@xiboplayer/pwa 0.7.15 → 0.7.16

package/dist/assets/{setup-cquLiEJA.js → setup-Dr31Tx8X.js}

@@ -1,2 +1,2 @@
-import"./modulepreload-polyfill-wMinxHhO.js";import{l as e}from"./src-CMBYiOs4.js";import{n as t,r as n}from"./src-DpE7HVLC.js";var r=`0.7.15`;document.getElementById(`version-footer`).textContent=`xiboplayer v${r}`;var i=document.getElementById(`setup-form`),a=document.getElementById(`error`),o=document.getElementById(`submit-btn`),s=document.getElementById(`phase-unlock`),c=document.getElementById(`phase-setup`),l=document.getElementById(`phase-waiting`),u=document.getElementById(`countdown`),d=document.getElementById(`waiting-display-name`),f=document.getElementById(`btn-back`),p=document.getElementById(`success-flash`),m=e.hardwareKey;document.getElementById(`hw-key-display`).textContent=m,document.getElementById(`hw-key-waiting`).textContent=m;var h=e.cmsUrl||``,g=null,_=null,v=15,y=null;async function b(){if(y)return y;try{let t=new n(e);await t.registerDisplay(),console.log(`[Setup] Using REST transport`),y=t}catch(n){console.log(`[Setup] REST unavailable, using XMDS/SOAP:`,n.message),y=new t(e)}return y}function x(e){s.classList.remove(`active`),c.classList.remove(`active`),l.classList.remove(`active`),e.classList.add(`active`)}function S(e){a.textContent=e,a.style.display=`block`}function C(){a.style.display=`none`}function w(){let e=v;u.textContent=e,clearInterval(_),_=setInterval(()=>{e--,u.textContent=Math.max(0,e),e<=0&&clearInterval(_)},1e3)}async function T(){if(document.getElementById(`cms-url`).value.trim().replace(/\/$/,``)!==h){console.log(`[Setup] CMS URL changed — wiping cached content`);let e=await caches.keys();await Promise.all(e.map(e=>caches.delete(e)))}p.classList.add(`active`),setTimeout(()=>{window.location.href=`/player/index.html`+window.location.search},800)}async function E(){try{let e=await(await b()).registerDisplay();if(console.log(`[Setup] Poll result:`,e.code,e.message),e.code===`READY`){clearInterval(g),clearInterval(_),T();return}w()}catch(e){console.warn(`[Setup] Poll failed:`,e.message),w()}}function D(e){d.textContent=e,x(l),w(),g=setInterval(E,v*1e3)}function O(){clearInterval(g),clearInterval(_),g=null}async function k(t,n){let r=document.getElementById(`api-client-id`).value.trim(),i=document.getElementById(`api-client-secret`).value.trim();if(!r||!i)return!1;try{let t=await fetch(`/api/authorize/access_token`,{method:`POST`,headers:{"Content-Type":`application/x-www-form-urlencoded`},body:new URLSearchParams({grant_type:`client_credentials`,client_id:r,client_secret:i})});if(!t.ok)throw Error(`OAuth2 failed: ${t.status}`);let{access_token:a}=await t.json(),o=await fetch(`/api/display?hardwareKey=${encodeURIComponent(n)}`,{headers:{Authorization:`Bearer ${a}`}});if(!o.ok)throw Error(`Find display failed: ${o.status}`);let s=await o.json();if(!s.length)return console.log(`[Setup] Display not found via API (may not be registered yet)`),!1;let c=s[0];if(c.licensed===1)return console.log(`[Setup] Display already authorized`),!0;let l=await fetch(`/api/display/authorise/${c.displayId}`,{method:`PUT`,headers:{Authorization:`Bearer ${a}`}});if(!l.ok)throw Error(`Authorize failed: ${l.status}`);return console.log(`[Setup] Display auto-authorized via proxy!`),e.data.apiClientId=r,e.data.apiClientSecret=i,!0}catch(e){return console.warn(`[Setup] Auto-authorize failed:`,e.message),!1}}var A=e.isConfigured()&&e.cmsKey,j=new URLSearchParams(window.location.search).has(`unlocked`),M=document.getElementById(`btn-back-player`);A&&!j&&x(s),(A||j)&&(M.style.display=`block`,document.getElementById(`cms-url`).value=e.cmsUrl,document.getElementById(`cms-key`).value=e.cmsKey,document.getElementById(`display-name`).value=e.displayName,e.data.apiClientId&&(document.getElementById(`api-client-id`).value=e.data.apiClientId,document.getElementById(`api-client-secret`).value=e.data.apiClientSecret||``));function N(){O(),window.location.href=`/player/index.html`+window.location.search}M.addEventListener(`click`,N),(A||j)&&document.addEventListener(`keydown`,e=>{e.key===`Escape`&&(e.preventDefault(),N())}),document.getElementById(`unlock-form`).addEventListener(`submit`,t=>{t.preventDefault();let n=document.getElementById(`unlock-error`);document.getElementById(`unlock-key`).value.trim()===e.cmsKey?(n.style.display=`none`,document.getElementById(`cms-url`).value=e.cmsUrl,document.getElementById(`cms-key`).value=e.cmsKey,document.getElementById(`display-name`).value=e.displayName,e.data.apiClientId&&(document.getElementById(`api-client-id`).value=e.data.apiClientId,document.getElementById(`api-client-secret`).value=e.data.apiClientSecret||``),x(c)):(n.textContent=`Incorrect CMS key`,n.style.display=`block`)}),!A&&e.isConfigured()&&(document.getElementById(`cms-url`).value=e.cmsUrl,document.getElementById(`cms-key`).value=e.cmsKey,document.getElementById(`display-name`).value=e.displayName,e.data.apiClientId&&(document.getElementById(`api-client-id`).value=e.data.apiClientId,document.getElementById(`api-client-secret`).value=e.data.apiClientSecret||``)),i.addEventListener(`submit`,async t=>{t.preventDefault(),C();let n=document.getElementById(`cms-url`).value.trim().replace(/\/$/,``),r=document.getElementById(`cms-key`).value.trim(),i=document.getElementById(`display-name`).value.trim();try{if(o.textContent=`Saving...`,o.disabled=!0,!(await fetch(`/config`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({cmsUrl:n,cmsKey:r,displayName:i})})).ok)throw Error(`Failed to save config`);let t=window.electronAPI||window.parent?.electronAPI;t?.setConfig&&await t.setConfig({cmsUrl:n,cmsKey:r,displayName:i}),e.data.cmsUrl=n,e.data.cmsKey=r,e.data.displayName=i,e.save(),P(e.hardwareKey),o.textContent=`Connecting...`,y=null;let a=await b();if((await a.registerDisplay()).code===`READY`)T();else{if(o.textContent=`Authorizing...`,await k(n,m)&&(e.save(),await fetch(`/config`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({apiClientId:e.data.apiClientId,apiClientSecret:e.data.apiClientSecret})}),t?.setConfig&&await t.setConfig({apiClientId:e.data.apiClientId,apiClientSecret:e.data.apiClientSecret}),(await a.registerDisplay()).code===`READY`)){T();return}D(i)}}catch(e){S(`Connection failed: ${e.message}`),o.textContent=`Connect`,o.disabled=!1}}),f.addEventListener(`click`,()=>{O(),x(c),o.textContent=`Connect`,o.disabled=!1});async function P(e){try{let t=indexedDB.open(`xibo-hw-backup`,1);t.onupgradeneeded=()=>{let e=t.result;e.objectStoreNames.contains(`keys`)||e.createObjectStore(`keys`)},t.onsuccess=()=>{let n=t.result,r=n.transaction(`keys`,`readwrite`);r.objectStore(`keys`).put(e,`hardwareKey`),r.oncomplete=()=>n.close()}}catch(e){console.warn(`[Setup] IndexedDB backup failed:`,e)}}o.disabled=!1,o.textContent=`Connect`,e.isConfigured()&&!A&&(async()=>{try{(await(await b()).registerDisplay()).code===`READY`?window.location.href=`/player/index.html`+window.location.search:D(e.displayName)}catch{console.log(`[Setup] Auto-check failed, showing form`)}})();
-//# sourceMappingURL=setup-cquLiEJA.js.map
+import"./modulepreload-polyfill-Cf3xff8G.js";import{i as e}from"./src-B-j3XW3-.js";import{n as t,r as n}from"./src-bWHpkXu3.js";var r=`0.7.16`;document.getElementById(`version-footer`).textContent=`xiboplayer v${r}`;var i=document.getElementById(`setup-form`),a=document.getElementById(`error`),o=document.getElementById(`submit-btn`),s=document.getElementById(`phase-unlock`),c=document.getElementById(`phase-setup`),l=document.getElementById(`phase-waiting`),u=document.getElementById(`countdown`),d=document.getElementById(`waiting-display-name`),f=document.getElementById(`btn-back`),p=document.getElementById(`success-flash`),m=e.hardwareKey;document.getElementById(`hw-key-display`).textContent=m,document.getElementById(`hw-key-waiting`).textContent=m;var h=e.cmsUrl||``,g=null,_=null,v=15,y=null;async function b(){if(y)return y;try{let t=new n(e);await t.registerDisplay(),console.log(`[Setup] Using REST transport`),y=t}catch(n){console.log(`[Setup] REST unavailable, using XMDS/SOAP:`,n.message),y=new t(e)}return y}function x(e){s.classList.remove(`active`),c.classList.remove(`active`),l.classList.remove(`active`),e.classList.add(`active`)}function S(e){a.textContent=e,a.style.display=`block`}function C(){a.style.display=`none`}function w(){let e=v;u.textContent=e,clearInterval(_),_=setInterval(()=>{e--,u.textContent=Math.max(0,e),e<=0&&clearInterval(_)},1e3)}async function T(){if(document.getElementById(`cms-url`).value.trim().replace(/\/$/,``)!==h){console.log(`[Setup] CMS URL changed — wiping cached content`);let e=await caches.keys();await Promise.all(e.map(e=>caches.delete(e)))}p.classList.add(`active`),setTimeout(()=>{window.location.href=`/player/index.html`+window.location.search},800)}async function E(){try{let e=await(await b()).registerDisplay();if(console.log(`[Setup] Poll result:`,e.code,e.message),e.code===`READY`){clearInterval(g),clearInterval(_),T();return}w()}catch(e){console.warn(`[Setup] Poll failed:`,e.message),w()}}function D(e){d.textContent=e,x(l),w(),g=setInterval(E,v*1e3)}function O(){clearInterval(g),clearInterval(_),g=null}async function k(t,n){let r=document.getElementById(`api-client-id`).value.trim(),i=document.getElementById(`api-client-secret`).value.trim();if(!r||!i)return!1;try{let t=await fetch(`/api/authorize/access_token`,{method:`POST`,headers:{"Content-Type":`application/x-www-form-urlencoded`},body:new URLSearchParams({grant_type:`client_credentials`,client_id:r,client_secret:i})});if(!t.ok)throw Error(`OAuth2 failed: ${t.status}`);let{access_token:a}=await t.json(),o=await fetch(`/api/display?hardwareKey=${encodeURIComponent(n)}`,{headers:{Authorization:`Bearer ${a}`}});if(!o.ok)throw Error(`Find display failed: ${o.status}`);let s=await o.json();if(!s.length)return console.log(`[Setup] Display not found via API (may not be registered yet)`),!1;let c=s[0];if(c.licensed===1)return console.log(`[Setup] Display already authorized`),!0;let l=await fetch(`/api/display/authorise/${c.displayId}`,{method:`PUT`,headers:{Authorization:`Bearer ${a}`}});if(!l.ok)throw Error(`Authorize failed: ${l.status}`);return console.log(`[Setup] Display auto-authorized via proxy!`),e.data.apiClientId=r,e.data.apiClientSecret=i,!0}catch(e){return console.warn(`[Setup] Auto-authorize failed:`,e.message),!1}}var A=e.isConfigured()&&e.cmsKey,j=new URLSearchParams(window.location.search).has(`unlocked`),M=document.getElementById(`btn-back-player`);A&&!j&&x(s),(A||j)&&(M.style.display=`block`,document.getElementById(`cms-url`).value=e.cmsUrl,document.getElementById(`cms-key`).value=e.cmsKey,document.getElementById(`display-name`).value=e.displayName,e.data.apiClientId&&(document.getElementById(`api-client-id`).value=e.data.apiClientId,document.getElementById(`api-client-secret`).value=e.data.apiClientSecret||``));function N(){O(),window.location.href=`/player/index.html`+window.location.search}M.addEventListener(`click`,N),(A||j)&&document.addEventListener(`keydown`,e=>{e.key===`Escape`&&(e.preventDefault(),N())}),document.getElementById(`unlock-form`).addEventListener(`submit`,t=>{t.preventDefault();let n=document.getElementById(`unlock-error`);document.getElementById(`unlock-key`).value.trim()===e.cmsKey?(n.style.display=`none`,document.getElementById(`cms-url`).value=e.cmsUrl,document.getElementById(`cms-key`).value=e.cmsKey,document.getElementById(`display-name`).value=e.displayName,e.data.apiClientId&&(document.getElementById(`api-client-id`).value=e.data.apiClientId,document.getElementById(`api-client-secret`).value=e.data.apiClientSecret||``),x(c)):(n.textContent=`Incorrect CMS key`,n.style.display=`block`)}),!A&&e.isConfigured()&&(document.getElementById(`cms-url`).value=e.cmsUrl,document.getElementById(`cms-key`).value=e.cmsKey,document.getElementById(`display-name`).value=e.displayName,e.data.apiClientId&&(document.getElementById(`api-client-id`).value=e.data.apiClientId,document.getElementById(`api-client-secret`).value=e.data.apiClientSecret||``)),i.addEventListener(`submit`,async t=>{t.preventDefault(),C();let n=document.getElementById(`cms-url`).value.trim().replace(/\/$/,``),r=document.getElementById(`cms-key`).value.trim(),i=document.getElementById(`display-name`).value.trim();try{if(o.textContent=`Saving...`,o.disabled=!0,!(await fetch(`/config`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({cmsUrl:n,cmsKey:r,displayName:i})})).ok)throw Error(`Failed to save config`);let t=window.electronAPI||window.parent?.electronAPI;t?.setConfig&&await t.setConfig({cmsUrl:n,cmsKey:r,displayName:i}),e.data.cmsUrl=n,e.data.cmsKey=r,e.data.displayName=i,e.save(),P(e.hardwareKey),o.textContent=`Connecting...`,y=null;let a=await b();if((await a.registerDisplay()).code===`READY`)T();else{if(o.textContent=`Authorizing...`,await k(n,m)&&(e.save(),await fetch(`/config`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({apiClientId:e.data.apiClientId,apiClientSecret:e.data.apiClientSecret})}),t?.setConfig&&await t.setConfig({apiClientId:e.data.apiClientId,apiClientSecret:e.data.apiClientSecret}),(await a.registerDisplay()).code===`READY`)){T();return}D(i)}}catch(e){S(`Connection failed: ${e.message}`),o.textContent=`Connect`,o.disabled=!1}}),f.addEventListener(`click`,()=>{O(),x(c),o.textContent=`Connect`,o.disabled=!1});async function P(e){try{let t=indexedDB.open(`xibo-hw-backup`,1);t.onupgradeneeded=()=>{let e=t.result;e.objectStoreNames.contains(`keys`)||e.createObjectStore(`keys`)},t.onsuccess=()=>{let n=t.result,r=n.transaction(`keys`,`readwrite`);r.objectStore(`keys`).put(e,`hardwareKey`),r.oncomplete=()=>n.close()}}catch(e){console.warn(`[Setup] IndexedDB backup failed:`,e)}}o.disabled=!1,o.textContent=`Connect`,e.isConfigured()&&!A&&(async()=>{try{(await(await b()).registerDisplay()).code===`READY`?window.location.href=`/player/index.html`+window.location.search:D(e.displayName)}catch{console.log(`[Setup] Auto-check failed, showing form`)}})();
+//# sourceMappingURL=setup-Dr31Tx8X.js.map

package/dist/assets/{setup-cquLiEJA.js.map → setup-Dr31Tx8X.js.map}

@@ -1 +1 @@
-{"version":3,"file":"setup-cquLiEJA.js","names":[],"sources":["../../setup.html?html-proxy&index=1.js"],"sourcesContent":["\n    import { config } from '@xiboplayer/utils';\n    import { RestClient, XmdsClient } from '@xiboplayer/xmds';\n\n    // Inject version from Vite build\n    const appVersion = typeof __APP_VERSION__ !== 'undefined' ? __APP_VERSION__ : '?';\n    document.getElementById('version-footer').textContent = `xiboplayer v${appVersion}`;\n\n    // ── Elements ──\n    const form = document.getElementById('setup-form');\n    const errorEl = document.getElementById('error');\n    const submitBtn = document.getElementById('submit-btn');\n    const phaseUnlock = document.getElementById('phase-unlock');\n    const phaseSetup = document.getElementById('phase-setup');\n    const phaseWaiting = document.getElementById('phase-waiting');\n    const countdownEl = document.getElementById('countdown');\n    const waitingNameEl = document.getElementById('waiting-display-name');\n    const btnBack = document.getElementById('btn-back');\n    const successFlash = document.getElementById('success-flash');\n\n    // Show hardware key\n    const hwKey = config.hardwareKey;\n    document.getElementById('hw-key-display').textContent = hwKey;\n    document.getElementById('hw-key-waiting').textContent = hwKey;\n\n    // ── State ──\n    const previousCmsUrl = config.cmsUrl || '';\n    let pollTimer = null;\n    let countdownTimer = null;\n    let pollSeconds = 15;\n\n    // ── Transport: try REST first, fall back to SOAP ──\n    let transport = null;\n    async function getTransport() {\n      if (transport) return transport;\n      try {\n        const rest = new RestClient(config);\n        await rest.registerDisplay();\n        console.log('[Setup] Using REST transport');\n        transport = rest;\n      } catch (e) {\n        console.log('[Setup] REST unavailable, using XMDS/SOAP:', e.message);\n        transport = new XmdsClient(config);\n      }\n      return transport;\n    }\n\n    // ── Helpers ──\n    function showPhase(phase) {\n      phaseUnlock.classList.remove('active');\n      phaseSetup.classList.remove('active');\n      phaseWaiting.classList.remove('active');\n      phase.classList.add('active');\n    }\n\n    function showError(msg) {\n      errorEl.textContent = msg;\n      errorEl.style.display = 'block';\n    }\n\n    function hideError() {\n      errorEl.style.display = 'none';\n    }\n\n    function startCountdown() {\n      let remaining = pollSeconds;\n      countdownEl.textContent = remaining;\n      clearInterval(countdownTimer);\n      countdownTimer = setInterval(() => {\n        remaining--;\n        countdownEl.textContent = Math.max(0, remaining);\n        if (remaining <= 0) clearInterval(countdownTimer);\n      }, 1000);\n    }\n\n    async function showSuccess() {\n      // If CMS URL changed, wipe all cached content (media, layouts, widgets\n      // from the old CMS are useless) and the SW's cached index.html (which\n      // may have a stale config injection script).\n      const newUrl = document.getElementById('cms-url').value.trim().replace(/\\/$/, '');\n      if (newUrl !== previousCmsUrl) {\n        console.log('[Setup] CMS URL changed — wiping cached content');\n        const cacheNames = await caches.keys();\n        await Promise.all(cacheNames.map(name => caches.delete(name)));\n      }\n      successFlash.classList.add('active');\n      setTimeout(() => {\n        window.location.href = '/player/index.html' + window.location.search;\n      }, 800);\n    }\n\n    // ── Authorization Polling ──\n    async function checkAuthorization() {\n      try {\n        const client = await getTransport();\n        const result = await client.registerDisplay();\n        console.log('[Setup] Poll result:', result.code, result.message);\n\n        if (result.code === 'READY') {\n          // Authorized!\n          clearInterval(pollTimer);\n          clearInterval(countdownTimer);\n          showSuccess();\n          return;\n        }\n\n        // Still waiting — restart countdown\n        startCountdown();\n      } catch (error) {\n        console.warn('[Setup] Poll failed:', error.message);\n        startCountdown();\n      }\n    }\n\n    function startPolling(displayName) {\n      waitingNameEl.textContent = displayName;\n      showPhase(phaseWaiting);\n      startCountdown();\n      pollTimer = setInterval(checkAuthorization, pollSeconds * 1000);\n    }\n\n    function stopPolling() {\n      clearInterval(pollTimer);\n      clearInterval(countdownTimer);\n      pollTimer = null;\n    }\n\n    // ── Auto-authorize via CMS API (through /api/* forward proxy) ──\n    async function tryAutoAuthorize(cmsUrl, hardwareKey) {\n      const clientId = document.getElementById('api-client-id').value.trim();\n      const clientSecret = document.getElementById('api-client-secret').value.trim();\n      if (!clientId || !clientSecret) return false;\n\n      try {\n        // Step 1: OAuth2 token via proxy\n        const tokenResp = await fetch('/api/authorize/access_token', {\n          method: 'POST',\n          headers: { 'Content-Type': 'application/x-www-form-urlencoded' },\n          body: new URLSearchParams({ grant_type: 'client_credentials', client_id: clientId, client_secret: clientSecret }),\n        });\n        if (!tokenResp.ok) throw new Error(`OAuth2 failed: ${tokenResp.status}`);\n        const { access_token } = await tokenResp.json();\n\n        // Step 2: Find display by hardwareKey via proxy\n        const displayResp = await fetch(\n          `/api/display?hardwareKey=${encodeURIComponent(hardwareKey)}`,\n          { headers: { Authorization: `Bearer ${access_token}` } }\n        );\n        if (!displayResp.ok) throw new Error(`Find display failed: ${displayResp.status}`);\n        const displays = await displayResp.json();\n        if (!displays.length) { console.log('[Setup] Display not found via API (may not be registered yet)'); return false; }\n\n        const display = displays[0];\n        if (display.licensed === 1) { console.log('[Setup] Display already authorized'); return true; }\n\n        // Step 3: Authorize display via proxy\n        const authResp = await fetch(\n          `/api/display/authorise/${display.displayId}`,\n          { method: 'PUT', headers: { Authorization: `Bearer ${access_token}` } }\n        );\n        if (!authResp.ok) throw new Error(`Authorize failed: ${authResp.status}`);\n\n        console.log('[Setup] Display auto-authorized via proxy!');\n        config.data.apiClientId = clientId;\n        config.data.apiClientSecret = clientSecret;\n        return true;\n      } catch (error) {\n        console.warn('[Setup] Auto-authorize failed:', error.message);\n        return false;\n      }\n    }\n\n    // ── Unlock gate for reconfiguration ──\n    const isReconfigure = config.isConfigured() && config.cmsKey;\n    const alreadyUnlocked = new URLSearchParams(window.location.search).has('unlocked');\n    const btnBackPlayer = document.getElementById('btn-back-player');\n    if (isReconfigure && !alreadyUnlocked) {\n      // Show unlock phase instead of setup form\n      showPhase(phaseUnlock);\n    }\n    if (isReconfigure || alreadyUnlocked) {\n      // Show \"Back to Player\" on the setup form\n      btnBackPlayer.style.display = 'block';\n      // Pre-fill form with existing config\n      document.getElementById('cms-url').value = config.cmsUrl;\n      document.getElementById('cms-key').value = config.cmsKey;\n      document.getElementById('display-name').value = config.displayName;\n      if (config.data.apiClientId) {\n        document.getElementById('api-client-id').value = config.data.apiClientId;\n        document.getElementById('api-client-secret').value = config.data.apiClientSecret || '';\n      }\n    }\n\n    // ── Back to Player (cancel reconfiguration) ──\n    function goBackToPlayer() {\n      stopPolling();\n      window.location.href = '/player/index.html' + window.location.search;\n    }\n    btnBackPlayer.addEventListener('click', goBackToPlayer);\n\n    // Esc also goes back to player when reconfiguring\n    if (isReconfigure || alreadyUnlocked) {\n      document.addEventListener('keydown', (e) => {\n        if (e.key === 'Escape') {\n          e.preventDefault();\n          goBackToPlayer();\n        }\n      });\n    }\n\n    // ── Unlock form handler ──\n    document.getElementById('unlock-form').addEventListener('submit', (e) => {\n      e.preventDefault();\n      const unlockError = document.getElementById('unlock-error');\n      const enteredKey = document.getElementById('unlock-key').value.trim();\n\n      if (enteredKey === config.cmsKey) {\n        unlockError.style.display = 'none';\n        // Pre-fill form with existing config\n        document.getElementById('cms-url').value = config.cmsUrl;\n        document.getElementById('cms-key').value = config.cmsKey;\n        document.getElementById('display-name').value = config.displayName;\n        if (config.data.apiClientId) {\n          document.getElementById('api-client-id').value = config.data.apiClientId;\n          document.getElementById('api-client-secret').value = config.data.apiClientSecret || '';\n        }\n        showPhase(phaseSetup);\n      } else {\n        unlockError.textContent = 'Incorrect CMS key';\n        unlockError.style.display = 'block';\n      }\n    });\n\n    // ── Pre-fill if first-time setup (no unlock gate) ──\n    if (!isReconfigure && config.isConfigured()) {\n      document.getElementById('cms-url').value = config.cmsUrl;\n      document.getElementById('cms-key').value = config.cmsKey;\n      document.getElementById('display-name').value = config.displayName;\n      if (config.data.apiClientId) {\n        document.getElementById('api-client-id').value = config.data.apiClientId;\n        document.getElementById('api-client-secret').value = config.data.apiClientSecret || '';\n      }\n    }\n\n    // ── Form Submit ──\n    form.addEventListener('submit', async (e) => {\n      e.preventDefault();\n      hideError();\n\n      const cmsUrl = document.getElementById('cms-url').value.trim().replace(/\\/$/, '');\n      const cmsKey = document.getElementById('cms-key').value.trim();\n      const displayName = document.getElementById('display-name').value.trim();\n\n      // Write config.json via proxy (master config file)\n      // The boot path (proxy injection → Config.load()) handles the rest.\n      try {\n        submitBtn.textContent = 'Saving...';\n        submitBtn.disabled = true;\n\n        // Always POST to proxy — updates in-memory config for REST auth,\n        // cache-through, and API forwarding. Works on all players.\n        const saveResp = await fetch('/config', {\n          method: 'POST',\n          headers: { 'Content-Type': 'application/json' },\n          body: JSON.stringify({ cmsUrl, cmsKey, displayName }),\n        });\n        if (!saveResp.ok) throw new Error('Failed to save config');\n\n        // Shell persistence (Electron config.json) — optional, on top of proxy\n        const electronAPI = window.electronAPI || window.parent?.electronAPI;\n        if (electronAPI?.setConfig) {\n          await electronAPI.setConfig({ cmsUrl, cmsKey, displayName });\n        }\n\n        // Also update in-memory config for the test connection below\n        config.data.cmsUrl = cmsUrl;\n        config.data.cmsKey = cmsKey;\n        config.data.displayName = displayName;\n        config.save();\n\n        // Backup hardware key to IndexedDB for stability\n        backupHardwareKey(config.hardwareKey);\n\n        // Test connection\n        submitBtn.textContent = 'Connecting...';\n\n        // Try REST first, fall back to SOAP\n        transport = null; // reset transport for fresh detection\n        const client = await getTransport();\n        const result = await client.registerDisplay();\n\n        if (result.code === 'READY') {\n          showSuccess();\n        } else {\n          // Try auto-authorize via CMS API if credentials provided\n          submitBtn.textContent = 'Authorizing...';\n          const autoAuthed = await tryAutoAuthorize(cmsUrl, hwKey);\n\n          if (autoAuthed) {\n            // Persist API client credentials so they survive restarts\n            config.save();\n            await fetch('/config', {\n              method: 'POST',\n              headers: { 'Content-Type': 'application/json' },\n              body: JSON.stringify({ apiClientId: config.data.apiClientId, apiClientSecret: config.data.apiClientSecret }),\n            });\n            if (electronAPI?.setConfig) {\n              await electronAPI.setConfig({ apiClientId: config.data.apiClientId, apiClientSecret: config.data.apiClientSecret });\n            }\n\n            // Verify registration\n            const recheck = await client.registerDisplay();\n            if (recheck.code === 'READY') {\n              showSuccess();\n              return;\n            }\n          }\n\n          // Not authorized yet — switch to polling phase\n          startPolling(displayName);\n        }\n      } catch (error) {\n        showError(`Connection failed: ${error.message}`);\n        submitBtn.textContent = 'Connect';\n        submitBtn.disabled = false;\n      }\n    });\n\n    // ── Back button ──\n    btnBack.addEventListener('click', () => {\n      stopPolling();\n      showPhase(phaseSetup);\n      submitBtn.textContent = 'Connect';\n      submitBtn.disabled = false;\n    });\n\n    // ── IndexedDB hardware key backup ──\n    async function backupHardwareKey(key) {\n      try {\n        const req = indexedDB.open('xibo-hw-backup', 1);\n        req.onupgradeneeded = () => {\n          const db = req.result;\n          if (!db.objectStoreNames.contains('keys')) {\n            db.createObjectStore('keys');\n          }\n        };\n        req.onsuccess = () => {\n          const db = req.result;\n          const tx = db.transaction('keys', 'readwrite');\n          tx.objectStore('keys').put(key, 'hardwareKey');\n          tx.oncomplete = () => db.close();\n        };\n      } catch (e) {\n        console.warn('[Setup] IndexedDB backup failed:', e);\n      }\n    }\n\n    // ── Enable submit ──\n    submitBtn.disabled = false;\n    submitBtn.textContent = 'Connect';\n\n    // ── Auto-resume polling if already registered but not authorized ──\n    // Skip auto-resume when reconfiguring (user explicitly opened setup)\n    if (config.isConfigured() && !isReconfigure) {\n      (async () => {\n        try {\n          const client = await getTransport();\n          const result = await client.registerDisplay();\n          if (result.code === 'READY') {\n            window.location.href = '/player/index.html' + window.location.search;\n          } else {\n            // Not authorized — go straight to polling\n            startPolling(config.displayName);\n          }\n        } catch (e) {\n          // Connection failed, show form\n          console.log('[Setup] Auto-check failed, showing form');\n        }\n      })();\n    }\n  "],"mappings":"gIAKI,IAAM,EAAA,SACN,SAAS,eAAe,iBAAiB,CAAC,YAAc,eAAe,IAGvE,IAAM,EAAO,SAAS,eAAe,aAAa,CAC5C,EAAU,SAAS,eAAe,QAAQ,CAC1C,EAAY,SAAS,eAAe,aAAa,CACjD,EAAc,SAAS,eAAe,eAAe,CACrD,EAAa,SAAS,eAAe,cAAc,CACnD,EAAe,SAAS,eAAe,gBAAgB,CACvD,EAAc,SAAS,eAAe,YAAY,CAClD,EAAgB,SAAS,eAAe,uBAAuB,CAC/D,EAAU,SAAS,eAAe,WAAW,CAC7C,EAAe,SAAS,eAAe,gBAAgB,CAGvD,EAAQ,EAAO,YACrB,SAAS,eAAe,iBAAiB,CAAC,YAAc,EACxD,SAAS,eAAe,iBAAiB,CAAC,YAAc,EAGxD,IAAM,EAAiB,EAAO,QAAU,GACpC,EAAY,KACZ,EAAiB,KACjB,EAAc,GAGd,EAAY,KAChB,eAAe,GAAe,CAC5B,GAAI,EAAW,OAAO,EACtB,GAAI,CACF,IAAM,EAAO,IAAI,EAAW,EAAO,CACnC,MAAM,EAAK,iBAAiB,CAC5B,QAAQ,IAAI,+BAA+B,CAC3C,EAAY,QACL,EAAG,CACV,QAAQ,IAAI,6CAA8C,EAAE,QAAQ,CACpE,EAAY,IAAI,EAAW,EAAO,CAEpC,OAAO,EAIT,SAAS,EAAU,EAAO,CACxB,EAAY,UAAU,OAAO,SAAS,CACtC,EAAW,UAAU,OAAO,SAAS,CACrC,EAAa,UAAU,OAAO,SAAS,CACvC,EAAM,UAAU,IAAI,SAAS,CAG/B,SAAS,EAAU,EAAK,CACtB,EAAQ,YAAc,EACtB,EAAQ,MAAM,QAAU,QAG1B,SAAS,GAAY,CACnB,EAAQ,MAAM,QAAU,OAG1B,SAAS,GAAiB,CACxB,IAAI,EAAY,EAChB,EAAY,YAAc,EAC1B,cAAc,EAAe,CAC7B,EAAiB,gBAAkB,CACjC,IACA,EAAY,YAAc,KAAK,IAAI,EAAG,EAAU,CAC5C,GAAa,GAAG,cAAc,EAAe,EAChD,IAAK,CAGV,eAAe,GAAc,CAK3B,GADe,SAAS,eAAe,UAAU,CAAC,MAAM,MAAM,CAAC,QAAQ,MAAO,GAAG,GAClE,EAAgB,CAC7B,QAAQ,IAAI,kDAAkD,CAC9D,IAAM,EAAa,MAAM,OAAO,MAAM,CACtC,MAAM,QAAQ,IAAI,EAAW,IAAI,GAAQ,OAAO,OAAO,EAAK,CAAC,CAAC,CAEhE,EAAa,UAAU,IAAI,SAAS,CACpC,eAAiB,CACf,OAAO,SAAS,KAAO,qBAAuB,OAAO,SAAS,QAC7D,IAAI,CAIT,eAAe,GAAqB,CAClC,GAAI,CAEF,IAAM,EAAS,MADA,MAAM,GAAc,EACP,iBAAiB,CAG7C,GAFA,QAAQ,IAAI,uBAAwB,EAAO,KAAM,EAAO,QAAQ,CAE5D,EAAO,OAAS,QAAS,CAE3B,cAAc,EAAU,CACxB,cAAc,EAAe,CAC7B,GAAa,CACb,OAIF,GAAgB,OACT,EAAO,CACd,QAAQ,KAAK,uBAAwB,EAAM,QAAQ,CACnD,GAAgB,EAIpB,SAAS,EAAa,EAAa,CACjC,EAAc,YAAc,EAC5B,EAAU,EAAa,CACvB,GAAgB,CAChB,EAAY,YAAY,EAAoB,EAAc,IAAK,CAGjE,SAAS,GAAc,CACrB,cAAc,EAAU,CACxB,cAAc,EAAe,CAC7B,EAAY,KAId,eAAe,EAAiB,EAAQ,EAAa,CACnD,IAAM,EAAW,SAAS,eAAe,gBAAgB,CAAC,MAAM,MAAM,CAChE,EAAe,SAAS,eAAe,oBAAoB,CAAC,MAAM,MAAM,CAC9E,GAAI,CAAC,GAAY,CAAC,EAAc,MAAO,GAEvC,GAAI,CAEF,IAAM,EAAY,MAAM,MAAM,8BAA+B,CAC3D,OAAQ,OACR,QAAS,CAAE,eAAgB,oCAAqC,CAChE,KAAM,IAAI,gBAAgB,CAAE,WAAY,qBAAsB,UAAW,EAAU,cAAe,EAAc,CAAC,CAClH,CAAC,CACF,GAAI,CAAC,EAAU,GAAI,MAAU,MAAM,kBAAkB,EAAU,SAAS,CACxE,GAAM,CAAE,gBAAiB,MAAM,EAAU,MAAM,CAGzC,EAAc,MAAM,MACxB,4BAA4B,mBAAmB,EAAY,GAC3D,CAAE,QAAS,CAAE,cAAe,UAAU,IAAgB,CAAE,CACzD,CACD,GAAI,CAAC,EAAY,GAAI,MAAU,MAAM,wBAAwB,EAAY,SAAS,CAClF,IAAM,EAAW,MAAM,EAAY,MAAM,CACzC,GAAI,CAAC,EAAS,OAAwF,OAA9E,QAAQ,IAAI,gEAAgE,CAAS,GAE7G,IAAM,EAAU,EAAS,GACzB,GAAI,EAAQ,WAAa,EAAwD,OAAnD,QAAQ,IAAI,qCAAqC,CAAS,GAGxF,IAAM,EAAW,MAAM,MACrB,0BAA0B,EAAQ,YAClC,CAAE,OAAQ,MAAO,QAAS,CAAE,cAAe,UAAU,IAAgB,CAAE,CACxE,CACD,GAAI,CAAC,EAAS,GAAI,MAAU,MAAM,qBAAqB,EAAS,SAAS,CAKzE,OAHA,QAAQ,IAAI,6CAA6C,CACzD,EAAO,KAAK,YAAc,EAC1B,EAAO,KAAK,gBAAkB,EACvB,SACA,EAAO,CAEd,OADA,QAAQ,KAAK,iCAAkC,EAAM,QAAQ,CACtD,IAKX,IAAM,EAAgB,EAAO,cAAc,EAAI,EAAO,OAChD,EAAkB,IAAI,gBAAgB,OAAO,SAAS,OAAO,CAAC,IAAI,WAAW,CAC7E,EAAgB,SAAS,eAAe,kBAAkB,CAC5D,GAAiB,CAAC,GAEpB,EAAU,EAAY,EAEpB,GAAiB,KAEnB,EAAc,MAAM,QAAU,QAE9B,SAAS,eAAe,UAAU,CAAC,MAAQ,EAAO,OAClD,SAAS,eAAe,UAAU,CAAC,MAAQ,EAAO,OAClD,SAAS,eAAe,eAAe,CAAC,MAAQ,EAAO,YACnD,EAAO,KAAK,cACd,SAAS,eAAe,gBAAgB,CAAC,MAAQ,EAAO,KAAK,YAC7D,SAAS,eAAe,oBAAoB,CAAC,MAAQ,EAAO,KAAK,iBAAmB,KAKxF,SAAS,GAAiB,CACxB,GAAa,CACb,OAAO,SAAS,KAAO,qBAAuB,OAAO,SAAS,OAEhE,EAAc,iBAAiB,QAAS,EAAe,EAGnD,GAAiB,IACnB,SAAS,iBAAiB,UAAY,GAAM,CACtC,EAAE,MAAQ,WACZ,EAAE,gBAAgB,CAClB,GAAgB,GAElB,CAIJ,SAAS,eAAe,cAAc,CAAC,iBAAiB,SAAW,GAAM,CACvE,EAAE,gBAAgB,CAClB,IAAM,EAAc,SAAS,eAAe,eAAe,CACxC,SAAS,eAAe,aAAa,CAAC,MAAM,MAAM,GAElD,EAAO,QACxB,EAAY,MAAM,QAAU,OAE5B,SAAS,eAAe,UAAU,CAAC,MAAQ,EAAO,OAClD,SAAS,eAAe,UAAU,CAAC,MAAQ,EAAO,OAClD,SAAS,eAAe,eAAe,CAAC,MAAQ,EAAO,YACnD,EAAO,KAAK,cACd,SAAS,eAAe,gBAAgB,CAAC,MAAQ,EAAO,KAAK,YAC7D,SAAS,eAAe,oBAAoB,CAAC,MAAQ,EAAO,KAAK,iBAAmB,IAEtF,EAAU,EAAW,GAErB,EAAY,YAAc,oBAC1B,EAAY,MAAM,QAAU,UAE9B,CAGE,CAAC,GAAiB,EAAO,cAAc,GACzC,SAAS,eAAe,UAAU,CAAC,MAAQ,EAAO,OAClD,SAAS,eAAe,UAAU,CAAC,MAAQ,EAAO,OAClD,SAAS,eAAe,eAAe,CAAC,MAAQ,EAAO,YACnD,EAAO,KAAK,cACd,SAAS,eAAe,gBAAgB,CAAC,MAAQ,EAAO,KAAK,YAC7D,SAAS,eAAe,oBAAoB,CAAC,MAAQ,EAAO,KAAK,iBAAmB,KAKxF,EAAK,iBAAiB,SAAU,KAAO,IAAM,CAC3C,EAAE,gBAAgB,CAClB,GAAW,CAEX,IAAM,EAAS,SAAS,eAAe,UAAU,CAAC,MAAM,MAAM,CAAC,QAAQ,MAAO,GAAG,CAC3E,EAAS,SAAS,eAAe,UAAU,CAAC,MAAM,MAAM,CACxD,EAAc,SAAS,eAAe,eAAe,CAAC,MAAM,MAAM,CAIxE,GAAI,CAWF,GAVA,EAAU,YAAc,YACxB,EAAU,SAAW,GASjB,EALa,MAAM,MAAM,UAAW,CACtC,OAAQ,OACR,QAAS,CAAE,eAAgB,mBAAoB,CAC/C,KAAM,KAAK,UAAU,CAAE,SAAQ,SAAQ,cAAa,CAAC,CACtD,CAAC,EACY,GAAI,MAAU,MAAM,wBAAwB,CAG1D,IAAM,EAAc,OAAO,aAAe,OAAO,QAAQ,YACrD,GAAa,WACf,MAAM,EAAY,UAAU,CAAE,SAAQ,SAAQ,cAAa,CAAC,CAI9D,EAAO,KAAK,OAAS,EACrB,EAAO,KAAK,OAAS,EACrB,EAAO,KAAK,YAAc,EAC1B,EAAO,MAAM,CAGb,EAAkB,EAAO,YAAY,CAGrC,EAAU,YAAc,gBAGxB,EAAY,KACZ,IAAM,EAAS,MAAM,GAAc,CAGnC,IAFe,MAAM,EAAO,iBAAiB,EAElC,OAAS,QAClB,GAAa,KACR,CAKL,GAHA,EAAU,YAAc,iBACL,MAAM,EAAiB,EAAQ,EAAM,GAItD,EAAO,MAAM,CACb,MAAM,MAAM,UAAW,CACrB,OAAQ,OACR,QAAS,CAAE,eAAgB,mBAAoB,CAC/C,KAAM,KAAK,UAAU,CAAE,YAAa,EAAO,KAAK,YAAa,gBAAiB,EAAO,KAAK,gBAAiB,CAAC,CAC7G,CAAC,CACE,GAAa,WACf,MAAM,EAAY,UAAU,CAAE,YAAa,EAAO,KAAK,YAAa,gBAAiB,EAAO,KAAK,gBAAiB,CAAC,EAIrG,MAAM,EAAO,iBAAiB,EAClC,OAAS,SAAS,CAC5B,GAAa,CACb,OAKJ,EAAa,EAAY,QAEpB,EAAO,CACd,EAAU,sBAAsB,EAAM,UAAU,CAChD,EAAU,YAAc,UACxB,EAAU,SAAW,KAEvB,CAGF,EAAQ,iBAAiB,YAAe,CACtC,GAAa,CACb,EAAU,EAAW,CACrB,EAAU,YAAc,UACxB,EAAU,SAAW,IACrB,CAGF,eAAe,EAAkB,EAAK,CACpC,GAAI,CACF,IAAM,EAAM,UAAU,KAAK,iBAAkB,EAAE,CAC/C,EAAI,oBAAwB,CAC1B,IAAM,EAAK,EAAI,OACV,EAAG,iBAAiB,SAAS,OAAO,EACvC,EAAG,kBAAkB,OAAO,EAGhC,EAAI,cAAkB,CACpB,IAAM,EAAK,EAAI,OACT,EAAK,EAAG,YAAY,OAAQ,YAAY,CAC9C,EAAG,YAAY,OAAO,CAAC,IAAI,EAAK,cAAc,CAC9C,EAAG,eAAmB,EAAG,OAAO,QAE3B,EAAG,CACV,QAAQ,KAAK,mCAAoC,EAAE,EAKvD,EAAU,SAAW,GACrB,EAAU,YAAc,UAIpB,EAAO,cAAc,EAAI,CAAC,IAC3B,SAAY,CACX,GAAI,EAEa,MADA,MAAM,GAAc,EACP,iBAAiB,EAClC,OAAS,QAClB,OAAO,SAAS,KAAO,qBAAuB,OAAO,SAAS,OAG9D,EAAa,EAAO,YAAY,MAExB,CAEV,QAAQ,IAAI,0CAA0C,KAEtD"}
+{"version":3,"file":"setup-Dr31Tx8X.js","names":[],"sources":["../../setup.html?html-proxy&index=1.js"],"sourcesContent":["\n    import { config } from '@xiboplayer/utils';\n    import { RestClient, XmdsClient } from '@xiboplayer/xmds';\n\n    // Inject version from Vite build\n    const appVersion = typeof __APP_VERSION__ !== 'undefined' ? __APP_VERSION__ : '?';\n    document.getElementById('version-footer').textContent = `xiboplayer v${appVersion}`;\n\n    // ── Elements ──\n    const form = document.getElementById('setup-form');\n    const errorEl = document.getElementById('error');\n    const submitBtn = document.getElementById('submit-btn');\n    const phaseUnlock = document.getElementById('phase-unlock');\n    const phaseSetup = document.getElementById('phase-setup');\n    const phaseWaiting = document.getElementById('phase-waiting');\n    const countdownEl = document.getElementById('countdown');\n    const waitingNameEl = document.getElementById('waiting-display-name');\n    const btnBack = document.getElementById('btn-back');\n    const successFlash = document.getElementById('success-flash');\n\n    // Show hardware key\n    const hwKey = config.hardwareKey;\n    document.getElementById('hw-key-display').textContent = hwKey;\n    document.getElementById('hw-key-waiting').textContent = hwKey;\n\n    // ── State ──\n    const previousCmsUrl = config.cmsUrl || '';\n    let pollTimer = null;\n    let countdownTimer = null;\n    let pollSeconds = 15;\n\n    // ── Transport: try REST first, fall back to SOAP ──\n    let transport = null;\n    async function getTransport() {\n      if (transport) return transport;\n      try {\n        const rest = new RestClient(config);\n        await rest.registerDisplay();\n        console.log('[Setup] Using REST transport');\n        transport = rest;\n      } catch (e) {\n        console.log('[Setup] REST unavailable, using XMDS/SOAP:', e.message);\n        transport = new XmdsClient(config);\n      }\n      return transport;\n    }\n\n    // ── Helpers ──\n    function showPhase(phase) {\n      phaseUnlock.classList.remove('active');\n      phaseSetup.classList.remove('active');\n      phaseWaiting.classList.remove('active');\n      phase.classList.add('active');\n    }\n\n    function showError(msg) {\n      errorEl.textContent = msg;\n      errorEl.style.display = 'block';\n    }\n\n    function hideError() {\n      errorEl.style.display = 'none';\n    }\n\n    function startCountdown() {\n      let remaining = pollSeconds;\n      countdownEl.textContent = remaining;\n      clearInterval(countdownTimer);\n      countdownTimer = setInterval(() => {\n        remaining--;\n        countdownEl.textContent = Math.max(0, remaining);\n        if (remaining <= 0) clearInterval(countdownTimer);\n      }, 1000);\n    }\n\n    async function showSuccess() {\n      // If CMS URL changed, wipe all cached content (media, layouts, widgets\n      // from the old CMS are useless) and the SW's cached index.html (which\n      // may have a stale config injection script).\n      const newUrl = document.getElementById('cms-url').value.trim().replace(/\\/$/, '');\n      if (newUrl !== previousCmsUrl) {\n        console.log('[Setup] CMS URL changed — wiping cached content');\n        const cacheNames = await caches.keys();\n        await Promise.all(cacheNames.map(name => caches.delete(name)));\n      }\n      successFlash.classList.add('active');\n      setTimeout(() => {\n        window.location.href = '/player/index.html' + window.location.search;\n      }, 800);\n    }\n\n    // ── Authorization Polling ──\n    async function checkAuthorization() {\n      try {\n        const client = await getTransport();\n        const result = await client.registerDisplay();\n        console.log('[Setup] Poll result:', result.code, result.message);\n\n        if (result.code === 'READY') {\n          // Authorized!\n          clearInterval(pollTimer);\n          clearInterval(countdownTimer);\n          showSuccess();\n          return;\n        }\n\n        // Still waiting — restart countdown\n        startCountdown();\n      } catch (error) {\n        console.warn('[Setup] Poll failed:', error.message);\n        startCountdown();\n      }\n    }\n\n    function startPolling(displayName) {\n      waitingNameEl.textContent = displayName;\n      showPhase(phaseWaiting);\n      startCountdown();\n      pollTimer = setInterval(checkAuthorization, pollSeconds * 1000);\n    }\n\n    function stopPolling() {\n      clearInterval(pollTimer);\n      clearInterval(countdownTimer);\n      pollTimer = null;\n    }\n\n    // ── Auto-authorize via CMS API (through /api/* forward proxy) ──\n    async function tryAutoAuthorize(cmsUrl, hardwareKey) {\n      const clientId = document.getElementById('api-client-id').value.trim();\n      const clientSecret = document.getElementById('api-client-secret').value.trim();\n      if (!clientId || !clientSecret) return false;\n\n      try {\n        // Step 1: OAuth2 token via proxy\n        const tokenResp = await fetch('/api/authorize/access_token', {\n          method: 'POST',\n          headers: { 'Content-Type': 'application/x-www-form-urlencoded' },\n          body: new URLSearchParams({ grant_type: 'client_credentials', client_id: clientId, client_secret: clientSecret }),\n        });\n        if (!tokenResp.ok) throw new Error(`OAuth2 failed: ${tokenResp.status}`);\n        const { access_token } = await tokenResp.json();\n\n        // Step 2: Find display by hardwareKey via proxy\n        const displayResp = await fetch(\n          `/api/display?hardwareKey=${encodeURIComponent(hardwareKey)}`,\n          { headers: { Authorization: `Bearer ${access_token}` } }\n        );\n        if (!displayResp.ok) throw new Error(`Find display failed: ${displayResp.status}`);\n        const displays = await displayResp.json();\n        if (!displays.length) { console.log('[Setup] Display not found via API (may not be registered yet)'); return false; }\n\n        const display = displays[0];\n        if (display.licensed === 1) { console.log('[Setup] Display already authorized'); return true; }\n\n        // Step 3: Authorize display via proxy\n        const authResp = await fetch(\n          `/api/display/authorise/${display.displayId}`,\n          { method: 'PUT', headers: { Authorization: `Bearer ${access_token}` } }\n        );\n        if (!authResp.ok) throw new Error(`Authorize failed: ${authResp.status}`);\n\n        console.log('[Setup] Display auto-authorized via proxy!');\n        config.data.apiClientId = clientId;\n        config.data.apiClientSecret = clientSecret;\n        return true;\n      } catch (error) {\n        console.warn('[Setup] Auto-authorize failed:', error.message);\n        return false;\n      }\n    }\n\n    // ── Unlock gate for reconfiguration ──\n    const isReconfigure = config.isConfigured() && config.cmsKey;\n    const alreadyUnlocked = new URLSearchParams(window.location.search).has('unlocked');\n    const btnBackPlayer = document.getElementById('btn-back-player');\n    if (isReconfigure && !alreadyUnlocked) {\n      // Show unlock phase instead of setup form\n      showPhase(phaseUnlock);\n    }\n    if (isReconfigure || alreadyUnlocked) {\n      // Show \"Back to Player\" on the setup form\n      btnBackPlayer.style.display = 'block';\n      // Pre-fill form with existing config\n      document.getElementById('cms-url').value = config.cmsUrl;\n      document.getElementById('cms-key').value = config.cmsKey;\n      document.getElementById('display-name').value = config.displayName;\n      if (config.data.apiClientId) {\n        document.getElementById('api-client-id').value = config.data.apiClientId;\n        document.getElementById('api-client-secret').value = config.data.apiClientSecret || '';\n      }\n    }\n\n    // ── Back to Player (cancel reconfiguration) ──\n    function goBackToPlayer() {\n      stopPolling();\n      window.location.href = '/player/index.html' + window.location.search;\n    }\n    btnBackPlayer.addEventListener('click', goBackToPlayer);\n\n    // Esc also goes back to player when reconfiguring\n    if (isReconfigure || alreadyUnlocked) {\n      document.addEventListener('keydown', (e) => {\n        if (e.key === 'Escape') {\n          e.preventDefault();\n          goBackToPlayer();\n        }\n      });\n    }\n\n    // ── Unlock form handler ──\n    document.getElementById('unlock-form').addEventListener('submit', (e) => {\n      e.preventDefault();\n      const unlockError = document.getElementById('unlock-error');\n      const enteredKey = document.getElementById('unlock-key').value.trim();\n\n      if (enteredKey === config.cmsKey) {\n        unlockError.style.display = 'none';\n        // Pre-fill form with existing config\n        document.getElementById('cms-url').value = config.cmsUrl;\n        document.getElementById('cms-key').value = config.cmsKey;\n        document.getElementById('display-name').value = config.displayName;\n        if (config.data.apiClientId) {\n          document.getElementById('api-client-id').value = config.data.apiClientId;\n          document.getElementById('api-client-secret').value = config.data.apiClientSecret || '';\n        }\n        showPhase(phaseSetup);\n      } else {\n        unlockError.textContent = 'Incorrect CMS key';\n        unlockError.style.display = 'block';\n      }\n    });\n\n    // ── Pre-fill if first-time setup (no unlock gate) ──\n    if (!isReconfigure && config.isConfigured()) {\n      document.getElementById('cms-url').value = config.cmsUrl;\n      document.getElementById('cms-key').value = config.cmsKey;\n      document.getElementById('display-name').value = config.displayName;\n      if (config.data.apiClientId) {\n        document.getElementById('api-client-id').value = config.data.apiClientId;\n        document.getElementById('api-client-secret').value = config.data.apiClientSecret || '';\n      }\n    }\n\n    // ── Form Submit ──\n    form.addEventListener('submit', async (e) => {\n      e.preventDefault();\n      hideError();\n\n      const cmsUrl = document.getElementById('cms-url').value.trim().replace(/\\/$/, '');\n      const cmsKey = document.getElementById('cms-key').value.trim();\n      const displayName = document.getElementById('display-name').value.trim();\n\n      // Write config.json via proxy (master config file)\n      // The boot path (proxy injection → Config.load()) handles the rest.\n      try {\n        submitBtn.textContent = 'Saving...';\n        submitBtn.disabled = true;\n\n        // Always POST to proxy — updates in-memory config for REST auth,\n        // cache-through, and API forwarding. Works on all players.\n        const saveResp = await fetch('/config', {\n          method: 'POST',\n          headers: { 'Content-Type': 'application/json' },\n          body: JSON.stringify({ cmsUrl, cmsKey, displayName }),\n        });\n        if (!saveResp.ok) throw new Error('Failed to save config');\n\n        // Shell persistence (Electron config.json) — optional, on top of proxy\n        const electronAPI = window.electronAPI || window.parent?.electronAPI;\n        if (electronAPI?.setConfig) {\n          await electronAPI.setConfig({ cmsUrl, cmsKey, displayName });\n        }\n\n        // Also update in-memory config for the test connection below\n        config.data.cmsUrl = cmsUrl;\n        config.data.cmsKey = cmsKey;\n        config.data.displayName = displayName;\n        config.save();\n\n        // Backup hardware key to IndexedDB for stability\n        backupHardwareKey(config.hardwareKey);\n\n        // Test connection\n        submitBtn.textContent = 'Connecting...';\n\n        // Try REST first, fall back to SOAP\n        transport = null; // reset transport for fresh detection\n        const client = await getTransport();\n        const result = await client.registerDisplay();\n\n        if (result.code === 'READY') {\n          showSuccess();\n        } else {\n          // Try auto-authorize via CMS API if credentials provided\n          submitBtn.textContent = 'Authorizing...';\n          const autoAuthed = await tryAutoAuthorize(cmsUrl, hwKey);\n\n          if (autoAuthed) {\n            // Persist API client credentials so they survive restarts\n            config.save();\n            await fetch('/config', {\n              method: 'POST',\n              headers: { 'Content-Type': 'application/json' },\n              body: JSON.stringify({ apiClientId: config.data.apiClientId, apiClientSecret: config.data.apiClientSecret }),\n            });\n            if (electronAPI?.setConfig) {\n              await electronAPI.setConfig({ apiClientId: config.data.apiClientId, apiClientSecret: config.data.apiClientSecret });\n            }\n\n            // Verify registration\n            const recheck = await client.registerDisplay();\n            if (recheck.code === 'READY') {\n              showSuccess();\n              return;\n            }\n          }\n\n          // Not authorized yet — switch to polling phase\n          startPolling(displayName);\n        }\n      } catch (error) {\n        showError(`Connection failed: ${error.message}`);\n        submitBtn.textContent = 'Connect';\n        submitBtn.disabled = false;\n      }\n    });\n\n    // ── Back button ──\n    btnBack.addEventListener('click', () => {\n      stopPolling();\n      showPhase(phaseSetup);\n      submitBtn.textContent = 'Connect';\n      submitBtn.disabled = false;\n    });\n\n    // ── IndexedDB hardware key backup ──\n    async function backupHardwareKey(key) {\n      try {\n        const req = indexedDB.open('xibo-hw-backup', 1);\n        req.onupgradeneeded = () => {\n          const db = req.result;\n          if (!db.objectStoreNames.contains('keys')) {\n            db.createObjectStore('keys');\n          }\n        };\n        req.onsuccess = () => {\n          const db = req.result;\n          const tx = db.transaction('keys', 'readwrite');\n          tx.objectStore('keys').put(key, 'hardwareKey');\n          tx.oncomplete = () => db.close();\n        };\n      } catch (e) {\n        console.warn('[Setup] IndexedDB backup failed:', e);\n      }\n    }\n\n    // ── Enable submit ──\n    submitBtn.disabled = false;\n    submitBtn.textContent = 'Connect';\n\n    // ── Auto-resume polling if already registered but not authorized ──\n    // Skip auto-resume when reconfiguring (user explicitly opened setup)\n    if (config.isConfigured() && !isReconfigure) {\n      (async () => {\n        try {\n          const client = await getTransport();\n          const result = await client.registerDisplay();\n          if (result.code === 'READY') {\n            window.location.href = '/player/index.html' + window.location.search;\n          } else {\n            // Not authorized — go straight to polling\n            startPolling(config.displayName);\n          }\n        } catch (e) {\n          // Connection failed, show form\n          console.log('[Setup] Auto-check failed, showing form');\n        }\n      })();\n    }\n  "],"mappings":"gIAKI,IAAM,EAAA,SACN,SAAS,eAAe,iBAAiB,CAAC,YAAc,eAAe,IAGvE,IAAM,EAAO,SAAS,eAAe,aAAa,CAC5C,EAAU,SAAS,eAAe,QAAQ,CAC1C,EAAY,SAAS,eAAe,aAAa,CACjD,EAAc,SAAS,eAAe,eAAe,CACrD,EAAa,SAAS,eAAe,cAAc,CACnD,EAAe,SAAS,eAAe,gBAAgB,CACvD,EAAc,SAAS,eAAe,YAAY,CAClD,EAAgB,SAAS,eAAe,uBAAuB,CAC/D,EAAU,SAAS,eAAe,WAAW,CAC7C,EAAe,SAAS,eAAe,gBAAgB,CAGvD,EAAQ,EAAO,YACrB,SAAS,eAAe,iBAAiB,CAAC,YAAc,EACxD,SAAS,eAAe,iBAAiB,CAAC,YAAc,EAGxD,IAAM,EAAiB,EAAO,QAAU,GACpC,EAAY,KACZ,EAAiB,KACjB,EAAc,GAGd,EAAY,KAChB,eAAe,GAAe,CAC5B,GAAI,EAAW,OAAO,EACtB,GAAI,CACF,IAAM,EAAO,IAAI,EAAW,EAAO,CACnC,MAAM,EAAK,iBAAiB,CAC5B,QAAQ,IAAI,+BAA+B,CAC3C,EAAY,QACL,EAAG,CACV,QAAQ,IAAI,6CAA8C,EAAE,QAAQ,CACpE,EAAY,IAAI,EAAW,EAAO,CAEpC,OAAO,EAIT,SAAS,EAAU,EAAO,CACxB,EAAY,UAAU,OAAO,SAAS,CACtC,EAAW,UAAU,OAAO,SAAS,CACrC,EAAa,UAAU,OAAO,SAAS,CACvC,EAAM,UAAU,IAAI,SAAS,CAG/B,SAAS,EAAU,EAAK,CACtB,EAAQ,YAAc,EACtB,EAAQ,MAAM,QAAU,QAG1B,SAAS,GAAY,CACnB,EAAQ,MAAM,QAAU,OAG1B,SAAS,GAAiB,CACxB,IAAI,EAAY,EAChB,EAAY,YAAc,EAC1B,cAAc,EAAe,CAC7B,EAAiB,gBAAkB,CACjC,IACA,EAAY,YAAc,KAAK,IAAI,EAAG,EAAU,CAC5C,GAAa,GAAG,cAAc,EAAe,EAChD,IAAK,CAGV,eAAe,GAAc,CAK3B,GADe,SAAS,eAAe,UAAU,CAAC,MAAM,MAAM,CAAC,QAAQ,MAAO,GAAG,GAClE,EAAgB,CAC7B,QAAQ,IAAI,kDAAkD,CAC9D,IAAM,EAAa,MAAM,OAAO,MAAM,CACtC,MAAM,QAAQ,IAAI,EAAW,IAAI,GAAQ,OAAO,OAAO,EAAK,CAAC,CAAC,CAEhE,EAAa,UAAU,IAAI,SAAS,CACpC,eAAiB,CACf,OAAO,SAAS,KAAO,qBAAuB,OAAO,SAAS,QAC7D,IAAI,CAIT,eAAe,GAAqB,CAClC,GAAI,CAEF,IAAM,EAAS,MADA,MAAM,GAAc,EACP,iBAAiB,CAG7C,GAFA,QAAQ,IAAI,uBAAwB,EAAO,KAAM,EAAO,QAAQ,CAE5D,EAAO,OAAS,QAAS,CAE3B,cAAc,EAAU,CACxB,cAAc,EAAe,CAC7B,GAAa,CACb,OAIF,GAAgB,OACT,EAAO,CACd,QAAQ,KAAK,uBAAwB,EAAM,QAAQ,CACnD,GAAgB,EAIpB,SAAS,EAAa,EAAa,CACjC,EAAc,YAAc,EAC5B,EAAU,EAAa,CACvB,GAAgB,CAChB,EAAY,YAAY,EAAoB,EAAc,IAAK,CAGjE,SAAS,GAAc,CACrB,cAAc,EAAU,CACxB,cAAc,EAAe,CAC7B,EAAY,KAId,eAAe,EAAiB,EAAQ,EAAa,CACnD,IAAM,EAAW,SAAS,eAAe,gBAAgB,CAAC,MAAM,MAAM,CAChE,EAAe,SAAS,eAAe,oBAAoB,CAAC,MAAM,MAAM,CAC9E,GAAI,CAAC,GAAY,CAAC,EAAc,MAAO,GAEvC,GAAI,CAEF,IAAM,EAAY,MAAM,MAAM,8BAA+B,CAC3D,OAAQ,OACR,QAAS,CAAE,eAAgB,oCAAqC,CAChE,KAAM,IAAI,gBAAgB,CAAE,WAAY,qBAAsB,UAAW,EAAU,cAAe,EAAc,CAAC,CAClH,CAAC,CACF,GAAI,CAAC,EAAU,GAAI,MAAU,MAAM,kBAAkB,EAAU,SAAS,CACxE,GAAM,CAAE,gBAAiB,MAAM,EAAU,MAAM,CAGzC,EAAc,MAAM,MACxB,4BAA4B,mBAAmB,EAAY,GAC3D,CAAE,QAAS,CAAE,cAAe,UAAU,IAAgB,CAAE,CACzD,CACD,GAAI,CAAC,EAAY,GAAI,MAAU,MAAM,wBAAwB,EAAY,SAAS,CAClF,IAAM,EAAW,MAAM,EAAY,MAAM,CACzC,GAAI,CAAC,EAAS,OAAwF,OAA9E,QAAQ,IAAI,gEAAgE,CAAS,GAE7G,IAAM,EAAU,EAAS,GACzB,GAAI,EAAQ,WAAa,EAAwD,OAAnD,QAAQ,IAAI,qCAAqC,CAAS,GAGxF,IAAM,EAAW,MAAM,MACrB,0BAA0B,EAAQ,YAClC,CAAE,OAAQ,MAAO,QAAS,CAAE,cAAe,UAAU,IAAgB,CAAE,CACxE,CACD,GAAI,CAAC,EAAS,GAAI,MAAU,MAAM,qBAAqB,EAAS,SAAS,CAKzE,OAHA,QAAQ,IAAI,6CAA6C,CACzD,EAAO,KAAK,YAAc,EAC1B,EAAO,KAAK,gBAAkB,EACvB,SACA,EAAO,CAEd,OADA,QAAQ,KAAK,iCAAkC,EAAM,QAAQ,CACtD,IAKX,IAAM,EAAgB,EAAO,cAAc,EAAI,EAAO,OAChD,EAAkB,IAAI,gBAAgB,OAAO,SAAS,OAAO,CAAC,IAAI,WAAW,CAC7E,EAAgB,SAAS,eAAe,kBAAkB,CAC5D,GAAiB,CAAC,GAEpB,EAAU,EAAY,EAEpB,GAAiB,KAEnB,EAAc,MAAM,QAAU,QAE9B,SAAS,eAAe,UAAU,CAAC,MAAQ,EAAO,OAClD,SAAS,eAAe,UAAU,CAAC,MAAQ,EAAO,OAClD,SAAS,eAAe,eAAe,CAAC,MAAQ,EAAO,YACnD,EAAO,KAAK,cACd,SAAS,eAAe,gBAAgB,CAAC,MAAQ,EAAO,KAAK,YAC7D,SAAS,eAAe,oBAAoB,CAAC,MAAQ,EAAO,KAAK,iBAAmB,KAKxF,SAAS,GAAiB,CACxB,GAAa,CACb,OAAO,SAAS,KAAO,qBAAuB,OAAO,SAAS,OAEhE,EAAc,iBAAiB,QAAS,EAAe,EAGnD,GAAiB,IACnB,SAAS,iBAAiB,UAAY,GAAM,CACtC,EAAE,MAAQ,WACZ,EAAE,gBAAgB,CAClB,GAAgB,GAElB,CAIJ,SAAS,eAAe,cAAc,CAAC,iBAAiB,SAAW,GAAM,CACvE,EAAE,gBAAgB,CAClB,IAAM,EAAc,SAAS,eAAe,eAAe,CACxC,SAAS,eAAe,aAAa,CAAC,MAAM,MAAM,GAElD,EAAO,QACxB,EAAY,MAAM,QAAU,OAE5B,SAAS,eAAe,UAAU,CAAC,MAAQ,EAAO,OAClD,SAAS,eAAe,UAAU,CAAC,MAAQ,EAAO,OAClD,SAAS,eAAe,eAAe,CAAC,MAAQ,EAAO,YACnD,EAAO,KAAK,cACd,SAAS,eAAe,gBAAgB,CAAC,MAAQ,EAAO,KAAK,YAC7D,SAAS,eAAe,oBAAoB,CAAC,MAAQ,EAAO,KAAK,iBAAmB,IAEtF,EAAU,EAAW,GAErB,EAAY,YAAc,oBAC1B,EAAY,MAAM,QAAU,UAE9B,CAGE,CAAC,GAAiB,EAAO,cAAc,GACzC,SAAS,eAAe,UAAU,CAAC,MAAQ,EAAO,OAClD,SAAS,eAAe,UAAU,CAAC,MAAQ,EAAO,OAClD,SAAS,eAAe,eAAe,CAAC,MAAQ,EAAO,YACnD,EAAO,KAAK,cACd,SAAS,eAAe,gBAAgB,CAAC,MAAQ,EAAO,KAAK,YAC7D,SAAS,eAAe,oBAAoB,CAAC,MAAQ,EAAO,KAAK,iBAAmB,KAKxF,EAAK,iBAAiB,SAAU,KAAO,IAAM,CAC3C,EAAE,gBAAgB,CAClB,GAAW,CAEX,IAAM,EAAS,SAAS,eAAe,UAAU,CAAC,MAAM,MAAM,CAAC,QAAQ,MAAO,GAAG,CAC3E,EAAS,SAAS,eAAe,UAAU,CAAC,MAAM,MAAM,CACxD,EAAc,SAAS,eAAe,eAAe,CAAC,MAAM,MAAM,CAIxE,GAAI,CAWF,GAVA,EAAU,YAAc,YACxB,EAAU,SAAW,GASjB,EALa,MAAM,MAAM,UAAW,CACtC,OAAQ,OACR,QAAS,CAAE,eAAgB,mBAAoB,CAC/C,KAAM,KAAK,UAAU,CAAE,SAAQ,SAAQ,cAAa,CAAC,CACtD,CAAC,EACY,GAAI,MAAU,MAAM,wBAAwB,CAG1D,IAAM,EAAc,OAAO,aAAe,OAAO,QAAQ,YACrD,GAAa,WACf,MAAM,EAAY,UAAU,CAAE,SAAQ,SAAQ,cAAa,CAAC,CAI9D,EAAO,KAAK,OAAS,EACrB,EAAO,KAAK,OAAS,EACrB,EAAO,KAAK,YAAc,EAC1B,EAAO,MAAM,CAGb,EAAkB,EAAO,YAAY,CAGrC,EAAU,YAAc,gBAGxB,EAAY,KACZ,IAAM,EAAS,MAAM,GAAc,CAGnC,IAFe,MAAM,EAAO,iBAAiB,EAElC,OAAS,QAClB,GAAa,KACR,CAKL,GAHA,EAAU,YAAc,iBACL,MAAM,EAAiB,EAAQ,EAAM,GAItD,EAAO,MAAM,CACb,MAAM,MAAM,UAAW,CACrB,OAAQ,OACR,QAAS,CAAE,eAAgB,mBAAoB,CAC/C,KAAM,KAAK,UAAU,CAAE,YAAa,EAAO,KAAK,YAAa,gBAAiB,EAAO,KAAK,gBAAiB,CAAC,CAC7G,CAAC,CACE,GAAa,WACf,MAAM,EAAY,UAAU,CAAE,YAAa,EAAO,KAAK,YAAa,gBAAiB,EAAO,KAAK,gBAAiB,CAAC,EAIrG,MAAM,EAAO,iBAAiB,EAClC,OAAS,SAAS,CAC5B,GAAa,CACb,OAKJ,EAAa,EAAY,QAEpB,EAAO,CACd,EAAU,sBAAsB,EAAM,UAAU,CAChD,EAAU,YAAc,UACxB,EAAU,SAAW,KAEvB,CAGF,EAAQ,iBAAiB,YAAe,CACtC,GAAa,CACb,EAAU,EAAW,CACrB,EAAU,YAAc,UACxB,EAAU,SAAW,IACrB,CAGF,eAAe,EAAkB,EAAK,CACpC,GAAI,CACF,IAAM,EAAM,UAAU,KAAK,iBAAkB,EAAE,CAC/C,EAAI,oBAAwB,CAC1B,IAAM,EAAK,EAAI,OACV,EAAG,iBAAiB,SAAS,OAAO,EACvC,EAAG,kBAAkB,OAAO,EAGhC,EAAI,cAAkB,CACpB,IAAM,EAAK,EAAI,OACT,EAAK,EAAG,YAAY,OAAQ,YAAY,CAC9C,EAAG,YAAY,OAAO,CAAC,IAAI,EAAK,cAAc,CAC9C,EAAG,eAAmB,EAAG,OAAO,QAE3B,EAAG,CACV,QAAQ,KAAK,mCAAoC,EAAE,EAKvD,EAAU,SAAW,GACrB,EAAU,YAAc,UAIpB,EAAO,cAAc,EAAI,CAAC,IAC3B,SAAY,CACX,GAAI,EAEa,MADA,MAAM,GAAc,EACP,iBAAiB,EAClC,OAAS,QAClB,OAAO,SAAS,KAAO,qBAAuB,OAAO,SAAS,OAG9D,EAAa,EAAO,YAAY,MAExB,CAEV,QAAQ,IAAI,0CAA0C,KAEtD"}

package/dist/assets/{src-CMBYiOs4.js → src-B-j3XW3-.js}

@@ -1,3 +1,3 @@
-var e={name:`@xiboplayer/utils`,version:`0.7.15`,description:`Shared utilities for xiboplayer packages`,type:`module`,main:`./src/index.js`,types:`./src/index.d.ts`,exports:{".":`./src/index.js`,"./logger":`./src/logger.js`,"./event-emitter":`./src/event-emitter.js`,"./config":`./src/config.js`},scripts:{test:`vitest run`,"test:watch":`vitest`,"test:coverage":`vitest run --coverage`},dependencies:{"@xiboplayer/crypto":`workspace:*`},devDependencies:{vitest:`^4.1.2`},keywords:[`xibo`,`digital-signage`,`utilities`,`logger`,`event-emitter`],author:`Pau Aliagas <linuxnow@gmail.com>`,license:`AGPL-3.0-or-later`,repository:{type:`git`,url:`git+https://github.com/xibo-players/xiboplayer.git`,directory:`packages/utils`},homepage:`https://xiboplayer.org`},t={DEBUG:0,INFO:1,WARNING:2,ERROR:3,NONE:4},n=[],r=class{constructor(e,t=null){this.name=e,this.useGlobal=t===null,this.useGlobal||this.setLevel(t)}_ts(){let e=new Date;return`${String(e.getHours()).padStart(2,`0`)}:${String(e.getMinutes()).padStart(2,`0`)}:${String(e.getSeconds()).padStart(2,`0`)}.${String(e.getMilliseconds()).padStart(3,`0`)}`}setLevel(e){this.useGlobal=!1,typeof e==`string`?this.level=t[e.toUpperCase()]??t.INFO:this.level=e}getEffectiveLevel(){return this.useGlobal?i.level:this.level}debug(...e){this.getEffectiveLevel()<=t.DEBUG&&console.log(`${this._ts()} [${this.name}] DEBUG:`,...e),f(`debug`,this.name,e)}info(...e){this.getEffectiveLevel()<=t.INFO&&console.log(`${this._ts()} [${this.name}]`,...e),f(`info`,this.name,e)}warn(...e){this.getEffectiveLevel()<=t.WARNING&&console.warn(`${this._ts()} [${this.name}]`,...e),f(`warning`,this.name,e)}error(...e){this.getEffectiveLevel()<=t.ERROR&&console.error(`${this._ts()} [${this.name}]`,...e),f(`error`,this.name,e)}log(e,...t){switch(e.toUpperCase()){case`DEBUG`:return this.debug(...t);case`INFO`:return this.info(...t);case`WARNING`:case`WARN`:return this.warn(...t);case`ERROR`:return this.error(...t)}}},i={level:t.WARNING,setGlobalLevel(e){typeof e==`string`?this.level=t[e.toUpperCase()]??t.INFO:this.level=e,console.log(`[Logger] Global log level set to: ${this.getLevelName(this.level)}`)},getLevelName(e){return Object.keys(t).find(n=>t[n]===e)||`UNKNOWN`}},a=!1;if(typeof window<`u`){let e=new URLSearchParams(window.location.search).get(`logLevel`),t=localStorage.getItem(`xibo_log_level`),n=null;try{n=JSON.parse(localStorage.getItem(`xibo_config`)||`{}`).logLevel||null}catch{}e?(i.setGlobalLevel(e),a=!0):t?(i.setGlobalLevel(t),a=!0):n?(i.setGlobalLevel(n),a=!0):i.setGlobalLevel(`WARNING`)}else typeof self<`u`&&self.swLogLevel&&i.setGlobalLevel(self.swLogLevel);function o(e,t=null){return new r(e,t)}function s(e){i.setGlobalLevel(e),typeof window<`u`&&localStorage.setItem(`xibo_log_level`,e.toUpperCase())}function c(){return i.getLevelName(i.level)}function l(){return i.level<=t.DEBUG}function u(e){if(a||!e)return!1;let t=d(e);return i.setGlobalLevel(t),!0}function d(e){switch((e||``).toLowerCase()){case`debug`:return`DEBUG`;case`info`:case`notice`:case`audit`:return`INFO`;case`warning`:return`WARNING`;case`error`:case`critical`:case`alert`:case`emergency`:return`ERROR`;default:return`INFO`}}function f(e,t,r){if(n.length!==0)for(let i of n)try{i({level:e,name:t,args:r})}catch{}}function p(e){n.push(e)}function m(e){let t=n.indexOf(e);t>=0&&n.splice(t,1)}var h=class{constructor(){this.events=new Map}on(e,t){this.events.has(e)||this.events.set(e,[]),this.events.get(e).push(t)}once(e,t){let n=(...r)=>{this.off(e,n),t(...r)};this.on(e,n)}off(e,t){if(!this.events.has(e))return;let n=this.events.get(e),r=n.indexOf(t);r!==-1&&n.splice(r,1)}emit(e,...t){if(!this.events.has(e))return;let n=this.events.get(e).slice();for(let r of n)try{r(...t)}catch(t){console.error(`[EventEmitter] Listener error on '${e}':`,t)}}removeAllListeners(e){e?this.events.delete(e):this.events.clear()}};function g(e,t){let n=new Uint8Array(e),r=``;for(let e=0;e<n.length;e++)r+=String.fromCharCode(n[e]);let i=btoa(r),a=[];for(let e=0;e<i.length;e+=64)a.push(i.substring(e,e+64));return`-----BEGIN ${t}-----\n${a.join(`
-`)}\n-----END ${t}-----`}async function _(){let e=await crypto.subtle.generateKey({name:`RSA-OAEP`,modulusLength:1024,publicExponent:new Uint8Array([1,0,1]),hash:`SHA-256`},!0,[`encrypt`,`decrypt`]),t=await crypto.subtle.exportKey(`spki`,e.publicKey),n=await crypto.subtle.exportKey(`pkcs8`,e.privateKey);return{publicKeyPem:g(t,`PUBLIC KEY`),privateKeyPem:g(n,`PRIVATE KEY`)}}function v(e){return!e||typeof e!=`string`?!1:/^-----BEGIN (PUBLIC KEY|PRIVATE KEY)-----\n[A-Za-z0-9+/=\n]+\n-----END \1-----$/.test(e.trim())}function y(e,t,n,r={}){return typeof indexedDB>`u`?Promise.reject(Error(`IndexedDB not available`)):new Promise((i,a)=>{let o=indexedDB.open(e,t);o.onupgradeneeded=()=>{let e=o.result;if(!e.objectStoreNames.contains(n)){let t=r.keyPath?{keyPath:r.keyPath,autoIncrement:!0}:void 0,i=e.createObjectStore(n,t);r.indexName&&r.indexKey&&i.createIndex(r.indexName,r.indexKey,{unique:!1})}},o.onsuccess=()=>i(o.result),o.onerror=()=>a(o.error)})}function b(e,t,n,r,i){return new Promise((a,o)=>{let s=e.transaction([t],`readonly`).objectStore(t).index(n).openCursor(r),c=[];s.onsuccess=e=>{let t=e.target.result;t&&c.length<i?(c.push(t.value),t.continue()):a(c)},s.onerror=()=>o(Error(`Index query failed: ${s.error}`))})}function x(e,t,n){return new Promise((r,i)=>{let a=e.transaction([t],`readwrite`),o=a.objectStore(t),s=0;for(let e of n)if(e){let t=o.delete(e);t.onsuccess=()=>{s++},t.onerror=()=>{}}a.oncomplete=()=>r(s),a.onerror=()=>i(Error(`Delete failed: ${a.error}`))})}var S=o(`Config`),C=`xibo_global`,w=`xibo_cms:`,T=`xibo_active_cms`,E=`xibo-hw-backup`,D=1,O=new Set([`hardwareKey`,`xmrPubKey`,`xmrPrivKey`]);function k(e){let t=2166136261;for(let n=0;n<e.length;n++)t^=e.charCodeAt(n),t+=(t<<1)+(t<<4)+(t<<7)+(t<<8)+(t<<24);t>>>=0;let n=t+1234567;for(let t=0;t<e.length;t++)n^=e.charCodeAt(t)+1,n+=(n<<1)+(n<<4)+(n<<7)+(n<<8)+(n<<24);return n>>>=0,(t.toString(16).padStart(8,`0`)+n.toString(16).padStart(8,`0`)).substring(0,12)}function A(e){if(!e)return null;try{let t=new URL(e),n=t.origin;return`${t.hostname}-${k(n)}`}catch{return`unknown-${k(e)}`}}function j(){let e={},t={cmsUrl:e.CMS_URL||``,cmsKey:e.CMS_KEY||``,displayName:e.DISPLAY_NAME||``,hardwareKey:e.HARDWARE_KEY||``,xmrChannel:e.XMR_CHANNEL||``,googleGeoApiKey:e.GOOGLE_GEO_API_KEY||``};return Object.values(t).some(e=>e!==``)?t:null}var M=new class{constructor(){this._activeCmsId=null,this.data=this.load(),this._fromEnv||this._restoreHardwareKeyFromBackup()}load(){let e=j();return e?(this._fromEnv=!0,e):typeof localStorage>`u`?{cmsUrl:``,cmsKey:``,displayName:``,hardwareKey:``,xmrChannel:``}:localStorage.getItem(C)?this._loadSplit():this._loadFresh()}_loadSplit(){let e={};try{e=JSON.parse(localStorage.getItem(C)||`{}`)}catch(e){S.error(`Failed to parse xibo_global:`,e)}let t=localStorage.getItem(T)||null;this._activeCmsId=t;let n={};if(t)try{let e=localStorage.getItem(w+t);e&&(n=JSON.parse(e))}catch(e){S.error(`Failed to parse CMS config:`,e)}let r={...e,...n};return this._validateConfig(r)}_loadFresh(){return this._validateConfig({})}_validateConfig(e){let t=!1;return!e.hardwareKey||e.hardwareKey.length<10?(S.warn(`Missing/invalid hardwareKey — generating`),e.hardwareKey=this.generateStableHardwareKey(),this._backupHardwareKey(e.hardwareKey),t=!0):S.info(`✓ Loaded existing hardwareKey:`,e.hardwareKey),e.xmrChannel||(S.warn(`Missing xmrChannel — generating`),e.xmrChannel=this.generateXmrChannel(),t=!0),e.cmsUrl=e.cmsUrl||``,e.cmsKey=e.cmsKey||``,e.displayName=e.displayName||``,t&&typeof localStorage<`u`&&this._saveSplit(e),e}save(){typeof localStorage>`u`||this._saveSplit(this.data)}_saveSplit(e){if(typeof localStorage>`u`)return;let t={},n={};for(let[r,i]of Object.entries(e))O.has(r)?t[r]=i:n[r]=i;localStorage.setItem(C,JSON.stringify(t));let r=A(e.cmsUrl);r&&(localStorage.setItem(w+r,JSON.stringify(n)),localStorage.setItem(T,r),this._activeCmsId=r),localStorage.setItem(`xibo_config`,JSON.stringify(e))}switchCms(e){if(typeof localStorage>`u`)throw Error(`switchCms requires localStorage (browser only)`);this.save();let t=A(e);if(!t)throw Error(`Invalid CMS URL`);let n=localStorage.getItem(w+t),r={},i=!0;if(n)try{r=JSON.parse(n),i=!1,S.info(`Switching to existing CMS profile: ${t}`)}catch(e){S.error(`Failed to parse target CMS config:`,e)}else S.info(`Creating new CMS profile: ${t}`),r={cmsUrl:e,cmsKey:``,displayName:``,xmrChannel:this.generateXmrChannel()},localStorage.setItem(w+t,JSON.stringify(r));localStorage.setItem(T,t),this._activeCmsId=t;let a={};try{a=JSON.parse(localStorage.getItem(C)||`{}`)}catch{}return this.data={...a,...r},this.data.cmsUrl||(this.data.cmsUrl=e),{cmsId:t,isNew:i}}listCmsProfiles(){if(typeof localStorage>`u`)return[];let e=[],t=localStorage.getItem(T)||null;for(let n=0;n<localStorage.length;n++){let r=localStorage.key(n);if(!r.startsWith(w))continue;let i=r.slice(9);try{let n=JSON.parse(localStorage.getItem(r));e.push({cmsId:i,cmsUrl:n.cmsUrl||``,displayName:n.displayName||``,isActive:i===t})}catch{}}return e}get activeCmsId(){if(this._activeCmsId)return this._activeCmsId;let e=A(this.data?.cmsUrl);return this._activeCmsId=e,e}isConfigured(){return!!(this.data.cmsUrl&&this.data.cmsKey&&this.data.displayName)}async _backupKeys(e){try{let t=await y(E,D,`keys`),n=t.transaction(`keys`,`readwrite`),r=n.objectStore(`keys`);for(let[t,n]of Object.entries(e))r.put(n,t);n.oncomplete=()=>{S.info(`Keys backed up to IndexedDB:`,Object.keys(e).join(`, `)),t.close()}}catch{}}_backupHardwareKey(e){this._backupKeys({hardwareKey:e})}async _restoreHardwareKeyFromBackup(){try{let e=await y(E,D,`keys`),t=e.transaction(`keys`,`readonly`).objectStore(`keys`),n=await new Promise(e=>{let n=t.get(`hardwareKey`);n.onsuccess=()=>e(n.result),n.onerror=()=>e(null)});e.close(),n&&n!==this.data.hardwareKey?(S.info(`Restoring hardware key from IndexedDB backup:`,n),S.info(`(was:`,this.data.hardwareKey,`)`),this.data.hardwareKey=n,this.save()):!n&&this.data.hardwareKey&&this._backupHardwareKey(this.data.hardwareKey)}catch{}}generateStableHardwareKey(){if(typeof crypto<`u`&&crypto.randomUUID){let e=`pwa-`+crypto.randomUUID().replace(/-/g,``).substring(0,28);return S.info(`Generated new UUID-based hardware key:`,e),e}let e=`pwa-`+Array.from({length:28},()=>Math.floor(Math.random()*16).toString(16)).join(``);return S.info(`Generated new random hardware key:`,e),e}generateXmrChannel(){return`xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx`.replace(/[xy]/g,e=>{let t=Math.random()*16|0;return(e===`x`?t:t&3|8).toString(16)})}async ensureXmrKeyPair(){if(this.data.xmrPubKey&&v(this.data.xmrPubKey))return;S.info(`Generating RSA key pair for XMR registration...`);let{publicKeyPem:e,privateKeyPem:t}=await _();this.data.xmrPubKey=e,this.data.xmrPrivKey=t,this.save(),typeof indexedDB<`u`&&this._backupKeys({xmrPubKey:e,xmrPrivKey:t}),S.info(`RSA key pair generated and saved`)}get cmsUrl(){return this.data.cmsUrl}set cmsUrl(e){this.data.cmsUrl=e,this.save()}get cmsKey(){return this.data.cmsKey}set cmsKey(e){this.data.cmsKey=e,this.save()}get displayName(){return this.data.displayName}set displayName(e){this.data.displayName=e,this.save()}get hardwareKey(){return this.data.hardwareKey||(S.error(`CRITICAL: hardwareKey missing! Generating emergency key.`),this.data.hardwareKey=this.generateStableHardwareKey(),this.save()),this.data.hardwareKey}get xmrChannel(){return this.data.xmrChannel||(S.warn(`xmrChannel missing at access time — generating`),this.data.xmrChannel=this.generateXmrChannel(),this.save()),this.data.xmrChannel}get xmrPubKey(){return this.data.xmrPubKey||``}get xmrPrivKey(){return this.data.xmrPrivKey||``}get googleGeoApiKey(){return this.data.googleGeoApiKey||``}set googleGeoApiKey(e){this.data.googleGeoApiKey=e,this.save()}get controls(){return this.data.controls||{}}get transport(){return this.data.transport||`auto`}get debug(){return this.data.debug||{}}},N={kioskMode:[`electron`,`chromium`],autoLaunch:[`electron`],allowShellCommands:[`electron`,`chromium`],browser:[`chromium`],extraBrowserFlags:[`chromium`]};function P(e,t){if(!e||!t)return;let n=t.toLowerCase();for(let[t,r]of Object.entries(N))t in e&&!r.includes(n)&&S.warn(`Key "${t}" is only supported on ${r.join(`/`)}, but current platform is ${n} — this key will be ignored`)}var F=new Set([`serverPort`,`kioskMode`,`fullscreen`,`hideMouseCursor`,`preventSleep`,`allowShellCommands`,`width`,`height`,`relaxSslCerts`]);function I(e,t){let n=new Set([...F,...t||[]]),r={};for(let[t,i]of Object.entries(e))n.has(t)||(r[t]=i);return Object.keys(r).length>0?r:void 0}var L=o(`FetchRetry`),R=3e4,z=12e4;function B(e){if(!e)return R;let t=Number(e);if(!isNaN(t)&&t>=0)return Math.min(t*1e3,z);let n=new Date(e);if(!isNaN(n.getTime())){let e=n.getTime()-Date.now();return Math.min(Math.max(e,0),z)}return R}async function V(e,t={},n={}){let{maxRetries:r=3,baseDelayMs:i=1e3,maxDelayMs:a=3e4}=n,o,s;for(let n=0;n<=r;n++){try{let i=await fetch(e,t);if(i.status===429){let e=B(i.headers.get(`Retry-After`));if(L.debug(`429 Rate limited, waiting ${e}ms (Retry-After: ${i.headers.get(`Retry-After`)})`),s=i,o=Error(`HTTP 429: Too Many Requests`),o.status=429,n<r){await new Promise(t=>setTimeout(t,e));continue}break}if(i.status<500)return i;if(s=i,o=Error(`HTTP ${i.status}: ${i.statusText}`),o.status=i.status,i.status===503&&n<r){let e=i.headers.get(`Retry-After`);if(e){let t=B(e);L.debug(`503 Service Unavailable, Retry-After: ${e} (${t}ms)`),await new Promise(e=>setTimeout(e,t));continue}}}catch(t){L.warn(`Fetch error (attempt ${n+1}/${r+1}):`,t.message||t,String(e).slice(0,80)),o=t,s=null}if(n<r){let t=Math.min(i*2**n,a)*(.5+Math.random()*.5);L.debug(`Retry ${n+1}/${r} in ${Math.round(t)}ms:`,String(e).slice(0,80)),await new Promise(e=>setTimeout(e,t))}}if(s)return s;throw o}var H=o(`CmsApi`),U=class{constructor({baseUrl:e,clientId:t,clientSecret:n,apiToken:r}={}){this.baseUrl=(e||``).replace(/\/+$/,``),this.clientId=t||null,this.clientSecret=n||null,this.accessToken=r||null,this.tokenExpiry=r?1/0:0}async authenticate(){H.info(`Authenticating with CMS API...`);let e=await fetch(`${this.baseUrl}/api/authorize/access_token`,{method:`POST`,headers:{"Content-Type":`application/x-www-form-urlencoded`},body:new URLSearchParams({grant_type:`client_credentials`,client_id:this.clientId,client_secret:this.clientSecret})});if(!e.ok){let t=await e.text();throw Error(`OAuth2 authentication failed (${e.status}): ${t}`)}let t=await e.json();return this.accessToken=t.access_token,this.tokenExpiry=Date.now()+(t.expires_in||3600)*1e3,H.info(`Authenticated successfully, token expires in`,t.expires_in,`s`),this.accessToken}async ensureToken(){if(!(this.accessToken&&Date.now()<this.tokenExpiry-6e4)){if(!this.clientId||!this.clientSecret){if(this.accessToken)return;throw new W(`AUTH`,`/authorize`,0,`No valid token and no OAuth2 credentials`)}await this.authenticate()}}async request(e,t,n={}){await this.ensureToken();let r=new URL(`${this.baseUrl}/api${t}`),i={method:e,headers:{Authorization:`Bearer ${this.accessToken}`}};if(e===`GET`)for(let[e,t]of Object.entries(n))t!=null&&r.searchParams.set(e,String(t));else i.headers[`Content-Type`]=`application/x-www-form-urlencoded`,i.body=new URLSearchParams(n);let a=await fetch(r,i);return a.ok||await this._handleErrorResponse(a,e,t),(a.headers.get(`Content-Type`)||``).includes(`application/json`)?a.json():null}get(e,t){return this.request(`GET`,e,t)}post(e,t){return this.request(`POST`,e,t)}put(e,t){return this.request(`PUT`,e,t)}del(e){return this.request(`DELETE`,e)}async _listRequest(e,t={}){let n=await this.request(`GET`,e,t);return Array.isArray(n)?n:[]}async _handleErrorResponse(e,t,n){let r=await e.text(),i;try{let e=JSON.parse(r);i=e.error?.message||e.message||r}catch{i=r}throw new W(t,n,e.status,i)}async findDisplay(e){H.info(`Looking up display by hardwareKey:`,e);let t=await this._listRequest(`/display`,{hardwareKey:e});if(t.length===0)return H.info(`No display found for hardwareKey:`,e),null;let n=t[0];return H.info(`Found display: ${n.display} (ID: ${n.displayId}, licensed: ${n.licensed})`),n}async authorizeDisplay(e){H.info(`Authorizing display:`,e),await this.request(`PUT`,`/display/authorise/${e}`),H.info(`Display authorized successfully`)}async editDisplay(e,t){return H.info(`Editing display:`,e,t),this.request(`PUT`,`/display/${e}`,t)}async listDisplays(e={}){return this._listRequest(`/display`,e)}async requestScreenshot(e){await this.request(`PUT`,`/display/requestscreenshot/${e}`)}async getDisplayStatus(e){return this.request(`GET`,`/display/status/${e}`)}async requestMultipart(e,t,n){await this.ensureToken();let r=`${this.baseUrl}/api${t}`,i=await fetch(r,{method:e,headers:{Authorization:`Bearer ${this.accessToken}`},body:n});return i.ok||await this._handleErrorResponse(i,e,t),(i.headers.get(`Content-Type`)||``).includes(`application/json`)?i.json():null}async createLayout({name:e,resolutionId:t,description:n}){let r={name:e,resolutionId:t};return n&&(r.description=n),this.request(`POST`,`/layout`,r)}async listLayouts(e={}){return this._listRequest(`/layout`,e)}async getLayout(e){return this.request(`GET`,`/layout/${e}`)}async deleteLayout(e){await this.request(`DELETE`,`/layout/${e}`)}async publishLayout(e){await this.request(`PUT`,`/layout/publish/${e}`,{publishNow:1})}async checkoutLayout(e){return this.request(`PUT`,`/layout/checkout/${e}`)}async getDraftLayout(e){let t=await this.listLayouts({parentId:e});return t.length>0?t[0]:null}async editLayoutBackground(e,t){return this.request(`PUT`,`/layout/background/${e}`,t)}async addRegion(e,t){return this.request(`POST`,`/region/${e}`,t)}async editRegion(e,t){return this.request(`PUT`,`/region/${e}`,t)}async deleteRegion(e){await this.request(`DELETE`,`/region/${e}`)}async addWidget(e,t,n={}){let{templateId:r,displayOrder:i,...a}=n,o={};r!==void 0&&(o.templateId=r),i!==void 0&&(o.displayOrder=i);let s=await this.request(`POST`,`/playlist/widget/${e}/${t}`,o);return Object.keys(a).length>0?(a.duration!==void 0&&a.useDuration===void 0&&(a.useDuration=1),this.request(`PUT`,`/playlist/widget/${s.widgetId}`,a)):s}async editWidget(e,t){return this.request(`PUT`,`/playlist/widget/${e}`,t)}async deleteWidget(e){await this.request(`DELETE`,`/playlist/widget/${e}`)}async uploadMedia(e){return this.requestMultipart(`POST`,`/library`,e)}async listMedia(e={}){return this._listRequest(`/library`,e)}async getMedia(e){return this.request(`GET`,`/library/${e}`)}async deleteMedia(e){await this.request(`DELETE`,`/library/${e}`)}async createCampaign(e){return this.request(`POST`,`/campaign`,{name:e})}async listCampaigns(e={}){return this._listRequest(`/campaign`,e)}async deleteCampaign(e){await this.request(`DELETE`,`/campaign/${e}`)}async assignLayoutToCampaign(e,t,n){let r={layoutId:t};n!==void 0&&(r.displayOrder=n),await this.request(`POST`,`/campaign/layout/assign/${e}`,r)}async createSchedule(e){let t={...e};Array.isArray(t.displayGroupIds)&&delete t.displayGroupIds,await this.ensureToken();let n=`${this.baseUrl}/api/schedule`,r=new URLSearchParams;for(let[e,n]of Object.entries(t))n!=null&&r.set(e,String(n));if(Array.isArray(e.displayGroupIds))for(let t of e.displayGroupIds)r.append(`displayGroupIds[]`,String(t));let i=await fetch(n,{method:`POST`,headers:{Authorization:`Bearer ${this.accessToken}`,"Content-Type":`application/x-www-form-urlencoded`},body:r});if(!i.ok){let e=await i.text();throw Error(`CMS API POST /schedule failed (${i.status}): ${e}`)}return(i.headers.get(`Content-Type`)||``).includes(`application/json`)?i.json():null}async deleteSchedule(e){await this.request(`DELETE`,`/schedule/${e}`)}async listSchedules(e={}){let t=await this.request(`GET`,`/schedule/data/events`,e);return Array.isArray(t)?t:t?.events||[]}async listDisplayGroups(e={}){return this._listRequest(`/displaygroup`,e)}async createDisplayGroup(e,t){let n={displayGroup:e};return t&&(n.description=t),this.request(`POST`,`/displaygroup`,n)}async deleteDisplayGroup(e){await this.request(`DELETE`,`/displaygroup/${e}`)}async assignDisplayToGroup(e,t){await this.ensureToken();let n=`${this.baseUrl}/api/displaygroup/${e}/display/assign`,r=new URLSearchParams;r.append(`displayId[]`,String(t));let i=await fetch(n,{method:`POST`,headers:{Authorization:`Bearer ${this.accessToken}`,"Content-Type":`application/x-www-form-urlencoded`},body:r});if(!i.ok){let e=await i.text();throw Error(`CMS API assign display to group failed (${i.status}): ${e}`)}}async unassignDisplayFromGroup(e,t){await this.ensureToken();let n=`${this.baseUrl}/api/displaygroup/${e}/display/unassign`,r=new URLSearchParams;r.append(`displayId[]`,String(t));let i=await fetch(n,{method:`POST`,headers:{Authorization:`Bearer ${this.accessToken}`,"Content-Type":`application/x-www-form-urlencoded`},body:r});if(!i.ok){let e=await i.text();throw Error(`CMS API unassign display from group failed (${i.status}): ${e}`)}}async listResolutions(){return this._listRequest(`/resolution`)}async listTemplates(e={}){return this._listRequest(`/template`,e)}async assignMediaToPlaylist(e,t){let n=Array.isArray(t)?t:[t];await this.ensureToken();let r=`${this.baseUrl}/api/playlist/library/assign/${e}`,i=new URLSearchParams;for(let e of n)i.append(`media[]`,String(e));let a=await fetch(r,{method:`POST`,headers:{Authorization:`Bearer ${this.accessToken}`,"Content-Type":`application/x-www-form-urlencoded`},body:i});if(!a.ok){let t=await a.text();throw new W(`POST`,`/playlist/library/assign/${e}`,a.status,t)}return(a.headers.get(`Content-Type`)||``).includes(`application/json`)?a.json():null}async editLayout(e,t){return this.request(`PUT`,`/layout/${e}`,t)}async copyLayout(e,t={}){return this.post(`/layout/copy/${e}`,t)}async discardLayout(e){await this.put(`/layout/discard/${e}`)}async editCampaign(e,t){return this.put(`/campaign/${e}`,t)}async getCampaign(e){return this.get(`/campaign/${e}`)}async unassignLayoutFromCampaign(e,t){await this.post(`/campaign/layout/unassign/${e}`,{layoutId:t})}async editSchedule(e,t){return this.put(`/schedule/${e}`,t)}async retireLayout(e){await this.put(`/layout/retire/${e}`)}async unretireLayout(e){await this.put(`/layout/unretire/${e}`)}async getLayoutStatus(e){return this.get(`/layout/status/${e}`)}async tagLayout(e,t){await this.post(`/layout/${e}/tag`,{tag:t.join(`,`)})}async untagLayout(e,t){await this.post(`/layout/${e}/untag`,{tag:t.join(`,`)})}async listCommands(e={}){return this._listRequest(`/command`,e)}async createCommand(e){return this.post(`/command`,e)}async editCommand(e,t){return this.put(`/command/${e}`,t)}async deleteCommand(e){await this.del(`/command/${e}`)}async deleteDisplay(e){await this.del(`/display/${e}`)}async wolDisplay(e){await this.post(`/display/wol/${e}`)}async setDefaultLayout(e,t){return this.put(`/display/${e}`,{defaultLayoutId:t})}async purgeDisplay(e){await this.post(`/display/purge/${e}`)}async listDayParts(e={}){return this._listRequest(`/daypart`,e)}async createDayPart(e){return this.post(`/daypart`,e)}async editDayPart(e,t){return this.put(`/daypart/${e}`,t)}async deleteDayPart(e){await this.del(`/daypart/${e}`)}async uploadMediaUrl(e,t){return this.post(`/library`,{url:e,name:t,type:`uri`})}async copyMedia(e){return this.post(`/library/copy/${e}`)}async downloadMedia(e){await this.ensureToken();let t=`${this.baseUrl}/api/library/download/${e}`,n=await fetch(t,{headers:{Authorization:`Bearer ${this.accessToken}`}});if(!n.ok){let t=await n.text();throw new W(`GET`,`/library/download/${e}`,n.status,t)}return n}async editMedia(e,t){return this.put(`/library/${e}`,t)}async getMediaUsage(e){return this.get(`/library/usage/${e}`)}async tidyLibrary(){await this.post(`/library/tidy`)}async listPlaylists(e={}){return this._listRequest(`/playlist`,e)}async createPlaylist(e){return this.post(`/playlist`,{name:e})}async getPlaylist(e){return this.get(`/playlist/${e}`)}async editPlaylist(e,t){return this.put(`/playlist/${e}`,t)}async deletePlaylist(e){await this.del(`/playlist/${e}`)}async reorderPlaylist(e,t){await this.ensureToken();let n=`${this.baseUrl}/api/playlist/order/${e}`,r=new URLSearchParams;for(let e of t)r.append(`widgets[]`,String(e));let i=await fetch(n,{method:`POST`,headers:{Authorization:`Bearer ${this.accessToken}`,"Content-Type":`application/x-www-form-urlencoded`},body:r});if(!i.ok){let t=await i.text();throw new W(`POST`,`/playlist/order/${e}`,i.status,t)}}async copyPlaylist(e){return this.post(`/playlist/copy/${e}`)}async setWidgetTransition(e,t,n={}){return this.put(`/playlist/widget/transition/${e}`,{type:t,...n})}async setWidgetAudio(e,t){return this.put(`/playlist/widget/${e}/audio`,t)}async removeWidgetAudio(e){await this.del(`/playlist/widget/${e}/audio`)}async setWidgetExpiry(e,t){return this.put(`/playlist/widget/${e}/expiry`,t)}async saveAsTemplate(e,t){return this.post(`/template/${e}`,t)}async getTemplate(e){return this.get(`/template/${e}`)}async deleteTemplate(e){await this.del(`/template/${e}`)}async listDatasets(e={}){return this._listRequest(`/dataset`,e)}async createDataset(e){return this.post(`/dataset`,e)}async editDataset(e,t){return this.put(`/dataset/${e}`,t)}async deleteDataset(e){await this.del(`/dataset/${e}`)}async listDatasetColumns(e){return this._listRequest(`/dataset/${e}/column`)}async createDatasetColumn(e,t){return this.post(`/dataset/${e}/column`,t)}async editDatasetColumn(e,t,n){return this.put(`/dataset/${e}/column/${t}`,n)}async deleteDatasetColumn(e,t){await this.del(`/dataset/${e}/column/${t}`)}async listDatasetData(e,t={}){return this._listRequest(`/dataset/data/${e}`,t)}async addDatasetRow(e,t){return this.post(`/dataset/data/${e}`,t)}async editDatasetRow(e,t,n){return this.put(`/dataset/data/${e}/${t}`,n)}async deleteDatasetRow(e,t){await this.del(`/dataset/data/${e}/${t}`)}async importDatasetCsv(e,t){return this.requestMultipart(`POST`,`/dataset/import/${e}`,t)}async clearDataset(e){await this.del(`/dataset/data/${e}`)}async listNotifications(e={}){return this._listRequest(`/notification`,e)}async createNotification(e){return this.post(`/notification`,e)}async editNotification(e,t){return this.put(`/notification/${e}`,t)}async deleteNotification(e){await this.del(`/notification/${e}`)}async listFolders(e={}){return this._listRequest(`/folder`,e)}async createFolder(e){return this.post(`/folder`,e)}async editFolder(e,t){return this.put(`/folder/${e}`,t)}async deleteFolder(e){await this.del(`/folder/${e}`)}async listTags(e={}){return this._listRequest(`/tag`,e)}async createTag(e){return this.post(`/tag`,e)}async editTag(e,t){return this.put(`/tag/${e}`,t)}async deleteTag(e){await this.del(`/tag/${e}`)}async tagEntity(e,t,n){await this.post(`/${e}/${t}/tag`,{tag:n.join(`,`)})}async untagEntity(e,t,n){await this.post(`/${e}/${t}/untag`,{tag:n.join(`,`)})}async dgChangeLayout(e,t){await this.post(`/displaygroup/${e}/action/changeLayout`,{layoutId:t})}async dgOverlayLayout(e,t){await this.post(`/displaygroup/${e}/action/overlayLayout`,{layoutId:t})}async dgRevertToSchedule(e){await this.post(`/displaygroup/${e}/action/revertToSchedule`)}async dgCollectNow(e){await this.post(`/displaygroup/${e}/action/collectNow`)}async dgSendCommand(e,t){await this.post(`/displaygroup/${e}/action/command`,{commandId:t})}async editDisplayGroup(e,t){return this.put(`/displaygroup/${e}`,t)}},W=class extends Error{constructor(e,t,n,r){super(`CMS API ${e} ${t} → ${n}: ${r}`),this.name=`CmsApiError`,this.method=e,this.path=t,this.status=n,this.detail=r}},G=e.version,K=M.data?.playerApiBase||`/player/api/v2`,q=K;function J(e){K=e.replace(/\/+$/,``),q=K}export{s as C,p as S,u as _,W as a,l as b,A as c,P as d,x as f,t as g,h,U as i,M as l,b as m,G as n,V as o,y as p,J as r,F as s,q as t,I as u,o as v,m as w,d as x,c as y};
-//# sourceMappingURL=src-CMBYiOs4.js.map
+import{n as e}from"./chunk-7ZXdHUL4.js";var t={name:`@xiboplayer/utils`,version:`0.7.16`,description:`Shared utilities for xiboplayer packages`,type:`module`,main:`./src/index.js`,types:`./src/index.d.ts`,exports:{".":`./src/index.js`,"./logger":`./src/logger.js`,"./event-emitter":`./src/event-emitter.js`,"./config":`./src/config.js`},scripts:{test:`vitest run`,"test:watch":`vitest`,"test:coverage":`vitest run --coverage`},dependencies:{"@xiboplayer/crypto":`workspace:*`},devDependencies:{vitest:`^4.1.2`},keywords:[`xibo`,`digital-signage`,`utilities`,`logger`,`event-emitter`],author:`Pau Aliagas <linuxnow@gmail.com>`,license:`AGPL-3.0-or-later`,repository:{type:`git`,url:`git+https://github.com/xibo-players/xiboplayer.git`,directory:`packages/utils`},homepage:`https://xiboplayer.org`},n={DEBUG:0,INFO:1,WARNING:2,ERROR:3,NONE:4},r=[],i=class{constructor(e,t=null){this.name=e,this.useGlobal=t===null,this.useGlobal||this.setLevel(t)}_ts(){let e=new Date;return`${String(e.getHours()).padStart(2,`0`)}:${String(e.getMinutes()).padStart(2,`0`)}:${String(e.getSeconds()).padStart(2,`0`)}.${String(e.getMilliseconds()).padStart(3,`0`)}`}setLevel(e){this.useGlobal=!1,typeof e==`string`?this.level=n[e.toUpperCase()]??n.INFO:this.level=e}getEffectiveLevel(){return this.useGlobal?a.level:this.level}debug(...e){this.getEffectiveLevel()<=n.DEBUG&&console.log(`${this._ts()} [${this.name}] DEBUG:`,...e),p(`debug`,this.name,e)}info(...e){this.getEffectiveLevel()<=n.INFO&&console.log(`${this._ts()} [${this.name}]`,...e),p(`info`,this.name,e)}warn(...e){this.getEffectiveLevel()<=n.WARNING&&console.warn(`${this._ts()} [${this.name}]`,...e),p(`warning`,this.name,e)}error(...e){this.getEffectiveLevel()<=n.ERROR&&console.error(`${this._ts()} [${this.name}]`,...e),p(`error`,this.name,e)}log(e,...t){switch(e.toUpperCase()){case`DEBUG`:return this.debug(...t);case`INFO`:return this.info(...t);case`WARNING`:case`WARN`:return this.warn(...t);case`ERROR`:return this.error(...t)}}},a={level:n.WARNING,setGlobalLevel(e){typeof e==`string`?this.level=n[e.toUpperCase()]??n.INFO:this.level=e,console.log(`[Logger] Global log level set to: ${this.getLevelName(this.level)}`)},getLevelName(e){return Object.keys(n).find(t=>n[t]===e)||`UNKNOWN`}},o=!1;if(typeof window<`u`){let e=new URLSearchParams(window.location.search).get(`logLevel`),t=localStorage.getItem(`xibo_log_level`),n=null;try{n=JSON.parse(localStorage.getItem(`xibo_config`)||`{}`).logLevel||null}catch{}e?(a.setGlobalLevel(e),o=!0):t?(a.setGlobalLevel(t),o=!0):n?(a.setGlobalLevel(n),o=!0):a.setGlobalLevel(`WARNING`)}else typeof self<`u`&&self.swLogLevel&&a.setGlobalLevel(self.swLogLevel);function s(e,t=null){return new i(e,t)}function c(e){a.setGlobalLevel(e),typeof window<`u`&&localStorage.setItem(`xibo_log_level`,e.toUpperCase())}function l(){return a.getLevelName(a.level)}function u(){return a.level<=n.DEBUG}function d(e){if(o||!e)return!1;let t=f(e);return a.setGlobalLevel(t),!0}function f(e){switch((e||``).toLowerCase()){case`debug`:return`DEBUG`;case`info`:case`notice`:case`audit`:return`INFO`;case`warning`:return`WARNING`;case`error`:case`critical`:case`alert`:case`emergency`:return`ERROR`;default:return`INFO`}}function p(e,t,n){if(r.length!==0)for(let i of r)try{i({level:e,name:t,args:n})}catch{}}function m(e){r.push(e)}function h(e){let t=r.indexOf(e);t>=0&&r.splice(t,1)}var g=class{constructor(){this.events=new Map}on(e,t){this.events.has(e)||this.events.set(e,[]),this.events.get(e).push(t)}once(e,t){let n=(...r)=>{this.off(e,n),t(...r)};this.on(e,n)}off(e,t){if(!this.events.has(e))return;let n=this.events.get(e),r=n.indexOf(t);r!==-1&&n.splice(r,1)}emit(e,...t){if(!this.events.has(e))return;let n=this.events.get(e).slice();for(let r of n)try{r(...t)}catch(t){console.error(`[EventEmitter] Listener error on '${e}':`,t)}}removeAllListeners(e){e?this.events.delete(e):this.events.clear()}};function _(e,t){let n=new Uint8Array(e),r=``;for(let e=0;e<n.length;e++)r+=String.fromCharCode(n[e]);let i=btoa(r),a=[];for(let e=0;e<i.length;e+=64)a.push(i.substring(e,e+64));return`-----BEGIN ${t}-----\n${a.join(`
+`)}\n-----END ${t}-----`}async function v(){let e=await crypto.subtle.generateKey({name:`RSA-OAEP`,modulusLength:1024,publicExponent:new Uint8Array([1,0,1]),hash:`SHA-256`},!0,[`encrypt`,`decrypt`]),t=await crypto.subtle.exportKey(`spki`,e.publicKey),n=await crypto.subtle.exportKey(`pkcs8`,e.privateKey);return{publicKeyPem:_(t,`PUBLIC KEY`),privateKeyPem:_(n,`PRIVATE KEY`)}}function y(e){return!e||typeof e!=`string`?!1:/^-----BEGIN (PUBLIC KEY|PRIVATE KEY)-----\n[A-Za-z0-9+/=\n]+\n-----END \1-----$/.test(e.trim())}function b(e,t,n,r={}){return typeof indexedDB>`u`?Promise.reject(Error(`IndexedDB not available`)):new Promise((i,a)=>{let o=indexedDB.open(e,t);o.onupgradeneeded=()=>{let e=o.result;if(!e.objectStoreNames.contains(n)){let t=r.keyPath?{keyPath:r.keyPath,autoIncrement:!0}:void 0,i=e.createObjectStore(n,t);r.indexName&&r.indexKey&&i.createIndex(r.indexName,r.indexKey,{unique:!1})}},o.onsuccess=()=>i(o.result),o.onerror=()=>a(o.error)})}function x(e,t,n,r,i){return new Promise((a,o)=>{let s=e.transaction([t],`readonly`).objectStore(t).index(n).openCursor(r),c=[];s.onsuccess=e=>{let t=e.target.result;t&&c.length<i?(c.push(t.value),t.continue()):a(c)},s.onerror=()=>o(Error(`Index query failed: ${s.error}`))})}function S(e,t,n){return new Promise((r,i)=>{let a=e.transaction([t],`readwrite`),o=a.objectStore(t),s=0;for(let e of n)if(e){let t=o.delete(e);t.onsuccess=()=>{s++},t.onerror=()=>{}}a.oncomplete=()=>r(s),a.onerror=()=>i(Error(`Delete failed: ${a.error}`))})}var C=s(`Config`),w=`xibo_global`,T=`xibo_cms:`,E=`xibo_active_cms`,D=`xibo-hw-backup`,O=1,k=new Set([`hardwareKey`,`xmrPubKey`,`xmrPrivKey`]);function A(e){let t=2166136261;for(let n=0;n<e.length;n++)t^=e.charCodeAt(n),t+=(t<<1)+(t<<4)+(t<<7)+(t<<8)+(t<<24);t>>>=0;let n=t+1234567;for(let t=0;t<e.length;t++)n^=e.charCodeAt(t)+1,n+=(n<<1)+(n<<4)+(n<<7)+(n<<8)+(n<<24);return n>>>=0,(t.toString(16).padStart(8,`0`)+n.toString(16).padStart(8,`0`)).substring(0,12)}function j(e){if(!e)return null;try{let t=new URL(e),n=t.origin;return`${t.hostname}-${A(n)}`}catch{return`unknown-${A(e)}`}}function M(){let e={},t={cmsUrl:e.CMS_URL||``,cmsKey:e.CMS_KEY||``,displayName:e.DISPLAY_NAME||``,hardwareKey:e.HARDWARE_KEY||``,xmrChannel:e.XMR_CHANNEL||``,googleGeoApiKey:e.GOOGLE_GEO_API_KEY||``};return Object.values(t).some(e=>e!==``)?t:null}var N=new class{constructor(){this._activeCmsId=null,this.data=this.load(),this._fromEnv||this._restoreHardwareKeyFromBackup()}load(){let e=M();return e?(this._fromEnv=!0,e):typeof localStorage>`u`?{cmsUrl:``,cmsKey:``,displayName:``,hardwareKey:``,xmrChannel:``}:localStorage.getItem(w)?this._loadSplit():this._loadFresh()}_loadSplit(){let e={};try{e=JSON.parse(localStorage.getItem(w)||`{}`)}catch(e){C.error(`Failed to parse xibo_global:`,e)}let t=localStorage.getItem(E)||null;this._activeCmsId=t;let n={};if(t)try{let e=localStorage.getItem(T+t);e&&(n=JSON.parse(e))}catch(e){C.error(`Failed to parse CMS config:`,e)}let r={...e,...n};return this._validateConfig(r)}_loadFresh(){return this._validateConfig({})}_validateConfig(e){let t=!1;return!e.hardwareKey||e.hardwareKey.length<10?(C.warn(`Missing/invalid hardwareKey — generating`),e.hardwareKey=this.generateStableHardwareKey(),this._backupHardwareKey(e.hardwareKey),t=!0):C.info(`✓ Loaded existing hardwareKey:`,e.hardwareKey),e.xmrChannel||(C.warn(`Missing xmrChannel — generating`),e.xmrChannel=this.generateXmrChannel(),t=!0),e.cmsUrl=e.cmsUrl||``,e.cmsKey=e.cmsKey||``,e.displayName=e.displayName||``,t&&typeof localStorage<`u`&&this._saveSplit(e),e}save(){typeof localStorage>`u`||this._saveSplit(this.data)}_saveSplit(e){if(typeof localStorage>`u`)return;let t={},n={};for(let[r,i]of Object.entries(e))k.has(r)?t[r]=i:n[r]=i;localStorage.setItem(w,JSON.stringify(t));let r=j(e.cmsUrl);r&&(localStorage.setItem(T+r,JSON.stringify(n)),localStorage.setItem(E,r),this._activeCmsId=r),localStorage.setItem(`xibo_config`,JSON.stringify(e))}switchCms(e){if(typeof localStorage>`u`)throw Error(`switchCms requires localStorage (browser only)`);this.save();let t=j(e);if(!t)throw Error(`Invalid CMS URL`);let n=localStorage.getItem(T+t),r={},i=!0;if(n)try{r=JSON.parse(n),i=!1,C.info(`Switching to existing CMS profile: ${t}`)}catch(e){C.error(`Failed to parse target CMS config:`,e)}else C.info(`Creating new CMS profile: ${t}`),r={cmsUrl:e,cmsKey:``,displayName:``,xmrChannel:this.generateXmrChannel()},localStorage.setItem(T+t,JSON.stringify(r));localStorage.setItem(E,t),this._activeCmsId=t;let a={};try{a=JSON.parse(localStorage.getItem(w)||`{}`)}catch{}return this.data={...a,...r},this.data.cmsUrl||(this.data.cmsUrl=e),{cmsId:t,isNew:i}}listCmsProfiles(){if(typeof localStorage>`u`)return[];let e=[],t=localStorage.getItem(E)||null;for(let n=0;n<localStorage.length;n++){let r=localStorage.key(n);if(!r.startsWith(T))continue;let i=r.slice(9);try{let n=JSON.parse(localStorage.getItem(r));e.push({cmsId:i,cmsUrl:n.cmsUrl||``,displayName:n.displayName||``,isActive:i===t})}catch{}}return e}get activeCmsId(){if(this._activeCmsId)return this._activeCmsId;let e=j(this.data?.cmsUrl);return this._activeCmsId=e,e}isConfigured(){return!!(this.data.cmsUrl&&this.data.cmsKey&&this.data.displayName)}async _backupKeys(e){try{let t=await b(D,O,`keys`),n=t.transaction(`keys`,`readwrite`),r=n.objectStore(`keys`);for(let[t,n]of Object.entries(e))r.put(n,t);n.oncomplete=()=>{C.info(`Keys backed up to IndexedDB:`,Object.keys(e).join(`, `)),t.close()}}catch{}}_backupHardwareKey(e){this._backupKeys({hardwareKey:e})}async _restoreHardwareKeyFromBackup(){try{let e=await b(D,O,`keys`),t=e.transaction(`keys`,`readonly`).objectStore(`keys`),n=await new Promise(e=>{let n=t.get(`hardwareKey`);n.onsuccess=()=>e(n.result),n.onerror=()=>e(null)});e.close(),n&&n!==this.data.hardwareKey?(C.info(`Restoring hardware key from IndexedDB backup:`,n),C.info(`(was:`,this.data.hardwareKey,`)`),this.data.hardwareKey=n,this.save()):!n&&this.data.hardwareKey&&this._backupHardwareKey(this.data.hardwareKey)}catch{}}generateStableHardwareKey(){if(typeof crypto<`u`&&crypto.randomUUID){let e=`pwa-`+crypto.randomUUID().replace(/-/g,``).substring(0,28);return C.info(`Generated new UUID-based hardware key:`,e),e}let e=`pwa-`+Array.from({length:28},()=>Math.floor(Math.random()*16).toString(16)).join(``);return C.info(`Generated new random hardware key:`,e),e}generateXmrChannel(){return`xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx`.replace(/[xy]/g,e=>{let t=Math.random()*16|0;return(e===`x`?t:t&3|8).toString(16)})}async ensureXmrKeyPair(){if(this.data.xmrPubKey&&y(this.data.xmrPubKey))return;C.info(`Generating RSA key pair for XMR registration...`);let{publicKeyPem:e,privateKeyPem:t}=await v();this.data.xmrPubKey=e,this.data.xmrPrivKey=t,this.save(),typeof indexedDB<`u`&&this._backupKeys({xmrPubKey:e,xmrPrivKey:t}),C.info(`RSA key pair generated and saved`)}get cmsUrl(){return this.data.cmsUrl}set cmsUrl(e){this.data.cmsUrl=e,this.save()}get cmsKey(){return this.data.cmsKey}set cmsKey(e){this.data.cmsKey=e,this.save()}get displayName(){return this.data.displayName}set displayName(e){this.data.displayName=e,this.save()}get hardwareKey(){return this.data.hardwareKey||(C.error(`CRITICAL: hardwareKey missing! Generating emergency key.`),this.data.hardwareKey=this.generateStableHardwareKey(),this.save()),this.data.hardwareKey}get xmrChannel(){return this.data.xmrChannel||(C.warn(`xmrChannel missing at access time — generating`),this.data.xmrChannel=this.generateXmrChannel(),this.save()),this.data.xmrChannel}get xmrPubKey(){return this.data.xmrPubKey||``}get xmrPrivKey(){return this.data.xmrPrivKey||``}get googleGeoApiKey(){return this.data.googleGeoApiKey||``}set googleGeoApiKey(e){this.data.googleGeoApiKey=e,this.save()}get controls(){return this.data.controls||{}}get transport(){return this.data.transport||`auto`}get debug(){return this.data.debug||{}}},P={kioskMode:[`electron`,`chromium`],autoLaunch:[`electron`],allowShellCommands:[`electron`,`chromium`],browser:[`chromium`],extraBrowserFlags:[`chromium`]};function F(e,t){if(!e||!t)return;let n=t.toLowerCase();for(let[t,r]of Object.entries(P))t in e&&!r.includes(n)&&C.warn(`Key "${t}" is only supported on ${r.join(`/`)}, but current platform is ${n} — this key will be ignored`)}var I=new Set([`serverPort`,`kioskMode`,`fullscreen`,`hideMouseCursor`,`preventSleep`,`allowShellCommands`,`width`,`height`,`relaxSslCerts`]);function L(e,t){let n=new Set([...I,...t||[]]),r={};for(let[t,i]of Object.entries(e))n.has(t)||(r[t]=i);return Object.keys(r).length>0?r:void 0}var R=s(`FetchRetry`),z=3e4,B=12e4;function V(e){if(!e)return z;let t=Number(e);if(!isNaN(t)&&t>=0)return Math.min(t*1e3,B);let n=new Date(e);if(!isNaN(n.getTime())){let e=n.getTime()-Date.now();return Math.min(Math.max(e,0),B)}return z}async function H(e,t={},n={}){let{maxRetries:r=3,baseDelayMs:i=1e3,maxDelayMs:a=3e4}=n,o,s;for(let n=0;n<=r;n++){try{let i=await fetch(e,t);if(i.status===429){let e=V(i.headers.get(`Retry-After`));if(R.debug(`429 Rate limited, waiting ${e}ms (Retry-After: ${i.headers.get(`Retry-After`)})`),s=i,o=Error(`HTTP 429: Too Many Requests`),o.status=429,n<r){await new Promise(t=>setTimeout(t,e));continue}break}if(i.status<500)return i;if(s=i,o=Error(`HTTP ${i.status}: ${i.statusText}`),o.status=i.status,i.status===503&&n<r){let e=i.headers.get(`Retry-After`);if(e){let t=V(e);R.debug(`503 Service Unavailable, Retry-After: ${e} (${t}ms)`),await new Promise(e=>setTimeout(e,t));continue}}}catch(t){R.warn(`Fetch error (attempt ${n+1}/${r+1}):`,t.message||t,String(e).slice(0,80)),o=t,s=null}if(n<r){let t=Math.min(i*2**n,a)*(.5+Math.random()*.5);R.debug(`Retry ${n+1}/${r} in ${Math.round(t)}ms:`,String(e).slice(0,80)),await new Promise(e=>setTimeout(e,t))}}if(s)return s;throw o}var U=s(`CmsApi`),W=class{constructor({baseUrl:e,clientId:t,clientSecret:n,apiToken:r}={}){this.baseUrl=(e||``).replace(/\/+$/,``),this.clientId=t||null,this.clientSecret=n||null,this.accessToken=r||null,this.tokenExpiry=r?1/0:0}async authenticate(){U.info(`Authenticating with CMS API...`);let e=await fetch(`${this.baseUrl}/api/authorize/access_token`,{method:`POST`,headers:{"Content-Type":`application/x-www-form-urlencoded`},body:new URLSearchParams({grant_type:`client_credentials`,client_id:this.clientId,client_secret:this.clientSecret})});if(!e.ok){let t=await e.text();throw Error(`OAuth2 authentication failed (${e.status}): ${t}`)}let t=await e.json();return this.accessToken=t.access_token,this.tokenExpiry=Date.now()+(t.expires_in||3600)*1e3,U.info(`Authenticated successfully, token expires in`,t.expires_in,`s`),this.accessToken}async ensureToken(){if(!(this.accessToken&&Date.now()<this.tokenExpiry-6e4)){if(!this.clientId||!this.clientSecret){if(this.accessToken)return;throw new G(`AUTH`,`/authorize`,0,`No valid token and no OAuth2 credentials`)}await this.authenticate()}}async request(e,t,n={}){await this.ensureToken();let r=new URL(`${this.baseUrl}/api${t}`),i={method:e,headers:{Authorization:`Bearer ${this.accessToken}`}};if(e===`GET`)for(let[e,t]of Object.entries(n))t!=null&&r.searchParams.set(e,String(t));else i.headers[`Content-Type`]=`application/x-www-form-urlencoded`,i.body=new URLSearchParams(n);let a=await fetch(r,i);return a.ok||await this._handleErrorResponse(a,e,t),(a.headers.get(`Content-Type`)||``).includes(`application/json`)?a.json():null}get(e,t){return this.request(`GET`,e,t)}post(e,t){return this.request(`POST`,e,t)}put(e,t){return this.request(`PUT`,e,t)}del(e){return this.request(`DELETE`,e)}async _listRequest(e,t={}){let n=await this.request(`GET`,e,t);return Array.isArray(n)?n:[]}async _handleErrorResponse(e,t,n){let r=await e.text(),i;try{let e=JSON.parse(r);i=e.error?.message||e.message||r}catch{i=r}throw new G(t,n,e.status,i)}async findDisplay(e){U.info(`Looking up display by hardwareKey:`,e);let t=await this._listRequest(`/display`,{hardwareKey:e});if(t.length===0)return U.info(`No display found for hardwareKey:`,e),null;let n=t[0];return U.info(`Found display: ${n.display} (ID: ${n.displayId}, licensed: ${n.licensed})`),n}async authorizeDisplay(e){U.info(`Authorizing display:`,e),await this.request(`PUT`,`/display/authorise/${e}`),U.info(`Display authorized successfully`)}async editDisplay(e,t){return U.info(`Editing display:`,e,t),this.request(`PUT`,`/display/${e}`,t)}async listDisplays(e={}){return this._listRequest(`/display`,e)}async requestScreenshot(e){await this.request(`PUT`,`/display/requestscreenshot/${e}`)}async getDisplayStatus(e){return this.request(`GET`,`/display/status/${e}`)}async requestMultipart(e,t,n){await this.ensureToken();let r=`${this.baseUrl}/api${t}`,i=await fetch(r,{method:e,headers:{Authorization:`Bearer ${this.accessToken}`},body:n});return i.ok||await this._handleErrorResponse(i,e,t),(i.headers.get(`Content-Type`)||``).includes(`application/json`)?i.json():null}async createLayout({name:e,resolutionId:t,description:n}){let r={name:e,resolutionId:t};return n&&(r.description=n),this.request(`POST`,`/layout`,r)}async listLayouts(e={}){return this._listRequest(`/layout`,e)}async getLayout(e){return this.request(`GET`,`/layout/${e}`)}async deleteLayout(e){await this.request(`DELETE`,`/layout/${e}`)}async publishLayout(e){await this.request(`PUT`,`/layout/publish/${e}`,{publishNow:1})}async checkoutLayout(e){return this.request(`PUT`,`/layout/checkout/${e}`)}async getDraftLayout(e){let t=await this.listLayouts({parentId:e});return t.length>0?t[0]:null}async editLayoutBackground(e,t){return this.request(`PUT`,`/layout/background/${e}`,t)}async addRegion(e,t){return this.request(`POST`,`/region/${e}`,t)}async editRegion(e,t){return this.request(`PUT`,`/region/${e}`,t)}async deleteRegion(e){await this.request(`DELETE`,`/region/${e}`)}async addWidget(e,t,n={}){let{templateId:r,displayOrder:i,...a}=n,o={};r!==void 0&&(o.templateId=r),i!==void 0&&(o.displayOrder=i);let s=await this.request(`POST`,`/playlist/widget/${e}/${t}`,o);return Object.keys(a).length>0?(a.duration!==void 0&&a.useDuration===void 0&&(a.useDuration=1),this.request(`PUT`,`/playlist/widget/${s.widgetId}`,a)):s}async editWidget(e,t){return this.request(`PUT`,`/playlist/widget/${e}`,t)}async deleteWidget(e){await this.request(`DELETE`,`/playlist/widget/${e}`)}async uploadMedia(e){return this.requestMultipart(`POST`,`/library`,e)}async listMedia(e={}){return this._listRequest(`/library`,e)}async getMedia(e){return this.request(`GET`,`/library/${e}`)}async deleteMedia(e){await this.request(`DELETE`,`/library/${e}`)}async createCampaign(e){return this.request(`POST`,`/campaign`,{name:e})}async listCampaigns(e={}){return this._listRequest(`/campaign`,e)}async deleteCampaign(e){await this.request(`DELETE`,`/campaign/${e}`)}async assignLayoutToCampaign(e,t,n){let r={layoutId:t};n!==void 0&&(r.displayOrder=n),await this.request(`POST`,`/campaign/layout/assign/${e}`,r)}async createSchedule(e){let t={...e};Array.isArray(t.displayGroupIds)&&delete t.displayGroupIds,await this.ensureToken();let n=`${this.baseUrl}/api/schedule`,r=new URLSearchParams;for(let[e,n]of Object.entries(t))n!=null&&r.set(e,String(n));if(Array.isArray(e.displayGroupIds))for(let t of e.displayGroupIds)r.append(`displayGroupIds[]`,String(t));let i=await fetch(n,{method:`POST`,headers:{Authorization:`Bearer ${this.accessToken}`,"Content-Type":`application/x-www-form-urlencoded`},body:r});if(!i.ok){let e=await i.text();throw Error(`CMS API POST /schedule failed (${i.status}): ${e}`)}return(i.headers.get(`Content-Type`)||``).includes(`application/json`)?i.json():null}async deleteSchedule(e){await this.request(`DELETE`,`/schedule/${e}`)}async listSchedules(e={}){let t=await this.request(`GET`,`/schedule/data/events`,e);return Array.isArray(t)?t:t?.events||[]}async listDisplayGroups(e={}){return this._listRequest(`/displaygroup`,e)}async createDisplayGroup(e,t){let n={displayGroup:e};return t&&(n.description=t),this.request(`POST`,`/displaygroup`,n)}async deleteDisplayGroup(e){await this.request(`DELETE`,`/displaygroup/${e}`)}async assignDisplayToGroup(e,t){await this.ensureToken();let n=`${this.baseUrl}/api/displaygroup/${e}/display/assign`,r=new URLSearchParams;r.append(`displayId[]`,String(t));let i=await fetch(n,{method:`POST`,headers:{Authorization:`Bearer ${this.accessToken}`,"Content-Type":`application/x-www-form-urlencoded`},body:r});if(!i.ok){let e=await i.text();throw Error(`CMS API assign display to group failed (${i.status}): ${e}`)}}async unassignDisplayFromGroup(e,t){await this.ensureToken();let n=`${this.baseUrl}/api/displaygroup/${e}/display/unassign`,r=new URLSearchParams;r.append(`displayId[]`,String(t));let i=await fetch(n,{method:`POST`,headers:{Authorization:`Bearer ${this.accessToken}`,"Content-Type":`application/x-www-form-urlencoded`},body:r});if(!i.ok){let e=await i.text();throw Error(`CMS API unassign display from group failed (${i.status}): ${e}`)}}async listResolutions(){return this._listRequest(`/resolution`)}async listTemplates(e={}){return this._listRequest(`/template`,e)}async assignMediaToPlaylist(e,t){let n=Array.isArray(t)?t:[t];await this.ensureToken();let r=`${this.baseUrl}/api/playlist/library/assign/${e}`,i=new URLSearchParams;for(let e of n)i.append(`media[]`,String(e));let a=await fetch(r,{method:`POST`,headers:{Authorization:`Bearer ${this.accessToken}`,"Content-Type":`application/x-www-form-urlencoded`},body:i});if(!a.ok){let t=await a.text();throw new G(`POST`,`/playlist/library/assign/${e}`,a.status,t)}return(a.headers.get(`Content-Type`)||``).includes(`application/json`)?a.json():null}async editLayout(e,t){return this.request(`PUT`,`/layout/${e}`,t)}async copyLayout(e,t={}){return this.post(`/layout/copy/${e}`,t)}async discardLayout(e){await this.put(`/layout/discard/${e}`)}async editCampaign(e,t){return this.put(`/campaign/${e}`,t)}async getCampaign(e){return this.get(`/campaign/${e}`)}async unassignLayoutFromCampaign(e,t){await this.post(`/campaign/layout/unassign/${e}`,{layoutId:t})}async editSchedule(e,t){return this.put(`/schedule/${e}`,t)}async retireLayout(e){await this.put(`/layout/retire/${e}`)}async unretireLayout(e){await this.put(`/layout/unretire/${e}`)}async getLayoutStatus(e){return this.get(`/layout/status/${e}`)}async tagLayout(e,t){await this.post(`/layout/${e}/tag`,{tag:t.join(`,`)})}async untagLayout(e,t){await this.post(`/layout/${e}/untag`,{tag:t.join(`,`)})}async listCommands(e={}){return this._listRequest(`/command`,e)}async createCommand(e){return this.post(`/command`,e)}async editCommand(e,t){return this.put(`/command/${e}`,t)}async deleteCommand(e){await this.del(`/command/${e}`)}async deleteDisplay(e){await this.del(`/display/${e}`)}async wolDisplay(e){await this.post(`/display/wol/${e}`)}async setDefaultLayout(e,t){return this.put(`/display/${e}`,{defaultLayoutId:t})}async purgeDisplay(e){await this.post(`/display/purge/${e}`)}async listDayParts(e={}){return this._listRequest(`/daypart`,e)}async createDayPart(e){return this.post(`/daypart`,e)}async editDayPart(e,t){return this.put(`/daypart/${e}`,t)}async deleteDayPart(e){await this.del(`/daypart/${e}`)}async uploadMediaUrl(e,t){return this.post(`/library`,{url:e,name:t,type:`uri`})}async copyMedia(e){return this.post(`/library/copy/${e}`)}async downloadMedia(e){await this.ensureToken();let t=`${this.baseUrl}/api/library/download/${e}`,n=await fetch(t,{headers:{Authorization:`Bearer ${this.accessToken}`}});if(!n.ok){let t=await n.text();throw new G(`GET`,`/library/download/${e}`,n.status,t)}return n}async editMedia(e,t){return this.put(`/library/${e}`,t)}async getMediaUsage(e){return this.get(`/library/usage/${e}`)}async tidyLibrary(){await this.post(`/library/tidy`)}async listPlaylists(e={}){return this._listRequest(`/playlist`,e)}async createPlaylist(e){return this.post(`/playlist`,{name:e})}async getPlaylist(e){return this.get(`/playlist/${e}`)}async editPlaylist(e,t){return this.put(`/playlist/${e}`,t)}async deletePlaylist(e){await this.del(`/playlist/${e}`)}async reorderPlaylist(e,t){await this.ensureToken();let n=`${this.baseUrl}/api/playlist/order/${e}`,r=new URLSearchParams;for(let e of t)r.append(`widgets[]`,String(e));let i=await fetch(n,{method:`POST`,headers:{Authorization:`Bearer ${this.accessToken}`,"Content-Type":`application/x-www-form-urlencoded`},body:r});if(!i.ok){let t=await i.text();throw new G(`POST`,`/playlist/order/${e}`,i.status,t)}}async copyPlaylist(e){return this.post(`/playlist/copy/${e}`)}async setWidgetTransition(e,t,n={}){return this.put(`/playlist/widget/transition/${e}`,{type:t,...n})}async setWidgetAudio(e,t){return this.put(`/playlist/widget/${e}/audio`,t)}async removeWidgetAudio(e){await this.del(`/playlist/widget/${e}/audio`)}async setWidgetExpiry(e,t){return this.put(`/playlist/widget/${e}/expiry`,t)}async saveAsTemplate(e,t){return this.post(`/template/${e}`,t)}async getTemplate(e){return this.get(`/template/${e}`)}async deleteTemplate(e){await this.del(`/template/${e}`)}async listDatasets(e={}){return this._listRequest(`/dataset`,e)}async createDataset(e){return this.post(`/dataset`,e)}async editDataset(e,t){return this.put(`/dataset/${e}`,t)}async deleteDataset(e){await this.del(`/dataset/${e}`)}async listDatasetColumns(e){return this._listRequest(`/dataset/${e}/column`)}async createDatasetColumn(e,t){return this.post(`/dataset/${e}/column`,t)}async editDatasetColumn(e,t,n){return this.put(`/dataset/${e}/column/${t}`,n)}async deleteDatasetColumn(e,t){await this.del(`/dataset/${e}/column/${t}`)}async listDatasetData(e,t={}){return this._listRequest(`/dataset/data/${e}`,t)}async addDatasetRow(e,t){return this.post(`/dataset/data/${e}`,t)}async editDatasetRow(e,t,n){return this.put(`/dataset/data/${e}/${t}`,n)}async deleteDatasetRow(e,t){await this.del(`/dataset/data/${e}/${t}`)}async importDatasetCsv(e,t){return this.requestMultipart(`POST`,`/dataset/import/${e}`,t)}async clearDataset(e){await this.del(`/dataset/data/${e}`)}async listNotifications(e={}){return this._listRequest(`/notification`,e)}async createNotification(e){return this.post(`/notification`,e)}async editNotification(e,t){return this.put(`/notification/${e}`,t)}async deleteNotification(e){await this.del(`/notification/${e}`)}async listFolders(e={}){return this._listRequest(`/folder`,e)}async createFolder(e){return this.post(`/folder`,e)}async editFolder(e,t){return this.put(`/folder/${e}`,t)}async deleteFolder(e){await this.del(`/folder/${e}`)}async listTags(e={}){return this._listRequest(`/tag`,e)}async createTag(e){return this.post(`/tag`,e)}async editTag(e,t){return this.put(`/tag/${e}`,t)}async deleteTag(e){await this.del(`/tag/${e}`)}async tagEntity(e,t,n){await this.post(`/${e}/${t}/tag`,{tag:n.join(`,`)})}async untagEntity(e,t,n){await this.post(`/${e}/${t}/untag`,{tag:n.join(`,`)})}async dgChangeLayout(e,t){await this.post(`/displaygroup/${e}/action/changeLayout`,{layoutId:t})}async dgOverlayLayout(e,t){await this.post(`/displaygroup/${e}/action/overlayLayout`,{layoutId:t})}async dgRevertToSchedule(e){await this.post(`/displaygroup/${e}/action/revertToSchedule`)}async dgCollectNow(e){await this.post(`/displaygroup/${e}/action/collectNow`)}async dgSendCommand(e,t){await this.post(`/displaygroup/${e}/action/command`,{commandId:t})}async editDisplayGroup(e,t){return this.put(`/displaygroup/${e}`,t)}},G=class extends Error{constructor(e,t,n,r){super(`CMS API ${e} ${t} → ${n}: ${r}`),this.name=`CmsApiError`,this.method=e,this.path=t,this.status=n,this.detail=r}},K=e({CmsApiClient:()=>W,CmsApiError:()=>G,EventEmitter:()=>g,LOG_LEVELS:()=>n,PLAYER_API:()=>Y,SHELL_ONLY_KEYS:()=>I,VERSION:()=>q,applyCmsLogLevel:()=>d,computeCmsId:()=>j,config:()=>N,createLogger:()=>s,deleteByIds:()=>S,extractPwaConfig:()=>L,fetchWithRetry:()=>H,getLogLevel:()=>l,isDebug:()=>u,mapCmsLogLevel:()=>f,openIDB:()=>b,queryByIndex:()=>x,registerLogSink:()=>m,setLogLevel:()=>c,setPlayerApi:()=>X,unregisterLogSink:()=>h,warnPlatformMismatch:()=>F}),q=t.version,J=N.data?.playerApiBase||`/player/api/v2`,Y=J;function X(e){J=e.replace(/\/+$/,``),Y=J}export{S as a,g as c,u as d,m as f,N as i,d as l,K as n,b as o,H as r,x as s,Y as t,s as u};
+//# sourceMappingURL=src-B-j3XW3-.js.map