,IAAK,qBAAsB,CACvB,GAAIA,IAAiB,OACjB,MAAM,IAAIK,EAAW,2BAA2B,EACpD,GAAI,OAAOJ,EAAW,KAAQ,SAC1B,MAAM,IAAII,EAAW,oDAAoD,EAC7E,IAAMc,EAAWjB,GAAS,eAAiB,IAC3C,GAAID,EAAW,IAAMkB,EACjB,MAAM,IAAId,EAAW,6DAA6D,EACtF,GAAI,OAAOJ,EAAW,KAAQ,SAC1B,MAAM,IAAII,EAAW,mDAAmD,EAC5E,IAAIe,EACJ,GAAI,CACAA,EAAMP,EAAUZ,EAAW,GAAG,CAClC,MACM,CACF,MAAM,IAAII,EAAW,oCAAoC,CAC7D,CACA,OAAOa,GAAQpB,EAAKC,EAAKC,EAAcC,EAAW,IAAKmB,CAAG,CAC9D,CACA,IAAK,SACL,IAAK,SACL,IAAK,SAAU,CACX,GAAIpB,IAAiB,OACjB,MAAM,IAAIK,EAAW,2BAA2B,EACpD,OAAOY,GAAMnB,EAAKC,EAAKC,CAAY,CACvC,CACA,IAAK,YACL,IAAK,YACL,IAAK,YAAa,CACd,GAAIA,IAAiB,OACjB,MAAM,IAAIK,EAAW,2BAA2B,EACpD,GAAI,OAAOJ,EAAW,IAAO,SACzB,MAAM,IAAII,EAAW,6DAA6D,EACtF,GAAI,OAAOJ,EAAW,KAAQ,SAC1B,MAAM,IAAII,EAAW,2DAA2D,EACpF,IAAIgB,EACJ,GAAI,CACAA,EAAKR,EAAUZ,EAAW,EAAE,CAChC,MACM,CACF,MAAM,IAAII,EAAW,mCAAmC,CAC5D,CACA,IAAIiB,EACJ,GAAI,CACAA,EAAMT,EAAUZ,EAAW,GAAG,CAClC,MACM,CACF,MAAM,IAAII,EAAW,oCAAoC,CAC7D,CACA,OAAOY,GAASnB,EAAKC,EAAKC,EAAcqB,EAAIC,CAAG,CACnD,CACA,QACI,MAAM,IAAId,EAAiB,2DAA2D,CAE9F,CACJ,CACA,IAAOe,GAAQ1B,GC/Hf,SAAS2B,GAAaC,EAAKC,EAAmBC,EAAkBC,EAAiBC,EAAY,CACzF,GAAIA,EAAW,OAAS,QAAaD,GAAiB,OAAS,OAC3D,MAAM,IAAIH,EAAI,gEAAgE,EAElF,GAAI,CAACG,GAAmBA,EAAgB,OAAS,OAC7C,OAAO,IAAI,IAEf,GAAI,CAAC,MAAM,QAAQA,EAAgB,IAAI,GACnCA,EAAgB,KAAK,SAAW,GAChCA,EAAgB,KAAK,KAAME,GAAU,OAAOA,GAAU,UAAYA,EAAM,SAAW,CAAC,EACpF,MAAM,IAAIL,EAAI,uFAAuF,EAEzG,IAAIM,EACAJ,IAAqB,OACrBI,EAAa,IAAI,IAAI,CAAC,GAAG,OAAO,QAAQJ,CAAgB,EAAG,GAAGD,EAAkB,QAAQ,CAAC,CAAC,EAG1FK,EAAaL,EAEjB,QAAWM,KAAaJ,EAAgB,KAAM,CAC1C,GAAI,CAACG,EAAW,IAAIC,CAAS,EACzB,MAAM,IAAIC,EAAiB,+BAA+BD,CAAS,qBAAqB,EAE5F,GAAIH,EAAWG,CAAS,IAAM,OAC1B,MAAM,IAAIP,EAAI,+BAA+BO,CAAS,cAAc,EAExE,GAAID,EAAW,IAAIC,CAAS,GAAKJ,EAAgBI,CAAS,IAAM,OAC5D,MAAM,IAAIP,EAAI,+BAA+BO,CAAS,+BAA+B,CAE7F,CACA,OAAO,IAAI,IAAIJ,EAAgB,IAAI,CACvC,CACA,IAAOM,EAAQV,GCjCf,IAAMW,GAAqB,CAACC,EAAQC,IAAe,CAC/C,GAAIA,IAAe,SACd,CAAC,MAAM,QAAQA,CAAU,GAAKA,EAAW,KAAMC,GAAM,OAAOA,GAAM,QAAQ,GAC3E,MAAM,IAAI,UAAU,IAAIF,CAAM,sCAAsC,EAExE,GAAKC,EAGL,OAAO,IAAI,IAAIA,CAAU,CAC7B,EACOE,GAAQJ,GCAf,eAAsBK,GAAiBC,EAAKC,EAAKC,EAAS,CACtD,GAAI,CAACC,EAASH,CAAG,EACb,MAAM,IAAII,EAAW,iCAAiC,EAE1D,GAAIJ,EAAI,YAAc,QAAaA,EAAI,SAAW,QAAaA,EAAI,cAAgB,OAC/E,MAAM,IAAII,EAAW,qBAAqB,EAE9C,GAAIJ,EAAI,KAAO,QAAa,OAAOA,EAAI,IAAO,SAC1C,MAAM,IAAII,EAAW,0CAA0C,EAEnE,GAAI,OAAOJ,EAAI,YAAe,SAC1B,MAAM,IAAII,EAAW,0CAA0C,EAEnE,GAAIJ,EAAI,MAAQ,QAAa,OAAOA,EAAI,KAAQ,SAC5C,MAAM,IAAII,EAAW,uCAAuC,EAEhE,GAAIJ,EAAI,YAAc,QAAa,OAAOA,EAAI,WAAc,SACxD,MAAM,IAAII,EAAW,qCAAqC,EAE9D,GAAIJ,EAAI,gBAAkB,QAAa,OAAOA,EAAI,eAAkB,SAChE,MAAM,IAAII,EAAW,kCAAkC,EAE3D,GAAIJ,EAAI,MAAQ,QAAa,OAAOA,EAAI,KAAQ,SAC5C,MAAM,IAAII,EAAW,wBAAwB,EAEjD,GAAIJ,EAAI,SAAW,QAAa,CAACG,EAASH,EAAI,MAAM,EAChD,MAAM,IAAII,EAAW,8CAA8C,EAEvE,GAAIJ,EAAI,cAAgB,QAAa,CAACG,EAASH,EAAI,WAAW,EAC1D,MAAM,IAAII,EAAW,qDAAqD,EAE9E,IAAIC,EACJ,GAAIL,EAAI,UACJ,GAAI,CACA,IAAMM,GAAkBC,EAAUP,EAAI,SAAS,EAC/CK,EAAa,KAAK,MAAMG,EAAQ,OAAOF,EAAe,CAAC,CAC3D,MACM,CACF,MAAM,IAAIF,EAAW,iCAAiC,CAC1D,CAEJ,GAAI,CAACK,EAAWJ,EAAYL,EAAI,OAAQA,EAAI,WAAW,EACnD,MAAM,IAAII,EAAW,kHAAkH,EAE3I,IAAMM,EAAa,CACf,GAAGL,EACH,GAAGL,EAAI,OACP,GAAGA,EAAI,WACX,EAEA,GADAW,EAAaP,EAAY,IAAI,IAAOF,GAAS,KAAMG,EAAYK,CAAU,EACrEA,EAAW,MAAQ,OACnB,MAAM,IAAIE,EAAiB,sEAAsE,EAErG,GAAM,CAAE,IAAAC,EAAK,IAAAC,CAAI,EAAIJ,EACrB,GAAI,OAAOG,GAAQ,UAAY,CAACA,EAC5B,MAAM,IAAIT,EAAW,2CAA2C,EAEpE,GAAI,OAAOU,GAAQ,UAAY,CAACA,EAC5B,MAAM,IAAIV,EAAW,sDAAsD,EAE/E,IAAMW,EAA0Bb,GAAWc,GAAmB,0BAA2Bd,EAAQ,uBAAuB,EAClHe,EAA8Bf,GAChCc,GAAmB,8BAA+Bd,EAAQ,2BAA2B,EACzF,GAAKa,GAA2B,CAACA,EAAwB,IAAIF,CAAG,GAC3D,CAACE,GAA2BF,EAAI,WAAW,OAAO,EACnD,MAAM,IAAIK,EAAkB,sDAAsD,EAEtF,GAAID,GAA+B,CAACA,EAA4B,IAAIH,CAAG,EACnE,MAAM,IAAII,EAAkB,iEAAiE,EAEjG,IAAIC,EACJ,GAAInB,EAAI,gBAAkB,OACtB,GAAI,CACAmB,EAAeZ,EAAUP,EAAI,aAAa,CAC9C,MACM,CACF,MAAM,IAAII,EAAW,8CAA8C,CACvE,CAEJ,IAAIgB,EAAc,GACd,OAAOnB,GAAQ,aACfA,EAAM,MAAMA,EAAII,EAAYL,CAAG,EAC/BoB,EAAc,IAElB,IAAIC,EACJ,GAAI,CACAA,EAAM,MAAMC,GAAqBT,EAAKZ,EAAKkB,EAAcT,EAAYR,CAAO,CAChF,OACOqB,GAAK,CACR,GAAIA,cAAe,WAAaA,cAAenB,GAAcmB,cAAeX,EACxE,MAAMW,GAEVF,EAAMG,EAAYV,CAAG,CACzB,CACA,IAAIW,EACAC,EACJ,GAAI1B,EAAI,KAAO,OACX,GAAI,CACAyB,EAAKlB,EAAUP,EAAI,EAAE,CACzB,MACM,CACF,MAAM,IAAII,EAAW,mCAAmC,CAC5D,CAEJ,GAAIJ,EAAI,MAAQ,OACZ,GAAI,CACA0B,EAAMnB,EAAUP,EAAI,GAAG,CAC3B,MACM,CACF,MAAM,IAAII,EAAW,oCAAoC,CAC7D,CAEJ,IAAME,EAAkBqB,EAAQ,OAAO3B,EAAI,WAAa,EAAE,EACtD4B,EACA5B,EAAI,MAAQ,OACZ4B,EAAiBC,EAAOvB,EAAiBqB,EAAQ,OAAO,GAAG,EAAGA,EAAQ,OAAO3B,EAAI,GAAG,CAAC,EAGrF4B,EAAiBtB,EAErB,IAAIwB,GACJ,GAAI,CACAA,GAAavB,EAAUP,EAAI,UAAU,CACzC,MACM,CACF,MAAM,IAAII,EAAW,2CAA2C,CACpE,CAEA,IAAM2B,GAAS,CAAE,UADC,MAAMC,GAAQlB,EAAKO,EAAKS,GAAYL,EAAIC,EAAKE,CAAc,CAClD,EAI3B,GAHI5B,EAAI,YAAc,SAClB+B,GAAO,gBAAkB1B,GAEzBL,EAAI,MAAQ,OACZ,GAAI,CACA+B,GAAO,4BAA8BxB,EAAUP,EAAI,GAAG,CAC1D,MACM,CACF,MAAM,IAAII,EAAW,oCAAoC,CAC7D,CAQJ,OANIJ,EAAI,cAAgB,SACpB+B,GAAO,wBAA0B/B,EAAI,aAErCA,EAAI,SAAW,SACf+B,GAAO,kBAAoB/B,EAAI,QAE/BoB,EACO,CAAE,GAAGW,GAAQ,IAAA9B,CAAI,EAErB8B,EACX,CC7JA,eAAsBE,GAAeC,EAAKC,EAAKC,EAAS,CAIpD,GAHIF,aAAe,aACfA,EAAMG,EAAQ,OAAOH,CAAG,GAExB,OAAOA,GAAQ,SACf,MAAM,IAAII,EAAW,4CAA4C,EAErE,GAAM,CAAE,EAAGC,EAAiB,EAAGC,EAAc,EAAGC,EAAI,EAAGC,EAAY,EAAGC,EAAK,OAAAC,CAAQ,EAAIV,EAAI,MAAM,GAAG,EACpG,GAAIU,IAAW,EACX,MAAM,IAAIN,EAAW,qBAAqB,EAE9C,IAAMO,EAAY,MAAMC,GAAiB,CACrC,WAAAJ,EACA,GAAID,GAAM,OACV,UAAWF,EACX,IAAKI,GAAO,OACZ,cAAeH,GAAgB,MACnC,EAAGL,EAAKC,CAAO,EACTW,EAAS,CAAE,UAAWF,EAAU,UAAW,gBAAiBA,EAAU,eAAgB,EAC5F,OAAI,OAAOV,GAAQ,WACR,CAAE,GAAGY,EAAQ,IAAKF,EAAU,GAAI,EAEpCE,CACX,CCvBA,eAAsBC,GAAeC,EAAKC,EAAKC,EAAS,CACpD,GAAI,CAACC,EAASH,CAAG,EACb,MAAM,IAAII,EAAW,+BAA+B,EAExD,GAAI,CAAC,MAAM,QAAQJ,EAAI,UAAU,GAAK,CAACA,EAAI,WAAW,MAAMG,CAAQ,EAChE,MAAM,IAAIC,EAAW,0CAA0C,EAEnE,GAAI,CAACJ,EAAI,WAAW,OAChB,MAAM,IAAII,EAAW,+BAA+B,EAExD,QAAWC,KAAaL,EAAI,WACxB,GAAI,CACA,OAAO,MAAMM,GAAiB,CAC1B,IAAKN,EAAI,IACT,WAAYA,EAAI,WAChB,cAAeK,EAAU,cACzB,OAAQA,EAAU,OAClB,GAAIL,EAAI,GACR,UAAWA,EAAI,UACf,IAAKA,EAAI,IACT,YAAaA,EAAI,WACrB,EAAGC,EAAKC,CAAO,CACnB,MACM,CACN,CAEJ,MAAM,IAAIK,CACd,CC9BO,IAAMC,GAAc,OAAO,ECIlC,IAAMC,GAAW,MAAOC,GAAQ,CAC5B,GAAIA,aAAe,WACf,MAAO,CACH,IAAK,MACL,EAAGC,EAAUD,CAAG,CACpB,EAEJ,GAAI,CAACE,EAAYF,CAAG,EAChB,MAAM,IAAI,UAAUG,EAAgBH,EAAK,GAAGI,EAAO,YAAY,CAAC,EAEpE,GAAI,CAACJ,EAAI,YACL,MAAM,IAAI,UAAU,uDAAuD,EAE/E,GAAM,CAAE,IAAAK,EAAK,QAAAC,EAAS,IAAAC,EAAK,IAAAC,EAAK,GAAGC,CAAI,EAAI,MAAMC,EAAO,OAAO,UAAU,MAAOV,CAAG,EACnF,OAAOS,CACX,EACOE,GAAQZ,GCjBf,eAAsBa,GAAWC,EAAK,CAClC,OAAOC,GAAaD,CAAG,CAC3B,CACA,eAAsBE,GAAYF,EAAK,CACnC,OAAOG,GAAcH,CAAG,CAC5B,CACA,eAAsBI,GAAUJ,EAAK,CACjC,OAAOK,GAASL,CAAG,CACvB,CCAA,eAAeM,GAAqBC,EAAKC,EAAKC,EAAKC,EAAaC,EAAqB,CAAC,EAAG,CACrF,IAAIC,EACAC,EACAC,EAGJ,OAFAC,GAAaR,EAAKE,EAAK,SAAS,EAChCA,EAAO,MAAMO,EAAU,qBAAqBP,EAAKF,CAAG,GAAME,EAClDF,EAAK,CACT,IAAK,MAAO,CACRO,EAAML,EACN,KACJ,CACA,IAAK,UACL,IAAK,iBACL,IAAK,iBACL,IAAK,iBAAkB,CACnB,GAAI,CAAMQ,GAAYR,CAAG,EACrB,MAAM,IAAIS,EAAiB,uFAAuF,EAEtH,GAAM,CAAE,IAAAC,EAAK,IAAAC,CAAI,EAAIT,EACjB,CAAE,IAAKU,CAAa,EAAIV,EAC5BU,IAAiBA,GAAgB,MAAWC,GAAYb,CAAG,GAAG,YAC9D,GAAM,CAAE,EAAAc,EAAG,EAAAC,EAAG,IAAAC,EAAK,IAAAC,CAAI,EAAI,MAAMC,GAAUN,CAAY,EACjDO,EAAe,MAAWC,GAAUpB,EAAKY,EAAcd,IAAQ,UAAYC,EAAMD,EAAKA,IAAQ,UAAYuB,GAAUtB,CAAG,EAAI,SAASD,EAAI,MAAM,GAAI,EAAE,EAAG,EAAE,EAAGY,EAAKC,CAAG,EAQ1K,GAPAP,EAAa,CAAE,IAAK,CAAE,EAAAU,EAAG,IAAAE,EAAK,IAAAC,CAAI,CAAE,EAChCA,IAAQ,OACRb,EAAW,IAAI,EAAIW,GACnBL,IACAN,EAAW,IAAMkB,EAAUZ,CAAG,GAC9BC,IACAP,EAAW,IAAMkB,EAAUX,CAAG,GAC9Bb,IAAQ,UAAW,CACnBO,EAAMc,EACN,KACJ,CACAd,EAAMJ,GAAesB,EAAYxB,CAAG,EACpC,IAAMyB,GAAQ1B,EAAI,MAAM,EAAE,EAC1BK,EAAe,MAAMsB,GAAMD,GAAOL,EAAcd,CAAG,EACnD,KACJ,CACA,IAAK,SACL,IAAK,WACL,IAAK,eACL,IAAK,eACL,IAAK,eAAgB,CACjBA,EAAMJ,GAAesB,EAAYxB,CAAG,EACpCI,EAAe,MAAMuB,GAAM5B,EAAKE,EAAKK,CAAG,EACxC,KACJ,CACA,IAAK,qBACL,IAAK,qBACL,IAAK,qBAAsB,CACvBA,EAAMJ,GAAesB,EAAYxB,CAAG,EACpC,GAAM,CAAE,IAAA4B,EAAK,IAAAC,CAAI,EAAI1B,GACpB,CAAE,aAAAC,EAAc,GAAGC,CAAW,EAAI,MAAMsB,GAAQ5B,EAAKE,EAAKK,EAAKsB,EAAKC,CAAG,GACxE,KACJ,CACA,IAAK,SACL,IAAK,SACL,IAAK,SAAU,CACXvB,EAAMJ,GAAesB,EAAYxB,CAAG,EACpCI,EAAe,MAAMsB,GAAM3B,EAAKE,EAAKK,CAAG,EACxC,KACJ,CACA,IAAK,YACL,IAAK,YACL,IAAK,YAAa,CACdA,EAAMJ,GAAesB,EAAYxB,CAAG,EACpC,GAAM,CAAE,GAAA8B,CAAG,EAAI3B,GACd,CAAE,aAAAC,EAAc,GAAGC,CAAW,EAAI,MAAMqB,GAAS3B,EAAKE,EAAKK,EAAKwB,CAAE,GACnE,KACJ,CACA,QACI,MAAM,IAAIpB,EAAiB,2DAA2D,CAE9F,CACA,MAAO,CAAE,IAAAJ,EAAK,aAAAF,EAAc,WAAAC,CAAW,CAC3C,CACA,IAAO0B,GAAQjC,GChFR,IAAMkC,EAAN,KAAuB,CAC1B,YAAYC,EAAW,CACnB,GAAI,EAAEA,aAAqB,YACvB,MAAM,IAAI,UAAU,6CAA6C,EAErE,KAAK,WAAaA,CACtB,CACA,2BAA2BC,EAAY,CACnC,GAAI,KAAK,yBACL,MAAM,IAAI,UAAU,oDAAoD,EAE5E,YAAK,yBAA2BA,EACzB,IACX,CACA,mBAAmBC,EAAiB,CAChC,GAAI,KAAK,iBACL,MAAM,IAAI,UAAU,4CAA4C,EAEpE,YAAK,iBAAmBA,EACjB,IACX,CACA,2BAA2BC,EAAyB,CAChD,GAAI,KAAK,yBACL,MAAM,IAAI,UAAU,oDAAoD,EAE5E,YAAK,yBAA2BA,EACzB,IACX,CACA,qBAAqBC,EAAmB,CACpC,GAAI,KAAK,mBACL,MAAM,IAAI,UAAU,8CAA8C,EAEtE,YAAK,mBAAqBA,EACnB,IACX,CACA,+BAA+BC,EAAK,CAChC,YAAK,KAAOA,EACL,IACX,CACA,wBAAwBC,EAAK,CACzB,GAAI,KAAK,KACL,MAAM,IAAI,UAAU,iDAAiD,EAEzE,YAAK,KAAOA,EACL,IACX,CACA,wBAAwBC,EAAI,CACxB,GAAI,KAAK,IACL,MAAM,IAAI,UAAU,iDAAiD,EAEzE,YAAK,IAAMA,EACJ,IACX,CACA,MAAM,QAAQC,EAAKC,EAAS,CACxB,GAAI,CAAC,KAAK,kBAAoB,CAAC,KAAK,oBAAsB,CAAC,KAAK,yBAC5D,MAAM,IAAIC,EAAW,8GAA8G,EAEvI,GAAI,CAACC,EAAW,KAAK,iBAAkB,KAAK,mBAAoB,KAAK,wBAAwB,EACzF,MAAM,IAAID,EAAW,qGAAqG,EAE9H,IAAME,EAAa,CACf,GAAG,KAAK,iBACR,GAAG,KAAK,mBACR,GAAG,KAAK,wBACZ,EAEA,GADAC,EAAaH,EAAY,IAAI,IAAOD,GAAS,KAAM,KAAK,iBAAkBG,CAAU,EAChFA,EAAW,MAAQ,OACnB,MAAM,IAAIE,EAAiB,sEAAsE,EAErG,GAAM,CAAE,IAAAC,EAAK,IAAAC,CAAI,EAAIJ,EACrB,GAAI,OAAOG,GAAQ,UAAY,CAACA,EAC5B,MAAM,IAAIL,EAAW,2DAA2D,EAEpF,GAAI,OAAOM,GAAQ,UAAY,CAACA,EAC5B,MAAM,IAAIN,EAAW,sEAAsE,EAE/F,IAAIO,EACJ,GAAI,KAAK,OAASF,IAAQ,OAASA,IAAQ,WACvC,MAAM,IAAI,UAAU,8EAA8EA,CAAG,EAAE,EAE3G,IAAIT,EACJ,CACI,IAAIL,GACH,CAAE,IAAAK,EAAK,aAAAW,EAAc,WAAAhB,CAAW,EAAI,MAAMiB,GAAqBH,EAAKC,EAAKR,EAAK,KAAK,KAAM,KAAK,wBAAwB,GACnHP,IACIQ,GAAWU,MAAeV,EACrB,KAAK,mBAIN,KAAK,mBAAqB,CAAE,GAAG,KAAK,mBAAoB,GAAGR,CAAW,EAHtE,KAAK,qBAAqBA,CAAU,EAMlC,KAAK,iBAIX,KAAK,iBAAmB,CAAE,GAAG,KAAK,iBAAkB,GAAGA,CAAW,EAHlE,KAAK,mBAAmBA,CAAU,EAM9C,CACA,IAAImB,EACAlB,EACAmB,EACA,KAAK,iBACLnB,EAAkBoB,EAAQ,OAAOC,EAAU,KAAK,UAAU,KAAK,gBAAgB,CAAC,CAAC,EAGjFrB,EAAkBoB,EAAQ,OAAO,EAAE,EAEnC,KAAK,MACLD,EAAYE,EAAU,KAAK,IAAI,EAC/BH,EAAiBI,EAAOtB,EAAiBoB,EAAQ,OAAO,GAAG,EAAGA,EAAQ,OAAOD,CAAS,CAAC,GAGvFD,EAAiBlB,EAErB,GAAM,CAAE,WAAAuB,EAAY,IAAAC,EAAK,GAAAnB,CAAG,EAAI,MAAMoB,GAAQX,EAAK,KAAK,WAAYV,EAAK,KAAK,IAAKc,CAAc,EAC3FQ,EAAM,CACR,WAAYL,EAAUE,CAAU,CACpC,EACA,OAAIlB,IACAqB,EAAI,GAAKL,EAAUhB,CAAE,GAErBmB,IACAE,EAAI,IAAML,EAAUG,CAAG,GAEvBT,IACAW,EAAI,cAAgBL,EAAUN,CAAY,GAE1CI,IACAO,EAAI,IAAMP,GAEV,KAAK,mBACLO,EAAI,UAAYC,EAAQ,OAAO3B,CAAe,GAE9C,KAAK,2BACL0B,EAAI,YAAc,KAAK,0BAEvB,KAAK,qBACLA,EAAI,OAAS,KAAK,oBAEfA,CACX,CACJ,EChJA,IAAME,GAAN,KAA0B,CACtB,YAAYC,EAAKC,EAAKC,EAAS,CAC3B,KAAK,OAASF,EACd,KAAK,IAAMC,EACX,KAAK,QAAUC,CACnB,CACA,qBAAqBC,EAAmB,CACpC,GAAI,KAAK,kBACL,MAAM,IAAI,UAAU,8CAA8C,EAEtE,YAAK,kBAAoBA,EAClB,IACX,CACA,gBAAgBC,EAAM,CAClB,OAAO,KAAK,OAAO,aAAa,GAAGA,CAAI,CAC3C,CACA,WAAWA,EAAM,CACb,OAAO,KAAK,OAAO,QAAQ,GAAGA,CAAI,CACtC,CACA,MAAO,CACH,OAAO,KAAK,MAChB,CACJ,EACaC,GAAN,KAAqB,CACxB,YAAYC,EAAW,CACnB,KAAK,YAAc,CAAC,EACpB,KAAK,WAAaA,CACtB,CACA,aAAaL,EAAKC,EAAS,CACvB,IAAMK,EAAY,IAAIR,GAAoB,KAAME,EAAK,CAAE,KAAMC,GAAS,IAAK,CAAC,EAC5E,YAAK,YAAY,KAAKK,CAAS,EACxBA,CACX,CACA,mBAAmBC,EAAiB,CAChC,GAAI,KAAK,iBACL,MAAM,IAAI,UAAU,4CAA4C,EAEpE,YAAK,iBAAmBA,EACjB,IACX,CACA,2BAA2BC,EAAyB,CAChD,GAAI,KAAK,mBACL,MAAM,IAAI,UAAU,oDAAoD,EAE5E,YAAK,mBAAqBA,EACnB,IACX,CACA,+BAA+BC,EAAK,CAChC,YAAK,KAAOA,EACL,IACX,CACA,MAAM,SAAU,CACZ,GAAI,CAAC,KAAK,YAAY,OAClB,MAAM,IAAIC,EAAW,sCAAsC,EAE/D,GAAI,KAAK,YAAY,SAAW,EAAG,CAC/B,GAAM,CAACJ,CAAS,EAAI,KAAK,YACnBK,EAAY,MAAM,IAAIC,EAAiB,KAAK,UAAU,EACvD,+BAA+B,KAAK,IAAI,EACxC,mBAAmB,KAAK,gBAAgB,EACxC,2BAA2B,KAAK,kBAAkB,EAClD,qBAAqBN,EAAU,iBAAiB,EAChD,QAAQA,EAAU,IAAK,CAAE,GAAGA,EAAU,OAAQ,CAAC,EAC9CO,EAAM,CACR,WAAYF,EAAU,WACtB,GAAIA,EAAU,GACd,WAAY,CAAC,CAAC,CAAC,EACf,IAAKA,EAAU,GACnB,EACA,OAAIA,EAAU,MACVE,EAAI,IAAMF,EAAU,KACpBA,EAAU,YACVE,EAAI,UAAYF,EAAU,WAC1BA,EAAU,cACVE,EAAI,YAAcF,EAAU,aAC5BA,EAAU,gBACVE,EAAI,WAAW,CAAC,EAAE,cAAgBF,EAAU,eAC5CA,EAAU,SACVE,EAAI,WAAW,CAAC,EAAE,OAASF,EAAU,QAClCE,CACX,CACA,IAAId,EACJ,QAASe,EAAI,EAAGA,EAAI,KAAK,YAAY,OAAQA,IAAK,CAC9C,IAAMR,EAAY,KAAK,YAAYQ,CAAC,EACpC,GAAI,CAACC,EAAW,KAAK,iBAAkB,KAAK,mBAAoBT,EAAU,iBAAiB,EACvF,MAAM,IAAII,EAAW,qGAAqG,EAE9H,IAAMM,EAAa,CACf,GAAG,KAAK,iBACR,GAAG,KAAK,mBACR,GAAGV,EAAU,iBACjB,EACM,CAAE,IAAAW,CAAI,EAAID,EAChB,GAAI,OAAOC,GAAQ,UAAY,CAACA,EAC5B,MAAM,IAAIP,EAAW,2DAA2D,EAEpF,GAAIO,IAAQ,OAASA,IAAQ,UACzB,MAAM,IAAIP,EAAW,kEAAkE,EAE3F,GAAI,OAAOM,EAAW,KAAQ,UAAY,CAACA,EAAW,IAClD,MAAM,IAAIN,EAAW,sEAAsE,EAE/F,GAAI,CAACX,EACDA,EAAMiB,EAAW,YAEZjB,IAAQiB,EAAW,IACxB,MAAM,IAAIN,EAAW,uFAAuF,EAGhH,GADAQ,EAAaR,EAAY,IAAI,IAAOJ,EAAU,QAAQ,KAAM,KAAK,iBAAkBU,CAAU,EACzFA,EAAW,MAAQ,OACnB,MAAM,IAAIG,EAAiB,sEAAsE,CAEzG,CACA,IAAMC,EAAMC,EAAYtB,CAAG,EACrBc,EAAM,CACR,WAAY,GACZ,GAAI,GACJ,WAAY,CAAC,EACb,IAAK,EACT,EACA,QAASC,EAAI,EAAGA,EAAI,KAAK,YAAY,OAAQA,IAAK,CAC9C,IAAMR,EAAY,KAAK,YAAYQ,CAAC,EAC9BQ,EAAS,CAAC,EAChBT,EAAI,WAAW,KAAKS,CAAM,EAM1B,IAAMC,EALa,CACf,GAAG,KAAK,iBACR,GAAG,KAAK,mBACR,GAAGjB,EAAU,iBACjB,EACuB,IAAI,WAAW,OAAO,EAAI,KAAOQ,EAAI,OAC5D,GAAIA,IAAM,EAAG,CACT,IAAMH,EAAY,MAAM,IAAIC,EAAiB,KAAK,UAAU,EACvD,+BAA+B,KAAK,IAAI,EACxC,wBAAwBQ,CAAG,EAC3B,mBAAmB,KAAK,gBAAgB,EACxC,2BAA2B,KAAK,kBAAkB,EAClD,qBAAqBd,EAAU,iBAAiB,EAChD,2BAA2B,CAAE,IAAAiB,CAAI,CAAC,EAClC,QAAQjB,EAAU,IAAK,CACxB,GAAGA,EAAU,QACb,CAACkB,EAAW,EAAG,EACnB,CAAC,EACDX,EAAI,WAAaF,EAAU,WAC3BE,EAAI,GAAKF,EAAU,GACnBE,EAAI,IAAMF,EAAU,IAChBA,EAAU,MACVE,EAAI,IAAMF,EAAU,KACpBA,EAAU,YACVE,EAAI,UAAYF,EAAU,WAC1BA,EAAU,cACVE,EAAI,YAAcF,EAAU,aAChCW,EAAO,cAAgBX,EAAU,cAC7BA,EAAU,SACVW,EAAO,OAASX,EAAU,QAC9B,QACJ,CACA,GAAM,CAAE,aAAAc,EAAc,WAAAC,CAAW,EAAI,MAAMC,GAAqBrB,EAAU,mBAAmB,KACzF,KAAK,kBAAkB,KACvB,KAAK,oBAAoB,IAAKP,EAAKO,EAAU,IAAKc,EAAK,CAAE,IAAAG,CAAI,CAAC,EAClED,EAAO,cAAgBM,EAAUH,CAAY,GACzCnB,EAAU,mBAAqBoB,KAC/BJ,EAAO,OAAS,CAAE,GAAGhB,EAAU,kBAAmB,GAAGoB,CAAW,EACxE,CACA,OAAOb,CACX,CACJ,EC5Ke,SAARgB,GAA2BC,EAAKC,EAAW,CAC9C,IAAMC,EAAO,OAAOF,EAAI,MAAM,EAAE,CAAC,GACjC,OAAQA,EAAK,CACT,IAAK,QACL,IAAK,QACL,IAAK,QACD,MAAO,CAAE,KAAAE,EAAM,KAAM,MAAO,EAChC,IAAK,QACL,IAAK,QACL,IAAK,QACD,MAAO,CAAE,KAAAA,EAAM,KAAM,UAAW,WAAYF,EAAI,MAAM,EAAE,GAAK,CAAE,EACnE,IAAK,QACL,IAAK,QACL,IAAK,QACD,MAAO,CAAE,KAAAE,EAAM,KAAM,mBAAoB,EAC7C,IAAK,QACL,IAAK,QACL,IAAK,QACD,MAAO,CAAE,KAAAA,EAAM,KAAM,QAAS,WAAYD,EAAU,UAAW,EACnE,IAAK,QACD,MAAO,CAAE,KAAMA,EAAU,IAAK,EAClC,QACI,MAAM,IAAIE,EAAiB,OAAOH,CAAG,6DAA6D,CAC1G,CACJ,CCpBA,eAAOI,GAAoCC,EAAKC,EAAKC,EAAO,CAOxD,GANIA,IAAU,SACVD,EAAM,MAAME,EAAU,oBAAoBF,EAAKD,CAAG,GAElDE,IAAU,WACVD,EAAM,MAAME,EAAU,mBAAmBF,EAAKD,CAAG,GAEjDI,EAAYH,CAAG,EACf,OAAAI,GAAkBJ,EAAKD,EAAKE,CAAK,EAC1BD,EAEX,GAAIA,aAAe,WAAY,CAC3B,GAAI,CAACD,EAAI,WAAW,IAAI,EACpB,MAAM,IAAI,UAAUM,EAAgBL,EAAK,GAAGM,CAAK,CAAC,EAEtD,OAAOC,EAAO,OAAO,UAAU,MAAOP,EAAK,CAAE,KAAM,OAAOD,EAAI,MAAM,EAAE,CAAC,GAAI,KAAM,MAAO,EAAG,GAAO,CAACE,CAAK,CAAC,CAC7G,CACA,MAAM,IAAI,UAAUI,EAAgBL,EAAK,GAAGM,EAAO,aAAc,cAAc,CAAC,CACpF,CCnBA,IAAME,GAAS,MAAOC,EAAKC,EAAKC,EAAWC,IAAS,CAChD,IAAMC,EAAY,MAAMC,GAAaL,EAAKC,EAAK,QAAQ,EACvDK,EAAeN,EAAKI,CAAS,EAC7B,IAAMG,EAAYC,GAAgBR,EAAKI,EAAU,SAAS,EAC1D,GAAI,CACA,OAAO,MAAMK,EAAO,OAAO,OAAOF,EAAWH,EAAWF,EAAWC,CAAI,CAC3E,MACM,CACF,MAAO,EACX,CACJ,EACOO,GAAQX,GCJf,eAAsBY,GAAgBC,EAAKC,EAAKC,EAAS,CACrD,GAAI,CAACC,EAASH,CAAG,EACb,MAAM,IAAII,EAAW,iCAAiC,EAE1D,GAAIJ,EAAI,YAAc,QAAaA,EAAI,SAAW,OAC9C,MAAM,IAAII,EAAW,uEAAuE,EAEhG,GAAIJ,EAAI,YAAc,QAAa,OAAOA,EAAI,WAAc,SACxD,MAAM,IAAII,EAAW,qCAAqC,EAE9D,GAAIJ,EAAI,UAAY,OAChB,MAAM,IAAII,EAAW,qBAAqB,EAE9C,GAAI,OAAOJ,EAAI,WAAc,SACzB,MAAM,IAAII,EAAW,yCAAyC,EAElE,GAAIJ,EAAI,SAAW,QAAa,CAACG,EAASH,EAAI,MAAM,EAChD,MAAM,IAAII,EAAW,uCAAuC,EAEhE,IAAIC,EAAa,CAAC,EAClB,GAAIL,EAAI,UACJ,GAAI,CACA,IAAMM,EAAkBC,EAAUP,EAAI,SAAS,EAC/CK,EAAa,KAAK,MAAMG,EAAQ,OAAOF,CAAe,CAAC,CAC3D,MACM,CACF,MAAM,IAAIF,EAAW,iCAAiC,CAC1D,CAEJ,GAAI,CAACK,EAAWJ,EAAYL,EAAI,MAAM,EAClC,MAAM,IAAII,EAAW,2EAA2E,EAEpG,IAAMM,EAAa,CACf,GAAGL,EACH,GAAGL,EAAI,MACX,EACMW,EAAaC,EAAaR,EAAY,IAAI,IAAI,CAAC,CAAC,MAAO,EAAI,CAAC,CAAC,EAAGF,GAAS,KAAMG,EAAYK,CAAU,EACvGG,EAAM,GACV,GAAIF,EAAW,IAAI,KAAK,IACpBE,EAAMR,EAAW,IACb,OAAOQ,GAAQ,WACf,MAAM,IAAIT,EAAW,yEAAyE,EAGtG,GAAM,CAAE,IAAAU,CAAI,EAAIJ,EAChB,GAAI,OAAOI,GAAQ,UAAY,CAACA,EAC5B,MAAM,IAAIV,EAAW,2DAA2D,EAEpF,IAAMW,EAAab,GAAWc,GAAmB,aAAcd,EAAQ,UAAU,EACjF,GAAIa,GAAc,CAACA,EAAW,IAAID,CAAG,EACjC,MAAM,IAAIG,EAAkB,sDAAsD,EAEtF,GAAIJ,GACA,GAAI,OAAOb,EAAI,SAAY,SACvB,MAAM,IAAII,EAAW,8BAA8B,UAGlD,OAAOJ,EAAI,SAAY,UAAY,EAAEA,EAAI,mBAAmB,YACjE,MAAM,IAAII,EAAW,wDAAwD,EAEjF,IAAIc,EAAc,GACd,OAAOjB,GAAQ,YACfA,EAAM,MAAMA,EAAII,EAAYL,CAAG,EAC/BkB,EAAc,GACdC,GAAoBL,EAAKb,EAAK,QAAQ,EAClCmB,EAAMnB,CAAG,IACTA,EAAM,MAAMoB,EAAUpB,EAAKa,CAAG,IAIlCK,GAAoBL,EAAKb,EAAK,QAAQ,EAE1C,IAAMqB,EAAOC,EAAOC,EAAQ,OAAOxB,EAAI,WAAa,EAAE,EAAGwB,EAAQ,OAAO,GAAG,EAAG,OAAOxB,EAAI,SAAY,SAAWwB,EAAQ,OAAOxB,EAAI,OAAO,EAAIA,EAAI,OAAO,EACrJyB,EACJ,GAAI,CACAA,EAAYlB,EAAUP,EAAI,SAAS,CACvC,MACM,CACF,MAAM,IAAII,EAAW,0CAA0C,CACnE,CAEA,GAAI,CADa,MAAMsB,GAAOZ,EAAKb,EAAKwB,EAAWH,CAAI,EAEnD,MAAM,IAAIK,EAEd,IAAIC,EACJ,GAAIf,EACA,GAAI,CACAe,EAAUrB,EAAUP,EAAI,OAAO,CACnC,MACM,CACF,MAAM,IAAII,EAAW,wCAAwC,CACjE,MAEK,OAAOJ,EAAI,SAAY,SAC5B4B,EAAUJ,EAAQ,OAAOxB,EAAI,OAAO,EAGpC4B,EAAU5B,EAAI,QAElB,IAAM6B,EAAS,CAAE,QAAAD,CAAQ,EAOzB,OANI5B,EAAI,YAAc,SAClB6B,EAAO,gBAAkBxB,GAEzBL,EAAI,SAAW,SACf6B,EAAO,kBAAoB7B,EAAI,QAE/BkB,EACO,CAAE,GAAGW,EAAQ,IAAA5B,CAAI,EAErB4B,CACX,CCtHA,eAAsBC,GAAcC,EAAKC,EAAKC,EAAS,CAInD,GAHIF,aAAe,aACfA,EAAMG,EAAQ,OAAOH,CAAG,GAExB,OAAOA,GAAQ,SACf,MAAM,IAAII,EAAW,4CAA4C,EAErE,GAAM,CAAE,EAAGC,EAAiB,EAAGC,EAAS,EAAGC,EAAW,OAAAC,CAAO,EAAIR,EAAI,MAAM,GAAG,EAC9E,GAAIQ,IAAW,EACX,MAAM,IAAIJ,EAAW,qBAAqB,EAE9C,IAAMK,EAAW,MAAMC,GAAgB,CAAE,QAAAJ,EAAS,UAAWD,EAAiB,UAAAE,CAAU,EAAGN,EAAKC,CAAO,EACjGS,EAAS,CAAE,QAASF,EAAS,QAAS,gBAAiBA,EAAS,eAAgB,EACtF,OAAI,OAAOR,GAAQ,WACR,CAAE,GAAGU,EAAQ,IAAKF,EAAS,GAAI,EAEnCE,CACX,CCjBA,eAAsBC,GAAcC,EAAKC,EAAKC,EAAS,CACnD,GAAI,CAACC,EAASH,CAAG,EACb,MAAM,IAAII,EAAW,+BAA+B,EAExD,GAAI,CAAC,MAAM,QAAQJ,EAAI,UAAU,GAAK,CAACA,EAAI,WAAW,MAAMG,CAAQ,EAChE,MAAM,IAAIC,EAAW,0CAA0C,EAEnE,QAAWC,KAAaL,EAAI,WACxB,GAAI,CACA,OAAO,MAAMM,GAAgB,CACzB,OAAQD,EAAU,OAClB,QAASL,EAAI,QACb,UAAWK,EAAU,UACrB,UAAWA,EAAU,SACzB,EAAGJ,EAAKC,CAAO,CACnB,MACM,CACN,CAEJ,MAAM,IAAIK,CACd,CCvBA,IAAOC,EAASC,GAAS,KAAK,MAAMA,EAAK,QAAQ,EAAI,GAAI,ECKzD,IAAMC,GAAQ,oIACPC,GAASC,GAAQ,CACpB,IAAMC,EAAUH,GAAM,KAAKE,CAAG,EAC9B,GAAI,CAACC,GAAYA,EAAQ,CAAC,GAAKA,EAAQ,CAAC,EACpC,MAAM,IAAI,UAAU,4BAA4B,EAEpD,IAAMC,EAAQ,WAAWD,EAAQ,CAAC,CAAC,EAC7BE,EAAOF,EAAQ,CAAC,EAAE,YAAY,EAChCG,EACJ,OAAQD,EAAM,CACV,IAAK,MACL,IAAK,OACL,IAAK,SACL,IAAK,UACL,IAAK,IACDC,EAAc,KAAK,MAAMF,CAAK,EAC9B,MACJ,IAAK,SACL,IAAK,UACL,IAAK,MACL,IAAK,OACL,IAAK,IACDE,EAAc,KAAK,MAAMF,EAAQ,EAAM,EACvC,MACJ,IAAK,OACL,IAAK,QACL,IAAK,KACL,IAAK,MACL,IAAK,IACDE,EAAc,KAAK,MAAMF,EAAQ,IAAI,EACrC,MACJ,IAAK,MACL,IAAK,OACL,IAAK,IACDE,EAAc,KAAK,MAAMF,EAAQ,KAAG,EACpC,MACJ,IAAK,OACL,IAAK,QACL,IAAK,IACDE,EAAc,KAAK,MAAMF,EAAQ,MAAI,EACrC,MACJ,QACIE,EAAc,KAAK,MAAMF,EAAQ,QAAI,EACrC,KACR,CACA,OAAID,EAAQ,CAAC,IAAM,KAAOA,EAAQ,CAAC,IAAM,MAC9B,CAACG,EAELA,CACX,ECjDA,IAAMC,GAAgBC,GAAUA,EAAM,YAAY,EAAE,QAAQ,iBAAkB,EAAE,EAC1EC,GAAwB,CAACC,EAAYC,IACnC,OAAOD,GAAe,SACfC,EAAU,SAASD,CAAU,EAEpC,MAAM,QAAQA,CAAU,EACjBC,EAAU,KAAK,IAAI,UAAU,IAAI,KAAK,IAAI,IAAID,CAAU,CAAC,CAAC,EAE9D,GAEJE,GAAQ,CAACC,EAAiBC,EAAgBC,EAAU,CAAC,IAAM,CAC9D,IAAIC,EACJ,GAAI,CACAA,EAAU,KAAK,MAAMC,EAAQ,OAAOH,CAAc,CAAC,CACvD,MACM,CACN,CACA,GAAI,CAACI,EAASF,CAAO,EACjB,MAAM,IAAIG,EAAW,gDAAgD,EAEzE,GAAM,CAAE,IAAAC,CAAI,EAAIL,EAChB,GAAIK,IACC,OAAOP,EAAgB,KAAQ,UAC5BN,GAAaM,EAAgB,GAAG,IAAMN,GAAaa,CAAG,GAC1D,MAAM,IAAIC,EAAyB,oCAAqCL,EAAS,MAAO,cAAc,EAE1G,GAAM,CAAE,eAAAM,EAAiB,CAAC,EAAG,OAAAC,EAAQ,QAAAC,EAAS,SAAAC,EAAU,YAAAC,CAAY,EAAIX,EAClEY,EAAgB,CAAC,GAAGL,CAAc,EACpCI,IAAgB,QAChBC,EAAc,KAAK,KAAK,EACxBF,IAAa,QACbE,EAAc,KAAK,KAAK,EACxBH,IAAY,QACZG,EAAc,KAAK,KAAK,EACxBJ,IAAW,QACXI,EAAc,KAAK,KAAK,EAC5B,QAAWC,KAAS,IAAI,IAAID,EAAc,QAAQ,CAAC,EAC/C,GAAI,EAAEC,KAASZ,GACX,MAAM,IAAIK,EAAyB,qBAAqBO,CAAK,UAAWZ,EAASY,EAAO,SAAS,EAGzG,GAAIL,GACA,EAAE,MAAM,QAAQA,CAAM,EAAIA,EAAS,CAACA,CAAM,GAAG,SAASP,EAAQ,GAAG,EACjE,MAAM,IAAIK,EAAyB,+BAAgCL,EAAS,MAAO,cAAc,EAErG,GAAIQ,GAAWR,EAAQ,MAAQQ,EAC3B,MAAM,IAAIH,EAAyB,+BAAgCL,EAAS,MAAO,cAAc,EAErG,GAAIS,GACA,CAAChB,GAAsBO,EAAQ,IAAK,OAAOS,GAAa,SAAW,CAACA,CAAQ,EAAIA,CAAQ,EACxF,MAAM,IAAIJ,EAAyB,+BAAgCL,EAAS,MAAO,cAAc,EAErG,IAAIa,EACJ,OAAQ,OAAOd,EAAQ,eAAgB,CACnC,IAAK,SACDc,EAAYC,GAAKf,EAAQ,cAAc,EACvC,MACJ,IAAK,SACDc,EAAYd,EAAQ,eACpB,MACJ,IAAK,YACDc,EAAY,EACZ,MACJ,QACI,MAAM,IAAI,UAAU,oCAAoC,CAChE,CACA,GAAM,CAAE,YAAAE,CAAY,EAAIhB,EAClBiB,EAAMC,EAAMF,GAAe,IAAI,IAAM,EAC3C,IAAKf,EAAQ,MAAQ,QAAaU,IAAgB,OAAOV,EAAQ,KAAQ,SACrE,MAAM,IAAIK,EAAyB,+BAAgCL,EAAS,MAAO,SAAS,EAEhG,GAAIA,EAAQ,MAAQ,OAAW,CAC3B,GAAI,OAAOA,EAAQ,KAAQ,SACvB,MAAM,IAAIK,EAAyB,+BAAgCL,EAAS,MAAO,SAAS,EAEhG,GAAIA,EAAQ,IAAMgB,EAAMH,EACpB,MAAM,IAAIR,EAAyB,qCAAsCL,EAAS,MAAO,cAAc,CAE/G,CACA,GAAIA,EAAQ,MAAQ,OAAW,CAC3B,GAAI,OAAOA,EAAQ,KAAQ,SACvB,MAAM,IAAIK,EAAyB,+BAAgCL,EAAS,MAAO,SAAS,EAEhG,GAAIA,EAAQ,KAAOgB,EAAMH,EACrB,MAAM,IAAIK,EAAW,qCAAsClB,EAAS,MAAO,cAAc,CAEjG,CACA,GAAIU,EAAa,CACb,IAAMS,EAAMH,EAAMhB,EAAQ,IACpBoB,EAAM,OAAOV,GAAgB,SAAWA,EAAcI,GAAKJ,CAAW,EAC5E,GAAIS,EAAMN,EAAYO,EAClB,MAAM,IAAIF,EAAW,2DAA4DlB,EAAS,MAAO,cAAc,EAEnH,GAAImB,EAAM,EAAIN,EACV,MAAM,IAAIR,EAAyB,gEAAiEL,EAAS,MAAO,cAAc,CAE1I,CACA,OAAOA,CACX,ECpGA,eAAsBqB,GAAUC,EAAKC,EAAKC,EAAS,CAC/C,IAAMC,EAAW,MAAMC,GAAcJ,EAAKC,EAAKC,CAAO,EACtD,GAAIC,EAAS,gBAAgB,MAAM,SAAS,KAAK,GAAKA,EAAS,gBAAgB,MAAQ,GACnF,MAAM,IAAIE,EAAW,qCAAqC,EAG9D,IAAMC,EAAS,CAAE,QADDC,GAAWJ,EAAS,gBAAiBA,EAAS,QAASD,CAAO,EACpD,gBAAiBC,EAAS,eAAgB,EACpE,OAAI,OAAOF,GAAQ,WACR,CAAE,GAAGK,EAAQ,IAAKH,EAAS,GAAI,EAEnCG,CACX,CCXA,eAAsBE,GAAWC,EAAKC,EAAKC,EAAS,CAChD,IAAMC,EAAY,MAAMC,GAAeJ,EAAKC,EAAKC,CAAO,EAClDG,EAAUC,GAAWH,EAAU,gBAAiBA,EAAU,UAAWD,CAAO,EAC5E,CAAE,gBAAAK,CAAgB,EAAIJ,EAC5B,GAAII,EAAgB,MAAQ,QAAaA,EAAgB,MAAQF,EAAQ,IACrE,MAAM,IAAIG,EAAyB,mDAAoDH,EAAS,MAAO,UAAU,EAErH,GAAIE,EAAgB,MAAQ,QAAaA,EAAgB,MAAQF,EAAQ,IACrE,MAAM,IAAIG,EAAyB,mDAAoDH,EAAS,MAAO,UAAU,EAErH,GAAIE,EAAgB,MAAQ,QACxB,KAAK,UAAUA,EAAgB,GAAG,IAAM,KAAK,UAAUF,EAAQ,GAAG,EAClE,MAAM,IAAIG,EAAyB,mDAAoDH,EAAS,MAAO,UAAU,EAErH,IAAMI,EAAS,CAAE,QAAAJ,EAAS,gBAAAE,CAAgB,EAC1C,OAAI,OAAON,GAAQ,WACR,CAAE,GAAGQ,EAAQ,IAAKN,EAAU,GAAI,EAEpCM,CACX,CCrBO,IAAMC,GAAN,KAAqB,CACxB,YAAYC,EAAW,CACnB,KAAK,WAAa,IAAIC,EAAiBD,CAAS,CACpD,CACA,wBAAwBE,EAAK,CACzB,YAAK,WAAW,wBAAwBA,CAAG,EACpC,IACX,CACA,wBAAwBC,EAAI,CACxB,YAAK,WAAW,wBAAwBA,CAAE,EACnC,IACX,CACA,mBAAmBC,EAAiB,CAChC,YAAK,WAAW,mBAAmBA,CAAe,EAC3C,IACX,CACA,2BAA2BC,EAAY,CACnC,YAAK,WAAW,2BAA2BA,CAAU,EAC9C,IACX,CACA,MAAM,QAAQC,EAAKC,EAAS,CACxB,IAAMC,EAAM,MAAM,KAAK,WAAW,QAAQF,EAAKC,CAAO,EACtD,MAAO,CAACC,EAAI,UAAWA,EAAI,cAAeA,EAAI,GAAIA,EAAI,WAAYA,EAAI,GAAG,EAAE,KAAK,GAAG,CACvF,CACJ,ECrBA,IAAMC,GAAO,MAAOC,EAAKC,EAAKC,IAAS,CACnC,IAAMC,EAAY,MAAMC,GAAWJ,EAAKC,EAAK,MAAM,EACnDI,EAAeL,EAAKG,CAAS,EAC7B,IAAMG,EAAY,MAAMC,EAAO,OAAO,KAAKC,GAAgBR,EAAKG,EAAU,SAAS,EAAGA,EAAWD,CAAI,EACrG,OAAO,IAAI,WAAWI,CAAS,CACnC,EACOG,GAAQV,GCHR,IAAMW,GAAN,KAAoB,CACvB,YAAYC,EAAS,CACjB,GAAI,EAAEA,aAAmB,YACrB,MAAM,IAAI,UAAU,2CAA2C,EAEnE,KAAK,SAAWA,CACpB,CACA,mBAAmBC,EAAiB,CAChC,GAAI,KAAK,iBACL,MAAM,IAAI,UAAU,4CAA4C,EAEpE,YAAK,iBAAmBA,EACjB,IACX,CACA,qBAAqBC,EAAmB,CACpC,GAAI,KAAK,mBACL,MAAM,IAAI,UAAU,8CAA8C,EAEtE,YAAK,mBAAqBA,EACnB,IACX,CACA,MAAM,KAAKC,EAAKC,EAAS,CACrB,GAAI,CAAC,KAAK,kBAAoB,CAAC,KAAK,mBAChC,MAAM,IAAIC,EAAW,iFAAiF,EAE1G,GAAI,CAACC,EAAW,KAAK,iBAAkB,KAAK,kBAAkB,EAC1D,MAAM,IAAID,EAAW,2EAA2E,EAEpG,IAAME,EAAa,CACf,GAAG,KAAK,iBACR,GAAG,KAAK,kBACZ,EACMC,EAAaC,EAAaJ,EAAY,IAAI,IAAI,CAAC,CAAC,MAAO,EAAI,CAAC,CAAC,EAAGD,GAAS,KAAM,KAAK,iBAAkBG,CAAU,EAClHG,EAAM,GACV,GAAIF,EAAW,IAAI,KAAK,IACpBE,EAAM,KAAK,iBAAiB,IACxB,OAAOA,GAAQ,WACf,MAAM,IAAIL,EAAW,yEAAyE,EAGtG,GAAM,CAAE,IAAAM,CAAI,EAAIJ,EAChB,GAAI,OAAOI,GAAQ,UAAY,CAACA,EAC5B,MAAM,IAAIN,EAAW,2DAA2D,EAEpFO,GAAoBD,EAAKR,EAAK,MAAM,EACpC,IAAIH,EAAU,KAAK,SACfU,IACAV,EAAUa,EAAQ,OAAOC,EAAUd,CAAO,CAAC,GAE/C,IAAIC,EACA,KAAK,iBACLA,EAAkBY,EAAQ,OAAOC,EAAU,KAAK,UAAU,KAAK,gBAAgB,CAAC,CAAC,EAGjFb,EAAkBY,EAAQ,OAAO,EAAE,EAEvC,IAAME,EAAOC,EAAOf,EAAiBY,EAAQ,OAAO,GAAG,EAAGb,CAAO,EAC3DiB,EAAY,MAAMC,GAAKP,EAAKR,EAAKY,CAAI,EACrCI,EAAM,CACR,UAAWL,EAAUG,CAAS,EAC9B,QAAS,EACb,EACA,OAAIP,IACAS,EAAI,QAAUC,EAAQ,OAAOpB,CAAO,GAEpC,KAAK,qBACLmB,EAAI,OAAS,KAAK,oBAElB,KAAK,mBACLA,EAAI,UAAYC,EAAQ,OAAOnB,CAAe,GAE3CkB,CACX,CACJ,EC/EO,IAAME,GAAN,KAAkB,CACrB,YAAYC,EAAS,CACjB,KAAK,WAAa,IAAIC,GAAcD,CAAO,CAC/C,CACA,mBAAmBE,EAAiB,CAChC,YAAK,WAAW,mBAAmBA,CAAe,EAC3C,IACX,CACA,MAAM,KAAKC,EAAKC,EAAS,CACrB,IAAMC,EAAM,MAAM,KAAK,WAAW,KAAKF,EAAKC,CAAO,EACnD,GAAIC,EAAI,UAAY,OAChB,MAAM,IAAI,UAAU,2DAA2D,EAEnF,MAAO,GAAGA,EAAI,SAAS,IAAIA,EAAI,OAAO,IAAIA,EAAI,SAAS,EAC3D,CACJ,ECdA,IAAMC,GAAN,KAA0B,CACtB,YAAYC,EAAKC,EAAKC,EAAS,CAC3B,KAAK,OAASF,EACd,KAAK,IAAMC,EACX,KAAK,QAAUC,CACnB,CACA,mBAAmBC,EAAiB,CAChC,GAAI,KAAK,gBACL,MAAM,IAAI,UAAU,4CAA4C,EAEpE,YAAK,gBAAkBA,EAChB,IACX,CACA,qBAAqBC,EAAmB,CACpC,GAAI,KAAK,kBACL,MAAM,IAAI,UAAU,8CAA8C,EAEtE,YAAK,kBAAoBA,EAClB,IACX,CACA,gBAAgBC,EAAM,CAClB,OAAO,KAAK,OAAO,aAAa,GAAGA,CAAI,CAC3C,CACA,QAAQA,EAAM,CACV,OAAO,KAAK,OAAO,KAAK,GAAGA,CAAI,CACnC,CACA,MAAO,CACH,OAAO,KAAK,MAChB,CACJ,EACaC,GAAN,KAAkB,CACrB,YAAYC,EAAS,CACjB,KAAK,YAAc,CAAC,EACpB,KAAK,SAAWA,CACpB,CACA,aAAaN,EAAKC,EAAS,CACvB,IAAMM,EAAY,IAAIT,GAAoB,KAAME,EAAKC,CAAO,EAC5D,YAAK,YAAY,KAAKM,CAAS,EACxBA,CACX,CACA,MAAM,MAAO,CACT,GAAI,CAAC,KAAK,YAAY,OAClB,MAAM,IAAIC,EAAW,sCAAsC,EAE/D,IAAMC,EAAM,CACR,WAAY,CAAC,EACb,QAAS,EACb,EACA,QAASC,EAAI,EAAGA,EAAI,KAAK,YAAY,OAAQA,IAAK,CAC9C,IAAMH,EAAY,KAAK,YAAYG,CAAC,EAC9BC,EAAY,IAAIC,GAAc,KAAK,QAAQ,EACjDD,EAAU,mBAAmBJ,EAAU,eAAe,EACtDI,EAAU,qBAAqBJ,EAAU,iBAAiB,EAC1D,GAAM,CAAE,QAAAD,EAAS,GAAGO,CAAK,EAAI,MAAMF,EAAU,KAAKJ,EAAU,IAAKA,EAAU,OAAO,EAClF,GAAIG,IAAM,EACND,EAAI,QAAUH,UAETG,EAAI,UAAYH,EACrB,MAAM,IAAIE,EAAW,qDAAqD,EAE9EC,EAAI,WAAW,KAAKI,CAAI,CAC5B,CACA,OAAOJ,CACX,CACJ,EC/DA,SAASK,GAAcC,EAAOC,EAAO,CACjC,GAAI,CAAC,OAAO,SAASA,CAAK,EACtB,MAAM,IAAI,UAAU,WAAWD,CAAK,QAAQ,EAEhD,OAAOC,CACX,CACO,IAAMC,EAAN,KAAiB,CACpB,YAAYC,EAAU,CAAC,EAAG,CACtB,GAAI,CAACC,EAASD,CAAO,EACjB,MAAM,IAAI,UAAU,kCAAkC,EAE1D,KAAK,SAAWA,CACpB,CACA,UAAUE,EAAQ,CACd,YAAK,SAAW,CAAE,GAAG,KAAK,SAAU,IAAKA,CAAO,EACzC,IACX,CACA,WAAWC,EAAS,CAChB,YAAK,SAAW,CAAE,GAAG,KAAK,SAAU,IAAKA,CAAQ,EAC1C,IACX,CACA,YAAYC,EAAU,CAClB,YAAK,SAAW,CAAE,GAAG,KAAK,SAAU,IAAKA,CAAS,EAC3C,IACX,CACA,OAAOC,EAAO,CACV,YAAK,SAAW,CAAE,GAAG,KAAK,SAAU,IAAKA,CAAM,EACxC,IACX,CACA,aAAaP,EAAO,CAChB,OAAI,OAAOA,GAAU,SACjB,KAAK,SAAW,CAAE,GAAG,KAAK,SAAU,IAAKF,GAAc,eAAgBE,CAAK,CAAE,EAEzEA,aAAiB,KACtB,KAAK,SAAW,CAAE,GAAG,KAAK,SAAU,IAAKF,GAAc,eAAgBU,EAAMR,CAAK,CAAC,CAAE,EAGrF,KAAK,SAAW,CAAE,GAAG,KAAK,SAAU,IAAKQ,EAAM,IAAI,IAAM,EAAIC,GAAKT,CAAK,CAAE,EAEtE,IACX,CACA,kBAAkBA,EAAO,CACrB,OAAI,OAAOA,GAAU,SACjB,KAAK,SAAW,CAAE,GAAG,KAAK,SAAU,IAAKF,GAAc,oBAAqBE,CAAK,CAAE,EAE9EA,aAAiB,KACtB,KAAK,SAAW,CAAE,GAAG,KAAK,SAAU,IAAKF,GAAc,oBAAqBU,EAAMR,CAAK,CAAC,CAAE,EAG1F,KAAK,SAAW,CAAE,GAAG,KAAK,SAAU,IAAKQ,EAAM,IAAI,IAAM,EAAIC,GAAKT,CAAK,CAAE,EAEtE,IACX,CACA,YAAYA,EAAO,CACf,OAAI,OAAOA,EAAU,IACjB,KAAK,SAAW,CAAE,GAAG,KAAK,SAAU,IAAKQ,EAAM,IAAI,IAAM,CAAE,EAEtDR,aAAiB,KACtB,KAAK,SAAW,CAAE,GAAG,KAAK,SAAU,IAAKF,GAAc,cAAeU,EAAMR,CAAK,CAAC,CAAE,EAE/E,OAAOA,GAAU,SACtB,KAAK,SAAW,CACZ,GAAG,KAAK,SACR,IAAKF,GAAc,cAAeU,EAAM,IAAI,IAAM,EAAIC,GAAKT,CAAK,CAAC,CACrE,EAGA,KAAK,SAAW,CAAE,GAAG,KAAK,SAAU,IAAKF,GAAc,cAAeE,CAAK,CAAE,EAE1E,IACX,CACJ,ECtEO,IAAMU,GAAN,cAAsBC,CAAW,CACpC,mBAAmBC,EAAiB,CAChC,YAAK,iBAAmBA,EACjB,IACX,CACA,MAAM,KAAKC,EAAKC,EAAS,CACrB,IAAMC,EAAM,IAAIC,GAAYC,EAAQ,OAAO,KAAK,UAAU,KAAK,QAAQ,CAAC,CAAC,EAEzE,GADAF,EAAI,mBAAmB,KAAK,gBAAgB,EACxC,MAAM,QAAQ,KAAK,kBAAkB,IAAI,GACzC,KAAK,iBAAiB,KAAK,SAAS,KAAK,GACzC,KAAK,iBAAiB,MAAQ,GAC9B,MAAM,IAAIG,EAAW,qCAAqC,EAE9D,OAAOH,EAAI,KAAKF,EAAKC,CAAO,CAChC,CACJ,EChBO,IAAMK,GAAN,cAAyBC,CAAW,CACvC,mBAAmBC,EAAiB,CAChC,GAAI,KAAK,iBACL,MAAM,IAAI,UAAU,4CAA4C,EAEpE,YAAK,iBAAmBA,EACjB,IACX,CACA,2BAA2BC,EAAY,CACnC,GAAI,KAAK,yBACL,MAAM,IAAI,UAAU,oDAAoD,EAE5E,YAAK,yBAA2BA,EACzB,IACX,CACA,wBAAwBC,EAAK,CACzB,GAAI,KAAK,KACL,MAAM,IAAI,UAAU,iDAAiD,EAEzE,YAAK,KAAOA,EACL,IACX,CACA,wBAAwBC,EAAI,CACxB,GAAI,KAAK,IACL,MAAM,IAAI,UAAU,iDAAiD,EAEzE,YAAK,IAAMA,EACJ,IACX,CACA,yBAA0B,CACtB,YAAK,yBAA2B,GACzB,IACX,CACA,0BAA2B,CACvB,YAAK,0BAA4B,GAC1B,IACX,CACA,2BAA4B,CACxB,YAAK,2BAA6B,GAC3B,IACX,CACA,MAAM,QAAQC,EAAKC,EAAS,CACxB,IAAMC,EAAM,IAAIC,GAAeC,EAAQ,OAAO,KAAK,UAAU,KAAK,QAAQ,CAAC,CAAC,EAC5E,OAAI,KAAK,2BACL,KAAK,iBAAmB,CAAE,GAAG,KAAK,iBAAkB,IAAK,KAAK,SAAS,GAAI,GAE3E,KAAK,4BACL,KAAK,iBAAmB,CAAE,GAAG,KAAK,iBAAkB,IAAK,KAAK,SAAS,GAAI,GAE3E,KAAK,6BACL,KAAK,iBAAmB,CAAE,GAAG,KAAK,iBAAkB,IAAK,KAAK,SAAS,GAAI,GAE/EF,EAAI,mBAAmB,KAAK,gBAAgB,EACxC,KAAK,KACLA,EAAI,wBAAwB,KAAK,GAAG,EAEpC,KAAK,MACLA,EAAI,wBAAwB,KAAK,IAAI,EAErC,KAAK,0BACLA,EAAI,2BAA2B,KAAK,wBAAwB,EAEzDA,EAAI,QAAQF,EAAKC,CAAO,CACnC,CACJ,EC9DA,IAAMI,EAAQ,CAACC,EAAOC,IAAgB,CAClC,GAAI,OAAOD,GAAU,UAAY,CAACA,EAC9B,MAAM,IAAIE,GAAW,GAAGD,CAAW,qBAAqB,CAEhE,EACA,eAAsBE,GAAuBC,EAAKC,EAAiB,CAC/D,GAAI,CAACC,EAASF,CAAG,EACb,MAAM,IAAI,UAAU,uBAAuB,EAG/C,GADAC,IAAoBA,EAAkB,UAClCA,IAAoB,UACpBA,IAAoB,UACpBA,IAAoB,SACpB,MAAM,IAAI,UAAU,6DAA6D,EAErF,IAAIE,EACJ,OAAQH,EAAI,IAAK,CACb,IAAK,KACDL,EAAMK,EAAI,IAAK,yBAAyB,EACxCL,EAAMK,EAAI,EAAG,8BAA8B,EAC3CL,EAAMK,EAAI,EAAG,8BAA8B,EAC3CG,EAAa,CAAE,IAAKH,EAAI,IAAK,IAAKA,EAAI,IAAK,EAAGA,EAAI,EAAG,EAAGA,EAAI,CAAE,EAC9D,MACJ,IAAK,MACDL,EAAMK,EAAI,IAAK,uCAAuC,EACtDL,EAAMK,EAAI,EAAG,4BAA4B,EACzCG,EAAa,CAAE,IAAKH,EAAI,IAAK,IAAKA,EAAI,IAAK,EAAGA,EAAI,CAAE,EACpD,MACJ,IAAK,MACDL,EAAMK,EAAI,EAAG,0BAA0B,EACvCL,EAAMK,EAAI,EAAG,yBAAyB,EACtCG,EAAa,CAAE,EAAGH,EAAI,EAAG,IAAKA,EAAI,IAAK,EAAGA,EAAI,CAAE,EAChD,MACJ,IAAK,MACDL,EAAMK,EAAI,EAAG,2BAA2B,EACxCG,EAAa,CAAE,EAAGH,EAAI,EAAG,IAAKA,EAAI,GAAI,EACtC,MACJ,QACI,MAAM,IAAII,EAAiB,mDAAmD,CACtF,CACA,IAAMC,EAAOC,EAAQ,OAAO,KAAK,UAAUH,CAAU,CAAC,EACtD,OAAOI,EAAU,MAAMC,GAAOP,EAAiBI,CAAI,CAAC,CACxD,CACA,eAAsBI,GAA0BT,EAAKC,EAAiB,CAClEA,IAAoBA,EAAkB,UACtC,IAAMS,EAAa,MAAMX,GAAuBC,EAAKC,CAAe,EACpE,MAAO,4CAA4CA,EAAgB,MAAM,EAAE,CAAC,IAAIS,CAAU,EAC9F,CCjDA,eAAsBC,GAAYC,EAAiBC,EAAO,CACtD,IAAMC,EAAa,CACf,GAAGF,EACH,GAAGC,GAAO,MACd,EACA,GAAI,CAACE,EAASD,EAAW,GAAG,EACxB,MAAM,IAAIE,EAAW,6DAA6D,EAEtF,IAAMC,EAAM,MAAMC,EAAU,CAAE,GAAGJ,EAAW,IAAK,IAAK,EAAK,EAAGA,EAAW,GAAG,EAC5E,GAAIG,aAAe,YAAcA,EAAI,OAAS,SAC1C,MAAM,IAAID,EAAW,4DAA4D,EAErF,OAAOC,CACX,CCbA,SAASE,GAAcC,EAAK,CACxB,OAAQ,OAAOA,GAAQ,UAAYA,EAAI,MAAM,EAAG,CAAC,EAAG,CAChD,IAAK,KACL,IAAK,KACD,MAAO,MACX,IAAK,KACD,MAAO,KACX,IAAK,KACD,MAAO,MACX,QACI,MAAM,IAAIC,EAAiB,gDAAgD,CACnF,CACJ,CACA,SAASC,GAAWC,EAAM,CACtB,OAAQA,GACJ,OAAOA,GAAS,UAChB,MAAM,QAAQA,EAAK,IAAI,GACvBA,EAAK,KAAK,MAAMC,EAAS,CACjC,CACA,SAASA,GAAUC,EAAK,CACpB,OAAOC,EAASD,CAAG,CACvB,CACA,SAASE,GAAMC,EAAK,CAChB,OAAI,OAAO,iBAAoB,WACpB,gBAAgBA,CAAG,EAEvB,KAAK,MAAM,KAAK,UAAUA,CAAG,CAAC,CACzC,CACA,IAAMC,GAAN,KAAkB,CACd,YAAYN,EAAM,CAEd,GADA,KAAK,QAAU,IAAI,QACf,CAACD,GAAWC,CAAI,EAChB,MAAM,IAAIO,EAAY,4BAA4B,EAEtD,KAAK,MAAQH,GAAMJ,CAAI,CAC3B,CACA,MAAM,OAAOQ,EAAiBC,EAAO,CACjC,GAAM,CAAE,IAAAZ,EAAK,IAAAa,CAAI,EAAI,CAAE,GAAGF,EAAiB,GAAGC,GAAO,MAAO,EACtDE,EAAMf,GAAcC,CAAG,EACvBe,EAAa,KAAK,MAAM,KAAK,OAAQC,GAAQ,CAC/C,IAAIC,EAAYH,IAAQE,EAAI,IAgB5B,GAfIC,GAAa,OAAOJ,GAAQ,WAC5BI,EAAYJ,IAAQG,EAAI,KAExBC,GAAa,OAAOD,EAAI,KAAQ,WAChCC,EAAYjB,IAAQgB,EAAI,KAExBC,GAAa,OAAOD,EAAI,KAAQ,WAChCC,EAAYD,EAAI,MAAQ,OAExBC,GAAa,MAAM,QAAQD,EAAI,OAAO,IACtCC,EAAYD,EAAI,QAAQ,SAAS,QAAQ,GAEzCC,GAAajB,IAAQ,UACrBiB,EAAYD,EAAI,MAAQ,WAAaA,EAAI,MAAQ,SAEjDC,EACA,OAAQjB,EAAK,CACT,IAAK,QACDiB,EAAYD,EAAI,MAAQ,QACxB,MACJ,IAAK,SACDC,EAAYD,EAAI,MAAQ,YACxB,MACJ,IAAK,QACDC,EAAYD,EAAI,MAAQ,QACxB,MACJ,IAAK,QACDC,EAAYD,EAAI,MAAQ,QACxB,KACR,CAEJ,OAAOC,CACX,CAAC,EACK,CAAE,EAAGD,EAAK,OAAAE,CAAO,EAAIH,EAC3B,GAAIG,IAAW,EACX,MAAM,IAAIC,EAEd,GAAID,IAAW,EAAG,CACd,IAAME,EAAQ,IAAIC,GACZ,CAAE,QAAAC,CAAQ,EAAI,KACpB,MAAAF,EAAM,OAAO,aAAa,EAAI,iBAAmB,CAC7C,QAAWJ,KAAOD,EACd,GAAI,CACA,MAAM,MAAMQ,GAAmBD,EAASN,EAAKhB,CAAG,CACpD,MACM,CAAE,CAEhB,EACMoB,CACV,CACA,OAAOG,GAAmB,KAAK,QAASP,EAAKhB,CAAG,CACpD,CACJ,EACA,eAAeuB,GAAmBC,EAAOR,EAAKhB,EAAK,CAC/C,IAAMyB,EAASD,EAAM,IAAIR,CAAG,GAAKQ,EAAM,IAAIR,EAAK,CAAC,CAAC,EAAE,IAAIA,CAAG,EAC3D,GAAIS,EAAOzB,CAAG,IAAM,OAAW,CAC3B,IAAMK,EAAM,MAAMqB,EAAU,CAAE,GAAGV,EAAK,IAAK,EAAK,EAAGhB,CAAG,EACtD,GAAIK,aAAe,YAAcA,EAAI,OAAS,SAC1C,MAAM,IAAIK,EAAY,8CAA8C,EAExEe,EAAOzB,CAAG,EAAIK,CAClB,CACA,OAAOoB,EAAOzB,CAAG,CACrB,CACO,SAAS2B,GAAkBxB,EAAM,CACpC,IAAMyB,EAAM,IAAInB,GAAYN,CAAI,EAC1B0B,EAAc,MAAOlB,EAAiBC,IAAUgB,EAAI,OAAOjB,EAAiBC,CAAK,EACvF,cAAO,iBAAiBiB,EAAa,CACjC,KAAM,CACF,MAAO,IAAMtB,GAAMqB,EAAI,KAAK,EAC5B,WAAY,GACZ,aAAc,GACd,SAAU,EACd,CACJ,CAAC,EACMC,CACX,CCvHA,IAAMC,GAAY,MAAOC,EAAKC,EAASC,IAAY,CAC/C,IAAIC,EACAC,EACAC,EAAW,GACX,OAAO,iBAAoB,aAC3BF,EAAa,IAAI,gBACjBC,EAAK,WAAW,IAAM,CAClBC,EAAW,GACXF,EAAW,MAAM,CACrB,EAAGF,CAAO,GAEd,IAAMK,EAAW,MAAM,MAAMN,EAAI,KAAM,CACnC,OAAQG,EAAaA,EAAW,OAAS,OACzC,SAAU,SACV,QAASD,EAAQ,OACrB,CAAC,EAAE,MAAOK,GAAQ,CACd,MAAIF,EACM,IAAIG,GACRD,CACV,CAAC,EAGD,GAFIH,IAAO,QACP,aAAaA,CAAE,EACfE,EAAS,SAAW,IACpB,MAAM,IAAIG,EAAU,yDAAyD,EAEjF,GAAI,CACA,OAAO,MAAMH,EAAS,KAAK,CAC/B,MACM,CACF,MAAM,IAAIG,EAAU,4DAA4D,CACpF,CACJ,EACOC,GAAQX,GC7Bf,SAASY,IAAsB,CAC3B,OAAQ,OAAO,cAAkB,KAC5B,OAAO,UAAc,KAAe,UAAU,YAAc,sBAC5D,OAAO,YAAgB,KAAe,cAAgB,QAC/D,CACA,IAAIC,IACA,OAAO,UAAc,KAAe,CAAC,UAAU,WAAW,aAAa,cAAc,KAGrFA,GAAa,eAEV,IAAMC,GAAY,OAAO,EAChC,SAASC,GAAiBC,EAAOC,EAAa,CAO1C,MANI,SAAOD,GAAU,UAAYA,IAAU,MAGvC,EAAE,QAASA,IAAU,OAAOA,EAAM,KAAQ,UAAY,KAAK,IAAI,EAAIA,EAAM,KAAOC,GAGhF,EAAE,SAAUD,IACZ,CAACE,EAASF,EAAM,IAAI,GACpB,CAAC,MAAM,QAAQA,EAAM,KAAK,IAAI,GAC9B,CAAC,MAAM,UAAU,MAAM,KAAKA,EAAM,KAAK,KAAME,CAAQ,EAI7D,CACA,IAAMC,GAAN,KAAmB,CACf,YAAYC,EAAKC,EAAS,CACtB,GAAI,EAAED,aAAe,KACjB,MAAM,IAAI,UAAU,gCAAgC,EAExD,KAAK,KAAO,IAAI,IAAIA,EAAI,IAAI,EAC5B,KAAK,SAAW,CAAE,MAAOC,GAAS,MAAO,QAASA,GAAS,OAAQ,EACnE,KAAK,iBACD,OAAOA,GAAS,iBAAoB,SAAWA,GAAS,gBAAkB,IAC9E,KAAK,kBACD,OAAOA,GAAS,kBAAqB,SAAWA,GAAS,iBAAmB,IAChF,KAAK,aAAe,OAAOA,GAAS,aAAgB,SAAWA,GAAS,YAAc,IAClFA,IAAUP,EAAS,IAAM,SACzB,KAAK,OAASO,IAAUP,EAAS,EAC7BC,GAAiBM,IAAUP,EAAS,EAAG,KAAK,YAAY,IACxD,KAAK,eAAiB,KAAK,OAAO,IAClC,KAAK,OAASQ,GAAkB,KAAK,OAAO,IAAI,GAG5D,CACA,aAAc,CACV,OAAO,OAAO,KAAK,gBAAmB,SAChC,KAAK,IAAI,EAAI,KAAK,eAAiB,KAAK,kBACxC,EACV,CACA,OAAQ,CACJ,OAAO,OAAO,KAAK,gBAAmB,SAChC,KAAK,IAAI,EAAI,KAAK,eAAiB,KAAK,aACxC,EACV,CACA,MAAM,OAAOC,EAAiBC,EAAO,EAC7B,CAAC,KAAK,QAAU,CAAC,KAAK,MAAM,IAC5B,MAAM,KAAK,OAAO,EAEtB,GAAI,CACA,OAAO,MAAM,KAAK,OAAOD,EAAiBC,CAAK,CACnD,OACOC,EAAK,CACR,GAAIA,aAAeC,GACX,KAAK,YAAY,IAAM,GACvB,aAAM,KAAK,OAAO,EACX,KAAK,OAAOH,EAAiBC,CAAK,EAGjD,MAAMC,CACV,CACJ,CACA,MAAM,QAAS,CACP,KAAK,eAAiBb,GAAoB,IAC1C,KAAK,cAAgB,QAEzB,IAAMe,EAAU,IAAI,QAAQ,KAAK,SAAS,OAAO,EAC7Cd,IAAc,CAACc,EAAQ,IAAI,YAAY,IACvCA,EAAQ,IAAI,aAAcd,EAAU,EACpC,KAAK,SAAS,QAAU,OAAO,YAAYc,EAAQ,QAAQ,CAAC,GAEhE,KAAK,gBAAkB,KAAK,cAAgBC,GAAU,KAAK,KAAM,KAAK,iBAAkB,KAAK,QAAQ,EAChG,KAAMC,GAAS,CAChB,KAAK,OAASP,GAAkBO,CAAI,EAChC,KAAK,SACL,KAAK,OAAO,IAAM,KAAK,IAAI,EAC3B,KAAK,OAAO,KAAOA,GAEvB,KAAK,eAAiB,KAAK,IAAI,EAC/B,KAAK,cAAgB,MACzB,CAAC,EACI,MAAOJ,GAAQ,CAChB,WAAK,cAAgB,OACfA,CACV,CAAC,GACD,MAAM,KAAK,aACf,CACJ,EACO,SAASK,GAAmBV,EAAKC,EAAS,CAC7C,IAAMU,EAAM,IAAIZ,GAAaC,EAAKC,CAAO,EACnCW,EAAe,MAAOT,EAAiBC,IAAUO,EAAI,OAAOR,EAAiBC,CAAK,EACxF,cAAO,iBAAiBQ,EAAc,CAClC,YAAa,CACT,IAAK,IAAMD,EAAI,YAAY,EAC3B,WAAY,GACZ,aAAc,EAClB,EACA,MAAO,CACH,IAAK,IAAMA,EAAI,MAAM,EACrB,WAAY,GACZ,aAAc,EAClB,EACA,OAAQ,CACJ,MAAO,IAAMA,EAAI,OAAO,EACxB,WAAY,GACZ,aAAc,GACd,SAAU,EACd,EACA,UAAW,CACP,IAAK,IAAM,CAAC,CAACA,EAAI,cACjB,WAAY,GACZ,aAAc,EAClB,EACA,KAAM,CACF,MAAO,IAAMA,EAAI,QAAQ,KAAK,EAC9B,WAAY,GACZ,aAAc,GACd,SAAU,EACd,CACJ,CAAC,EACMC,CACX,CACO,IAAMC,GAAyBnB,GCrI/B,IAAMoB,GAAN,cAA2BC,CAAW,CACzC,QAAS,CACL,IAAMC,EAAmBC,EAAO,KAAK,UAAU,CAAE,IAAK,MAAO,CAAC,CAAC,EACzDC,EAAoBD,EAAO,KAAK,UAAU,KAAK,QAAQ,CAAC,EAC9D,MAAO,GAAGD,CAAM,IAAIE,CAAO,GAC/B,CACA,OAAO,OAAOC,EAAKC,EAAS,CACxB,GAAI,OAAOD,GAAQ,SACf,MAAM,IAAIE,EAAW,gCAAgC,EAEzD,GAAM,CAAE,EAAGC,EAAe,EAAGC,EAAgB,EAAGC,EAAW,OAAAC,CAAO,EAAIN,EAAI,MAAM,GAAG,EACnF,GAAIM,IAAW,GAAKD,IAAc,GAC9B,MAAM,IAAIH,EAAW,uBAAuB,EAEhD,IAAIL,EACJ,GAAI,CAEA,GADAA,EAAS,KAAK,MAAMU,EAAQ,OAAiBC,EAAOL,CAAa,CAAC,CAAC,EAC/DN,EAAO,MAAQ,OACf,MAAM,IAAI,KAClB,MACM,CACF,MAAM,IAAIK,EAAW,uBAAuB,CAChD,CAEA,MAAO,CAAE,QADOO,GAAWZ,EAAkBW,EAAOJ,CAAc,EAAGH,CAAO,EAC1D,OAAAJ,CAAO,CAC7B,CACJ,EC/BA,IAAAa,GAAA,GAAAC,GAAAD,GAAA,YAAAE,GAAA,WAAAC,KACO,IAAMC,GAAmBA,EACnBC,GAAmBA,ECCzB,SAASC,GAAsBC,EAAO,CACzC,IAAIC,EACJ,GAAI,OAAOD,GAAU,SAAU,CAC3B,IAAME,EAAQF,EAAM,MAAM,GAAG,GACzBE,EAAM,SAAW,GAAKA,EAAM,SAAW,KAEvC,CAACD,CAAa,EAAIC,EAE1B,SACS,OAAOF,GAAU,UAAYA,EAClC,GAAI,cAAeA,EACfC,EAAgBD,EAAM,cAGtB,OAAM,IAAI,UAAU,2CAA2C,EAGvE,GAAI,CACA,GAAI,OAAOC,GAAkB,UAAY,CAACA,EACtC,MAAM,IAAI,MAEd,IAAME,EAAS,KAAK,MAAMC,EAAQ,OAAOC,GAAUJ,CAAa,CAAC,CAAC,EAClE,GAAI,CAACK,EAASH,CAAM,EAChB,MAAM,IAAI,MAEd,OAAOA,CACX,MACM,CACF,MAAM,IAAI,UAAU,8CAA8C,CACtE,CACJ,CC7BO,SAASI,GAAUC,EAAK,CAC3B,GAAI,OAAOA,GAAQ,SACf,MAAM,IAAIC,EAAW,+DAA+D,EACxF,GAAM,CAAE,EAAGC,EAAS,OAAAC,CAAO,EAAIH,EAAI,MAAM,GAAG,EAC5C,GAAIG,IAAW,EACX,MAAM,IAAIF,EAAW,0DAA0D,EACnF,GAAIE,IAAW,EACX,MAAM,IAAIF,EAAW,aAAa,EACtC,GAAI,CAACC,EACD,MAAM,IAAID,EAAW,6BAA6B,EACtD,IAAIG,EACJ,GAAI,CACAA,EAAUC,GAAUH,CAAO,CAC/B,MACM,CACF,MAAM,IAAID,EAAW,wCAAwC,CACjE,CACA,IAAIK,EACJ,GAAI,CACAA,EAAS,KAAK,MAAMC,EAAQ,OAAOH,CAAO,CAAC,CAC/C,MACM,CACF,MAAM,IAAIH,EAAW,6CAA6C,CACtE,CACA,GAAI,CAACO,EAASF,CAAM,EAChB,MAAM,IAAIL,EAAW,wBAAwB,EACjD,OAAOK,CACX,CC5BA,eAAsBG,GAAeC,EAAKC,EAAS,CAC/C,IAAIC,EACAC,EACAC,EACJ,OAAQJ,EAAK,CACT,IAAK,QACL,IAAK,QACL,IAAK,QACDE,EAAS,SAASF,EAAI,MAAM,EAAE,EAAG,EAAE,EACnCG,EAAY,CAAE,KAAM,OAAQ,KAAM,OAAOD,CAAM,GAAI,OAAAA,CAAO,EAC1DE,EAAY,CAAC,OAAQ,QAAQ,EAC7B,MACJ,IAAK,gBACL,IAAK,gBACL,IAAK,gBACD,OAAAF,EAAS,SAASF,EAAI,MAAM,EAAE,EAAG,EAAE,EAC5BK,EAAO,IAAI,WAAWH,GAAU,CAAC,CAAC,EAC7C,IAAK,SACL,IAAK,SACL,IAAK,SACDA,EAAS,SAASF,EAAI,MAAM,EAAG,CAAC,EAAG,EAAE,EACrCG,EAAY,CAAE,KAAM,SAAU,OAAAD,CAAO,EACrCE,EAAY,CAAC,UAAW,WAAW,EACnC,MACJ,IAAK,YACL,IAAK,YACL,IAAK,YACL,IAAK,UACL,IAAK,UACL,IAAK,UACDF,EAAS,SAASF,EAAI,MAAM,EAAG,CAAC,EAAG,EAAE,EACrCG,EAAY,CAAE,KAAM,UAAW,OAAAD,CAAO,EACtCE,EAAY,CAAC,UAAW,SAAS,EACjC,MACJ,QACI,MAAM,IAAIE,EAAiB,8DAA8D,CACjG,CACA,OAAOC,EAAO,OAAO,YAAYJ,EAAWF,GAAS,aAAe,GAAOG,CAAS,CACxF,CACA,SAASI,GAAuBP,EAAS,CACrC,IAAMQ,EAAgBR,GAAS,eAAiB,KAChD,GAAI,OAAOQ,GAAkB,UAAYA,EAAgB,KACrD,MAAM,IAAIH,EAAiB,6FAA6F,EAE5H,OAAOG,CACX,CACA,eAAsBC,GAAgBV,EAAKC,EAAS,CAChD,IAAIE,EACAC,EACJ,OAAQJ,EAAK,CACT,IAAK,QACL,IAAK,QACL,IAAK,QACDG,EAAY,CACR,KAAM,UACN,KAAM,OAAOH,EAAI,MAAM,EAAE,CAAC,GAC1B,eAAgB,IAAI,WAAW,CAAC,EAAM,EAAM,CAAI,CAAC,EACjD,cAAeQ,GAAuBP,CAAO,CACjD,EACAG,EAAY,CAAC,OAAQ,QAAQ,EAC7B,MACJ,IAAK,QACL,IAAK,QACL,IAAK,QACDD,EAAY,CACR,KAAM,oBACN,KAAM,OAAOH,EAAI,MAAM,EAAE,CAAC,GAC1B,eAAgB,IAAI,WAAW,CAAC,EAAM,EAAM,CAAI,CAAC,EACjD,cAAeQ,GAAuBP,CAAO,CACjD,EACAG,EAAY,CAAC,OAAQ,QAAQ,EAC7B,MACJ,IAAK,WACL,IAAK,eACL,IAAK,eACL,IAAK,eACDD,EAAY,CACR,KAAM,WACN,KAAM,OAAO,SAASH,EAAI,MAAM,EAAE,EAAG,EAAE,GAAK,CAAC,GAC7C,eAAgB,IAAI,WAAW,CAAC,EAAM,EAAM,CAAI,CAAC,EACjD,cAAeQ,GAAuBP,CAAO,CACjD,EACAG,EAAY,CAAC,UAAW,YAAa,UAAW,SAAS,EACzD,MACJ,IAAK,QACDD,EAAY,CAAE,KAAM,QAAS,WAAY,OAAQ,EACjDC,EAAY,CAAC,OAAQ,QAAQ,EAC7B,MACJ,IAAK,QACDD,EAAY,CAAE,KAAM,QAAS,WAAY,OAAQ,EACjDC,EAAY,CAAC,OAAQ,QAAQ,EAC7B,MACJ,IAAK,QACDD,EAAY,CAAE,KAAM,QAAS,WAAY,OAAQ,EACjDC,EAAY,CAAC,OAAQ,QAAQ,EAC7B,MACJ,IAAK,QAAS,CACVA,EAAY,CAAC,OAAQ,QAAQ,EAC7B,IAAMO,EAAMV,GAAS,KAAO,UAC5B,OAAQU,EAAK,CACT,IAAK,UACL,IAAK,QACDR,EAAY,CAAE,KAAMQ,CAAI,EACxB,MACJ,QACI,MAAM,IAAIL,EAAiB,4CAA4C,CAC/E,CACA,KACJ,CACA,IAAK,UACL,IAAK,iBACL,IAAK,iBACL,IAAK,iBAAkB,CACnBF,EAAY,CAAC,YAAa,YAAY,EACtC,IAAMO,EAAMV,GAAS,KAAO,QAC5B,OAAQU,EAAK,CACT,IAAK,QACL,IAAK,QACL,IAAK,QAAS,CACVR,EAAY,CAAE,KAAM,OAAQ,WAAYQ,CAAI,EAC5C,KACJ,CACA,IAAK,SACL,IAAK,OACDR,EAAY,CAAE,KAAMQ,CAAI,EACxB,MACJ,QACI,MAAM,IAAIL,EAAiB,wGAAwG,CAC3I,CACA,KACJ,CACA,QACI,MAAM,IAAIA,EAAiB,8DAA8D,CACjG,CACA,OAAOC,EAAO,OAAO,YAAYJ,EAAWF,GAAS,aAAe,GAAOG,CAAS,CACxF,CCzIA,eAAsBQ,GAAgBC,EAAKC,EAAS,CAChD,OAAOF,GAASC,EAAKC,CAAO,CAChC,CCFA,eAAsBC,GAAeC,EAAKC,EAAS,CAC/C,OAAOF,GAASC,EAAKC,CAAO,CAChC,CCHA,IAAOC,GAAQ,eCCf,IAAOC,GAAQA","names":["webcrypto_default","isCryptoKey","key","digest","algorithm","data","subtleDigest","webcrypto_default","digest_default","encoder","decoder","MAX_INT32","concat","buffers","size","acc","length","buf","i","buffer","p2s","alg","p2sInput","writeUInt32BE","value","offset","uint64be","high","low","uint32be","lengthAndInput","input","concatKdf","secret","bits","iterations","res","iter","digest_default","encodeBase64","input","unencoded","encoder","CHUNK_SIZE","arr","i","encode","decodeBase64","encoded","binary","bytes","decode","decoder","errors_exports","__export","JOSEAlgNotAllowed","JOSEError","JOSENotSupported","JWEDecryptionFailed","JWEInvalid","JWKInvalid","JWKSInvalid","JWKSMultipleMatchingKeys","JWKSNoMatchingKey","JWKSTimeout","JWSInvalid","JWSSignatureVerificationFailed","JWTClaimValidationFailed","JWTExpired","JWTInvalid","message","options","payload","claim","reason","random_default","webcrypto_default","bitLength","alg","JOSENotSupported","iv_default","random_default","checkIvLength","enc","iv","bitLength","JWEInvalid","check_iv_length_default","checkCekLength","cek","expected","actual","JWEInvalid","check_cek_length_default","timingSafeEqual","a","b","len","out","i","timing_safe_equal_default","unusable","name","prop","isAlgorithm","algorithm","getHashLength","hash","getNamedCurve","alg","checkUsage","key","usages","expected","msg","last","checkSigCryptoKey","checkEncCryptoKey","message","msg","actual","types","last","invalid_key_input_default","withAlg","alg","is_key_like_default","key","isCryptoKey","types","cbcDecrypt","enc","cek","ciphertext","iv","tag","aad","invalid_key_input_default","keySize","encKey","webcrypto_default","macKey","macData","concat","uint64be","expectedTag","macCheckPassed","timing_safe_equal_default","JWEDecryptionFailed","plaintext","gcmDecrypt","checkEncCryptoKey","decrypt","isCryptoKey","types","JWEInvalid","check_iv_length_default","check_cek_length_default","JOSENotSupported","decrypt_default","isDisjoint","headers","sources","acc","header","parameters","parameter","is_disjoint_default","isObjectLike","value","isObject","input","proto","bogusWebCrypto","bogus_default","checkKeySize","key","alg","getCryptoKey","usage","isCryptoKey","checkEncCryptoKey","webcrypto_default","invalid_key_input_default","types","wrap","cek","cryptoKey","cryptoKeyCek","bogus_default","unwrap","encryptedKey","deriveKey","publicKey","privateKey","algorithm","keyLength","apu","apv","isCryptoKey","invalid_key_input_default","types","checkEncCryptoKey","value","concat","lengthAndInput","encoder","uint32be","length","sharedSecret","webcrypto_default","concatKdf","generateEpk","key","ecdhAllowed","checkP2s","p2s","JWEInvalid","getCryptoKey","key","alg","webcrypto_default","isCryptoKey","checkEncCryptoKey","invalid_key_input_default","types","deriveKey","p2s","p2c","checkP2s","salt","keylen","subtleAlg","wrapAlg","cryptoKey","encrypt","cek","random_default","derived","wrap","encode","decrypt","encryptedKey","unwrap","subtleRsaEs","alg","JOSENotSupported","check_key_length_default","alg","key","modulusLength","encrypt","alg","key","cek","isCryptoKey","invalid_key_input_default","types","checkEncCryptoKey","check_key_length_default","webcrypto_default","subtleRsaEs","cryptoKeyCek","bogus_default","decrypt","encryptedKey","isJWK","key","isObject","isPrivateJWK","isPublicJWK","isSecretJWK","subtleMapping","jwk","algorithm","keyUsages","JOSENotSupported","parse","rest","keyData","webcrypto_default","jwk_to_key_default","exportKeyValue","k","decode","privCache","pubCache","isKeyObject","key","importAndCache","cache","jwk","alg","freeze","cached","cryptoKey","jwk_to_key_default","normalizePublicKey","isJWK","normalizePrivateKey","normalize_key_default","bitLength","alg","JOSENotSupported","cek_default","random_default","format_pem_default","b64","descriptor","newlined","genericExport","keyType","keyFormat","key","isCryptoKey","invalid_key_input_default","types","format_pem_default","encodeBase64","webcrypto_default","toSPKI","toPKCS8","findOid","keyData","oid","from","i","sub","value","index","getNamedCurve","JOSENotSupported","genericImport","replace","pem","alg","options","algorithm","keyUsages","c","isPublic","namedCurve","fromPKCS8","fromSPKI","getElement","seq","result","next","nextPart","parseElement","bytes","position","tag","length","byteLength","numberOfDigits","spkiFromX509","buf","tbsCertificate","getSPKI","x509","raw","decodeBase64","fromX509","spki","cause","importSPKI","spki","alg","options","fromSPKI","importX509","x509","fromX509","importPKCS8","pkcs8","fromPKCS8","importJWK","jwk","isObject","decode","JOSENotSupported","jwk_to_key_default","tag","key","jwkMatchesOp","alg","usage","symmetricTypeCheck","allowJwk","isJWK","isSecretJWK","is_key_like_default","withAlg","types","asymmetricTypeCheck","isPrivateJWK","isPublicJWK","checkKeyType","check_key_type_default","checkKeyTypeWithJwk","cbcEncrypt","enc","plaintext","cek","iv","aad","invalid_key_input_default","keySize","encKey","webcrypto_default","macKey","ciphertext","macData","concat","uint64be","tag","gcmEncrypt","checkEncCryptoKey","encrypted","encrypt","isCryptoKey","types","check_iv_length_default","iv_default","check_cek_length_default","JOSENotSupported","encrypt_default","wrap","alg","key","cek","iv","jweAlgorithm","wrapped","encrypt_default","encode","unwrap","encryptedKey","tag","decrypt_default","decryptKeyManagement","alg","key","encryptedKey","joseHeader","options","check_key_type_default","normalize_key_default","JWEInvalid","isObject","ecdhAllowed","JOSENotSupported","epk","importJWK","partyUInfo","partyVInfo","decode","sharedSecret","deriveKey","bitLength","unwrap","decrypt","p2cLimit","p2s","iv","tag","decrypt_key_management_default","validateCrit","Err","recognizedDefault","recognizedOption","protectedHeader","joseHeader","input","recognized","parameter","JOSENotSupported","validate_crit_default","validateAlgorithms","option","algorithms","s","validate_algorithms_default","flattenedDecrypt","jwe","key","options","isObject","JWEInvalid","parsedProt","protectedHeader","decode","decoder","is_disjoint_default","joseHeader","validate_crit_default","JOSENotSupported","alg","enc","keyManagementAlgorithms","validate_algorithms_default","contentEncryptionAlgorithms","JOSEAlgNotAllowed","encryptedKey","resolvedKey","cek","decrypt_key_management_default","err","cek_default","iv","tag","encoder","additionalData","concat","ciphertext","result","decrypt_default","compactDecrypt","jwe","key","options","decoder","JWEInvalid","protectedHeader","encryptedKey","iv","ciphertext","tag","length","decrypted","flattenedDecrypt","result","generalDecrypt","jwe","key","options","isObject","JWEInvalid","recipient","flattenedDecrypt","JWEDecryptionFailed","unprotected","keyToJWK","key","encode","isCryptoKey","invalid_key_input_default","types","ext","key_ops","alg","use","jwk","webcrypto_default","key_to_jwk_default","exportSPKI","key","toSPKI","exportPKCS8","toPKCS8","exportJWK","key_to_jwk_default","encryptKeyManagement","alg","enc","key","providedCek","providedParameters","encryptedKey","parameters","cek","check_key_type_default","normalize_key_default","ecdhAllowed","JOSENotSupported","apu","apv","ephemeralKey","generateEpk","x","y","crv","kty","exportJWK","sharedSecret","deriveKey","bitLength","encode","cek_default","kwAlg","wrap","encrypt","p2c","p2s","iv","encrypt_key_management_default","FlattenedEncrypt","plaintext","parameters","protectedHeader","sharedUnprotectedHeader","unprotectedHeader","aad","cek","iv","key","options","JWEInvalid","is_disjoint_default","joseHeader","validate_crit_default","JOSENotSupported","alg","enc","encryptedKey","encrypt_key_management_default","unprotected","additionalData","aadMember","encoder","encode","concat","ciphertext","tag","encrypt_default","jwe","decoder","IndividualRecipient","enc","key","options","unprotectedHeader","args","GeneralEncrypt","plaintext","recipient","protectedHeader","sharedUnprotectedHeader","aad","JWEInvalid","flattened","FlattenedEncrypt","jwe","i","is_disjoint_default","joseHeader","alg","validate_crit_default","JOSENotSupported","cek","cek_default","target","p2c","unprotected","encryptedKey","parameters","encrypt_key_management_default","encode","subtleDsa","alg","algorithm","hash","JOSENotSupported","getCryptoKey","alg","key","usage","normalize_key_default","isCryptoKey","checkSigCryptoKey","invalid_key_input_default","types","webcrypto_default","verify","alg","key","signature","data","cryptoKey","getCryptoKey","check_key_length_default","algorithm","subtleDsa","webcrypto_default","verify_default","flattenedVerify","jws","key","options","isObject","JWSInvalid","parsedProt","protectedHeader","decode","decoder","is_disjoint_default","joseHeader","extensions","validate_crit_default","b64","alg","algorithms","validate_algorithms_default","JOSEAlgNotAllowed","resolvedKey","checkKeyTypeWithJwk","isJWK","importJWK","data","concat","encoder","signature","verify_default","JWSSignatureVerificationFailed","payload","result","compactVerify","jws","key","options","decoder","JWSInvalid","protectedHeader","payload","signature","length","verified","flattenedVerify","result","generalVerify","jws","key","options","isObject","JWSInvalid","signature","flattenedVerify","JWSSignatureVerificationFailed","epoch_default","date","REGEX","secs_default","str","matched","value","unit","numericDate","normalizeTyp","value","checkAudiencePresence","audPayload","audOption","jwt_claims_set_default","protectedHeader","encodedPayload","options","payload","decoder","isObject","JWTInvalid","typ","JWTClaimValidationFailed","requiredClaims","issuer","subject","audience","maxTokenAge","presenceCheck","claim","tolerance","secs_default","currentDate","now","epoch_default","JWTExpired","age","max","jwtVerify","jwt","key","options","verified","compactVerify","JWTInvalid","result","jwt_claims_set_default","jwtDecrypt","jwt","key","options","decrypted","compactDecrypt","payload","jwt_claims_set_default","protectedHeader","JWTClaimValidationFailed","result","CompactEncrypt","plaintext","FlattenedEncrypt","cek","iv","protectedHeader","parameters","key","options","jwe","sign","alg","key","data","cryptoKey","getCryptoKey","check_key_length_default","signature","webcrypto_default","subtleDsa","sign_default","FlattenedSign","payload","protectedHeader","unprotectedHeader","key","options","JWSInvalid","is_disjoint_default","joseHeader","extensions","validate_crit_default","b64","alg","checkKeyTypeWithJwk","encoder","encode","data","concat","signature","sign_default","jws","decoder","CompactSign","payload","FlattenedSign","protectedHeader","key","options","jws","IndividualSignature","sig","key","options","protectedHeader","unprotectedHeader","args","GeneralSign","payload","signature","JWSInvalid","jws","i","flattened","FlattenedSign","rest","validateInput","label","input","ProduceJWT","payload","isObject","issuer","subject","audience","jwtId","epoch_default","secs_default","SignJWT","ProduceJWT","protectedHeader","key","options","sig","CompactSign","encoder","JWTInvalid","EncryptJWT","ProduceJWT","protectedHeader","parameters","cek","iv","key","options","enc","CompactEncrypt","encoder","check","value","description","JWKInvalid","calculateJwkThumbprint","jwk","digestAlgorithm","isObject","components","JOSENotSupported","data","encoder","encode","digest_default","calculateJwkThumbprintUri","thumbprint","EmbeddedJWK","protectedHeader","token","joseHeader","isObject","JWSInvalid","key","importJWK","getKtyFromAlg","alg","JOSENotSupported","isJWKSLike","jwks","isJWKLike","key","isObject","clone","obj","LocalJWKSet","JWKSInvalid","protectedHeader","token","kid","kty","candidates","jwk","candidate","length","JWKSNoMatchingKey","error","JWKSMultipleMatchingKeys","_cached","importWithAlgCache","cache","cached","importJWK","createLocalJWKSet","set","localJWKSet","fetchJwks","url","timeout","options","controller","id","timedOut","response","err","JWKSTimeout","JOSEError","fetch_jwks_default","isCloudflareWorkers","USER_AGENT","jwksCache","isFreshJwksCache","input","cacheMaxAge","isObject","RemoteJWKSet","url","options","createLocalJWKSet","protectedHeader","token","err","JWKSNoMatchingKey","headers","fetch_jwks_default","json","createRemoteJWKSet","set","remoteJWKSet","experimental_jwksCache","UnsecuredJWT","ProduceJWT","header","encode","payload","jwt","options","JWTInvalid","encodedHeader","encodedPayload","signature","length","decoder","decode","jwt_claims_set_default","base64url_exports","__export","decode","encode","encode","decode","decodeProtectedHeader","token","protectedB64u","parts","result","decoder","decode","isObject","decodeJwt","jwt","JWTInvalid","payload","length","decoded","decode","result","decoder","isObject","generateSecret","alg","options","length","algorithm","keyUsages","random_default","JOSENotSupported","webcrypto_default","getModulusLengthOption","modulusLength","generateKeyPair","crv","generateKeyPair","alg","options","generateSecret","alg","options","runtime_default","runtime_default"]}