solid-logic 4.0.8-3 → 5.0.0

package/dist/solid-logic.min.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"solid-logic.min.js","mappings":"CAAA,SAAAA,EAAAC,GACA,iBAAAC,SAAA,iBAAAC,OACAA,OAAAD,QAAAD,EAAAG,QAAA,SACA,mBAAAC,QAAAA,OAAAC,IACAD,OAAA,sBAAAJ,GACA,iBAAAC,QACAA,QAAA,WAAAD,EAAAG,QAAA,SAEAJ,EAAA,WAAAC,EAAAD,EAAA,KACC,CATD,CASCO,KAAAC,uBCMD,MAAAC,EAAA,CACAC,IAAA,iCACAC,IAAA,gCACAC,GAAA,yCACAC,SAAA,sCACAC,IAAA,sCACAC,IAAA,0DACAC,KAAA,kCACAC,QAAA,8CACAC,GAAA,mCACAC,IAAA,4BACAC,KAAA,gCACAC,KAAA,6BACAC,IAAA,2CACAC,IAAA,gCACAC,GAAA,oCACAC,KAAA,mCACAC,MAAA,oCACAC,OAAA,yCACAC,IAAA,4BACAC,KAAA,mCACAC,IAAA,sCACAC,QAAA,oCACAC,GAAA,+BACAC,IAAA,4BACAC,IAAA,iCACAC,IAAA,gCACAC,MAAA,kCACAC,KAAA,6BACAC,IAAA,qCACAC,GAAA,0CACAC,KAAA,iCACAC,IAAA,8CACAC,KAAA,wCACAC,IAAA,2BACAC,MAAA,qCACAC,OAAA,qBACAC,KAAA,2BACAC,KAAA,uCACAC,MAAA,oCACAC,MAAA,kCACAC,KAAA,mCACAC,IAAA,mCACAC,OAAA,mCACAC,GAAA,2BACAC,KAAA,8BACAC,MAAA,mCACAC,GAAA,qCACAC,IAAA,qCAkBAtD,EAAAD,QAZA,SAAAuC,EAAA,CAAwBiB,UAAAC,GAAAA,IACxB,MAAAC,EAAA,GACA,UAAAC,KAAApD,EAAA,CACA,MAAAqD,EAAArD,EAAAoD,GACAD,EAAAC,GAAA,SAAAE,EAAA,IACA,OAAAtB,EAAAiB,UAAAI,EAAAC,EACA,CACA,CAEA,OAAAH,CACA,wFC/EAzD,EAAAD,QAAAM,ICCAwD,EAAA,GAGA,SAAAC,EAAAC,GAEA,IAAAC,EAAAH,EAAAE,GACA,QAAAE,IAAAD,EACA,OAAAA,EAAAjE,QAGA,IAAAC,EAAA6D,EAAAE,GAAA,CAGAhE,QAAA,IAOA,OAHAmE,EAAAH,GAAA/D,EAAAA,EAAAD,QAAA+D,GAGA9D,EAAAD,OACA,CAGA+D,EAAAK,EAAAD,ECxBAJ,EAAAM,EAAApE,IACA,IAAAqE,EAAArE,GAAAA,EAAAsE,WACA,IAAAtE,EAAA,QACA,MAEA,OADA8D,EAAAS,EAAAF,EAAA,CAAiCG,EAAAH,IACjCA,GCLAP,EAAAS,EAAA,CAAAxE,EAAA0E,KACA,QAAAC,KAAAD,EACAX,EAAAa,EAAAF,EAAAC,KAAAZ,EAAAa,EAAA5E,EAAA2E,IACAE,OAAAC,eAAA9E,EAAA2E,EAAA,CAAyCI,YAAA,EAAAC,IAAAN,EAAAC,MCJzCZ,EAAAkB,EAAA,WACA,oBAAAC,WAAA,OAAAA,WACA,IACA,OAAA7E,MAAA,IAAA8E,SAAA,gBACA,CAAG,MAAAC,GACH,oBAAAC,OAAA,OAAAA,MACA,CACC,CAPD,GCAAtB,EAAAa,EAAA,CAAAU,EAAAC,IAAAV,OAAAW,UAAAC,eAAAC,KAAAJ,EAAAC,GCCAxB,EAAA4B,EAAA3F,IACA,oBAAA4F,QAAAA,OAAAC,aACAhB,OAAAC,eAAA9E,EAAA4F,OAAAC,YAAA,CAAuDC,MAAA,WAEvDjB,OAAAC,eAAA9E,EAAA,cAAgD8F,OAAA,KCLhD/B,EAAAgC,EAAA,GCAAhC,EAAAiC,EAAA,oBAAAC,UAAAA,SAAAC,SAAAC,KAAAC,SAAAC,ucCCO,SAASzE,KAAO0E,GACrBC,QAAQ3E,OAAO0E,EACjB,CAEO,SAASE,KAAQF,GACtBC,QAAQC,QAAQF,EAClB,yDCPA,IAAAG,EAAAC,OACA,MAAAC,EAAAhC,GAAAA,aAAAiC,UAMA,IAAAC,EAJAC,MAAAC,EAAAC,KACA,MAAAC,EAAA,OAAgCF,EAAAG,OAAA,KAChC,WAAAC,iBAAAV,EAAAW,OAAAC,OAAAJ,EAAAD,KAIA,MAAAM,EAAA,IAAAC,YACAC,EAAA,IAAAC,YACA,SAAAC,KAAAC,GACA,MAAAC,EAAAD,EAAAE,OAAA,CAAAC,GAAwCC,YAAQD,EAAAC,EAAA,GAChDC,EAAA,IAAAb,WAAAS,GACA,IAAAK,EAAA,EACA,UAAAC,KAAAP,EACAK,EAAAG,IAAAD,EAAAD,GACAA,GAAAC,EAAAH,OAEA,OAAAC,CACA,CAEA,MAYAI,EAAAC,GAZA,CAAAA,IACA,IAAAC,EAAAD,EACA,iBAAAC,IACAA,EAAAhB,EAAAc,OAAAE,IAEA,MACAC,EAAA,GACA,QAAAN,EAAA,EAAoBA,EAAAK,EAAAP,OAAsBE,GAF1C,MAGAM,EAAAC,KAAAC,OAAAC,aAAAC,MAAA,KAAAL,EAAAM,SAAAX,EAAAA,EAHA,SAKA,OAAAY,KAAAN,EAAAO,KAAA,MAGAC,CAAAV,GAAAW,QAAA,SAAAA,QAAA,WAAAA,QAAA,WAUAC,EAAAZ,IACA,IAAAa,EAAAb,EACAa,aAAA/B,aACA+B,EAAA1B,EAAA2B,OAAAD,IAEAA,EAAAA,EAAAF,QAAA,UAAAA,QAAA,UAAAA,QAAA,UACA,IACA,MAfA,CAAAE,IACA,MAAAE,EAAAC,KAAAH,GACAI,EAAA,IAAAnC,WAAAiC,EAAArB,QACA,QAAAE,EAAA,EAAoBA,EAAAmB,EAAArB,OAAmBE,IACvCqB,EAAArB,GAAAmB,EAAAG,WAAAtB,GAEA,OAAAqB,GASAE,CAAAN,EACA,CACA,MACA,UAAAO,UAAA,oDACA,GAGA,MAAAC,UAAAC,MACA,WAAAC,CAAAC,EAAAC,GACAC,MAAAF,EAAAC,GACAzJ,KAAA2J,KAAA,mBACA3J,KAAA4J,KAAA5J,KAAAuJ,YAAAK,KACAN,MAAAO,oBAAA7J,KAAAA,KAAAuJ,YACA,EAEAF,EAAAM,KAAA,mBACA,MAAAG,UAAAT,EACA,WAAAE,CAAAC,EAAAO,EAAAC,EAAA,cAAAC,EAAA,eACAP,MAAAF,EAAA,CAAyBU,MAAA,CAASF,QAAAC,SAAAF,aAClC/J,KAAA2J,KAAA,kCACA3J,KAAAgK,MAAAA,EACAhK,KAAAiK,OAAAA,EACAjK,KAAA+J,QAAAA,CACA,EAEAD,EAAAH,KAAA,kCACA,MAAAQ,UAAAd,EACA,WAAAE,CAAAC,EAAAO,EAAAC,EAAA,cAAAC,EAAA,eACAP,MAAAF,EAAA,CAAyBU,MAAA,CAASF,QAAAC,SAAAF,aAClC/J,KAAA2J,KAAA,kBACA3J,KAAAgK,MAAAA,EACAhK,KAAAiK,OAAAA,EACAjK,KAAA+J,QAAAA,CACA,EAEAI,EAAAR,KAAA,kBACA,MAAAS,UAAAf,EACA,WAAAE,GACAG,SAAAW,WACArK,KAAA2J,KAAA,0BACA,EAEAS,EAAAT,KAAA,2BACA,MAAAW,UAAAjB,EACA,WAAAE,GACAG,SAAAW,WACArK,KAAA2J,KAAA,wBACA,EAEAW,EAAAX,KAAA,0BACA,cAAAN,EACA,WAAAE,CAAAC,EAAA,8BAAAC,GACAC,MAAAF,EAAAC,GACAzJ,KAAA2J,KAAA,2BACA,IAEAA,KAAA,6BACA,cAAAN,EACA,WAAAE,GACAG,SAAAW,WACArK,KAAA2J,KAAA,iBACA,IAEAA,KAAA,kBACA,MAAAY,UAAAlB,EACA,WAAAE,GACAG,SAAAW,WACArK,KAAA2J,KAAA,iBACA,EAEAY,EAAAZ,KAAA,kBACA,MAAAa,UAAAnB,EACA,WAAAE,GACAG,SAAAW,WACArK,KAAA2J,KAAA,iBACA,EAEAa,EAAAb,KAAA,kBACA,MAAAc,UAAApB,EACA,WAAAE,GACAG,SAAAW,WACArK,KAAA2J,KAAA,iBACA,EAEAc,EAAAd,KAAA,kBACA,MAAAe,UAAArB,EACA,WAAAE,GACAG,SAAAW,WACArK,KAAA2J,KAAA,kBACA,EAEAe,EAAAf,KAAA,mBACA,MAAAgB,UAAAtB,EACA,WAAAE,CAAAC,EAAA,kDAAAC,GACAC,MAAAF,EAAAC,GACAzJ,KAAA2J,KAAA,0BACA,EAEAgB,EAAAhB,KAAA,2BACA,MAAAiB,UAAAvB,EACA,WAAAE,CAAAC,EAAA,uDAAAC,GACAC,MAAAF,EAAAC,GACAzJ,KAAA2J,KAAA,iCACA,EAEAiB,EAAAjB,KAAA,kCACA,MAAAkB,UAAAxB,EACA,WAAAE,CAAAC,EAAA,oBAAAC,GACAC,MAAAF,EAAAC,GACAzJ,KAAA2J,KAAA,kBACA,EAEAkB,EAAAlB,KAAA,mBACA,MAAAmB,UAAAzB,EACA,WAAAE,CAAAC,EAAA,gCAAAC,GACAC,MAAAF,EAAAC,GACAzJ,KAAA2J,KAAA,uCACA,EAIA,SAAAoB,EAAAnB,EAAA1E,EAAA,kBACA,WAAAkE,UAAA,kDAA2ElE,aAAgB0E,IAC3F,CACA,SAAAoB,EAAAtE,EAAAkD,GACA,OAAAlD,EAAAkD,OAAAA,CACA,CACA,SAAAqB,EAAAC,GACA,OAAAC,SAAAD,EAAAtB,KAAA/C,MAAA,MACA,CA6BA,SAAAuE,EAAA9G,EAAA+G,KAAAC,GACA,OAAAD,GACA,YACA,YACA,aACA,IAAAL,EAAA1G,EAAAoC,UAAA,QACA,MAAAqE,EAAA,QACA,MAAAQ,EAAAJ,SAAAE,EAAAxE,MAAA,OAEA,GADAoE,EAAA3G,EAAAoC,UAAAwE,QACAK,EACA,MAAAR,EAAA,OAAsCQ,IAAS,kBAC/C,KACA,CACA,YACA,YACA,aACA,IAAAP,EAAA1G,EAAAoC,UAAA,qBACA,MAAAqE,EAAA,qBACA,MAAAQ,EAAAJ,SAAAE,EAAAxE,MAAA,OAEA,GADAoE,EAAA3G,EAAAoC,UAAAwE,QACAK,EACA,MAAAR,EAAA,OAAsCQ,IAAS,kBAC/C,KACA,CACA,YACA,YACA,aACA,IAAAP,EAAA1G,EAAAoC,UAAA,WACA,MAAAqE,EAAA,WACA,MAAAQ,EAAAJ,SAAAE,EAAAxE,MAAA,OAEA,GADAoE,EAAA3G,EAAAoC,UAAAwE,QACAK,EACA,MAAAR,EAAA,OAAsCQ,IAAS,kBAC/C,KACA,CACA,YACA,eAAAjH,EAAAoC,UAAAkD,MAAA,UAAAtF,EAAAoC,UAAAkD,KACA,MAAAmB,EAAA,oBAEA,MAEA,cACA,IAAAC,EAAA1G,EAAAoC,UAAA,WACA,MAAAqE,EAAA,WACA,MAEA,YACA,YACA,aACA,IAAAC,EAAA1G,EAAAoC,UAAA,SACA,MAAAqE,EAAA,SACA,MAAAQ,EA/EA,SAAAF,GACA,OAAAA,GACA,YACA,cACA,YACA,cACA,YACA,cACA,QACA,UAAA/B,MAAA,eAEA,CAoEAkC,CAAAH,GAEA,GADA/G,EAAAoC,UAAA+E,aACAF,EACA,MAAAR,EAAAQ,EAAA,wBACA,KACA,CACA,QACA,UAAAnC,UAAA,8CA1EA,SAAA9E,EAAAgH,GACA,GAAAA,EAAA5D,SAAA4D,EAAAI,KAAAH,GAAAjH,EAAAgH,OAAAK,SAAAJ,IAAA,CACA,IAAAK,EAAA,sEACA,GAAAN,EAAA5D,OAAA,GACA,MAAAmE,EAAAP,EAAAQ,MACAF,GAAA,UAA6BN,EAAA7C,KAAA,aAAyBoD,IACtD,MACA,IAAAP,EAAA5D,OACAkE,GAAA,UAA6BN,EAAA,SAAgBA,EAAA,MAG7CM,GAAA,GAAsBN,EAAA,MAEtB,UAAAlC,UAAAwC,EACA,CACA,CA6DAG,CAAAzH,EAAAgH,EACA,CAEA,SAAA9B,EAAAoC,EAAAI,KAAAC,GAEA,IADAA,EAAAA,EAAAC,OAAAC,UACAzE,OAAA,GACA,MAAAmE,EAAAI,EAAAH,MACAF,GAAA,eAA8BK,EAAAxD,KAAA,aAAwBoD,IACtD,MACA,IAAAI,EAAAvE,OACAkE,GAAA,eAA8BK,EAAA,SAAeA,EAAA,MAG7CL,GAAA,WAA0BK,EAAA,MAa1B,OAXA,MAAAD,EACAJ,GAAA,aAA4BI,IAE5B,mBAAAA,GAAAA,EAAApC,KACAgC,GAAA,sBAAqCI,EAAApC,OAErC,iBAAAoC,GAAA,MAAAA,GACAA,EAAAzC,aAAAK,OACAgC,GAAA,4BAA+CI,EAAAzC,YAAAK,QAG/CgC,CACA,CA9HAd,EAAAnB,KAAA,wCA+HA,IAAAyC,EAAA,CAAAJ,KAAAC,IACAzC,EAAA,eAAAwC,KAAAC,GAEA,SAAAI,EAAAhB,EAAAW,KAAAC,GACA,OAAAzC,EAAA,eAAkC6B,uBAAKW,KAAAC,EACvC,CAEA,IAAAK,EAAAhI,KACAgC,EAAAhC,IAGA,cAAAA,IAAAiB,OAAAC,aAEA,MAAAyG,EAAA,cAuBA,IAAAM,EArBA,IAAAC,KACA,MAAAC,EAAAD,EAAAN,OAAAC,SACA,OAAAM,EAAA/E,QAAA,IAAA+E,EAAA/E,OACA,SAEA,IAAAD,EACA,UAAAiF,KAAAD,EAAA,CACA,MAAAE,EAAAnI,OAAAoI,KAAAF,GACA,GAAAjF,GAAA,IAAAA,EAAAF,KAIA,UAAAsF,KAAAF,EAAA,CACA,GAAAlF,EAAAqF,IAAAD,GACA,SAEApF,EAAAsF,IAAAF,EACA,MARApF,EAAA,IAAAuF,IAAAL,EASA,CACA,UAOA,SAAAM,EAAAjF,GACA,GAHA,iBADAvC,EAIAuC,IAHA,OAAAvC,GAGA,oBAAAjB,OAAAW,UAAA+H,SAAA7H,KAAA2C,GACA,SALA,IAAAvC,EAOA,UAAAjB,OAAA2I,eAAAnF,GACA,SAEA,IAAAoF,EAAApF,EACA,YAAAxD,OAAA2I,eAAAC,IACAA,EAAA5I,OAAA2I,eAAAC,GAEA,OAAA5I,OAAA2I,eAAAnF,KAAAoF,CACA,CAEA,IAAAC,EAAA,CAAAhC,EAAA/G,KACA,GAAA+G,EAAAiC,WAAA,OAAAjC,EAAAiC,WAAA,OACA,MAAAC,cAAgBA,GAAgBjJ,EAAAoC,UAChC,oBAAA6G,GAAAA,EAAA,KACA,UAAAnE,UAAA,GAAmCiC,yDAEnC,GAGA,SAAAmC,EAAAlJ,GACA,OAAA2I,EAAA3I,IAAA,iBAAAA,EAAAmJ,GACA,CAgHA,IAAAC,EAfAjH,MAAAkH,IACA,IAAAA,EAAAtC,IACA,UAAAjC,UAAA,4DAEA,MAAA1C,UAAYA,EAAAkH,UAAAA,GA1FZ,SAAAD,GACA,IAAAjH,EACAkH,EACA,OAAAD,EAAAF,KACA,UACA,OAAAE,EAAAtC,KACA,YACA,YACA,YACA3E,EAAA,CAAkCkD,KAAA,UAAAsB,KAAA,OAA8ByC,EAAAtC,IAAAxE,OAAA,MAChE+G,EAAAD,EAAAxJ,EAAA,oBACA,MACA,YACA,YACA,YACAuC,EAAA,CAAkCkD,KAAA,oBAAAsB,KAAA,OAAwCyC,EAAAtC,IAAAxE,OAAA,MAC1E+G,EAAAD,EAAAxJ,EAAA,oBACA,MACA,eACA,mBACA,mBACA,mBACAuC,EAAA,CACAkD,KAAA,WACAsB,KAAA,OAAqCC,SAAAwC,EAAAtC,IAAAxE,OAAA,aAErC+G,EAAAD,EAAAxJ,EAAA,8CACA,MACA,QACA,UAAAmG,EAAA,gEAEA,MAEA,SACA,OAAAqD,EAAAtC,KACA,YACA3E,EAAA,CAAkCkD,KAAA,QAAA6B,WAAA,SAClCmC,EAAAD,EAAAxJ,EAAA,oBACA,MACA,YACAuC,EAAA,CAAkCkD,KAAA,QAAA6B,WAAA,SAClCmC,EAAAD,EAAAxJ,EAAA,oBACA,MACA,YACAuC,EAAA,CAAkCkD,KAAA,QAAA6B,WAAA,SAClCmC,EAAAD,EAAAxJ,EAAA,oBACA,MACA,cACA,qBACA,qBACA,qBACAuC,EAAA,CAAkCkD,KAAA,OAAA6B,WAAAkC,EAAAE,KAClCD,EAAAD,EAAAxJ,EAAA,kBACA,MACA,QACA,UAAAmG,EAAA,gEAEA,MAEA,UACA,OAAAqD,EAAAtC,KACA,cACA3E,EAAA,CAAkCkD,KAAA,WAClCgE,EAAAD,EAAAxJ,EAAA,oBACA,MACA,YACAuC,EAAA,CAAkCkD,KAAA+D,EAAAE,KAClCD,EAAAD,EAAAxJ,EAAA,oBACA,MACA,cACA,qBACA,qBACA,qBACAuC,EAAA,CAAkCkD,KAAA+D,EAAAE,KAClCD,EAAAD,EAAAxJ,EAAA,kBACA,MACA,QACA,UAAAmG,EAAA,gEAEA,MAEA,QACA,UAAAA,EAAA,+DAEA,OAAa5D,YAAAkH,YACb,CAKmCE,CAAAH,GACnCI,EAAA,CACArH,EACAiH,EAAAK,MAAA,EACAL,EAAAM,SAAAL,GAEAM,EAAA,IAAsBP,GAGtB,cAFAO,EAAA7C,WACA6C,EAAAC,IACA/H,EAAAW,OAAAqH,UAAA,MAAAF,KAAAH,IAIA,MAAAM,EAAAC,GAAA1F,EAAA0F,GACA,IAAAC,EACAC,EACA,MAAAC,EAAAnK,GACA,cAAAA,IAAAiB,OAAAC,aAEAkJ,EAAAjI,MAAAkI,EAAArK,EAAAqJ,EAAAtC,EAAAuD,GAAA,KACA,IAAAC,EAAAF,EAAAhK,IAAAL,GACA,GAAAuK,IAAAxD,GACA,OAAAwD,EAAAxD,GAEA,MAAAyD,QAAApB,EAAA,IAA0CC,EAAAtC,QAS1C,OARAuD,GACApK,OAAAoK,OAAAtK,GACAuK,EAIAA,EAAAxD,GAAAyD,EAHAH,EAAA7G,IAAAxD,EAAA,CAAyB+G,CAAAA,GAAAyD,IAKzBA,GA4CA,IAAAC,EA1CA,CAAAzK,EAAA+G,KACA,GAAAoD,EAAAnK,GAAA,CACA,IAAAqJ,EAAArJ,EAAA0K,OAAA,CAA+BC,OAAA,QAO/B,cANAtB,EAAAxJ,SACAwJ,EAAAuB,UACAvB,EAAAwB,UACAxB,EAAAjI,SACAiI,EAAAyB,SACAzB,EAAA0B,GACA1B,EAAAW,EACAD,EAAAV,EAAAW,IAEAE,IAAAA,EAAA,IAAAc,SACAZ,EAAAF,EAAAlK,EAAAqJ,EAAAtC,GACA,CACA,GAAAmC,EAAAlJ,GAAA,CACA,GAAAA,EAAAgK,EACA,OAAA1F,EAAAtE,EAAAgK,GACAE,IAAAA,EAAA,IAAAc,SAEA,OADAZ,EAAAF,EAAAlK,EAAAA,EAAA+G,GAAA,EAEA,CACA,OAAA/G,GAoBAyK,EAlBA,CAAAzK,EAAA+G,KACA,GAAAoD,EAAAnK,GAAA,CACA,IAAAqJ,EAAArJ,EAAA0K,OAAA,CAA+BC,OAAA,QAC/B,OAAAtB,EAAAW,EACAD,EAAAV,EAAAW,IAEAC,IAAAA,EAAA,IAAAe,SACAZ,EAAAH,EAAAjK,EAAAqJ,EAAAtC,GACA,CACA,GAAAmC,EAAAlJ,GAAA,CACA,GAAAA,EAAAgK,EACA,OAAA1F,EAAAtE,EAAAgK,GACAC,IAAAA,EAAA,IAAAe,SAEA,OADAZ,EAAAH,EAAAjK,EAAAA,EAAA+G,GAAA,EAEA,CACA,OAAA/G,GAIAmC,eAAA8I,EAAA5B,EAAAtC,GACA,IAAA4B,EAAAU,GACA,UAAAvE,UAAA,yBAGA,OADAiC,IAAAA,EAAAsC,EAAAtC,KACAsC,EAAAF,KACA,UACA,oBAAAE,EAAAW,IAAAX,EAAAW,EACA,UAAAlF,UAAA,2CAEA,OAAAR,EAAA+E,EAAAW,GACA,UACA,WAAAX,QAAA9J,IAAA8J,EAAA6B,IACA,UAAAlF,EAAA,sEAEA,SACA,UACA,OAAAoD,EAAA,IAAiCC,EAAAtC,QACjC,QACA,UAAAf,EAAA,gDAEA,CAEA,MAAAmF,EAAAnL,GAAAA,IAAAiB,OAAAC,aACAkK,EAAA,CAAArE,EAAA/G,EAAAqL,KACA,QAAA9L,IAAAS,EAAA6J,KAAA,QAAA7J,EAAA6J,IACA,UAAA/E,UAAA,oEAEA,QAAAvF,IAAAS,EAAA2J,UAAA,IAAA3J,EAAA2J,QAAAtC,WAAAgE,GACA,UAAAvG,UAAA,yEAAqGuG,KAErG,QAAA9L,IAAAS,EAAA+G,KAAA/G,EAAA+G,MAAAA,EACA,UAAAjC,UAAA,gEAA4FiC,KAE5F,UAEAuE,EAAA,CAAAvE,EAAA/G,EAAAqL,EAAAE,KACA,KAAAvL,aAAAwC,YAAA,CAEA,GAAA+I,GAAArC,EAAAlJ,GAAA,CACA,GArNA,SAAAA,GACA,OAAAkJ,EAAAlJ,IAAA,QAAAA,EAAAmJ,KAAA,iBAAAnJ,EAAAgK,CACA,CAmNAwB,CAAAxL,IAAAoL,EAAArE,EAAA/G,EAAAqL,GACA,OACA,UAAAvG,UAAA,0HACA,CACA,IAAAkD,EAAAhI,GACA,UAAA8E,UAAAiD,EAAAhB,EAAA/G,KAAA2H,EAAA,aAAA4D,EAAA,sBAEA,cAAAvL,EAAAyL,KACA,UAAA3G,UAAA,GAA+BqG,EAAAnL,iEAV/B,GA6CA,SAAA0L,EAAAH,EAAAxE,EAAA/G,EAAAqL,GACAtE,EAAAiC,WAAA,OACA,QAAAjC,GACAA,EAAAiC,WAAA,UACA,qBAAgB2C,KAAA5E,GAEhBuE,EAAAvE,EAAA/G,EAAAqL,EAAAE,GAtCA,EAAAxE,EAAA/G,EAAAqL,EAAAE,KACA,GAAAA,GAAArC,EAAAlJ,GACA,OAAAqL,GACA,WACA,GA1OA,SAAArL,GACA,cAAAA,EAAAmJ,KAAA,iBAAAnJ,EAAAH,CACA,CAwOA+L,CAAA5L,IAAAoL,EAAArE,EAAA/G,EAAAqL,GACA,OACA,UAAAvG,UAAA,oDACA,aACA,GA3OA,SAAA9E,GACA,cAAAA,EAAAmJ,UAAA,IAAAnJ,EAAAH,CACA,CAyOAgM,CAAA7L,IAAAoL,EAAArE,EAAA/G,EAAAqL,GACA,OACA,UAAAvG,UAAA,mDAGA,IAAAkD,EAAAhI,GACA,UAAA8E,UAAAiD,EAAAhB,EAAA/G,KAAA2H,EAAA4D,EAAA,sBAEA,cAAAvL,EAAAyL,KACA,UAAA3G,UAAA,GAA+BqG,EAAAnL,uEAE/B,YAAAqL,GAAA,WAAArL,EAAAyL,KACA,UAAA3G,UAAA,GAA+BqG,EAAAnL,2EAE/B,eAAAqL,GAAA,WAAArL,EAAAyL,KACA,UAAA3G,UAAA,GAA+BqG,EAAAnL,8EAE/B,GAAAA,EAAAoC,WAAA,WAAAiJ,GAAA,YAAArL,EAAAyL,KACA,UAAA3G,UAAA,GAA+BqG,EAAAnL,4EAE/B,GAAAA,EAAAoC,WAAA,YAAAiJ,GAAA,YAAArL,EAAAyL,KACA,UAAA3G,UAAA,GAA+BqG,EAAAnL,8EAY/B8L,CAAA/E,EAAA/G,EAAAqL,EAAAE,EAEA,CACAG,EAAAK,UAAAxM,GAAA,GACA,MAAAyM,EAAAN,EAAAK,UAAAxM,GAAA,GAEA,SAAA0M,EAAAC,EAAAC,EAAAC,EAAAC,EAAAC,GACA,QAAA/M,IAAA+M,EAAAC,WAAAhN,IAAA8M,GAAAE,KACA,UAAAL,EAAA,kEAEA,IAAAG,QAAA9M,IAAA8M,EAAAE,KACA,WAAA7D,IAEA,IAAA8D,MAAAC,QAAAJ,EAAAE,OACA,IAAAF,EAAAE,KAAAnJ,QACAiJ,EAAAE,KAAAnF,KAAA1D,GAAA,iBAAAA,GAAA,IAAAA,EAAAN,QACA,UAAA8I,EAAA,yFAEA,IAAAQ,EAEAA,OADAnN,IAAA6M,EACA,IAAAO,IAAA,IAAAzM,OAAA0M,QAAAR,MAAAD,EAAAS,YAGAT,EAEA,UAAA5D,KAAA8D,EAAAE,KAAA,CACA,IAAAG,EAAAlE,IAAAD,GACA,UAAAvC,EAAA,+BAAsEuC,wBAEtE,QAAAhJ,IAAA+M,EAAA/D,GACA,UAAA2D,EAAA,+BAAyD3D,iBAEzD,GAAAmE,EAAArM,IAAAkI,SAAAhJ,IAAA8M,EAAA9D,GACA,UAAA2D,EAAA,+BAAyD3D,iCAEzD,CACA,WAAAG,IAAA2D,EAAAE,KACA,CAYA,IAAAM,GAVA,CAAAC,EAAAC,KACA,QAAAxN,IAAAwN,KACAP,MAAAC,QAAAM,IAAAA,EAAA3F,KAAA4F,GAAA,iBAAAA,IACA,UAAAlI,UAAA,IAAgCgI,yCAEhC,GAAAC,EAGA,WAAArE,IAAAqE,IAoBA,IAAAE,GAhBA9K,MAAAnC,IACA,GAAAA,aAAAwC,WACA,OACA2G,IAAA,MACAa,EAAAvG,EAAAzD,IAGA,IAAAgC,EAAAhC,GACA,UAAA8E,UAAAgD,EAAA9H,KAAA2H,EAAA,eAEA,IAAA3H,EAAAkN,YACA,UAAApI,UAAA,yDAEA,MAAA4E,IAAYA,EAAAC,QAAAA,EAAA5C,IAAAA,EAAA8C,IAAAA,KAAAR,SAAiCvH,EAAAW,OAAA0K,UAAA,MAAAnN,GAC7C,OAAAqJ,GAIAlH,eAAAiL,GAAApN,GACA,OAAAiN,GAAAjN,EACA,CAEA,SAAAqN,GAAAtG,EAAA3E,GACA,MAAAwE,EAAA,OAAwBG,EAAAxE,OAAA,KACxB,OAAAwE,GACA,YACA,YACA,YACA,OAAqBH,OAAAtB,KAAA,QACrB,YACA,YACA,YACA,OAAqBsB,OAAAtB,KAAA,UAAAgI,WAAAvG,EAAAxE,OAAA,OACrB,YACA,YACA,YACA,OAAqBqE,OAAAtB,KAAA,qBACrB,YACA,YACA,YACA,OAAqBsB,OAAAtB,KAAA,QAAA6B,WAAA/E,EAAA+E,YACrB,cACA,OAAqB7B,KAAA,WACrB,YACA,OAAqBA,KAAAlD,EAAAkD,MACrB,QACA,UAAAU,EAAA,OAA8Ce,gEAE9C,CAEA5E,eAAAoL,GAAAxG,EAAA/G,EAAAqL,GAOA,GANA,SAAAA,IACArL,QAAAyK,EAAAzK,EAAA+G,IAEA,WAAAsE,IACArL,QAAAyK,EAAAzK,EAAA+G,IAEA/E,EAAAhC,GAEA,OADA8G,EAAA9G,EAAA+G,EAAAsE,GACArL,EAEA,GAAAA,aAAAwC,WAAA,CACA,IAAAuE,EAAAiC,WAAA,MACA,UAAAlE,UAAAgD,EAAA9H,KAAA2H,IAEA,OAAA7F,EAAAW,OAAAqH,UAAA,MAAA9J,EAAA,CAAuD4G,KAAA,OAAaG,EAAAxE,OAAA,KAAc+C,KAAA,SAAiB,GAAA+F,GACnG,CACA,UAAAvG,UAAAgD,EAAA9H,KAAA2H,EAAA,6BACA,CAaA,IAAA6F,GAXArL,MAAA4E,EAAA/G,EAAAyN,EAAApL,KACA,MAAAmI,QAAA+C,GAAAxG,EAAA/G,EAAA,UACA+I,EAAAhC,EAAAyD,GACA,MAAApI,EAAAiL,GAAAtG,EAAAyD,EAAApI,WACA,IACA,aAAAN,EAAAW,OAAAiL,OAAAtL,EAAAoI,EAAAiD,EAAApL,EACA,CACA,MACA,QACA,GAoHAF,eAAAwL,GAAAC,EAAA5N,EAAAmF,GAIA,GAHAyI,aAAApL,aACAoL,EAAA/K,EAAA2B,OAAAoJ,IAEA,iBAAAA,EACA,UAAA3H,EAAA,8CAEA,MAAY,EAAAoG,EAAA,EAAA5G,EAAA,EAAAgI,EAAArK,OAAAA,GAAuDwK,EAAAC,MAAA,KACnE,OAAAzK,EACA,UAAA6C,EAAA,uBAEA,MAAA6H,QA3HA3L,eAAAyL,EAAA5N,EAAAmF,GACA,IAAAwD,EAAAiF,GACA,UAAA3H,EAAA,mCAEA,QAAA1G,IAAAqO,EAAAG,gBAAAxO,IAAAqO,EAAAxF,OACA,UAAAnC,EAAA,yEAEA,QAAA1G,IAAAqO,EAAAG,WAAA,iBAAAH,EAAAG,UACA,UAAA9H,EAAA,uCAEA,QAAA1G,IAAAqO,EAAAnI,QACA,UAAAQ,EAAA,uBAEA,oBAAA2H,EAAAH,UACA,UAAAxH,EAAA,2CAEA,QAAA1G,IAAAqO,EAAAxF,SAAAO,EAAAiF,EAAAxF,QACA,UAAAnC,EAAA,yCAEA,IAAA+H,EAAA,GACA,GAAAJ,EAAAG,UACA,IACA,MAAA1B,EAAA/H,EAAAsJ,EAAAG,WACAC,EAAAC,KAAAC,MAAArL,EAAA2B,OAAA6H,GACA,CACA,MACA,UAAApG,EAAA,kCACA,CAEA,IAAAgC,EAAA+F,EAAAJ,EAAAxF,QACA,UAAAnC,EAAA,6EAEA,MAAAqG,EAAA,IACA0B,KACAJ,EAAAxF,QAGA,IAAA+F,GAAA,EACA,GAFAlC,EAAAhG,EAAA,IAAA0G,IAAA,cAAAxH,GAAAoH,KAAAyB,EAAA1B,GAEA9D,IAAA,SACA2F,EAAAH,EAAAG,IACA,kBAAAA,GACA,UAAAlI,EAAA,2EAGA,MAAAc,IAAYA,GAAMuF,EAClB,oBAAAvF,IAAAA,EACA,UAAAd,EAAA,6DAEA,MAAA8G,EAAA5H,GAAA0H,GAAA,aAAA1H,EAAA4H,YACA,GAAAA,IAAAA,EAAAvE,IAAAzB,GACA,UAAAjB,EAAA,wDAEA,GAAAqI,GACA,oBAAAP,EAAAnI,QACA,UAAAQ,EAAA,qCAGA,oBAAA2H,EAAAnI,WAAAmI,EAAAnI,mBAAAjD,YACA,UAAAyD,EAAA,0DAEA,IAAAmI,GAAA,EACA,mBAAApO,GACAA,QAAAA,EAAAgO,EAAAJ,GACAQ,GAAA,EACApC,EAAAjF,EAAA/G,EAAA,UACAkJ,EAAAlJ,KACAA,QAAAiL,EAAAjL,EAAA+G,KAIAiF,EAAAjF,EAAA/G,EAAA,UAEA,MAAAqC,EAAAU,EAAAJ,EAAAc,OAAAmK,EAAAG,WAAA,IAAApL,EAAAc,OAAA,sBAAAmK,EAAAnI,QAAA9C,EAAAc,OAAAmK,EAAAnI,SAAAmI,EAAAnI,SACA,IAAAgI,EAWAhI,EAVA,IACAgI,EAAAnJ,EAAAsJ,EAAAH,UACA,CACA,MACA,UAAAxH,EAAA,2CACA,CAEA,UADAuH,GAAAzG,EAAA/G,EAAAyN,EAAApL,GAEA,UAAAmE,EAGA,GAAA2H,EACA,IACA1I,EAAAnB,EAAAsJ,EAAAnI,QACA,CACA,MACA,UAAAQ,EAAA,yCACA,MAGAR,EADA,iBAAAmI,EAAAnI,QACA9C,EAAAc,OAAAmK,EAAAnI,SAGAmI,EAAAnI,QAEA,MAAA4I,EAAA,CAAqB5I,WAOrB,YANAlG,IAAAqO,EAAAG,YACAM,EAAAhC,gBAAA2B,QAEAzO,IAAAqO,EAAAxF,SACAiG,EAAAC,kBAAAV,EAAAxF,QAEAgG,EACA,IAAiBC,EAAArO,OAEjBqO,CACA,CAaAE,CAAA,CAA6C9I,UAAAsI,UAAA1B,EAAAoB,aAAgDzN,EAAAmF,GAC7FkJ,EAAA,CAAqB5I,QAAAqI,EAAArI,QAAA4G,gBAAAyB,EAAAzB,iBACrB,yBAAArM,EACA,IAAiBqO,EAAArO,IAAA8N,EAAA9N,KAEjBqO,CACA,CAEA,IAAAG,GAAAC,GAAAC,KAAAC,MAAAF,EAAAG,UAAA,KAEA,MAEAC,GAAAC,MAGAC,GAAA,oIACA,IAAAC,GAAAC,IACA,MAAAC,EAAAH,GAAAI,KAAAF,GACA,IAAAC,GAAAA,EAAA,IAAAA,EAAA,GACA,UAAApK,UAAA,8BAEA,MAAA3D,EAAAiO,WAAAF,EAAA,IAEA,IAAAG,EACA,OAFAH,EAAA,GAAAI,eAGA,UACA,WACA,aACA,cACA,QACAD,EAAAX,KAAAa,MAAApO,GACA,MACA,aACA,cACA,UACA,WACA,QACAkO,EAAAX,KAAAa,MA3BA,GA2BApO,GACA,MACA,WACA,YACA,SACA,UACA,QACAkO,EAAAX,KAAAa,MAjCAC,KAiCArO,GACA,MACA,UACA,WACA,QACAkO,EAAAX,KAAAa,MAAApO,EAAA0N,IACA,MACA,WACA,YACA,QACAQ,EAAAX,KAAAa,MAzCAV,OAyCA1N,GACA,MACA,QACAkO,EAAAX,KAAAa,MA3CAV,SA2CA1N,GAGA,YAAA+N,EAAA,YAAAA,EAAA,IACAG,EAEAA,GAGA,MAAAI,GAAAtO,GAAAA,EAAAmO,cAAAjL,QAAA,qBAUA,IAAAqL,GAAA,CAAArD,EAAAsD,EAAAxK,EAAA,MACA,IAAAM,EACA,IACAA,EAAAwI,KAAAC,MAAArL,EAAA2B,OAAAmL,GACA,CACA,MACA,CACA,IAAAhH,EAAAlD,GACA,UAAAS,EAAA,kDAEA,MAAA0J,IAAYA,GAAMzK,EAClB,GAAAyK,IACA,iBAAAvD,EAAAuD,KACAH,GAAApD,EAAAuD,OAAAH,GAAAG,IACA,UAAApK,EAAA,oCAAAC,EAAA,sBAEA,MAAAoK,eAAYA,EAAA,GAAAC,OAAAA,EAAAC,QAAAA,EAAAC,SAAAA,EAAAC,YAAAA,GAA8D9K,EAC1E+K,EAAA,IAAAL,QACAtQ,IAAA0Q,GACAC,EAAArM,KAAA,YACAtE,IAAAyQ,GACAE,EAAArM,KAAA,YACAtE,IAAAwQ,GACAG,EAAArM,KAAA,YACAtE,IAAAuQ,GACAI,EAAArM,KAAA,OACA,UAAA6B,KAAA,IAAAgD,IAAAwH,EAAAC,WACA,KAAAzK,KAAAD,GACA,UAAAD,EAAA,qBAAoEE,WAAMD,EAAAC,EAAA,WAG1E,GAAAoK,KACAtD,MAAAC,QAAAqD,GAAAA,EAAA,CAAAA,IAAAzI,SAAA5B,EAAA2K,KACA,UAAA5K,EAAA,+BAAAC,EAAA,sBAEA,GAAAsK,GAAAtK,EAAA4K,MAAAN,EACA,UAAAvK,EAAA,+BAAAC,EAAA,sBAEA,GAAAuK,IA/CAM,EAgDA7K,EAAA8K,IAhDAC,EAgDA,iBAAAR,EAAA,CAAAA,GAAAA,IA/CA,iBAAAM,EACAE,EAAAnJ,SAAAiJ,GAEA9D,MAAAC,QAAA6D,IACAE,EAAApJ,KAAAsB,IAAA7H,UAAA2H,IAAAuD,KAAA,IAAArD,IAAA4H,OA4CA,UAAA9K,EAAA,+BAAAC,EAAA,sBAjDA,IAAA6K,EAAAE,EAmDA,IAAAC,EACA,cAAAtL,EAAAuL,gBACA,aACAD,EAAAzB,GAAA7J,EAAAuL,gBACA,MACA,aACAD,EAAAtL,EAAAuL,eACA,MACA,gBACAD,EAAA,EACA,MACA,QACA,UAAA3L,UAAA,sCAEA,MAAA6L,YAAYA,GAAcxL,EAC1ByL,EAAApC,GAAAmC,GAAA,IAAAE,MACA,SAAAtR,IAAAkG,EAAAqL,KAAAb,IAAA,iBAAAxK,EAAAqL,IACA,UAAAtL,EAAA,+BAAAC,EAAA,iBAEA,QAAAlG,IAAAkG,EAAAsL,IAAA,CACA,oBAAAtL,EAAAsL,IACA,UAAAvL,EAAA,+BAAAC,EAAA,iBAEA,GAAAA,EAAAsL,IAAAH,EAAAH,EACA,UAAAjL,EAAA,qCAAAC,EAAA,qBAEA,CACA,QAAAlG,IAAAkG,EAAAuL,IAAA,CACA,oBAAAvL,EAAAuL,IACA,UAAAxL,EAAA,+BAAAC,EAAA,iBAEA,GAAAA,EAAAuL,KAAAJ,EAAAH,EACA,UAAA5K,EAAA,qCAAAJ,EAAA,qBAEA,CACA,GAAAwK,EAAA,CACA,MAAAgB,EAAAL,EAAAnL,EAAAqL,IAEA,GAAAG,EAAAR,GADA,iBAAAR,EAAAA,EAAAjB,GAAAiB,IAEA,UAAApK,EAAA,2DAAAJ,EAAA,sBAEA,GAAAwL,EAAA,EAAAR,EACA,UAAAjL,EAAA,gEAAAC,EAAA,qBAEA,CACA,OAAAA,GAGAtD,eAAA+O,GAAAC,EAAAnR,EAAAmF,GACA,MAAA2I,QAAAH,GAAAwD,EAAAnR,EAAAmF,GACA,GAAA2I,EAAAzB,gBAAAE,MAAAlF,SAAA,aAAAyG,EAAAzB,gBAAA8B,IACA,UAAAjI,EAAA,uCAEA,MACAmI,EAAA,CAAqB5I,QADrBiK,GAAA5B,EAAAzB,gBAAAyB,EAAArI,QAAAN,GACqBkH,gBAAAyB,EAAAzB,iBACrB,yBAAArM,EACA,IAAiBqO,EAAArO,IAAA8N,EAAA9N,KAEjBqO,CACA,CAQA,IAAA+C,GANAjP,MAAA4E,EAAA/G,EAAAqC,KACA,MAAAmI,QAAA+C,GAAAxG,EAAA/G,EAAA,QACA+I,EAAAhC,EAAAyD,GACA,MAAAiD,QAAA3L,EAAAW,OAAA4O,KAAAhE,GAAAtG,EAAAyD,EAAApI,WAAAoI,EAAAnI,GACA,WAAAG,WAAAiL,IAIA,MAAA6D,GACA,WAAArM,CAAAQ,GACA,KAAAA,aAAAjD,YACA,UAAAsC,UAAA,6CAEApJ,KAAA6V,SAAA9L,CACA,CACA,kBAAA+L,CAAAnF,GACA,GAAA3Q,KAAA+V,iBACA,UAAA3M,UAAA,8CAGA,OADApJ,KAAA+V,iBAAApF,EACA3Q,IACA,CACA,oBAAAgW,CAAApD,GACA,GAAA5S,KAAAiW,mBACA,UAAA7M,UAAA,gDAGA,OADApJ,KAAAiW,mBAAArD,EACA5S,IACA,CACA,UAAA2V,CAAArR,EAAAmF,GACA,IAAAzJ,KAAA+V,mBAAA/V,KAAAiW,mBACA,UAAA1L,EAAA,mFAEA,IAAAgC,EAAAvM,KAAA+V,iBAAA/V,KAAAiW,oBACA,UAAA1L,EAAA,6EAEA,MAAAqG,EAAA,IACA5Q,KAAA+V,oBACA/V,KAAAiW,oBAGA,IAAAxD,GAAA,EACA,GAFAlC,EAAAhG,EAAA,IAAA0G,IAAA,cAAAxH,GAAAoH,KAAA7Q,KAAA+V,iBAAAnF,GAEA9D,IAAA,SACA2F,EAAAzS,KAAA+V,iBAAAtD,IACA,kBAAAA,GACA,UAAAlI,EAAA,2EAGA,MAAAc,IAAgBA,GAAMuF,EACtB,oBAAAvF,IAAAA,EACA,UAAAd,EAAA,6DAEA+F,EAAAjF,EAAA/G,EAAA,QACA,IAIAqM,EAJA5G,EAAA/J,KAAA6V,SACApD,IACA1I,EAAA9C,EAAAc,OAAAA,EAAAgC,KAIA4G,EADA3Q,KAAA+V,iBACA9O,EAAAc,OAAAA,EAAAwK,KAAA2D,UAAAlW,KAAA+V,oBAGA9O,EAAAc,OAAA,IAEA,MAAApB,EAAAU,EAAAsJ,EAAA1J,EAAAc,OAAA,KAAAgC,GACAgI,QAAA2D,GAAArK,EAAA/G,EAAAqC,GACAuL,EAAA,CACAH,UAAAhK,EAAAgK,GACAhI,QAAA,IAWA,OATA0I,IACAP,EAAAnI,QAAA5C,EAAA2B,OAAAiB,IAEA/J,KAAAiW,qBACA/D,EAAAxF,OAAA1M,KAAAiW,oBAEAjW,KAAA+V,mBACA7D,EAAAG,UAAAlL,EAAA2B,OAAA6H,IAEAuB,CACA,EAGA,MAAAiE,GACA,WAAA5M,CAAAQ,GACA/J,KAAAoW,WAAA,IAAAR,GAAA7L,EACA,CACA,kBAAA+L,CAAAnF,GAEA,OADA3Q,KAAAoW,WAAAN,mBAAAnF,GACA3Q,IACA,CACA,UAAA2V,CAAArR,EAAAmF,GACA,MAAAyI,QAAAlS,KAAAoW,WAAAT,KAAArR,EAAAmF,GACA,QAAA5F,IAAAqO,EAAAnI,QACA,UAAAX,UAAA,6DAEA,SAAkB8I,EAAAG,aAAiBH,EAAAnI,WAAemI,EAAAH,WAClD,EAGA,SAAAsE,GAAAC,EAAAtO,GACA,IAAAuO,OAAAC,SAAAxO,GACA,UAAAoB,UAAA,WAAuCkN,WAEvC,OAAAtO,CACA,CACA,MAAAyO,GACA,WAAAlN,CAAAQ,EAAA,IACA,IAAAkD,EAAAlD,GACA,UAAAX,UAAA,oCAEApJ,KAAA6V,SAAA9L,CACA,CACA,SAAA2M,CAAAtC,GAEA,OADApU,KAAA6V,SAAA,IAA0B7V,KAAA6V,SAAAnB,IAAAN,GAC1BpU,IACA,CACA,UAAA2W,CAAAtC,GAEA,OADArU,KAAA6V,SAAA,IAA0B7V,KAAA6V,SAAAlB,IAAAN,GAC1BrU,IACA,CACA,WAAA4W,CAAAtC,GAEA,OADAtU,KAAA6V,SAAA,IAA0B7V,KAAA6V,SAAAhB,IAAAP,GAC1BtU,IACA,CACA,MAAA6W,CAAAC,GAEA,OADA9W,KAAA6V,SAAA,IAA0B7V,KAAA6V,SAAAkB,IAAAD,GAC1B9W,IACA,CACA,YAAAgX,CAAAhP,GAUA,MATA,iBAAAA,EACAhI,KAAA6V,SAAA,IAA8B7V,KAAA6V,SAAAR,IAAAgB,GAAA,eAAArO,IAE9BA,aAAAmN,KACAnV,KAAA6V,SAAA,IAA8B7V,KAAA6V,SAAAR,IAAAgB,GAAA,eAAAvD,GAAA9K,KAG9BhI,KAAA6V,SAAA,IAA8B7V,KAAA6V,SAAAR,IAAAvC,GAAA,IAAAqC,MAAA7B,GAAAtL,IAE9BhI,IACA,CACA,iBAAAiX,CAAAjP,GAUA,MATA,iBAAAA,EACAhI,KAAA6V,SAAA,IAA8B7V,KAAA6V,SAAAP,IAAAe,GAAA,oBAAArO,IAE9BA,aAAAmN,KACAnV,KAAA6V,SAAA,IAA8B7V,KAAA6V,SAAAP,IAAAe,GAAA,oBAAAvD,GAAA9K,KAG9BhI,KAAA6V,SAAA,IAA8B7V,KAAA6V,SAAAP,IAAAxC,GAAA,IAAAqC,MAAA7B,GAAAtL,IAE9BhI,IACA,CACA,WAAAkX,CAAAlP,GAgBA,YAfA,IAAAA,EACAhI,KAAA6V,SAAA,IAA8B7V,KAAA6V,SAAAT,IAAAtC,GAAA,IAAAqC,OAE9BnN,aAAAmN,KACAnV,KAAA6V,SAAA,IAA8B7V,KAAA6V,SAAAT,IAAAiB,GAAA,cAAAvD,GAAA9K,KAG9BhI,KAAA6V,SADA,iBAAA7N,EACA,IACAhI,KAAA6V,SACAT,IAAAiB,GAAA,cAAAvD,GAAA,IAAAqC,MAAA7B,GAAAtL,KAIA,IAA8BhI,KAAA6V,SAAAT,IAAAiB,GAAA,cAAArO,IAE9BhI,IACA,EAGA,MAAAmX,WAAAV,GACA,kBAAAX,CAAAnF,GAEA,OADA3Q,KAAA+V,iBAAApF,EACA3Q,IACA,CACA,UAAA2V,CAAArR,EAAAmF,GACA,MAAA2N,EAAA,IAAAjB,GAAAlP,EAAAc,OAAAwK,KAAA2D,UAAAlW,KAAA6V,YAEA,GADAuB,EAAAtB,mBAAA9V,KAAA+V,kBACAjF,MAAAC,QAAA/Q,KAAA+V,kBAAAlF,OACA7Q,KAAA+V,iBAAAlF,KAAAlF,SAAA,SACA,IAAA3L,KAAA+V,iBAAAtD,IACA,UAAAjI,EAAA,uCAEA,OAAA4M,EAAAzB,KAAArR,EAAAmF,EACA,EAGA,MAAA4N,GAAA,CAAA5R,EAAA6R,KACA,oBAAA7R,IAAAA,EACA,UAAAgF,EAAA,GAAgC6M,yBAGhC7Q,eAAA8Q,GAAA5J,EAAA6J,GACA,IAAAvK,EAAAU,GACA,UAAAvE,UAAA,yBAGA,GADAoO,IAAAA,EAAA,UACA,WAAAA,GACA,WAAAA,GACA,WAAAA,EACA,UAAApO,UAAA,+DAEA,IAAAqO,EACA,OAAA9J,EAAAF,KACA,SACA4J,GAAA1J,EAAAE,IAAA,2BACAwJ,GAAA1J,EAAA+J,EAAA,gCACAL,GAAA1J,EAAAgK,EAAA,gCACAF,EAAA,CAA2B5J,IAAAF,EAAAE,IAAAJ,IAAAE,EAAAF,IAAAiK,EAAA/J,EAAA+J,EAAAC,EAAAhK,EAAAgK,GAC3B,MACA,UACAN,GAAA1J,EAAAE,IAAA,yCACAwJ,GAAA1J,EAAA+J,EAAA,8BACAD,EAAA,CAA2B5J,IAAAF,EAAAE,IAAAJ,IAAAE,EAAAF,IAAAiK,EAAA/J,EAAA+J,GAC3B,MACA,UACAL,GAAA1J,EAAA5I,EAAA,4BACAsS,GAAA1J,EAAA3J,EAAA,2BACAyT,EAAA,CAA2B1S,EAAA4I,EAAA5I,EAAA0I,IAAAE,EAAAF,IAAAzJ,EAAA2J,EAAA3J,GAC3B,MACA,UACAqT,GAAA1J,EAAAW,EAAA,6BACAmJ,EAAA,CAA2BnJ,EAAAX,EAAAW,EAAAb,IAAAE,EAAAF,KAC3B,MACA,QACA,UAAAnD,EAAA,qDAEA,MAAA3D,EAAAM,EAAAc,OAAAwK,KAAA2D,UAAAuB,IACA,OAAA1P,QAAAvB,EAAAgR,EAAA7Q,GACA,CAqBA,SAAAiR,GAAAtT,GACA,OAAA2I,EAAA3I,EACA,CACA,SAAAuT,GAAA5S,GACA,yBAAA6S,gBACAA,gBAAA7S,GAEAsN,KAAAC,MAAAD,KAAA2D,UAAAjR,GACA,CACA,MAAA8S,GACA,WAAAxO,CAAAyO,GAEA,GADAhY,KAAAiY,QAAA,IAAA3I,SAjBA,SAAA0I,GACA,OAAAA,GACA,iBAAAA,GACAlH,MAAAC,QAAAiH,EAAApL,OACAoL,EAAApL,KAAAsL,MAAAN,GACA,CAaAO,CAAAH,GACA,UAAAtN,EAAA,8BAEA1K,KAAAoY,MAAAP,GAAAG,EACA,CACA,YAAAK,CAAA1H,EAAA2H,GACA,MAAAjN,IAAgBA,EAAAkN,IAAAA,GAAW,IAAI5H,KAAA2H,GAAA5L,QAC/Be,EAtCA,SAAApC,GACA,wBAAAA,GAAAA,EAAAxE,MAAA,MACA,SACA,SACA,YACA,SACA,WACA,SACA,YACA,QACA,UAAAyD,EAAA,kDAEA,CA0BAkO,CAAAnN,GACAoN,EAAAzY,KAAAoY,MAAAxL,KAAAV,OAAAyB,IACA,IAAA+K,EAAAjL,IAAAE,EAAAF,IAaA,GAZAiL,GAAA,iBAAAH,IACAG,EAAAH,IAAA5K,EAAA4K,KAEAG,GAAA,iBAAA/K,EAAAtC,MACAqN,EAAArN,IAAAsC,EAAAtC,KAEAqN,GAAA,iBAAA/K,EAAAQ,MACAuK,EAAA,QAAA/K,EAAAQ,KAEAuK,GAAA5H,MAAAC,QAAApD,EAAAM,WACAyK,EAAA/K,EAAAM,QAAAtC,SAAA,WAEA+M,EACA,OAAArN,GACA,YACAqN,EAAA,UAAA/K,EAAAE,IACA,MACA,aACA6K,EAAA,cAAA/K,EAAAE,IACA,MACA,YACA6K,EAAA,UAAA/K,EAAAE,IACA,MACA,YACA6K,EAAA,UAAA/K,EAAAE,IACA,MACA,cACA6K,EAAA,YAAA/K,EAAAE,IACA,MACA,YACA6K,EAAA,YAAA/K,EAAAE,KAAA,UAAAF,EAAAE,IAIA,OAAA6K,KAEgB,EAAA/K,EAAAjG,OAAAA,GAAiB+Q,EACjC,OAAA/Q,EACA,UAAAiD,EAEA,OAAAjD,EAAA,CACA,MAAAiR,EAAA,IAAA/N,GACAqN,QAAoBA,GAAUjY,KAS9B,MARA2Y,EAAApT,OAAAqT,eAAAnS,kBACA,UAAAkH,KAAA8K,EACA,gBACAI,GAAAZ,EAAAtK,EAAAtC,EACA,CACA,OAEA,EACAsN,CACA,CACA,OAAAE,GAAA7Y,KAAAiY,QAAAtK,EAAAtC,EACA,EAEA5E,eAAAoS,GAAAlK,EAAAhB,EAAAtC,GACA,MAAAwD,EAAAF,EAAAhK,IAAAgJ,IAAAgB,EAAA7G,IAAA6F,EAAA,IAAsDhJ,IAAAgJ,GACtD,QAAA9J,IAAAgL,EAAAxD,GAAA,CACA,MAAA/G,QAAAiL,EAAA,IAAsC5B,EAAAK,KAAA,GAAmB3C,GACzD,GAAA/G,aAAAwC,YAAA,WAAAxC,EAAAyL,KACA,UAAArF,EAAA,gDAEAmE,EAAAxD,GAAA/G,CACA,CACA,OAAAuK,EAAAxD,EACA,CACA,SAAAyN,GAAAd,GACA,MAAAlQ,EAAA,IAAAiQ,GAAAC,GACAe,EAAAtS,MAAAkK,EAAA2H,IAAAxQ,EAAAuQ,OAAA1H,EAAA2H,GASA,OARA9T,OAAAwU,iBAAAD,EAAA,CACAf,KAAA,CACAvS,MAAA,IAAAoS,GAAA/P,EAAAsQ,OACA1T,YAAA,EACAuU,cAAA,EACAC,UAAA,KAGAH,CACA,CAkCA,IAAAI,GAhCA1S,MAAA2S,EAAAC,EAAA5P,KACA,IAAA6P,EACAC,EACAC,GAAA,EACA,mBAAAC,kBACAH,EAAA,IAAAG,gBACAF,EAAAG,WAAA,KACAF,GAAA,EACAF,EAAAK,SACSN,IAET,MAAAO,QAAAC,MAAAT,EAAApT,KAAA,CACA8T,OAAAR,EAAAA,EAAAQ,YAAAjW,EACAkW,SAAA,SACAvN,QAAA/C,EAAA+C,UACKwN,MAAAC,IACL,GAAAT,EACA,UAAA3O,EACA,MAAAoP,IAIA,QAFApW,IAAA0V,GACAW,aAAAX,GACA,MAAAK,EAAAO,OACA,UAAA9Q,EAAA,2DAEA,IACA,aAAAuQ,EAAAQ,MACA,CACA,MACA,UAAA/Q,EAAA,6DACA,GASA,IAAAgR,GACA,uBAAAC,YAAAA,UAAAC,WAAAjN,aAAA,iBAGA+M,GAAA,GAFA,UACA,WAEA,CACA,MAAAG,GAAAjV,SAgBA,MAAAkV,GACA,WAAAlR,CAAA6P,EAAA3P,GACA,KAAA2P,aAAAsB,KACA,UAAAtR,UAAA,kCAlBA,IAAApB,EAAA2S,EAoBA3a,KAAA4a,KAAA,IAAAF,IAAAtB,EAAApT,MACAhG,KAAA6a,SAAA,CAA0BC,MAAArR,GAAAqR,MAAAtO,QAAA/C,GAAA+C,SAC1BxM,KAAA+a,iBACA,iBAAAtR,GAAAuR,gBAAAvR,GAAAuR,gBAAA,IACAhb,KAAAib,kBACA,iBAAAxR,GAAAyR,iBAAAzR,GAAAyR,iBAAA,IACAlb,KAAAmb,aAAA,iBAAA1R,GAAAkR,YAAAlR,GAAAkR,YAAA,SACA9W,IAAA4F,IAAA+Q,MACAxa,KAAAob,OAAA3R,IAAA+Q,IA5BAxS,EA6BAyB,IAAA+Q,IA7BAG,EA6BA3a,KAAAmb,aA5BA,iBAAAnT,GAAA,OAAAA,GAGA,QAAAA,GAAA,iBAAAA,EAAAqT,OAAAlG,KAAAD,MAAAlN,EAAAqT,KAAAV,IAGA,SAAA3S,GACAiF,EAAAjF,EAAAgQ,OACAlH,MAAAC,QAAA/I,EAAAgQ,KAAApL,OACAkE,MAAA3L,UAAA+S,MAAA7S,KAAA2C,EAAAgQ,KAAApL,KAAAK,KAoBAjN,KAAAsb,eAAAtb,KAAAob,OAAAC,IACArb,KAAAub,OAAAzC,GAAA9Y,KAAAob,OAAApD,OAGA,CACA,WAAAwD,GACA,uBAAAxb,KAAAsb,gBACAnG,KAAAD,MAAAlV,KAAAsb,eAAAtb,KAAAib,iBAEA,CACA,KAAAQ,GACA,uBAAAzb,KAAAsb,gBACAnG,KAAAD,MAAAlV,KAAAsb,eAAAtb,KAAAmb,YAEA,CACA,YAAA9C,CAAA1H,EAAA2H,GACAtY,KAAAub,QAAAvb,KAAAyb,eACAzb,KAAA0b,SAEA,IACA,aAAA1b,KAAAub,OAAA5K,EAAA2H,EACA,CACA,MAAA2B,GACA,GAAAA,aAAAtP,IACA,IAAA3K,KAAAwb,cAEA,aADAxb,KAAA0b,SACA1b,KAAAub,OAAA5K,EAAA2H,GAGA,MAAA2B,CACA,CACA,CACA,YAAAyB,GACA1b,KAAA2b,gBA1EA,oBAAAC,eACA,oBAAAtB,WAAA,uBAAAA,UAAAC,WACA,oBAAAsB,aAAA,WAAAA,eAyEA7b,KAAA2b,mBAAA9X,GAEA,MAAA2I,EAAA,IAAAsP,QAAA9b,KAAA6a,SAAArO,SACA6N,KAAA7N,EAAAM,IAAA,gBACAN,EAAA1E,IAAA,aAAAuS,IACAra,KAAA6a,SAAArO,QAAAhI,OAAAuX,YAAAvP,EAAA0E,YAEAlR,KAAA2b,gBAAA3b,KAAA2b,cAAAxC,GAAAnZ,KAAA4a,KAAA5a,KAAA+a,iBAAA/a,KAAA6a,UACAmB,KAAA5B,IACApa,KAAAub,OAAAzC,GAAAsB,GACApa,KAAAob,SACApb,KAAAob,OAAAC,IAAAlG,KAAAD,MACAlV,KAAAob,OAAApD,KAAAoC,GAEApa,KAAAsb,eAAAnG,KAAAD,MACAlV,KAAA2b,mBAAA9X,IAEAmW,MAAAC,IAEA,MADAja,KAAA2b,mBAAA9X,EACAoW,WAEAja,KAAA2b,aACA,EAEA,SAAAM,GAAA7C,EAAA3P,GACA,MAAA3B,EAAA,IAAA2S,GAAArB,EAAA3P,GACAyS,EAAAzV,MAAAkK,EAAA2H,IAAAxQ,EAAAuQ,OAAA1H,EAAA2H,GA8BA,OA7BA9T,OAAAwU,iBAAAkD,EAAA,CACAV,YAAA,CACA7W,IAAA,IAAAmD,EAAA0T,cACA9W,YAAA,EACAuU,cAAA,GAEAwC,MAAA,CACA9W,IAAA,IAAAmD,EAAA2T,QACA/W,YAAA,EACAuU,cAAA,GAEAyC,OAAA,CACAjW,MAAA,IAAAqC,EAAA4T,SACAhX,YAAA,EACAuU,cAAA,EACAC,UAAA,GAEAiD,UAAA,CACAxX,IAAA,MAAAmD,EAAA6T,cACAjX,YAAA,EACAuU,cAAA,GAEAjB,KAAA,CACAvS,MAAA,IAAAqC,EAAAyT,QAAAvD,OACAtT,YAAA,EACAuU,cAAA,EACAC,UAAA,KAGAgD,CACA,CAEA,MAAApT,GAAAF,EA+BA,SAAAwT,GAAA3S,GACA,MAAA8D,EAAA9D,GAAA8D,eAAA,KACA,oBAAAA,GAAAA,EAAA,KACA,UAAAjD,EAAA,+FAEA,OAAAiD,CACA,CAgGA9G,eAAA4V,GAAAhR,EAAA5B,GACA,OAhGAhD,eAAA4E,EAAA5B,GACA,IAAA/C,EACAkH,EACA,OAAAvC,GACA,YACA,YACA,YACA3E,EAAA,CACAkD,KAAA,UACAsB,KAAA,OAA6BG,EAAAxE,OAAA,KAC7ByV,eAAA,IAAAxV,WAAA,SACAyG,cAAA6O,GAAA3S,IAEAmE,EAAA,kBACA,MACA,YACA,YACA,YACAlH,EAAA,CACAkD,KAAA,oBACAsB,KAAA,OAA6BG,EAAAxE,OAAA,KAC7ByV,eAAA,IAAAxV,WAAA,SACAyG,cAAA6O,GAAA3S,IAEAmE,EAAA,kBACA,MACA,eACA,mBACA,mBACA,mBACAlH,EAAA,CACAkD,KAAA,WACAsB,KAAA,OAA6BC,SAAAE,EAAAxE,OAAA,YAC7ByV,eAAA,IAAAxV,WAAA,SACAyG,cAAA6O,GAAA3S,IAEAmE,EAAA,4CACA,MACA,YACAlH,EAAA,CAA0BkD,KAAA,QAAA6B,WAAA,SAC1BmC,EAAA,kBACA,MACA,YACAlH,EAAA,CAA0BkD,KAAA,QAAA6B,WAAA,SAC1BmC,EAAA,kBACA,MACA,YACAlH,EAAA,CAA0BkD,KAAA,QAAA6B,WAAA,SAC1BmC,EAAA,kBACA,MACA,cACAlH,EAAA,CAA0BkD,KAAA,WAC1BgE,EAAA,kBACA,MACA,aACAA,EAAA,kBACA,MAAAC,EAAApE,GAAAoE,KAAA,UACA,OAAAA,GACA,cACA,YACAnH,EAAA,CAAkCkD,KAAAiE,GAClC,MACA,QACA,UAAAvD,EAAA,8CAEA,KACA,CACA,cACA,qBACA,qBACA,sBACAsD,EAAA,2BACA,MAAAC,EAAApE,GAAAoE,KAAA,QACA,OAAAA,GACA,YACA,YACA,YACAnH,EAAA,CAAkCkD,KAAA,OAAA6B,WAAAoC,GAClC,MAEA,aACA,WACAnH,EAAA,CAAkCkD,KAAAiE,GAClC,MACA,QACA,UAAAvD,EAAA,0GAEA,KACA,CACA,QACA,UAAAA,EAAA,gEAEA,OAAAlE,EAAAW,OAAAwV,YAAA7V,EAAA+C,GAAA+H,cAAA,EAAA5D,EACA,CAGA4O,CAAAnR,EAAA5B,EACA,CASA,MA0BAgT,GAAAhW,MAAAiW,EAAAC,EAAAC,KAEA,MAAAC,EAAA,IAAAnC,IAAAiC,GACAG,EAAAD,EAAAE,OAAAF,EAAAG,SAAAH,EAAAI,OAEAC,EAAA,IAAAxC,IAAAgC,GAAAK,OACAI,QAAAtD,MAAA,GAAgDqD,sCAChDlB,KAAApC,IACA,IAAAA,EAAAwD,GACA,UAAA9T,MAAA,uBAAmDsQ,EAAAO,UAEnD,OAAAP,EAAAQ,SAGAhG,EAAA+I,EAAA,OACAE,EAAAjE,GAAAA,EAAAkE,SAAA,KAAAlE,EAAAvS,MAAA,MAAAuS,EACA,GAAAiE,EAAAX,KAAAW,EAAAjJ,GACA,UAAA9K,MAAA,4BAAA8K,EAAA,QAAAsI,GAEAa,eAAAC,QAAA,MAAApJ,GAEAmJ,eAAAC,QAAA,iBAAAL,EAAA,gBAEAI,eAAAC,QAAA,WAAAL,EAAA,UACA,IAAAM,EAAAb,GAAAa,UAEA,IAAAA,EAAA,CAEA,MAAAC,EAAAP,EAAA,sBAEAQ,OAxDAlX,OAAAiX,EAAAd,KAEA,MAAAgB,EAAA,IACAhB,EACAiB,YAAA,uCAEAC,2BAAA,OACAC,iBAAA,MACAC,aAAA,UAGA,OAAAnE,MAAA6D,EAAA,CACAO,OAAA,OACAzR,QAAA,CACA,mCAEA0R,KAAA3L,KAAA2D,UAAA0H,MAwCAO,CAAAT,EAAAd,GAAA,CAAsHwB,cAAA,CAAAtB,KACtHd,KAAApC,IACA,IAAAA,EAAAwD,GACA,UAAA9T,MAAA,uBAAuDsQ,EAAAO,UAEvD,OAAAP,EAAAQ,SAEAqD,EAAAE,EAAA,SACA,CAEA,IACA,IAAAjD,IAAA+C,EACA,CACA,MACAF,eAAAC,QAAA,YAAAC,EACA,CAEA,MAAAY,mBAAYA,EAAAC,oBAAAA,SAA0CC,KACtDhB,eAAAC,QAAA,qBAAAa,GAEA,MAAAG,EAAAxZ,OAAAqB,OAAAoY,aACAlB,eAAAC,QAAA,aAAAgB,GAEA,MAAAE,EAAAvB,EAAA,uBACA,sBACA,iBAAyBwB,mBAAA7B,uCAEzB,cAAsB6B,mBAAAlB,gCAEtB,mBAA2Ba,IAC3B,UAAkBE,mBAElBxZ,OAAAe,SAAAC,KAAA0Y,GAMAH,GAAA9X,UAEA,MAAA4X,EAAArZ,OAAAqB,OAAAoY,aAAA,IAAAzZ,OAAAqB,OAAAoY,aAEAzX,EAAA,IAAAF,iBAAA9B,OAAAqB,OAAAU,OAAAC,OAAA,eAAAE,aAAAa,OAAAsW,KAKA,OAAaA,qBAAAC,oBAJb9V,KAAAJ,OAAAC,gBAAArB,IACA2B,QAAA,WACAA,QAAA,WACAA,QAAA,YAqHAiW,GAAAnY,MAAAoY,EAAAR,EAAA1B,EAAAc,EAAAqB,EAAAC,KAEA,MAAAC,QAAAtN,GAAAqN,EAAAE,WACAD,EAAA3T,IAAA,QAEA,MAAA6T,QAAA,IAAA/H,GAAA,CACAgI,IAAAL,EACAM,IAAA,SAEAlI,cACAL,OAAA7R,OAAAqB,OAAAoY,cACA3I,mBAAA,CACAzK,IAAA,QACA6I,IAAA,WACAvG,IAAAqR,IAEArJ,KAAAoJ,EAAAM,YACA,OAAAxF,MAAAiF,EAAA,CACAb,OAAA,OACAzR,QAAA,CACA0S,OACA,oDAEAhB,KAAA,IAAAoB,gBAAA,CACAC,WAAA,qBACA5V,KAAAkV,EACAW,cAAAnB,EACA1B,aAAAA,EACAc,UAAAA,OAsEAgC,GAAAhZ,MAAAiZ,EAAAjC,EAAAqB,EAAAC,KAEA,MAAAC,QAAAtN,GAAAqN,EAAAE,WACAD,EAAA3T,IAAA,QAEA,MAAA6T,QAAA,IAAA/H,GAAA,CACAgI,IAAAL,EACAM,IAAA,SAEAlI,cACAL,OAAA/Q,KAAAO,OAAAoY,cACA3I,mBAAA,CACAzK,IAAA,QACA6I,IAAA,WACAvG,IAAAqR,IAEArJ,KAAAoJ,EAAAM,YACA,OAAAxF,MAAAiF,EAAA,CACAb,OAAA,OACAzR,QAAA,CACA0S,OACA,oDAEAhB,KAAA,IAAAoB,gBAAA,CACAC,WAAA,gBACAG,gBACAjC,iBAKA,IAAAkC,IACA,SAAAA,GACAA,EAAA,kCACAA,EAAA,8CACAA,EAAA,8BACC,CAJD,CAICA,KAAAA,GAAA,KAcD,MAAAC,WAAAC,YACAC,WAAA,EACAC,KACAC,YAAAnc,EACAoc,iBAAApc,EACAqc,YACAC,SACAC,eACAC,eACAC,cACA,WAAA/W,CAAAgX,EAAAC,GACA9W,QACA1J,KAAAygB,UAAAzgB,KAAAygB,UAAApQ,KAAArQ,MACAA,KAAAkgB,YAAA,CAA6BK,iBAC7BvgB,KAAAmgB,SAAAK,GAAAL,SACAK,GAAAE,sBACA1gB,KAAA2gB,iBAAAhB,GAAAiB,aAAAC,GAAAL,EAAAE,uBAAAG,IACAL,GAAAM,4BACA9gB,KAAA2gB,iBAAAhB,GAAAoB,mBAAAF,GAAAL,GAAAM,6BAAAD,IACAL,GAAAQ,qBACAhhB,KAAA2gB,iBAAAhB,GAAAsB,WAAAJ,GAAAL,GAAAQ,sBAAAH,GACA,CACA,WAAAK,CAAAxE,EAAAC,SACAF,GAAAC,EAAAC,EAAA3c,KAAAkgB,YAAAK,cACA,CAOA,6BAAAY,GAEA,MAAAC,OAlSA3a,OAAAmW,EAAAuD,KACA,MAAA/G,EAAA,IAAAsB,IAAA1V,OAAAe,SAAAC,MAEA6Y,EAAAzF,EAAAiI,aAAA1c,IAAA,QAEA,UAAAka,EACA,OAAiB0B,cAAA3D,GAGjB,MAAAF,EAAAa,eAAA+D,QAAA,OACA,UAAA5E,GAAAtD,EAAAiI,aAAA1c,IAAA,SAAA+X,EACA,UAAApT,MAAA,4BAAA8P,EAAAiI,aAAA1c,IAAA,eAAA+X,GAGA,GAAAtD,EAAAiI,aAAA1c,IAAA,WAAA4Y,eAAA+D,QAAA,cACA,UAAAhY,MAAA,qCAAA8P,EAAAiI,aAAA1c,IAAA,iBAAA4Y,eAAA+D,QAAA,eAGAlI,EAAAiI,aAAAE,OAAA,OACAnI,EAAAiI,aAAAE,OAAA,SACAnI,EAAAiI,aAAAE,OAAA,QACAvc,OAAAwc,QAAAC,UAAA,GAA+B7b,SAAA8b,MAAAtI,EAAAlM,YAE/B,MAAAmR,EAAAd,eAAA+D,QAAA,sBACA,UAAAjD,EACA,UAAA/U,MAAA,2FAEA,MAAAmU,EAAAb,GAAAa,WAAAF,eAAA+D,QAAA,aACA,IAAA7D,EACA,UAAAnU,MAAA,yGAEA,MAAAwV,EAAAvB,eAAA+D,QAAA,kBACA,UAAAxC,EACA,UAAAxV,MAAA,uFAGA,MAAAyV,QAAA1C,GAAA,SAEAsF,QAAA/C,GAAAC,EAAAR,EAAAjF,EAAAlM,WAAAuQ,EAAAqB,EAAAC,GACA/C,KAAApC,IACA,IAAAA,EAAAwD,GACA,UAAA9T,MAAA,uBAAmDsQ,EAAAO,UAEnD,OAAAP,EAAAQ,SAGAwH,EAAAD,EAAA,aACAE,EAAAtE,eAAA+D,QAAA,YACA,UAAAO,EACA,UAAAvY,MAAA,oFAEA,MAAA0O,EAAAiE,GAAA,IAAAvB,IAAAmH,KACA9X,QAAYA,SAAUyL,GAAAoM,EAAA5J,EAAA,CACtB5D,OAAAsI,EACApI,SAAA,UAIAwN,QAAAvK,SAAA7F,GAAAqN,EAAAE,YACA,GAAAlV,EAAA,UAAA+X,EACA,UAAAxY,MAAA,sEAAAS,EAAA,gBAAA+X,GAGA,GAAA/X,EAAA,YAAA0T,EACA,UAAAnU,MAAA,8EAAAS,EAAA,kBAAA0T,GAGA,MAAAsE,EAAA,IAA4BJ,EAAAK,cAAAjD,GAC5BkD,EAAA,CAA0BvF,MAAAmF,WAAA/C,kBAyB1B,OAxBAlC,IACAA,EAAA,CAA2BwB,cAAA,CAAAhF,EAAAlM,cAC3B0P,EAAAa,UAAAA,EAEA0C,UACAA,EAAA+B,aACAC,QAAAC,IAAA,CACAjC,EAAA3C,QAAA,MAAAd,GACAyD,EAAA3C,QAAA,WAAAqE,GACA1B,EAAA3C,QAAA,iBAAAsB,GACAqB,EAAA3C,QAAA,YAAAC,GACA0C,EAAA3C,QAAA,eAAAuB,GACAoB,EAAA3C,QAAA,gBAAAmE,EAAA,iBAEAxB,EAAAkC,SAGA9E,eAAA+E,WAAA,cACA/E,eAAA+E,WAAA,sBACA/E,eAAA+E,WAAA,OACA/E,eAAA+E,WAAA,YACA/E,eAAA+E,WAAA,kBACA/E,eAAA+E,WAAA,aAEA,CACA/B,cAAA3D,EACA2F,WAAAN,EACAO,aAAAT,IAkMAU,CAAAziB,KAAAkgB,YAAAK,cAAAvgB,KAAAmgB,UAEAiB,EAAAoB,eAGAxiB,KAAAkgB,YAAAK,cAAAa,EAAAb,cACAvgB,KAAAkgB,YAAAqC,WAAAnB,EAAAmB,iBACAviB,KAAA0iB,gBAAAtB,EAAAoB,cAEAxiB,KAAA2iB,2BACA,CAIA,aAAAC,GACA,IAAA5iB,KAAAmgB,SACA,UAAA7W,MAAA,kFAEA,GAAAtJ,KAAAogB,eACA,OAAApgB,KAAAogB,eAEApgB,KAAAogB,eAAA,IAAA+B,QAAA,CAAAU,EAAAC,KACA9iB,KAAAqgB,eAAAwC,EACA7iB,KAAAsgB,cAAAwC,IAGA,MAAAC,EAAA/iB,KAAAgjB,SAuBA,MArMAvc,OAAAwc,IAEA,UACAA,EAAAf,OACA,MAAAzE,QAAAwF,EAAA3B,QAAA,aACAxC,QAAAmE,EAAA3B,QAAA,kBACAvC,QAAAkE,EAAA3B,QAAA,gBACA5B,QAAAuD,EAAA3B,QAAA,iBACA,UAAA7D,GAAA,OAAAqB,GAAA,OAAAC,GAAA,OAAAW,EAEA,UAAApW,MAAA,4DAEA,MAAAqY,QAAAlC,GAAAC,EAAAjC,EAAAqB,EAAAC,GACA/C,KAAApC,IACA,IAAAA,EAAAwD,GACA,UAAA9T,MAAA,uBAAuDsQ,EAAAO,UAEvD,OAAAP,EAAAQ,SAGAwH,EAAAD,EAAA,aACAjF,QAAAuG,EAAA3B,QAAA,OACA,UAAA5E,EACA,UAAApT,MAAA,gFAEA,MAAAuY,QAAAoB,EAAA3B,QAAA,YACA,UAAAO,EACA,UAAAvY,MAAA,qFAEA,MAAA0O,EAAAiE,GAAA,IAAAvB,IAAAmH,KACA9X,QAAgBA,SAAUyL,GAAAoM,EAAA5J,EAAA,CAC1B5D,OAAAsI,EACApI,SAAA,UAIAwN,QAAAvK,SAAA7F,GAAAqN,EAAAE,YACA,GAAAlV,EAAA,UAAA+X,EACA,UAAAxY,MAAA,sEAAAS,EAAA,gBAAA+X,GAGA,GAAA/X,EAAA,YAAA0T,EACA,UAAAnU,MAAA,8EAAAS,EAAA,kBAAA0T,GAIA,aADAwF,EAAAzF,QAAA,gBAAAmE,EAAA,eACA,IACAA,EACAK,cAAAjD,EAEA,CACA,QACAkE,EAAAZ,OACA,GA0HAa,CAAAljB,KAAAmgB,UACAnE,KAAAwG,GAAAxiB,KAAA0iB,gBAAAF,IACAxG,KAAA,IAAAhc,KAAAqgB,kBACArG,MAAArB,IACA3Y,KAAAgjB,UACAhjB,KAAAsgB,cAAA,IAAAhX,MAAAqP,GAAA,yBAEA3Y,KAAAmjB,YAIAnjB,KAAAojB,0BAHApjB,KAAAqjB,kCAOArjB,KAAAsgB,cAAA,IAAAhX,MAAA,6BAESga,QAAA,KACTtjB,KAAAujB,sBACAR,IAAA/iB,KAAAgjB,UACAhjB,KAAA2iB,6BAEA3iB,KAAAogB,cACA,CAMA,YAAAoD,GAEAxjB,KAAA8f,WAAA,EACA9f,KAAA+f,UAAAlc,EACA7D,KAAAggB,YAAAnc,EACA7D,KAAAigB,iBAAApc,EACA7D,KAAAkgB,YAAAqC,gBAAA1e,EACA7D,KAAAkgB,YAAAsC,kBAAA3e,EAEA7D,KAAAogB,gBAAApgB,KAAAsgB,gBACAtgB,KAAAsgB,cAAA,IAAAhX,MAAA,iCACAtJ,KAAAujB,uBAGAvjB,KAAAmgB,iBACAngB,KAAAmgB,SAAA+B,aACAliB,KAAAmgB,SAAAsD,QACAzjB,KAAAmgB,SAAAkC,SAGAriB,KAAA2iB,0BACA,CAUA,eAAAlC,CAAAzY,EAAAka,EAAAwB,GAEA,IAAA1jB,KAAAgjB,SACA,OAAAnJ,MAAA7R,EAAAka,GAMA,IAAA9I,EACA6E,EACAzR,EAEAxE,aAAA2b,SACAvK,EAAA,IAAAsB,IAAA1S,EAAAoR,KACA6E,EAAAiE,GAAAjE,QAAAjW,GAAAiW,QAAA,MACAzR,EAAA,IAAAsP,QAAA9T,EAAAwE,WAGA0V,EAAAA,GAAA,GACA9I,EAAA,IAAAsB,IAAA1S,EAAAkF,YACA+Q,EAAAiE,EAAAjE,QAAA,MACAzR,EAAA0V,EAAA1V,QAAA,IAAAsP,QAAAoG,EAAA1V,SAAA,IAAAsP,eAGA9b,KAAA4jB,wBACAF,EAAAA,GAAA,CACAvE,IAAA,GAAoB/F,EAAA2D,SAAa3D,EAAA4D,WACjCoC,IAAAnB,EAAA4F,eAEA,MAAA3E,QAAAlf,KAAA8jB,uBAAAJ,GAKA,OAHAlX,EAAA1E,IAAA,OAAAoX,GACA1S,EAAA1E,IAAA,wBAA6C9H,KAAAkgB,YAAAsC,aAAAuB,gBAE7C/b,aAAA2b,QACA9J,MAAA,IAAA8J,QAAA3b,EAAA,IAA8Cka,EAAA1V,aAG9CqN,MAAAT,EAAA,IAA4B8I,EAAA1V,WAC5B,CAIA,qBAAAkW,CAAAF,GACAxiB,KAAAkgB,YAAAsC,aAAAA,QACAxiB,KAAAgkB,+BAAAxB,EAAAuB,aACA,CACA,mBAAAR,GACAvjB,KAAAogB,oBAAAvc,EACA7D,KAAAqgB,oBAAAxc,EACA7D,KAAAsgB,mBAAAzc,CACA,CAIA,YAAAmf,GACA,OAAAhjB,KAAA8f,SACA,CACA,SAAAmE,GACA,OAAAjkB,KAAAggB,MACA,CACA,SAAAmD,GACA,OAAAnjB,KAAA+f,MAEA/f,KAAAkkB,gBAAAlkB,KAAA+f,KACA,CACA,YAAAoE,GACA,OAAAnkB,KAAA+f,KAEA/f,KAAAokB,aAAApkB,KAAA+f,OADA,CAEA,CACA,eAAAsE,GACA,OAAArkB,KAAAkgB,YAAAsC,YACA,CAQA,2BAAAoB,GACA5jB,KAAAmjB,cACAnjB,KAAAogB,qBAIApgB,KAAAogB,qBAHApgB,KAAA4iB,UAMA,CAIA,iBAAA0B,CAAA1C,GAEA,MACAjb,GADA,IAAAO,aACAa,OAAA6Z,GAEA2C,QAAAle,OAAAU,OAAAC,OAAA,UAAAL,GAEA6d,EAAA1T,MAAA2T,KAAA,IAAA3d,WAAAyd,IAOA,OANA/b,KAAAJ,OAAAC,gBAAAmc,IAGA7b,QAAA,WACAA,QAAA,WACAA,QAAA,SAEA,CAQA,4BAAAmb,CAAA/Z,GACA,IAAA/J,KAAAkgB,YAAAsC,eAAAxiB,KAAAigB,YACA,UAAA3W,MAAA,4BAEAS,EAAA2a,IAAA1kB,KAAAigB,YACA,MAAAjB,QAAAtN,GAAA1R,KAAAkgB,YAAAsC,aAAAR,cAAA/C,WACA,WAAA9H,GAAApN,GACAmN,cACAL,OAAA7R,OAAAqB,OAAAoY,cACA3I,mBAAA,CACAzK,IAAA,QACA6I,IAAA,WACAvG,IAAAqR,IAEArJ,KAAA3V,KAAAkgB,YAAAsC,aAAAR,cAAA3C,WACA,CACA,oCAAA2E,CAAAD,GACA,GAAAA,EAIA,IACA,MAAAY,EAjwBA,SAAAlP,GACA,oBAAAA,EACA,UAAAjL,EAAA,iEACA,MAAY,EAAAT,EAAArC,OAAAA,GAAqB+N,EAAAtD,MAAA,KACjC,OAAAzK,EACA,UAAA8C,EAAA,4DACA,OAAA9C,EACA,UAAA8C,EAAA,eACA,IAAAT,EACA,UAAAS,EAAA,+BACA,IAAAoa,EAOAjS,EANA,IACAiS,EAAA9b,GAAAiB,EACA,CACA,MACA,UAAAS,EAAA,yCACA,CAEA,IACAmI,EAAAJ,KAAAC,MAAArL,EAAA2B,OAAA8b,GACA,CACA,MACA,UAAApa,EAAA,8CACA,CACA,IAAAyC,EAAA0F,GACA,UAAAnI,EAAA,0BACA,OAAAmI,CACA,CAsuBAkS,CAAAd,GACAE,EAAAU,EAAAG,MACA,IAAAb,EACA,UAAA3a,MAAA,uCAEA,MAAAgM,EAAAqP,EAAArP,IACA,IAAAA,EACA,UAAAhM,MAAA,qCAEAtJ,KAAAigB,kBAAAjgB,KAAAskB,YAAAP,GACA/jB,KAAAggB,OAAAiE,EACAjkB,KAAA+f,KAAAzK,EACAtV,KAAA8f,WAAA,CACA,CACA,MAAAnH,SACA3Y,KAAAwjB,QACA,YApBAxjB,KAAAwjB,QAqBA,CAIA,eAAAU,CAAA5O,EAAAyP,EAAA,GACA,yBAAAzP,IAAA0P,MAAA1P,KAGAtV,KAAAokB,aAAA9O,EAAAyP,GAAA,CACA,CACA,YAAAX,CAAA9O,EAAAyP,EAAA,GAEA,OAAAzP,GADAtC,KAAAC,MAAAkC,KAAAD,MAAA,KACA6P,EACA,CAIA,wBAAApC,GACA3iB,KAAAilB,cAAA,IAAAC,YAAAvF,GAAAiB,aAAA,CAAyEuE,OAAA,CAAUnC,SAAAhjB,KAAAgjB,SAAAiB,MAAAjkB,KAAAikB,SACnF,CACA,8BAAAZ,GACArjB,KAAAilB,cAAA,IAAAC,YAAAvF,GAAAoB,mBAAA,CAA+EoE,OAAA,CAAUC,WAAAplB,KAAAmkB,kBACzF,CACA,uBAAAf,GACApjB,KAAAilB,cAAA,IAAAC,YAAAvF,GAAAsB,YACA,EAMA,IAAAoE,IACA,SAAAA,GACAA,EAAA,oBACAA,EAAA,kBACAA,EAAA,YACAA,EAAA,wBACAA,EAAA,8BACAA,EAAA,oCACAA,EAAA,iBACC,CARD,CAQCA,KAAAA,GAAA,KAKD,MAAAC,GACAC,OACAC,UACAC,UACAC,GAAA,KAOA,WAAAnc,CAAAgc,EAAA,QAAAC,EAAA,UAAAC,EAAA,GACAzlB,KAAAulB,OAAAA,EACAvlB,KAAAwlB,UAAAA,EACAxlB,KAAAylB,UAAAA,CACA,CAKA,UAAAvD,GACA,WAAAC,QAAA,CAAAU,EAAAC,KACA,MAAA6C,EAAAC,UAAAC,KAAA7lB,KAAAulB,OAAAvlB,KAAAylB,WACAE,EAAAG,QAAAjF,IACAiC,EAAA,IAAAxZ,MAAA,mBAAoDuX,EAAAkF,OAAApN,WAEpDgN,EAAAK,UAAAnF,IACA7gB,KAAA0lB,GAAA7E,EAAAkF,OAAApT,OACAkQ,EAAA7iB,OAEA2lB,EAAAM,gBAAApF,IACA,MAAA6E,EAAA7E,EAAAkF,OAAApT,OAEA+S,EAAAQ,iBAAAC,SAAAnmB,KAAAwlB,YACAE,EAAAU,kBAAApmB,KAAAwlB,aAIA,CAMA,aAAAhI,CAAAjE,EAAA9T,GAIA,OAHAzF,KAAA0lB,UACA1lB,KAAAkiB,OAEA,IAAAC,QAAA,CAAAU,EAAAC,KACA,MAAAuD,EAAArmB,KAAA0lB,GAAAW,YAAArmB,KAAAwlB,UAAA,aAEAa,EAAAC,WAAA,KACAzD,KAEAwD,EAAAP,QAAAjF,IACAiC,EAAA,IAAAxZ,MAAA,iCAAkEiQ,WAAYsH,EAAAkF,OAAApN,WAE9E0N,EAAAE,QAAA1F,IACAiC,EAAA,IAAAxZ,MAAA,mCAAoEiQ,WAAYsH,EAAAkF,OAAApN,WAGhF0N,EAAAG,YAAAxmB,KAAAwlB,WACAiB,IAAAhhB,EAAA8T,IAEA,CAMA,aAAA+H,CAAA/H,GAIA,OAHAvZ,KAAA0lB,UACA1lB,KAAAkiB,OAEA,IAAAC,QAAA,CAAAU,EAAAC,KACA,MAAAuD,EAAArmB,KAAA0lB,GAAAW,YAAArmB,KAAAwlB,UAAA,YAEAa,EAAAP,QAAAjF,IACAiC,EAAA,IAAAxZ,MAAA,iCAAkEiQ,OAAQsH,EAAAkF,OAAApN,WAE1E0N,EAAAE,QAAA1F,IACAiC,EAAA,IAAAxZ,MAAA,mCAAoEiQ,OAAQsH,EAAAkF,OAAApN,WAG5E,MACAgN,EADAU,EAAAG,YAAAxmB,KAAAwlB,WACA7gB,IAAA4U,GACAoM,EAAAK,UAAA,KACAnD,EAAA8C,EAAAhT,QAAA,QAGA,CAKA,gBAAA+T,CAAAnN,GAIA,OAHAvZ,KAAA0lB,UACA1lB,KAAAkiB,OAEA,IAAAC,QAAA,CAAAU,EAAAC,KACA,MAAAuD,EAAArmB,KAAA0lB,GAAAW,YAAArmB,KAAAwlB,UAAA,aAEAa,EAAAC,WAAA,KACAzD,KAEAwD,EAAAP,QAAAjF,IACAiC,EAAA,IAAAxZ,MAAA,oCAAqEiQ,OAAQsH,EAAAkF,OAAApN,WAE7E0N,EAAAE,QAAA1F,IACAiC,EAAA,IAAAxZ,MAAA,sCAAuEiQ,OAAQsH,EAAAkF,OAAApN,WAG/E0N,EAAAG,YAAAxmB,KAAAwlB,WACAjE,OAAAhI,IAEA,CAIA,WAAAkK,GAIA,OAHAzjB,KAAA0lB,UACA1lB,KAAAkiB,OAEA,IAAAC,QAAA,CAAAU,EAAAC,KACA,MAAAuD,EAAArmB,KAAA0lB,GAAAW,YAAArmB,KAAAwlB,UAAA,aAEAa,EAAAC,WAAA,KACAzD,KAEAwD,EAAAP,QAAAjF,IACAiC,EAAA,IAAAxZ,MAAA,kCAAmEuX,EAAAkF,OAAApN,WAEnE0N,EAAAE,QAAA1F,IACAiC,EAAA,IAAAxZ,MAAA,oCAAqEuX,EAAAkF,OAAApN,WAGrE0N,EAAAG,YAAAxmB,KAAAwlB,WACA/B,SAEA,CAIA,KAAApB,GACAriB,KAAA0lB,KACA1lB,KAAA0lB,GAAArD,QACAriB,KAAA0lB,GAAA,KAEA,EAMA,MAAAiB,WAAA/G,GACAgH,OACA,WAAArd,CAAAgX,EAAAC,GACA,MAAAL,EAAA,IAAAmF,GAEA5b,MAAA6W,EADA,IAA0BC,EAAAL,aAG1B,MAAA0G,EAAArG,GAAAqG,WAjLA,IAAAnM,IAAmChX,EAAA,KAAAA,EAAAiC,GAkLnC3F,KAAA4mB,OAAA,IAAAE,aAAAD,EAAA,CAAoD9W,KAAA,WACpD/P,KAAA4mB,OAAAG,KAAAC,UAAAnG,IACA7gB,KAAAinB,oBAAApG,EAAAla,MAAAqT,MAAA9T,QAAAyS,QAEA3T,OAAA2b,iBAAA,oBACA3gB,KAAA4mB,OAAAG,KAAAG,YAAA,CAA2CnX,KAAAsV,GAAA8B,cAE3C,CACA,yBAAAF,CAAAtgB,GACA,MAAAoJ,KAAgBA,EAAAhG,QAAAA,EAAA4O,MAAAA,GAAuBhS,EACvC,OAAAoJ,GACA,KAAAsV,GAAA+B,cACA,MAAArE,EAAA/iB,KAAAgjB,eACAhjB,KAAA0iB,gBAAA3Y,EAAAyY,cACAO,IAAA/iB,KAAAgjB,UACAhjB,KAAA2iB,2BACA3iB,KAAAogB,gBAAApgB,KAAAqgB,iBACArgB,KAAAqgB,iBACArgB,KAAAujB,uBAEA,MACA,KAAA8B,GAAAgC,iBACArnB,KAAAgjB,UACAhjB,KAAAqjB,iCACArjB,KAAAogB,gBAAApgB,KAAAsgB,gBACAtgB,KAAAgjB,SACAhjB,KAAAsgB,cAAA,IAAAhX,MAAAqP,GAAA,yBAGA3Y,KAAAsgB,cAAA,IAAAhX,MAAA,0BAEAtJ,KAAAujB,uBAEA,MACA,KAAA8B,GAAAiC,QACAtnB,KAAAgjB,WACAhjB,KAAAojB,gCACApjB,KAAAwjB,UAEAxjB,KAAAogB,gBAAApgB,KAAAsgB,gBACAtgB,KAAAsgB,cAAA,IAAAhX,MAAAqP,GAAA,yBACA3Y,KAAAujB,uBAIA,CAEA,6BAAApC,SACAzX,MAAAyX,0BACAnhB,KAAAgjB,UACAhjB,KAAA4mB,OAAAG,KAAAG,YAAA,CACAnX,KAAAsV,GAAAkC,SACAxd,QAAA,IAA2B/J,KAAAqkB,kBAAAe,WAAAplB,KAAAmkB,iBAG3B,CACA,aAAAvB,GACA,OAAA5iB,KAAAogB,iBAGApgB,KAAAogB,eAAA,IAAA+B,QAAA,CAAAU,EAAAC,KACA9iB,KAAAqgB,eAAAwC,EACA7iB,KAAAsgB,cAAAwC,IAEA9iB,KAAA4mB,OAAAG,KAAAG,YAAA,CAAuCnX,KAAAsV,GAAAmC,WANvCxnB,KAAAogB,cAQA,CACA,YAAAoD,GACAxjB,KAAA4mB,OAAAG,KAAAG,YAAA,CAAuCnX,KAAAsV,GAAAoC,aACvC/d,MAAA8Z,QACA,ECtmFA,IAAIkE,GAAQrhB,OACZ,MAAMshB,GAAWrjB,GAAAA,aAAAiC,UAMjB,IAAIqhB,GAJQnhB,MAAAC,EAAAC,KACZ,MAAAC,EAAA,OAAgCF,EAAAG,OAAA,KAChC,WAAAC,iBAAgC4gB,GAAQ3gB,OAAAC,OAAAJ,EAAAD,KAIxC,MAAMkhB,GAAO,IAAA3gB,YACP4gB,GAAO,IAAA1gB,YACb,SAAS2gB,MAAMzgB,GACf,MAAAC,EAAAD,EAAAE,OAAA,CAAAC,GAAwCC,YAAQD,EAAAC,EAAA,GAChDC,EAAA,IAAAb,WAAAS,GACA,IAAAK,EAAA,EACA,UAAAC,KAAAP,EACAK,EAAAG,IAAAD,EAAAD,GACAA,GAAAC,EAAAH,OAEA,OAAAC,CACA,CAEA,MAYMqgB,GAAMhgB,GAZM,CAAAA,IAClB,IAAAC,EAAAD,EACA,iBAAAC,IACAA,EAAoB4f,GAAO9f,OAAAE,IAE3B,MACAC,EAAA,GACA,QAAAN,EAAA,EAAoBA,EAAAK,EAAAP,OAAsBE,GAF1C,MAGAM,EAAAC,KAAAC,OAAAC,aAAAC,MAAA,KAAAL,EAAAM,SAAAX,EAAAA,EAHA,SAKA,OAAAY,KAAAN,EAAAO,KAAA,MAGWwf,CAAYjgB,GAAAW,QAAA,SAAAA,QAAA,WAAAA,QAAA,WAUjBuf,GAAQlgB,IACd,IAAAa,EAAAb,EACAa,aAAA/B,aACA+B,EAAkBif,GAAOhf,OAAAD,IAEzBA,EAAAA,EAAAF,QAAA,UAAAA,QAAA,UAAAA,QAAA,UACA,IACA,MAfkB,CAAAE,IAClB,MAAAE,EAAAC,KAAAH,GACAI,EAAA,IAAAnC,WAAAiC,EAAArB,QACA,QAAAE,EAAA,EAAoBA,EAAAmB,EAAArB,OAAmBE,IACvCqB,EAAArB,GAAAmB,EAAAG,WAAAtB,GAEA,OAAAqB,GASekf,CAAYtf,EAC3B,CACA,MACA,UAAAO,UAAA,oDACA,GAGA,MAAMgf,WAAS9e,MACf,WAAAC,CAAAC,EAAAC,GACAC,MAAAF,EAAAC,GACAzJ,KAAA2J,KAAA,mBACA3J,KAAA4J,KAAA5J,KAAAuJ,YAAAK,KACAN,MAAAO,oBAAA7J,KAAAA,KAAAuJ,YACA,EAEA6e,GAASze,KAAA,mBACT,MAAM0e,WAAiCD,GACvC,WAAA7e,CAAAC,EAAAO,EAAAC,EAAA,cAAAC,EAAA,eACAP,MAAAF,EAAA,CAAyBU,MAAA,CAASF,QAAAC,SAAAF,aAClC/J,KAAA2J,KAAA,kCACA3J,KAAAgK,MAAAA,EACAhK,KAAAiK,OAAAA,EACAjK,KAAA+J,QAAAA,CACA,EAEAse,GAAwB1e,KAAA,kCACxB,MAAM2e,WAAmBF,GACzB,WAAA7e,CAAAC,EAAAO,EAAAC,EAAA,cAAAC,EAAA,eACAP,MAAAF,EAAA,CAAyBU,MAAA,CAASF,QAAAC,SAAAF,aAClC/J,KAAA2J,KAAA,kBACA3J,KAAAgK,MAAAA,EACAhK,KAAAiK,OAAAA,EACAjK,KAAA+J,QAAAA,CACA,EAEAue,GAAU3e,KAAA,kBACV,MAAM4e,WAA0BH,GAChC,WAAA7e,GACAG,SAAAW,WACArK,KAAA2J,KAAA,0BACA,EAEA4e,GAAiB5e,KAAA,2BACjB,MAAM6e,WAAyBJ,GAC/B,WAAA7e,GACAG,SAAAW,WACArK,KAAA2J,KAAA,wBACA,EAEA6e,GAAgB7e,KAAA,0BAChB,cAAkCye,GAClC,WAAA7e,CAAAC,EAAA,8BAAAC,GACAC,MAAAF,EAAAC,GACAzJ,KAAA2J,KAAA,2BACA,IAEmBA,KAAA,6BACnB,cAAyBye,GACzB,WAAA7e,GACAG,SAAAW,WACArK,KAAA2J,KAAA,iBACA,IAEUA,KAAA,kBACV,MAAM8e,WAAmBL,GACzB,WAAA7e,GACAG,SAAAW,WACArK,KAAA2J,KAAA,iBACA,EAEA8e,GAAU9e,KAAA,kBACV,MAAM+e,WAAmBN,GACzB,WAAA7e,GACAG,SAAAW,WACArK,KAAA2J,KAAA,iBACA,EAEA+e,GAAU/e,KAAA,kBACV,MAAMgf,WAAmBP,GACzB,WAAA7e,GACAG,SAAAW,WACArK,KAAA2J,KAAA,iBACA,EAEAgf,GAAUhf,KAAA,kBACV,MAAMif,WAAoBR,GAC1B,WAAA7e,GACAG,SAAAW,WACArK,KAAA2J,KAAA,kBACA,EAEAif,GAAWjf,KAAA,mBACX,MAAMkf,WAA0BT,GAChC,WAAA7e,CAAAC,EAAA,kDAAAC,GACAC,MAAAF,EAAAC,GACAzJ,KAAA2J,KAAA,0BACA,EAEAkf,GAAiBlf,KAAA,2BACjB,MAAMmf,WAAiCV,GACvC,WAAA7e,CAAAC,EAAA,uDAAAC,GACAC,MAAAF,EAAAC,GACAzJ,KAAA2J,KAAA,iCACA,EAEAmf,GAAwBnf,KAAA,kCACxB,MAAMof,WAAoBX,GAC1B,WAAA7e,CAAAC,EAAA,oBAAAC,GACAC,MAAAF,EAAAC,GACAzJ,KAAA2J,KAAA,kBACA,EAEAof,GAAWpf,KAAA,mBACX,MAAMqf,WAAuCZ,GAC7C,WAAA7e,CAAAC,EAAA,gCAAAC,GACAC,MAAAF,EAAAC,GACAzJ,KAAA2J,KAAA,uCACA,EAIA,SAASsf,GAAQrf,EAAA1E,EAAA,kBACjB,WAAAkE,UAAA,kDAA2ElE,aAAgB0E,IAC3F,CACA,SAASsf,GAAWxiB,EAAAkD,GACpB,OAAAlD,EAAAkD,OAAAA,CACA,CACA,SAASuf,GAAaje,GACtB,OAAAC,SAAAD,EAAAtB,KAAA/C,MAAA,MACA,CA6BA,SAASuiB,GAAiB9kB,EAAA+G,KAAAC,GAC1B,OAAAD,GACA,YACA,YACA,aACA,IAAiB6d,GAAW5kB,EAAAoC,UAAA,QAC5B,MAAsBuiB,GAAQ,QAC9B,MAAA1d,EAAAJ,SAAAE,EAAAxE,MAAA,OAEA,GAD2BsiB,GAAa7kB,EAAAoC,UAAAwE,QACxCK,EACA,MAAsB0d,GAAQ,OAAQ1d,IAAS,kBAC/C,KACA,CACA,YACA,YACA,aACA,IAAiB2d,GAAW5kB,EAAAoC,UAAA,qBAC5B,MAAsBuiB,GAAQ,qBAC9B,MAAA1d,EAAAJ,SAAAE,EAAAxE,MAAA,OAEA,GAD2BsiB,GAAa7kB,EAAAoC,UAAAwE,QACxCK,EACA,MAAsB0d,GAAQ,OAAQ1d,IAAS,kBAC/C,KACA,CACA,YACA,YACA,aACA,IAAiB2d,GAAW5kB,EAAAoC,UAAA,WAC5B,MAAsBuiB,GAAQ,WAC9B,MAAA1d,EAAAJ,SAAAE,EAAAxE,MAAA,OAEA,GAD2BsiB,GAAa7kB,EAAAoC,UAAAwE,QACxCK,EACA,MAAsB0d,GAAQ,OAAQ1d,IAAS,kBAC/C,KACA,CACA,YACA,eAAAjH,EAAAoC,UAAAkD,MAAA,UAAAtF,EAAAoC,UAAAkD,KACA,MAAsBqf,GAAQ,oBAE9B,MAEA,cACA,IAAiBC,GAAW5kB,EAAAoC,UAAA,WAC5B,MAAsBuiB,GAAQ,WAC9B,MAEA,YACA,YACA,aACA,IAAiBC,GAAW5kB,EAAAoC,UAAA,SAC5B,MAAsBuiB,GAAQ,SAC9B,MAAA1d,EA/EA,SAAsBF,GACtB,OAAAA,GACA,YACA,cACA,YACA,cACA,YACA,cACA,QACA,UAAA/B,MAAA,eAEA,CAoE6B+f,CAAahe,GAE1C,GADA/G,EAAAoC,UAAA+E,aACAF,EACA,MAAsB0d,GAAQ1d,EAAA,wBAC9B,KACA,CACA,QACA,UAAAnC,UAAA,8CA1EA,SAAmB9E,EAAAgH,GACnB,GAAAA,EAAA5D,SAAA4D,EAAAI,KAAAH,GAAAjH,EAAAgH,OAAAK,SAAAJ,IAAA,CACA,IAAAK,EAAA,sEACA,GAAAN,EAAA5D,OAAA,GACA,MAAAmE,EAAAP,EAAAQ,MACAF,GAAA,UAA6BN,EAAA7C,KAAA,aAAyBoD,IACtD,MACA,IAAAP,EAAA5D,OACAkE,GAAA,UAA6BN,EAAA,SAAgBA,EAAA,MAG7CM,GAAA,GAAsBN,EAAA,MAEtB,UAAAlC,UAAAwC,EACA,CACA,CA6DI0d,CAAUhlB,EAAAgH,EACd,CAEA,SAASie,GAAO3d,EAAAI,KAAAC,GAEhB,IADAA,EAAAA,EAAAC,OAAAC,UACAzE,OAAA,GACA,MAAAmE,EAAAI,EAAAH,MACAF,GAAA,eAA8BK,EAAAxD,KAAA,aAAwBoD,IACtD,MACA,IAAAI,EAAAvE,OACAkE,GAAA,eAA8BK,EAAA,SAAeA,EAAA,MAG7CL,GAAA,WAA0BK,EAAA,MAa1B,OAXA,MAAAD,EACAJ,GAAA,aAA4BI,IAE5B,mBAAAA,GAAAA,EAAApC,KACAgC,GAAA,sBAAqCI,EAAApC,OAErC,iBAAAoC,GAAA,MAAAA,GACAA,EAAAzC,aAAAK,OACAgC,GAAA,4BAA+CI,EAAAzC,YAAAK,QAG/CgC,CACA,CA9HAod,GAA8Brf,KAAA,wCA+H9B,IAAI6f,GAAe,CAAAxd,KAAAC,IACRsd,GAAO,eAAAvd,KAAAC,GAElB,SAASwd,GAAOpe,EAAAW,KAAAC,GAChB,OAAWsd,GAAO,eAAgBle,uBAAKW,KAAAC,EACvC,CAEA,IAAIyd,GAASplB,KACLqjB,GAAWrjB,IAGnB,cAAAA,IAAAiB,OAAAC,aAEA,MAAMmkB,GAAK,cAuBX,IAAIC,GArBY,IAAApd,KAChB,MAAAC,EAAAD,EAAAN,OAAAC,SACA,OAAAM,EAAA/E,QAAA,IAAA+E,EAAA/E,OACA,SAEA,IAAAD,EACA,UAAAiF,KAAAD,EAAA,CACA,MAAAE,EAAAnI,OAAAoI,KAAAF,GACA,GAAAjF,GAAA,IAAAA,EAAAF,KAIA,UAAAsF,KAAAF,EAAA,CACA,GAAAlF,EAAAqF,IAAAD,GACA,SAEApF,EAAAsF,IAAAF,EACA,MARApF,EAAA,IAAAuF,IAAAL,EASA,CACA,UAOA,SAASkd,GAAQ7hB,GACjB,GAHA,iBADqBvC,EAIAuC,IAHrB,OAAAvC,GAGqB,oBAAAjB,OAAAW,UAAA+H,SAAA7H,KAAA2C,GACrB,SALA,IAAqBvC,EAOrB,UAAAjB,OAAA2I,eAAAnF,GACA,SAEA,IAAAoF,EAAApF,EACA,YAAAxD,OAAA2I,eAAAC,IACAA,EAAA5I,OAAA2I,eAAAC,GAEA,OAAA5I,OAAA2I,eAAAnF,KAAAoF,CACA,CAEA,IAAI0c,GAAc,CAAAze,EAAA/G,KAClB,GAAA+G,EAAAiC,WAAA,OAAAjC,EAAAiC,WAAA,OACA,MAAAC,cAAgBA,GAAgBjJ,EAAAoC,UAChC,oBAAA6G,GAAAA,EAAA,KACA,UAAAnE,UAAA,GAAmCiC,yDAEnC,GAGA,SAAS0e,GAAKzlB,GACd,OAAWulB,GAAQvlB,IAAA,iBAAAA,EAAAmJ,GACnB,CAgHA,IAAIuc,GAfOvjB,MAAAkH,IACX,IAAAA,EAAAtC,IACA,UAAAjC,UAAA,4DAEA,MAAA1C,UAAYA,EAAAkH,UAAAA,GA1FZ,SAAsBD,GACtB,IAAAjH,EACAkH,EACA,OAAAD,EAAAF,KACA,UACA,OAAAE,EAAAtC,KACA,YACA,YACA,YACA3E,EAAA,CAAkCkD,KAAA,UAAAsB,KAAA,OAA8ByC,EAAAtC,IAAAxE,OAAA,MAChE+G,EAAAD,EAAAxJ,EAAA,oBACA,MACA,YACA,YACA,YACAuC,EAAA,CAAkCkD,KAAA,oBAAAsB,KAAA,OAAwCyC,EAAAtC,IAAAxE,OAAA,MAC1E+G,EAAAD,EAAAxJ,EAAA,oBACA,MACA,eACA,mBACA,mBACA,mBACAuC,EAAA,CACAkD,KAAA,WACAsB,KAAA,OAAqCC,SAAAwC,EAAAtC,IAAAxE,OAAA,aAErC+G,EAAAD,EAAAxJ,EAAA,8CACA,MACA,QACA,UAA8BqkB,GAAgB,gEAE9C,MAEA,SACA,OAAA7a,EAAAtC,KACA,YACA3E,EAAA,CAAkCkD,KAAA,QAAA6B,WAAA,SAClCmC,EAAAD,EAAAxJ,EAAA,oBACA,MACA,YACAuC,EAAA,CAAkCkD,KAAA,QAAA6B,WAAA,SAClCmC,EAAAD,EAAAxJ,EAAA,oBACA,MACA,YACAuC,EAAA,CAAkCkD,KAAA,QAAA6B,WAAA,SAClCmC,EAAAD,EAAAxJ,EAAA,oBACA,MACA,cACA,qBACA,qBACA,qBACAuC,EAAA,CAAkCkD,KAAA,OAAA6B,WAAAkC,EAAAE,KAClCD,EAAAD,EAAAxJ,EAAA,kBACA,MACA,QACA,UAA8BqkB,GAAgB,gEAE9C,MAEA,UACA,OAAA7a,EAAAtC,KACA,cACA3E,EAAA,CAAkCkD,KAAA,WAClCgE,EAAAD,EAAAxJ,EAAA,oBACA,MACA,YACAuC,EAAA,CAAkCkD,KAAA+D,EAAAE,KAClCD,EAAAD,EAAAxJ,EAAA,oBACA,MACA,cACA,qBACA,qBACA,qBACAuC,EAAA,CAAkCkD,KAAA+D,EAAAE,KAClCD,EAAAD,EAAAxJ,EAAA,kBACA,MACA,QACA,UAA8BqkB,GAAgB,gEAE9C,MAEA,QACA,UAAsBA,GAAgB,+DAEtC,OAAa9hB,YAAAkH,YACb,CAKqCqc,CAAatc,GAClDI,EAAA,CACArH,EACAiH,EAAAK,MAAA,EACAL,EAAAM,SAAAL,GAEAM,EAAA,IAAsBP,GAGtB,cAFAO,EAAA7C,WACA6C,EAAAC,IACWuZ,GAAQ3gB,OAAAqH,UAAA,MAAAF,KAAAH,IAInB,MAAMmc,GAAc5b,GAAU4Z,GAAQ5Z,GACtC,IAAI6b,GACAC,GACJ,MAAMC,GAAW/lB,GACjB,cAAAA,IAAAiB,OAAAC,aAEM8kB,GAAc7jB,MAAAkI,EAAArK,EAAAqJ,EAAAtC,EAAAuD,GAAA,KACpB,IAAAC,EAAAF,EAAAhK,IAAAL,GACA,GAAAuK,IAAAxD,GACA,OAAAwD,EAAAxD,GAEA,MAAAyD,QAA4Bkb,GAAW,IAAGrc,EAAAtC,QAS1C,OARAuD,GACApK,OAAAoK,OAAAtK,GACAuK,EAIAA,EAAAxD,GAAAyD,EAHAH,EAAA7G,IAAAxD,EAAA,CAAyB+G,CAAAA,GAAAyD,IAKzBA,GA4CA,IAAIyb,GA1CoB,CAAAjmB,EAAA+G,KACxB,GAAQgf,GAAW/lB,GAAA,CACnB,IAAAqJ,EAAArJ,EAAA0K,OAAA,CAA+BC,OAAA,QAO/B,cANAtB,EAAAxJ,SACAwJ,EAAAuB,UACAvB,EAAAwB,UACAxB,EAAAjI,SACAiI,EAAAyB,SACAzB,EAAA0B,GACA1B,EAAAW,EACmB4b,GAAcvc,EAAAW,IAEzB8b,KAAaA,GAAQ,IAAA9a,SACdgb,GAAeF,GAAQ9lB,EAAAqJ,EAAAtC,GACtC,CACA,GAAQ0e,GAAKzlB,GAAA,CACb,GAAAA,EAAAgK,EACA,OAAmB4Z,GAAQ5jB,EAAAgK,GACnB8b,KAAaA,GAAQ,IAAA9a,SAE7B,OAD0Bgb,GAAeF,GAAQ9lB,EAAAA,EAAA+G,GAAA,EAEjD,CACA,OAAA/G,GAoBIimB,GAlBqB,CAAAjmB,EAAA+G,KACzB,GAAQgf,GAAW/lB,GAAA,CACnB,IAAAqJ,EAAArJ,EAAA0K,OAAA,CAA+BC,OAAA,QAC/B,OAAAtB,EAAAW,EACmB4b,GAAcvc,EAAAW,IAEzB6b,KAAcA,GAAS,IAAA7a,SAChBgb,GAAeH,GAAS7lB,EAAAqJ,EAAAtC,GACvC,CACA,GAAQ0e,GAAKzlB,GAAA,CACb,GAAAA,EAAAgK,EACA,OAAmB4Z,GAAQ5jB,EAAAgK,GACnB6b,KAAcA,GAAS,IAAA7a,SAE/B,OAD0Bgb,GAAeH,GAAS7lB,EAAAA,EAAA+G,GAAA,EAElD,CACA,OAAA/G,GAIAmC,eAAe+jB,GAAS7c,EAAAtC,GACxB,IAASwe,GAAQlc,GACjB,UAAAvE,UAAA,yBAGA,OADAiC,IAAAA,EAAAsC,EAAAtC,KACAsC,EAAAF,KACA,UACA,oBAAAE,EAAAW,IAAAX,EAAAW,EACA,UAAAlF,UAAA,2CAEA,OAAmB8e,GAAQva,EAAAW,GAC3B,UACA,WAAAX,QAAA9J,IAAA8J,EAAA6B,IACA,UAA0BgZ,GAAgB,sEAE1C,SACA,UACA,OAAmBwB,GAAW,IAAGrc,EAAAtC,QACjC,QACA,UAAsBmd,GAAgB,gDAEtC,CAEA,MAAMiC,GAAGnmB,GAAAA,IAAAiB,OAAAC,aACHklB,GAAY,CAAArf,EAAA/G,EAAAqL,KAClB,QAAA9L,IAAAS,EAAA6J,KAAA,QAAA7J,EAAA6J,IACA,UAAA/E,UAAA,oEAEA,QAAAvF,IAAAS,EAAA2J,UAAA,IAAA3J,EAAA2J,QAAAtC,WAAAgE,GACA,UAAAvG,UAAA,yEAAqGuG,KAErG,QAAA9L,IAAAS,EAAA+G,KAAA/G,EAAA+G,MAAAA,EACA,UAAAjC,UAAA,gEAA4FiC,KAE5F,UAEMsf,GAAkB,CAAAtf,EAAA/G,EAAAqL,EAAAE,KACxB,KAAAvL,aAAAwC,YAAA,CAEA,GAAA+I,GAAoBka,GAAKzlB,GAAA,CACzB,GArNA,SAAoBA,GACpB,OAAWylB,GAAKzlB,IAAA,QAAAA,EAAAmJ,KAAA,iBAAAnJ,EAAAgK,CAChB,CAmNYsc,CAAWtmB,IAASomB,GAAYrf,EAAA/G,EAAAqL,GAC5C,OACA,UAAAvG,UAAA,0HACA,CACA,IAASsgB,GAASplB,GAClB,UAAA8E,UAA4BqgB,GAAOpe,EAAA/G,KAAcqlB,GAAK,aAAA9Z,EAAA,sBAEtD,cAAAvL,EAAAyL,KACA,UAAA3G,UAAA,GAA+BqhB,GAAGnmB,iEAVlC,GA6CA,SAASumB,GAAYhb,EAAAxE,EAAA/G,EAAAqL,GACrBtE,EAAAiC,WAAA,OACA,QAAAjC,GACAA,EAAAiC,WAAA,UACA,qBAAgB2C,KAAA5E,GAERsf,GAAkBtf,EAAA/G,EAAAqL,EAAAE,GAtCD,EAAAxE,EAAA/G,EAAAqL,EAAAE,KACzB,GAAAA,GAAoBka,GAAKzlB,GACzB,OAAAqL,GACA,WACA,GA1OA,SAAqBrL,GACrB,cAAAA,EAAAmJ,KAAA,iBAAAnJ,EAAAH,CACA,CAwOoB2mB,CAAYxmB,IAASomB,GAAYrf,EAAA/G,EAAAqL,GACrD,OACA,UAAAvG,UAAA,oDACA,aACA,GA3OA,SAAoB9E,GACpB,cAAAA,EAAAmJ,UAAA,IAAAnJ,EAAAH,CACA,CAyOoB4mB,CAAWzmB,IAASomB,GAAYrf,EAAA/G,EAAAqL,GACpD,OACA,UAAAvG,UAAA,mDAGA,IAASsgB,GAASplB,GAClB,UAAA8E,UAA4BqgB,GAAOpe,EAAA/G,KAAcqlB,GAAK9Z,EAAA,sBAEtD,cAAAvL,EAAAyL,KACA,UAAA3G,UAAA,GAA+BqhB,GAAGnmB,uEAElC,YAAAqL,GAAA,WAAArL,EAAAyL,KACA,UAAA3G,UAAA,GAA+BqhB,GAAGnmB,2EAElC,eAAAqL,GAAA,WAAArL,EAAAyL,KACA,UAAA3G,UAAA,GAA+BqhB,GAAGnmB,8EAElC,GAAAA,EAAAoC,WAAA,WAAAiJ,GAAA,YAAArL,EAAAyL,KACA,UAAA3G,UAAA,GAA+BqhB,GAAGnmB,4EAElC,GAAAA,EAAAoC,WAAA,YAAAiJ,GAAA,YAAArL,EAAAyL,KACA,UAAA3G,UAAA,GAA+BqhB,GAAGnmB,8EAY1B0mB,CAAmB3f,EAAA/G,EAAAqL,EAAAE,EAE3B,CACAgb,GAAYxa,UAAAxM,GAAA,GACZ,MAAMonB,GAAsBJ,GAAYxa,UAAAxM,GAAA,GAExC,SAASqnB,GAAY1a,EAAAC,EAAAC,EAAAC,EAAAC,GACrB,QAAA/M,IAAA+M,EAAAC,WAAAhN,IAAA8M,GAAAE,KACA,UAAAL,EAAA,kEAEA,IAAAG,QAAA9M,IAAA8M,EAAAE,KACA,WAAA7D,IAEA,IAAA8D,MAAAC,QAAAJ,EAAAE,OACA,IAAAF,EAAAE,KAAAnJ,QACAiJ,EAAAE,KAAAnF,KAAA1D,GAAA,iBAAAA,GAAA,IAAAA,EAAAN,QACA,UAAA8I,EAAA,yFAEA,IAAAQ,EAEAA,OADAnN,IAAA6M,EACA,IAAAO,IAAA,IAAAzM,OAAA0M,QAAAR,MAAAD,EAAAS,YAGAT,EAEA,UAAA5D,KAAA8D,EAAAE,KAAA,CACA,IAAAG,EAAAlE,IAAAD,GACA,UAAsB2b,GAAgB,+BAAgC3b,wBAEtE,QAAAhJ,IAAA+M,EAAA/D,GACA,UAAA2D,EAAA,+BAAyD3D,iBAEzD,GAAAmE,EAAArM,IAAAkI,SAAAhJ,IAAA8M,EAAA9D,GACA,UAAA2D,EAAA,+BAAyD3D,iCAEzD,CACA,WAAAG,IAAA2D,EAAAE,KACA,CAYA,IAAIsa,GAVoB,CAAA/Z,EAAAC,KACxB,QAAAxN,IAAAwN,KACAP,MAAAC,QAAAM,IAAAA,EAAA3F,KAAA4F,GAAA,iBAAAA,IACA,UAAAlI,UAAA,IAAgCgI,yCAEhC,GAAAC,EAGA,WAAArE,IAAAqE,IAoBA,IAAI+Z,GAhBU3kB,MAAAnC,IACd,GAAAA,aAAAwC,WACA,OACA2G,IAAA,MACAa,EAAe0Z,GAAM1jB,IAGrB,IAASqjB,GAAWrjB,GACpB,UAAA8E,UAA4BogB,GAAellB,KAASqlB,GAAK,eAEzD,IAAArlB,EAAAkN,YACA,UAAApI,UAAA,yDAEA,MAAA4E,IAAYA,EAAAC,QAAAA,EAAA5C,IAAAA,EAAA8C,IAAAA,KAAAR,SAAyC+Z,GAAQ3gB,OAAA0K,UAAA,MAAAnN,GAC7D,OAAAqJ,GAIAlH,eAAe4kB,GAAS/mB,GACxB,OAAW8mB,GAAU9mB,EACrB,CAEA,SAASgnB,GAASjgB,EAAA3E,GAClB,MAAAwE,EAAA,OAAwBG,EAAAxE,OAAA,KACxB,OAAAwE,GACA,YACA,YACA,YACA,OAAqBH,OAAAtB,KAAA,QACrB,YACA,YACA,YACA,OAAqBsB,OAAAtB,KAAA,UAAAgI,WAAAvG,EAAAxE,OAAA,OACrB,YACA,YACA,YACA,OAAqBqE,OAAAtB,KAAA,qBACrB,YACA,YACA,YACA,OAAqBsB,OAAAtB,KAAA,QAAA6B,WAAA/E,EAAA+E,YACrB,cACA,OAAqB7B,KAAA,WACrB,YACA,OAAqBA,KAAAlD,EAAAkD,MACrB,QACA,UAAsB4e,GAAgB,OAAQnd,gEAE9C,CAEA5E,eAAe8kB,GAAYlgB,EAAA/G,EAAAqL,GAO3B,GANA,SAAAA,IACArL,QAAoBimB,GAASjmB,EAAA+G,IAE7B,WAAAsE,IACArL,QAAoBimB,GAASjmB,EAAA+G,IAErBsc,GAAWrjB,GAEnB,OADQ8kB,GAAiB9kB,EAAA+G,EAAAsE,GACzBrL,EAEA,GAAAA,aAAAwC,WAAA,CACA,IAAAuE,EAAAiC,WAAA,MACA,UAAAlE,UAAgCogB,GAAellB,KAASqlB,KAExD,OAAejC,GAAQ3gB,OAAAqH,UAAA,MAAA9J,EAAA,CAAgC4G,KAAA,OAAaG,EAAAxE,OAAA,KAAc+C,KAAA,SAAiB,GAAA+F,GACnG,CACA,UAAAvG,UAAwBogB,GAAellB,KAASqlB,GAAK,6BACrD,CAaA,IAAI6B,GAXQ/kB,MAAA4E,EAAA/G,EAAAyN,EAAApL,KACZ,MAAAmI,QAA4Byc,GAAYlgB,EAAA/G,EAAA,UACpCwlB,GAAcze,EAAAyD,GAClB,MAAApI,EAAsB4kB,GAASjgB,EAAAyD,EAAApI,WAC/B,IACA,aAAqBghB,GAAQ3gB,OAAAiL,OAAAtL,EAAAoI,EAAAiD,EAAApL,EAC7B,CACA,MACA,QACA,GAoHAF,eAAeglB,GAAavZ,EAAA5N,EAAAmF,GAI5B,GAHAyI,aAAApL,aACAoL,EAAc4V,GAAOhf,OAAAoJ,IAErB,iBAAAA,EACA,UAAkBuW,GAAU,8CAE5B,MAAY,EAAA9X,EAAA,EAAA5G,EAAA,EAAAgI,EAAArK,OAAAA,GAAuDwK,EAAAC,MAAA,KACnE,OAAAzK,EACA,UAAkB+gB,GAAU,uBAE5B,MAAArW,QA3HA3L,eAA8ByL,EAAA5N,EAAAmF,GAC9B,IAASogB,GAAQ3X,GACjB,UAAkBuW,GAAU,mCAE5B,QAAA5kB,IAAAqO,EAAAG,gBAAAxO,IAAAqO,EAAAxF,OACA,UAAkB+b,GAAU,yEAE5B,QAAA5kB,IAAAqO,EAAAG,WAAA,iBAAAH,EAAAG,UACA,UAAkBoW,GAAU,uCAE5B,QAAA5kB,IAAAqO,EAAAnI,QACA,UAAkB0e,GAAU,uBAE5B,oBAAAvW,EAAAH,UACA,UAAkB0W,GAAU,2CAE5B,QAAA5kB,IAAAqO,EAAAxF,SAAqCmd,GAAQ3X,EAAAxF,QAC7C,UAAkB+b,GAAU,yCAE5B,IAAAnW,EAAA,GACA,GAAAJ,EAAAG,UACA,IACA,MAAA1B,EAAoCuX,GAAQhW,EAAAG,WAC5CC,EAAAC,KAAAC,MAAoCsV,GAAOhf,OAAA6H,GAC3C,CACA,MACA,UAAsB8X,GAAU,kCAChC,CAEA,IAASmB,GAAYtX,EAAAJ,EAAAxF,QACrB,UAAkB+b,GAAU,6EAE5B,MAAA7X,EAAA,IACA0B,KACAJ,EAAAxF,QAGA,IAAA+F,GAAA,EACA,GAFuByY,GAAazC,GAAU,IAAAxX,IAAA,cAAAxH,GAAAoH,KAAAyB,EAAA1B,GAE9C9D,IAAA,SACA2F,EAAAH,EAAAG,IACA,kBAAAA,GACA,UAAsBgW,GAAU,2EAGhC,MAAApd,IAAYA,GAAMuF,EAClB,oBAAAvF,IAAAA,EACA,UAAkBod,GAAU,6DAE5B,MAAApX,EAAA5H,GAAkC0hB,GAAoB,aAAA1hB,EAAA4H,YACtD,GAAAA,IAAAA,EAAAvE,IAAAzB,GACA,UAAkBkd,GAAiB,wDAEnC,GAAA9V,GACA,oBAAAP,EAAAnI,QACA,UAAsB0e,GAAU,qCAGhC,oBAAAvW,EAAAnI,WAAAmI,EAAAnI,mBAAAjD,YACA,UAAkB2hB,GAAU,0DAE5B,IAAA/V,GAAA,EACA,mBAAApO,GACAA,QAAAA,EAAAgO,EAAAJ,GACAQ,GAAA,EACQuY,GAAmB5f,EAAA/G,EAAA,UACfylB,GAAKzlB,KACjBA,QAAwBkmB,GAASlmB,EAAA+G,KAIzB4f,GAAmB5f,EAAA/G,EAAA,UAE3B,MAAAqC,EAAiBohB,GAAOF,GAAO9f,OAAAmK,EAAAG,WAAA,IAA8BwV,GAAO9f,OAAA,sBAAAmK,EAAAnI,QAAgD8d,GAAO9f,OAAAmK,EAAAnI,SAAAmI,EAAAnI,SAC3H,IAAAgI,EAWAhI,EAVA,IACAgI,EAAoBmW,GAAQhW,EAAAH,UAC5B,CACA,MACA,UAAkB0W,GAAU,2CAC5B,CAEA,UAD2B+C,GAAQngB,EAAA/G,EAAAyN,EAAApL,GAEnC,UAAkBqiB,GAGlB,GAAAvW,EACA,IACA1I,EAAsBme,GAAQhW,EAAAnI,QAC9B,CACA,MACA,UAAsB0e,GAAU,yCAChC,MAGA1e,EADA,iBAAAmI,EAAAnI,QACkB8d,GAAO9f,OAAAmK,EAAAnI,SAGzBmI,EAAAnI,QAEA,MAAA4I,EAAA,CAAqB5I,WAOrB,YANAlG,IAAAqO,EAAAG,YACAM,EAAAhC,gBAAA2B,QAEAzO,IAAAqO,EAAAxF,SACAiG,EAAAC,kBAAAV,EAAAxF,QAEAgG,EACA,IAAiBC,EAAArO,OAEjBqO,CACA,CAa2B+Y,CAAe,CAAG3hB,UAAAsI,UAAA1B,EAAAoB,aAAgDzN,EAAAmF,GAC7FkJ,EAAA,CAAqB5I,QAAAqI,EAAArI,QAAA4G,gBAAAyB,EAAAzB,iBACrB,yBAAArM,EACA,IAAiBqO,EAAArO,IAAA8N,EAAA9N,KAEjBqO,CACA,CAEA,IAAIgZ,GAAK5Y,GAAAC,KAAAC,MAAAF,EAAAG,UAAA,KAET,MAEM0Y,GAAMC,MAGNC,GAAK,oIACX,IAAIC,GAAIxY,IACR,MAAAC,EAAoBsY,GAAKrY,KAAAF,GACzB,IAAAC,GAAAA,EAAA,IAAAA,EAAA,GACA,UAAApK,UAAA,8BAEA,MAAA3D,EAAAiO,WAAAF,EAAA,IAEA,IAAAG,EACA,OAFAH,EAAA,GAAAI,eAGA,UACA,WACA,aACA,cACA,QACAD,EAAAX,KAAAa,MAAApO,GACA,MACA,aACA,cACA,UACA,WACA,QACAkO,EAAAX,KAAAa,MA3BY,GA2BZpO,GACA,MACA,WACA,YACA,SACA,UACA,QACAkO,EAAAX,KAAAa,MAjCamY,KAiCbvmB,GACA,MACA,UACA,WACA,QACAkO,EAAAX,KAAAa,MAAApO,EAA6CmmB,IAC7C,MACA,WACA,YACA,QACAjY,EAAAX,KAAAa,MAzCa+X,OAyCbnmB,GACA,MACA,QACAkO,EAAAX,KAAAa,MA3Ca+X,SA2CbnmB,GAGA,YAAA+N,EAAA,YAAAA,EAAA,IACAG,EAEAA,GAGA,MAAMsY,GAAYxmB,GAAAA,EAAAmO,cAAAjL,QAAA,qBAUlB,IAAIujB,GAAU,CAAAvb,EAAAsD,EAAAxK,EAAA,MACd,IAAAM,EACA,IACAA,EAAAwI,KAAAC,MAA6BsV,GAAOhf,OAAAmL,GACpC,CACA,MACA,CACA,IAAS4V,GAAQ9f,GACjB,UAAkB2e,GAAU,kDAE5B,MAAAxU,IAAYA,GAAMzK,EAClB,GAAAyK,IACA,iBAAAvD,EAAAuD,KACY+X,GAAYtb,EAAAuD,OAA0B+X,GAAY/X,IAC9D,UAAkBmU,GAAwB,oCAAAte,EAAA,sBAE1C,MAAAoK,eAAYA,EAAA,GAAAC,OAAAA,EAAAC,QAAAA,EAAAC,SAAAA,EAAAC,YAAAA,GAA8D9K,EAC1E+K,EAAA,IAAAL,QACAtQ,IAAA0Q,GACAC,EAAArM,KAAA,YACAtE,IAAAyQ,GACAE,EAAArM,KAAA,YACAtE,IAAAwQ,GACAG,EAAArM,KAAA,YACAtE,IAAAuQ,GACAI,EAAArM,KAAA,OACA,UAAA6B,KAAA,IAAAgD,IAAAwH,EAAAC,WACA,KAAAzK,KAAAD,GACA,UAAsBse,GAAwB,qBAAsBre,WAAMD,EAAAC,EAAA,WAG1E,GAAAoK,KACAtD,MAAAC,QAAAqD,GAAAA,EAAA,CAAAA,IAAAzI,SAAA5B,EAAA2K,KACA,UAAkB2T,GAAwB,+BAAAte,EAAA,sBAE1C,GAAAsK,GAAAtK,EAAA4K,MAAAN,EACA,UAAkBgU,GAAwB,+BAAAte,EAAA,sBAE1C,GAAAuK,IA/C2BM,EAgDG7K,EAAA8K,IAhDHC,EAgDG,iBAAAR,EAAA,CAAAA,GAAAA,IA/C9B,iBAAAM,EACAE,EAAAnJ,SAAAiJ,GAEA9D,MAAAC,QAAA6D,IACAE,EAAApJ,KAAAsB,IAAA7H,UAAA2H,IAAAuD,KAAA,IAAArD,IAAA4H,OA4CA,UAAkByT,GAAwB,+BAAAte,EAAA,sBAjDf,IAAA6K,EAAAE,EAmD3B,IAAAC,EACA,cAAAtL,EAAAuL,gBACA,aACAD,EAAwBgX,GAAItiB,EAAAuL,gBAC5B,MACA,aACAD,EAAAtL,EAAAuL,eACA,MACA,gBACAD,EAAA,EACA,MACA,QACA,UAAA3L,UAAA,sCAEA,MAAA6L,YAAYA,GAAcxL,EAC1ByL,EAAgByW,GAAK1W,GAAA,IAAAE,MACrB,SAAAtR,IAAAkG,EAAAqL,KAAAb,IAAA,iBAAAxK,EAAAqL,IACA,UAAkBiT,GAAwB,+BAAAte,EAAA,iBAE1C,QAAAlG,IAAAkG,EAAAsL,IAAA,CACA,oBAAAtL,EAAAsL,IACA,UAAsBgT,GAAwB,+BAAAte,EAAA,iBAE9C,GAAAA,EAAAsL,IAAAH,EAAAH,EACA,UAAsBsT,GAAwB,qCAAAte,EAAA,qBAE9C,CACA,QAAAlG,IAAAkG,EAAAuL,IAAA,CACA,oBAAAvL,EAAAuL,IACA,UAAsB+S,GAAwB,+BAAAte,EAAA,iBAE9C,GAAAA,EAAAuL,KAAAJ,EAAAH,EACA,UAAsBuT,GAAU,qCAAAve,EAAA,qBAEhC,CACA,GAAAwK,EAAA,CACA,MAAAgB,EAAAL,EAAAnL,EAAAqL,IAEA,GAAAG,EAAAR,GADA,iBAAAR,EAAAA,EAAoEwX,GAAIxX,IAExE,UAAsB+T,GAAU,2DAAAve,EAAA,sBAEhC,GAAAwL,EAAA,EAAAR,EACA,UAAsBsT,GAAwB,gEAAAte,EAAA,qBAE9C,CACA,OAAAA,GAGAtD,eAAe0lB,GAAS1W,EAAAnR,EAAAmF,GACxB,MAAA2I,QAA2BqZ,GAAahW,EAAAnR,EAAAmF,GACxC,GAAA2I,EAAAzB,gBAAAE,MAAAlF,SAAA,aAAAyG,EAAAzB,gBAAA8B,IACA,UAAkBiW,GAAU,uCAE5B,MACA/V,EAAA,CAAqB5I,QADDmiB,GAAU9Z,EAAAzB,gBAAAyB,EAAArI,QAAAN,GACTkH,gBAAAyB,EAAAzB,iBACrB,yBAAArM,EACA,IAAiBqO,EAAArO,IAAA8N,EAAA9N,KAEjBqO,CACA,CAQA,IAAIyZ,GANM3lB,MAAA4E,EAAA/G,EAAAqC,KACV,MAAAmI,QAA4Byc,GAAYlgB,EAAA/G,EAAA,QACpCwlB,GAAcze,EAAAyD,GAClB,MAAAiD,QAA4B2V,GAAQ3gB,OAAA4O,KAAa2V,GAASjgB,EAAAyD,EAAApI,WAAAoI,EAAAnI,GAC1D,WAAAG,WAAAiL,IAIA,MAAMsa,GACN,WAAA9iB,CAAAQ,GACA,KAAAA,aAAAjD,YACA,UAAAsC,UAAA,6CAEApJ,KAAA6V,SAAA9L,CACA,CACA,kBAAA+L,CAAAnF,GACA,GAAA3Q,KAAA+V,iBACA,UAAA3M,UAAA,8CAGA,OADApJ,KAAA+V,iBAAApF,EACA3Q,IACA,CACA,oBAAAgW,CAAApD,GACA,GAAA5S,KAAAiW,mBACA,UAAA7M,UAAA,gDAGA,OADApJ,KAAAiW,mBAAArD,EACA5S,IACA,CACA,UAAA2V,CAAArR,EAAAmF,GACA,IAAAzJ,KAAA+V,mBAAA/V,KAAAiW,mBACA,UAAsBwS,GAAU,mFAEhC,IAAamB,GAAY5pB,KAAA+V,iBAAA/V,KAAAiW,oBACzB,UAAsBwS,GAAU,6EAEhC,MAAA7X,EAAA,IACA5Q,KAAA+V,oBACA/V,KAAAiW,oBAGA,IAAAxD,GAAA,EACA,GAF2ByY,GAAazC,GAAU,IAAAxX,IAAA,cAAAxH,GAAAoH,KAAA7Q,KAAA+V,iBAAAnF,GAElD9D,IAAA,SACA2F,EAAAzS,KAAA+V,iBAAAtD,IACA,kBAAAA,GACA,UAA0BgW,GAAU,2EAGpC,MAAApd,IAAgBA,GAAMuF,EACtB,oBAAAvF,IAAAA,EACA,UAAsBod,GAAU,6DAExBwC,GAAmB5f,EAAA/G,EAAA,QAC3B,IAIAqM,EAJA5G,EAAA/J,KAAA6V,SACApD,IACA1I,EAAsB8d,GAAO9f,OAAQigB,GAAMje,KAI3C4G,EADA3Q,KAAA+V,iBAC8B8R,GAAO9f,OAAQigB,GAAMzV,KAAA2D,UAAAlW,KAAA+V,oBAGrB8R,GAAO9f,OAAA,IAErC,MAAApB,EAAqBohB,GAAMpX,EAAkBkX,GAAO9f,OAAA,KAAAgC,GACpDgI,QAAgCqa,GAAM/gB,EAAA/G,EAAAqC,GACtCuL,EAAA,CACAH,UAAuBiW,GAAMjW,GAC7BhI,QAAA,IAWA,OATA0I,IACAP,EAAAnI,QAA0B+d,GAAOhf,OAAAiB,IAEjC/J,KAAAiW,qBACA/D,EAAAxF,OAAA1M,KAAAiW,oBAEAjW,KAAA+V,mBACA7D,EAAAG,UAA4ByV,GAAOhf,OAAA6H,IAEnCuB,CACA,EAGA,MAAMoa,GACN,WAAA/iB,CAAAQ,GACA/J,KAAAoW,WAAA,IAA8BiW,GAAatiB,EAC3C,CACA,kBAAA+L,CAAAnF,GAEA,OADA3Q,KAAAoW,WAAAN,mBAAAnF,GACA3Q,IACA,CACA,UAAA2V,CAAArR,EAAAmF,GACA,MAAAyI,QAAAlS,KAAAoW,WAAAT,KAAArR,EAAAmF,GACA,QAAA5F,IAAAqO,EAAAnI,QACA,UAAAX,UAAA,6DAEA,SAAkB8I,EAAAG,aAAiBH,EAAAnI,WAAemI,EAAAH,WAClD,EAGA,SAASwa,GAAajW,EAAAtO,GACtB,IAAAuO,OAAAC,SAAAxO,GACA,UAAAoB,UAAA,WAAuCkN,WAEvC,OAAAtO,CACA,CACA,MAAMwkB,GACN,WAAAjjB,CAAAQ,EAAA,IACA,IAAa8f,GAAQ9f,GACrB,UAAAX,UAAA,oCAEApJ,KAAA6V,SAAA9L,CACA,CACA,SAAA2M,CAAAtC,GAEA,OADApU,KAAA6V,SAAA,IAA0B7V,KAAA6V,SAAAnB,IAAAN,GAC1BpU,IACA,CACA,UAAA2W,CAAAtC,GAEA,OADArU,KAAA6V,SAAA,IAA0B7V,KAAA6V,SAAAlB,IAAAN,GAC1BrU,IACA,CACA,WAAA4W,CAAAtC,GAEA,OADAtU,KAAA6V,SAAA,IAA0B7V,KAAA6V,SAAAhB,IAAAP,GAC1BtU,IACA,CACA,MAAA6W,CAAAC,GAEA,OADA9W,KAAA6V,SAAA,IAA0B7V,KAAA6V,SAAAkB,IAAAD,GAC1B9W,IACA,CACA,YAAAgX,CAAAhP,GAUA,MATA,iBAAAA,EACAhI,KAAA6V,SAAA,IAA8B7V,KAAA6V,SAAAR,IAAuBkX,GAAa,eAAAvkB,IAElEA,aAAAmN,KACAnV,KAAA6V,SAAA,IAA8B7V,KAAA6V,SAAAR,IAAuBkX,GAAa,eAAiBZ,GAAK3jB,KAGxFhI,KAAA6V,SAAA,IAA8B7V,KAAA6V,SAAAR,IAAuBsW,GAAK,IAAAxW,MAAe4W,GAAI/jB,IAE7EhI,IACA,CACA,iBAAAiX,CAAAjP,GAUA,MATA,iBAAAA,EACAhI,KAAA6V,SAAA,IAA8B7V,KAAA6V,SAAAP,IAAuBiX,GAAa,oBAAAvkB,IAElEA,aAAAmN,KACAnV,KAAA6V,SAAA,IAA8B7V,KAAA6V,SAAAP,IAAuBiX,GAAa,oBAAsBZ,GAAK3jB,KAG7FhI,KAAA6V,SAAA,IAA8B7V,KAAA6V,SAAAP,IAAuBqW,GAAK,IAAAxW,MAAe4W,GAAI/jB,IAE7EhI,IACA,CACA,WAAAkX,CAAAlP,GAgBA,YAfA,IAAAA,EACAhI,KAAA6V,SAAA,IAA8B7V,KAAA6V,SAAAT,IAAuBuW,GAAK,IAAAxW,OAE1DnN,aAAAmN,KACAnV,KAAA6V,SAAA,IAA8B7V,KAAA6V,SAAAT,IAAuBmX,GAAa,cAAgBZ,GAAK3jB,KAGvFhI,KAAA6V,SADA,iBAAA7N,EACA,IACAhI,KAAA6V,SACAT,IAAqBmX,GAAa,cAAgBZ,GAAK,IAAAxW,MAAe4W,GAAI/jB,KAI1E,IAA8BhI,KAAA6V,SAAAT,IAAuBmX,GAAa,cAAAvkB,IAElEhI,IACA,EAGA,MAAMysB,WAAgBD,GACtB,kBAAA1W,CAAAnF,GAEA,OADA3Q,KAAA+V,iBAAApF,EACA3Q,IACA,CACA,UAAA2V,CAAArR,EAAAmF,GACA,MAAA2N,EAAA,IAAwBkV,GAAYzE,GAAO9f,OAAAwK,KAAA2D,UAAAlW,KAAA6V,YAE3C,GADAuB,EAAAtB,mBAAA9V,KAAA+V,kBACAjF,MAAAC,QAAA/Q,KAAA+V,kBAAAlF,OACA7Q,KAAA+V,iBAAAlF,KAAAlF,SAAA,SACA,IAAA3L,KAAA+V,iBAAAtD,IACA,UAAsBiW,GAAU,uCAEhC,OAAAtR,EAAAzB,KAAArR,EAAAmF,EACA,EAGA,MAAMijB,GAAK,CAAAjnB,EAAA6R,KACX,oBAAA7R,IAAAA,EACA,UAAkBkjB,GAAU,GAAIrR,yBAGhC7Q,eAAekmB,GAAsBhf,EAAA6J,GACrC,IAASqS,GAAQlc,GACjB,UAAAvE,UAAA,yBAGA,GADAoO,IAAAA,EAAA,UACA,WAAAA,GACA,WAAAA,GACA,WAAAA,EACA,UAAApO,UAAA,+DAEA,IAAAqO,EACA,OAAA9J,EAAAF,KACA,SACYif,GAAK/e,EAAAE,IAAA,2BACL6e,GAAK/e,EAAA+J,EAAA,gCACLgV,GAAK/e,EAAAgK,EAAA,gCACjBF,EAAA,CAA2B5J,IAAAF,EAAAE,IAAAJ,IAAAE,EAAAF,IAAAiK,EAAA/J,EAAA+J,EAAAC,EAAAhK,EAAAgK,GAC3B,MACA,UACY+U,GAAK/e,EAAAE,IAAA,yCACL6e,GAAK/e,EAAA+J,EAAA,8BACjBD,EAAA,CAA2B5J,IAAAF,EAAAE,IAAAJ,IAAAE,EAAAF,IAAAiK,EAAA/J,EAAA+J,GAC3B,MACA,UACYgV,GAAK/e,EAAA5I,EAAA,4BACL2nB,GAAK/e,EAAA3J,EAAA,2BACjByT,EAAA,CAA2B1S,EAAA4I,EAAA5I,EAAA0I,IAAAE,EAAAF,IAAAzJ,EAAA2J,EAAA3J,GAC3B,MACA,UACY0oB,GAAK/e,EAAAW,EAAA,6BACjBmJ,EAAA,CAA2BnJ,EAAAX,EAAAW,EAAAb,IAAAE,EAAAF,KAC3B,MACA,QACA,UAAsB+a,GAAgB,qDAEtC,MAAA7hB,EAAiBkhB,GAAO9f,OAAAwK,KAAA2D,UAAAuB,IACxB,OAAWuQ,SAAaJ,GAAQpQ,EAAA7Q,GAChC,CAqBA,SAASimB,GAAStoB,GAClB,OAAWulB,GAAQvlB,EACnB,CACA,SAASuoB,GAAK5nB,GACd,yBAAA6S,gBACAA,gBAAA7S,GAEAsN,KAAAC,MAAAD,KAAA2D,UAAAjR,GACA,CACA,MAAM6nB,GACN,WAAAvjB,CAAAyO,GAEA,GADAhY,KAAAiY,QAAA,IAAA3I,SAjBA,SAAmB0I,GACnB,OAAAA,GACA,iBAAAA,GACAlH,MAAAC,QAAAiH,EAAApL,OACAoL,EAAApL,KAAAsL,MAAwB0U,GACxB,CAaaG,CAAU/U,GACvB,UAAsB4Q,GAAW,8BAEjC5oB,KAAAoY,MAAqByU,GAAK7U,EAC1B,CACA,YAAAK,CAAA1H,EAAA2H,GACA,MAAAjN,IAAgBA,EAAAkN,IAAAA,GAAW,IAAI5H,KAAA2H,GAAA5L,QAC/Be,EAtCA,SAAsBpC,GACtB,wBAAAA,GAAAA,EAAAxE,MAAA,MACA,SACA,SACA,YACA,SACA,WACA,SACA,YACA,QACA,UAAsB2hB,GAAgB,kDAEtC,CA0BoBwE,CAAa3hB,GACjCoN,EAAAzY,KAAAoY,MAAAxL,KAAAV,OAAAyB,IACA,IAAA+K,EAAAjL,IAAAE,EAAAF,IAaA,GAZAiL,GAAA,iBAAAH,IACAG,EAAAH,IAAA5K,EAAA4K,KAEAG,GAAA,iBAAA/K,EAAAtC,MACAqN,EAAArN,IAAAsC,EAAAtC,KAEAqN,GAAA,iBAAA/K,EAAAQ,MACAuK,EAAA,QAAA/K,EAAAQ,KAEAuK,GAAA5H,MAAAC,QAAApD,EAAAM,WACAyK,EAAA/K,EAAAM,QAAAtC,SAAA,WAEA+M,EACA,OAAArN,GACA,YACAqN,EAAA,UAAA/K,EAAAE,IACA,MACA,aACA6K,EAAA,cAAA/K,EAAAE,IACA,MACA,YACA6K,EAAA,UAAA/K,EAAAE,IACA,MACA,YACA6K,EAAA,UAAA/K,EAAAE,IACA,MACA,cACA6K,EAAA,YAAA/K,EAAAE,IACA,MACA,YACA6K,EAAA,YAAA/K,EAAAE,KAAA,UAAAF,EAAAE,IAIA,OAAA6K,KAEgB,EAAA/K,EAAAjG,OAAAA,GAAiB+Q,EACjC,OAAA/Q,EACA,UAAsBmhB,GAEtB,OAAAnhB,EAAA,CACA,MAAAiR,EAAA,IAA8BmQ,IAC9B7Q,QAAoBA,GAAUjY,KAS9B,MARA2Y,EAAApT,OAAAqT,eAAAnS,kBACA,UAAAkH,KAAA8K,EACA,gBACoCwU,GAAkBhV,EAAAtK,EAAAtC,EACtD,CACA,OAEA,EACAsN,CACA,CACA,OAAesU,GAAkBjtB,KAAAiY,QAAAtK,EAAAtC,EACjC,EAEA5E,eAAewmB,GAAkBte,EAAAhB,EAAAtC,GACjC,MAAAwD,EAAAF,EAAAhK,IAAAgJ,IAAAgB,EAAA7G,IAAA6F,EAAA,IAAsDhJ,IAAAgJ,GACtD,QAAA9J,IAAAgL,EAAAxD,GAAA,CACA,MAAA/G,QAA0BkmB,GAAS,IAAG7c,EAAAK,KAAA,GAAmB3C,GACzD,GAAA/G,aAAAwC,YAAA,WAAAxC,EAAAyL,KACA,UAAsB6Y,GAAW,gDAEjC/Z,EAAAxD,GAAA/G,CACA,CACA,OAAAuK,EAAAxD,EACA,CACA,SAAS6hB,GAAiBlV,GAC1B,MAAAlQ,EAAA,IAAoBglB,GAAW9U,GAC/Be,EAAAtS,MAAAkK,EAAA2H,IAAAxQ,EAAAuQ,OAAA1H,EAAA2H,GASA,OARA9T,OAAAwU,iBAAAD,EAAA,CACAf,KAAA,CACAvS,MAAA,IAAyBonB,GAAK/kB,EAAAsQ,OAC9B1T,YAAA,EACAuU,cAAA,EACAC,UAAA,KAGAH,CACA,CAkCA,IAAIoU,GAhCW1mB,MAAA2S,EAAAC,EAAA5P,KACf,IAAA6P,EACAC,EACAC,GAAA,EACA,mBAAAC,kBACAH,EAAA,IAAAG,gBACAF,EAAAG,WAAA,KACAF,GAAA,EACAF,EAAAK,SACSN,IAET,MAAAO,QAAAC,MAAAT,EAAApT,KAAA,CACA8T,OAAAR,EAAAA,EAAAQ,YAAAjW,EACAkW,SAAA,SACAvN,QAAA/C,EAAA+C,UACKwN,MAAAC,IACL,GAAAT,EACA,UAAsBuP,GACtB,MAAA9O,IAIA,QAFApW,IAAA0V,GACAW,aAAAX,GACA,MAAAK,EAAAO,OACA,UAAkBiO,GAAS,2DAE3B,IACA,aAAAxO,EAAAQ,MACA,CACA,MACA,UAAkBgO,GAAS,6DAC3B,GASA,IAAIgF,GACJ,uBAAA9S,YAAAA,UAAAC,WAAAjN,aAAA,iBAGI8f,GAAU,GAFd,UACA,WAEA,CACA,MAAMC,GAAS9nB,SAgBf,MAAM+nB,GACN,WAAA/jB,CAAA6P,EAAA3P,GACA,KAAA2P,aAAAsB,KACA,UAAAtR,UAAA,kCAlBA,IAAyBpB,EAAA2S,EAoBzB3a,KAAA4a,KAAA,IAAAF,IAAAtB,EAAApT,MACAhG,KAAA6a,SAAA,CAA0BC,MAAArR,GAAAqR,MAAAtO,QAAA/C,GAAA+C,SAC1BxM,KAAA+a,iBACA,iBAAAtR,GAAAuR,gBAAAvR,GAAAuR,gBAAA,IACAhb,KAAAib,kBACA,iBAAAxR,GAAAyR,iBAAAzR,GAAAyR,iBAAA,IACAlb,KAAAmb,aAAA,iBAAA1R,GAAAkR,YAAAlR,GAAAkR,YAAA,SAC+B9W,IAA/B4F,IAAsB4jB,MACtBrtB,KAAAob,OAAA3R,IAAoC4jB,IA5BXrlB,EA6BOyB,IAAW4jB,IA7BlB1S,EA6B2B3a,KAAAmb,aA5BpD,iBAAAnT,GAAA,OAAAA,GAGA,QAAAA,GAAA,iBAAAA,EAAAqT,OAAAlG,KAAAD,MAAAlN,EAAAqT,KAAAV,IAGA,SAAA3S,GACS6hB,GAAQ7hB,EAAAgQ,OACjBlH,MAAAC,QAAA/I,EAAAgQ,KAAApL,OACAkE,MAAA3L,UAAA+S,MAAA7S,KAAA2C,EAAAgQ,KAAApL,KAAqDid,MAoBrD7pB,KAAAsb,eAAAtb,KAAAob,OAAAC,IACArb,KAAAub,OAA8B2R,GAAiBltB,KAAAob,OAAApD,OAG/C,CACA,WAAAwD,GACA,uBAAAxb,KAAAsb,gBACAnG,KAAAD,MAAAlV,KAAAsb,eAAAtb,KAAAib,iBAEA,CACA,KAAAQ,GACA,uBAAAzb,KAAAsb,gBACAnG,KAAAD,MAAAlV,KAAAsb,eAAAtb,KAAAmb,YAEA,CACA,YAAA9C,CAAA1H,EAAA2H,GACAtY,KAAAub,QAAAvb,KAAAyb,eACAzb,KAAA0b,SAEA,IACA,aAAA1b,KAAAub,OAAA5K,EAAA2H,EACA,CACA,MAAA2B,GACA,GAAAA,aAA+B4O,KAC/B,IAAA7oB,KAAAwb,cAEA,aADAxb,KAAA0b,SACA1b,KAAAub,OAAA5K,EAAA2H,GAGA,MAAA2B,CACA,CACA,CACA,YAAAyB,GACA1b,KAAA2b,gBA1EA,oBAAAC,eACA,oBAAAtB,WAAA,uBAAAA,UAAAC,WACA,oBAAAsB,aAAA,WAAAA,eAyEA7b,KAAA2b,mBAAA9X,GAEA,MAAA2I,EAAA,IAAAsP,QAAA9b,KAAA6a,SAAArO,SACY4gB,KAAU5gB,EAAAM,IAAA,gBACtBN,EAAA1E,IAAA,aAAsCslB,IACtCptB,KAAA6a,SAAArO,QAAAhI,OAAAuX,YAAAvP,EAAA0E,YAEAlR,KAAA2b,gBAAA3b,KAAA2b,cAAoDwR,GAAWntB,KAAA4a,KAAA5a,KAAA+a,iBAAA/a,KAAA6a,UAC/DmB,KAAA5B,IACApa,KAAAub,OAA0B2R,GAAiB9S,GAC3Cpa,KAAAob,SACApb,KAAAob,OAAAC,IAAAlG,KAAAD,MACAlV,KAAAob,OAAApD,KAAAoC,GAEApa,KAAAsb,eAAAnG,KAAAD,MACAlV,KAAA2b,mBAAA9X,IAEAmW,MAAAC,IAEA,MADAja,KAAA2b,mBAAA9X,EACAoW,WAEAja,KAAA2b,aACA,EAEA,SAAS4R,GAAkBnU,EAAA3P,GAC3B,MAAA3B,EAAA,IAAoBwlB,GAAYlU,EAAA3P,GAChCyS,EAAAzV,MAAAkK,EAAA2H,IAAAxQ,EAAAuQ,OAAA1H,EAAA2H,GA8BA,OA7BA9T,OAAAwU,iBAAAkD,EAAA,CACAV,YAAA,CACA7W,IAAA,IAAAmD,EAAA0T,cACA9W,YAAA,EACAuU,cAAA,GAEAwC,MAAA,CACA9W,IAAA,IAAAmD,EAAA2T,QACA/W,YAAA,EACAuU,cAAA,GAEAyC,OAAA,CACAjW,MAAA,IAAAqC,EAAA4T,SACAhX,YAAA,EACAuU,cAAA,EACAC,UAAA,GAEAiD,UAAA,CACAxX,IAAA,MAAAmD,EAAA6T,cACAjX,YAAA,EACAuU,cAAA,GAEAjB,KAAA,CACAvS,MAAA,IAAAqC,EAAAyT,QAAAvD,OACAtT,YAAA,EACAuU,cAAA,EACAC,UAAA,KAGAgD,CACA,CAEA,MAAMsR,GAAStF,GA+Bf,SAASuF,GAAsBhkB,GAC/B,MAAA8D,EAAA9D,GAAA8D,eAAA,KACA,oBAAAA,GAAAA,EAAA,KACA,UAAkBib,GAAgB,+FAElC,OAAAjb,CACA,CAgGA9G,eAAeinB,GAAeriB,EAAA5B,GAC9B,OAhGAhD,eAAgC4E,EAAA5B,GAChC,IAAA/C,EACAkH,EACA,OAAAvC,GACA,YACA,YACA,YACA3E,EAAA,CACAkD,KAAA,UACAsB,KAAA,OAA6BG,EAAAxE,OAAA,KAC7ByV,eAAA,IAAAxV,WAAA,SACAyG,cAA+BkgB,GAAsBhkB,IAErDmE,EAAA,kBACA,MACA,YACA,YACA,YACAlH,EAAA,CACAkD,KAAA,oBACAsB,KAAA,OAA6BG,EAAAxE,OAAA,KAC7ByV,eAAA,IAAAxV,WAAA,SACAyG,cAA+BkgB,GAAsBhkB,IAErDmE,EAAA,kBACA,MACA,eACA,mBACA,mBACA,mBACAlH,EAAA,CACAkD,KAAA,WACAsB,KAAA,OAA6BC,SAAAE,EAAAxE,OAAA,YAC7ByV,eAAA,IAAAxV,WAAA,SACAyG,cAA+BkgB,GAAsBhkB,IAErDmE,EAAA,4CACA,MACA,YACAlH,EAAA,CAA0BkD,KAAA,QAAA6B,WAAA,SAC1BmC,EAAA,kBACA,MACA,YACAlH,EAAA,CAA0BkD,KAAA,QAAA6B,WAAA,SAC1BmC,EAAA,kBACA,MACA,YACAlH,EAAA,CAA0BkD,KAAA,QAAA6B,WAAA,SAC1BmC,EAAA,kBACA,MACA,cACAlH,EAAA,CAA0BkD,KAAA,WAC1BgE,EAAA,kBACA,MACA,aACAA,EAAA,kBACA,MAAAC,EAAApE,GAAAoE,KAAA,UACA,OAAAA,GACA,cACA,YACAnH,EAAA,CAAkCkD,KAAAiE,GAClC,MACA,QACA,UAA8B2a,GAAgB,8CAE9C,KACA,CACA,cACA,qBACA,qBACA,sBACA5a,EAAA,2BACA,MAAAC,EAAApE,GAAAoE,KAAA,QACA,OAAAA,GACA,YACA,YACA,YACAnH,EAAA,CAAkCkD,KAAA,OAAA6B,WAAAoC,GAClC,MAEA,aACA,WACAnH,EAAA,CAAkCkD,KAAAiE,GAClC,MACA,QACA,UAA8B2a,GAAgB,0GAE9C,KACA,CACA,QACA,UAAsBA,GAAgB,gEAEtC,OAAWd,GAAQ3gB,OAAAwV,YAAA7V,EAAA+C,GAAA+H,cAAA,EAAA5D,EACnB,CAGW+f,CAAiBtiB,EAAA5B,EAC5B,CASA,MA0BMmkB,GAAgBnnB,MAAAiW,EAAAC,EAAAC,KAEtB,MAAAC,EAAA,IAAAnC,IAAAiC,GACAG,EAAAD,EAAAE,OAAAF,EAAAG,SAAAH,EAAAI,OAEAC,EAAA,IAAAxC,IAAAgC,GAAAK,OACAI,QAAAtD,MAAA,GAAgDqD,sCAChDlB,KAAApC,IACA,IAAAA,EAAAwD,GACA,UAAA9T,MAAA,uBAAmDsQ,EAAAO,UAEnD,OAAAP,EAAAQ,SAGAhG,EAAA+I,EAAA,OACAE,EAAAjE,GAAAA,EAAAkE,SAAA,KAAAlE,EAAAvS,MAAA,MAAAuS,EACA,GAAAiE,EAAAX,KAAAW,EAAAjJ,GACA,UAAA9K,MAAA,4BAAA8K,EAAA,QAAAsI,GAEAa,eAAAC,QAAA,MAAApJ,GAEAmJ,eAAAC,QAAA,iBAAAL,EAAA,gBAEAI,eAAAC,QAAA,WAAAL,EAAA,UACA,IAAAM,EAAAb,GAAAa,UAEA,IAAAA,EAAA,CAEA,MAAAC,EAAAP,EAAA,sBAEAQ,OAxDsClX,OAAAiX,EAAAd,KAEtC,MAAAgB,EAAA,IACAhB,EACAiB,YAAA,uCAEAC,2BAAA,OACAC,iBAAA,MACAC,aAAA,UAGA,OAAAnE,MAAA6D,EAAA,CACAO,OAAA,OACAzR,QAAA,CACA,mCAEA0R,KAAA3L,KAAA2D,UAAA0H,MAwC0CiQ,CAAgCnQ,EAAAd,GAAA,CAA4CwB,cAAA,CAAAtB,KACtHd,KAAApC,IACA,IAAAA,EAAAwD,GACA,UAAA9T,MAAA,uBAAuDsQ,EAAAO,UAEvD,OAAAP,EAAAQ,SAEAqD,EAAAE,EAAA,SACA,CAEA,IACA,IAAAjD,IAAA+C,EACA,CACA,MACAF,eAAAC,QAAA,YAAAC,EACA,CAEA,MAAAY,mBAAYA,EAAAC,oBAAAA,SAAkDwP,KAC9DvQ,eAAAC,QAAA,qBAAAa,GAEA,MAAAG,EAAAxZ,OAAAqB,OAAAoY,aACAlB,eAAAC,QAAA,aAAAgB,GAEA,MAAAE,EAAAvB,EAAA,uBACA,sBACA,iBAAyBwB,mBAAA7B,uCAEzB,cAAsB6B,mBAAAlB,gCAEtB,mBAA2Ba,IAC3B,UAAkBE,mBAElBxZ,OAAAe,SAAAC,KAAA0Y,GAMMoP,GAAWrnB,UAEjB,MAAA4X,EAAArZ,OAAAqB,OAAAoY,aAAA,IAAAzZ,OAAAqB,OAAAoY,aAEAzX,EAAA,IAAAF,iBAAA9B,OAAAqB,OAAAU,OAAAC,OAAA,eAAAE,aAAAa,OAAAsW,KAKA,OAAaA,qBAAAC,oBAJb9V,KAAAJ,OAAAC,gBAAArB,IACA2B,QAAA,WACAA,QAAA,WACAA,QAAA,YAqHMolB,GAAkBtnB,MAAAoY,EAAAR,EAAA1B,EAAAc,EAAAqB,EAAAC,KAExB,MAAAC,QAAiCqM,GAAStM,EAAAE,WAC1CD,EAAA3T,IAAA,QAEA,MAAA6T,QAAA,IAA2BuN,GAAO,CAClCtN,IAAAL,EACAM,IAAA,SAEAlI,cACAL,OAAA7R,OAAAqB,OAAAoY,cACA3I,mBAAA,CACAzK,IAAA,QACA6I,IAAA,WACAvG,IAAAqR,IAEArJ,KAAAoJ,EAAAM,YACA,OAAAxF,MAAAiF,EAAA,CACAb,OAAA,OACAzR,QAAA,CACA0S,OACA,oDAEAhB,KAAA,IAAAoB,gBAAA,CACAC,WAAA,qBACA5V,KAAAkV,EACAW,cAAAnB,EACA1B,aAAAA,EACAc,UAAAA,OAsEMuQ,GAAkBvnB,MAAAiZ,EAAAjC,EAAAqB,EAAAC,KAExB,MAAAC,QAAiCqM,GAAStM,EAAAE,WAC1CD,EAAA3T,IAAA,QAEA,MAAA6T,QAAA,IAA2BuN,GAAO,CAClCtN,IAAAL,EACAM,IAAA,SAEAlI,cACAL,OAAA/Q,KAAAO,OAAAoY,cACA3I,mBAAA,CACAzK,IAAA,QACA6I,IAAA,WACAvG,IAAAqR,IAEArJ,KAAAoJ,EAAAM,YACA,OAAAxF,MAAAiF,EAAA,CACAb,OAAA,OACAzR,QAAA,CACA0S,OACA,oDAEAhB,KAAA,IAAAoB,gBAAA,CACAC,WAAA,gBACAG,gBACAjC,iBAKA,IAAIwQ,IACJ,SAAAtO,GACAA,EAAA,kCACAA,EAAA,8CACAA,EAAA,8BACC,CAJD,CAIGsO,KAAkBA,GAAa,KAclC,MAAMC,WAAWrO,YACjBC,WAAA,EACAC,KACAC,YAAAnc,EACAoc,iBAAApc,EACAqc,YACAC,SACAC,eACAC,eACAC,cACA,WAAA/W,CAAAgX,EAAAC,GACA9W,QACA1J,KAAAygB,UAAAzgB,KAAAygB,UAAApQ,KAAArQ,MACAA,KAAAkgB,YAAA,CAA6BK,iBAC7BvgB,KAAAmgB,SAAAK,GAAAL,SACAK,GAAAE,sBACA1gB,KAAA2gB,iBAAkCsN,GAAarN,aAAAC,GAAAL,EAAAE,uBAAAG,IAC/CL,GAAAM,4BACA9gB,KAAA2gB,iBAAkCsN,GAAalN,mBAAAF,GAAAL,GAAAM,6BAAAD,IAC/CL,GAAAQ,qBACAhhB,KAAA2gB,iBAAkCsN,GAAahN,WAAAJ,GAAAL,GAAAQ,sBAAAH,GAC/C,CACA,WAAAK,CAAAxE,EAAAC,SACciR,GAAgBlR,EAAAC,EAAA3c,KAAAkgB,YAAAK,cAC9B,CAOA,6BAAAY,GAEA,MAAAC,OAlSwB3a,OAAAmW,EAAAuD,KACxB,MAAA/G,EAAA,IAAAsB,IAAA1V,OAAAe,SAAAC,MAEA6Y,EAAAzF,EAAAiI,aAAA1c,IAAA,QAEA,UAAAka,EACA,OAAiB0B,cAAA3D,GAGjB,MAAAF,EAAAa,eAAA+D,QAAA,OACA,UAAA5E,GAAAtD,EAAAiI,aAAA1c,IAAA,SAAA+X,EACA,UAAApT,MAAA,4BAAA8P,EAAAiI,aAAA1c,IAAA,eAAA+X,GAGA,GAAAtD,EAAAiI,aAAA1c,IAAA,WAAA4Y,eAAA+D,QAAA,cACA,UAAAhY,MAAA,qCAAA8P,EAAAiI,aAAA1c,IAAA,iBAAA4Y,eAAA+D,QAAA,eAGAlI,EAAAiI,aAAAE,OAAA,OACAnI,EAAAiI,aAAAE,OAAA,SACAnI,EAAAiI,aAAAE,OAAA,QACAvc,OAAAwc,QAAAC,UAAA,GAA+B7b,SAAA8b,MAAAtI,EAAAlM,YAE/B,MAAAmR,EAAAd,eAAA+D,QAAA,sBACA,UAAAjD,EACA,UAAA/U,MAAA,2FAEA,MAAAmU,EAAAb,GAAAa,WAAAF,eAAA+D,QAAA,aACA,IAAA7D,EACA,UAAAnU,MAAA,yGAEA,MAAAwV,EAAAvB,eAAA+D,QAAA,kBACA,UAAAxC,EACA,UAAAxV,MAAA,uFAGA,MAAAyV,QAA2B2O,GAAe,SAE1C/L,QAAiCoM,GAAkBlP,EAAAR,EAAAjF,EAAAlM,WAAAuQ,EAAAqB,EAAAC,GACnD/C,KAAApC,IACA,IAAAA,EAAAwD,GACA,UAAA9T,MAAA,uBAAmDsQ,EAAAO,UAEnD,OAAAP,EAAAQ,SAGAwH,EAAAD,EAAA,aACAE,EAAAtE,eAAA+D,QAAA,YACA,UAAAO,EACA,UAAAvY,MAAA,oFAEA,MAAA0O,EAAiBuV,GAAkB,IAAA7S,IAAAmH,KACnC9X,QAAYA,SAAkBoiB,GAASvK,EAAA5J,EAAA,CACvC5D,OAAAsI,EACApI,SAAA,UAIAwN,QAAiC6K,SAA6BtB,GAAStM,EAAAE,YACvE,GAAAlV,EAAA,UAAA+X,EACA,UAAAxY,MAAA,sEAAAS,EAAA,gBAAA+X,GAGA,GAAA/X,EAAA,YAAA0T,EACA,UAAAnU,MAAA,8EAAAS,EAAA,kBAAA0T,GAGA,MAAAsE,EAAA,IAA4BJ,EAAAK,cAAAjD,GAC5BkD,EAAA,CAA0BvF,MAAAmF,WAAA/C,kBAyB1B,OAxBAlC,IACAA,EAAA,CAA2BwB,cAAA,CAAAhF,EAAAlM,cAC3B0P,EAAAa,UAAAA,EAEA0C,UACAA,EAAA+B,aACAC,QAAAC,IAAA,CACAjC,EAAA3C,QAAA,MAAAd,GACAyD,EAAA3C,QAAA,WAAAqE,GACA1B,EAAA3C,QAAA,iBAAAsB,GACAqB,EAAA3C,QAAA,YAAAC,GACA0C,EAAA3C,QAAA,eAAAuB,GACAoB,EAAA3C,QAAA,gBAAAmE,EAAA,iBAEAxB,EAAAkC,SAGA9E,eAAA+E,WAAA,cACA/E,eAAA+E,WAAA,sBACA/E,eAAA+E,WAAA,OACA/E,eAAA+E,WAAA,YACA/E,eAAA+E,WAAA,kBACA/E,eAAA+E,WAAA,aAEA,CACA/B,cAAA3D,EACA2F,WAAAN,EACAO,aAAAT,IAkMqCoM,CAAkBnuB,KAAAkgB,YAAAK,cAAAvgB,KAAAmgB,UAEvDiB,EAAAoB,eAGAxiB,KAAAkgB,YAAAK,cAAAa,EAAAb,cACAvgB,KAAAkgB,YAAAqC,WAAAnB,EAAAmB,iBACAviB,KAAA0iB,gBAAAtB,EAAAoB,cAEAxiB,KAAA2iB,2BACA,CAIA,aAAAC,GACA,IAAA5iB,KAAAmgB,SACA,UAAA7W,MAAA,kFAEA,GAAAtJ,KAAAogB,eACA,OAAApgB,KAAAogB,eAEApgB,KAAAogB,eAAA,IAAA+B,QAAA,CAAAU,EAAAC,KACA9iB,KAAAqgB,eAAAwC,EACA7iB,KAAAsgB,cAAAwC,IAGA,MAAAC,EAAA/iB,KAAAgjB,SAuBA,MArMiBvc,OAAAwc,IAEjB,UACAA,EAAAf,OACA,MAAAzE,QAAAwF,EAAA3B,QAAA,aACAxC,QAAAmE,EAAA3B,QAAA,kBACAvC,QAAAkE,EAAA3B,QAAA,gBACA5B,QAAAuD,EAAA3B,QAAA,iBACA,UAAA7D,GAAA,OAAAqB,GAAA,OAAAC,GAAA,OAAAW,EAEA,UAAApW,MAAA,4DAEA,MAAAqY,QAAqCqM,GAAkBtO,EAAAjC,EAAAqB,EAAAC,GACvD/C,KAAApC,IACA,IAAAA,EAAAwD,GACA,UAAA9T,MAAA,uBAAuDsQ,EAAAO,UAEvD,OAAAP,EAAAQ,SAGAwH,EAAAD,EAAA,aACAjF,QAAAuG,EAAA3B,QAAA,OACA,UAAA5E,EACA,UAAApT,MAAA,gFAEA,MAAAuY,QAAAoB,EAAA3B,QAAA,YACA,UAAAO,EACA,UAAAvY,MAAA,qFAEA,MAAA0O,EAAqBuV,GAAkB,IAAA7S,IAAAmH,KACvC9X,QAAgBA,SAAkBoiB,GAASvK,EAAA5J,EAAA,CAC3C5D,OAAAsI,EACApI,SAAA,UAIAwN,QAAqC6K,SAA6BtB,GAAStM,EAAAE,YAC3E,GAAAlV,EAAA,UAAA+X,EACA,UAAAxY,MAAA,sEAAAS,EAAA,gBAAA+X,GAGA,GAAA/X,EAAA,YAAA0T,EACA,UAAAnU,MAAA,8EAAAS,EAAA,kBAAA0T,GAIA,aADAwF,EAAAzF,QAAA,gBAAAmE,EAAA,eACA,IACAA,EACAK,cAAAjD,EAEA,CACA,QACAkE,EAAAZ,OACA,GA0HQ+L,CAAWpuB,KAAAmgB,UACnBnE,KAAAwG,GAAAxiB,KAAA0iB,gBAAAF,IACAxG,KAAA,IAAAhc,KAAAqgB,kBACArG,MAAArB,IACA3Y,KAAAgjB,UACAhjB,KAAAsgB,cAAA,IAAAhX,MAAAqP,GAAA,yBAEA3Y,KAAAmjB,YAIAnjB,KAAAojB,0BAHApjB,KAAAqjB,kCAOArjB,KAAAsgB,cAAA,IAAAhX,MAAA,6BAESga,QAAA,KACTtjB,KAAAujB,sBACAR,IAAA/iB,KAAAgjB,UACAhjB,KAAA2iB,6BAEA3iB,KAAAogB,cACA,CAMA,YAAAoD,GAEAxjB,KAAA8f,WAAA,EACA9f,KAAA+f,UAAAlc,EACA7D,KAAAggB,YAAAnc,EACA7D,KAAAigB,iBAAApc,EACA7D,KAAAkgB,YAAAqC,gBAAA1e,EACA7D,KAAAkgB,YAAAsC,kBAAA3e,EAEA7D,KAAAogB,gBAAApgB,KAAAsgB,gBACAtgB,KAAAsgB,cAAA,IAAAhX,MAAA,iCACAtJ,KAAAujB,uBAGAvjB,KAAAmgB,iBACAngB,KAAAmgB,SAAA+B,aACAliB,KAAAmgB,SAAAsD,QACAzjB,KAAAmgB,SAAAkC,SAGAriB,KAAA2iB,0BACA,CAUA,eAAAlC,CAAAzY,EAAAka,EAAAwB,GAEA,IAAA1jB,KAAAgjB,SACA,OAAAnJ,MAAA7R,EAAAka,GAMA,IAAA9I,EACA6E,EACAzR,EAEAxE,aAAA2b,SACAvK,EAAA,IAAAsB,IAAA1S,EAAAoR,KACA6E,EAAAiE,GAAAjE,QAAAjW,GAAAiW,QAAA,MACAzR,EAAA,IAAAsP,QAAA9T,EAAAwE,WAGA0V,EAAAA,GAAA,GACA9I,EAAA,IAAAsB,IAAA1S,EAAAkF,YACA+Q,EAAAiE,EAAAjE,QAAA,MACAzR,EAAA0V,EAAA1V,QAAA,IAAAsP,QAAAoG,EAAA1V,SAAA,IAAAsP,eAGA9b,KAAA4jB,wBACAF,EAAAA,GAAA,CACAvE,IAAA,GAAoB/F,EAAA2D,SAAa3D,EAAA4D,WACjCoC,IAAAnB,EAAA4F,eAEA,MAAA3E,QAAAlf,KAAA8jB,uBAAAJ,GAKA,OAHAlX,EAAA1E,IAAA,OAAAoX,GACA1S,EAAA1E,IAAA,wBAA6C9H,KAAAkgB,YAAAsC,aAAAuB,gBAE7C/b,aAAA2b,QACA9J,MAAA,IAAA8J,QAAA3b,EAAA,IAA8Cka,EAAA1V,aAG9CqN,MAAAT,EAAA,IAA4B8I,EAAA1V,WAC5B,CAIA,qBAAAkW,CAAAF,GACAxiB,KAAAkgB,YAAAsC,aAAAA,QACAxiB,KAAAgkB,+BAAAxB,EAAAuB,aACA,CACA,mBAAAR,GACAvjB,KAAAogB,oBAAAvc,EACA7D,KAAAqgB,oBAAAxc,EACA7D,KAAAsgB,mBAAAzc,CACA,CAIA,YAAAmf,GACA,OAAAhjB,KAAA8f,SACA,CACA,SAAAmE,GACA,OAAAjkB,KAAAggB,MACA,CACA,SAAAmD,GACA,OAAAnjB,KAAA+f,MAEA/f,KAAAkkB,gBAAAlkB,KAAA+f,KACA,CACA,YAAAoE,GACA,OAAAnkB,KAAA+f,KAEA/f,KAAAokB,aAAApkB,KAAA+f,OADA,CAEA,CACA,eAAAsE,GACA,OAAArkB,KAAAkgB,YAAAsC,YACA,CAQA,2BAAAoB,GACA5jB,KAAAmjB,cACAnjB,KAAAogB,qBAIApgB,KAAAogB,qBAHApgB,KAAA4iB,UAMA,CAIA,iBAAA0B,CAAA1C,GAEA,MACAjb,GADA,IAAAO,aACAa,OAAA6Z,GAEA2C,QAAAle,OAAAU,OAAAC,OAAA,UAAAL,GAEA6d,EAAA1T,MAAA2T,KAAA,IAAA3d,WAAAyd,IAOA,OANA/b,KAAAJ,OAAAC,gBAAAmc,IAGA7b,QAAA,WACAA,QAAA,WACAA,QAAA,SAEA,CAQA,4BAAAmb,CAAA/Z,GACA,IAAA/J,KAAAkgB,YAAAsC,eAAAxiB,KAAAigB,YACA,UAAA3W,MAAA,4BAEAS,EAAA2a,IAAA1kB,KAAAigB,YACA,MAAAjB,QAAqCqM,GAASrrB,KAAAkgB,YAAAsC,aAAAR,cAAA/C,WAC9C,WAAmBwN,GAAO1iB,GAC1BmN,cACAL,OAAA7R,OAAAqB,OAAAoY,cACA3I,mBAAA,CACAzK,IAAA,QACA6I,IAAA,WACAvG,IAAAqR,IAEArJ,KAAA3V,KAAAkgB,YAAAsC,aAAAR,cAAA3C,WACA,CACA,oCAAA2E,CAAAD,GACA,GAAAA,EAIA,IACA,MAAAY,EAjwBA,SAAkBlP,GAClB,oBAAAA,EACA,UAAkBiT,GAAU,iEAC5B,MAAY,EAAA3e,EAAArC,OAAAA,GAAqB+N,EAAAtD,MAAA,KACjC,OAAAzK,EACA,UAAkBghB,GAAU,4DAC5B,OAAAhhB,EACA,UAAkBghB,GAAU,eAC5B,IAAA3e,EACA,UAAkB2e,GAAU,+BAC5B,IAAA9D,EAOAjS,EANA,IACAiS,EAAkB4I,GAAMzjB,EACxB,CACA,MACA,UAAkB2e,GAAU,yCAC5B,CAEA,IACA/V,EAAAJ,KAAAC,MAA4BsV,GAAOhf,OAAA8b,GACnC,CACA,MACA,UAAkB8D,GAAU,8CAC5B,CACA,IAASmB,GAAQlX,GACjB,UAAkB+V,GAAU,0BAC5B,OAAA/V,CACA,CAsuBiC0b,CAAStK,GAC1CE,EAAAU,EAAAG,MACA,IAAAb,EACA,UAAA3a,MAAA,uCAEA,MAAAgM,EAAAqP,EAAArP,IACA,IAAAA,EACA,UAAAhM,MAAA,qCAEAtJ,KAAAigB,kBAAAjgB,KAAAskB,YAAAP,GACA/jB,KAAAggB,OAAAiE,EACAjkB,KAAA+f,KAAAzK,EACAtV,KAAA8f,WAAA,CACA,CACA,MAAAnH,SACA3Y,KAAAwjB,QACA,YApBAxjB,KAAAwjB,QAqBA,CAIA,eAAAU,CAAA5O,EAAAyP,EAAA,GACA,yBAAAzP,IAAA0P,MAAA1P,KAGAtV,KAAAokB,aAAA9O,EAAAyP,GAAA,CACA,CACA,YAAAX,CAAA9O,EAAAyP,EAAA,GAEA,OAAAzP,GADAtC,KAAAC,MAAAkC,KAAAD,MAAA,KACA6P,EACA,CAIA,wBAAApC,GACA3iB,KAAAilB,cAAA,IAAAC,YAA2C+I,GAAarN,aAAA,CAAiBuE,OAAA,CAAUnC,SAAAhjB,KAAAgjB,SAAAiB,MAAAjkB,KAAAikB,SACnF,CACA,8BAAAZ,GACArjB,KAAAilB,cAAA,IAAAC,YAA2C+I,GAAalN,mBAAA,CAAuBoE,OAAA,CAAUC,WAAAplB,KAAAmkB,kBACzF,CACA,uBAAAf,GACApjB,KAAAilB,cAAA,IAAAC,YAA2C+I,GAAahN,YACxD,EC/0EO,MAAMqN,GAAb,WAAA/kB,GACmBvJ,KAAAuuB,IAAM,IAAItd,GAkC7B,CAhCU,kCAAAud,CAAmCjV,EAAY9T,GACrD,MAAc,kBAAP8T,IAAoC,MAAT9T,GAA2B,KAAVA,IAAiBzF,KAAKuuB,IAAIzhB,IAAIyM,EACnF,CAEA,UAAM2I,GACJ,OAAOliB,IACT,CAEA,aAAMwd,CAASjE,EAAY9T,GAGrBzF,KAAKwuB,mCAAmCjV,EAAI9T,IAGhDzF,KAAKuuB,IAAIzmB,IAAIyR,EAAI9T,EACnB,CAEA,aAAM6b,CAAS/H,GACb,OAAOvZ,KAAKuuB,IAAIzhB,IAAIyM,GAAMvZ,KAAKuuB,IAAI5pB,IAAI4U,GAAM,IAC/C,CAEA,gBAAMmN,CAAYnN,GAChBvZ,KAAKuuB,IAAIhN,OAAOhI,EAClB,CAEA,WAAMkK,GACJzjB,KAAKuuB,IAAI9K,OACX,CAEA,KAAApB,GAEA,EAGK,MAAMoM,GAAb,WAAAllB,GACUvJ,KAAA0lB,GAAyB,KAChB1lB,KAAAulB,OAAS,QACTvlB,KAAAwlB,UAAY,UACZxlB,KAAAylB,UAAY,CAyF/B,CAvFU,wCAAM+I,CAAmCjV,EAAY9T,GAC3D,GAAW,kBAAP8T,GAAqC,MAAT9T,GAA2B,KAAVA,EAC/C,OAAO,EAET,MAAMipB,QAAiB1uB,KAAKshB,QAAQ/H,GACpC,OAAmB,MAAZmV,GAAiC,KAAbA,CAC7B,CAEA,UAAMxM,GACJ,GAAIliB,KAAK0lB,GAAI,OAAO1lB,KACpB,GAAyB,oBAAd4lB,UACT,MAAM,IAAItc,MAAM,kDAmBlB,aAhBM,IAAI6Y,QAAc,CAACU,EAASC,KAChC,MAAM6C,EAAUC,UAAUC,KAAK7lB,KAAKulB,OAAQvlB,KAAKylB,WAEjDE,EAAQG,QAAU,IAAMhD,EAAO6C,EAAQhN,OACvCgN,EAAQK,UAAY,KAClBhmB,KAAK0lB,GAAKC,EAAQhT,OAClBkQ,KAEF8C,EAAQM,gBAAkB,KACxB,MAAMP,EAAKC,EAAQhT,OACd+S,EAAGQ,iBAAiBC,SAASnmB,KAAKwlB,YACrCE,EAAGU,kBAAkBpmB,KAAKwlB,cAKzBxlB,IACT,CAEA,aAAMwd,CAASjE,EAAY9T,SACnBzF,KAAKkiB,aAGDliB,KAAKwuB,mCAAmCjV,EAAI9T,UAGhDzF,KAAK2uB,UAAU,YAAaC,GAASA,EAAMnI,IAAIhhB,EAAO8T,GAC9D,CAEA,aAAM+H,CAAS/H,GAEb,aADMvZ,KAAKkiB,OACJliB,KAAK2uB,UAAU,WAAYC,GAASA,EAAMjqB,IAAI4U,GACvD,CAEA,gBAAMmN,CAAYnN,SACVvZ,KAAKkiB,aACLliB,KAAK2uB,UAAU,YAAaC,GAASA,EAAMrN,OAAOhI,GAC1D,CAEA,WAAMkK,SACEzjB,KAAKkiB,aACLliB,KAAK2uB,UAAU,YAAaC,GAASA,EAAMnL,QACnD,CAEA,KAAApB,GACMriB,KAAK0lB,KACP1lB,KAAK0lB,GAAGrD,QACRriB,KAAK0lB,GAAK,KAEd,CAEQ,SAAAiJ,CAAUE,EAA0BC,GAC1C,OAAO,IAAI3M,QAAa,CAACU,EAASC,KAChC,IAAK9iB,KAAK0lB,GAER,YADA5C,EAAO,IAAIxZ,MAAM,qCAInB,MAAMylB,EAAK/uB,KAAK0lB,GAAGW,YAAYrmB,KAAKwlB,UAAWqJ,GACzCD,EAAQG,EAAGvI,YAAYxmB,KAAKwlB,WAC5BG,EAAUmJ,EAAGF,GACnB,IAAIjc,EAAc,KAElBoc,EAAGjJ,QAAU,KAAK,IAAAkJ,EAAC,OAAAlM,EAAe,QAARkM,EAAAD,EAAGpW,aAAK,IAAAqW,EAAAA,EAAIrJ,EAAQhN,QAC9CoW,EAAGxI,QAAU,KAAK,IAAAyI,EAAAC,EAAC,OAAAnM,EAAgC,QAAzBmM,EAAQ,QAARD,EAAAD,EAAGpW,aAAK,IAAAqW,EAAAA,EAAIrJ,EAAQhN,aAAK,IAAAsW,EAAAA,EAAI,IAAI3lB,MAAM,mCACjEylB,EAAGzI,WAAa,IAAMzD,EAAQlQ,GAE9BgT,EAAQG,QAAU,IAAMhD,EAAO6C,EAAQhN,OACvCgN,EAAQK,UAAY,WAClBrT,EAAuB,QAAdqc,EAAArJ,EAAQhT,cAAM,IAAAqc,EAAAA,EAAI,OAGjC,EAkBF,MAAME,GAXN,qBACE,MAAMC,EAAUC,EACV1W,EAA+D,QAAnD2W,EAAmB,QAAnBL,EAAAG,EAAQvP,mBAAW,IAAAoP,EAAAA,EAAmB,QAAfC,EAAAE,EAAQG,eAAO,IAAAL,OAAA,EAAAA,EAAErP,mBAAW,IAAAyP,EAAAA,EAAIF,EAAQG,QAEjF,MAAyB,mBAAd5W,EACF,KAGFA,CACT,CAEwB6W,GA4CxB,MAAMC,GA1CN,WASE,GARqD,oBAAXxqB,QAA0B,MAClE,MAAMyqB,EAAOzqB,OAAOe,SAAS2pB,SAI7B,MAAgB,cAATD,GAAiC,cAATA,GAAwBA,EAAKnS,SAAS,aACtE,EANmE,GASlE,OAAI4R,GACK,IAAIA,QAAgBrrB,EAAW,CAAEsc,SAAU,IAAIsO,KAEjD,IAAI9H,GAGb,IACE,OAAO,IAAIA,EACb,CAAE,MAAOhO,GAIPzS,QAAQC,KAAK,wDAAyDwS,GACtE,IACE,OAAIuW,GACK,IAAIA,QAAgBrrB,EAAW,CAAEsc,SAAU,IAAIsO,KAEjD,IAAI9H,EACb,CAAE,MAAOgJ,GAEP,OADAzpB,QAAQC,KAAK,wEAAyEwpB,GAClFT,GACK,IAAIA,QAAgBrrB,EAAW,CAAEsc,SAAU,IAAImO,KAEjD,IAAI3H,EACb,CACF,CACF,CAMiBiJ,GC/LVnpB,eAAeopB,GAAuBzb,GAG3C,MAAM0b,QAvBRrpB,eAA4C2N,GAC1C,IACE,MAAM2b,EAAY,IAAIrV,IAAItG,GACpB4b,EAAe,IAAItV,IAAI,oCAAqCqV,EAAUhT,QACtEkT,QAA0BpW,MAAMmW,EAAa9iB,WAAY,CAAEgjB,YAAa,YAC9E,IAAKD,EAAkB7S,GACrB,OAAO,KAGT,MAAM+S,QAAyBF,EAAkB7V,OACjD,MAAwC,iBAA7B+V,aAAgB,EAAhBA,EAAkB/b,SAAwB+b,EAAiB/b,OAI/D+b,EAAiB/b,OAAOzL,QAAQ,MAAO,IAHrC,IAIX,CAAE,MAAOynB,GACP,OAAO,IACT,CACF,CAKiCC,CAA4Bjc,GAC3D,OAAI0b,GAGG1b,CACT,QCgCA,MAAMkc,GAAad,GACbe,GAA4C,mBAArBD,GAAWpP,MACpCoP,GAAWpP,MAAM7Q,KAAKmf,SACtB3rB,EAEJ,GAAI0sB,GAAe,CACjB,MAAMC,EAAc/pB,MAAOgqB,EAAmBC,iBAC5C,GAAID,GAAwC,iBAAjBA,IAA8B3f,MAAMC,QAAQ0f,GAAe,CACpF,MAAME,EAAwD,QAA3C1B,EAAuB,QAAvBD,EAAAyB,EAAaE,kBAAU,IAAA3B,EAAAA,EAAIyB,EAAa/T,WAAG,IAAAuS,EAAAA,EAAIwB,EAAarc,OACzEwc,EAAmE,QAArDC,EAAwB,QAAxBxB,EAAAoB,EAAaG,mBAAW,IAAAvB,EAAAA,EAAIoB,EAAa9T,oBAAY,IAAAkU,EAAAA,EAAIJ,EAAaC,YAC1F,GAA0B,iBAAfC,GAAkD,iBAAhBC,EAC3C,OAAOL,SAAoBV,GAAsBc,GAAaC,EAElE,CACA,OACSL,GADmB,iBAAjBE,QACkBZ,GAAsBY,GAE9BA,EAF6CC,IAIpEJ,GAAWpP,MAAQsP,CACrB,CAMA,MAAMM,GAAS,IC3ER,MAAP,WAAAvnB,GACmBvJ,KAAA+wB,UAAkD,IAAI9f,GAczE,CAZE,EAAA+f,CAAInQ,EAAwBoQ,GACrBjxB,KAAK+wB,UAAUjkB,IAAI+T,IAAQ7gB,KAAK+wB,UAAUjpB,IAAI+Y,EAAO,IAAI7T,KAC9DhN,KAAK+wB,UAAUpsB,IAAIkc,GAAQ9T,IAAIkkB,EACjC,CAEA,GAAAC,CAAKrQ,EAAwBoQ,SACF,QAAzBjC,EAAAhvB,KAAK+wB,UAAUpsB,IAAIkc,UAAM,IAAAmO,GAAAA,EAAEzN,OAAO0P,EACpC,CAEA,IAAAE,CAAMtQ,KAA2B5a,SACN,QAAzB+oB,EAAAhvB,KAAK+wB,UAAUpsB,IAAIkc,UAAM,IAAAmO,GAAAA,EAAEoC,QAAQC,GAAKA,KAAKprB,GAC/C,GDkEF,IAAIqrB,GAAuC,QAA1BtC,GAACQ,GAAiBxM,gBAAQ,IAAAgM,GAAAA,GAAI7iB,QAASqjB,GAAiBvL,OACJ,mBAAzDuL,GAAoC7O,kBAC5C6O,GAAoC7O,iBAAiB,qBAAsB,WAC3E,MAAM4Q,EAAwC,QAA1BvC,EAACQ,GAAiBxM,gBAAQ,IAAAgM,EAAAA,EAAI7iB,QAASqjB,GAAiBvL,OACxEqN,KAAeC,GACjBT,GAAOK,KAAK,UAEdG,GAAaC,IAIV,MAAMC,GAAuChtB,OAAOitB,OACzDjC,GACA,CAAEsB,YAUJtsB,OAAOC,eAAe+sB,GAAa,OAAQ,CACzC9sB,YAAY,EACZuU,cAAc,EACd,GAAAtU,GACE,MAAM2rB,EAAad,GACbxM,GAAmC,IAAxBsN,EAAWtN,UAAqB7W,QAAQmkB,EAAWrM,OACpE,MAAO,CACLA,MAAOqM,EAAWrM,MAClByN,WAAY1O,EAEhB,4BE/HK,MAAM2O,UAAKC,GAAeC,ICCpBC,IAAW,EAAAD,GAAAE,KACpB,sDAGG,SAASC,GAAepD,GAE3B,MAAMqD,EAAKN,GAsGX,SAASO,EACTC,EACAC,EACAC,EACA5oB,EAGQ,IAEJ,MAAM6oB,EAAY7oB,EAAQ8oB,QAAU,GAC9B3tB,GAAI,EAAAitB,GAAAW,SACJC,GAAO,EAAAZ,GAAAa,WAAU,kCACvB,IAAItuB,EAAIQ,EAAEmtB,IAAI,GAAGM,QACjB,MAAMlyB,EAAMyE,EAAEmtB,IAAIM,GACZM,EAAM/tB,EAAEmtB,IAAII,GAWlB,GAVAvtB,EAAEmI,IAAI3I,EAAG6tB,EAAG/vB,IAAI,QAASuwB,EAAK,iBAAkBtyB,GAChDyE,EAAEmI,IAAI3I,EAAGquB,EAAK,YAAaE,EAAKxyB,GAC5BsJ,EAAQmpB,eACRhuB,EAAEmI,IAAI3I,EAAGquB,EAAK,WAAYE,EAAKxyB,GAEnCyE,EAAEmI,IAAI3I,EAAGquB,EAAK,SAAUL,EAAIjyB,GAC5ByE,EAAEmI,IAAI3I,EAAGquB,EAAK,QAASA,EAAK,QAAStyB,GACrCyE,EAAEmI,IAAI3I,EAAGquB,EAAK,QAASA,EAAK,SAAUtyB,GACtCyE,EAAEmI,IAAI3I,EAAGquB,EAAK,QAASA,EAAK,WAAYtyB,GAEpCmyB,EAAU5qB,OAAQ,CAClBtD,EAAIQ,EAAEmtB,IAAI,GAAGM,QACbztB,EAAEmI,IAAI3I,EAAG6tB,EAAG/vB,IAAI,QAASuwB,EAAK,iBAAkBtyB,GAChDyE,EAAEmI,IAAI3I,EAAGquB,EAAK,YAAaE,EAAKxyB,GAChCyE,EAAEmI,IAAI3I,EAAGquB,EAAK,cAAeR,EAAGnxB,KAAK,SAAUX,GAC/C,IAAK,IAAIuF,EAAI,EAAGA,EAAI4sB,EAAU5qB,OAAQhC,IACtCd,EAAEmI,IAAI3I,EAAGquB,EAAK,QAASA,EAAKH,EAAU5sB,IAAKvF,EAE/C,CACA,OAAO,EAAA0xB,GAAAgB,WAAU1yB,EAAKyE,EAAGytB,EAC7B,CACA,MAAO,CACHS,cAzIJrsB,eAA6B2S,SACnBwV,EAAMmE,QAAQC,KAAK5Z,GACzB,MAAM6Z,EAAUrE,EAAMsE,IAAI9Z,EAAK0Y,IAC/B,IAAKmB,EACD,MAAM,IAAI3pB,MAAM,8BAA8B8P,KAElD,OAAO6Z,EAAQxtB,KACnB,EAmII0tB,iBArHJ,SACAhB,EACAC,EACA3oB,GAKA,MAAM2pB,EAASxE,EAAMsE,IACjBtE,EAAMmD,IAAII,GACVL,IAGJ,OAAO3P,QAAQU,UACV7G,KAAK,IACFoX,GAgCR,SAAsBjB,GAClB,MAAMY,EAAUnE,EAAMmE,QACtB,IAAKA,EACD,MAAM,IAAIzpB,MAAM,8CAGpB,OAAOypB,EAAQC,KAAKb,GAAQnW,KAAKrJ,IAC7B,IAAKA,EAAOyK,GACR,MAAM,IAAI9T,MAAM,8BAAiCqJ,EAAegG,OAGpE,MAAMya,EAASxE,EAAMsE,IACrBtE,EAAMmD,IAAII,GACVL,IAGA,IAAKsB,EACL,MAAM,IAAI9pB,MAAM,2CAA6C6oB,GAG7D,OAAOiB,GAEf,CAlDWC,CAAYlB,GAAQnY,MAAMC,IAC7B,MAAM,IAAI3Q,MAAM,qCAAqC6oB,MAAWlY,QAGnE+B,KAAKoX,IACN,MAAME,EAAUpB,EAAWC,EAAQC,EAAIgB,EAAOG,IAAK9pB,GACnD,IAAKmlB,EAAMmE,QACP,MAAM,IAAIzpB,MAAM,yCAEpB,OAAOslB,EAAMmE,QACRS,aAAa,MAAOJ,EAAOG,IAAK,CACjC5sB,KAAM2sB,EACNG,YAAa,gBAEZzX,KAAKrJ,IACN,IAAKA,EAAOyK,GACR,MAAM,IAAI9T,MAAM,2BAA6BqJ,EAAOgG,OAGxD,OAAOya,KAGf,EA6EIlB,aAER,CCjJO,MAAMwB,GAAa,KACtB,IAAIC,gBAAEA,GAAyB3uB,OAG/B,GAFA2uB,IAAAA,EAAoB,IACpBA,EAAgBC,mBAAoB,EAChCD,EAAgBE,QAAU7uB,OAAOY,SAAU,CAE3C,GADoBZ,OAAOY,SAASG,SAASC,KAC7BsH,WAAWqmB,EAAgBE,QAAS,CACpDF,EAAgBC,mBAAoB,EACpC,MAAME,EAAS,IAAIxU,gBAAgBta,OAAOY,SAASG,SAASkX,QAC5D,GAAI6W,EAAQ,CACR,IAAIC,EAAaJ,EAAgBI,WAAaD,EAAOnvB,IAAI,QAAU,KACnE,GAAIovB,IACJA,EAAaC,UAAUD,IAClBA,EAAWzmB,WAAWqmB,EAAgBE,SAAS,CAChD,MAAMI,EAAMF,EAAW5hB,MAAM,MAC7BwhB,EAAgBjX,IAAMuX,EAAI,GAAK,KAAOA,EAAI,GAC1CN,EAAgBC,mBAAoB,CACxC,CAEJ,CACA,CACJ,CACA,OAAOD,GAUJ,SAASO,KACZ,MAAMC,sBAAEA,GAA+BnvB,OACvC,QACmC,IAA1BmvB,GACPA,EAAsBC,SAItB,OADA7yB,EAAU,wBAA0B4yB,EAAsBC,WACnD,EAAAvC,GAAAE,KAAIoC,EAAsBC,UAInC,GACsB,oBAAbxuB,UACPA,SAASG,UACiC,sBAAzC,GAAKH,SAASG,UAAUc,MAAM,EAAG,IAClC,CACA,MAAMwtB,EAAMzuB,SAAS0uB,eAAe,aACpC,IAAKD,EAAK,OAAO,KACjB,MAAM9a,EAAK8a,EAAIE,aAAa,UAC5B,OAAKhb,GACLhY,EAAU,oBAAsBgY,IACzB,EAAAsY,GAAAE,KAAIxY,IAFK,IAGlB,CACA,OAAO,IACX,CC5DO,MAAMib,GAMX,WAAAjrB,CAAYkrB,GAJJz0B,KAAA00B,kBAAsD,KACtD10B,KAAA20B,4BAA6B,EAC7B30B,KAAA40B,cAA+B,KAGrC50B,KAAK60B,QAAUJ,CACjB,CAGA,eAAIjD,GAAyC,OAAOxxB,KAAK60B,OAAQ,CAEjE,WAAAC,WACE,MAAMC,EAAMrB,KACZ,GAAIqB,EAAInB,kBACN,OAAO,EAAA/B,GAAAE,KAAIgD,EAAI9Q,OAEjB,MAAMqM,EAAatwB,KAAK60B,QAClBG,EAA4B,QAAhBhG,EAAAsB,aAAU,EAAVA,EAAY2E,YAAI,IAAAjG,OAAA,EAAAA,EAAE/K,MAC9BiR,EAAe5E,aAAU,EAAVA,EAAYrM,MAC3BA,EAAQ+Q,GAAaE,GAAgBl1B,KAAK40B,cAC1CO,EAA+B,QAAhBlG,EAAAqB,aAAU,EAAVA,EAAY2E,YAAI,IAAAhG,OAAA,EAAAA,EAAEyC,WACjC0D,EAAgB9E,aAAU,EAAVA,EAAYtN,SAC5B0O,GAA8B,IAAjByD,IAA2C,IAAlBC,GACxB,MAAhBD,GAAyC,MAAjBC,GAAyBjpB,QAAQ8X,IAC3D9X,QAAQnM,KAAK40B,eACf,OAAI50B,MAAQA,KAAK60B,SAAW5Q,GAASyN,GAC5B,EAAAG,GAAAE,KAAI9N,GAENiQ,IACT,CASA,eAAMmB,CACJC,SAGA,MAAMC,EAAuB,IAAI7a,IAAI1V,OAAOe,SAASC,MAAMkF,KACvDqqB,GACFvwB,OAAOwwB,aAAahY,QAAQ,uBAAwB+X,GAEtD,MAAMjF,EAAatwB,KAAK60B,QACnB70B,KAAK20B,4BAAgE,mBAAT,QAAlB3F,EAAAsB,aAAU,EAAVA,EAAYQ,cAAM,IAAA9B,OAAA,EAAAA,EAAEgC,MAEjEV,EAAWQ,OAAOE,GAAG,iBAAmB5X,IACtC7X,EAAU,uBAAuB6X,KAC7BxT,SAASG,SAASmH,aAAekM,GAAKoI,QAAQiU,aAAa,KAAM,GAAIrc,KAE3EpZ,KAAK20B,4BAA6B,GAG/B30B,KAAK00B,oBACR10B,KAAK00B,kBAAoB10B,KAAK01B,sBAGhC,MAAMC,EAAW31B,KAAK00B,kBACtB,IAAItC,EACJ,IACEA,QAAWuD,CACb,SACM31B,KAAK00B,oBAAsBiB,IAC7B31B,KAAK00B,kBAAoB,KAE7B,CAEA,OAAOvS,QAAQU,QAAQyS,EAAkBA,EAAgBlD,GAAMA,EACjE,CAEQ,wBAAMsD,mBACZ,MAAMpF,EAAatwB,KAAK60B,QAKlBjE,EAAc,IAAIlW,IAAI1V,OAAOe,SAASC,MAE5C,GADA4qB,EAAY1lB,KAAO,GAC+B,mBAAvColB,aAAU,EAAVA,EAAYsF,8BACftF,EAAWsF,uBAAuB,CACtCC,wBAAwB,EACxBzc,IAAKwX,EAAY5qB,WAEd,CACL,GAAmC,mBAAxBsqB,aAAU,EAAVA,EAAY1N,SAAwB,CAC7C,MAAMG,EAAgC,QAApBiM,EAAAsB,aAAU,EAAVA,EAAYtN,gBAAQ,IAAAgM,EAAAA,EAAI7iB,QAAQmkB,aAAU,EAAVA,EAAYrM,OAC9D,UACQqM,EAAW1N,SACnB,CAAE,MAAOjK,GACP,MAAMnP,EAAUmP,aAAiBrP,MAAQqP,EAAMnP,QAAUpB,OAAOuQ,GAChE,IAAK,yBAAyB1I,KAAKzG,GACjC,MAAMmP,EAERpX,EAAU,iCACZ,CACA,MAAMgwB,EAAkC,QAApBtC,EAAAqB,aAAU,EAAVA,EAAYtN,gBAAQ,IAAAiM,EAAAA,EAAI9iB,QAAQmkB,aAAU,EAAVA,EAAYrM,QAC3DlB,GAAawO,IACC,QAAjBlC,EAAAiB,EAAWQ,cAAM,IAAAzB,GAAAA,EAAE8B,KAAK,iBAAkBnsB,OAAOe,SAASC,MAE9D,CACA,GAAmD,mBAAxCsqB,aAAU,EAAVA,EAAYnP,yBAAwC,CAC7D,MAAM4B,EAAgC,QAApB8N,EAAAP,aAAU,EAAVA,EAAYtN,gBAAQ,IAAA6N,EAAAA,EAAI1kB,QAAQmkB,aAAU,EAAVA,EAAYrM,aACxDqM,EAAWnP,0BACjB,MAAMoQ,EAAkC,QAApBuE,EAAAxF,aAAU,EAAVA,EAAYtN,gBAAQ,IAAA8S,EAAAA,EAAI3pB,QAAQmkB,aAAU,EAAVA,EAAYrM,QAC3DlB,GAAawO,IACC,QAAjBwE,EAAAzF,EAAWQ,cAAM,IAAAiF,GAAAA,EAAE5E,KAAK,SAE5B,CACF,CAGA,MAAM6E,EAAwBhxB,OAAOwwB,aAAalU,QAAQ,wBAC1D,GAAI0U,EAAuB,CACzB,MAAMC,EAAS,IAAIvb,IAAI1V,OAAOe,SAASC,MACnCiwB,EAAO/qB,OAAS8qB,IACdxU,QAAQC,UAEVD,QAAQC,UAAU,KAAM7b,SAAS8b,MAAOsU,GAGxCjwB,SAASmF,KAAO8qB,EAElBC,EAAO/qB,KAAO8qB,GAIhBhxB,OAAOwwB,aAAahY,QAAQ,uBAAwB,GACtD,CAGA,IAAI4U,EAAK8B,KACT,GAAI9B,EACF,OAAOA,EAGT,IAAInO,EAAQjkB,KAAKk2B,iBAAiB5F,aAAU,EAAVA,EAAY2E,KAAM3E,GAoBpD,OAnBKrM,IAEHA,QAAcjkB,KAAKm2B,6BAInBn2B,KAAK40B,cADH3Q,GAGmB,KAGnBA,IACFmO,EAAKpyB,KAAKo2B,SAASnS,IAGjBmO,GACF7wB,EAAU,iBAAiB6wB,wBAGtBA,CACT,CAEQ,+BAAM+D,GACZ,GAAsB,oBAAXnxB,OACT,OAAO,KAGT,MAAM0qB,SAAEA,EAAQ3I,KAAEA,EAAIsP,SAAEA,GAAarxB,OAAOe,SACtCuwB,EAAkB,aAExB,IAAK5G,EAASpS,SAASgZ,GACrB,OAAO,KAGT,MAAMC,EAAU7G,EAAS7oB,MAAM,GAAIyvB,IACnC,IAAKC,GAAuB,cAAZA,GAA2BA,EAAQ5qB,SAAS,KAC1D,OAAO,KAGT,IAOE,GAA6B,aALDkO,MAAM,2BAA4B,CAC5DqW,YAAa,UACbnW,SAAU,SACVpL,MAAO,cAESwL,OAChB,OAAO,KAGT,MAAO,GADQ,GAAGkc,MAAa3G,IAAW3I,EAAO,IAAIA,IAAS,sBAEhE,CAAE,MAAOyP,GACP,OAAO,IACT,CACF,CASA,QAAAJ,CACEnS,EACAwS,GAEA,IAAIC,EACJ,GAAIzS,EAAO,CACTyS,EAA6B,iBAAVzS,EAAsBA,EAAQA,EAAMsP,IACvD,MAAMnB,GAAK,EAAAP,GAAA1uB,WAAUuzB,GAIrB,OAHID,IACFA,EAAQrE,GAAKA,GAERA,CACT,CACA,OAAO,IACT,CAKA,gBAAA8D,CACES,EACAC,GAEA,MAAM3S,GAAQ0S,aAAW,EAAXA,EAAa1S,SAAS2S,aAAW,EAAXA,EAAa3S,OACjD,IAAKA,EACH,OAAO,KAET,MAAMkR,EAAewB,aAAW,EAAXA,EAAajF,WAC5BmF,EAAeD,aAAW,EAAXA,EAAalF,WAC5BoF,EAAaF,aAAW,EAAXA,EAAa5T,SAChC,OAAqB,IAAjBmS,IAA0C,IAAjB0B,IAAwC,IAAfC,EAC7C7S,GAEY,IAAjBkR,IAA2C,IAAjB0B,IAAyC,IAAfC,EAC/C,KAEF7S,CACT,ECrPK,SAAS8S,GAASpE,GACrB,OAAO,EAAAd,GAAAE,KAAIY,EAAIY,IAAJZ,MAA6Bxd,KAAKD,MACjD,CAmBO,SAAS8hB,GAAgBrE,GAC5B,OAAKA,GAID,GAAG3tB,OAAOe,SAASgX,YAAc,IAAIrC,IAAIiY,EAAIltB,OAAOsX,MAE5D,CCzBA,MAAMka,GAA6B,iBAE5B,SAASC,GAAgBtI,EAAOuI,GACnC,MAAMlF,EAAKN,GAEXlrB,eAAe2wB,EACXC,EACAjF,EACAkF,SAKM1I,EAAMmE,QAAQC,KAAKqE,GAGzB,MAAME,EAAa3I,EAAMsE,IACrBmE,EACA,IAAIxF,GAAA2F,UAAU,uDAElB,IAAKD,EACD,MAAM,IAAIjuB,MAAM,2BAGpB,MAAMmuB,EAAU,gJAICrF,EAAG3sB,mOAOH6xB,EAAQ7xB,wJAMnBmpB,EAAMmE,QAAQS,aAAa,MAAO+D,EAAW9xB,MAAO,CACtDkB,KAAM8wB,EACNhE,YAAa,eAErB,CAEAhtB,eAAeixB,EAAsBC,EAAWvF,GAE5C,MAAMwF,EAAmBhJ,EAAMsE,IAC3Bd,EACAH,EAAGxvB,MAAM,qBAEb,IAAKm1B,EACD,MAAM,IAAItuB,MAAM,uCAEdslB,EAAMmE,QAAQC,KAAK4E,GACzB,MAAMC,EAAMd,GAASa,GACfE,EAAM,EACR,EAAAjG,GAAAkG,IACIF,EACA5F,EAAG/vB,IAAI,QACP+vB,EAAGxvB,MAAM,oBACTm1B,EAAiBjF,QAErB,EAAAd,GAAAkG,IACIF,EACA5F,EAAGxvB,MAAM,YACTwvB,EAAGzwB,QAAQ,YACXo2B,EAAiBjF,QAErB,EAAAd,GAAAkG,IAAGF,EAAK5F,EAAGxvB,MAAM,YAAak1B,EAAWC,EAAiBjF,cAExD,IAAIxQ,QAAQ,CAACU,EAASC,KACxB8L,EAAMoJ,QAAQC,OAAO,GAAIH,EAAK,SAAUI,EAAM9a,EAAI+a,GACzC/a,EAGDyF,EAAQ,MAFRC,EAAO,IAAIxZ,MAAM6uB,GAIzB,IAER,CAEA1xB,eAAe2xB,EAASd,GACpB,MAAMlF,QAAW+E,EAAakB,SAExBhB,EDpDP,SACHC,EACAgB,GAIA,MAAMC,EAAmB,IAAI7d,IACzB,mBAAmB,IAAIA,IAAI4c,EAAQ7xB,OAAOgqB,QAC1C6I,EAAQ7yB,OACVyH,WACF,OAAO,IAAI2kB,GAAA2F,UAAUe,EACzB,CCyC8BC,CAAuBlB,QADvBH,EAAasB,WAAWrG,IAE9C,IAAIsG,GAAS,EACb,UACU9J,EAAMmE,QAAQC,KAChB,IAAInB,GAAA2F,UAAUH,EAAc5xB,MAAQ,kBAE5C,CAAE,MAAOV,GACL2zB,GAAS,CACb,CACA,MAAO,CAAEtG,KAAIiF,gBAAeqB,SAChC,CAEAjyB,eAAekyB,EACXtB,EACAjF,GAMA,aAJsBwG,EAAQ,CAC1BxG,KACAyG,QAASxB,EAAc5xB,SAEZqzB,WACnB,CAEA,SAASF,EAAQG,GACb,MAAMC,EAAKpK,EACLoJ,EAAUgB,EAAGhB,QACnB,GAAIe,EAAe3G,KAAO2G,EAAe3G,GAAGmB,IACxC,MAAM,IAAIjqB,MAAM,iCAAmCyvB,EAAe3G,IAGtE,MAAM0G,EAAeC,EAAeD,YAChCC,EAAeD,aACfE,EAAGjH,IAAIgH,EAAeF,QAAU5B,IAC9BgC,EAAaH,EAAYnG,MAmB/B,OAjBAqG,EAAGjsB,IACC+rB,EACA7G,EAAG/vB,IAAI,QACP+vB,EAAGzwB,QAAQ,YACXy3B,GAEJD,EAAGjsB,IAAI+rB,EAAa7G,EAAGtxB,GAAG,SAAU,eAAgBs4B,GACpDD,EAAGjsB,IACC+rB,EACA7G,EAAGtxB,GAAG,YACN,EAAAkxB,GAAAqH,MAAW,IAAI/jB,KAAKA,KAAKD,QACzB+jB,GAEAF,EAAe3G,IACf4G,EAAGjsB,IAAI+rB,EAAa7G,EAAGtxB,GAAG,UAAWo4B,EAAe3G,GAAI6G,GAGrD,IAAI9W,QAAQ,SAAUU,EAASC,GAClCkV,SAAAA,EAASvR,IACLwS,EACAD,EAAGG,wBAAmBt1B,OAAWA,OAAWA,EAAWo1B,GACvD,cACA,SAAUG,EAAMhc,EAAI5T,GACZ4T,EACAyF,EAAQ,IACDkW,EACHD,gBAGJhW,EACI,IAAIxZ,MACA,uCAAyC8vB,EAAO,MAAQ5vB,GAIxE,EAER,EACJ,CA2BA/C,eAAe4yB,EAAW/B,EAAoBK,eACpC/I,EAAMmE,QAAQC,KAAKsE,EAAQ3E,OACjC,MAAM2G,EAAe1K,EAAMsE,IACvBoE,EACArF,EAAG5wB,IAAI,cACPwC,EACAyzB,EAAQ3E,OAEZ,IAAK2G,EACD,MAAM,IAAIhwB,MAAM,4BAA4BguB,EAAQ7xB,SAExD,MAAM8zB,EAAa,+EAEjBtH,EAAG/vB,IAAI,eAAey1B,EAAUlyB,qBAG5B+zB,QAAoC,QAAbxK,EAAAJ,EAAMmE,eAAO,IAAA/D,OAAA,EAAAA,EAAEwE,aACxC,OACA8F,EAAa7zB,MACb,CACIkB,KAAM4yB,EACN9F,YAAa,iBAIrB,KADoB+F,aAAc,EAAdA,EAAgBhtB,QAAQ7H,IAAI,aAE5C,MAAM,IAAI2E,MAAM,6BAA6BkwB,aAAc,EAAdA,EAAgBrf,SAErE,CACA,MAAO,CACHid,SAAQM,wBAAuBU,WAAUO,kBAAiBc,QAjD9DhzB,eACI6wB,EACAoC,GAAkB,GAElB,MAAMtH,GAAEA,EAAEiF,cAAEA,EAAaqB,OAAEA,SAAiBN,EAASd,GACrD,GAAIoB,EACA,OAAO,IAAI7G,GAAA2F,UAAUH,EAAc5xB,MAAQwxB,IAG/C,GAAIyC,EAAiB,CACjB,MAAM/B,QAAkBgB,EAAgBtB,EAAejF,GAIvD,aAHMiH,EAAW/B,EAASK,SACpBP,EAAOC,EAAejF,EAAIkF,SAC1BI,EAAsBC,EAAWvF,GAChCuF,CACX,CACA,OAAO,IACX,EAgCuE0B,aAAYT,UAEvF,CC5NO,SAASe,GAAiB/K,EAAOuI,EAAcyC,EAAcC,EAAgBC,GAgDlF,MAAO,CACLC,eA/CAtzB,eAA8BuzB,EAAmBC,GAC/C,MAAMC,QAA2B/C,EAAakB,SAExC8B,EAAW,UADgBhD,EAAasB,WAAWyB,IAC7Bz0B,oBAAoBkZ,mBAAmBsb,MASnE,aARMJ,EAAeO,gBAAgBD,SAE/BP,EAAaS,oBAAoB,CACrCC,WAAYJ,EAAQz0B,MACpBu0B,YACAO,cAAe,aACfxU,OAAQoU,IAEHA,CACX,EAmCEK,eAjCF/zB,eACIg0B,GAEKA,IACHA,QAAatD,EAAakB,UAE5B,MAAMqC,QAAcvD,EAAawD,aAAaF,GAE9C,aADmBZ,EAAee,oBAAoBF,IAC1CxuB,OAAOkN,IAAQygB,EAAegB,YAAYzhB,GAC1D,EAyBE0hB,WAvBFr0B,eAA0B2S,EAAarG,GACrC,MAAMgoB,QAAmBnM,EAAMmE,QAAQiI,OAAO5hB,GAC9C,GAA0B,MAAtB2hB,EAAW5gB,OACb,MAAM,IAAI7Q,MAAM,WAAW8P,KAE7B,MAAM6hB,EFvBH,SAAuBC,EAAiBnoB,GAC3C,MAAMooB,EAAOpoB,EAAKqoB,iBACZC,GAAS,KAAOtoB,EAAKuoB,cAAc,IAAIz0B,OAAO,GAC9CsM,GAAO,IAAOJ,EAAKwoB,cAAe10B,OAAO,GACzC20B,EAAQN,EAAQ/oB,MAAM,KACtBspB,EAAWD,EAAMA,EAAM9zB,OAAQ,GACrC,OAAO,IAAIgT,IAAI,aAAaygB,KAAQE,KAASloB,KAAOsoB,IAAYP,GAAShuB,UAC7E,CEgBuBwuB,CAActiB,EAAKrG,GAChCtJ,EAAU,CACdwU,OAAQ,MACRC,WAAY6c,EAAWY,OACvBnvB,QAAS,CACP,CAAC,eAAgBuuB,EAAWvuB,QAAQ7H,IAAI,iBAAmB,8BAIzB,aADfiqB,EAAMmE,QAAQiI,OAAOC,EAAYxxB,IAC3C0Q,OAAOjN,WAAW,UACvB0hB,EAAMmE,QAAQiI,OAAO5hB,EAAK,CAC9B6E,OAAQ,UAGd,EAMF,CCzDA,MAAM2d,WAAoBtyB,MACtB,WAAAC,CAAYC,GACRE,MAAMF,GAENhF,OAAOq3B,eAAe77B,gBAAiBmF,WACvCnF,KAAK4J,gBAAkBA,IAC3B,EAGG,MAAMkyB,WAA0BF,IAEhC,MAAMG,WAAkCH,IAExC,MAAMI,WAAiCJ,IAEvC,MAAMK,WAAsBL,IAE5B,MAAMM,WAAyBN,IAE/B,MAAMO,WAA0BP,IAEhC,MAAMQ,WAAmBR,GAG5B,WAAAryB,CAAY4Q,EAAgB3Q,GACxBE,MAAMF,GACNxJ,KAAKma,OAASA,CAClB,EC3BG,SAASkiB,KACZ,MAAO,CACH,sDACA,KACA,0BACA,+BACF5zB,KAAK,KACX,CAEO,SAAS6zB,KACZ,MAAO,CACH,sDACA,KACA,0BACA,iCACF7zB,KAAK,KACX,CChBO,SAAS8zB,GAA2BtY,EAAeuY,GACtD,MAAMC,EAAW,IAAI/hB,IAAI8hB,GAAoBxf,SAAS7K,MAAM,KAAKrG,OAAS,sBAC1E,MAAO,CACH,2CACA,GACA,iDACA,8CACA,GACA,WACA,2BACA,GACA,gBACA,YAAYmY,MACZ,GACA,uBAAuBwY,MACvB,GACA,eACA,4CACA,GACA,oBACA,YACA,2BACA,GACA,iCACA,GACA,uBAAuBA,MACvB,GACA,0BACFh0B,KAAK,KACX,CCxBO,SAASi0B,GAAqB9N,GAEjC,SAAS+N,EAAqBC,GAC1B,OAAOhO,EACFuK,mBACGyD,GACA,EAAA/K,GAAAE,KAAI,0CACJluB,GAEH0qB,IAAKwJ,GAAkBA,EAAG8E,OACnC,CAEA,SAAShC,EAAYzhB,GACjB,MAAM0jB,EAAe1jB,EAAI3T,MACzB,MAAwD,MAAjDq3B,EAAaC,OAAOD,EAAap1B,OAAS,EACrD,CA8BA,MAAO,CACHmzB,cACAT,gBA9BJ3zB,eAA+B2S,GAE3B,IAAKyhB,GADgB,EAAAhJ,GAAAE,KAAI3Y,IAErB,MAAM,IAAI9P,MAAM,uBAAuB8P,KAG3C,MAAMzG,QAAeic,EAAMmE,QAAQiI,OAAO5hB,EAAK,CAC3C6E,OAAQ,MACRzR,QAAS,CACL,eAAgB,cAChB,gBAAiB,IACjBwwB,KAAM,yDAEV9e,KAAM,MAGV,GAAsB,MAAlBvL,EAAOwH,QAGyB,MAAhCxH,EAAOwH,OAAOjN,WAAW,GACzB,MAAM,IAAI5D,MAAM,eAAeqJ,EAAOwH,+CAA+Cf,IAE7F,EASIujB,uBACA/B,oBARJn0B,eAAmCw2B,GAE/B,aADMrO,EAAMmE,QAAQC,KAAKiK,GAClBN,EAAqBM,EAChC,EAOJ,CC3CO,SAASC,GAAmBtO,EAAOuO,EAAOvD,GAC7C,MAAM3H,EAAKN,GACLkI,EAAiB6C,GAAqB9N,GACtCwO,EAA0B,IAAInsB,IAC9BosB,EAA+B,IAAIpsB,IAEzC,SAASqsB,EAAkB/J,GACvB,QAASA,IAAQA,EAAIjmB,WAAW,aAAeimB,EAAIjmB,WAAW,WAClE,CAEA,SAASiwB,EAAUC,GACf,MAAM7K,EAAM6K,EAAK7K,MACX8K,EAAM9K,EAAI8K,MAChB,IAAIA,aAAG,EAAHA,EAAKlK,MAAO+J,EAAkBG,EAAIlK,KAAM,OAAOkK,EAAIlK,IACvD,MAAMmK,EAAS/K,EAAIY,IACnB,IAAKmK,IAAWJ,EAAkBI,GAAS,OAAO,KAClD,MAAMC,EAAkBD,EAAOvrB,MAAM,KAAK,GACpCyrB,EAAYD,EAAgBE,YAAY,KAC9C,OAAmB,IAAfD,EAAyB,KACtBD,EAAgB92B,MAAM,EAAG+2B,EAAY,EAChD,CAEA,SAASE,EAA8BC,EAA4BtC,GAC/D,MAAMuC,EAAST,EAAUQ,GACzB,IAAKC,EAAQ,MAAM,IAAI10B,MAAM,gDAAgDy0B,EAAgBxK,OAC7F,OAAO,EAAA1B,GAAAE,KAAIiM,EAASvC,EACxB,CAEA,SAASwC,EAAgBhkB,SACrB,GAA8B,OAAb,QAAb+U,EAAA/U,aAAG,EAAHA,EAAKL,gBAAQ,IAAAoV,OAAA,EAAAA,EAAE7U,QAAgB,OAAO,EAC1C,MAAMwhB,EAAO,IAAG1hB,aAAG,EAAHA,EAAKzQ,UAAWyQ,GAAO,KACvC,OAAO0hB,EAAKhwB,SAAS,QAAUgwB,EAAKhwB,SAAS,YACjD,CAaAlF,eAAey3B,EAA8BzD,EAAiBsD,SAC1D,MAAMC,EAAST,EAAUQ,GACzB,IAAKC,EAAQ,MAAM,IAAI10B,MAAM,yCAAyCy0B,EAAgBxK,aAb1F9sB,eAAqC03B,GACjC,MAAMvB,GAAgB,EAAA/K,GAAAE,KAAIoM,GAC1B,IAEI,kBADMvP,EAAMmE,QAAQC,KAAK4J,EAE7B,CAAE,MAAO3iB,GACL,IAAKgkB,EAAgBhkB,GAAM,MAAMA,CACrC,OACM4f,EAAeO,gBAAgB+D,EACzC,CAKUC,CAAsBJ,GAE5B,MAAMpB,GAAgB,EAAA/K,GAAAE,KAAIiM,GAC1B,IAAIK,EACJ,UACUzP,EAAMmE,QAAQC,KAAK4J,GACzByB,EAA8C,QAAlCrP,EAAAJ,EAAMsE,IAAI0J,EAAe9K,WAAS,IAAA9C,OAAA,EAAAA,EAAEvpB,KACpD,CAAE,MAAOwU,GACL,IAAKgkB,EAAgBhkB,GAAM,MAAMA,CACrC,CACKokB,IAEDA,EAAY,GAAGL,SAEnB,MAAM5K,GAAS,EAAAvB,GAAAE,KAAIsM,GACnB,IAEI,kBADMzP,EAAMmE,QAAQC,KAAKI,EAE7B,CAAE,MAAOnZ,GACL,IAAKgkB,EAAgBhkB,GAAM,MAAMA,CACrC,CCjFD,IAAuCgK,QDmFhC2K,EAAMmE,QAAQS,aAAa,MAAOJ,EAAOG,IAAK,CAChD5sB,MCpFkCsd,EDoFEwW,EAAKlH,ICnF1C,CACH,iDACA,GACA,WACA,uBACA,cAActP,MACd,qBACA,oBACA,8CACFxb,KAAK,OD2ECgrB,YAAa,eAErB,CAkCAhtB,eAAe63B,EAA8B7D,EAAiBsD,GAC1D,MAAMQ,EAAiBR,EAAgBpL,MACjC6L,EAAa/D,EAAK9H,YAClB/D,EAAMmE,QAAQC,KAAKuL,GAEzB,MAAME,EACD7P,EAAMsE,IAAIuH,EAAMxI,EAAGxvB,MAAM,mBAAoB,KAAM+7B,GAClDE,EACD9P,EAAMsE,IAAIuH,EAAMxI,EAAGxvB,MAAM,mBAAoB,KAAM87B,GAClDI,EACFF,GACAC,GACAZ,EAA8BC,EAAiB,uBAC7CnG,EACDhJ,EAAMsE,IAAIuH,EAAMxI,EAAGxvB,MAAM,oBAAqB,KAAM87B,IACrDT,EAA8BC,EAAiB,wBAG7Ca,GAAqCH,EACvCG,SACMhF,EAAaiF,sCACfpE,EACAxI,EAAGxvB,MAAM,mBACTk8B,EACAH,EACAnC,MAIR,MAAMyC,EAAkB,GACnBlQ,EAAMmQ,MAAMR,EAAgBtM,EAAG/vB,IAAI,QAAS+vB,EAAGvvB,MAAM,qBAAsB67B,IAC5EO,EAAS32B,MAAK,EAAA0pB,GAAAkG,IAAGwG,EAAgBtM,EAAG/vB,IAAI,QAAS+vB,EAAGvvB,MAAM,qBAAsB67B,IAE/E3P,EAAMmQ,MAAMR,EAAgBtM,EAAGrxB,IAAI,cAAUiD,EAAW06B,IACzDO,EAAS32B,MAAK,EAAA0pB,GAAAkG,IAAGwG,EAAgBtM,EAAGrxB,IAAI,UAAU,EAAAixB,GAAAmN,SAAQ,oBAAqBT,IAE9E3P,EAAMmQ,MAAMtE,EAAMxI,EAAGxvB,MAAM,mBAAoBk8B,EAAiBJ,IACjEO,EAAS32B,MAAK,EAAA0pB,GAAAkG,IAAG0C,EAAMxI,EAAGxvB,MAAM,mBAAoBk8B,EAAiBJ,IAEpE3P,EAAMmQ,MAAMtE,EAAMxI,EAAGxvB,MAAM,oBAAqBm1B,EAAkB2G,IACnEO,EAAS32B,MAAK,EAAA0pB,GAAAkG,IAAG0C,EAAMxI,EAAGxvB,MAAM,oBAAqBm1B,EAAkB2G,IAGvEO,EAASp3B,OAAS,UACZknB,EAAMoJ,QAAQC,OAAO,GAAI6G,SACzBlQ,EAAMmE,QAAQC,KAAKuL,UA7EjC93B,eAAgDg0B,EAAiBkE,EAA4BM,GAAY,aAErG,UADsBrF,EAAasF,gCAAgCP,EAAiBtC,QACnE4C,EAAW,OAE5B,IAAIZ,EACJ,UACUzP,EAAMmE,QAAQC,KAAK2L,GACzBN,EAAgD,QAApCrP,EAAAJ,EAAMsE,IAAIyL,EAAiB7M,WAAS,IAAA9C,OAAA,EAAAA,EAAEvpB,KACtD,CAAE,MAAOwU,GACL,IAAKgkB,EAAgBhkB,GAAM,MAAMA,CACrC,CACKokB,IACDA,EAAY,GAAGM,EAAgBpL,WAGnC,MAAMH,GAAS,EAAAvB,GAAAE,KAAIsM,GACnB,UACUzP,EAAMmE,QAAQS,aAAa,MAAOJ,EAAOG,IAAK,CAChD5sB,KAAM41B,GAA2B9B,EAAKlH,IAAKoL,EAAgBpL,KAC3DE,YAAa,cACbjnB,QAAS,CAAE,gBAAiB,MAEpC,CAAE,MAAOyN,GAEL,GAAe,OADqB,QAArBoV,EAAa,QAAbJ,EAAAhV,aAAG,EAAHA,EAAKL,gBAAQ,IAAAqV,OAAA,EAAAA,EAAE9U,cAAM,IAAAkV,EAAAA,EAAIpV,aAAG,EAAHA,EAAKE,QACzB,MAAMF,CAC9B,CACJ,CAsDUklB,CAAiC1E,EAAMkE,EAAiBC,SApDlEn4B,eAA8CmxB,SACpCgC,EAAasF,gCAAgCtH,EAAkB0E,KACzE,CAmDU8C,CAA+BxH,EACzC,CAEAnxB,eAAe44B,EAA2BtB,WACtC,IAEI,cADsBnE,EAAasF,gCAAgCnB,EE9KpE,CACH,4CACA,kDACA,sDACA,KACA,gCACA,qCACFt1B,KAAK,MF4KH,CAAE,MAAOwR,GACL,GAA6B,OAAb,QAAZ+U,EAAA/U,EAAIL,gBAAQ,IAAAoV,OAAA,EAAAA,EAAE7U,QACd,MAAM,IAAI2hB,GAEd,GAA6B,OAAb,QAAZ7M,EAAAhV,EAAIL,gBAAQ,IAAAqV,OAAA,EAAAA,EAAE9U,QAAgB,CAC9B,GAAI6c,GAAgB+G,GAChB,MAAM,IAAIhC,GAEd,MAAM,IAAIC,EACd,CACA,MAAM/hB,CACV,CACJ,CAsBAxT,eAAe64B,EAAiB7E,GAC5B,MAAM8E,EAAwBlC,EAA6B14B,IAAI81B,EAAKlH,KACpE,GAAIgM,EACA,OAAOA,EAGX,MAAM5J,EAAWyH,EAAwBz4B,IAAI81B,EAAKlH,KAClD,GAAIoC,EACA,OAAOA,EAGX,MAAM6J,EAAM,uBACNC,EAAYhF,GAElB,MAAMiF,EPpMP,SAAiCtN,GACpC,MAGMuN,EAHWvN,EAAGmB,IAAI5qB,QAAQ,YAAa,KAAKA,QAAQ,WAAY,KAE3CwJ,MAAM,KAAKtL,MAAM,GAAG,GAAG4B,KAAK,KACvCm3B,sBAChB,OAAO,EAAA/N,GAAAE,KAAI4N,EACf,CO8LwCE,CAAuBpF,GACvD,IAAIsD,EACJ,IACI,MAAM+B,EAA0BlR,EAAMsE,IAAIuH,EAAMxI,EAAGvvB,MAAM,mBAAoB,KAAM+3B,EAAK9H,OAEpFoL,EADA+B,SAGwBlG,EAAamG,mBAAmBtF,EAAMxI,EAAGvvB,MAAM,mBAAiCg9B,EAAyBjF,EAAK9H,aAGpIuL,EAA8BzD,EAAMsD,SACpCsB,EAA2BtB,SAC3BO,EAA8B7D,EAAMsD,EAC9C,CAAE,MAAO9jB,GAIL,GAFA9T,EADgB,QAAQs0B,oDAGpBxgB,aAAeiiB,GAAoB,MAAMjiB,EAC7C,GAAIA,aAAekiB,GAAqB,MAAMliB,EAC9C,GAAIA,aAAe6hB,GAAqB,MAAM7hB,EAC9C,GAAIA,aAAe8hB,GAA6B,MAAM9hB,EACtD,GAAIA,aAAe+hB,GAA4B,MAAM/hB,EACrD,GAAIA,aAAemiB,GAAc,MAAMniB,EACvC,MAAMA,CACV,CAEA,UACU2U,EAAMmE,QAAQC,KAAK+K,EAC7B,CAAE,MAAO9jB,GACL,MAAMrO,EAAM,qCAAqC6uB,MAASxgB,IAC1D,GAA6B,OAAb,QAAZ+U,EAAA/U,EAAIL,gBAAQ,IAAAoV,OAAA,EAAAA,EAAE7U,QAMd,aAJM+jB,EAA8BzD,EAAMsD,SACpCsB,EAA2BtB,SAC3BO,EAA8B7D,EAAMsD,SACpCnP,EAAMmE,QAAQC,KAAK+K,GAClBA,EAGX,GADA53B,EAAWyF,GACiB,MAAxBqO,EAAIL,SAASO,OACb,MAAM,IAAI2hB,GAEd,GAA4B,MAAxB7hB,EAAIL,SAASO,OAAgB,CAC7B,GAAI6c,GAAgB+G,GACpB,MAAM,IAAIhC,GAEV,MAAM,IAAIC,EACd,CAIA,MAAM,IAAI1yB,MAAMsC,EACpB,CAEA,OADAyxB,EAA6Bv1B,IAAI2yB,EAAKlH,IAAKwK,GACpCA,CACN,EA1DW,GA4DZX,EAAwBt1B,IAAI2yB,EAAKlH,IAAKiM,GACtC,IACI,aAAaA,CACjB,SACQpC,EAAwBz4B,IAAI81B,EAAKlH,OAASiM,GAC1CpC,EAAwB7b,OAAOkZ,EAAKlH,IAE5C,CACJ,CAEA9sB,eAAeg5B,EAAahF,GACxB,IAAKA,EACD,MAAM,IAAInxB,MAAM,+BAEpB,UACUslB,EAAMmE,QAAQC,KAAKyH,EAAK9H,MAClC,CAAE,MAAO1Y,GACL,MAAM,IAAI3Q,MAAM,kCAAkCmxB,MAASxgB,IAC/D,CACA,OAAOwgB,EAAK9H,KAChB,CA4BA,SAASqN,EAAY5N,GACjB,OAAOxD,EAAMsE,IAAId,EAAIH,EAAGvvB,MAAM,gBAAYmB,EAAWuuB,EAAGO,MAC5D,CAEA,MAAO,CACH0F,OA/BJ5xB,iBACI,MAAM2rB,EAAK+K,EAAMrI,cACjB,GAAW,OAAP1C,EACA,MAAM,IAAI9oB,MAAM,0CAGpB,aADMslB,EAAMmE,QAAQC,KAAKZ,EAAGO,OACrBP,CACX,EAyBIqG,WAvBJ,SAAoBgC,GAChB,MAAMnC,EAAU0H,EAAYvF,GAC5B,IAAKnC,EACD,MAAM,IAAIhvB,MAAM,4BAEpB,OAAOgvB,CACX,EAkBIqC,aAhBJl0B,eAA4Bg0B,SAClB7L,EAAMmE,QAAQC,KAAKyH,GACzB,MAAMwF,EAAYrR,EAAMsE,IAAIuH,EAAMxI,EAAG5wB,IAAI,cAAUwC,EAAW42B,EAAK9H,OACnE,IAAKsN,EACD,MAAM,IAAI32B,MAAM,8BAEpB,OAAO22B,CACX,EAUID,cACAV,kBACAG,cACAS,wBAhJJz5B,eAAuCg0B,GACnC,IACI,aAAa6E,EAAgB7E,EACjC,CAAE,MAAOxgB,GACL,MACJ,CACJ,EA4IJ,CGnVO,SAASkmB,GAAqBvR,EAAOuO,EAAOhG,EAAcyC,GAC7D,MAAM3H,EAAKN,GAEX,SAAS2L,EAAkB/J,GACvB,QAASA,IAAQA,EAAIjmB,WAAW,aAAeimB,EAAIjmB,WAAW,WAClE,CAUA7G,eAAe25B,EAAmB3F,GAC9B,IAAKA,EAAM,MAAM,IAAInxB,MAAM,qCAC3B,MAAM+2B,QAAgBlJ,EAAasI,YAAYhF,GAE/C,IAOIkE,EAPA2B,EAA+B,KACnC,IACIA,EAAaC,EAAuB9F,EACxC,CAAE,MAAOxgB,GAEL9T,EADgB,QAAQs0B,kEAE5B,CAEA,IACI,MAAM+F,EAA0B5R,EAAMsE,IAAIuH,EAAMxI,EAAGxvB,MAAM,wBAAoBoB,EAAWw8B,GAEpF1B,EADA6B,IAEOF,QACiB1G,EAAaiF,sCACjCpE,EACAxI,EAAGxvB,MAAM,mBACT69B,EACAD,EACAhE,MAGc,KAE1B,CAAE,MAAOpiB,GAEL9T,EADgB,QAAQs0B,wDAA2DxgB,IAEvF,CACA,MAAMwmB,EAAe9B,EAAkB,CAAC,CAAEroB,MAAO,SAAUoqB,MAAO/B,EAA8B7jB,MAAO2f,IAAU,GAEjH,IAAIsD,EAOA4C,EANJ,IACI5C,QAAwB5G,EAAa+I,wBAAwBzF,EACjE,CAAE,MAAOxgB,GACL8jB,EAAkB,IACtB,CAGA,GAAIA,EAAiB,CAGjB,IAOInG,EAPAgJ,EAA8C,KAClD,IACIA,EAA4BC,EAAwB9C,EACxD,CAAE,MAAO9jB,GAEL9T,EADgB,QAAQs0B,uEAE5B,CAEA,IACI,MAAMqG,EAA2BlS,EAAMsE,IAAIuH,EAAMxI,EAAGxvB,MAAM,yBAAqBoB,EAAWw8B,GAEtFzI,EADAkJ,IAEOF,QACkBhH,EAAaiF,sCAClCpE,EACAxI,EAAGxvB,MAAM,oBACTm+B,EACA7C,EACAzB,MAGe,KAE3B,CAAE,MAAOriB,GAEL9T,EADgB,QAAQs0B,iEAAoExgB,IAEhG,CACA0mB,EAAgB/I,EAAmB,CAAC,CAAEthB,MAAO,UAAWoqB,MAAO9I,EAA+B9c,MAAO2f,IAAU,EACnH,MACIkG,EAAgB,GAEpB,MAAMI,EAASN,EAAap5B,OAAOs5B,GACnC,GAAsB,IAAlBI,EAAOr5B,OAAc,OAAOq5B,EAChC,MAAMC,EAAQD,EAAOxS,IAAI0S,GAASA,EAAMP,OACxC,UACU9R,EAAMmE,QAAQC,KAAKgO,EAC7B,CAAE,MAAO/mB,GACL9T,EAAW,gCAAiC8T,EAChD,CACA,OAAO8mB,CACX,CAEAt6B,eAAey6B,EAAyBzG,GACpC,IAAIsD,EACJ,IACIA,QAAwB5G,EAAa+I,wBAAwBzF,EACjE,CAAE,MAAOxgB,GAEL9T,EADgB,QAAQs0B,mDAE5B,CACA,GAAIsD,EAAiB,CACjB,MAAMoD,EAAcvS,EAAMwS,KAAK3G,EAAMxI,EAAGxvB,MAAM,kBAAcoB,EAAWk6B,GAA8B12B,OACjGunB,EAAMwS,KAAK3G,EAAMxI,EAAGxvB,MAAM,kBAAcoB,EAAW42B,EAAK9H,QAE5D,IAAIhgB,EAAS,GACb,IAAK,MAAMjR,KAAOy/B,EACd,GAAqB,cAAjBz/B,EAAI2/B,UAA6B/D,EAAmB57B,EAAkB6xB,KAI1E,IACI5gB,EAASA,EAAOtL,aAAa+4B,EAAmB1+B,GACpD,CAAE,MAAOuY,GACL9T,EAAW,uCAAwCzE,EAAkB6xB,QAAQtZ,IACjF,MAPI9T,EAAW,yCAAyCs0B,MAAS/4B,KASrE,OAAOiR,CACX,CACA,MAAO,EACX,CAEAlM,eAAe66B,EAAmB7G,GAC9B,aAAc2F,EAAmB3F,IAAOpzB,aAAa65B,EAAyBzG,GAClF,CAEAh0B,eAAe86B,EAAsBC,EAAkB/G,GACnD,MAAMsG,QAAeO,EAAmB7G,GACxC,IAAIgH,EAAa,GACjB,IAAK,MAAMR,KAASF,EAAQ,CACxB,MAAMW,QAAoBC,EAAuBV,EAAOO,GACxDC,EAAaA,EAAWp6B,OAAOq6B,EACnC,CACA,OAAOD,CACX,CAYA,SAASlE,EAAUC,GACf,MAAM7K,EAAM6K,EAAK7K,MACX8K,EAAM9K,EAAI8K,MAChB,IAAIA,aAAG,EAAHA,EAAKlK,MAAO+J,EAAkBG,EAAIlK,KAAM,OAAOkK,EAAIlK,IACvD,MAAMmK,EAAS/K,EAAIY,IACnB,IAAKmK,IAAWJ,EAAkBI,GAE9B,OADAn8B,EAAU,iDAAiDi8B,aAAI,EAAJA,EAAMjK,OAC1D,KAEX,MAAMoK,EAAkBD,EAAOvrB,MAAM,KAAK,GACpCyrB,EAAYD,EAAgBE,YAAY,KAC9C,OAAmB,IAAfD,GACAr8B,EAAU,kCAAkCm8B,KACrC,MAEJC,EAAgB92B,MAAM,EAAG+2B,EAAY,EAChD,CAEA,SAAS2C,EAAuBnO,GAC5B,MAAM4L,EAAST,EAAUnL,GACzB,IAAK4L,EAAQ,MAAM,IAAI10B,MAAM,uDAAuD8oB,EAAGmB,OACvF,OAAO,EAAA1B,GAAAE,KAAIiM,EAAS,sBACxB,CAGA,SAAS6C,EAAwB9C,GAC7B,MAAMC,EAAST,EAAUQ,GACzB,IAAKC,EAAQ,MAAM,IAAI10B,MAAM,wDAAwDy0B,EAAgBxK,OACrG,OAAO,EAAA1B,GAAAE,KAAIiM,EAAS,uBACxB,CAqCAv3B,eAAek7B,EAAuBV,EAAuBW,GACzD,MAAMlB,EAAQO,EAAMP,MACdmB,EAAuB,GACvBC,EAAgBlT,EAAMuK,mBAAmB,KAAMlH,EAAGxvB,MAAM,YAAa,KAAMi+B,GAC5Er5B,OAAOunB,EAAMuK,mBAAmB,KAAMlH,EAAGxvB,MAAM,qBAAsB,KAAMi+B,IAC3EnS,IAAIwJ,GAAMA,EAAG1jB,SAClB,IAAK,MAAMwjB,KAAOiK,EAAe,CAC/B,MAAMN,EAAQ5S,EAAMsE,IAAI2E,EAAK5F,EAAGxvB,MAAM,YAAa,KAAMi+B,GACzD,IAAKkB,GAAYJ,EAAMO,SAASH,GAAW,CACzC,MAAMI,EAAYpT,EAAMwS,KAAKvJ,EAAK5F,EAAGxvB,MAAM,YAAa,KAAMi+B,GAC9D,IAAK,MAAMuB,KAAYD,EACrBH,EAAQ15B,KAAK,CAAE85B,WAAUlyB,KAAMyxB,EAAOP,UAExC,MAAMiB,EAAatT,EAAMwS,KAAKvJ,EAAK5F,EAAGxvB,MAAM,qBAAsB,KAAMi+B,GACxE,IAAK,MAAMuB,KAAYC,QACbtT,EAAMmE,QAAQC,KAAKiP,GACzBJ,EAAQ15B,KAAK,CAAE85B,UAAU,EAAApQ,GAAAE,KAAIkQ,EAASx8B,OAAQsK,KAAMyxB,EAAQP,SAElE,CACF,CACA,OAAOY,CACX,CAEA,MAAO,CACHM,oBAtDJ17B,eACIw7B,EACAvB,EACAkB,GAGA,MAAMQ,EAAerL,GAAS2J,GACxB5I,EAAM,EAER,EAAAjG,GAAAkG,IAAGqK,EAAcnQ,EAAG/vB,IAAI,QAAS+vB,EAAGxvB,MAAM,oBAAqBi+B,IAC/D,EAAA7O,GAAAkG,IAAGqK,EAAcnQ,EAAGxvB,MAAM,YAAam/B,EAAUlB,IACjD,EAAA7O,GAAAkG,IAAGqK,EAAcnQ,EAAGxvB,MAAM,YAAaw/B,EAAUvB,IAErD,UACU9R,EAAMoJ,QAAQC,OAAO,GAAIH,EACnC,CAAE,MAAO7d,GACL,MAAMrO,EAAM,sBAAsBq2B,cAAqBvB,MAAUzmB,IAEjE,OADA/T,QAAQC,KAAKyF,GACN,IACX,CACA,OAAOw2B,CACX,EAkCIC,iBA9OJ,SAA0BJ,EAAUL,GAChC,OAAOhT,EACFwS,UAAKv9B,EAAWouB,EAAGxvB,MAAM,YAAaw/B,GACtC/1B,OAAQ5G,GACEspB,EAAMmQ,MAAMz5B,EAAG2sB,EAAGxvB,MAAM,YAAam/B,GAExD,EAyOIxB,qBACAc,2BACAI,qBACAC,wBACAe,gBAvGJ77B,eAA+B+6B,GAC3B,MAAM/G,EAAO0C,EAAMrI,cACnB,IAAK2F,EAAM,MAAM,IAAInxB,MAAM,oDAE3B,aADiCi4B,EAAsBC,EAAO/G,IACpClM,IAAIgU,GAAUA,EAAON,SACnD,EAmGI1B,yBACAM,0BACA2B,4BAxCJ/7B,eAA2Cg8B,GACvC,MAAM5K,EAAMjJ,EAAM8T,IAAI,KAAMzQ,EAAGxvB,MAAM,YAAaggC,EAAKR,SAAUQ,EAAKxB,MAAMP,OAC5E,IAAK7I,EAAK,MAAM,IAAIvuB,MAAM,0DAA0Dm5B,EAAKR,YACzF,MAAMU,EAAa/T,EAAMuK,mBAAmBtB,EAAK,KAAM,KAAM4K,EAAKxB,MAAMP,aAClE9R,EAAMoJ,QAAQC,OAAO0K,EAAY,GAC3C,EAoCIhB,yBAER,CCpPO,SAASiB,GAAiBC,EAA8DhO,GAE3FtzB,EAAU,4EACV,MAAMqtB,EAAmBiD,GAAAW,QACzBX,GAAAkB,QAAYnE,EAAO,CAAC/U,MAAOgpB,EAAahpB,QACxC+U,EAAMoJ,QAAU,IAAInG,GAAAiR,cAAkBlU,GACtCA,EAAMmU,SAAW,GAEjB,MAAM5F,EAAoB,IAAI3I,GAAgBK,GAExC10B,EAAM6xB,GAAepD,GACrBiL,EAAiB6C,GAAqB9N,GACtCgL,ECnBH,SAA4BhL,EAAOkL,EAAUD,GAoBlDpzB,eAAeu8B,EAAwBrQ,iBACrC,IACE,aAAa/D,EAAMmE,QAAQC,KAAKL,EAClC,CAAE,MAAO1Y,GACP,GAA8B,OAAb,QAAb+U,EAAA/U,aAAG,EAAHA,EAAKL,gBAAQ,IAAAoV,OAAA,EAAAA,EAAE7U,QAAgB,CACjC,UACQyU,EAAMmE,QAAQS,aAAa,MAAOb,EAAIY,IAAK,CAC/C5sB,KAAM,GACN8sB,YAAa,cACbjnB,QAAS,CAAE,gBAAiB,MAEhC,CAAE,MAAOy2B,GAEP,GAAe,OADwB,QAAxB5T,EAAgB,QAAhBJ,EAAAgU,aAAM,EAANA,EAAQrpB,gBAAQ,IAAAqV,OAAA,EAAAA,EAAE9U,cAAM,IAAAkV,EAAAA,EAAI4T,aAAM,EAANA,EAAQ9oB,QAGjD,MAAM,IAAIgiB,GADE,kCAAkCxJ,MAAQsQ,IAG1D,CACA,aAAarU,EAAMmE,QAAQC,KAAKL,EAClC,CACA,GAA8B,OAAb,QAAb9B,EAAA5W,aAAG,EAAHA,EAAKL,gBAAQ,IAAAiX,OAAA,EAAAA,EAAE1W,QACjB,MAAM,IAAI2hB,GAEZ,GAA8B,OAAb,QAAbhG,EAAA7b,aAAG,EAAHA,EAAKL,gBAAQ,IAAAkc,OAAA,EAAAA,EAAE3b,QAAgB,CACjC,GAAI6c,GAAgBrE,GAClB,MAAM,IAAIoJ,GAEZ,MAAM,IAAIC,EACZ,CACA,MAAMpwB,EAAM,qCAAqC+mB,MAAQ1Y,IACzD,MAAM,IAAImiB,GAAWniB,aAAG,EAAHA,EAAKE,OAAQ,IAAGF,aAAG,EAAHA,EAAKzQ,UAAW,KAAKoC,IAC5D,CACF,CAEAnF,eAAey4B,EAAgCvM,EAAgBhsB,eAC7D,IAEE,aADMioB,EAAMmE,QAAQC,KAAKL,IAClB,CACT,CAAE,MAAO1Y,GAEP,GAAe,OADqB,QAArBgV,EAAa,QAAbD,EAAA/U,aAAG,EAAHA,EAAKL,gBAAQ,IAAAoV,OAAA,EAAAA,EAAE7U,cAAM,IAAA8U,EAAAA,EAAIhV,aAAG,EAAHA,EAAKE,QAE3C,MAAMF,CAEV,CAEA,IAME,aALM2U,EAAMmE,QAAQS,aAAa,MAAOb,EAAIY,IAAK,CAC/C5sB,OACA8sB,YAAa,cACbjnB,QAAS,CAAE,gBAAiB,QAEvB,CACT,CAAE,MAAOyN,GAEP,GAAe,OADqB,QAArB4W,EAAa,QAAbxB,EAAApV,aAAG,EAAHA,EAAKL,gBAAQ,IAAAyV,OAAA,EAAAA,EAAElV,cAAM,IAAA0W,EAAAA,EAAI5W,aAAG,EAAHA,EAAKE,QAG3C,OAAO,EAET,MAAMF,CACR,CACF,CA+HA,MAAO,CACLipB,gBA/MFz8B,eAAey8B,EAAgBtG,GAC7B,IACE,GAAI/C,EAAegB,YAAY+B,GAAgB,CAC7C,MAAMuG,QAAkBrJ,EAAShH,cAAc8J,SACzChO,EAAMmE,QAAQiI,OAAOmI,EAAW,CAAEllB,OAAQ,WAChD,MAAMmlB,QAAyBvJ,EAAee,oBAAoBgC,SAC5Dza,QAAQC,IAAIghB,EAAiB7U,IAAKnV,GAAQ8pB,EAAgB9pB,IAClE,CACA,OAAOwV,EAAMmE,QAAQiI,OAAO4B,EAAcn3B,MAAO,CAAEwY,OAAQ,UAC7D,CAAE,MAAOlZ,GACPxD,EAAU,0BAA0Bq7B,EAAcn3B,0BAA2BV,EAC/E,CACF,EAoMEs1B,oBAtDF5zB,eAAmCgD,GAOjC,IAAI8J,EAAM,CACR,iDACA,GACA,+CAAiD9J,EAAQ6wB,WAAa,KACtE,mBAAmB7wB,EAAQsc,WAC3B,kBAAkBtc,EAAQsc,WAC1B,+CACA,IACAtd,KAAK,MAEHgB,EAAQ8wB,gBACVhnB,GAAO,CACL,sCACA,gBAAgB9J,EAAQuwB,cACxB,mBAAmBvwB,EAAQsc,WAC3B,cAActc,EAAQ8wB,iBACtB,IACA9xB,KAAK,OAGLgB,EAAQ45B,eACV9vB,GAAO,CACL,qCACA,gBAAgB9J,EAAQuwB,cACxB,kBAAkBvwB,EAAQsc,WAC1B,cAActc,EAAQ45B,gBACtB,IACA56B,KAAK,OAGT,MAAM06B,QAAkBrJ,EAAShH,eAAc,EAAAjB,GAAAE,KAAItoB,EAAQsc,SAC3D,OAAO6I,EAAMmE,QAAQiI,OAAOmI,EAAW,CACrCllB,OAAQ,MACRC,KAAM3K,EACN/G,QAAS,CAAC,CAAC,eAAgB,iBAE/B,EAYE82B,kBAVF78B,eAAiCksB,EAAgB4Q,SACzC3U,EAAMmE,QAAQS,aAAa,MAAOb,EAAIY,IAAK,CAC/C5sB,KAAM,KAAK,IAAIwO,QAAUouB,MACzB9P,YAAa,eAEjB,EAMEsM,mBA7HFt5B,eACE4N,EACAmvB,EACA3G,EACAlK,SAEM/D,EAAMmE,QAAQC,KAAKL,GACzB,MAAMhgB,EAASic,EAAMsE,IAAI7e,EAASmvB,EAAW,KAAM7Q,GAEnD,GAAIhgB,EAAQ,OAAOA,EACnB,IAAKic,EAAMoJ,QAAQyL,SAAS9Q,GAAM,CAChC,MAAM/mB,EAAM,mCAAmC+mB,EAAIltB,QAEnD,MADAU,EAAWyF,GACL,IAAIswB,GAAiBtwB,EAC7B,CAEA,UACQgjB,EAAMoJ,QAAQC,OAAO,GAAI,EAAC,EAAApG,GAAAkG,IAAG1jB,EAASmvB,EAAW3G,EAAQlK,IACjE,CAAE,MAAO1Y,GAGP,MADA9T,EADY,4CAA4CwsB,QAAUkK,MAAW5iB,KAEvE,IAAIkiB,GAAkBliB,EAC9B,CAEA,UACQ+oB,EAAwBnG,EAChC,CAAE,MAAO5iB,GAEP,MADA9T,EAAW,oEAAoE02B,MAAW5iB,KACpFA,CACR,CACA,OAAO4iB,CACT,EA+FEgC,sCA7FFp4B,eACE4N,EACAmvB,EACA3G,EACAlK,EACAhsB,SAEMioB,EAAMmE,QAAQC,KAAKL,GACzB,MAAMhgB,EAASic,EAAMsE,IAAI7e,EAASmvB,EAAW,KAAM7Q,GAEnD,GAAIhgB,EAAQ,OAAOA,EACnB,IAAKic,EAAMoJ,QAAQyL,SAAS9Q,GAAM,CAChC,MAAM/mB,EAAM,sDAAsD+mB,EAAIltB,QAEtE,MADAU,EAAWyF,GACL,IAAIswB,GAAiBtwB,EAC7B,CAEA,UACQgjB,EAAMoJ,QAAQC,OAAO,GAAI,EAAC,EAAApG,GAAAkG,IAAG1jB,EAASmvB,EAAW3G,EAAQlK,IACjE,CAAE,MAAO1Y,GACP,MAAMrO,EAAM,+DAA+D+mB,QAAUkK,MAAW5iB,IAEhG,MADA9T,EAAWyF,GACL,IAAIuwB,GAAkBvwB,EAC9B,CAEA,UACQszB,EAAgCrC,EAAQl2B,EAChD,CAAE,MAAOsT,GAEP,MADA9T,EAAW,uFAAuF02B,MAAW5iB,KACvGA,CACR,CACA,OAAO4iB,CACT,EA8DEmG,0BACA9D,kCAEJ,CDrMyBwE,CAAmB9U,EAAOzuB,EAAK05B,GAC9CwG,EAAUnD,GAAmBtO,EAAOuO,EAAOvD,GAC3C+J,EAAOzM,GAAgBtI,EAAOyR,GAC9B3F,EAAQf,GAAiB/K,EAAOyR,EAASzG,EAAcC,GACvD+J,EAAYzD,GAAqBvR,EAAOuO,EAAOkD,EAASzG,GA2B9D,OA1BAr4B,EAAU,+BA0BH,CACHqtB,QACAuO,QACAh9B,MACAu6B,QACAiJ,OACAtD,UACAuD,YACA5Q,KAhCJ,SAAcL,GACV,OAAO/D,EAAMmE,QAAQC,KAAKL,EAC9B,EA+BIkR,cA5BJ,SACIC,EACAhM,EAAwB,IAExB,OAAO,IAAI3V,QAAQ,CAACU,EAASC,KAC7B8L,EAAMoJ,QAAQC,OAAO6L,EAAKhM,EAAK,SAAUI,EAAM9a,EAAI2mB,GAC1C3mB,EAGLyF,IAFAC,EAAO,IAAIxZ,MAAMy6B,GAIrB,IAEJ,EAgBIC,WAdJ,WACIpV,EAAM+T,WAAW97B,QAAQuqB,QAAQxC,EAAMqV,OAAO5zB,KAAKue,GACvD,EAcJ,CErEA,MAAMoM,GAASv0B,MAAO2S,EAAK8qB,WACvB,MAAMC,EAAYD,GAAeA,EAAYhU,aAA0C,QAA3BgU,EAAYhU,YAClEI,EAAakB,GAEnB,KADqC,QAAhBxC,EAAAsB,aAAU,EAAVA,EAAY2E,YAAI,IAAAjG,OAAA,EAAAA,EAAE/K,SAASqM,aAAU,EAAVA,EAAYrM,UACvCkgB,EAAW,CAE5B,MAAMC,EAAkD,mBAArB9T,EAAWzW,MACxCyW,EAAWzW,MAAMxJ,KAAKigB,GACW,mBAAzBA,EAAW7P,UAA2B6P,EAAW7P,UAAUpQ,KAAKigB,GAAc,KAC5F,OAAI8T,EACOA,EAAmBhrB,EAAK8qB,GAE5Bl/B,OAAO6U,MAAMT,EAAK8qB,EAC7B,CACI,OAAOl/B,OAAO6U,MAAMT,EAAK8qB,IAK3BG,GAAmB9+B,OAAO++B,IAAI,yBAO9BC,GAAkC,oBAAXv/B,OAAyBA,OAAStB,EAAAkB,EAa/D,MAAM4/B,IAVGD,GAAaF,IAKd9iC,EAAU,0DAJVA,EAAU,uDACVgjC,GAAaF,IAAoBzB,GAAiB,CAAE/oB,MAAOmhB,IAAUxJ,IACrEjwB,EAAU,kCAIPgjC,GAAaF,KCpCjB59B,eAAeg+B,GAAyBh7B,EAA+B,IAC5E,GAAsB,oBAAXzE,OACT,OAAO,EAET,MAAMoP,EAAS3K,EAAQ2K,QAAU,GAC3BswB,EAAyBj7B,EAAQi7B,wBAA0B,IAGjE,IACE,GAAItwB,EAAQ,CACV,MAAMuwB,EAAe,IAAIjqB,IAAItG,GAC7BuwB,EAAa3nB,SAAW,oCACxB,MAAM4nB,QAAwB/qB,MAAM8qB,EAAaz3B,WAAY,CAAEgjB,YAAa,YAE5E,GAA+B,MAA3B0U,EAAgBzqB,OAAgB,CAClC,MAAM0qB,QAA4BD,EAAgBxqB,OAC9CyqB,GAAuBA,EAAoBC,4BACvCjrB,MAAMgrB,EAAoBC,qBAAsB,CAAE5U,YAAa,WAEzE,CACF,CACF,CAAE,MAAOE,GAET,CAGA,IACE,MAAM2U,QAAuBlrB,MAAM,4BAA6B,CAAEqW,YAAa,YAC/E,GAAI6U,EAAe3nB,IAAM2nB,EAAeC,WAEtC,OADAhgC,OAAOe,SAAS0rB,OAAOiT,IAChB,CAEX,CAAE,MAAOtU,GAET,CAEA,OAAO,CACT,CC1CA,MAAM6U,GAAkB,CACtB,CACEr7B,KAAM,kBACN2pB,IAAK,8BAEP,CACE3pB,KAAM,YACN2pB,IAAK,wBAEP,CACE3pB,KAAM,eACN2pB,IAAK,uBAEP,CACE3pB,KAAM,aACN2pB,IAAK,6BAOF,SAAS2R,KAEZ,MAAMC,EAAU,IAAIF,KAGdxV,KAAEA,EAAI1S,OAAEA,GAAW,IAAIrC,IAAI3U,SAASC,MAM1C,OALcm/B,EAAQ5W,IAAI,EAAGgF,SAAU,IAAI7Y,IAAI6Y,GAAK9D,MACzC9jB,SAAS8jB,IAClB0V,EAAQC,QAAQ,CAAEx7B,KAAM6lB,EAAM8D,IAAKxW,IAG9BooB,CACT,CC9BF,MAAMhI,GAAQqH,GAAoBrH,MAC5BkI,GAAcb,GAAoBrH,MAAM3L,YACxC5C,GAAQ4V,GAAoB5V","sources":["webpack://SolidLogic/webpack/universalModuleDefinition","webpack://SolidLogic/./node_modules/solid-namespace/index.js","webpack://SolidLogic/external umd \"$rdf\"","webpack://SolidLogic/webpack/bootstrap","webpack://SolidLogic/webpack/runtime/compat get default export","webpack://SolidLogic/webpack/runtime/define property getters","webpack://SolidLogic/webpack/runtime/global","webpack://SolidLogic/webpack/runtime/hasOwnProperty shorthand","webpack://SolidLogic/webpack/runtime/make namespace object","webpack://SolidLogic/webpack/runtime/publicPath","webpack://SolidLogic/webpack/runtime/jsonp chunk loading","webpack://SolidLogic/./src/util/debug.ts","webpack://SolidLogic/./node_modules/@uvdsl/solid-oidc-client-browser/dist/esm/web/index.js","webpack://SolidLogic/./node_modules/@uvdsl/solid-oidc-client-browser/dist/esm/core/index.js","webpack://SolidLogic/./src/authSession/session.ts","webpack://SolidLogic/./src/authSession/issuer.ts","webpack://SolidLogic/./src/authSession/authSession.ts","webpack://SolidLogic/./src/authSession/events.ts","webpack://SolidLogic/./src/util/ns.ts","webpack://SolidLogic/./src/acl/aclLogic.ts","webpack://SolidLogic/./src/authn/authUtil.ts","webpack://SolidLogic/./src/authn/SolidAuthnLogic.ts","webpack://SolidLogic/./src/util/utils.ts","webpack://SolidLogic/./src/chat/chatLogic.ts","webpack://SolidLogic/./src/inbox/inboxLogic.ts","webpack://SolidLogic/./src/logic/CustomError.ts","webpack://SolidLogic/./src/typeIndex/typeIndexDocuments.ts","webpack://SolidLogic/./src/typeIndex/typeIndexAclDocuments.ts","webpack://SolidLogic/./src/util/containerLogic.ts","webpack://SolidLogic/./src/profile/profileLogic.ts","webpack://SolidLogic/./src/profile/profileAclDocuments.ts","webpack://SolidLogic/./src/profile/profileDocuments.ts","webpack://SolidLogic/./src/typeIndex/typeIndexLogic.ts","webpack://SolidLogic/./src/logic/solidLogic.ts","webpack://SolidLogic/./src/util/utilityLogic.ts","webpack://SolidLogic/./src/logic/solidLogicSingleton.ts","webpack://SolidLogic/./src/authn/serverLogout.ts","webpack://SolidLogic/./src/issuer/issuerLogic.ts","webpack://SolidLogic/./src/index.ts"],"sourcesContent":["(function webpackUniversalModuleDefinition(root, factory) {\n\tif(typeof exports === 'object' && typeof module === 'object')\n\t\tmodule.exports = factory(require(\"$rdf\"));\n\telse if(typeof define === 'function' && define.amd)\n\t\tdefine(\"SolidLogic\", [\"$rdf\"], factory);\n\telse if(typeof exports === 'object')\n\t\texports[\"SolidLogic\"] = factory(require(\"$rdf\"));\n\telse\n\t\troot[\"SolidLogic\"] = factory(root[\"$rdf\"]);\n})(this, (__WEBPACK_EXTERNAL_MODULE__264__) => {\nreturn ","/**\n * Provides a way to access commonly used namespaces\n *\n * Usage:\n *\n *   ```\n *   const $rdf = require('rdflib'); //or any other RDF/JS-compatible library\n *   const ns = require('solid-namespace')($rdf);\n *   const store = $rdf.graph();\n *\n *   let me = ...;\n *   let name = store.any(me, ns.vcard(‘fn’)) || store.any(me, ns.foaf(‘name’));\n *   ```\n * @module vocab\n */\nconst aliases = {\n  acl: 'http://www.w3.org/ns/auth/acl#',\n  arg: 'http://www.w3.org/ns/pim/arg#',\n  as: 'https://www.w3.org/ns/activitystreams#',\n  bookmark: 'http://www.w3.org/2002/01/bookmark#',\n  cal: 'http://www.w3.org/2002/12/cal/ical#',\n  cco: 'http://www.ontologyrepository.com/CommonCoreOntologies/',\n  cert: 'http://www.w3.org/ns/auth/cert#',\n  contact: 'http://www.w3.org/2000/10/swap/pim/contact#',\n  dc: 'http://purl.org/dc/elements/1.1/',\n  dct: 'http://purl.org/dc/terms/',\n  doap: 'http://usefulinc.com/ns/doap#',\n  foaf: 'http://xmlns.com/foaf/0.1/',\n  geo: 'http://www.w3.org/2003/01/geo/wgs84_pos#',\n  gpx: 'http://www.w3.org/ns/pim/gpx#',\n  gr: 'http://purl.org/goodrelations/v1#',\n  http: 'http://www.w3.org/2007/ont/http#',\n  httph: 'http://www.w3.org/2007/ont/httph#',\n  icalTZ: 'http://www.w3.org/2002/12/cal/icaltzd#', // Beware: not cal:\n  ldp: 'http://www.w3.org/ns/ldp#',\n  link: 'http://www.w3.org/2007/ont/link#',\n  log: 'http://www.w3.org/2000/10/swap/log#',\n  meeting: 'http://www.w3.org/ns/pim/meeting#',\n  mo: 'http://purl.org/ontology/mo/',\n  org: 'http://www.w3.org/ns/org#',\n  owl: 'http://www.w3.org/2002/07/owl#',\n  pad: 'http://www.w3.org/ns/pim/pad#',\n  patch: 'http://www.w3.org/ns/pim/patch#',\n  prov: 'http://www.w3.org/ns/prov#',\n  pto: 'http://www.productontology.org/id/',\n  qu: 'http://www.w3.org/2000/10/swap/pim/qif#',\n  trip: 'http://www.w3.org/ns/pim/trip#',\n  rdf: 'http://www.w3.org/1999/02/22-rdf-syntax-ns#',\n  rdfs: 'http://www.w3.org/2000/01/rdf-schema#',\n  rss: 'http://purl.org/rss/1.0/',\n  sched: 'http://www.w3.org/ns/pim/schedule#',\n  schema: 'http://schema.org/', // @@ beware confusion with documents no 303\n  sioc: 'http://rdfs.org/sioc/ns#',\n  skos: 'http://www.w3.org/2004/02/skos/core#',\n  solid: 'http://www.w3.org/ns/solid/terms#',\n  space: 'http://www.w3.org/ns/pim/space#',\n  stat: 'http://www.w3.org/ns/posix/stat#',\n  tab: 'http://www.w3.org/2007/ont/link#',\n  tabont: 'http://www.w3.org/2007/ont/link#',\n  ui: 'http://www.w3.org/ns/ui#',\n  vann: 'http://purl.org/vocab/vann/',\n  vcard: 'http://www.w3.org/2006/vcard/ns#',\n  wf: 'http://www.w3.org/2005/01/wf/flow#',\n  xsd: 'http://www.w3.org/2001/XMLSchema#',\n}\n\n/**\n * @param [rdflib] {RDF} Optional RDF Library (such as rdflib.js or rdf-ext) to inject\n */\nfunction vocab (rdf = { namedNode: u => u }) {\n  const namespaces = {}\n  for (const alias in aliases) {\n    const expansion = aliases[alias]\n    namespaces[alias] = function (localName = '') {\n      return rdf.namedNode(expansion + localName)\n    }\n  };\n\n  return namespaces\n};\n\nmodule.exports = vocab\n","module.exports = __WEBPACK_EXTERNAL_MODULE__264__;","// The module cache\nvar __webpack_module_cache__ = {};\n\n// The require function\nfunction __webpack_require__(moduleId) {\n\t// Check if module is in cache\n\tvar cachedModule = __webpack_module_cache__[moduleId];\n\tif (cachedModule !== undefined) {\n\t\treturn cachedModule.exports;\n\t}\n\t// Create a new module (and put it into the cache)\n\tvar module = __webpack_module_cache__[moduleId] = {\n\t\t// no module.id needed\n\t\t// no module.loaded needed\n\t\texports: {}\n\t};\n\n\t// Execute the module function\n\t__webpack_modules__[moduleId](module, module.exports, __webpack_require__);\n\n\t// Return the exports of the module\n\treturn module.exports;\n}\n\n// expose the modules object (__webpack_modules__)\n__webpack_require__.m = __webpack_modules__;\n\n","// getDefaultExport function for compatibility with non-harmony modules\n__webpack_require__.n = (module) => {\n\tvar getter = module && module.__esModule ?\n\t\t() => (module['default']) :\n\t\t() => (module);\n\t__webpack_require__.d(getter, { a: getter });\n\treturn getter;\n};","// define getter functions for harmony exports\n__webpack_require__.d = (exports, definition) => {\n\tfor(var key in definition) {\n\t\tif(__webpack_require__.o(definition, key) && !__webpack_require__.o(exports, key)) {\n\t\t\tObject.defineProperty(exports, key, { enumerable: true, get: definition[key] });\n\t\t}\n\t}\n};","__webpack_require__.g = (function() {\n\tif (typeof globalThis === 'object') return globalThis;\n\ttry {\n\t\treturn this || new Function('return this')();\n\t} catch (e) {\n\t\tif (typeof window === 'object') return window;\n\t}\n})();","__webpack_require__.o = (obj, prop) => (Object.prototype.hasOwnProperty.call(obj, prop))","// define __esModule on exports\n__webpack_require__.r = (exports) => {\n\tif(typeof Symbol !== 'undefined' && Symbol.toStringTag) {\n\t\tObject.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });\n\t}\n\tObject.defineProperty(exports, '__esModule', { value: true });\n};","__webpack_require__.p = \"\";","__webpack_require__.b = (typeof document !== 'undefined' && document.baseURI) || self.location.href;\n\n// object to store loaded and loading chunks\n// undefined = chunk not loaded, null = chunk preloaded/prefetched\n// [resolve, reject, Promise] = chunk loading, 0 = chunk loaded\nvar installedChunks = {\n\t792: 0\n};\n\n// no chunk on demand loading\n\n// no prefetching\n\n// no preloaded\n\n// no HMR\n\n// no HMR manifest\n\n// no on chunks loaded\n\n// no jsonp function","\nexport function log(...args: any[]): void {\n  console.log(...args)\n}\n\nexport function warn(...args: any[]): void {\n  console.warn(...args)\n}\n\nexport function error(...args: any[]): void {\n  console.error(...args)\n}\n\nexport function trace(...args: any[]): void {\n  console.trace(...args)\n}\n","var crypto$1 = crypto;\nconst isCryptoKey = (key) => key instanceof CryptoKey;\n\nconst digest = async (algorithm, data) => {\n    const subtleDigest = `SHA-${algorithm.slice(-3)}`;\n    return new Uint8Array(await crypto$1.subtle.digest(subtleDigest, data));\n};\nvar digest$1 = digest;\n\nconst encoder = new TextEncoder();\nconst decoder = new TextDecoder();\nfunction concat(...buffers) {\n    const size = buffers.reduce((acc, { length }) => acc + length, 0);\n    const buf = new Uint8Array(size);\n    let i = 0;\n    for (const buffer of buffers) {\n        buf.set(buffer, i);\n        i += buffer.length;\n    }\n    return buf;\n}\n\nconst encodeBase64 = (input) => {\n    let unencoded = input;\n    if (typeof unencoded === 'string') {\n        unencoded = encoder.encode(unencoded);\n    }\n    const CHUNK_SIZE = 0x8000;\n    const arr = [];\n    for (let i = 0; i < unencoded.length; i += CHUNK_SIZE) {\n        arr.push(String.fromCharCode.apply(null, unencoded.subarray(i, i + CHUNK_SIZE)));\n    }\n    return btoa(arr.join(''));\n};\nconst encode = (input) => {\n    return encodeBase64(input).replace(/=/g, '').replace(/\\+/g, '-').replace(/\\//g, '_');\n};\nconst decodeBase64 = (encoded) => {\n    const binary = atob(encoded);\n    const bytes = new Uint8Array(binary.length);\n    for (let i = 0; i < binary.length; i++) {\n        bytes[i] = binary.charCodeAt(i);\n    }\n    return bytes;\n};\nconst decode$1 = (input) => {\n    let encoded = input;\n    if (encoded instanceof Uint8Array) {\n        encoded = decoder.decode(encoded);\n    }\n    encoded = encoded.replace(/-/g, '+').replace(/_/g, '/').replace(/\\s/g, '');\n    try {\n        return decodeBase64(encoded);\n    }\n    catch {\n        throw new TypeError('The input to be decoded is not correctly encoded.');\n    }\n};\n\nclass JOSEError extends Error {\n    constructor(message, options) {\n        super(message, options);\n        this.code = 'ERR_JOSE_GENERIC';\n        this.name = this.constructor.name;\n        Error.captureStackTrace?.(this, this.constructor);\n    }\n}\nJOSEError.code = 'ERR_JOSE_GENERIC';\nclass JWTClaimValidationFailed extends JOSEError {\n    constructor(message, payload, claim = 'unspecified', reason = 'unspecified') {\n        super(message, { cause: { claim, reason, payload } });\n        this.code = 'ERR_JWT_CLAIM_VALIDATION_FAILED';\n        this.claim = claim;\n        this.reason = reason;\n        this.payload = payload;\n    }\n}\nJWTClaimValidationFailed.code = 'ERR_JWT_CLAIM_VALIDATION_FAILED';\nclass JWTExpired extends JOSEError {\n    constructor(message, payload, claim = 'unspecified', reason = 'unspecified') {\n        super(message, { cause: { claim, reason, payload } });\n        this.code = 'ERR_JWT_EXPIRED';\n        this.claim = claim;\n        this.reason = reason;\n        this.payload = payload;\n    }\n}\nJWTExpired.code = 'ERR_JWT_EXPIRED';\nclass JOSEAlgNotAllowed extends JOSEError {\n    constructor() {\n        super(...arguments);\n        this.code = 'ERR_JOSE_ALG_NOT_ALLOWED';\n    }\n}\nJOSEAlgNotAllowed.code = 'ERR_JOSE_ALG_NOT_ALLOWED';\nclass JOSENotSupported extends JOSEError {\n    constructor() {\n        super(...arguments);\n        this.code = 'ERR_JOSE_NOT_SUPPORTED';\n    }\n}\nJOSENotSupported.code = 'ERR_JOSE_NOT_SUPPORTED';\nclass JWEDecryptionFailed extends JOSEError {\n    constructor(message = 'decryption operation failed', options) {\n        super(message, options);\n        this.code = 'ERR_JWE_DECRYPTION_FAILED';\n    }\n}\nJWEDecryptionFailed.code = 'ERR_JWE_DECRYPTION_FAILED';\nclass JWEInvalid extends JOSEError {\n    constructor() {\n        super(...arguments);\n        this.code = 'ERR_JWE_INVALID';\n    }\n}\nJWEInvalid.code = 'ERR_JWE_INVALID';\nclass JWSInvalid extends JOSEError {\n    constructor() {\n        super(...arguments);\n        this.code = 'ERR_JWS_INVALID';\n    }\n}\nJWSInvalid.code = 'ERR_JWS_INVALID';\nclass JWTInvalid extends JOSEError {\n    constructor() {\n        super(...arguments);\n        this.code = 'ERR_JWT_INVALID';\n    }\n}\nJWTInvalid.code = 'ERR_JWT_INVALID';\nclass JWKInvalid extends JOSEError {\n    constructor() {\n        super(...arguments);\n        this.code = 'ERR_JWK_INVALID';\n    }\n}\nJWKInvalid.code = 'ERR_JWK_INVALID';\nclass JWKSInvalid extends JOSEError {\n    constructor() {\n        super(...arguments);\n        this.code = 'ERR_JWKS_INVALID';\n    }\n}\nJWKSInvalid.code = 'ERR_JWKS_INVALID';\nclass JWKSNoMatchingKey extends JOSEError {\n    constructor(message = 'no applicable key found in the JSON Web Key Set', options) {\n        super(message, options);\n        this.code = 'ERR_JWKS_NO_MATCHING_KEY';\n    }\n}\nJWKSNoMatchingKey.code = 'ERR_JWKS_NO_MATCHING_KEY';\nclass JWKSMultipleMatchingKeys extends JOSEError {\n    constructor(message = 'multiple matching keys found in the JSON Web Key Set', options) {\n        super(message, options);\n        this.code = 'ERR_JWKS_MULTIPLE_MATCHING_KEYS';\n    }\n}\nJWKSMultipleMatchingKeys.code = 'ERR_JWKS_MULTIPLE_MATCHING_KEYS';\nclass JWKSTimeout extends JOSEError {\n    constructor(message = 'request timed out', options) {\n        super(message, options);\n        this.code = 'ERR_JWKS_TIMEOUT';\n    }\n}\nJWKSTimeout.code = 'ERR_JWKS_TIMEOUT';\nclass JWSSignatureVerificationFailed extends JOSEError {\n    constructor(message = 'signature verification failed', options) {\n        super(message, options);\n        this.code = 'ERR_JWS_SIGNATURE_VERIFICATION_FAILED';\n    }\n}\nJWSSignatureVerificationFailed.code = 'ERR_JWS_SIGNATURE_VERIFICATION_FAILED';\n\nfunction unusable(name, prop = 'algorithm.name') {\n    return new TypeError(`CryptoKey does not support this operation, its ${prop} must be ${name}`);\n}\nfunction isAlgorithm(algorithm, name) {\n    return algorithm.name === name;\n}\nfunction getHashLength(hash) {\n    return parseInt(hash.name.slice(4), 10);\n}\nfunction getNamedCurve(alg) {\n    switch (alg) {\n        case 'ES256':\n            return 'P-256';\n        case 'ES384':\n            return 'P-384';\n        case 'ES512':\n            return 'P-521';\n        default:\n            throw new Error('unreachable');\n    }\n}\nfunction checkUsage(key, usages) {\n    if (usages.length && !usages.some((expected) => key.usages.includes(expected))) {\n        let msg = 'CryptoKey does not support this operation, its usages must include ';\n        if (usages.length > 2) {\n            const last = usages.pop();\n            msg += `one of ${usages.join(', ')}, or ${last}.`;\n        }\n        else if (usages.length === 2) {\n            msg += `one of ${usages[0]} or ${usages[1]}.`;\n        }\n        else {\n            msg += `${usages[0]}.`;\n        }\n        throw new TypeError(msg);\n    }\n}\nfunction checkSigCryptoKey(key, alg, ...usages) {\n    switch (alg) {\n        case 'HS256':\n        case 'HS384':\n        case 'HS512': {\n            if (!isAlgorithm(key.algorithm, 'HMAC'))\n                throw unusable('HMAC');\n            const expected = parseInt(alg.slice(2), 10);\n            const actual = getHashLength(key.algorithm.hash);\n            if (actual !== expected)\n                throw unusable(`SHA-${expected}`, 'algorithm.hash');\n            break;\n        }\n        case 'RS256':\n        case 'RS384':\n        case 'RS512': {\n            if (!isAlgorithm(key.algorithm, 'RSASSA-PKCS1-v1_5'))\n                throw unusable('RSASSA-PKCS1-v1_5');\n            const expected = parseInt(alg.slice(2), 10);\n            const actual = getHashLength(key.algorithm.hash);\n            if (actual !== expected)\n                throw unusable(`SHA-${expected}`, 'algorithm.hash');\n            break;\n        }\n        case 'PS256':\n        case 'PS384':\n        case 'PS512': {\n            if (!isAlgorithm(key.algorithm, 'RSA-PSS'))\n                throw unusable('RSA-PSS');\n            const expected = parseInt(alg.slice(2), 10);\n            const actual = getHashLength(key.algorithm.hash);\n            if (actual !== expected)\n                throw unusable(`SHA-${expected}`, 'algorithm.hash');\n            break;\n        }\n        case 'EdDSA': {\n            if (key.algorithm.name !== 'Ed25519' && key.algorithm.name !== 'Ed448') {\n                throw unusable('Ed25519 or Ed448');\n            }\n            break;\n        }\n        case 'Ed25519': {\n            if (!isAlgorithm(key.algorithm, 'Ed25519'))\n                throw unusable('Ed25519');\n            break;\n        }\n        case 'ES256':\n        case 'ES384':\n        case 'ES512': {\n            if (!isAlgorithm(key.algorithm, 'ECDSA'))\n                throw unusable('ECDSA');\n            const expected = getNamedCurve(alg);\n            const actual = key.algorithm.namedCurve;\n            if (actual !== expected)\n                throw unusable(expected, 'algorithm.namedCurve');\n            break;\n        }\n        default:\n            throw new TypeError('CryptoKey does not support this operation');\n    }\n    checkUsage(key, usages);\n}\n\nfunction message(msg, actual, ...types) {\n    types = types.filter(Boolean);\n    if (types.length > 2) {\n        const last = types.pop();\n        msg += `one of type ${types.join(', ')}, or ${last}.`;\n    }\n    else if (types.length === 2) {\n        msg += `one of type ${types[0]} or ${types[1]}.`;\n    }\n    else {\n        msg += `of type ${types[0]}.`;\n    }\n    if (actual == null) {\n        msg += ` Received ${actual}`;\n    }\n    else if (typeof actual === 'function' && actual.name) {\n        msg += ` Received function ${actual.name}`;\n    }\n    else if (typeof actual === 'object' && actual != null) {\n        if (actual.constructor?.name) {\n            msg += ` Received an instance of ${actual.constructor.name}`;\n        }\n    }\n    return msg;\n}\nvar invalidKeyInput = (actual, ...types) => {\n    return message('Key must be ', actual, ...types);\n};\nfunction withAlg(alg, actual, ...types) {\n    return message(`Key for the ${alg} algorithm must be `, actual, ...types);\n}\n\nvar isKeyLike = (key) => {\n    if (isCryptoKey(key)) {\n        return true;\n    }\n    return key?.[Symbol.toStringTag] === 'KeyObject';\n};\nconst types = ['CryptoKey'];\n\nconst isDisjoint = (...headers) => {\n    const sources = headers.filter(Boolean);\n    if (sources.length === 0 || sources.length === 1) {\n        return true;\n    }\n    let acc;\n    for (const header of sources) {\n        const parameters = Object.keys(header);\n        if (!acc || acc.size === 0) {\n            acc = new Set(parameters);\n            continue;\n        }\n        for (const parameter of parameters) {\n            if (acc.has(parameter)) {\n                return false;\n            }\n            acc.add(parameter);\n        }\n    }\n    return true;\n};\nvar isDisjoint$1 = isDisjoint;\n\nfunction isObjectLike(value) {\n    return typeof value === 'object' && value !== null;\n}\nfunction isObject(input) {\n    if (!isObjectLike(input) || Object.prototype.toString.call(input) !== '[object Object]') {\n        return false;\n    }\n    if (Object.getPrototypeOf(input) === null) {\n        return true;\n    }\n    let proto = input;\n    while (Object.getPrototypeOf(proto) !== null) {\n        proto = Object.getPrototypeOf(proto);\n    }\n    return Object.getPrototypeOf(input) === proto;\n}\n\nvar checkKeyLength = (alg, key) => {\n    if (alg.startsWith('RS') || alg.startsWith('PS')) {\n        const { modulusLength } = key.algorithm;\n        if (typeof modulusLength !== 'number' || modulusLength < 2048) {\n            throw new TypeError(`${alg} requires key modulusLength to be 2048 bits or larger`);\n        }\n    }\n};\n\nfunction isJWK(key) {\n    return isObject(key) && typeof key.kty === 'string';\n}\nfunction isPrivateJWK(key) {\n    return key.kty !== 'oct' && typeof key.d === 'string';\n}\nfunction isPublicJWK(key) {\n    return key.kty !== 'oct' && typeof key.d === 'undefined';\n}\nfunction isSecretJWK(key) {\n    return isJWK(key) && key.kty === 'oct' && typeof key.k === 'string';\n}\n\nfunction subtleMapping(jwk) {\n    let algorithm;\n    let keyUsages;\n    switch (jwk.kty) {\n        case 'RSA': {\n            switch (jwk.alg) {\n                case 'PS256':\n                case 'PS384':\n                case 'PS512':\n                    algorithm = { name: 'RSA-PSS', hash: `SHA-${jwk.alg.slice(-3)}` };\n                    keyUsages = jwk.d ? ['sign'] : ['verify'];\n                    break;\n                case 'RS256':\n                case 'RS384':\n                case 'RS512':\n                    algorithm = { name: 'RSASSA-PKCS1-v1_5', hash: `SHA-${jwk.alg.slice(-3)}` };\n                    keyUsages = jwk.d ? ['sign'] : ['verify'];\n                    break;\n                case 'RSA-OAEP':\n                case 'RSA-OAEP-256':\n                case 'RSA-OAEP-384':\n                case 'RSA-OAEP-512':\n                    algorithm = {\n                        name: 'RSA-OAEP',\n                        hash: `SHA-${parseInt(jwk.alg.slice(-3), 10) || 1}`,\n                    };\n                    keyUsages = jwk.d ? ['decrypt', 'unwrapKey'] : ['encrypt', 'wrapKey'];\n                    break;\n                default:\n                    throw new JOSENotSupported('Invalid or unsupported JWK \"alg\" (Algorithm) Parameter value');\n            }\n            break;\n        }\n        case 'EC': {\n            switch (jwk.alg) {\n                case 'ES256':\n                    algorithm = { name: 'ECDSA', namedCurve: 'P-256' };\n                    keyUsages = jwk.d ? ['sign'] : ['verify'];\n                    break;\n                case 'ES384':\n                    algorithm = { name: 'ECDSA', namedCurve: 'P-384' };\n                    keyUsages = jwk.d ? ['sign'] : ['verify'];\n                    break;\n                case 'ES512':\n                    algorithm = { name: 'ECDSA', namedCurve: 'P-521' };\n                    keyUsages = jwk.d ? ['sign'] : ['verify'];\n                    break;\n                case 'ECDH-ES':\n                case 'ECDH-ES+A128KW':\n                case 'ECDH-ES+A192KW':\n                case 'ECDH-ES+A256KW':\n                    algorithm = { name: 'ECDH', namedCurve: jwk.crv };\n                    keyUsages = jwk.d ? ['deriveBits'] : [];\n                    break;\n                default:\n                    throw new JOSENotSupported('Invalid or unsupported JWK \"alg\" (Algorithm) Parameter value');\n            }\n            break;\n        }\n        case 'OKP': {\n            switch (jwk.alg) {\n                case 'Ed25519':\n                    algorithm = { name: 'Ed25519' };\n                    keyUsages = jwk.d ? ['sign'] : ['verify'];\n                    break;\n                case 'EdDSA':\n                    algorithm = { name: jwk.crv };\n                    keyUsages = jwk.d ? ['sign'] : ['verify'];\n                    break;\n                case 'ECDH-ES':\n                case 'ECDH-ES+A128KW':\n                case 'ECDH-ES+A192KW':\n                case 'ECDH-ES+A256KW':\n                    algorithm = { name: jwk.crv };\n                    keyUsages = jwk.d ? ['deriveBits'] : [];\n                    break;\n                default:\n                    throw new JOSENotSupported('Invalid or unsupported JWK \"alg\" (Algorithm) Parameter value');\n            }\n            break;\n        }\n        default:\n            throw new JOSENotSupported('Invalid or unsupported JWK \"kty\" (Key Type) Parameter value');\n    }\n    return { algorithm, keyUsages };\n}\nconst parse = async (jwk) => {\n    if (!jwk.alg) {\n        throw new TypeError('\"alg\" argument is required when \"jwk.alg\" is not present');\n    }\n    const { algorithm, keyUsages } = subtleMapping(jwk);\n    const rest = [\n        algorithm,\n        jwk.ext ?? false,\n        jwk.key_ops ?? keyUsages,\n    ];\n    const keyData = { ...jwk };\n    delete keyData.alg;\n    delete keyData.use;\n    return crypto$1.subtle.importKey('jwk', keyData, ...rest);\n};\nvar asKeyObject = parse;\n\nconst exportKeyValue = (k) => decode$1(k);\nlet privCache;\nlet pubCache;\nconst isKeyObject = (key) => {\n    return key?.[Symbol.toStringTag] === 'KeyObject';\n};\nconst importAndCache = async (cache, key, jwk, alg, freeze = false) => {\n    let cached = cache.get(key);\n    if (cached?.[alg]) {\n        return cached[alg];\n    }\n    const cryptoKey = await asKeyObject({ ...jwk, alg });\n    if (freeze)\n        Object.freeze(key);\n    if (!cached) {\n        cache.set(key, { [alg]: cryptoKey });\n    }\n    else {\n        cached[alg] = cryptoKey;\n    }\n    return cryptoKey;\n};\nconst normalizePublicKey = (key, alg) => {\n    if (isKeyObject(key)) {\n        let jwk = key.export({ format: 'jwk' });\n        delete jwk.d;\n        delete jwk.dp;\n        delete jwk.dq;\n        delete jwk.p;\n        delete jwk.q;\n        delete jwk.qi;\n        if (jwk.k) {\n            return exportKeyValue(jwk.k);\n        }\n        pubCache || (pubCache = new WeakMap());\n        return importAndCache(pubCache, key, jwk, alg);\n    }\n    if (isJWK(key)) {\n        if (key.k)\n            return decode$1(key.k);\n        pubCache || (pubCache = new WeakMap());\n        const cryptoKey = importAndCache(pubCache, key, key, alg, true);\n        return cryptoKey;\n    }\n    return key;\n};\nconst normalizePrivateKey = (key, alg) => {\n    if (isKeyObject(key)) {\n        let jwk = key.export({ format: 'jwk' });\n        if (jwk.k) {\n            return exportKeyValue(jwk.k);\n        }\n        privCache || (privCache = new WeakMap());\n        return importAndCache(privCache, key, jwk, alg);\n    }\n    if (isJWK(key)) {\n        if (key.k)\n            return decode$1(key.k);\n        privCache || (privCache = new WeakMap());\n        const cryptoKey = importAndCache(privCache, key, key, alg, true);\n        return cryptoKey;\n    }\n    return key;\n};\nvar normalize = { normalizePublicKey, normalizePrivateKey };\n\nasync function importJWK(jwk, alg) {\n    if (!isObject(jwk)) {\n        throw new TypeError('JWK must be an object');\n    }\n    alg || (alg = jwk.alg);\n    switch (jwk.kty) {\n        case 'oct':\n            if (typeof jwk.k !== 'string' || !jwk.k) {\n                throw new TypeError('missing \"k\" (Key Value) Parameter value');\n            }\n            return decode$1(jwk.k);\n        case 'RSA':\n            if ('oth' in jwk && jwk.oth !== undefined) {\n                throw new JOSENotSupported('RSA JWK \"oth\" (Other Primes Info) Parameter value is not supported');\n            }\n        case 'EC':\n        case 'OKP':\n            return asKeyObject({ ...jwk, alg });\n        default:\n            throw new JOSENotSupported('Unsupported \"kty\" (Key Type) Parameter value');\n    }\n}\n\nconst tag = (key) => key?.[Symbol.toStringTag];\nconst jwkMatchesOp = (alg, key, usage) => {\n    if (key.use !== undefined && key.use !== 'sig') {\n        throw new TypeError('Invalid key for this operation, when present its use must be sig');\n    }\n    if (key.key_ops !== undefined && key.key_ops.includes?.(usage) !== true) {\n        throw new TypeError(`Invalid key for this operation, when present its key_ops must include ${usage}`);\n    }\n    if (key.alg !== undefined && key.alg !== alg) {\n        throw new TypeError(`Invalid key for this operation, when present its alg must be ${alg}`);\n    }\n    return true;\n};\nconst symmetricTypeCheck = (alg, key, usage, allowJwk) => {\n    if (key instanceof Uint8Array)\n        return;\n    if (allowJwk && isJWK(key)) {\n        if (isSecretJWK(key) && jwkMatchesOp(alg, key, usage))\n            return;\n        throw new TypeError(`JSON Web Key for symmetric algorithms must have JWK \"kty\" (Key Type) equal to \"oct\" and the JWK \"k\" (Key Value) present`);\n    }\n    if (!isKeyLike(key)) {\n        throw new TypeError(withAlg(alg, key, ...types, 'Uint8Array', allowJwk ? 'JSON Web Key' : null));\n    }\n    if (key.type !== 'secret') {\n        throw new TypeError(`${tag(key)} instances for symmetric algorithms must be of type \"secret\"`);\n    }\n};\nconst asymmetricTypeCheck = (alg, key, usage, allowJwk) => {\n    if (allowJwk && isJWK(key)) {\n        switch (usage) {\n            case 'sign':\n                if (isPrivateJWK(key) && jwkMatchesOp(alg, key, usage))\n                    return;\n                throw new TypeError(`JSON Web Key for this operation be a private JWK`);\n            case 'verify':\n                if (isPublicJWK(key) && jwkMatchesOp(alg, key, usage))\n                    return;\n                throw new TypeError(`JSON Web Key for this operation be a public JWK`);\n        }\n    }\n    if (!isKeyLike(key)) {\n        throw new TypeError(withAlg(alg, key, ...types, allowJwk ? 'JSON Web Key' : null));\n    }\n    if (key.type === 'secret') {\n        throw new TypeError(`${tag(key)} instances for asymmetric algorithms must not be of type \"secret\"`);\n    }\n    if (usage === 'sign' && key.type === 'public') {\n        throw new TypeError(`${tag(key)} instances for asymmetric algorithm signing must be of type \"private\"`);\n    }\n    if (usage === 'decrypt' && key.type === 'public') {\n        throw new TypeError(`${tag(key)} instances for asymmetric algorithm decryption must be of type \"private\"`);\n    }\n    if (key.algorithm && usage === 'verify' && key.type === 'private') {\n        throw new TypeError(`${tag(key)} instances for asymmetric algorithm verifying must be of type \"public\"`);\n    }\n    if (key.algorithm && usage === 'encrypt' && key.type === 'private') {\n        throw new TypeError(`${tag(key)} instances for asymmetric algorithm encryption must be of type \"public\"`);\n    }\n};\nfunction checkKeyType(allowJwk, alg, key, usage) {\n    const symmetric = alg.startsWith('HS') ||\n        alg === 'dir' ||\n        alg.startsWith('PBES2') ||\n        /^A\\d{3}(?:GCM)?KW$/.test(alg);\n    if (symmetric) {\n        symmetricTypeCheck(alg, key, usage, allowJwk);\n    }\n    else {\n        asymmetricTypeCheck(alg, key, usage, allowJwk);\n    }\n}\ncheckKeyType.bind(undefined, false);\nconst checkKeyTypeWithJwk = checkKeyType.bind(undefined, true);\n\nfunction validateCrit(Err, recognizedDefault, recognizedOption, protectedHeader, joseHeader) {\n    if (joseHeader.crit !== undefined && protectedHeader?.crit === undefined) {\n        throw new Err('\"crit\" (Critical) Header Parameter MUST be integrity protected');\n    }\n    if (!protectedHeader || protectedHeader.crit === undefined) {\n        return new Set();\n    }\n    if (!Array.isArray(protectedHeader.crit) ||\n        protectedHeader.crit.length === 0 ||\n        protectedHeader.crit.some((input) => typeof input !== 'string' || input.length === 0)) {\n        throw new Err('\"crit\" (Critical) Header Parameter MUST be an array of non-empty strings when present');\n    }\n    let recognized;\n    if (recognizedOption !== undefined) {\n        recognized = new Map([...Object.entries(recognizedOption), ...recognizedDefault.entries()]);\n    }\n    else {\n        recognized = recognizedDefault;\n    }\n    for (const parameter of protectedHeader.crit) {\n        if (!recognized.has(parameter)) {\n            throw new JOSENotSupported(`Extension Header Parameter \"${parameter}\" is not recognized`);\n        }\n        if (joseHeader[parameter] === undefined) {\n            throw new Err(`Extension Header Parameter \"${parameter}\" is missing`);\n        }\n        if (recognized.get(parameter) && protectedHeader[parameter] === undefined) {\n            throw new Err(`Extension Header Parameter \"${parameter}\" MUST be integrity protected`);\n        }\n    }\n    return new Set(protectedHeader.crit);\n}\n\nconst validateAlgorithms = (option, algorithms) => {\n    if (algorithms !== undefined &&\n        (!Array.isArray(algorithms) || algorithms.some((s) => typeof s !== 'string'))) {\n        throw new TypeError(`\"${option}\" option must be an array of strings`);\n    }\n    if (!algorithms) {\n        return undefined;\n    }\n    return new Set(algorithms);\n};\nvar validateAlgorithms$1 = validateAlgorithms;\n\nconst keyToJWK = async (key) => {\n    if (key instanceof Uint8Array) {\n        return {\n            kty: 'oct',\n            k: encode(key),\n        };\n    }\n    if (!isCryptoKey(key)) {\n        throw new TypeError(invalidKeyInput(key, ...types, 'Uint8Array'));\n    }\n    if (!key.extractable) {\n        throw new TypeError('non-extractable CryptoKey cannot be exported as a JWK');\n    }\n    const { ext, key_ops, alg, use, ...jwk } = await crypto$1.subtle.exportKey('jwk', key);\n    return jwk;\n};\nvar keyToJWK$1 = keyToJWK;\n\nasync function exportJWK(key) {\n    return keyToJWK$1(key);\n}\n\nfunction subtleDsa(alg, algorithm) {\n    const hash = `SHA-${alg.slice(-3)}`;\n    switch (alg) {\n        case 'HS256':\n        case 'HS384':\n        case 'HS512':\n            return { hash, name: 'HMAC' };\n        case 'PS256':\n        case 'PS384':\n        case 'PS512':\n            return { hash, name: 'RSA-PSS', saltLength: alg.slice(-3) >> 3 };\n        case 'RS256':\n        case 'RS384':\n        case 'RS512':\n            return { hash, name: 'RSASSA-PKCS1-v1_5' };\n        case 'ES256':\n        case 'ES384':\n        case 'ES512':\n            return { hash, name: 'ECDSA', namedCurve: algorithm.namedCurve };\n        case 'Ed25519':\n            return { name: 'Ed25519' };\n        case 'EdDSA':\n            return { name: algorithm.name };\n        default:\n            throw new JOSENotSupported(`alg ${alg} is not supported either by JOSE or your javascript runtime`);\n    }\n}\n\nasync function getCryptoKey(alg, key, usage) {\n    if (usage === 'sign') {\n        key = await normalize.normalizePrivateKey(key, alg);\n    }\n    if (usage === 'verify') {\n        key = await normalize.normalizePublicKey(key, alg);\n    }\n    if (isCryptoKey(key)) {\n        checkSigCryptoKey(key, alg, usage);\n        return key;\n    }\n    if (key instanceof Uint8Array) {\n        if (!alg.startsWith('HS')) {\n            throw new TypeError(invalidKeyInput(key, ...types));\n        }\n        return crypto$1.subtle.importKey('raw', key, { hash: `SHA-${alg.slice(-3)}`, name: 'HMAC' }, false, [usage]);\n    }\n    throw new TypeError(invalidKeyInput(key, ...types, 'Uint8Array', 'JSON Web Key'));\n}\n\nconst verify = async (alg, key, signature, data) => {\n    const cryptoKey = await getCryptoKey(alg, key, 'verify');\n    checkKeyLength(alg, cryptoKey);\n    const algorithm = subtleDsa(alg, cryptoKey.algorithm);\n    try {\n        return await crypto$1.subtle.verify(algorithm, cryptoKey, signature, data);\n    }\n    catch {\n        return false;\n    }\n};\nvar verify$1 = verify;\n\nasync function flattenedVerify(jws, key, options) {\n    if (!isObject(jws)) {\n        throw new JWSInvalid('Flattened JWS must be an object');\n    }\n    if (jws.protected === undefined && jws.header === undefined) {\n        throw new JWSInvalid('Flattened JWS must have either of the \"protected\" or \"header\" members');\n    }\n    if (jws.protected !== undefined && typeof jws.protected !== 'string') {\n        throw new JWSInvalid('JWS Protected Header incorrect type');\n    }\n    if (jws.payload === undefined) {\n        throw new JWSInvalid('JWS Payload missing');\n    }\n    if (typeof jws.signature !== 'string') {\n        throw new JWSInvalid('JWS Signature missing or incorrect type');\n    }\n    if (jws.header !== undefined && !isObject(jws.header)) {\n        throw new JWSInvalid('JWS Unprotected Header incorrect type');\n    }\n    let parsedProt = {};\n    if (jws.protected) {\n        try {\n            const protectedHeader = decode$1(jws.protected);\n            parsedProt = JSON.parse(decoder.decode(protectedHeader));\n        }\n        catch {\n            throw new JWSInvalid('JWS Protected Header is invalid');\n        }\n    }\n    if (!isDisjoint$1(parsedProt, jws.header)) {\n        throw new JWSInvalid('JWS Protected and JWS Unprotected Header Parameter names must be disjoint');\n    }\n    const joseHeader = {\n        ...parsedProt,\n        ...jws.header,\n    };\n    const extensions = validateCrit(JWSInvalid, new Map([['b64', true]]), options?.crit, parsedProt, joseHeader);\n    let b64 = true;\n    if (extensions.has('b64')) {\n        b64 = parsedProt.b64;\n        if (typeof b64 !== 'boolean') {\n            throw new JWSInvalid('The \"b64\" (base64url-encode payload) Header Parameter must be a boolean');\n        }\n    }\n    const { alg } = joseHeader;\n    if (typeof alg !== 'string' || !alg) {\n        throw new JWSInvalid('JWS \"alg\" (Algorithm) Header Parameter missing or invalid');\n    }\n    const algorithms = options && validateAlgorithms$1('algorithms', options.algorithms);\n    if (algorithms && !algorithms.has(alg)) {\n        throw new JOSEAlgNotAllowed('\"alg\" (Algorithm) Header Parameter value not allowed');\n    }\n    if (b64) {\n        if (typeof jws.payload !== 'string') {\n            throw new JWSInvalid('JWS Payload must be a string');\n        }\n    }\n    else if (typeof jws.payload !== 'string' && !(jws.payload instanceof Uint8Array)) {\n        throw new JWSInvalid('JWS Payload must be a string or an Uint8Array instance');\n    }\n    let resolvedKey = false;\n    if (typeof key === 'function') {\n        key = await key(parsedProt, jws);\n        resolvedKey = true;\n        checkKeyTypeWithJwk(alg, key, 'verify');\n        if (isJWK(key)) {\n            key = await importJWK(key, alg);\n        }\n    }\n    else {\n        checkKeyTypeWithJwk(alg, key, 'verify');\n    }\n    const data = concat(encoder.encode(jws.protected ?? ''), encoder.encode('.'), typeof jws.payload === 'string' ? encoder.encode(jws.payload) : jws.payload);\n    let signature;\n    try {\n        signature = decode$1(jws.signature);\n    }\n    catch {\n        throw new JWSInvalid('Failed to base64url decode the signature');\n    }\n    const verified = await verify$1(alg, key, signature, data);\n    if (!verified) {\n        throw new JWSSignatureVerificationFailed();\n    }\n    let payload;\n    if (b64) {\n        try {\n            payload = decode$1(jws.payload);\n        }\n        catch {\n            throw new JWSInvalid('Failed to base64url decode the payload');\n        }\n    }\n    else if (typeof jws.payload === 'string') {\n        payload = encoder.encode(jws.payload);\n    }\n    else {\n        payload = jws.payload;\n    }\n    const result = { payload };\n    if (jws.protected !== undefined) {\n        result.protectedHeader = parsedProt;\n    }\n    if (jws.header !== undefined) {\n        result.unprotectedHeader = jws.header;\n    }\n    if (resolvedKey) {\n        return { ...result, key };\n    }\n    return result;\n}\n\nasync function compactVerify(jws, key, options) {\n    if (jws instanceof Uint8Array) {\n        jws = decoder.decode(jws);\n    }\n    if (typeof jws !== 'string') {\n        throw new JWSInvalid('Compact JWS must be a string or Uint8Array');\n    }\n    const { 0: protectedHeader, 1: payload, 2: signature, length } = jws.split('.');\n    if (length !== 3) {\n        throw new JWSInvalid('Invalid Compact JWS');\n    }\n    const verified = await flattenedVerify({ payload, protected: protectedHeader, signature }, key, options);\n    const result = { payload: verified.payload, protectedHeader: verified.protectedHeader };\n    if (typeof key === 'function') {\n        return { ...result, key: verified.key };\n    }\n    return result;\n}\n\nvar epoch = (date) => Math.floor(date.getTime() / 1000);\n\nconst minute = 60;\nconst hour = minute * 60;\nconst day = hour * 24;\nconst week = day * 7;\nconst year = day * 365.25;\nconst REGEX = /^(\\+|\\-)? ?(\\d+|\\d+\\.\\d+) ?(seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|weeks?|w|years?|yrs?|y)(?: (ago|from now))?$/i;\nvar secs = (str) => {\n    const matched = REGEX.exec(str);\n    if (!matched || (matched[4] && matched[1])) {\n        throw new TypeError('Invalid time period format');\n    }\n    const value = parseFloat(matched[2]);\n    const unit = matched[3].toLowerCase();\n    let numericDate;\n    switch (unit) {\n        case 'sec':\n        case 'secs':\n        case 'second':\n        case 'seconds':\n        case 's':\n            numericDate = Math.round(value);\n            break;\n        case 'minute':\n        case 'minutes':\n        case 'min':\n        case 'mins':\n        case 'm':\n            numericDate = Math.round(value * minute);\n            break;\n        case 'hour':\n        case 'hours':\n        case 'hr':\n        case 'hrs':\n        case 'h':\n            numericDate = Math.round(value * hour);\n            break;\n        case 'day':\n        case 'days':\n        case 'd':\n            numericDate = Math.round(value * day);\n            break;\n        case 'week':\n        case 'weeks':\n        case 'w':\n            numericDate = Math.round(value * week);\n            break;\n        default:\n            numericDate = Math.round(value * year);\n            break;\n    }\n    if (matched[1] === '-' || matched[4] === 'ago') {\n        return -numericDate;\n    }\n    return numericDate;\n};\n\nconst normalizeTyp = (value) => value.toLowerCase().replace(/^application\\//, '');\nconst checkAudiencePresence = (audPayload, audOption) => {\n    if (typeof audPayload === 'string') {\n        return audOption.includes(audPayload);\n    }\n    if (Array.isArray(audPayload)) {\n        return audOption.some(Set.prototype.has.bind(new Set(audPayload)));\n    }\n    return false;\n};\nvar jwtPayload = (protectedHeader, encodedPayload, options = {}) => {\n    let payload;\n    try {\n        payload = JSON.parse(decoder.decode(encodedPayload));\n    }\n    catch {\n    }\n    if (!isObject(payload)) {\n        throw new JWTInvalid('JWT Claims Set must be a top-level JSON object');\n    }\n    const { typ } = options;\n    if (typ &&\n        (typeof protectedHeader.typ !== 'string' ||\n            normalizeTyp(protectedHeader.typ) !== normalizeTyp(typ))) {\n        throw new JWTClaimValidationFailed('unexpected \"typ\" JWT header value', payload, 'typ', 'check_failed');\n    }\n    const { requiredClaims = [], issuer, subject, audience, maxTokenAge } = options;\n    const presenceCheck = [...requiredClaims];\n    if (maxTokenAge !== undefined)\n        presenceCheck.push('iat');\n    if (audience !== undefined)\n        presenceCheck.push('aud');\n    if (subject !== undefined)\n        presenceCheck.push('sub');\n    if (issuer !== undefined)\n        presenceCheck.push('iss');\n    for (const claim of new Set(presenceCheck.reverse())) {\n        if (!(claim in payload)) {\n            throw new JWTClaimValidationFailed(`missing required \"${claim}\" claim`, payload, claim, 'missing');\n        }\n    }\n    if (issuer &&\n        !(Array.isArray(issuer) ? issuer : [issuer]).includes(payload.iss)) {\n        throw new JWTClaimValidationFailed('unexpected \"iss\" claim value', payload, 'iss', 'check_failed');\n    }\n    if (subject && payload.sub !== subject) {\n        throw new JWTClaimValidationFailed('unexpected \"sub\" claim value', payload, 'sub', 'check_failed');\n    }\n    if (audience &&\n        !checkAudiencePresence(payload.aud, typeof audience === 'string' ? [audience] : audience)) {\n        throw new JWTClaimValidationFailed('unexpected \"aud\" claim value', payload, 'aud', 'check_failed');\n    }\n    let tolerance;\n    switch (typeof options.clockTolerance) {\n        case 'string':\n            tolerance = secs(options.clockTolerance);\n            break;\n        case 'number':\n            tolerance = options.clockTolerance;\n            break;\n        case 'undefined':\n            tolerance = 0;\n            break;\n        default:\n            throw new TypeError('Invalid clockTolerance option type');\n    }\n    const { currentDate } = options;\n    const now = epoch(currentDate || new Date());\n    if ((payload.iat !== undefined || maxTokenAge) && typeof payload.iat !== 'number') {\n        throw new JWTClaimValidationFailed('\"iat\" claim must be a number', payload, 'iat', 'invalid');\n    }\n    if (payload.nbf !== undefined) {\n        if (typeof payload.nbf !== 'number') {\n            throw new JWTClaimValidationFailed('\"nbf\" claim must be a number', payload, 'nbf', 'invalid');\n        }\n        if (payload.nbf > now + tolerance) {\n            throw new JWTClaimValidationFailed('\"nbf\" claim timestamp check failed', payload, 'nbf', 'check_failed');\n        }\n    }\n    if (payload.exp !== undefined) {\n        if (typeof payload.exp !== 'number') {\n            throw new JWTClaimValidationFailed('\"exp\" claim must be a number', payload, 'exp', 'invalid');\n        }\n        if (payload.exp <= now - tolerance) {\n            throw new JWTExpired('\"exp\" claim timestamp check failed', payload, 'exp', 'check_failed');\n        }\n    }\n    if (maxTokenAge) {\n        const age = now - payload.iat;\n        const max = typeof maxTokenAge === 'number' ? maxTokenAge : secs(maxTokenAge);\n        if (age - tolerance > max) {\n            throw new JWTExpired('\"iat\" claim timestamp check failed (too far in the past)', payload, 'iat', 'check_failed');\n        }\n        if (age < 0 - tolerance) {\n            throw new JWTClaimValidationFailed('\"iat\" claim timestamp check failed (it should be in the past)', payload, 'iat', 'check_failed');\n        }\n    }\n    return payload;\n};\n\nasync function jwtVerify(jwt, key, options) {\n    const verified = await compactVerify(jwt, key, options);\n    if (verified.protectedHeader.crit?.includes('b64') && verified.protectedHeader.b64 === false) {\n        throw new JWTInvalid('JWTs MUST NOT use unencoded payload');\n    }\n    const payload = jwtPayload(verified.protectedHeader, verified.payload, options);\n    const result = { payload, protectedHeader: verified.protectedHeader };\n    if (typeof key === 'function') {\n        return { ...result, key: verified.key };\n    }\n    return result;\n}\n\nconst sign = async (alg, key, data) => {\n    const cryptoKey = await getCryptoKey(alg, key, 'sign');\n    checkKeyLength(alg, cryptoKey);\n    const signature = await crypto$1.subtle.sign(subtleDsa(alg, cryptoKey.algorithm), cryptoKey, data);\n    return new Uint8Array(signature);\n};\nvar sign$1 = sign;\n\nclass FlattenedSign {\n    constructor(payload) {\n        if (!(payload instanceof Uint8Array)) {\n            throw new TypeError('payload must be an instance of Uint8Array');\n        }\n        this._payload = payload;\n    }\n    setProtectedHeader(protectedHeader) {\n        if (this._protectedHeader) {\n            throw new TypeError('setProtectedHeader can only be called once');\n        }\n        this._protectedHeader = protectedHeader;\n        return this;\n    }\n    setUnprotectedHeader(unprotectedHeader) {\n        if (this._unprotectedHeader) {\n            throw new TypeError('setUnprotectedHeader can only be called once');\n        }\n        this._unprotectedHeader = unprotectedHeader;\n        return this;\n    }\n    async sign(key, options) {\n        if (!this._protectedHeader && !this._unprotectedHeader) {\n            throw new JWSInvalid('either setProtectedHeader or setUnprotectedHeader must be called before #sign()');\n        }\n        if (!isDisjoint$1(this._protectedHeader, this._unprotectedHeader)) {\n            throw new JWSInvalid('JWS Protected and JWS Unprotected Header Parameter names must be disjoint');\n        }\n        const joseHeader = {\n            ...this._protectedHeader,\n            ...this._unprotectedHeader,\n        };\n        const extensions = validateCrit(JWSInvalid, new Map([['b64', true]]), options?.crit, this._protectedHeader, joseHeader);\n        let b64 = true;\n        if (extensions.has('b64')) {\n            b64 = this._protectedHeader.b64;\n            if (typeof b64 !== 'boolean') {\n                throw new JWSInvalid('The \"b64\" (base64url-encode payload) Header Parameter must be a boolean');\n            }\n        }\n        const { alg } = joseHeader;\n        if (typeof alg !== 'string' || !alg) {\n            throw new JWSInvalid('JWS \"alg\" (Algorithm) Header Parameter missing or invalid');\n        }\n        checkKeyTypeWithJwk(alg, key, 'sign');\n        let payload = this._payload;\n        if (b64) {\n            payload = encoder.encode(encode(payload));\n        }\n        let protectedHeader;\n        if (this._protectedHeader) {\n            protectedHeader = encoder.encode(encode(JSON.stringify(this._protectedHeader)));\n        }\n        else {\n            protectedHeader = encoder.encode('');\n        }\n        const data = concat(protectedHeader, encoder.encode('.'), payload);\n        const signature = await sign$1(alg, key, data);\n        const jws = {\n            signature: encode(signature),\n            payload: '',\n        };\n        if (b64) {\n            jws.payload = decoder.decode(payload);\n        }\n        if (this._unprotectedHeader) {\n            jws.header = this._unprotectedHeader;\n        }\n        if (this._protectedHeader) {\n            jws.protected = decoder.decode(protectedHeader);\n        }\n        return jws;\n    }\n}\n\nclass CompactSign {\n    constructor(payload) {\n        this._flattened = new FlattenedSign(payload);\n    }\n    setProtectedHeader(protectedHeader) {\n        this._flattened.setProtectedHeader(protectedHeader);\n        return this;\n    }\n    async sign(key, options) {\n        const jws = await this._flattened.sign(key, options);\n        if (jws.payload === undefined) {\n            throw new TypeError('use the flattened module for creating JWS with b64: false');\n        }\n        return `${jws.protected}.${jws.payload}.${jws.signature}`;\n    }\n}\n\nfunction validateInput(label, input) {\n    if (!Number.isFinite(input)) {\n        throw new TypeError(`Invalid ${label} input`);\n    }\n    return input;\n}\nclass ProduceJWT {\n    constructor(payload = {}) {\n        if (!isObject(payload)) {\n            throw new TypeError('JWT Claims Set MUST be an object');\n        }\n        this._payload = payload;\n    }\n    setIssuer(issuer) {\n        this._payload = { ...this._payload, iss: issuer };\n        return this;\n    }\n    setSubject(subject) {\n        this._payload = { ...this._payload, sub: subject };\n        return this;\n    }\n    setAudience(audience) {\n        this._payload = { ...this._payload, aud: audience };\n        return this;\n    }\n    setJti(jwtId) {\n        this._payload = { ...this._payload, jti: jwtId };\n        return this;\n    }\n    setNotBefore(input) {\n        if (typeof input === 'number') {\n            this._payload = { ...this._payload, nbf: validateInput('setNotBefore', input) };\n        }\n        else if (input instanceof Date) {\n            this._payload = { ...this._payload, nbf: validateInput('setNotBefore', epoch(input)) };\n        }\n        else {\n            this._payload = { ...this._payload, nbf: epoch(new Date()) + secs(input) };\n        }\n        return this;\n    }\n    setExpirationTime(input) {\n        if (typeof input === 'number') {\n            this._payload = { ...this._payload, exp: validateInput('setExpirationTime', input) };\n        }\n        else if (input instanceof Date) {\n            this._payload = { ...this._payload, exp: validateInput('setExpirationTime', epoch(input)) };\n        }\n        else {\n            this._payload = { ...this._payload, exp: epoch(new Date()) + secs(input) };\n        }\n        return this;\n    }\n    setIssuedAt(input) {\n        if (typeof input === 'undefined') {\n            this._payload = { ...this._payload, iat: epoch(new Date()) };\n        }\n        else if (input instanceof Date) {\n            this._payload = { ...this._payload, iat: validateInput('setIssuedAt', epoch(input)) };\n        }\n        else if (typeof input === 'string') {\n            this._payload = {\n                ...this._payload,\n                iat: validateInput('setIssuedAt', epoch(new Date()) + secs(input)),\n            };\n        }\n        else {\n            this._payload = { ...this._payload, iat: validateInput('setIssuedAt', input) };\n        }\n        return this;\n    }\n}\n\nclass SignJWT extends ProduceJWT {\n    setProtectedHeader(protectedHeader) {\n        this._protectedHeader = protectedHeader;\n        return this;\n    }\n    async sign(key, options) {\n        const sig = new CompactSign(encoder.encode(JSON.stringify(this._payload)));\n        sig.setProtectedHeader(this._protectedHeader);\n        if (Array.isArray(this._protectedHeader?.crit) &&\n            this._protectedHeader.crit.includes('b64') &&\n            this._protectedHeader.b64 === false) {\n            throw new JWTInvalid('JWTs MUST NOT use unencoded payload');\n        }\n        return sig.sign(key, options);\n    }\n}\n\nconst check = (value, description) => {\n    if (typeof value !== 'string' || !value) {\n        throw new JWKInvalid(`${description} missing or invalid`);\n    }\n};\nasync function calculateJwkThumbprint(jwk, digestAlgorithm) {\n    if (!isObject(jwk)) {\n        throw new TypeError('JWK must be an object');\n    }\n    digestAlgorithm ?? (digestAlgorithm = 'sha256');\n    if (digestAlgorithm !== 'sha256' &&\n        digestAlgorithm !== 'sha384' &&\n        digestAlgorithm !== 'sha512') {\n        throw new TypeError('digestAlgorithm must one of \"sha256\", \"sha384\", or \"sha512\"');\n    }\n    let components;\n    switch (jwk.kty) {\n        case 'EC':\n            check(jwk.crv, '\"crv\" (Curve) Parameter');\n            check(jwk.x, '\"x\" (X Coordinate) Parameter');\n            check(jwk.y, '\"y\" (Y Coordinate) Parameter');\n            components = { crv: jwk.crv, kty: jwk.kty, x: jwk.x, y: jwk.y };\n            break;\n        case 'OKP':\n            check(jwk.crv, '\"crv\" (Subtype of Key Pair) Parameter');\n            check(jwk.x, '\"x\" (Public Key) Parameter');\n            components = { crv: jwk.crv, kty: jwk.kty, x: jwk.x };\n            break;\n        case 'RSA':\n            check(jwk.e, '\"e\" (Exponent) Parameter');\n            check(jwk.n, '\"n\" (Modulus) Parameter');\n            components = { e: jwk.e, kty: jwk.kty, n: jwk.n };\n            break;\n        case 'oct':\n            check(jwk.k, '\"k\" (Key Value) Parameter');\n            components = { k: jwk.k, kty: jwk.kty };\n            break;\n        default:\n            throw new JOSENotSupported('\"kty\" (Key Type) Parameter missing or unsupported');\n    }\n    const data = encoder.encode(JSON.stringify(components));\n    return encode(await digest$1(digestAlgorithm, data));\n}\n\nfunction getKtyFromAlg(alg) {\n    switch (typeof alg === 'string' && alg.slice(0, 2)) {\n        case 'RS':\n        case 'PS':\n            return 'RSA';\n        case 'ES':\n            return 'EC';\n        case 'Ed':\n            return 'OKP';\n        default:\n            throw new JOSENotSupported('Unsupported \"alg\" value for a JSON Web Key Set');\n    }\n}\nfunction isJWKSLike(jwks) {\n    return (jwks &&\n        typeof jwks === 'object' &&\n        Array.isArray(jwks.keys) &&\n        jwks.keys.every(isJWKLike));\n}\nfunction isJWKLike(key) {\n    return isObject(key);\n}\nfunction clone(obj) {\n    if (typeof structuredClone === 'function') {\n        return structuredClone(obj);\n    }\n    return JSON.parse(JSON.stringify(obj));\n}\nclass LocalJWKSet {\n    constructor(jwks) {\n        this._cached = new WeakMap();\n        if (!isJWKSLike(jwks)) {\n            throw new JWKSInvalid('JSON Web Key Set malformed');\n        }\n        this._jwks = clone(jwks);\n    }\n    async getKey(protectedHeader, token) {\n        const { alg, kid } = { ...protectedHeader, ...token?.header };\n        const kty = getKtyFromAlg(alg);\n        const candidates = this._jwks.keys.filter((jwk) => {\n            let candidate = kty === jwk.kty;\n            if (candidate && typeof kid === 'string') {\n                candidate = kid === jwk.kid;\n            }\n            if (candidate && typeof jwk.alg === 'string') {\n                candidate = alg === jwk.alg;\n            }\n            if (candidate && typeof jwk.use === 'string') {\n                candidate = jwk.use === 'sig';\n            }\n            if (candidate && Array.isArray(jwk.key_ops)) {\n                candidate = jwk.key_ops.includes('verify');\n            }\n            if (candidate) {\n                switch (alg) {\n                    case 'ES256':\n                        candidate = jwk.crv === 'P-256';\n                        break;\n                    case 'ES256K':\n                        candidate = jwk.crv === 'secp256k1';\n                        break;\n                    case 'ES384':\n                        candidate = jwk.crv === 'P-384';\n                        break;\n                    case 'ES512':\n                        candidate = jwk.crv === 'P-521';\n                        break;\n                    case 'Ed25519':\n                        candidate = jwk.crv === 'Ed25519';\n                        break;\n                    case 'EdDSA':\n                        candidate = jwk.crv === 'Ed25519' || jwk.crv === 'Ed448';\n                        break;\n                }\n            }\n            return candidate;\n        });\n        const { 0: jwk, length } = candidates;\n        if (length === 0) {\n            throw new JWKSNoMatchingKey();\n        }\n        if (length !== 1) {\n            const error = new JWKSMultipleMatchingKeys();\n            const { _cached } = this;\n            error[Symbol.asyncIterator] = async function* () {\n                for (const jwk of candidates) {\n                    try {\n                        yield await importWithAlgCache(_cached, jwk, alg);\n                    }\n                    catch { }\n                }\n            };\n            throw error;\n        }\n        return importWithAlgCache(this._cached, jwk, alg);\n    }\n}\nasync function importWithAlgCache(cache, jwk, alg) {\n    const cached = cache.get(jwk) || cache.set(jwk, {}).get(jwk);\n    if (cached[alg] === undefined) {\n        const key = await importJWK({ ...jwk, ext: true }, alg);\n        if (key instanceof Uint8Array || key.type !== 'public') {\n            throw new JWKSInvalid('JSON Web Key Set members must be public keys');\n        }\n        cached[alg] = key;\n    }\n    return cached[alg];\n}\nfunction createLocalJWKSet(jwks) {\n    const set = new LocalJWKSet(jwks);\n    const localJWKSet = async (protectedHeader, token) => set.getKey(protectedHeader, token);\n    Object.defineProperties(localJWKSet, {\n        jwks: {\n            value: () => clone(set._jwks),\n            enumerable: true,\n            configurable: false,\n            writable: false,\n        },\n    });\n    return localJWKSet;\n}\n\nconst fetchJwks = async (url, timeout, options) => {\n    let controller;\n    let id;\n    let timedOut = false;\n    if (typeof AbortController === 'function') {\n        controller = new AbortController();\n        id = setTimeout(() => {\n            timedOut = true;\n            controller.abort();\n        }, timeout);\n    }\n    const response = await fetch(url.href, {\n        signal: controller ? controller.signal : undefined,\n        redirect: 'manual',\n        headers: options.headers,\n    }).catch((err) => {\n        if (timedOut)\n            throw new JWKSTimeout();\n        throw err;\n    });\n    if (id !== undefined)\n        clearTimeout(id);\n    if (response.status !== 200) {\n        throw new JOSEError('Expected 200 OK from the JSON Web Key Set HTTP response');\n    }\n    try {\n        return await response.json();\n    }\n    catch {\n        throw new JOSEError('Failed to parse the JSON Web Key Set HTTP response as JSON');\n    }\n};\nvar fetchJwks$1 = fetchJwks;\n\nfunction isCloudflareWorkers() {\n    return (typeof WebSocketPair !== 'undefined' ||\n        (typeof navigator !== 'undefined' && navigator.userAgent === 'Cloudflare-Workers') ||\n        (typeof EdgeRuntime !== 'undefined' && EdgeRuntime === 'vercel'));\n}\nlet USER_AGENT;\nif (typeof navigator === 'undefined' || !navigator.userAgent?.startsWith?.('Mozilla/5.0 ')) {\n    const NAME = 'jose';\n    const VERSION = 'v5.10.0';\n    USER_AGENT = `${NAME}/${VERSION}`;\n}\nconst jwksCache = Symbol();\nfunction isFreshJwksCache(input, cacheMaxAge) {\n    if (typeof input !== 'object' || input === null) {\n        return false;\n    }\n    if (!('uat' in input) || typeof input.uat !== 'number' || Date.now() - input.uat >= cacheMaxAge) {\n        return false;\n    }\n    if (!('jwks' in input) ||\n        !isObject(input.jwks) ||\n        !Array.isArray(input.jwks.keys) ||\n        !Array.prototype.every.call(input.jwks.keys, isObject)) {\n        return false;\n    }\n    return true;\n}\nclass RemoteJWKSet {\n    constructor(url, options) {\n        if (!(url instanceof URL)) {\n            throw new TypeError('url must be an instance of URL');\n        }\n        this._url = new URL(url.href);\n        this._options = { agent: options?.agent, headers: options?.headers };\n        this._timeoutDuration =\n            typeof options?.timeoutDuration === 'number' ? options?.timeoutDuration : 5000;\n        this._cooldownDuration =\n            typeof options?.cooldownDuration === 'number' ? options?.cooldownDuration : 30000;\n        this._cacheMaxAge = typeof options?.cacheMaxAge === 'number' ? options?.cacheMaxAge : 600000;\n        if (options?.[jwksCache] !== undefined) {\n            this._cache = options?.[jwksCache];\n            if (isFreshJwksCache(options?.[jwksCache], this._cacheMaxAge)) {\n                this._jwksTimestamp = this._cache.uat;\n                this._local = createLocalJWKSet(this._cache.jwks);\n            }\n        }\n    }\n    coolingDown() {\n        return typeof this._jwksTimestamp === 'number'\n            ? Date.now() < this._jwksTimestamp + this._cooldownDuration\n            : false;\n    }\n    fresh() {\n        return typeof this._jwksTimestamp === 'number'\n            ? Date.now() < this._jwksTimestamp + this._cacheMaxAge\n            : false;\n    }\n    async getKey(protectedHeader, token) {\n        if (!this._local || !this.fresh()) {\n            await this.reload();\n        }\n        try {\n            return await this._local(protectedHeader, token);\n        }\n        catch (err) {\n            if (err instanceof JWKSNoMatchingKey) {\n                if (this.coolingDown() === false) {\n                    await this.reload();\n                    return this._local(protectedHeader, token);\n                }\n            }\n            throw err;\n        }\n    }\n    async reload() {\n        if (this._pendingFetch && isCloudflareWorkers()) {\n            this._pendingFetch = undefined;\n        }\n        const headers = new Headers(this._options.headers);\n        if (USER_AGENT && !headers.has('User-Agent')) {\n            headers.set('User-Agent', USER_AGENT);\n            this._options.headers = Object.fromEntries(headers.entries());\n        }\n        this._pendingFetch || (this._pendingFetch = fetchJwks$1(this._url, this._timeoutDuration, this._options)\n            .then((json) => {\n            this._local = createLocalJWKSet(json);\n            if (this._cache) {\n                this._cache.uat = Date.now();\n                this._cache.jwks = json;\n            }\n            this._jwksTimestamp = Date.now();\n            this._pendingFetch = undefined;\n        })\n            .catch((err) => {\n            this._pendingFetch = undefined;\n            throw err;\n        }));\n        await this._pendingFetch;\n    }\n}\nfunction createRemoteJWKSet(url, options) {\n    const set = new RemoteJWKSet(url, options);\n    const remoteJWKSet = async (protectedHeader, token) => set.getKey(protectedHeader, token);\n    Object.defineProperties(remoteJWKSet, {\n        coolingDown: {\n            get: () => set.coolingDown(),\n            enumerable: true,\n            configurable: false,\n        },\n        fresh: {\n            get: () => set.fresh(),\n            enumerable: true,\n            configurable: false,\n        },\n        reload: {\n            value: () => set.reload(),\n            enumerable: true,\n            configurable: false,\n            writable: false,\n        },\n        reloading: {\n            get: () => !!set._pendingFetch,\n            enumerable: true,\n            configurable: false,\n        },\n        jwks: {\n            value: () => set._local?.jwks(),\n            enumerable: true,\n            configurable: false,\n            writable: false,\n        },\n    });\n    return remoteJWKSet;\n}\n\nconst decode = decode$1;\n\nfunction decodeJwt(jwt) {\n    if (typeof jwt !== 'string')\n        throw new JWTInvalid('JWTs must use Compact JWS serialization, JWT must be a string');\n    const { 1: payload, length } = jwt.split('.');\n    if (length === 5)\n        throw new JWTInvalid('Only JWTs using Compact JWS serialization can be decoded');\n    if (length !== 3)\n        throw new JWTInvalid('Invalid JWT');\n    if (!payload)\n        throw new JWTInvalid('JWTs must contain a payload');\n    let decoded;\n    try {\n        decoded = decode(payload);\n    }\n    catch {\n        throw new JWTInvalid('Failed to base64url decode the payload');\n    }\n    let result;\n    try {\n        result = JSON.parse(decoder.decode(decoded));\n    }\n    catch {\n        throw new JWTInvalid('Failed to parse the decoded payload as JSON');\n    }\n    if (!isObject(result))\n        throw new JWTInvalid('Invalid JWT Claims Set');\n    return result;\n}\n\nfunction getModulusLengthOption(options) {\n    const modulusLength = options?.modulusLength ?? 2048;\n    if (typeof modulusLength !== 'number' || modulusLength < 2048) {\n        throw new JOSENotSupported('Invalid or unsupported modulusLength option provided, 2048 bits or larger keys must be used');\n    }\n    return modulusLength;\n}\nasync function generateKeyPair$1(alg, options) {\n    let algorithm;\n    let keyUsages;\n    switch (alg) {\n        case 'PS256':\n        case 'PS384':\n        case 'PS512':\n            algorithm = {\n                name: 'RSA-PSS',\n                hash: `SHA-${alg.slice(-3)}`,\n                publicExponent: new Uint8Array([0x01, 0x00, 0x01]),\n                modulusLength: getModulusLengthOption(options),\n            };\n            keyUsages = ['sign', 'verify'];\n            break;\n        case 'RS256':\n        case 'RS384':\n        case 'RS512':\n            algorithm = {\n                name: 'RSASSA-PKCS1-v1_5',\n                hash: `SHA-${alg.slice(-3)}`,\n                publicExponent: new Uint8Array([0x01, 0x00, 0x01]),\n                modulusLength: getModulusLengthOption(options),\n            };\n            keyUsages = ['sign', 'verify'];\n            break;\n        case 'RSA-OAEP':\n        case 'RSA-OAEP-256':\n        case 'RSA-OAEP-384':\n        case 'RSA-OAEP-512':\n            algorithm = {\n                name: 'RSA-OAEP',\n                hash: `SHA-${parseInt(alg.slice(-3), 10) || 1}`,\n                publicExponent: new Uint8Array([0x01, 0x00, 0x01]),\n                modulusLength: getModulusLengthOption(options),\n            };\n            keyUsages = ['decrypt', 'unwrapKey', 'encrypt', 'wrapKey'];\n            break;\n        case 'ES256':\n            algorithm = { name: 'ECDSA', namedCurve: 'P-256' };\n            keyUsages = ['sign', 'verify'];\n            break;\n        case 'ES384':\n            algorithm = { name: 'ECDSA', namedCurve: 'P-384' };\n            keyUsages = ['sign', 'verify'];\n            break;\n        case 'ES512':\n            algorithm = { name: 'ECDSA', namedCurve: 'P-521' };\n            keyUsages = ['sign', 'verify'];\n            break;\n        case 'Ed25519':\n            algorithm = { name: 'Ed25519' };\n            keyUsages = ['sign', 'verify'];\n            break;\n        case 'EdDSA': {\n            keyUsages = ['sign', 'verify'];\n            const crv = options?.crv ?? 'Ed25519';\n            switch (crv) {\n                case 'Ed25519':\n                case 'Ed448':\n                    algorithm = { name: crv };\n                    break;\n                default:\n                    throw new JOSENotSupported('Invalid or unsupported crv option provided');\n            }\n            break;\n        }\n        case 'ECDH-ES':\n        case 'ECDH-ES+A128KW':\n        case 'ECDH-ES+A192KW':\n        case 'ECDH-ES+A256KW': {\n            keyUsages = ['deriveKey', 'deriveBits'];\n            const crv = options?.crv ?? 'P-256';\n            switch (crv) {\n                case 'P-256':\n                case 'P-384':\n                case 'P-521': {\n                    algorithm = { name: 'ECDH', namedCurve: crv };\n                    break;\n                }\n                case 'X25519':\n                case 'X448':\n                    algorithm = { name: crv };\n                    break;\n                default:\n                    throw new JOSENotSupported('Invalid or unsupported crv option provided, supported values are P-256, P-384, P-521, X25519, and X448');\n            }\n            break;\n        }\n        default:\n            throw new JOSENotSupported('Invalid or unsupported JWK \"alg\" (Algorithm) Parameter value');\n    }\n    return crypto$1.subtle.generateKey(algorithm, options?.extractable ?? false, keyUsages);\n}\n\nasync function generateKeyPair(alg, options) {\n    return generateKeyPair$1(alg, options);\n}\n\n/**\n * When the client does not have a webid profile document, use this.\n *\n * @param registration_endpoint\n * @param redirect__uris\n * @returns\n */\nconst requestDynamicClientRegistration = async (registration_endpoint, client_details) => {\n    // prepare dynamic client registration\n    const client_registration_request_body = {\n        ...client_details,\n        grant_types: [\"authorization_code\", \"refresh_token\"],\n        // id_token_signed_response_alg: \"ES256\", // omitting as NSS does not support ES256 while CSS does not support RS256\n        token_endpoint_auth_method: \"none\",\n        application_type: \"web\",\n        subject_type: \"public\",\n    };\n    // register\n    return fetch(registration_endpoint, {\n        method: \"POST\",\n        headers: {\n            \"Content-Type\": \"application/json\",\n        },\n        body: JSON.stringify(client_registration_request_body),\n    });\n};\n\n/**\n * Login with the idp, using a provided `client_id` or dynamic client registration if none provided.\n *\n * @param idp\n * @param redirect_uri\n */\nconst redirectForLogin = async (idp, redirect_uri, client_details) => {\n    // RFC 6749 - Section 3.1.2 - sanitize redirect_uri\n    const redirect_uri_ = new URL(redirect_uri);\n    const redirect_uri_sane = redirect_uri_.origin + redirect_uri_.pathname + redirect_uri_.search;\n    // lookup openid configuration of idp\n    const idp_origin = new URL(idp).origin;\n    const openid_configuration = await fetch(`${idp_origin}/.well-known/openid-configuration`)\n        .then((response) => {\n        if (!response.ok) {\n            throw new Error(`HTTP error! Status: ${response.status}`);\n        }\n        return response.json();\n    });\n    // RFC 9207 iss check: remember the identity provider (idp) / issuer (iss) - relaxing for trailing slash\n    const issuer = openid_configuration[\"issuer\"];\n    const trim_trailing_slash = (url) => (url.endsWith('/') ? url.slice(0, -1) : url);\n    if (trim_trailing_slash(idp) !== trim_trailing_slash(issuer)) { // expected idp matches received issuer mod trailing slash?\n        throw new Error(\"RFC 9207 - iss !== idp - \" + issuer + \" !== \" + idp);\n    }\n    sessionStorage.setItem(\"idp\", issuer);\n    // remember token endpoint\n    sessionStorage.setItem(\"token_endpoint\", openid_configuration[\"token_endpoint\"]);\n    // remember jwks_uri for later token verification\n    sessionStorage.setItem(\"jwks_uri\", openid_configuration[\"jwks_uri\"]);\n    let client_id = client_details?.client_id;\n    // no client_id => attempt dynamic registration\n    if (!client_id) {\n        // use registration endpoint\n        const registration_endpoint = openid_configuration[\"registration_endpoint\"];\n        // get client registration\n        const client_registration = await requestDynamicClientRegistration(registration_endpoint, client_details ?? { redirect_uris: [redirect_uri_sane] })\n            .then((response) => {\n            if (!response.ok) {\n                throw new Error(`HTTP error! Status: ${response.status}`);\n            }\n            return response.json();\n        });\n        client_id = client_registration[\"client_id\"];\n    }\n    // remember client_id if not URL\n    try {\n        new URL(client_id);\n    }\n    catch {\n        sessionStorage.setItem(\"client_id\", client_id);\n    }\n    // RFC 7636 PKCE, remember code verifer\n    const { pkce_code_verifier, pkce_code_challenge } = await getPKCEcode();\n    sessionStorage.setItem(\"pkce_code_verifier\", pkce_code_verifier);\n    // RFC 6749 OAuth 2.0 - CSRF token\n    const csrf_token = window.crypto.randomUUID();\n    sessionStorage.setItem(\"csrf_token\", csrf_token);\n    // redirect to idp\n    const redirect_to_idp = openid_configuration[\"authorization_endpoint\"] +\n        `?response_type=code` +\n        `&redirect_uri=${encodeURIComponent(redirect_uri_sane)}` +\n        `&scope=openid offline_access webid` +\n        `&client_id=${encodeURIComponent(client_id)}` +\n        `&code_challenge_method=S256` +\n        `&code_challenge=${pkce_code_challenge}` +\n        `&state=${csrf_token}` +\n        `&prompt=consent`; // this query parameter value MUST be present for CSS v7 to issue a refresh token ( // TODO open issue because prompting is the default behaviour but without this query param no refresh token is provided despite the \"remember this client\" box being checked)\n    window.location.href = redirect_to_idp;\n};\n/**\n * RFC 7636 PKCE\n * @returns PKCE code verifier and PKCE code challenge\n */\nconst getPKCEcode = async () => {\n    // create random string as PKCE code verifier\n    const pkce_code_verifier = window.crypto.randomUUID() + \"-\" + window.crypto.randomUUID();\n    // hash the verifier and base64URL encode as PKCE code challenge\n    const digest = new Uint8Array(await window.crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(pkce_code_verifier)));\n    const pkce_code_challenge = btoa(String.fromCharCode(...digest))\n        .replace(/\\+/g, \"-\")\n        .replace(/\\//g, \"_\")\n        .replace(/=+$/, \"\");\n    return { pkce_code_verifier, pkce_code_challenge };\n};\n/**\n * On incoming redirect from OpenID provider (idp/iss),\n * URL contains authrization code, issuer (idp) and state (csrf token),\n * get an access token for the authrization code.\n */\nconst onIncomingRedirect = async (client_details, database) => {\n    const url = new URL(window.location.href);\n    // authorization code\n    const authorization_code = url.searchParams.get(\"code\");\n    // if no code, session remains unauthenticated at this point\n    if (authorization_code === null) {\n        return { clientDetails: client_details };\n    }\n    // RFC 9207 issuer check\n    const idp = sessionStorage.getItem(\"idp\");\n    if (idp === null || url.searchParams.get(\"iss\") !== idp) {\n        throw new Error(\"RFC 9207 - iss !== idp - \" + url.searchParams.get(\"iss\") + \" !== \" + idp);\n    }\n    // RFC 6749 OAuth 2.0\n    if (url.searchParams.get(\"state\") !== sessionStorage.getItem(\"csrf_token\")) {\n        throw new Error(\"RFC 6749 - state !== csrf_token - \" + url.searchParams.get(\"state\") + \" !== \" + sessionStorage.getItem(\"csrf_token\"));\n    }\n    // remove redirect query parameters from URL\n    url.searchParams.delete(\"iss\");\n    url.searchParams.delete(\"state\");\n    url.searchParams.delete(\"code\");\n    window.history.pushState({}, document.title, url.toString());\n    // prepare token request\n    const pkce_code_verifier = sessionStorage.getItem(\"pkce_code_verifier\");\n    if (pkce_code_verifier === null) {\n        throw new Error(\"Access Token Request preparation - Could not find in sessionStorage: pkce_code_verifier\");\n    }\n    const client_id = client_details?.client_id || sessionStorage.getItem(\"client_id\");\n    if (!client_id) {\n        throw new Error(\"Access Token Request preparation - Could not find in sessionStorage: client_id (dynamic registration)\");\n    }\n    const token_endpoint = sessionStorage.getItem(\"token_endpoint\");\n    if (token_endpoint === null) {\n        throw new Error(\"Access Token Request preparation - Could not find in sessionStorage: token_endpoint\");\n    }\n    // RFC 9449 DPoP\n    const key_pair = await generateKeyPair(\"ES256\");\n    // get access token\n    const token_response = await requestAccessToken(authorization_code, pkce_code_verifier, url.toString(), client_id, token_endpoint, key_pair)\n        .then((response) => {\n        if (!response.ok) {\n            throw new Error(`HTTP error! Status: ${response.status}`);\n        }\n        return response.json();\n    });\n    // verify access_token // ! Solid-OIDC specification says it should be a dpop-bound `id token` but implementations provide a dpop-bound `access token`\n    const accessToken = token_response[\"access_token\"];\n    const jwks_uri = sessionStorage.getItem(\"jwks_uri\");\n    if (jwks_uri === null) {\n        throw new Error(\"Access Token validation preparation - Could not find in sessionStorage: jwks_uri\");\n    }\n    const jwks = createRemoteJWKSet(new URL(jwks_uri));\n    const { payload } = await jwtVerify(accessToken, jwks, {\n        issuer: idp, // RFC 9207\n        audience: \"solid\", // RFC 7519 // ! \"solid\" as per implementations ...\n        // exp, nbf, iat - handled automatically\n    });\n    // check dpop thumbprint\n    const dpopThumbprint = await calculateJwkThumbprint(await exportJWK(key_pair.publicKey));\n    if (payload[\"cnf\"][\"jkt\"] !== dpopThumbprint) {\n        throw new Error(\"Access Token validation failed on `jkt`: jkt !== DPoP thumbprint - \" + payload[\"cnf\"][\"jkt\"] + \" !== \" + dpopThumbprint);\n    }\n    // check client_id\n    if (payload[\"client_id\"] !== client_id) {\n        throw new Error(\"Access Token validation failed on `client_id`: JWT payload !== client_id - \" + payload[\"client_id\"] + \" !== \" + client_id);\n    }\n    // summarise session info\n    const token_details = { ...token_response, dpop_key_pair: key_pair };\n    const idp_details = { idp, jwks_uri, token_endpoint };\n    if (!client_details)\n        client_details = { redirect_uris: [url.toString()] };\n    client_details.client_id = client_id;\n    // and persist refresh token details\n    if (database) {\n        await database.init();\n        await Promise.all([\n            database.setItem(\"idp\", idp),\n            database.setItem(\"jwks_uri\", jwks_uri),\n            database.setItem(\"token_endpoint\", token_endpoint),\n            database.setItem(\"client_id\", client_id),\n            database.setItem(\"dpop_keypair\", key_pair),\n            database.setItem(\"refresh_token\", token_response[\"refresh_token\"])\n        ]);\n        database.close();\n    }\n    // clean session storage\n    sessionStorage.removeItem(\"csrf_token\");\n    sessionStorage.removeItem(\"pkce_code_verifier\");\n    sessionStorage.removeItem(\"idp\");\n    sessionStorage.removeItem(\"jwks_uri\");\n    sessionStorage.removeItem(\"token_endpoint\");\n    sessionStorage.removeItem(\"client_id\");\n    // return session information\n    return {\n        clientDetails: client_details,\n        idpDetails: idp_details,\n        tokenDetails: token_details\n    };\n};\n/**\n * Request an dpop-bound access token from a token endpoint\n * @param authorization_code\n * @param pkce_code_verifier\n * @param redirect_uri\n * @param client_id\n * @param token_endpoint\n * @param key_pair\n * @returns\n */\nconst requestAccessToken = async (authorization_code, pkce_code_verifier, redirect_uri, client_id, token_endpoint, key_pair) => {\n    // prepare public key to bind access token to\n    const jwk_public_key = await exportJWK(key_pair.publicKey);\n    jwk_public_key.alg = \"ES256\";\n    // sign the access token request DPoP token\n    const dpop = await new SignJWT({\n        htu: token_endpoint,\n        htm: \"POST\",\n    })\n        .setIssuedAt()\n        .setJti(window.crypto.randomUUID())\n        .setProtectedHeader({\n        alg: \"ES256\",\n        typ: \"dpop+jwt\",\n        jwk: jwk_public_key,\n    })\n        .sign(key_pair.privateKey);\n    return fetch(token_endpoint, {\n        method: \"POST\",\n        headers: {\n            dpop,\n            \"Content-Type\": \"application/x-www-form-urlencoded\",\n        },\n        body: new URLSearchParams({\n            grant_type: \"authorization_code\",\n            code: authorization_code,\n            code_verifier: pkce_code_verifier,\n            redirect_uri: redirect_uri,\n            client_id: client_id,\n        }),\n    });\n};\n\nconst renewTokens = async (sessionDatabase) => {\n    // remember session details\n    try {\n        await sessionDatabase.init();\n        const client_id = await sessionDatabase.getItem(\"client_id\");\n        const token_endpoint = await sessionDatabase.getItem(\"token_endpoint\");\n        const key_pair = await sessionDatabase.getItem(\"dpop_keypair\");\n        const refresh_token = await sessionDatabase.getItem(\"refresh_token\");\n        if (client_id === null || token_endpoint === null || key_pair === null || refresh_token === null) {\n            // we can not restore the old session\n            throw new Error(\"Could not refresh tokens: details missing from database.\");\n        }\n        const token_response = await requestFreshTokens(refresh_token, client_id, token_endpoint, key_pair)\n            .then((response) => {\n            if (!response.ok) {\n                throw new Error(`HTTP error! Status: ${response.status}`);\n            }\n            return response.json();\n        });\n        // verify access_token // ! Solid-OIDC specification says it should be a dpop-bound `id token` but implementations provide a dpop-bound `access token`\n        const accessToken = token_response[\"access_token\"];\n        const idp = await sessionDatabase.getItem(\"idp\");\n        if (idp === null) {\n            throw new Error(\"Access Token validation preparation - Could not find in sessionDatabase: idp\");\n        }\n        const jwks_uri = await sessionDatabase.getItem(\"jwks_uri\");\n        if (jwks_uri === null) {\n            throw new Error(\"Access Token validation preparation - Could not find in sessionDatabase: jwks_uri\");\n        }\n        const jwks = createRemoteJWKSet(new URL(jwks_uri));\n        const { payload } = await jwtVerify(accessToken, jwks, {\n            issuer: idp, // RFC 9207\n            audience: \"solid\", // RFC 7519 // ! \"solid\" as per implementations ...\n            // exp, nbf, iat - handled automatically\n        });\n        // check dpop thumbprint\n        const dpopThumbprint = await calculateJwkThumbprint(await exportJWK(key_pair.publicKey));\n        if (payload[\"cnf\"][\"jkt\"] !== dpopThumbprint) {\n            throw new Error(\"Access Token validation failed on `jkt`: jkt !== DPoP thumbprint - \" + payload[\"cnf\"][\"jkt\"] + \" !== \" + dpopThumbprint);\n        }\n        // check client_id\n        if (payload[\"client_id\"] !== client_id) {\n            throw new Error(\"Access Token validation failed on `client_id`: JWT payload !== client_id - \" + payload[\"client_id\"] + \" !== \" + client_id);\n        }\n        // set new refresh token for token rotation\n        await sessionDatabase.setItem(\"refresh_token\", token_response[\"refresh_token\"]);\n        return {\n            ...token_response,\n            dpop_key_pair: key_pair,\n        };\n    }\n    finally {\n        sessionDatabase.close();\n    }\n};\n/**\n * Request an dpop-bound access token from a token endpoint using a refresh token\n * @param authorization_code\n * @param pkce_code_verifier\n * @param redirect_uri\n * @param client_id\n * @param token_endpoint\n * @param key_pair\n * @returns\n */\nconst requestFreshTokens = async (refresh_token, client_id, token_endpoint, key_pair) => {\n    // prepare public key to bind access token to\n    const jwk_public_key = await exportJWK(key_pair.publicKey);\n    jwk_public_key.alg = \"ES256\";\n    // sign the access token request DPoP token\n    const dpop = await new SignJWT({\n        htu: token_endpoint,\n        htm: \"POST\",\n    })\n        .setIssuedAt()\n        .setJti(self.crypto.randomUUID())\n        .setProtectedHeader({\n        alg: \"ES256\",\n        typ: \"dpop+jwt\",\n        jwk: jwk_public_key,\n    })\n        .sign(key_pair.privateKey);\n    return fetch(token_endpoint, {\n        method: \"POST\",\n        headers: {\n            dpop,\n            \"Content-Type\": \"application/x-www-form-urlencoded\",\n        },\n        body: new URLSearchParams({\n            grant_type: \"refresh_token\",\n            refresh_token,\n            client_id\n        }),\n    });\n};\n\nvar SessionEvents;\n(function (SessionEvents) {\n    SessionEvents[\"STATE_CHANGE\"] = \"sessionStateChange\";\n    SessionEvents[\"EXPIRATION_WARNING\"] = \"sessionExpirationWarning\";\n    SessionEvents[\"EXPIRATION\"] = \"sessionExpiration\";\n})(SessionEvents || (SessionEvents = {}));\n//\n//\n//  Basic implementation\n//\n//\n/**\n * The SessionCore class manages session state and core logic but does not handle the refresh lifecycle.\n * It receives {@link SessionOptions} with a database to be able to restore a session.\n * That database can be re-used by (your!) surrounding implementation to handle the refresh lifecycle.\n * If no database was provided, refresh information cannot be stored, and thus token refresh (via the refresh token grant) is not possible in this case.\n *\n * If you are building a web app, use the Session implementation provided in the default `/web` version of this library.\n */\nclass SessionCore extends EventTarget {\n    isActive_ = false;\n    exp_;\n    webId_ = undefined;\n    currentAth_ = undefined;\n    information;\n    database;\n    refreshPromise;\n    resolveRefresh;\n    rejectRefresh;\n    constructor(clientDetails, sessionOptions) {\n        super();\n        this.authFetch = this.authFetch.bind(this);\n        this.information = { clientDetails };\n        this.database = sessionOptions?.database;\n        if (sessionOptions?.onSessionStateChange)\n            this.addEventListener(SessionEvents.STATE_CHANGE, (event) => sessionOptions.onSessionStateChange?.(event));\n        if (sessionOptions?.onSessionExpirationWarning)\n            this.addEventListener(SessionEvents.EXPIRATION_WARNING, (event) => sessionOptions?.onSessionExpirationWarning?.(event));\n        if (sessionOptions?.onSessionExpiration)\n            this.addEventListener(SessionEvents.EXPIRATION, (event) => sessionOptions?.onSessionExpiration?.(event));\n    }\n    async login(idp, redirect_uri) {\n        await redirectForLogin(idp, redirect_uri, this.information.clientDetails);\n    }\n    /**\n     * Handles the redirect from the identity provider after a login attempt.\n     * It attempts to retrieve tokens using the authorization code.\n     * Upon success, it tries to persist information to refresh tokens in the session database.\n     * If no database was provided, no information is persisted.\n     */\n    async handleRedirectFromLogin() {\n        // Redirect after Authorization Code Grant // memory via sessionStorage\n        const newSessionInfo = await onIncomingRedirect(this.information.clientDetails, this.database);\n        // no session - we remain unauthenticated\n        if (!newSessionInfo.tokenDetails)\n            return;\n        // we got a session\n        this.information.clientDetails = newSessionInfo.clientDetails;\n        this.information.idpDetails = newSessionInfo.idpDetails;\n        await this.setTokenDetails(newSessionInfo.tokenDetails);\n        // callback state change \n        this.dispatchStateChangeEvent(); // we logged in\n    }\n    /**\n     * Handles session restoration using the refresh token grant.\n     */\n    async restore() {\n        if (!this.database) {\n            throw new Error(\"Could not refresh tokens: missing database. Provide database in sessionOption.\");\n        }\n        if (this.refreshPromise) {\n            return this.refreshPromise;\n        }\n        this.refreshPromise = new Promise((resolve, reject) => {\n            this.resolveRefresh = resolve;\n            this.rejectRefresh = reject;\n        });\n        // Restore session using Refresh Token Grant \n        const wasActive = this.isActive;\n        renewTokens(this.database)\n            .then(tokenDetails => this.setTokenDetails(tokenDetails))\n            .then(() => this.resolveRefresh())\n            .catch(error => {\n            if (this.isActive) {\n                this.rejectRefresh(new Error(error || 'Token refresh failed'));\n                // do not change state (yet), let the app decide if they want to logout or if they just want to retry.\n                if (!this.isExpired()) {\n                    this.dispatchExpirationWarningEvent();\n                }\n                else {\n                    this.dispatchExpirationEvent();\n                }\n            }\n            else {\n                this.rejectRefresh(new Error(\"No session to restore.\"));\n            }\n        }).finally(() => {\n            this.clearRefreshPromise();\n            if (wasActive !== this.isActive)\n                this.dispatchStateChangeEvent();\n        });\n        return this.refreshPromise;\n    }\n    /**\n     * This logs the user out.\n     * Clears all session-related information, including IDP details and tokens.\n     * Client ID is preserved if it is a URI.\n     */\n    async logout() {\n        // clean session data\n        this.isActive_ = false;\n        this.exp_ = undefined;\n        this.webId_ = undefined;\n        this.currentAth_ = undefined;\n        this.information.idpDetails = undefined;\n        this.information.tokenDetails = undefined;\n        // client details are preserved\n        if (this.refreshPromise && this.rejectRefresh) {\n            this.rejectRefresh(new Error('Logout during token refresh.'));\n            this.clearRefreshPromise();\n        }\n        // clean session database\n        if (this.database) {\n            await this.database.init();\n            await this.database.clear();\n            this.database.close();\n        }\n        // callback state change\n        this.dispatchStateChangeEvent(); // we logged out\n    }\n    /**\n     * Makes an HTTP fetch request.\n     * If a session is active, it includes the DPoP token and the access token in the `Authorization` header.\n     *\n     * @param input The URL or Request object to fetch.\n     * @param init Optional fetch request options (RequestInit). Headers for `Authorization` and `DPoP` will be overwritten if a session is active.\n     * @param dpopPayload Optional payload for the DPoP token. If provided, it overrides the default `htu` and `htm` claims.\n     * @returns A promise that resolves to the fetch Response.\n     */\n    async authFetch(input, init, dpopPayload) {\n        // if there is not session established, just delegate to the default fetch\n        if (!this.isActive) {\n            return fetch(input, init);\n        }\n        // TODO\n        // TODO do HEAD request to check if authentication is actually required, only then include tokens\n        // TODO\n        // prepare authenticated call using a DPoP token (either provided payload, or default)\n        let url;\n        let method;\n        let headers;\n        // wrangle fetch input parameters into place\n        if (input instanceof Request) {\n            url = new URL(input.url);\n            method = init?.method || input?.method || 'GET';\n            headers = new Headers(input.headers);\n        }\n        else {\n            init = init || {};\n            url = new URL(input.toString());\n            method = init.method || 'GET';\n            headers = init.headers ? new Headers(init.headers) : new Headers();\n        }\n        // create DPoP token, and add tokens to request\n        await this._renewTokensIfExpired();\n        dpopPayload = dpopPayload ?? {\n            htu: `${url.origin}${url.pathname}`,\n            htm: method.toUpperCase()\n        };\n        const dpop = await this._createSignedDPoPToken(dpopPayload);\n        // overwrite headers: authorization, dpop\n        headers.set(\"dpop\", dpop);\n        headers.set(\"authorization\", `DPoP ${this.information.tokenDetails.access_token}`);\n        // check explicitly; to avoid unexpected behaviour\n        if (input instanceof Request) { // clone the provided request, and override the headers\n            return fetch(new Request(input, { ...init, headers }));\n        }\n        // just override the headers\n        return fetch(url, { ...init, headers });\n    }\n    // \n    // Setters\n    //\n    async setTokenDetails(tokenDetails) {\n        this.information.tokenDetails = tokenDetails;\n        await this._updateSessionDetailsFromToken(tokenDetails.access_token);\n    }\n    clearRefreshPromise() {\n        this.refreshPromise = undefined;\n        this.resolveRefresh = undefined;\n        this.rejectRefresh = undefined;\n    }\n    //\n    // Getters\n    //\n    get isActive() {\n        return this.isActive_;\n    }\n    get webId() {\n        return this.webId_;\n    }\n    isExpired() {\n        if (!this.exp_)\n            return true;\n        return this._isTokenExpired(this.exp_);\n    }\n    getExpiresIn() {\n        if (!this.exp_)\n            return -1;\n        return this._getTokenTTL(this.exp_);\n    }\n    getTokenDetails() {\n        return this.information.tokenDetails;\n    }\n    //\n    // Helpers\n    //\n    /**\n     * Check if the current token is expired (which may happen during device/browser/tab hibernation),\n     * and if expired, restore the session.\n     */\n    async _renewTokensIfExpired() {\n        if (this.isExpired()) {\n            if (!this.refreshPromise) {\n                await this.restore(); // Initiate and wait\n            }\n            else {\n                await this.refreshPromise; // Wait for already pending\n            }\n        }\n    }\n    /**\n     * RFC 9449 - Hash of the access token\n     */\n    async _computeAth(accessToken) {\n        // Convert the ASCII string of the token to a Uint8Array\n        const encoder = new TextEncoder();\n        const data = encoder.encode(accessToken); // ASCII by default\n        // Compute SHA-256 hash\n        const hashBuffer = await crypto.subtle.digest('SHA-256', data);\n        // Convert ArrayBuffer to base64url string\n        const hashArray = Array.from(new Uint8Array(hashBuffer));\n        const base64 = btoa(String.fromCharCode(...hashArray));\n        // Convert base64 to base64url\n        const base64url = base64\n            .replace(/\\+/g, '-')\n            .replace(/\\//g, '_')\n            .replace(/=+$/, '');\n        return base64url;\n    }\n    /**\n     * Creates a signed DPoP (Demonstration of Proof-of-Possession) token.\n     *\n     * @param payload The payload to include in the DPoP token. By default, it includes `htu` (HTTP target URI) and `htm` (HTTP method).\n     * @returns A promise that resolves to the signed DPoP token string.\n     * @throws Error if the session has not been initialized - if no token details are available.\n     */\n    async _createSignedDPoPToken(payload) {\n        if (!this.information.tokenDetails || !this.currentAth_) {\n            throw new Error(\"Session not established.\");\n        }\n        payload.ath = this.currentAth_;\n        const jwk_public_key = await exportJWK(this.information.tokenDetails.dpop_key_pair.publicKey);\n        return new SignJWT(payload)\n            .setIssuedAt()\n            .setJti(window.crypto.randomUUID())\n            .setProtectedHeader({\n            alg: \"ES256\",\n            typ: \"dpop+jwt\",\n            jwk: jwk_public_key,\n        })\n            .sign(this.information.tokenDetails.dpop_key_pair.privateKey);\n    }\n    async _updateSessionDetailsFromToken(access_token) {\n        if (!access_token) {\n            await this.logout();\n            return;\n        }\n        try {\n            const decodedToken = decodeJwt(access_token);\n            const webId = decodedToken.webid;\n            if (!webId) {\n                throw new Error('Missing webid claim in access token');\n            }\n            const exp = decodedToken.exp;\n            if (!exp) {\n                throw new Error('Missing exp claim in access token');\n            }\n            this.currentAth_ = await this._computeAth(access_token); // must be done before session set to active\n            this.webId_ = webId;\n            this.exp_ = exp;\n            this.isActive_ = true;\n        }\n        catch (error) {\n            await this.logout();\n        }\n    }\n    /**\n      * Checks if a JWT expiration timestamp ('exp') has passed.\n      */\n    _isTokenExpired(exp, bufferSeconds = 0) {\n        if (typeof exp !== 'number' || isNaN(exp)) {\n            return true;\n        }\n        return this._getTokenTTL(exp, bufferSeconds) < 0;\n    }\n    _getTokenTTL(exp, bufferSeconds = 0) {\n        const currentTimeSeconds = Math.floor(Date.now() / 1000);\n        return exp - (currentTimeSeconds + bufferSeconds);\n    }\n    // \n    // Events\n    //\n    dispatchStateChangeEvent() {\n        this.dispatchEvent(new CustomEvent(SessionEvents.STATE_CHANGE, { detail: { isActive: this.isActive, webId: this.webId } }));\n    }\n    dispatchExpirationWarningEvent() {\n        this.dispatchEvent(new CustomEvent(SessionEvents.EXPIRATION_WARNING, { detail: { expires_in: this.getExpiresIn() } }));\n    }\n    dispatchExpirationEvent() {\n        this.dispatchEvent(new CustomEvent(SessionEvents.EXPIRATION));\n    }\n}\n\n// extracting this from Session.ts such that the jest tests would compile :)\nconst getWorkerUrl = () => new URL('./RefreshWorker.js', import.meta.url);\n\nvar RefreshMessageTypes;\n(function (RefreshMessageTypes) {\n    RefreshMessageTypes[\"SCHEDULE\"] = \"SCHEDULE\";\n    RefreshMessageTypes[\"REFRESH\"] = \"REFRESH\";\n    RefreshMessageTypes[\"STOP\"] = \"STOP\";\n    RefreshMessageTypes[\"DISCONNECT\"] = \"DISCONNECT\";\n    RefreshMessageTypes[\"TOKEN_DETAILS\"] = \"TOKEN_DETAILS\";\n    RefreshMessageTypes[\"ERROR_ON_REFRESH\"] = \"ERROR_ON_REFRESH\";\n    RefreshMessageTypes[\"EXPIRED\"] = \"EXPIRED\";\n})(RefreshMessageTypes || (RefreshMessageTypes = {}));\n\n/**\n * A simple IndexedDB wrapper.\n */\nclass SessionIDB {\n    dbName;\n    storeName;\n    dbVersion;\n    db = null;\n    /**\n     * Creates a new instance\n     * @param dbName The name of the IndexedDB database\n     * @param storeName The name of the object store\n     * @param dbVersion The database version\n     */\n    constructor(dbName = 'soidc', storeName = 'session', dbVersion = 1) {\n        this.dbName = dbName;\n        this.storeName = storeName;\n        this.dbVersion = dbVersion;\n    }\n    /**\n     * Initializes the IndexedDB database\n     * @returns Promise that resolves when the database is ready\n     */\n    async init() {\n        return new Promise((resolve, reject) => {\n            const request = indexedDB.open(this.dbName, this.dbVersion);\n            request.onerror = (event) => {\n                reject(new Error(`Database error: ${event.target.error}`));\n            };\n            request.onsuccess = (event) => {\n                this.db = event.target.result;\n                resolve(this);\n            };\n            request.onupgradeneeded = (event) => {\n                const db = event.target.result;\n                // Check if the object store already exists, if not create it\n                if (!db.objectStoreNames.contains(this.storeName)) {\n                    db.createObjectStore(this.storeName);\n                }\n            };\n        });\n    }\n    /**\n     * Stores any value in the database with the given ID as key\n     * @param id The identifier/key for the value\n     * @param value The value to store\n     */\n    async setItem(id, value) {\n        if (!this.db) {\n            await this.init();\n        }\n        return new Promise((resolve, reject) => {\n            const transaction = this.db.transaction(this.storeName, 'readwrite');\n            // Handle transation\n            transaction.oncomplete = () => {\n                resolve();\n            };\n            transaction.onerror = (event) => {\n                reject(new Error(`Transaction error for setItem(${id},...): ${event.target.error}`));\n            };\n            transaction.onabort = (event) => {\n                reject(new Error(`Transaction aborted for setItem(${id},...): ${event.target.error}`));\n            };\n            // Perform the request within the transaction\n            const store = transaction.objectStore(this.storeName);\n            store.put(value, id);\n        });\n    }\n    /**\n      * Retrieves a value from the database by ID\n      * @param id The identifier/key for the value\n      * @returns The stored value or null if not found\n      */\n    async getItem(id) {\n        if (!this.db) {\n            await this.init();\n        }\n        return new Promise((resolve, reject) => {\n            const transaction = this.db.transaction(this.storeName, 'readonly');\n            // Handle transation\n            transaction.onerror = (event) => {\n                reject(new Error(`Transaction error for getItem(${id}): ${event.target.error}`));\n            };\n            transaction.onabort = (event) => {\n                reject(new Error(`Transaction aborted for getItem(${id}): ${event.target.error}`));\n            };\n            // Perform the request within the transaction\n            const store = transaction.objectStore(this.storeName);\n            const request = store.get(id);\n            request.onsuccess = () => {\n                resolve(request.result || null);\n            };\n        });\n    }\n    /**\n     * Removes an item from the database\n     * @param id The identifier of the item to remove\n     */\n    async deleteItem(id) {\n        if (!this.db) {\n            await this.init();\n        }\n        return new Promise((resolve, reject) => {\n            const transaction = this.db.transaction(this.storeName, 'readwrite');\n            // Handle transation\n            transaction.oncomplete = () => {\n                resolve();\n            };\n            transaction.onerror = (event) => {\n                reject(new Error(`Transaction error for deleteItem(${id}): ${event.target.error}`));\n            };\n            transaction.onabort = (event) => {\n                reject(new Error(`Transaction aborted for deleteItem(${id}): ${event.target.error}`));\n            };\n            // Perform the request within the transaction\n            const store = transaction.objectStore(this.storeName);\n            store.delete(id);\n        });\n    }\n    /**\n     * Clears all items from the database\n     */\n    async clear() {\n        if (!this.db) {\n            await this.init();\n        }\n        return new Promise((resolve, reject) => {\n            const transaction = this.db.transaction(this.storeName, 'readwrite');\n            // Handle transation\n            transaction.oncomplete = () => {\n                resolve();\n            };\n            transaction.onerror = (event) => {\n                reject(new Error(`Transaction error for clear(): ${event.target.error}`));\n            };\n            transaction.onabort = (event) => {\n                reject(new Error(`Transaction aborted for clear(): ${event.target.error}`));\n            };\n            // Perform the request within the transaction\n            const store = transaction.objectStore(this.storeName);\n            store.clear();\n        });\n    }\n    /**\n     * Closes the database connection\n     */\n    close() {\n        if (this.db) {\n            this.db.close();\n            this.db = null;\n        }\n    }\n}\n\n/**\n * This Session provides background token refreshing using a Web Worker.\n */\nclass WebWorkerSession extends SessionCore {\n    worker;\n    constructor(clientDetails, sessionOptions) {\n        const database = new SessionIDB();\n        const options = { ...sessionOptions, database };\n        super(clientDetails, options);\n        // Allow consumer to provide worker URL, or use default\n        const workerUrl = sessionOptions?.workerUrl ?? getWorkerUrl();\n        this.worker = new SharedWorker(workerUrl, { type: 'module' });\n        this.worker.port.onmessage = (event) => {\n            this.handleWorkerMessage(event.data).catch(console.error);\n        };\n        window.addEventListener('beforeunload', () => {\n            this.worker.port.postMessage({ type: RefreshMessageTypes.DISCONNECT });\n        });\n    }\n    async handleWorkerMessage(data) {\n        const { type, payload, error } = data;\n        switch (type) {\n            case RefreshMessageTypes.TOKEN_DETAILS:\n                const wasActive = this.isActive;\n                await this.setTokenDetails(payload.tokenDetails);\n                if (wasActive !== this.isActive)\n                    this.dispatchStateChangeEvent();\n                if (this.refreshPromise && this.resolveRefresh) {\n                    this.resolveRefresh();\n                    this.clearRefreshPromise();\n                }\n                break;\n            case RefreshMessageTypes.ERROR_ON_REFRESH:\n                if (this.isActive)\n                    this.dispatchExpirationWarningEvent();\n                if (this.refreshPromise && this.rejectRefresh) {\n                    if (this.isActive) {\n                        this.rejectRefresh(new Error(error || 'Token refresh failed'));\n                    }\n                    else {\n                        this.rejectRefresh(new Error(\"No session to restore\"));\n                    }\n                    this.clearRefreshPromise();\n                }\n                break;\n            case RefreshMessageTypes.EXPIRED:\n                if (this.isActive) {\n                    this.dispatchExpirationEvent();\n                    await this.logout();\n                }\n                if (this.refreshPromise && this.rejectRefresh) {\n                    this.rejectRefresh(new Error(error || 'Token refresh failed'));\n                    this.clearRefreshPromise();\n                }\n                break;\n        }\n    }\n    ;\n    async handleRedirectFromLogin() {\n        await super.handleRedirectFromLogin();\n        if (this.isActive) { // If login was successful, tell the worker to schedule refreshing\n            this.worker.port.postMessage({\n                type: RefreshMessageTypes.SCHEDULE,\n                payload: { ...this.getTokenDetails(), expires_in: this.getExpiresIn() }\n            });\n        }\n    }\n    async restore() {\n        if (this.refreshPromise) {\n            return this.refreshPromise;\n        }\n        this.refreshPromise = new Promise((resolve, reject) => {\n            this.resolveRefresh = resolve;\n            this.rejectRefresh = reject;\n        });\n        this.worker.port.postMessage({ type: RefreshMessageTypes.REFRESH });\n        return this.refreshPromise;\n    }\n    async logout() {\n        this.worker.port.postMessage({ type: RefreshMessageTypes.STOP });\n        await super.logout();\n    }\n}\n\nexport { WebWorkerSession as Session, SessionEvents, SessionIDB };\n//# sourceMappingURL=index.js.map\n","var crypto$1 = crypto;\nconst isCryptoKey = (key) => key instanceof CryptoKey;\n\nconst digest = async (algorithm, data) => {\n    const subtleDigest = `SHA-${algorithm.slice(-3)}`;\n    return new Uint8Array(await crypto$1.subtle.digest(subtleDigest, data));\n};\nvar digest$1 = digest;\n\nconst encoder = new TextEncoder();\nconst decoder = new TextDecoder();\nfunction concat(...buffers) {\n    const size = buffers.reduce((acc, { length }) => acc + length, 0);\n    const buf = new Uint8Array(size);\n    let i = 0;\n    for (const buffer of buffers) {\n        buf.set(buffer, i);\n        i += buffer.length;\n    }\n    return buf;\n}\n\nconst encodeBase64 = (input) => {\n    let unencoded = input;\n    if (typeof unencoded === 'string') {\n        unencoded = encoder.encode(unencoded);\n    }\n    const CHUNK_SIZE = 0x8000;\n    const arr = [];\n    for (let i = 0; i < unencoded.length; i += CHUNK_SIZE) {\n        arr.push(String.fromCharCode.apply(null, unencoded.subarray(i, i + CHUNK_SIZE)));\n    }\n    return btoa(arr.join(''));\n};\nconst encode = (input) => {\n    return encodeBase64(input).replace(/=/g, '').replace(/\\+/g, '-').replace(/\\//g, '_');\n};\nconst decodeBase64 = (encoded) => {\n    const binary = atob(encoded);\n    const bytes = new Uint8Array(binary.length);\n    for (let i = 0; i < binary.length; i++) {\n        bytes[i] = binary.charCodeAt(i);\n    }\n    return bytes;\n};\nconst decode$1 = (input) => {\n    let encoded = input;\n    if (encoded instanceof Uint8Array) {\n        encoded = decoder.decode(encoded);\n    }\n    encoded = encoded.replace(/-/g, '+').replace(/_/g, '/').replace(/\\s/g, '');\n    try {\n        return decodeBase64(encoded);\n    }\n    catch {\n        throw new TypeError('The input to be decoded is not correctly encoded.');\n    }\n};\n\nclass JOSEError extends Error {\n    constructor(message, options) {\n        super(message, options);\n        this.code = 'ERR_JOSE_GENERIC';\n        this.name = this.constructor.name;\n        Error.captureStackTrace?.(this, this.constructor);\n    }\n}\nJOSEError.code = 'ERR_JOSE_GENERIC';\nclass JWTClaimValidationFailed extends JOSEError {\n    constructor(message, payload, claim = 'unspecified', reason = 'unspecified') {\n        super(message, { cause: { claim, reason, payload } });\n        this.code = 'ERR_JWT_CLAIM_VALIDATION_FAILED';\n        this.claim = claim;\n        this.reason = reason;\n        this.payload = payload;\n    }\n}\nJWTClaimValidationFailed.code = 'ERR_JWT_CLAIM_VALIDATION_FAILED';\nclass JWTExpired extends JOSEError {\n    constructor(message, payload, claim = 'unspecified', reason = 'unspecified') {\n        super(message, { cause: { claim, reason, payload } });\n        this.code = 'ERR_JWT_EXPIRED';\n        this.claim = claim;\n        this.reason = reason;\n        this.payload = payload;\n    }\n}\nJWTExpired.code = 'ERR_JWT_EXPIRED';\nclass JOSEAlgNotAllowed extends JOSEError {\n    constructor() {\n        super(...arguments);\n        this.code = 'ERR_JOSE_ALG_NOT_ALLOWED';\n    }\n}\nJOSEAlgNotAllowed.code = 'ERR_JOSE_ALG_NOT_ALLOWED';\nclass JOSENotSupported extends JOSEError {\n    constructor() {\n        super(...arguments);\n        this.code = 'ERR_JOSE_NOT_SUPPORTED';\n    }\n}\nJOSENotSupported.code = 'ERR_JOSE_NOT_SUPPORTED';\nclass JWEDecryptionFailed extends JOSEError {\n    constructor(message = 'decryption operation failed', options) {\n        super(message, options);\n        this.code = 'ERR_JWE_DECRYPTION_FAILED';\n    }\n}\nJWEDecryptionFailed.code = 'ERR_JWE_DECRYPTION_FAILED';\nclass JWEInvalid extends JOSEError {\n    constructor() {\n        super(...arguments);\n        this.code = 'ERR_JWE_INVALID';\n    }\n}\nJWEInvalid.code = 'ERR_JWE_INVALID';\nclass JWSInvalid extends JOSEError {\n    constructor() {\n        super(...arguments);\n        this.code = 'ERR_JWS_INVALID';\n    }\n}\nJWSInvalid.code = 'ERR_JWS_INVALID';\nclass JWTInvalid extends JOSEError {\n    constructor() {\n        super(...arguments);\n        this.code = 'ERR_JWT_INVALID';\n    }\n}\nJWTInvalid.code = 'ERR_JWT_INVALID';\nclass JWKInvalid extends JOSEError {\n    constructor() {\n        super(...arguments);\n        this.code = 'ERR_JWK_INVALID';\n    }\n}\nJWKInvalid.code = 'ERR_JWK_INVALID';\nclass JWKSInvalid extends JOSEError {\n    constructor() {\n        super(...arguments);\n        this.code = 'ERR_JWKS_INVALID';\n    }\n}\nJWKSInvalid.code = 'ERR_JWKS_INVALID';\nclass JWKSNoMatchingKey extends JOSEError {\n    constructor(message = 'no applicable key found in the JSON Web Key Set', options) {\n        super(message, options);\n        this.code = 'ERR_JWKS_NO_MATCHING_KEY';\n    }\n}\nJWKSNoMatchingKey.code = 'ERR_JWKS_NO_MATCHING_KEY';\nclass JWKSMultipleMatchingKeys extends JOSEError {\n    constructor(message = 'multiple matching keys found in the JSON Web Key Set', options) {\n        super(message, options);\n        this.code = 'ERR_JWKS_MULTIPLE_MATCHING_KEYS';\n    }\n}\nJWKSMultipleMatchingKeys.code = 'ERR_JWKS_MULTIPLE_MATCHING_KEYS';\nclass JWKSTimeout extends JOSEError {\n    constructor(message = 'request timed out', options) {\n        super(message, options);\n        this.code = 'ERR_JWKS_TIMEOUT';\n    }\n}\nJWKSTimeout.code = 'ERR_JWKS_TIMEOUT';\nclass JWSSignatureVerificationFailed extends JOSEError {\n    constructor(message = 'signature verification failed', options) {\n        super(message, options);\n        this.code = 'ERR_JWS_SIGNATURE_VERIFICATION_FAILED';\n    }\n}\nJWSSignatureVerificationFailed.code = 'ERR_JWS_SIGNATURE_VERIFICATION_FAILED';\n\nfunction unusable(name, prop = 'algorithm.name') {\n    return new TypeError(`CryptoKey does not support this operation, its ${prop} must be ${name}`);\n}\nfunction isAlgorithm(algorithm, name) {\n    return algorithm.name === name;\n}\nfunction getHashLength(hash) {\n    return parseInt(hash.name.slice(4), 10);\n}\nfunction getNamedCurve(alg) {\n    switch (alg) {\n        case 'ES256':\n            return 'P-256';\n        case 'ES384':\n            return 'P-384';\n        case 'ES512':\n            return 'P-521';\n        default:\n            throw new Error('unreachable');\n    }\n}\nfunction checkUsage(key, usages) {\n    if (usages.length && !usages.some((expected) => key.usages.includes(expected))) {\n        let msg = 'CryptoKey does not support this operation, its usages must include ';\n        if (usages.length > 2) {\n            const last = usages.pop();\n            msg += `one of ${usages.join(', ')}, or ${last}.`;\n        }\n        else if (usages.length === 2) {\n            msg += `one of ${usages[0]} or ${usages[1]}.`;\n        }\n        else {\n            msg += `${usages[0]}.`;\n        }\n        throw new TypeError(msg);\n    }\n}\nfunction checkSigCryptoKey(key, alg, ...usages) {\n    switch (alg) {\n        case 'HS256':\n        case 'HS384':\n        case 'HS512': {\n            if (!isAlgorithm(key.algorithm, 'HMAC'))\n                throw unusable('HMAC');\n            const expected = parseInt(alg.slice(2), 10);\n            const actual = getHashLength(key.algorithm.hash);\n            if (actual !== expected)\n                throw unusable(`SHA-${expected}`, 'algorithm.hash');\n            break;\n        }\n        case 'RS256':\n        case 'RS384':\n        case 'RS512': {\n            if (!isAlgorithm(key.algorithm, 'RSASSA-PKCS1-v1_5'))\n                throw unusable('RSASSA-PKCS1-v1_5');\n            const expected = parseInt(alg.slice(2), 10);\n            const actual = getHashLength(key.algorithm.hash);\n            if (actual !== expected)\n                throw unusable(`SHA-${expected}`, 'algorithm.hash');\n            break;\n        }\n        case 'PS256':\n        case 'PS384':\n        case 'PS512': {\n            if (!isAlgorithm(key.algorithm, 'RSA-PSS'))\n                throw unusable('RSA-PSS');\n            const expected = parseInt(alg.slice(2), 10);\n            const actual = getHashLength(key.algorithm.hash);\n            if (actual !== expected)\n                throw unusable(`SHA-${expected}`, 'algorithm.hash');\n            break;\n        }\n        case 'EdDSA': {\n            if (key.algorithm.name !== 'Ed25519' && key.algorithm.name !== 'Ed448') {\n                throw unusable('Ed25519 or Ed448');\n            }\n            break;\n        }\n        case 'Ed25519': {\n            if (!isAlgorithm(key.algorithm, 'Ed25519'))\n                throw unusable('Ed25519');\n            break;\n        }\n        case 'ES256':\n        case 'ES384':\n        case 'ES512': {\n            if (!isAlgorithm(key.algorithm, 'ECDSA'))\n                throw unusable('ECDSA');\n            const expected = getNamedCurve(alg);\n            const actual = key.algorithm.namedCurve;\n            if (actual !== expected)\n                throw unusable(expected, 'algorithm.namedCurve');\n            break;\n        }\n        default:\n            throw new TypeError('CryptoKey does not support this operation');\n    }\n    checkUsage(key, usages);\n}\n\nfunction message(msg, actual, ...types) {\n    types = types.filter(Boolean);\n    if (types.length > 2) {\n        const last = types.pop();\n        msg += `one of type ${types.join(', ')}, or ${last}.`;\n    }\n    else if (types.length === 2) {\n        msg += `one of type ${types[0]} or ${types[1]}.`;\n    }\n    else {\n        msg += `of type ${types[0]}.`;\n    }\n    if (actual == null) {\n        msg += ` Received ${actual}`;\n    }\n    else if (typeof actual === 'function' && actual.name) {\n        msg += ` Received function ${actual.name}`;\n    }\n    else if (typeof actual === 'object' && actual != null) {\n        if (actual.constructor?.name) {\n            msg += ` Received an instance of ${actual.constructor.name}`;\n        }\n    }\n    return msg;\n}\nvar invalidKeyInput = (actual, ...types) => {\n    return message('Key must be ', actual, ...types);\n};\nfunction withAlg(alg, actual, ...types) {\n    return message(`Key for the ${alg} algorithm must be `, actual, ...types);\n}\n\nvar isKeyLike = (key) => {\n    if (isCryptoKey(key)) {\n        return true;\n    }\n    return key?.[Symbol.toStringTag] === 'KeyObject';\n};\nconst types = ['CryptoKey'];\n\nconst isDisjoint = (...headers) => {\n    const sources = headers.filter(Boolean);\n    if (sources.length === 0 || sources.length === 1) {\n        return true;\n    }\n    let acc;\n    for (const header of sources) {\n        const parameters = Object.keys(header);\n        if (!acc || acc.size === 0) {\n            acc = new Set(parameters);\n            continue;\n        }\n        for (const parameter of parameters) {\n            if (acc.has(parameter)) {\n                return false;\n            }\n            acc.add(parameter);\n        }\n    }\n    return true;\n};\nvar isDisjoint$1 = isDisjoint;\n\nfunction isObjectLike(value) {\n    return typeof value === 'object' && value !== null;\n}\nfunction isObject(input) {\n    if (!isObjectLike(input) || Object.prototype.toString.call(input) !== '[object Object]') {\n        return false;\n    }\n    if (Object.getPrototypeOf(input) === null) {\n        return true;\n    }\n    let proto = input;\n    while (Object.getPrototypeOf(proto) !== null) {\n        proto = Object.getPrototypeOf(proto);\n    }\n    return Object.getPrototypeOf(input) === proto;\n}\n\nvar checkKeyLength = (alg, key) => {\n    if (alg.startsWith('RS') || alg.startsWith('PS')) {\n        const { modulusLength } = key.algorithm;\n        if (typeof modulusLength !== 'number' || modulusLength < 2048) {\n            throw new TypeError(`${alg} requires key modulusLength to be 2048 bits or larger`);\n        }\n    }\n};\n\nfunction isJWK(key) {\n    return isObject(key) && typeof key.kty === 'string';\n}\nfunction isPrivateJWK(key) {\n    return key.kty !== 'oct' && typeof key.d === 'string';\n}\nfunction isPublicJWK(key) {\n    return key.kty !== 'oct' && typeof key.d === 'undefined';\n}\nfunction isSecretJWK(key) {\n    return isJWK(key) && key.kty === 'oct' && typeof key.k === 'string';\n}\n\nfunction subtleMapping(jwk) {\n    let algorithm;\n    let keyUsages;\n    switch (jwk.kty) {\n        case 'RSA': {\n            switch (jwk.alg) {\n                case 'PS256':\n                case 'PS384':\n                case 'PS512':\n                    algorithm = { name: 'RSA-PSS', hash: `SHA-${jwk.alg.slice(-3)}` };\n                    keyUsages = jwk.d ? ['sign'] : ['verify'];\n                    break;\n                case 'RS256':\n                case 'RS384':\n                case 'RS512':\n                    algorithm = { name: 'RSASSA-PKCS1-v1_5', hash: `SHA-${jwk.alg.slice(-3)}` };\n                    keyUsages = jwk.d ? ['sign'] : ['verify'];\n                    break;\n                case 'RSA-OAEP':\n                case 'RSA-OAEP-256':\n                case 'RSA-OAEP-384':\n                case 'RSA-OAEP-512':\n                    algorithm = {\n                        name: 'RSA-OAEP',\n                        hash: `SHA-${parseInt(jwk.alg.slice(-3), 10) || 1}`,\n                    };\n                    keyUsages = jwk.d ? ['decrypt', 'unwrapKey'] : ['encrypt', 'wrapKey'];\n                    break;\n                default:\n                    throw new JOSENotSupported('Invalid or unsupported JWK \"alg\" (Algorithm) Parameter value');\n            }\n            break;\n        }\n        case 'EC': {\n            switch (jwk.alg) {\n                case 'ES256':\n                    algorithm = { name: 'ECDSA', namedCurve: 'P-256' };\n                    keyUsages = jwk.d ? ['sign'] : ['verify'];\n                    break;\n                case 'ES384':\n                    algorithm = { name: 'ECDSA', namedCurve: 'P-384' };\n                    keyUsages = jwk.d ? ['sign'] : ['verify'];\n                    break;\n                case 'ES512':\n                    algorithm = { name: 'ECDSA', namedCurve: 'P-521' };\n                    keyUsages = jwk.d ? ['sign'] : ['verify'];\n                    break;\n                case 'ECDH-ES':\n                case 'ECDH-ES+A128KW':\n                case 'ECDH-ES+A192KW':\n                case 'ECDH-ES+A256KW':\n                    algorithm = { name: 'ECDH', namedCurve: jwk.crv };\n                    keyUsages = jwk.d ? ['deriveBits'] : [];\n                    break;\n                default:\n                    throw new JOSENotSupported('Invalid or unsupported JWK \"alg\" (Algorithm) Parameter value');\n            }\n            break;\n        }\n        case 'OKP': {\n            switch (jwk.alg) {\n                case 'Ed25519':\n                    algorithm = { name: 'Ed25519' };\n                    keyUsages = jwk.d ? ['sign'] : ['verify'];\n                    break;\n                case 'EdDSA':\n                    algorithm = { name: jwk.crv };\n                    keyUsages = jwk.d ? ['sign'] : ['verify'];\n                    break;\n                case 'ECDH-ES':\n                case 'ECDH-ES+A128KW':\n                case 'ECDH-ES+A192KW':\n                case 'ECDH-ES+A256KW':\n                    algorithm = { name: jwk.crv };\n                    keyUsages = jwk.d ? ['deriveBits'] : [];\n                    break;\n                default:\n                    throw new JOSENotSupported('Invalid or unsupported JWK \"alg\" (Algorithm) Parameter value');\n            }\n            break;\n        }\n        default:\n            throw new JOSENotSupported('Invalid or unsupported JWK \"kty\" (Key Type) Parameter value');\n    }\n    return { algorithm, keyUsages };\n}\nconst parse = async (jwk) => {\n    if (!jwk.alg) {\n        throw new TypeError('\"alg\" argument is required when \"jwk.alg\" is not present');\n    }\n    const { algorithm, keyUsages } = subtleMapping(jwk);\n    const rest = [\n        algorithm,\n        jwk.ext ?? false,\n        jwk.key_ops ?? keyUsages,\n    ];\n    const keyData = { ...jwk };\n    delete keyData.alg;\n    delete keyData.use;\n    return crypto$1.subtle.importKey('jwk', keyData, ...rest);\n};\nvar asKeyObject = parse;\n\nconst exportKeyValue = (k) => decode$1(k);\nlet privCache;\nlet pubCache;\nconst isKeyObject = (key) => {\n    return key?.[Symbol.toStringTag] === 'KeyObject';\n};\nconst importAndCache = async (cache, key, jwk, alg, freeze = false) => {\n    let cached = cache.get(key);\n    if (cached?.[alg]) {\n        return cached[alg];\n    }\n    const cryptoKey = await asKeyObject({ ...jwk, alg });\n    if (freeze)\n        Object.freeze(key);\n    if (!cached) {\n        cache.set(key, { [alg]: cryptoKey });\n    }\n    else {\n        cached[alg] = cryptoKey;\n    }\n    return cryptoKey;\n};\nconst normalizePublicKey = (key, alg) => {\n    if (isKeyObject(key)) {\n        let jwk = key.export({ format: 'jwk' });\n        delete jwk.d;\n        delete jwk.dp;\n        delete jwk.dq;\n        delete jwk.p;\n        delete jwk.q;\n        delete jwk.qi;\n        if (jwk.k) {\n            return exportKeyValue(jwk.k);\n        }\n        pubCache || (pubCache = new WeakMap());\n        return importAndCache(pubCache, key, jwk, alg);\n    }\n    if (isJWK(key)) {\n        if (key.k)\n            return decode$1(key.k);\n        pubCache || (pubCache = new WeakMap());\n        const cryptoKey = importAndCache(pubCache, key, key, alg, true);\n        return cryptoKey;\n    }\n    return key;\n};\nconst normalizePrivateKey = (key, alg) => {\n    if (isKeyObject(key)) {\n        let jwk = key.export({ format: 'jwk' });\n        if (jwk.k) {\n            return exportKeyValue(jwk.k);\n        }\n        privCache || (privCache = new WeakMap());\n        return importAndCache(privCache, key, jwk, alg);\n    }\n    if (isJWK(key)) {\n        if (key.k)\n            return decode$1(key.k);\n        privCache || (privCache = new WeakMap());\n        const cryptoKey = importAndCache(privCache, key, key, alg, true);\n        return cryptoKey;\n    }\n    return key;\n};\nvar normalize = { normalizePublicKey, normalizePrivateKey };\n\nasync function importJWK(jwk, alg) {\n    if (!isObject(jwk)) {\n        throw new TypeError('JWK must be an object');\n    }\n    alg || (alg = jwk.alg);\n    switch (jwk.kty) {\n        case 'oct':\n            if (typeof jwk.k !== 'string' || !jwk.k) {\n                throw new TypeError('missing \"k\" (Key Value) Parameter value');\n            }\n            return decode$1(jwk.k);\n        case 'RSA':\n            if ('oth' in jwk && jwk.oth !== undefined) {\n                throw new JOSENotSupported('RSA JWK \"oth\" (Other Primes Info) Parameter value is not supported');\n            }\n        case 'EC':\n        case 'OKP':\n            return asKeyObject({ ...jwk, alg });\n        default:\n            throw new JOSENotSupported('Unsupported \"kty\" (Key Type) Parameter value');\n    }\n}\n\nconst tag = (key) => key?.[Symbol.toStringTag];\nconst jwkMatchesOp = (alg, key, usage) => {\n    if (key.use !== undefined && key.use !== 'sig') {\n        throw new TypeError('Invalid key for this operation, when present its use must be sig');\n    }\n    if (key.key_ops !== undefined && key.key_ops.includes?.(usage) !== true) {\n        throw new TypeError(`Invalid key for this operation, when present its key_ops must include ${usage}`);\n    }\n    if (key.alg !== undefined && key.alg !== alg) {\n        throw new TypeError(`Invalid key for this operation, when present its alg must be ${alg}`);\n    }\n    return true;\n};\nconst symmetricTypeCheck = (alg, key, usage, allowJwk) => {\n    if (key instanceof Uint8Array)\n        return;\n    if (allowJwk && isJWK(key)) {\n        if (isSecretJWK(key) && jwkMatchesOp(alg, key, usage))\n            return;\n        throw new TypeError(`JSON Web Key for symmetric algorithms must have JWK \"kty\" (Key Type) equal to \"oct\" and the JWK \"k\" (Key Value) present`);\n    }\n    if (!isKeyLike(key)) {\n        throw new TypeError(withAlg(alg, key, ...types, 'Uint8Array', allowJwk ? 'JSON Web Key' : null));\n    }\n    if (key.type !== 'secret') {\n        throw new TypeError(`${tag(key)} instances for symmetric algorithms must be of type \"secret\"`);\n    }\n};\nconst asymmetricTypeCheck = (alg, key, usage, allowJwk) => {\n    if (allowJwk && isJWK(key)) {\n        switch (usage) {\n            case 'sign':\n                if (isPrivateJWK(key) && jwkMatchesOp(alg, key, usage))\n                    return;\n                throw new TypeError(`JSON Web Key for this operation be a private JWK`);\n            case 'verify':\n                if (isPublicJWK(key) && jwkMatchesOp(alg, key, usage))\n                    return;\n                throw new TypeError(`JSON Web Key for this operation be a public JWK`);\n        }\n    }\n    if (!isKeyLike(key)) {\n        throw new TypeError(withAlg(alg, key, ...types, allowJwk ? 'JSON Web Key' : null));\n    }\n    if (key.type === 'secret') {\n        throw new TypeError(`${tag(key)} instances for asymmetric algorithms must not be of type \"secret\"`);\n    }\n    if (usage === 'sign' && key.type === 'public') {\n        throw new TypeError(`${tag(key)} instances for asymmetric algorithm signing must be of type \"private\"`);\n    }\n    if (usage === 'decrypt' && key.type === 'public') {\n        throw new TypeError(`${tag(key)} instances for asymmetric algorithm decryption must be of type \"private\"`);\n    }\n    if (key.algorithm && usage === 'verify' && key.type === 'private') {\n        throw new TypeError(`${tag(key)} instances for asymmetric algorithm verifying must be of type \"public\"`);\n    }\n    if (key.algorithm && usage === 'encrypt' && key.type === 'private') {\n        throw new TypeError(`${tag(key)} instances for asymmetric algorithm encryption must be of type \"public\"`);\n    }\n};\nfunction checkKeyType(allowJwk, alg, key, usage) {\n    const symmetric = alg.startsWith('HS') ||\n        alg === 'dir' ||\n        alg.startsWith('PBES2') ||\n        /^A\\d{3}(?:GCM)?KW$/.test(alg);\n    if (symmetric) {\n        symmetricTypeCheck(alg, key, usage, allowJwk);\n    }\n    else {\n        asymmetricTypeCheck(alg, key, usage, allowJwk);\n    }\n}\ncheckKeyType.bind(undefined, false);\nconst checkKeyTypeWithJwk = checkKeyType.bind(undefined, true);\n\nfunction validateCrit(Err, recognizedDefault, recognizedOption, protectedHeader, joseHeader) {\n    if (joseHeader.crit !== undefined && protectedHeader?.crit === undefined) {\n        throw new Err('\"crit\" (Critical) Header Parameter MUST be integrity protected');\n    }\n    if (!protectedHeader || protectedHeader.crit === undefined) {\n        return new Set();\n    }\n    if (!Array.isArray(protectedHeader.crit) ||\n        protectedHeader.crit.length === 0 ||\n        protectedHeader.crit.some((input) => typeof input !== 'string' || input.length === 0)) {\n        throw new Err('\"crit\" (Critical) Header Parameter MUST be an array of non-empty strings when present');\n    }\n    let recognized;\n    if (recognizedOption !== undefined) {\n        recognized = new Map([...Object.entries(recognizedOption), ...recognizedDefault.entries()]);\n    }\n    else {\n        recognized = recognizedDefault;\n    }\n    for (const parameter of protectedHeader.crit) {\n        if (!recognized.has(parameter)) {\n            throw new JOSENotSupported(`Extension Header Parameter \"${parameter}\" is not recognized`);\n        }\n        if (joseHeader[parameter] === undefined) {\n            throw new Err(`Extension Header Parameter \"${parameter}\" is missing`);\n        }\n        if (recognized.get(parameter) && protectedHeader[parameter] === undefined) {\n            throw new Err(`Extension Header Parameter \"${parameter}\" MUST be integrity protected`);\n        }\n    }\n    return new Set(protectedHeader.crit);\n}\n\nconst validateAlgorithms = (option, algorithms) => {\n    if (algorithms !== undefined &&\n        (!Array.isArray(algorithms) || algorithms.some((s) => typeof s !== 'string'))) {\n        throw new TypeError(`\"${option}\" option must be an array of strings`);\n    }\n    if (!algorithms) {\n        return undefined;\n    }\n    return new Set(algorithms);\n};\nvar validateAlgorithms$1 = validateAlgorithms;\n\nconst keyToJWK = async (key) => {\n    if (key instanceof Uint8Array) {\n        return {\n            kty: 'oct',\n            k: encode(key),\n        };\n    }\n    if (!isCryptoKey(key)) {\n        throw new TypeError(invalidKeyInput(key, ...types, 'Uint8Array'));\n    }\n    if (!key.extractable) {\n        throw new TypeError('non-extractable CryptoKey cannot be exported as a JWK');\n    }\n    const { ext, key_ops, alg, use, ...jwk } = await crypto$1.subtle.exportKey('jwk', key);\n    return jwk;\n};\nvar keyToJWK$1 = keyToJWK;\n\nasync function exportJWK(key) {\n    return keyToJWK$1(key);\n}\n\nfunction subtleDsa(alg, algorithm) {\n    const hash = `SHA-${alg.slice(-3)}`;\n    switch (alg) {\n        case 'HS256':\n        case 'HS384':\n        case 'HS512':\n            return { hash, name: 'HMAC' };\n        case 'PS256':\n        case 'PS384':\n        case 'PS512':\n            return { hash, name: 'RSA-PSS', saltLength: alg.slice(-3) >> 3 };\n        case 'RS256':\n        case 'RS384':\n        case 'RS512':\n            return { hash, name: 'RSASSA-PKCS1-v1_5' };\n        case 'ES256':\n        case 'ES384':\n        case 'ES512':\n            return { hash, name: 'ECDSA', namedCurve: algorithm.namedCurve };\n        case 'Ed25519':\n            return { name: 'Ed25519' };\n        case 'EdDSA':\n            return { name: algorithm.name };\n        default:\n            throw new JOSENotSupported(`alg ${alg} is not supported either by JOSE or your javascript runtime`);\n    }\n}\n\nasync function getCryptoKey(alg, key, usage) {\n    if (usage === 'sign') {\n        key = await normalize.normalizePrivateKey(key, alg);\n    }\n    if (usage === 'verify') {\n        key = await normalize.normalizePublicKey(key, alg);\n    }\n    if (isCryptoKey(key)) {\n        checkSigCryptoKey(key, alg, usage);\n        return key;\n    }\n    if (key instanceof Uint8Array) {\n        if (!alg.startsWith('HS')) {\n            throw new TypeError(invalidKeyInput(key, ...types));\n        }\n        return crypto$1.subtle.importKey('raw', key, { hash: `SHA-${alg.slice(-3)}`, name: 'HMAC' }, false, [usage]);\n    }\n    throw new TypeError(invalidKeyInput(key, ...types, 'Uint8Array', 'JSON Web Key'));\n}\n\nconst verify = async (alg, key, signature, data) => {\n    const cryptoKey = await getCryptoKey(alg, key, 'verify');\n    checkKeyLength(alg, cryptoKey);\n    const algorithm = subtleDsa(alg, cryptoKey.algorithm);\n    try {\n        return await crypto$1.subtle.verify(algorithm, cryptoKey, signature, data);\n    }\n    catch {\n        return false;\n    }\n};\nvar verify$1 = verify;\n\nasync function flattenedVerify(jws, key, options) {\n    if (!isObject(jws)) {\n        throw new JWSInvalid('Flattened JWS must be an object');\n    }\n    if (jws.protected === undefined && jws.header === undefined) {\n        throw new JWSInvalid('Flattened JWS must have either of the \"protected\" or \"header\" members');\n    }\n    if (jws.protected !== undefined && typeof jws.protected !== 'string') {\n        throw new JWSInvalid('JWS Protected Header incorrect type');\n    }\n    if (jws.payload === undefined) {\n        throw new JWSInvalid('JWS Payload missing');\n    }\n    if (typeof jws.signature !== 'string') {\n        throw new JWSInvalid('JWS Signature missing or incorrect type');\n    }\n    if (jws.header !== undefined && !isObject(jws.header)) {\n        throw new JWSInvalid('JWS Unprotected Header incorrect type');\n    }\n    let parsedProt = {};\n    if (jws.protected) {\n        try {\n            const protectedHeader = decode$1(jws.protected);\n            parsedProt = JSON.parse(decoder.decode(protectedHeader));\n        }\n        catch {\n            throw new JWSInvalid('JWS Protected Header is invalid');\n        }\n    }\n    if (!isDisjoint$1(parsedProt, jws.header)) {\n        throw new JWSInvalid('JWS Protected and JWS Unprotected Header Parameter names must be disjoint');\n    }\n    const joseHeader = {\n        ...parsedProt,\n        ...jws.header,\n    };\n    const extensions = validateCrit(JWSInvalid, new Map([['b64', true]]), options?.crit, parsedProt, joseHeader);\n    let b64 = true;\n    if (extensions.has('b64')) {\n        b64 = parsedProt.b64;\n        if (typeof b64 !== 'boolean') {\n            throw new JWSInvalid('The \"b64\" (base64url-encode payload) Header Parameter must be a boolean');\n        }\n    }\n    const { alg } = joseHeader;\n    if (typeof alg !== 'string' || !alg) {\n        throw new JWSInvalid('JWS \"alg\" (Algorithm) Header Parameter missing or invalid');\n    }\n    const algorithms = options && validateAlgorithms$1('algorithms', options.algorithms);\n    if (algorithms && !algorithms.has(alg)) {\n        throw new JOSEAlgNotAllowed('\"alg\" (Algorithm) Header Parameter value not allowed');\n    }\n    if (b64) {\n        if (typeof jws.payload !== 'string') {\n            throw new JWSInvalid('JWS Payload must be a string');\n        }\n    }\n    else if (typeof jws.payload !== 'string' && !(jws.payload instanceof Uint8Array)) {\n        throw new JWSInvalid('JWS Payload must be a string or an Uint8Array instance');\n    }\n    let resolvedKey = false;\n    if (typeof key === 'function') {\n        key = await key(parsedProt, jws);\n        resolvedKey = true;\n        checkKeyTypeWithJwk(alg, key, 'verify');\n        if (isJWK(key)) {\n            key = await importJWK(key, alg);\n        }\n    }\n    else {\n        checkKeyTypeWithJwk(alg, key, 'verify');\n    }\n    const data = concat(encoder.encode(jws.protected ?? ''), encoder.encode('.'), typeof jws.payload === 'string' ? encoder.encode(jws.payload) : jws.payload);\n    let signature;\n    try {\n        signature = decode$1(jws.signature);\n    }\n    catch {\n        throw new JWSInvalid('Failed to base64url decode the signature');\n    }\n    const verified = await verify$1(alg, key, signature, data);\n    if (!verified) {\n        throw new JWSSignatureVerificationFailed();\n    }\n    let payload;\n    if (b64) {\n        try {\n            payload = decode$1(jws.payload);\n        }\n        catch {\n            throw new JWSInvalid('Failed to base64url decode the payload');\n        }\n    }\n    else if (typeof jws.payload === 'string') {\n        payload = encoder.encode(jws.payload);\n    }\n    else {\n        payload = jws.payload;\n    }\n    const result = { payload };\n    if (jws.protected !== undefined) {\n        result.protectedHeader = parsedProt;\n    }\n    if (jws.header !== undefined) {\n        result.unprotectedHeader = jws.header;\n    }\n    if (resolvedKey) {\n        return { ...result, key };\n    }\n    return result;\n}\n\nasync function compactVerify(jws, key, options) {\n    if (jws instanceof Uint8Array) {\n        jws = decoder.decode(jws);\n    }\n    if (typeof jws !== 'string') {\n        throw new JWSInvalid('Compact JWS must be a string or Uint8Array');\n    }\n    const { 0: protectedHeader, 1: payload, 2: signature, length } = jws.split('.');\n    if (length !== 3) {\n        throw new JWSInvalid('Invalid Compact JWS');\n    }\n    const verified = await flattenedVerify({ payload, protected: protectedHeader, signature }, key, options);\n    const result = { payload: verified.payload, protectedHeader: verified.protectedHeader };\n    if (typeof key === 'function') {\n        return { ...result, key: verified.key };\n    }\n    return result;\n}\n\nvar epoch = (date) => Math.floor(date.getTime() / 1000);\n\nconst minute = 60;\nconst hour = minute * 60;\nconst day = hour * 24;\nconst week = day * 7;\nconst year = day * 365.25;\nconst REGEX = /^(\\+|\\-)? ?(\\d+|\\d+\\.\\d+) ?(seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|weeks?|w|years?|yrs?|y)(?: (ago|from now))?$/i;\nvar secs = (str) => {\n    const matched = REGEX.exec(str);\n    if (!matched || (matched[4] && matched[1])) {\n        throw new TypeError('Invalid time period format');\n    }\n    const value = parseFloat(matched[2]);\n    const unit = matched[3].toLowerCase();\n    let numericDate;\n    switch (unit) {\n        case 'sec':\n        case 'secs':\n        case 'second':\n        case 'seconds':\n        case 's':\n            numericDate = Math.round(value);\n            break;\n        case 'minute':\n        case 'minutes':\n        case 'min':\n        case 'mins':\n        case 'm':\n            numericDate = Math.round(value * minute);\n            break;\n        case 'hour':\n        case 'hours':\n        case 'hr':\n        case 'hrs':\n        case 'h':\n            numericDate = Math.round(value * hour);\n            break;\n        case 'day':\n        case 'days':\n        case 'd':\n            numericDate = Math.round(value * day);\n            break;\n        case 'week':\n        case 'weeks':\n        case 'w':\n            numericDate = Math.round(value * week);\n            break;\n        default:\n            numericDate = Math.round(value * year);\n            break;\n    }\n    if (matched[1] === '-' || matched[4] === 'ago') {\n        return -numericDate;\n    }\n    return numericDate;\n};\n\nconst normalizeTyp = (value) => value.toLowerCase().replace(/^application\\//, '');\nconst checkAudiencePresence = (audPayload, audOption) => {\n    if (typeof audPayload === 'string') {\n        return audOption.includes(audPayload);\n    }\n    if (Array.isArray(audPayload)) {\n        return audOption.some(Set.prototype.has.bind(new Set(audPayload)));\n    }\n    return false;\n};\nvar jwtPayload = (protectedHeader, encodedPayload, options = {}) => {\n    let payload;\n    try {\n        payload = JSON.parse(decoder.decode(encodedPayload));\n    }\n    catch {\n    }\n    if (!isObject(payload)) {\n        throw new JWTInvalid('JWT Claims Set must be a top-level JSON object');\n    }\n    const { typ } = options;\n    if (typ &&\n        (typeof protectedHeader.typ !== 'string' ||\n            normalizeTyp(protectedHeader.typ) !== normalizeTyp(typ))) {\n        throw new JWTClaimValidationFailed('unexpected \"typ\" JWT header value', payload, 'typ', 'check_failed');\n    }\n    const { requiredClaims = [], issuer, subject, audience, maxTokenAge } = options;\n    const presenceCheck = [...requiredClaims];\n    if (maxTokenAge !== undefined)\n        presenceCheck.push('iat');\n    if (audience !== undefined)\n        presenceCheck.push('aud');\n    if (subject !== undefined)\n        presenceCheck.push('sub');\n    if (issuer !== undefined)\n        presenceCheck.push('iss');\n    for (const claim of new Set(presenceCheck.reverse())) {\n        if (!(claim in payload)) {\n            throw new JWTClaimValidationFailed(`missing required \"${claim}\" claim`, payload, claim, 'missing');\n        }\n    }\n    if (issuer &&\n        !(Array.isArray(issuer) ? issuer : [issuer]).includes(payload.iss)) {\n        throw new JWTClaimValidationFailed('unexpected \"iss\" claim value', payload, 'iss', 'check_failed');\n    }\n    if (subject && payload.sub !== subject) {\n        throw new JWTClaimValidationFailed('unexpected \"sub\" claim value', payload, 'sub', 'check_failed');\n    }\n    if (audience &&\n        !checkAudiencePresence(payload.aud, typeof audience === 'string' ? [audience] : audience)) {\n        throw new JWTClaimValidationFailed('unexpected \"aud\" claim value', payload, 'aud', 'check_failed');\n    }\n    let tolerance;\n    switch (typeof options.clockTolerance) {\n        case 'string':\n            tolerance = secs(options.clockTolerance);\n            break;\n        case 'number':\n            tolerance = options.clockTolerance;\n            break;\n        case 'undefined':\n            tolerance = 0;\n            break;\n        default:\n            throw new TypeError('Invalid clockTolerance option type');\n    }\n    const { currentDate } = options;\n    const now = epoch(currentDate || new Date());\n    if ((payload.iat !== undefined || maxTokenAge) && typeof payload.iat !== 'number') {\n        throw new JWTClaimValidationFailed('\"iat\" claim must be a number', payload, 'iat', 'invalid');\n    }\n    if (payload.nbf !== undefined) {\n        if (typeof payload.nbf !== 'number') {\n            throw new JWTClaimValidationFailed('\"nbf\" claim must be a number', payload, 'nbf', 'invalid');\n        }\n        if (payload.nbf > now + tolerance) {\n            throw new JWTClaimValidationFailed('\"nbf\" claim timestamp check failed', payload, 'nbf', 'check_failed');\n        }\n    }\n    if (payload.exp !== undefined) {\n        if (typeof payload.exp !== 'number') {\n            throw new JWTClaimValidationFailed('\"exp\" claim must be a number', payload, 'exp', 'invalid');\n        }\n        if (payload.exp <= now - tolerance) {\n            throw new JWTExpired('\"exp\" claim timestamp check failed', payload, 'exp', 'check_failed');\n        }\n    }\n    if (maxTokenAge) {\n        const age = now - payload.iat;\n        const max = typeof maxTokenAge === 'number' ? maxTokenAge : secs(maxTokenAge);\n        if (age - tolerance > max) {\n            throw new JWTExpired('\"iat\" claim timestamp check failed (too far in the past)', payload, 'iat', 'check_failed');\n        }\n        if (age < 0 - tolerance) {\n            throw new JWTClaimValidationFailed('\"iat\" claim timestamp check failed (it should be in the past)', payload, 'iat', 'check_failed');\n        }\n    }\n    return payload;\n};\n\nasync function jwtVerify(jwt, key, options) {\n    const verified = await compactVerify(jwt, key, options);\n    if (verified.protectedHeader.crit?.includes('b64') && verified.protectedHeader.b64 === false) {\n        throw new JWTInvalid('JWTs MUST NOT use unencoded payload');\n    }\n    const payload = jwtPayload(verified.protectedHeader, verified.payload, options);\n    const result = { payload, protectedHeader: verified.protectedHeader };\n    if (typeof key === 'function') {\n        return { ...result, key: verified.key };\n    }\n    return result;\n}\n\nconst sign = async (alg, key, data) => {\n    const cryptoKey = await getCryptoKey(alg, key, 'sign');\n    checkKeyLength(alg, cryptoKey);\n    const signature = await crypto$1.subtle.sign(subtleDsa(alg, cryptoKey.algorithm), cryptoKey, data);\n    return new Uint8Array(signature);\n};\nvar sign$1 = sign;\n\nclass FlattenedSign {\n    constructor(payload) {\n        if (!(payload instanceof Uint8Array)) {\n            throw new TypeError('payload must be an instance of Uint8Array');\n        }\n        this._payload = payload;\n    }\n    setProtectedHeader(protectedHeader) {\n        if (this._protectedHeader) {\n            throw new TypeError('setProtectedHeader can only be called once');\n        }\n        this._protectedHeader = protectedHeader;\n        return this;\n    }\n    setUnprotectedHeader(unprotectedHeader) {\n        if (this._unprotectedHeader) {\n            throw new TypeError('setUnprotectedHeader can only be called once');\n        }\n        this._unprotectedHeader = unprotectedHeader;\n        return this;\n    }\n    async sign(key, options) {\n        if (!this._protectedHeader && !this._unprotectedHeader) {\n            throw new JWSInvalid('either setProtectedHeader or setUnprotectedHeader must be called before #sign()');\n        }\n        if (!isDisjoint$1(this._protectedHeader, this._unprotectedHeader)) {\n            throw new JWSInvalid('JWS Protected and JWS Unprotected Header Parameter names must be disjoint');\n        }\n        const joseHeader = {\n            ...this._protectedHeader,\n            ...this._unprotectedHeader,\n        };\n        const extensions = validateCrit(JWSInvalid, new Map([['b64', true]]), options?.crit, this._protectedHeader, joseHeader);\n        let b64 = true;\n        if (extensions.has('b64')) {\n            b64 = this._protectedHeader.b64;\n            if (typeof b64 !== 'boolean') {\n                throw new JWSInvalid('The \"b64\" (base64url-encode payload) Header Parameter must be a boolean');\n            }\n        }\n        const { alg } = joseHeader;\n        if (typeof alg !== 'string' || !alg) {\n            throw new JWSInvalid('JWS \"alg\" (Algorithm) Header Parameter missing or invalid');\n        }\n        checkKeyTypeWithJwk(alg, key, 'sign');\n        let payload = this._payload;\n        if (b64) {\n            payload = encoder.encode(encode(payload));\n        }\n        let protectedHeader;\n        if (this._protectedHeader) {\n            protectedHeader = encoder.encode(encode(JSON.stringify(this._protectedHeader)));\n        }\n        else {\n            protectedHeader = encoder.encode('');\n        }\n        const data = concat(protectedHeader, encoder.encode('.'), payload);\n        const signature = await sign$1(alg, key, data);\n        const jws = {\n            signature: encode(signature),\n            payload: '',\n        };\n        if (b64) {\n            jws.payload = decoder.decode(payload);\n        }\n        if (this._unprotectedHeader) {\n            jws.header = this._unprotectedHeader;\n        }\n        if (this._protectedHeader) {\n            jws.protected = decoder.decode(protectedHeader);\n        }\n        return jws;\n    }\n}\n\nclass CompactSign {\n    constructor(payload) {\n        this._flattened = new FlattenedSign(payload);\n    }\n    setProtectedHeader(protectedHeader) {\n        this._flattened.setProtectedHeader(protectedHeader);\n        return this;\n    }\n    async sign(key, options) {\n        const jws = await this._flattened.sign(key, options);\n        if (jws.payload === undefined) {\n            throw new TypeError('use the flattened module for creating JWS with b64: false');\n        }\n        return `${jws.protected}.${jws.payload}.${jws.signature}`;\n    }\n}\n\nfunction validateInput(label, input) {\n    if (!Number.isFinite(input)) {\n        throw new TypeError(`Invalid ${label} input`);\n    }\n    return input;\n}\nclass ProduceJWT {\n    constructor(payload = {}) {\n        if (!isObject(payload)) {\n            throw new TypeError('JWT Claims Set MUST be an object');\n        }\n        this._payload = payload;\n    }\n    setIssuer(issuer) {\n        this._payload = { ...this._payload, iss: issuer };\n        return this;\n    }\n    setSubject(subject) {\n        this._payload = { ...this._payload, sub: subject };\n        return this;\n    }\n    setAudience(audience) {\n        this._payload = { ...this._payload, aud: audience };\n        return this;\n    }\n    setJti(jwtId) {\n        this._payload = { ...this._payload, jti: jwtId };\n        return this;\n    }\n    setNotBefore(input) {\n        if (typeof input === 'number') {\n            this._payload = { ...this._payload, nbf: validateInput('setNotBefore', input) };\n        }\n        else if (input instanceof Date) {\n            this._payload = { ...this._payload, nbf: validateInput('setNotBefore', epoch(input)) };\n        }\n        else {\n            this._payload = { ...this._payload, nbf: epoch(new Date()) + secs(input) };\n        }\n        return this;\n    }\n    setExpirationTime(input) {\n        if (typeof input === 'number') {\n            this._payload = { ...this._payload, exp: validateInput('setExpirationTime', input) };\n        }\n        else if (input instanceof Date) {\n            this._payload = { ...this._payload, exp: validateInput('setExpirationTime', epoch(input)) };\n        }\n        else {\n            this._payload = { ...this._payload, exp: epoch(new Date()) + secs(input) };\n        }\n        return this;\n    }\n    setIssuedAt(input) {\n        if (typeof input === 'undefined') {\n            this._payload = { ...this._payload, iat: epoch(new Date()) };\n        }\n        else if (input instanceof Date) {\n            this._payload = { ...this._payload, iat: validateInput('setIssuedAt', epoch(input)) };\n        }\n        else if (typeof input === 'string') {\n            this._payload = {\n                ...this._payload,\n                iat: validateInput('setIssuedAt', epoch(new Date()) + secs(input)),\n            };\n        }\n        else {\n            this._payload = { ...this._payload, iat: validateInput('setIssuedAt', input) };\n        }\n        return this;\n    }\n}\n\nclass SignJWT extends ProduceJWT {\n    setProtectedHeader(protectedHeader) {\n        this._protectedHeader = protectedHeader;\n        return this;\n    }\n    async sign(key, options) {\n        const sig = new CompactSign(encoder.encode(JSON.stringify(this._payload)));\n        sig.setProtectedHeader(this._protectedHeader);\n        if (Array.isArray(this._protectedHeader?.crit) &&\n            this._protectedHeader.crit.includes('b64') &&\n            this._protectedHeader.b64 === false) {\n            throw new JWTInvalid('JWTs MUST NOT use unencoded payload');\n        }\n        return sig.sign(key, options);\n    }\n}\n\nconst check = (value, description) => {\n    if (typeof value !== 'string' || !value) {\n        throw new JWKInvalid(`${description} missing or invalid`);\n    }\n};\nasync function calculateJwkThumbprint(jwk, digestAlgorithm) {\n    if (!isObject(jwk)) {\n        throw new TypeError('JWK must be an object');\n    }\n    digestAlgorithm ?? (digestAlgorithm = 'sha256');\n    if (digestAlgorithm !== 'sha256' &&\n        digestAlgorithm !== 'sha384' &&\n        digestAlgorithm !== 'sha512') {\n        throw new TypeError('digestAlgorithm must one of \"sha256\", \"sha384\", or \"sha512\"');\n    }\n    let components;\n    switch (jwk.kty) {\n        case 'EC':\n            check(jwk.crv, '\"crv\" (Curve) Parameter');\n            check(jwk.x, '\"x\" (X Coordinate) Parameter');\n            check(jwk.y, '\"y\" (Y Coordinate) Parameter');\n            components = { crv: jwk.crv, kty: jwk.kty, x: jwk.x, y: jwk.y };\n            break;\n        case 'OKP':\n            check(jwk.crv, '\"crv\" (Subtype of Key Pair) Parameter');\n            check(jwk.x, '\"x\" (Public Key) Parameter');\n            components = { crv: jwk.crv, kty: jwk.kty, x: jwk.x };\n            break;\n        case 'RSA':\n            check(jwk.e, '\"e\" (Exponent) Parameter');\n            check(jwk.n, '\"n\" (Modulus) Parameter');\n            components = { e: jwk.e, kty: jwk.kty, n: jwk.n };\n            break;\n        case 'oct':\n            check(jwk.k, '\"k\" (Key Value) Parameter');\n            components = { k: jwk.k, kty: jwk.kty };\n            break;\n        default:\n            throw new JOSENotSupported('\"kty\" (Key Type) Parameter missing or unsupported');\n    }\n    const data = encoder.encode(JSON.stringify(components));\n    return encode(await digest$1(digestAlgorithm, data));\n}\n\nfunction getKtyFromAlg(alg) {\n    switch (typeof alg === 'string' && alg.slice(0, 2)) {\n        case 'RS':\n        case 'PS':\n            return 'RSA';\n        case 'ES':\n            return 'EC';\n        case 'Ed':\n            return 'OKP';\n        default:\n            throw new JOSENotSupported('Unsupported \"alg\" value for a JSON Web Key Set');\n    }\n}\nfunction isJWKSLike(jwks) {\n    return (jwks &&\n        typeof jwks === 'object' &&\n        Array.isArray(jwks.keys) &&\n        jwks.keys.every(isJWKLike));\n}\nfunction isJWKLike(key) {\n    return isObject(key);\n}\nfunction clone(obj) {\n    if (typeof structuredClone === 'function') {\n        return structuredClone(obj);\n    }\n    return JSON.parse(JSON.stringify(obj));\n}\nclass LocalJWKSet {\n    constructor(jwks) {\n        this._cached = new WeakMap();\n        if (!isJWKSLike(jwks)) {\n            throw new JWKSInvalid('JSON Web Key Set malformed');\n        }\n        this._jwks = clone(jwks);\n    }\n    async getKey(protectedHeader, token) {\n        const { alg, kid } = { ...protectedHeader, ...token?.header };\n        const kty = getKtyFromAlg(alg);\n        const candidates = this._jwks.keys.filter((jwk) => {\n            let candidate = kty === jwk.kty;\n            if (candidate && typeof kid === 'string') {\n                candidate = kid === jwk.kid;\n            }\n            if (candidate && typeof jwk.alg === 'string') {\n                candidate = alg === jwk.alg;\n            }\n            if (candidate && typeof jwk.use === 'string') {\n                candidate = jwk.use === 'sig';\n            }\n            if (candidate && Array.isArray(jwk.key_ops)) {\n                candidate = jwk.key_ops.includes('verify');\n            }\n            if (candidate) {\n                switch (alg) {\n                    case 'ES256':\n                        candidate = jwk.crv === 'P-256';\n                        break;\n                    case 'ES256K':\n                        candidate = jwk.crv === 'secp256k1';\n                        break;\n                    case 'ES384':\n                        candidate = jwk.crv === 'P-384';\n                        break;\n                    case 'ES512':\n                        candidate = jwk.crv === 'P-521';\n                        break;\n                    case 'Ed25519':\n                        candidate = jwk.crv === 'Ed25519';\n                        break;\n                    case 'EdDSA':\n                        candidate = jwk.crv === 'Ed25519' || jwk.crv === 'Ed448';\n                        break;\n                }\n            }\n            return candidate;\n        });\n        const { 0: jwk, length } = candidates;\n        if (length === 0) {\n            throw new JWKSNoMatchingKey();\n        }\n        if (length !== 1) {\n            const error = new JWKSMultipleMatchingKeys();\n            const { _cached } = this;\n            error[Symbol.asyncIterator] = async function* () {\n                for (const jwk of candidates) {\n                    try {\n                        yield await importWithAlgCache(_cached, jwk, alg);\n                    }\n                    catch { }\n                }\n            };\n            throw error;\n        }\n        return importWithAlgCache(this._cached, jwk, alg);\n    }\n}\nasync function importWithAlgCache(cache, jwk, alg) {\n    const cached = cache.get(jwk) || cache.set(jwk, {}).get(jwk);\n    if (cached[alg] === undefined) {\n        const key = await importJWK({ ...jwk, ext: true }, alg);\n        if (key instanceof Uint8Array || key.type !== 'public') {\n            throw new JWKSInvalid('JSON Web Key Set members must be public keys');\n        }\n        cached[alg] = key;\n    }\n    return cached[alg];\n}\nfunction createLocalJWKSet(jwks) {\n    const set = new LocalJWKSet(jwks);\n    const localJWKSet = async (protectedHeader, token) => set.getKey(protectedHeader, token);\n    Object.defineProperties(localJWKSet, {\n        jwks: {\n            value: () => clone(set._jwks),\n            enumerable: true,\n            configurable: false,\n            writable: false,\n        },\n    });\n    return localJWKSet;\n}\n\nconst fetchJwks = async (url, timeout, options) => {\n    let controller;\n    let id;\n    let timedOut = false;\n    if (typeof AbortController === 'function') {\n        controller = new AbortController();\n        id = setTimeout(() => {\n            timedOut = true;\n            controller.abort();\n        }, timeout);\n    }\n    const response = await fetch(url.href, {\n        signal: controller ? controller.signal : undefined,\n        redirect: 'manual',\n        headers: options.headers,\n    }).catch((err) => {\n        if (timedOut)\n            throw new JWKSTimeout();\n        throw err;\n    });\n    if (id !== undefined)\n        clearTimeout(id);\n    if (response.status !== 200) {\n        throw new JOSEError('Expected 200 OK from the JSON Web Key Set HTTP response');\n    }\n    try {\n        return await response.json();\n    }\n    catch {\n        throw new JOSEError('Failed to parse the JSON Web Key Set HTTP response as JSON');\n    }\n};\nvar fetchJwks$1 = fetchJwks;\n\nfunction isCloudflareWorkers() {\n    return (typeof WebSocketPair !== 'undefined' ||\n        (typeof navigator !== 'undefined' && navigator.userAgent === 'Cloudflare-Workers') ||\n        (typeof EdgeRuntime !== 'undefined' && EdgeRuntime === 'vercel'));\n}\nlet USER_AGENT;\nif (typeof navigator === 'undefined' || !navigator.userAgent?.startsWith?.('Mozilla/5.0 ')) {\n    const NAME = 'jose';\n    const VERSION = 'v5.10.0';\n    USER_AGENT = `${NAME}/${VERSION}`;\n}\nconst jwksCache = Symbol();\nfunction isFreshJwksCache(input, cacheMaxAge) {\n    if (typeof input !== 'object' || input === null) {\n        return false;\n    }\n    if (!('uat' in input) || typeof input.uat !== 'number' || Date.now() - input.uat >= cacheMaxAge) {\n        return false;\n    }\n    if (!('jwks' in input) ||\n        !isObject(input.jwks) ||\n        !Array.isArray(input.jwks.keys) ||\n        !Array.prototype.every.call(input.jwks.keys, isObject)) {\n        return false;\n    }\n    return true;\n}\nclass RemoteJWKSet {\n    constructor(url, options) {\n        if (!(url instanceof URL)) {\n            throw new TypeError('url must be an instance of URL');\n        }\n        this._url = new URL(url.href);\n        this._options = { agent: options?.agent, headers: options?.headers };\n        this._timeoutDuration =\n            typeof options?.timeoutDuration === 'number' ? options?.timeoutDuration : 5000;\n        this._cooldownDuration =\n            typeof options?.cooldownDuration === 'number' ? options?.cooldownDuration : 30000;\n        this._cacheMaxAge = typeof options?.cacheMaxAge === 'number' ? options?.cacheMaxAge : 600000;\n        if (options?.[jwksCache] !== undefined) {\n            this._cache = options?.[jwksCache];\n            if (isFreshJwksCache(options?.[jwksCache], this._cacheMaxAge)) {\n                this._jwksTimestamp = this._cache.uat;\n                this._local = createLocalJWKSet(this._cache.jwks);\n            }\n        }\n    }\n    coolingDown() {\n        return typeof this._jwksTimestamp === 'number'\n            ? Date.now() < this._jwksTimestamp + this._cooldownDuration\n            : false;\n    }\n    fresh() {\n        return typeof this._jwksTimestamp === 'number'\n            ? Date.now() < this._jwksTimestamp + this._cacheMaxAge\n            : false;\n    }\n    async getKey(protectedHeader, token) {\n        if (!this._local || !this.fresh()) {\n            await this.reload();\n        }\n        try {\n            return await this._local(protectedHeader, token);\n        }\n        catch (err) {\n            if (err instanceof JWKSNoMatchingKey) {\n                if (this.coolingDown() === false) {\n                    await this.reload();\n                    return this._local(protectedHeader, token);\n                }\n            }\n            throw err;\n        }\n    }\n    async reload() {\n        if (this._pendingFetch && isCloudflareWorkers()) {\n            this._pendingFetch = undefined;\n        }\n        const headers = new Headers(this._options.headers);\n        if (USER_AGENT && !headers.has('User-Agent')) {\n            headers.set('User-Agent', USER_AGENT);\n            this._options.headers = Object.fromEntries(headers.entries());\n        }\n        this._pendingFetch || (this._pendingFetch = fetchJwks$1(this._url, this._timeoutDuration, this._options)\n            .then((json) => {\n            this._local = createLocalJWKSet(json);\n            if (this._cache) {\n                this._cache.uat = Date.now();\n                this._cache.jwks = json;\n            }\n            this._jwksTimestamp = Date.now();\n            this._pendingFetch = undefined;\n        })\n            .catch((err) => {\n            this._pendingFetch = undefined;\n            throw err;\n        }));\n        await this._pendingFetch;\n    }\n}\nfunction createRemoteJWKSet(url, options) {\n    const set = new RemoteJWKSet(url, options);\n    const remoteJWKSet = async (protectedHeader, token) => set.getKey(protectedHeader, token);\n    Object.defineProperties(remoteJWKSet, {\n        coolingDown: {\n            get: () => set.coolingDown(),\n            enumerable: true,\n            configurable: false,\n        },\n        fresh: {\n            get: () => set.fresh(),\n            enumerable: true,\n            configurable: false,\n        },\n        reload: {\n            value: () => set.reload(),\n            enumerable: true,\n            configurable: false,\n            writable: false,\n        },\n        reloading: {\n            get: () => !!set._pendingFetch,\n            enumerable: true,\n            configurable: false,\n        },\n        jwks: {\n            value: () => set._local?.jwks(),\n            enumerable: true,\n            configurable: false,\n            writable: false,\n        },\n    });\n    return remoteJWKSet;\n}\n\nconst decode = decode$1;\n\nfunction decodeJwt(jwt) {\n    if (typeof jwt !== 'string')\n        throw new JWTInvalid('JWTs must use Compact JWS serialization, JWT must be a string');\n    const { 1: payload, length } = jwt.split('.');\n    if (length === 5)\n        throw new JWTInvalid('Only JWTs using Compact JWS serialization can be decoded');\n    if (length !== 3)\n        throw new JWTInvalid('Invalid JWT');\n    if (!payload)\n        throw new JWTInvalid('JWTs must contain a payload');\n    let decoded;\n    try {\n        decoded = decode(payload);\n    }\n    catch {\n        throw new JWTInvalid('Failed to base64url decode the payload');\n    }\n    let result;\n    try {\n        result = JSON.parse(decoder.decode(decoded));\n    }\n    catch {\n        throw new JWTInvalid('Failed to parse the decoded payload as JSON');\n    }\n    if (!isObject(result))\n        throw new JWTInvalid('Invalid JWT Claims Set');\n    return result;\n}\n\nfunction getModulusLengthOption(options) {\n    const modulusLength = options?.modulusLength ?? 2048;\n    if (typeof modulusLength !== 'number' || modulusLength < 2048) {\n        throw new JOSENotSupported('Invalid or unsupported modulusLength option provided, 2048 bits or larger keys must be used');\n    }\n    return modulusLength;\n}\nasync function generateKeyPair$1(alg, options) {\n    let algorithm;\n    let keyUsages;\n    switch (alg) {\n        case 'PS256':\n        case 'PS384':\n        case 'PS512':\n            algorithm = {\n                name: 'RSA-PSS',\n                hash: `SHA-${alg.slice(-3)}`,\n                publicExponent: new Uint8Array([0x01, 0x00, 0x01]),\n                modulusLength: getModulusLengthOption(options),\n            };\n            keyUsages = ['sign', 'verify'];\n            break;\n        case 'RS256':\n        case 'RS384':\n        case 'RS512':\n            algorithm = {\n                name: 'RSASSA-PKCS1-v1_5',\n                hash: `SHA-${alg.slice(-3)}`,\n                publicExponent: new Uint8Array([0x01, 0x00, 0x01]),\n                modulusLength: getModulusLengthOption(options),\n            };\n            keyUsages = ['sign', 'verify'];\n            break;\n        case 'RSA-OAEP':\n        case 'RSA-OAEP-256':\n        case 'RSA-OAEP-384':\n        case 'RSA-OAEP-512':\n            algorithm = {\n                name: 'RSA-OAEP',\n                hash: `SHA-${parseInt(alg.slice(-3), 10) || 1}`,\n                publicExponent: new Uint8Array([0x01, 0x00, 0x01]),\n                modulusLength: getModulusLengthOption(options),\n            };\n            keyUsages = ['decrypt', 'unwrapKey', 'encrypt', 'wrapKey'];\n            break;\n        case 'ES256':\n            algorithm = { name: 'ECDSA', namedCurve: 'P-256' };\n            keyUsages = ['sign', 'verify'];\n            break;\n        case 'ES384':\n            algorithm = { name: 'ECDSA', namedCurve: 'P-384' };\n            keyUsages = ['sign', 'verify'];\n            break;\n        case 'ES512':\n            algorithm = { name: 'ECDSA', namedCurve: 'P-521' };\n            keyUsages = ['sign', 'verify'];\n            break;\n        case 'Ed25519':\n            algorithm = { name: 'Ed25519' };\n            keyUsages = ['sign', 'verify'];\n            break;\n        case 'EdDSA': {\n            keyUsages = ['sign', 'verify'];\n            const crv = options?.crv ?? 'Ed25519';\n            switch (crv) {\n                case 'Ed25519':\n                case 'Ed448':\n                    algorithm = { name: crv };\n                    break;\n                default:\n                    throw new JOSENotSupported('Invalid or unsupported crv option provided');\n            }\n            break;\n        }\n        case 'ECDH-ES':\n        case 'ECDH-ES+A128KW':\n        case 'ECDH-ES+A192KW':\n        case 'ECDH-ES+A256KW': {\n            keyUsages = ['deriveKey', 'deriveBits'];\n            const crv = options?.crv ?? 'P-256';\n            switch (crv) {\n                case 'P-256':\n                case 'P-384':\n                case 'P-521': {\n                    algorithm = { name: 'ECDH', namedCurve: crv };\n                    break;\n                }\n                case 'X25519':\n                case 'X448':\n                    algorithm = { name: crv };\n                    break;\n                default:\n                    throw new JOSENotSupported('Invalid or unsupported crv option provided, supported values are P-256, P-384, P-521, X25519, and X448');\n            }\n            break;\n        }\n        default:\n            throw new JOSENotSupported('Invalid or unsupported JWK \"alg\" (Algorithm) Parameter value');\n    }\n    return crypto$1.subtle.generateKey(algorithm, options?.extractable ?? false, keyUsages);\n}\n\nasync function generateKeyPair(alg, options) {\n    return generateKeyPair$1(alg, options);\n}\n\n/**\n * When the client does not have a webid profile document, use this.\n *\n * @param registration_endpoint\n * @param redirect__uris\n * @returns\n */\nconst requestDynamicClientRegistration = async (registration_endpoint, client_details) => {\n    // prepare dynamic client registration\n    const client_registration_request_body = {\n        ...client_details,\n        grant_types: [\"authorization_code\", \"refresh_token\"],\n        // id_token_signed_response_alg: \"ES256\", // omitting as NSS does not support ES256 while CSS does not support RS256\n        token_endpoint_auth_method: \"none\",\n        application_type: \"web\",\n        subject_type: \"public\",\n    };\n    // register\n    return fetch(registration_endpoint, {\n        method: \"POST\",\n        headers: {\n            \"Content-Type\": \"application/json\",\n        },\n        body: JSON.stringify(client_registration_request_body),\n    });\n};\n\n/**\n * Login with the idp, using a provided `client_id` or dynamic client registration if none provided.\n *\n * @param idp\n * @param redirect_uri\n */\nconst redirectForLogin = async (idp, redirect_uri, client_details) => {\n    // RFC 6749 - Section 3.1.2 - sanitize redirect_uri\n    const redirect_uri_ = new URL(redirect_uri);\n    const redirect_uri_sane = redirect_uri_.origin + redirect_uri_.pathname + redirect_uri_.search;\n    // lookup openid configuration of idp\n    const idp_origin = new URL(idp).origin;\n    const openid_configuration = await fetch(`${idp_origin}/.well-known/openid-configuration`)\n        .then((response) => {\n        if (!response.ok) {\n            throw new Error(`HTTP error! Status: ${response.status}`);\n        }\n        return response.json();\n    });\n    // RFC 9207 iss check: remember the identity provider (idp) / issuer (iss) - relaxing for trailing slash\n    const issuer = openid_configuration[\"issuer\"];\n    const trim_trailing_slash = (url) => (url.endsWith('/') ? url.slice(0, -1) : url);\n    if (trim_trailing_slash(idp) !== trim_trailing_slash(issuer)) { // expected idp matches received issuer mod trailing slash?\n        throw new Error(\"RFC 9207 - iss !== idp - \" + issuer + \" !== \" + idp);\n    }\n    sessionStorage.setItem(\"idp\", issuer);\n    // remember token endpoint\n    sessionStorage.setItem(\"token_endpoint\", openid_configuration[\"token_endpoint\"]);\n    // remember jwks_uri for later token verification\n    sessionStorage.setItem(\"jwks_uri\", openid_configuration[\"jwks_uri\"]);\n    let client_id = client_details?.client_id;\n    // no client_id => attempt dynamic registration\n    if (!client_id) {\n        // use registration endpoint\n        const registration_endpoint = openid_configuration[\"registration_endpoint\"];\n        // get client registration\n        const client_registration = await requestDynamicClientRegistration(registration_endpoint, client_details ?? { redirect_uris: [redirect_uri_sane] })\n            .then((response) => {\n            if (!response.ok) {\n                throw new Error(`HTTP error! Status: ${response.status}`);\n            }\n            return response.json();\n        });\n        client_id = client_registration[\"client_id\"];\n    }\n    // remember client_id if not URL\n    try {\n        new URL(client_id);\n    }\n    catch {\n        sessionStorage.setItem(\"client_id\", client_id);\n    }\n    // RFC 7636 PKCE, remember code verifer\n    const { pkce_code_verifier, pkce_code_challenge } = await getPKCEcode();\n    sessionStorage.setItem(\"pkce_code_verifier\", pkce_code_verifier);\n    // RFC 6749 OAuth 2.0 - CSRF token\n    const csrf_token = window.crypto.randomUUID();\n    sessionStorage.setItem(\"csrf_token\", csrf_token);\n    // redirect to idp\n    const redirect_to_idp = openid_configuration[\"authorization_endpoint\"] +\n        `?response_type=code` +\n        `&redirect_uri=${encodeURIComponent(redirect_uri_sane)}` +\n        `&scope=openid offline_access webid` +\n        `&client_id=${encodeURIComponent(client_id)}` +\n        `&code_challenge_method=S256` +\n        `&code_challenge=${pkce_code_challenge}` +\n        `&state=${csrf_token}` +\n        `&prompt=consent`; // this query parameter value MUST be present for CSS v7 to issue a refresh token ( // TODO open issue because prompting is the default behaviour but without this query param no refresh token is provided despite the \"remember this client\" box being checked)\n    window.location.href = redirect_to_idp;\n};\n/**\n * RFC 7636 PKCE\n * @returns PKCE code verifier and PKCE code challenge\n */\nconst getPKCEcode = async () => {\n    // create random string as PKCE code verifier\n    const pkce_code_verifier = window.crypto.randomUUID() + \"-\" + window.crypto.randomUUID();\n    // hash the verifier and base64URL encode as PKCE code challenge\n    const digest = new Uint8Array(await window.crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(pkce_code_verifier)));\n    const pkce_code_challenge = btoa(String.fromCharCode(...digest))\n        .replace(/\\+/g, \"-\")\n        .replace(/\\//g, \"_\")\n        .replace(/=+$/, \"\");\n    return { pkce_code_verifier, pkce_code_challenge };\n};\n/**\n * On incoming redirect from OpenID provider (idp/iss),\n * URL contains authrization code, issuer (idp) and state (csrf token),\n * get an access token for the authrization code.\n */\nconst onIncomingRedirect = async (client_details, database) => {\n    const url = new URL(window.location.href);\n    // authorization code\n    const authorization_code = url.searchParams.get(\"code\");\n    // if no code, session remains unauthenticated at this point\n    if (authorization_code === null) {\n        return { clientDetails: client_details };\n    }\n    // RFC 9207 issuer check\n    const idp = sessionStorage.getItem(\"idp\");\n    if (idp === null || url.searchParams.get(\"iss\") !== idp) {\n        throw new Error(\"RFC 9207 - iss !== idp - \" + url.searchParams.get(\"iss\") + \" !== \" + idp);\n    }\n    // RFC 6749 OAuth 2.0\n    if (url.searchParams.get(\"state\") !== sessionStorage.getItem(\"csrf_token\")) {\n        throw new Error(\"RFC 6749 - state !== csrf_token - \" + url.searchParams.get(\"state\") + \" !== \" + sessionStorage.getItem(\"csrf_token\"));\n    }\n    // remove redirect query parameters from URL\n    url.searchParams.delete(\"iss\");\n    url.searchParams.delete(\"state\");\n    url.searchParams.delete(\"code\");\n    window.history.pushState({}, document.title, url.toString());\n    // prepare token request\n    const pkce_code_verifier = sessionStorage.getItem(\"pkce_code_verifier\");\n    if (pkce_code_verifier === null) {\n        throw new Error(\"Access Token Request preparation - Could not find in sessionStorage: pkce_code_verifier\");\n    }\n    const client_id = client_details?.client_id || sessionStorage.getItem(\"client_id\");\n    if (!client_id) {\n        throw new Error(\"Access Token Request preparation - Could not find in sessionStorage: client_id (dynamic registration)\");\n    }\n    const token_endpoint = sessionStorage.getItem(\"token_endpoint\");\n    if (token_endpoint === null) {\n        throw new Error(\"Access Token Request preparation - Could not find in sessionStorage: token_endpoint\");\n    }\n    // RFC 9449 DPoP\n    const key_pair = await generateKeyPair(\"ES256\");\n    // get access token\n    const token_response = await requestAccessToken(authorization_code, pkce_code_verifier, url.toString(), client_id, token_endpoint, key_pair)\n        .then((response) => {\n        if (!response.ok) {\n            throw new Error(`HTTP error! Status: ${response.status}`);\n        }\n        return response.json();\n    });\n    // verify access_token // ! Solid-OIDC specification says it should be a dpop-bound `id token` but implementations provide a dpop-bound `access token`\n    const accessToken = token_response[\"access_token\"];\n    const jwks_uri = sessionStorage.getItem(\"jwks_uri\");\n    if (jwks_uri === null) {\n        throw new Error(\"Access Token validation preparation - Could not find in sessionStorage: jwks_uri\");\n    }\n    const jwks = createRemoteJWKSet(new URL(jwks_uri));\n    const { payload } = await jwtVerify(accessToken, jwks, {\n        issuer: idp, // RFC 9207\n        audience: \"solid\", // RFC 7519 // ! \"solid\" as per implementations ...\n        // exp, nbf, iat - handled automatically\n    });\n    // check dpop thumbprint\n    const dpopThumbprint = await calculateJwkThumbprint(await exportJWK(key_pair.publicKey));\n    if (payload[\"cnf\"][\"jkt\"] !== dpopThumbprint) {\n        throw new Error(\"Access Token validation failed on `jkt`: jkt !== DPoP thumbprint - \" + payload[\"cnf\"][\"jkt\"] + \" !== \" + dpopThumbprint);\n    }\n    // check client_id\n    if (payload[\"client_id\"] !== client_id) {\n        throw new Error(\"Access Token validation failed on `client_id`: JWT payload !== client_id - \" + payload[\"client_id\"] + \" !== \" + client_id);\n    }\n    // summarise session info\n    const token_details = { ...token_response, dpop_key_pair: key_pair };\n    const idp_details = { idp, jwks_uri, token_endpoint };\n    if (!client_details)\n        client_details = { redirect_uris: [url.toString()] };\n    client_details.client_id = client_id;\n    // and persist refresh token details\n    if (database) {\n        await database.init();\n        await Promise.all([\n            database.setItem(\"idp\", idp),\n            database.setItem(\"jwks_uri\", jwks_uri),\n            database.setItem(\"token_endpoint\", token_endpoint),\n            database.setItem(\"client_id\", client_id),\n            database.setItem(\"dpop_keypair\", key_pair),\n            database.setItem(\"refresh_token\", token_response[\"refresh_token\"])\n        ]);\n        database.close();\n    }\n    // clean session storage\n    sessionStorage.removeItem(\"csrf_token\");\n    sessionStorage.removeItem(\"pkce_code_verifier\");\n    sessionStorage.removeItem(\"idp\");\n    sessionStorage.removeItem(\"jwks_uri\");\n    sessionStorage.removeItem(\"token_endpoint\");\n    sessionStorage.removeItem(\"client_id\");\n    // return session information\n    return {\n        clientDetails: client_details,\n        idpDetails: idp_details,\n        tokenDetails: token_details\n    };\n};\n/**\n * Request an dpop-bound access token from a token endpoint\n * @param authorization_code\n * @param pkce_code_verifier\n * @param redirect_uri\n * @param client_id\n * @param token_endpoint\n * @param key_pair\n * @returns\n */\nconst requestAccessToken = async (authorization_code, pkce_code_verifier, redirect_uri, client_id, token_endpoint, key_pair) => {\n    // prepare public key to bind access token to\n    const jwk_public_key = await exportJWK(key_pair.publicKey);\n    jwk_public_key.alg = \"ES256\";\n    // sign the access token request DPoP token\n    const dpop = await new SignJWT({\n        htu: token_endpoint,\n        htm: \"POST\",\n    })\n        .setIssuedAt()\n        .setJti(window.crypto.randomUUID())\n        .setProtectedHeader({\n        alg: \"ES256\",\n        typ: \"dpop+jwt\",\n        jwk: jwk_public_key,\n    })\n        .sign(key_pair.privateKey);\n    return fetch(token_endpoint, {\n        method: \"POST\",\n        headers: {\n            dpop,\n            \"Content-Type\": \"application/x-www-form-urlencoded\",\n        },\n        body: new URLSearchParams({\n            grant_type: \"authorization_code\",\n            code: authorization_code,\n            code_verifier: pkce_code_verifier,\n            redirect_uri: redirect_uri,\n            client_id: client_id,\n        }),\n    });\n};\n\nconst renewTokens = async (sessionDatabase) => {\n    // remember session details\n    try {\n        await sessionDatabase.init();\n        const client_id = await sessionDatabase.getItem(\"client_id\");\n        const token_endpoint = await sessionDatabase.getItem(\"token_endpoint\");\n        const key_pair = await sessionDatabase.getItem(\"dpop_keypair\");\n        const refresh_token = await sessionDatabase.getItem(\"refresh_token\");\n        if (client_id === null || token_endpoint === null || key_pair === null || refresh_token === null) {\n            // we can not restore the old session\n            throw new Error(\"Could not refresh tokens: details missing from database.\");\n        }\n        const token_response = await requestFreshTokens(refresh_token, client_id, token_endpoint, key_pair)\n            .then((response) => {\n            if (!response.ok) {\n                throw new Error(`HTTP error! Status: ${response.status}`);\n            }\n            return response.json();\n        });\n        // verify access_token // ! Solid-OIDC specification says it should be a dpop-bound `id token` but implementations provide a dpop-bound `access token`\n        const accessToken = token_response[\"access_token\"];\n        const idp = await sessionDatabase.getItem(\"idp\");\n        if (idp === null) {\n            throw new Error(\"Access Token validation preparation - Could not find in sessionDatabase: idp\");\n        }\n        const jwks_uri = await sessionDatabase.getItem(\"jwks_uri\");\n        if (jwks_uri === null) {\n            throw new Error(\"Access Token validation preparation - Could not find in sessionDatabase: jwks_uri\");\n        }\n        const jwks = createRemoteJWKSet(new URL(jwks_uri));\n        const { payload } = await jwtVerify(accessToken, jwks, {\n            issuer: idp, // RFC 9207\n            audience: \"solid\", // RFC 7519 // ! \"solid\" as per implementations ...\n            // exp, nbf, iat - handled automatically\n        });\n        // check dpop thumbprint\n        const dpopThumbprint = await calculateJwkThumbprint(await exportJWK(key_pair.publicKey));\n        if (payload[\"cnf\"][\"jkt\"] !== dpopThumbprint) {\n            throw new Error(\"Access Token validation failed on `jkt`: jkt !== DPoP thumbprint - \" + payload[\"cnf\"][\"jkt\"] + \" !== \" + dpopThumbprint);\n        }\n        // check client_id\n        if (payload[\"client_id\"] !== client_id) {\n            throw new Error(\"Access Token validation failed on `client_id`: JWT payload !== client_id - \" + payload[\"client_id\"] + \" !== \" + client_id);\n        }\n        // set new refresh token for token rotation\n        await sessionDatabase.setItem(\"refresh_token\", token_response[\"refresh_token\"]);\n        return {\n            ...token_response,\n            dpop_key_pair: key_pair,\n        };\n    }\n    finally {\n        sessionDatabase.close();\n    }\n};\n/**\n * Request an dpop-bound access token from a token endpoint using a refresh token\n * @param authorization_code\n * @param pkce_code_verifier\n * @param redirect_uri\n * @param client_id\n * @param token_endpoint\n * @param key_pair\n * @returns\n */\nconst requestFreshTokens = async (refresh_token, client_id, token_endpoint, key_pair) => {\n    // prepare public key to bind access token to\n    const jwk_public_key = await exportJWK(key_pair.publicKey);\n    jwk_public_key.alg = \"ES256\";\n    // sign the access token request DPoP token\n    const dpop = await new SignJWT({\n        htu: token_endpoint,\n        htm: \"POST\",\n    })\n        .setIssuedAt()\n        .setJti(self.crypto.randomUUID())\n        .setProtectedHeader({\n        alg: \"ES256\",\n        typ: \"dpop+jwt\",\n        jwk: jwk_public_key,\n    })\n        .sign(key_pair.privateKey);\n    return fetch(token_endpoint, {\n        method: \"POST\",\n        headers: {\n            dpop,\n            \"Content-Type\": \"application/x-www-form-urlencoded\",\n        },\n        body: new URLSearchParams({\n            grant_type: \"refresh_token\",\n            refresh_token,\n            client_id\n        }),\n    });\n};\n\nvar SessionEvents;\n(function (SessionEvents) {\n    SessionEvents[\"STATE_CHANGE\"] = \"sessionStateChange\";\n    SessionEvents[\"EXPIRATION_WARNING\"] = \"sessionExpirationWarning\";\n    SessionEvents[\"EXPIRATION\"] = \"sessionExpiration\";\n})(SessionEvents || (SessionEvents = {}));\n//\n//\n//  Basic implementation\n//\n//\n/**\n * The SessionCore class manages session state and core logic but does not handle the refresh lifecycle.\n * It receives {@link SessionOptions} with a database to be able to restore a session.\n * That database can be re-used by (your!) surrounding implementation to handle the refresh lifecycle.\n * If no database was provided, refresh information cannot be stored, and thus token refresh (via the refresh token grant) is not possible in this case.\n *\n * If you are building a web app, use the Session implementation provided in the default `/web` version of this library.\n */\nclass SessionCore extends EventTarget {\n    isActive_ = false;\n    exp_;\n    webId_ = undefined;\n    currentAth_ = undefined;\n    information;\n    database;\n    refreshPromise;\n    resolveRefresh;\n    rejectRefresh;\n    constructor(clientDetails, sessionOptions) {\n        super();\n        this.authFetch = this.authFetch.bind(this);\n        this.information = { clientDetails };\n        this.database = sessionOptions?.database;\n        if (sessionOptions?.onSessionStateChange)\n            this.addEventListener(SessionEvents.STATE_CHANGE, (event) => sessionOptions.onSessionStateChange?.(event));\n        if (sessionOptions?.onSessionExpirationWarning)\n            this.addEventListener(SessionEvents.EXPIRATION_WARNING, (event) => sessionOptions?.onSessionExpirationWarning?.(event));\n        if (sessionOptions?.onSessionExpiration)\n            this.addEventListener(SessionEvents.EXPIRATION, (event) => sessionOptions?.onSessionExpiration?.(event));\n    }\n    async login(idp, redirect_uri) {\n        await redirectForLogin(idp, redirect_uri, this.information.clientDetails);\n    }\n    /**\n     * Handles the redirect from the identity provider after a login attempt.\n     * It attempts to retrieve tokens using the authorization code.\n     * Upon success, it tries to persist information to refresh tokens in the session database.\n     * If no database was provided, no information is persisted.\n     */\n    async handleRedirectFromLogin() {\n        // Redirect after Authorization Code Grant // memory via sessionStorage\n        const newSessionInfo = await onIncomingRedirect(this.information.clientDetails, this.database);\n        // no session - we remain unauthenticated\n        if (!newSessionInfo.tokenDetails)\n            return;\n        // we got a session\n        this.information.clientDetails = newSessionInfo.clientDetails;\n        this.information.idpDetails = newSessionInfo.idpDetails;\n        await this.setTokenDetails(newSessionInfo.tokenDetails);\n        // callback state change \n        this.dispatchStateChangeEvent(); // we logged in\n    }\n    /**\n     * Handles session restoration using the refresh token grant.\n     */\n    async restore() {\n        if (!this.database) {\n            throw new Error(\"Could not refresh tokens: missing database. Provide database in sessionOption.\");\n        }\n        if (this.refreshPromise) {\n            return this.refreshPromise;\n        }\n        this.refreshPromise = new Promise((resolve, reject) => {\n            this.resolveRefresh = resolve;\n            this.rejectRefresh = reject;\n        });\n        // Restore session using Refresh Token Grant \n        const wasActive = this.isActive;\n        renewTokens(this.database)\n            .then(tokenDetails => this.setTokenDetails(tokenDetails))\n            .then(() => this.resolveRefresh())\n            .catch(error => {\n            if (this.isActive) {\n                this.rejectRefresh(new Error(error || 'Token refresh failed'));\n                // do not change state (yet), let the app decide if they want to logout or if they just want to retry.\n                if (!this.isExpired()) {\n                    this.dispatchExpirationWarningEvent();\n                }\n                else {\n                    this.dispatchExpirationEvent();\n                }\n            }\n            else {\n                this.rejectRefresh(new Error(\"No session to restore.\"));\n            }\n        }).finally(() => {\n            this.clearRefreshPromise();\n            if (wasActive !== this.isActive)\n                this.dispatchStateChangeEvent();\n        });\n        return this.refreshPromise;\n    }\n    /**\n     * This logs the user out.\n     * Clears all session-related information, including IDP details and tokens.\n     * Client ID is preserved if it is a URI.\n     */\n    async logout() {\n        // clean session data\n        this.isActive_ = false;\n        this.exp_ = undefined;\n        this.webId_ = undefined;\n        this.currentAth_ = undefined;\n        this.information.idpDetails = undefined;\n        this.information.tokenDetails = undefined;\n        // client details are preserved\n        if (this.refreshPromise && this.rejectRefresh) {\n            this.rejectRefresh(new Error('Logout during token refresh.'));\n            this.clearRefreshPromise();\n        }\n        // clean session database\n        if (this.database) {\n            await this.database.init();\n            await this.database.clear();\n            this.database.close();\n        }\n        // callback state change\n        this.dispatchStateChangeEvent(); // we logged out\n    }\n    /**\n     * Makes an HTTP fetch request.\n     * If a session is active, it includes the DPoP token and the access token in the `Authorization` header.\n     *\n     * @param input The URL or Request object to fetch.\n     * @param init Optional fetch request options (RequestInit). Headers for `Authorization` and `DPoP` will be overwritten if a session is active.\n     * @param dpopPayload Optional payload for the DPoP token. If provided, it overrides the default `htu` and `htm` claims.\n     * @returns A promise that resolves to the fetch Response.\n     */\n    async authFetch(input, init, dpopPayload) {\n        // if there is not session established, just delegate to the default fetch\n        if (!this.isActive) {\n            return fetch(input, init);\n        }\n        // TODO\n        // TODO do HEAD request to check if authentication is actually required, only then include tokens\n        // TODO\n        // prepare authenticated call using a DPoP token (either provided payload, or default)\n        let url;\n        let method;\n        let headers;\n        // wrangle fetch input parameters into place\n        if (input instanceof Request) {\n            url = new URL(input.url);\n            method = init?.method || input?.method || 'GET';\n            headers = new Headers(input.headers);\n        }\n        else {\n            init = init || {};\n            url = new URL(input.toString());\n            method = init.method || 'GET';\n            headers = init.headers ? new Headers(init.headers) : new Headers();\n        }\n        // create DPoP token, and add tokens to request\n        await this._renewTokensIfExpired();\n        dpopPayload = dpopPayload ?? {\n            htu: `${url.origin}${url.pathname}`,\n            htm: method.toUpperCase()\n        };\n        const dpop = await this._createSignedDPoPToken(dpopPayload);\n        // overwrite headers: authorization, dpop\n        headers.set(\"dpop\", dpop);\n        headers.set(\"authorization\", `DPoP ${this.information.tokenDetails.access_token}`);\n        // check explicitly; to avoid unexpected behaviour\n        if (input instanceof Request) { // clone the provided request, and override the headers\n            return fetch(new Request(input, { ...init, headers }));\n        }\n        // just override the headers\n        return fetch(url, { ...init, headers });\n    }\n    // \n    // Setters\n    //\n    async setTokenDetails(tokenDetails) {\n        this.information.tokenDetails = tokenDetails;\n        await this._updateSessionDetailsFromToken(tokenDetails.access_token);\n    }\n    clearRefreshPromise() {\n        this.refreshPromise = undefined;\n        this.resolveRefresh = undefined;\n        this.rejectRefresh = undefined;\n    }\n    //\n    // Getters\n    //\n    get isActive() {\n        return this.isActive_;\n    }\n    get webId() {\n        return this.webId_;\n    }\n    isExpired() {\n        if (!this.exp_)\n            return true;\n        return this._isTokenExpired(this.exp_);\n    }\n    getExpiresIn() {\n        if (!this.exp_)\n            return -1;\n        return this._getTokenTTL(this.exp_);\n    }\n    getTokenDetails() {\n        return this.information.tokenDetails;\n    }\n    //\n    // Helpers\n    //\n    /**\n     * Check if the current token is expired (which may happen during device/browser/tab hibernation),\n     * and if expired, restore the session.\n     */\n    async _renewTokensIfExpired() {\n        if (this.isExpired()) {\n            if (!this.refreshPromise) {\n                await this.restore(); // Initiate and wait\n            }\n            else {\n                await this.refreshPromise; // Wait for already pending\n            }\n        }\n    }\n    /**\n     * RFC 9449 - Hash of the access token\n     */\n    async _computeAth(accessToken) {\n        // Convert the ASCII string of the token to a Uint8Array\n        const encoder = new TextEncoder();\n        const data = encoder.encode(accessToken); // ASCII by default\n        // Compute SHA-256 hash\n        const hashBuffer = await crypto.subtle.digest('SHA-256', data);\n        // Convert ArrayBuffer to base64url string\n        const hashArray = Array.from(new Uint8Array(hashBuffer));\n        const base64 = btoa(String.fromCharCode(...hashArray));\n        // Convert base64 to base64url\n        const base64url = base64\n            .replace(/\\+/g, '-')\n            .replace(/\\//g, '_')\n            .replace(/=+$/, '');\n        return base64url;\n    }\n    /**\n     * Creates a signed DPoP (Demonstration of Proof-of-Possession) token.\n     *\n     * @param payload The payload to include in the DPoP token. By default, it includes `htu` (HTTP target URI) and `htm` (HTTP method).\n     * @returns A promise that resolves to the signed DPoP token string.\n     * @throws Error if the session has not been initialized - if no token details are available.\n     */\n    async _createSignedDPoPToken(payload) {\n        if (!this.information.tokenDetails || !this.currentAth_) {\n            throw new Error(\"Session not established.\");\n        }\n        payload.ath = this.currentAth_;\n        const jwk_public_key = await exportJWK(this.information.tokenDetails.dpop_key_pair.publicKey);\n        return new SignJWT(payload)\n            .setIssuedAt()\n            .setJti(window.crypto.randomUUID())\n            .setProtectedHeader({\n            alg: \"ES256\",\n            typ: \"dpop+jwt\",\n            jwk: jwk_public_key,\n        })\n            .sign(this.information.tokenDetails.dpop_key_pair.privateKey);\n    }\n    async _updateSessionDetailsFromToken(access_token) {\n        if (!access_token) {\n            await this.logout();\n            return;\n        }\n        try {\n            const decodedToken = decodeJwt(access_token);\n            const webId = decodedToken.webid;\n            if (!webId) {\n                throw new Error('Missing webid claim in access token');\n            }\n            const exp = decodedToken.exp;\n            if (!exp) {\n                throw new Error('Missing exp claim in access token');\n            }\n            this.currentAth_ = await this._computeAth(access_token); // must be done before session set to active\n            this.webId_ = webId;\n            this.exp_ = exp;\n            this.isActive_ = true;\n        }\n        catch (error) {\n            await this.logout();\n        }\n    }\n    /**\n      * Checks if a JWT expiration timestamp ('exp') has passed.\n      */\n    _isTokenExpired(exp, bufferSeconds = 0) {\n        if (typeof exp !== 'number' || isNaN(exp)) {\n            return true;\n        }\n        return this._getTokenTTL(exp, bufferSeconds) < 0;\n    }\n    _getTokenTTL(exp, bufferSeconds = 0) {\n        const currentTimeSeconds = Math.floor(Date.now() / 1000);\n        return exp - (currentTimeSeconds + bufferSeconds);\n    }\n    // \n    // Events\n    //\n    dispatchStateChangeEvent() {\n        this.dispatchEvent(new CustomEvent(SessionEvents.STATE_CHANGE, { detail: { isActive: this.isActive, webId: this.webId } }));\n    }\n    dispatchExpirationWarningEvent() {\n        this.dispatchEvent(new CustomEvent(SessionEvents.EXPIRATION_WARNING, { detail: { expires_in: this.getExpiresIn() } }));\n    }\n    dispatchExpirationEvent() {\n        this.dispatchEvent(new CustomEvent(SessionEvents.EXPIRATION));\n    }\n}\n\nexport { SessionCore, SessionEvents };\n//# sourceMappingURL=index.js.map\n","/**\n * OIDC session factory.\n *\n * Everything needed to create and configure the underlying auth session:\n *   - Session database backends (in-memory and IndexedDB)\n *   - Session instantiation (WebSession or SessionCore, with local-dev\n *     fallbacks for environments where the service worker can't load)\n *   - Login compatibility shim that normalises legacy call-site signatures\n *     and resolves the canonical issuer through /.well-known discovery\n *\n * The raw session instance (_session) is consumed by authSession.ts where\n * the legacy event layer and logout listener are attached.\n *\n * DO NOT import _session directly — always go through authSession.ts so\n * the event wiring is guaranteed to run.\n */\n\nimport {\n  Session as WebSession,\n} from '@uvdsl/solid-oidc-client-browser'\nimport * as OidcCore from '@uvdsl/solid-oidc-client-browser/core'\nimport type { Session as OidcSession, SessionDatabase } from '@uvdsl/solid-oidc-client-browser/core'\n\n// ---------------------------------------------------------------------------\n// Session databases\n// ---------------------------------------------------------------------------\n\nexport class MemorySessionDatabase implements SessionDatabase {\n  private readonly map = new Map<string, any>()\n\n  private shouldPreserveExistingRefreshToken(id: string, value: any): boolean {\n    return id === 'refresh_token' && (value == null || value === '') && this.map.has(id)\n  }\n\n  async init (): Promise<SessionDatabase> {\n    return this\n  }\n\n  async setItem (id: string, value: any): Promise<void> {\n    // Some Solid IdPs do not include refresh_token on refresh responses.\n    // Keep the previous token instead of overwriting it with null/undefined.\n    if (this.shouldPreserveExistingRefreshToken(id, value)) {\n      return\n    }\n    this.map.set(id, value)\n  }\n\n  async getItem (id: string): Promise<any> {\n    return this.map.has(id) ? this.map.get(id) : null\n  }\n\n  async deleteItem (id: string): Promise<void> {\n    this.map.delete(id)\n  }\n\n  async clear (): Promise<void> {\n    this.map.clear()\n  }\n\n  close (): void {\n    // No-op for in-memory database\n  }\n}\n\nexport class IndexedDbSessionDatabase implements SessionDatabase {\n  private db: IDBDatabase | null = null\n  private readonly dbName = 'soidc'\n  private readonly storeName = 'session'\n  private readonly dbVersion = 1\n\n  private async shouldPreserveExistingRefreshToken(id: string, value: any): Promise<boolean> {\n    if (id !== 'refresh_token' || !(value == null || value === '')) {\n      return false\n    }\n    const existing = await this.getItem(id)\n    return existing != null && existing !== ''\n  }\n\n  async init (): Promise<SessionDatabase> {\n    if (this.db) return this\n    if (typeof indexedDB === 'undefined') {\n      throw new Error('IndexedDB is not available in this environment')\n    }\n\n    await new Promise<void>((resolve, reject) => {\n      const request = indexedDB.open(this.dbName, this.dbVersion)\n\n      request.onerror = () => reject(request.error)\n      request.onsuccess = () => {\n        this.db = request.result\n        resolve()\n      }\n      request.onupgradeneeded = () => {\n        const db = request.result\n        if (!db.objectStoreNames.contains(this.storeName)) {\n          db.createObjectStore(this.storeName)\n        }\n      }\n    })\n\n    return this\n  }\n\n  async setItem (id: string, value: any): Promise<void> {\n    await this.init()\n    // Some Solid IdPs do not include refresh_token on refresh responses.\n    // Keep the previous token instead of overwriting it with null/undefined.\n    if (await this.shouldPreserveExistingRefreshToken(id, value)) {\n      return\n    }\n    await this.withStore('readwrite', store => store.put(value, id))\n  }\n\n  async getItem (id: string): Promise<any> {\n    await this.init()\n    return this.withStore('readonly', store => store.get(id))\n  }\n\n  async deleteItem (id: string): Promise<void> {\n    await this.init()\n    await this.withStore('readwrite', store => store.delete(id))\n  }\n\n  async clear (): Promise<void> {\n    await this.init()\n    await this.withStore('readwrite', store => store.clear())\n  }\n\n  close (): void {\n    if (this.db) {\n      this.db.close()\n      this.db = null\n    }\n  }\n\n  private withStore(mode: IDBTransactionMode, op: (store: IDBObjectStore) => IDBRequest<any>): Promise<any> {\n    return new Promise<any>((resolve, reject) => {\n      if (!this.db) {\n        reject(new Error('Session database not initialized'))\n        return\n      }\n\n      const tx = this.db.transaction(this.storeName, mode)\n      const store = tx.objectStore(this.storeName)\n      const request = op(store)\n      let result: any = null\n\n      tx.onerror = () => reject(tx.error ?? request.error)\n      tx.onabort = () => reject(tx.error ?? request.error ?? new Error('IndexedDB transaction aborted'))\n      tx.oncomplete = () => resolve(result)\n\n      request.onerror = () => reject(request.error)\n      request.onsuccess = () => {\n        result = request.result ?? null\n      }\n    })\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Session instantiation\n// ---------------------------------------------------------------------------\n\nfunction getSessionCoreCtor (): (new (...args: any[]) => OidcSession) | null {\n  const coreAny = OidcCore as any\n  const candidate = coreAny.SessionCore ?? coreAny.default?.SessionCore ?? coreAny.default\n\n  if (typeof candidate !== 'function') {\n    return null\n  }\n\n  return candidate as new (...args: any[]) => OidcSession\n}\n\nconst SessionCoreCtor = getSessionCoreCtor()\n\nfunction createSession (): OidcSession {\n  const shouldSkipWorkerInLocalDev = typeof window !== 'undefined' && (() => {\n    const host = window.location.hostname\n    // In local NSS setups (including subdomain mode like alice.localhost),\n    // worker-based session storage can be brittle and lose state on reload.\n    // Prefer SessionCore + IndexedDB for deterministic persistence.\n    return host === 'localhost' || host === '127.0.0.1' || host.endsWith('.localhost')\n  })()\n\n  if (shouldSkipWorkerInLocalDev) {\n    if (SessionCoreCtor) {\n      return new SessionCoreCtor(undefined, { database: new IndexedDbSessionDatabase() })\n    }\n    return new WebSession()\n  }\n\n  try {\n    return new WebSession()\n  } catch (error) {\n    // In some deployments, worker URL resolution can become file:// and fail cross-origin.\n    // Fall back to SessionCore so auth still works without background refresh worker.\n    // Use IndexedDB to keep refresh-token persistence across page reloads.\n    console.warn('solid-logic: falling back to non-worker auth session:', error)\n    try {\n      if (SessionCoreCtor) {\n        return new SessionCoreCtor(undefined, { database: new IndexedDbSessionDatabase() })\n      }\n      return new WebSession()\n    } catch (dbError) {\n      console.warn('solid-logic: IndexedDB unavailable, using in-memory session database:', dbError)\n      if (SessionCoreCtor) {\n        return new SessionCoreCtor(undefined, { database: new MemorySessionDatabase() })\n      }\n      return new WebSession()\n    }\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Singleton session\n// ---------------------------------------------------------------------------\n\nconst _session = createSession()\n\nexport { _session }\n","/**\n * Issuer discovery utilities.\n *\n * Resolves OIDC issuer endpoints from /.well-known/openid-configuration\n * so that login can use the canonical issuer host.\n */\n\nasync function discoverIssuerFromWellKnown (issuer: string): Promise<string | null> {\n  try {\n    const issuerUrl = new URL(issuer)\n    const wellKnownUrl = new URL('/.well-known/openid-configuration', issuerUrl.origin)\n    const wellKnownResponse = await fetch(wellKnownUrl.toString(), { credentials: 'include' })\n    if (!wellKnownResponse.ok) {\n      return null\n    }\n\n    const wellKnownPayload = await wellKnownResponse.json()\n    if (typeof wellKnownPayload?.issuer !== 'string' || !wellKnownPayload.issuer) {\n      return null\n    }\n\n    return wellKnownPayload.issuer.replace(/\\/$/, '')\n  } catch (_err) {\n    return null\n  }\n}\n\nexport async function resolveIssuerForLogin (issuer: string): Promise<string> {\n  // Prefer the issuer advertised by discovery; if app and issuer hosts still differ,\n  // redirecting to the canonical issuer host is cleaner than rewriting the issuer here.\n  const discoveredIssuer = await discoverIssuerFromWellKnown(issuer)\n  if (discoveredIssuer) {\n    return discoveredIssuer\n  }\n  return issuer\n}\n","/**\n * Auth session wiring.\n *\n * Takes the raw OIDC session from session.ts and layers on:\n *   - Login compatibility shim (normalises legacy call-site signatures\n *     and resolves the canonical issuer)\n *   - SessionEvents shim (legacy EventEmitter-style API)\n *   - Logout listener (emits 'logout' on session deactivation)\n *\n * Exports the fully assembled authSession.\n */\n\nimport type { Session as OidcSession } from '@uvdsl/solid-oidc-client-browser/core'\nimport { _session } from './session'\nimport { resolveIssuerForLogin } from './issuer'\nimport { SessionEvents } from './events'\n\ntype SessionCompatibilityShape = {\n  webId?: string\n  isActive?: boolean\n  info?: {\n    webId?: string\n    isLoggedIn?: boolean\n  }\n  fetch?: (input: RequestInfo | URL, init?: RequestInit) => Promise<Response>\n  authFetch?: (input: string | URL | Request, init?: RequestInit, dpopPayload?: any) => Promise<Response>\n}\n\ntype LoginOptionsLegacy = {\n  oidcIssuer?: string\n  idp?: string\n  issuer?: string\n  redirectUrl?: string\n  redirect_uri?: string\n  redirectUri?: string\n}\n\ntype LoginCompat = {\n  (issuer: string, redirectUrl: string): Promise<unknown>\n  (options: LoginOptionsLegacy): Promise<unknown>\n}\n\nexport type SessionWithLegacyEvents = Omit<OidcSession, 'login'> & SessionCompatibilityShape & {\n  login: LoginCompat\n  events: SessionEvents\n}\n\n// ---------------------------------------------------------------------------\n// Login compatibility shim\n// ---------------------------------------------------------------------------\n// Wraps _session.login() so that call sites with different calling\n// conventions all work.  The underlying session expects:\n//   login(issuer: string, redirectUrl: string)\n//\n// idpOrOptions can be:\n//   - a string (issuer URL) — passed through with less resolution\n//   - an options object with any of these field-name variants:\n//       issuer:   oidcIssuer | idp | issuer\n//       redirect: redirectUrl | redirect_uri | redirectUri\n//     (all redirect field names map to the same value: the URL the IdP\n//     should send the browser back to after authentication)\n//   - anything else — passed through to the underlying session as-is\n//\n// In all cases the issuer is resolved through\n// /.well-known/openid-configuration before redirect so the canonical\n// issuer host is used.\n\nconst sessionAny = _session as any\nconst originalLogin = typeof sessionAny.login === 'function'\n  ? sessionAny.login.bind(_session)\n  : undefined\n\nif (originalLogin) {\n  const compatLogin = async (idpOrOptions: any, redirectUri?: string): Promise<unknown> => {\n    if (idpOrOptions && typeof idpOrOptions === 'object' && !Array.isArray(idpOrOptions)) {\n      const oidcIssuer = idpOrOptions.oidcIssuer ?? idpOrOptions.idp ?? idpOrOptions.issuer\n      const redirectUrl = idpOrOptions.redirectUrl ?? idpOrOptions.redirect_uri ?? idpOrOptions.redirectUri\n      if (typeof oidcIssuer === 'string' && typeof redirectUrl === 'string') {\n        return originalLogin(await resolveIssuerForLogin(oidcIssuer), redirectUrl)\n      }\n    }\n    if (typeof idpOrOptions === 'string') {\n      return originalLogin(await resolveIssuerForLogin(idpOrOptions), redirectUri)\n    }\n    return originalLogin(idpOrOptions, redirectUri)\n  }\n  sessionAny.login = compatLogin as LoginCompat\n}\n\n// ---------------------------------------------------------------------------\n// Legacy event layer\n// ---------------------------------------------------------------------------\n\nconst events = new SessionEvents()\n\n// Emit the legacy 'logout' event when the session transitions from active to inactive.\n// 'login' and 'sessionRestore' are emitted in SolidAuthnLogic.checkUser()\n// because only that call site knows which path activated the session.\nlet _wasActive = (_session as any).isActive ?? Boolean((_session as any).webId)\nif (typeof (_session as unknown as EventTarget).addEventListener === 'function') {\n  ;(_session as unknown as EventTarget).addEventListener('sessionStateChange', () => {\n    const isNowActive = (_session as any).isActive ?? Boolean((_session as any).webId)\n    if (_wasActive && !isNowActive) {\n      events.emit('logout')\n    }\n    _wasActive = isNowActive\n  })\n}\n\nexport const authSession: SessionWithLegacyEvents = Object.assign(\n  _session as Omit<OidcSession, 'login'> & { login: LoginCompat },\n  { events }\n)\n\n// Legacy `info` compatibility shape.\n// The uvdsl session stores state on `webId_`/`isActive_` and exposes them via\n// `webId`/`isActive` getters, but legacy consumers (e.g. solid-ui's\n// `loginStatusBox` widget, `SolidAuthnLogic.currentUser()`'s fallback path)\n// read `authSession.info.webId` / `authSession.info.isLoggedIn`. Expose those\n// as a derived getter so legacy login/logout UI renders the correct state\n// (logout button instead of a mislabelled login button).\nObject.defineProperty(authSession, 'info', {\n  enumerable: true,\n  configurable: true,\n  get (): { webId?: string; isLoggedIn?: boolean } {\n    const sessionAny = _session as any\n    const isActive = sessionAny.isActive === true || Boolean(sessionAny.webId)\n    return {\n      webId: sessionAny.webId,\n      isLoggedIn: isActive\n    }\n  }\n})\n  ","/**\n * Legacy event compatibility layer.\n *\n * Pure EventEmitter-style shim — no side effects, no uvdsl dependencies.\n * Wired into the auth session by authSession.ts.\n */\n\ntype LegacyEventName = 'login' | 'logout' | 'sessionRestore'\ntype LegacyEventHandler = (...args: unknown[]) => void\n\n/**\n * Minimal EventEmitter-style shim so that existing consumers using\n * `authSession.events.on('login' | 'logout' | 'sessionRestore', handler)`\n * continue working without modification.\n *\n * Events are emitted by SolidAuthnLogic.checkUser() (login/sessionRestore)\n * and by the sessionStateChange listener in authSession.ts (logout).\n */\nexport class SessionEvents {\n  private readonly listeners: Map<string, Set<LegacyEventHandler>> = new Map()\n\n  on (event: LegacyEventName, handler: LegacyEventHandler): void {\n    if (!this.listeners.has(event)) this.listeners.set(event, new Set())\n    this.listeners.get(event)!.add(handler)\n  }\n\n  off (event: LegacyEventName, handler: LegacyEventHandler): void {\n    this.listeners.get(event)?.delete(handler)\n  }\n\n  emit (event: LegacyEventName, ...args: unknown[]): void {\n    this.listeners.get(event)?.forEach(h => h(...args))\n  }\n}\n\n","// Namespaces we commonly use and have common prefixes for around Solid\nimport solidNamespace from 'solid-namespace' // Delegate to this which takes RDFlib as param.\nimport * as $rdf from 'rdflib'\n\nexport const ns = solidNamespace($rdf)","import { graph, NamedNode, Namespace, serialize, sym } from 'rdflib'\nimport { AclLogic } from '../types'\nimport { ns as namespace } from '../util/ns'\n\n\nexport const ACL_LINK = sym(\n    'http://www.iana.org/assignments/link-relations/acl'\n)\n\nexport function createAclLogic(store): AclLogic {\n\n    const ns = namespace\n    \n    async function findAclDocUrl(url: NamedNode) {\n        await store.fetcher.load(url)\n        const docNode = store.any(url, ACL_LINK)\n        if (!docNode) {\n            throw new Error(`No ACL link discovered for ${url}`)\n        }\n        return docNode.value\n    }\n    /**\n     * Simple Access Control\n     *\n     * This function sets up a simple default ACL for a resource, with\n     * RWC for the owner, and a specified access (default none) for the public.\n     * In all cases owner has read write control.\n     * Parameter lists modes allowed to public\n     *\n     * @param options\n     * @param options.public eg ['Read', 'Write']\n     *\n     * @returns Resolves with aclDoc uri on successful write\n     */\n    function setACLUserPublic ( \n    docURI: string,\n    me: NamedNode,\n    options: {\n        defaultForNew?: boolean,\n        public?: []\n    }\n    ): Promise<NamedNode> {\n    const aclDoc = store.any(\n        store.sym(docURI),\n        ACL_LINK\n    )\n\n    return Promise.resolve()\n        .then(() => {\n        if (aclDoc) {\n            return aclDoc as NamedNode\n        }\n\n        return fetchACLRel(docURI).catch(err => {\n            throw new Error(`Error fetching rel=ACL header for ${docURI}: ${err}`)\n        })\n        })\n        .then(aclDoc => {\n        const aclText = genACLText(docURI, me, aclDoc.uri, options)\n        if (!store.fetcher) {\n            throw new Error('Cannot PUT this, store has no fetcher')\n        }\n        return store.fetcher\n            .webOperation('PUT', aclDoc.uri, {\n            data: aclText,\n            contentType: 'text/turtle'\n            })\n            .then(result => {\n            if (!result.ok) {\n                throw new Error('Error writing ACL text: ' + result.error)\n            }\n\n            return aclDoc\n            })\n        })\n    }\n\n    /**\n     * @param docURI\n     * @returns\n     */\n    function fetchACLRel (docURI: string): Promise<NamedNode> {\n        const fetcher = store.fetcher\n        if (!fetcher) {\n            throw new Error('Cannot fetch ACL rel, store has no fetcher')\n        }\n\n        return fetcher.load(docURI).then(result => {\n            if (!result.ok) {\n                throw new Error('fetchACLRel: While loading:' + (result as any).error)\n            }\n\n            const aclDoc = store.any(\n            store.sym(docURI),\n            ACL_LINK\n            )\n\n            if (!aclDoc) {\n            throw new Error('fetchACLRel: No Link rel=ACL header for ' + docURI)\n            }\n\n            return aclDoc as NamedNode\n        })\n    }\n\n    /**\n     * @param docURI\n     * @param me\n     * @param aclURI\n     * @param options\n     *\n     * @returns Serialized ACL\n     */\n    function genACLText (\n    docURI: string,\n    me: NamedNode,\n    aclURI: string,\n    options: {\n            defaultForNew?: boolean,\n            public?: []\n        } = {}\n    ): string | undefined {\n        const optPublic = options.public || []\n        const g = graph()\n        const auth = Namespace('http://www.w3.org/ns/auth/acl#')\n        let a = g.sym(`${aclURI}#a1`)\n        const acl = g.sym(aclURI)\n        const doc = g.sym(docURI)\n        g.add(a, ns.rdf('type'), auth('Authorization'), acl)\n        g.add(a, auth('accessTo'), doc, acl)\n        if (options.defaultForNew) {\n            g.add(a, auth('default'), doc, acl)\n        }\n        g.add(a, auth('agent'), me, acl)\n        g.add(a, auth('mode'), auth('Read'), acl)\n        g.add(a, auth('mode'), auth('Write'), acl)\n        g.add(a, auth('mode'), auth('Control'), acl)\n\n        if (optPublic.length) {\n            a = g.sym(`${aclURI}#a2`)\n            g.add(a, ns.rdf('type'), auth('Authorization'), acl)\n            g.add(a, auth('accessTo'), doc, acl)\n            g.add(a, auth('agentClass'), ns.foaf('Agent'), acl)\n            for (let p = 0; p < optPublic.length; p++) {\n            g.add(a, auth('mode'), auth(optPublic[p]), acl) // Like 'Read' etc\n            }\n        }\n        return serialize(acl, g, aclURI)\n    }\n    return {\n        findAclDocUrl,\n        setACLUserPublic,\n        genACLText\n    }\n}","import { NamedNode, sym } from 'rdflib'\nimport * as debug from '../util/debug'\n\n/**\n * find a user or app's context as set in window.SolidAppContext\n * this is a const, not a function, because we have problems to jest mock it otherwise\n * see: https://github.com/facebook/jest/issues/936#issuecomment-545080082 for more\n * @return {any} - an appContext object\n */\nexport const appContext = ():any => {\n    let { SolidAppContext }: any = window\n    SolidAppContext ||= {}\n    SolidAppContext.viewingNoAuthPage = false\n    if (SolidAppContext.noAuth && window.document) {\n        const currentPage = window.document.location.href\n        if (currentPage.startsWith(SolidAppContext.noAuth)) {\n        SolidAppContext.viewingNoAuthPage = true\n        const params = new URLSearchParams(window.document.location.search)\n        if (params) {\n            let viewedPage = SolidAppContext.viewedPage = params.get('uri') || null\n            if (viewedPage) {\n            viewedPage = decodeURI(viewedPage)\n            if (!viewedPage.startsWith(SolidAppContext.noAuth)) {\n                const ary = viewedPage.split(/\\//)\n                SolidAppContext.idp = ary[0] + '//' + ary[2]\n                SolidAppContext.viewingNoAuthPage = false\n            }\n            }\n        }\n        }\n    }\n    return SolidAppContext\n}\n\n/**\n * Returns `sym($SolidTestEnvironment.username)` if\n * `$SolidTestEnvironment.username` is defined as a global\n * or \n * returns testID defined in the HTML page\n * @returns {NamedNode|null}\n */\nexport function offlineTestID (): NamedNode | null {\n    const { $SolidTestEnvironment }: any = window\n    if (\n      typeof $SolidTestEnvironment !== 'undefined' &&\n      $SolidTestEnvironment.username\n    ) {\n      // Test setup\n      debug.log('Assuming the user is ' + $SolidTestEnvironment.username)\n      return sym($SolidTestEnvironment.username)\n    }\n    // hack that makes SolidOS work in offline mode by adding the webId directly in html\n    // example usage: https://github.com/solidos/mashlib/blob/29b8b53c46bf02e0e219f0bacd51b0e9951001dd/test/contact/local.html#L37\n    if (\n      typeof document !== 'undefined' &&\n      document.location &&\n      ('' + document.location).slice(0, 16) === 'http://localhost'\n    ) {\n      const div = document.getElementById('appTarget')\n      if (!div) return null\n      const id = div.getAttribute('testID')\n      if (!id) return null\n      debug.log('Assuming user is ' + id)\n      return sym(id)\n    }\n    return null\n}\n","import { namedNode, NamedNode, sym } from 'rdflib'\nimport { appContext, offlineTestID } from './authUtil'\nimport * as debug from '../util/debug'\nimport type { SessionWithLegacyEvents } from '../authSession/authSession'\nimport type { AuthenticationContext, AuthnLogic } from '../types'\n\nexport class SolidAuthnLogic implements AuthnLogic {\n  private session: SessionWithLegacyEvents\n  private checkUserInFlight: Promise<NamedNode | null> | null = null\n  private sessionRestoreHookAttached = false\n  private fallbackWebId: string | null = null\n\n  constructor(solidAuthSession: SessionWithLegacyEvents) {\n    this.session = solidAuthSession\n  }\n\n  // we created authSession getter because we want to access it as authn.authSession externally\n  get authSession(): SessionWithLegacyEvents { return this.session }\n\n  currentUser(): NamedNode | null {\n    const app = appContext()\n    if (app.viewingNoAuthPage) {\n      return sym(app.webId)\n    }\n    const sessionAny = this.session as any\n    const infoWebId = sessionAny?.info?.webId\n    const sessionWebId = sessionAny?.webId\n    const webId = infoWebId || sessionWebId || this.fallbackWebId\n    const infoLoggedIn = sessionAny?.info?.isLoggedIn\n    const sessionActive = sessionAny?.isActive\n    const isLoggedIn = infoLoggedIn === true || sessionActive === true ||\n      ((infoLoggedIn == null && sessionActive == null) ? Boolean(webId) : false) ||\n      Boolean(this.fallbackWebId)\n    if (this && this.session && webId && isLoggedIn) {\n      return sym(webId)\n    }\n    return offlineTestID() // null unless testing\n  }\n\n  /**\n   * Retrieves currently logged in webId from either\n   * defaultTestUser or SolidAuth\n   * Also activates a session after login\n   * @param [setUserCallback] Optional callback\n   * @returns Resolves with webId uri, if no callback provided\n   */\n  async checkUser<T> (\n    setUserCallback?: (me: NamedNode | null) => T\n  ): Promise<NamedNode | T | null> {\n    // Save hash for \"restorePreviousSession\"\n    const preLoginRedirectHash = new URL(window.location.href).hash\n    if (preLoginRedirectHash) {\n      window.localStorage.setItem('preLoginRedirectHash', preLoginRedirectHash)\n    }\n    const sessionAny = this.session as any\n    if (!this.sessionRestoreHookAttached && typeof sessionAny?.events?.on === 'function') {\n      // Backward-compatible hook for auth clients exposing an EventEmitter-style API.\n      sessionAny.events.on('sessionRestore', (url: string) => {\n        debug.log(`Session restored to ${url}`)\n        if (document.location.toString() !== url) history.replaceState(null, '', url)\n      })\n      this.sessionRestoreHookAttached = true\n    }\n\n    if (!this.checkUserInFlight) {\n      this.checkUserInFlight = this.resolveCurrentUser()\n    }\n\n    const inFlight = this.checkUserInFlight\n    let me: NamedNode | null\n    try {\n      me = await inFlight\n    } finally {\n      if (this.checkUserInFlight === inFlight) {\n        this.checkUserInFlight = null\n      }\n    }\n\n    return Promise.resolve(setUserCallback ? setUserCallback(me) : me)\n  }\n\n  private async resolveCurrentUser (): Promise<NamedNode | null> {\n    const sessionAny = this.session as any\n\n    /**\n     * Handle a successful authentication redirect\n     */\n    const redirectUrl = new URL(window.location.href)\n    redirectUrl.hash = ''\n    if (typeof sessionAny?.handleIncomingRedirect === 'function') {\n      await sessionAny.handleIncomingRedirect({\n        restorePreviousSession: true,\n        url: redirectUrl.href\n      })\n    } else {\n      if (typeof sessionAny?.restore === 'function') {\n        const wasActive = sessionAny?.isActive ?? Boolean(sessionAny?.webId)\n        try {\n          await sessionAny.restore()\n        } catch (error) {\n          const message = error instanceof Error ? error.message : String(error)\n          if (!/no session to restore/i.test(message)) {\n            throw error\n          }\n          debug.log('No previous session to restore')\n        }\n        const isNowActive = sessionAny?.isActive ?? Boolean(sessionAny?.webId)\n        if (!wasActive && isNowActive) {\n          sessionAny.events?.emit('sessionRestore', window.location.href)\n        }\n      }\n      if (typeof sessionAny?.handleRedirectFromLogin === 'function') {\n        const wasActive = sessionAny?.isActive ?? Boolean(sessionAny?.webId)\n        await sessionAny.handleRedirectFromLogin()\n        const isNowActive = sessionAny?.isActive ?? Boolean(sessionAny?.webId)\n        if (!wasActive && isNowActive) {\n          sessionAny.events?.emit('login')\n        }\n      }\n    }\n\n    // Check to see if a hash was stored in local storage\n    const postLoginRedirectHash = window.localStorage.getItem('preLoginRedirectHash')\n    if (postLoginRedirectHash) {\n      const curUrl = new URL(window.location.href)\n      if (curUrl.hash !== postLoginRedirectHash) {\n        if (history.pushState) {\n          // debug.log('Setting window.location.has using pushState')\n          history.pushState(null, document.title, postLoginRedirectHash)\n        } else {\n          // debug.warn('Setting window.location.has using location.hash')\n          location.hash = postLoginRedirectHash\n        }\n        curUrl.hash = postLoginRedirectHash\n      }\n      // See https://stackoverflow.com/questions/3870057/how-can-i-update-window-location-hash-without-jumping-the-document\n      // window.location.href = curUrl.toString()// @@ See https://developer.mozilla.org/en-US/docs/Web/API/Window/location\n      window.localStorage.setItem('preLoginRedirectHash', '')\n    }\n\n    // Check to see if already logged in / have the WebID\n    let me = offlineTestID()\n    if (me) {\n      return me\n    }\n\n    let webId = this.webIdFromSession(sessionAny?.info, sessionAny)\n    if (!webId) {\n      // NSS-specific fallback: recover WebID from NSS cookie session when client restore is empty.\n      webId = await this.probeNssCookieBackedWebId()\n    }\n\n    if (webId) {\n      this.fallbackWebId = webId\n    } else {\n      this.fallbackWebId = null\n    }\n\n    if (webId) {\n      me = this.saveUser(webId)\n    }\n\n    if (me) {\n      debug.log(`(Logged in as ${me} by authentication)`)\n    }\n\n    return me\n  }\n\n  private async probeNssCookieBackedWebId (): Promise<string | null> {\n    if (typeof window === 'undefined') {\n      return null\n    }\n\n    const { hostname, port, protocol } = window.location\n    const localhostSuffix = '.localhost'\n    // NSS local pods use subdomains like alice.localhost.\n    if (!hostname.endsWith(localhostSuffix)) {\n      return null\n    }\n\n    const podName = hostname.slice(0, -localhostSuffix.length)\n    if (!podName || podName === 'localhost' || podName.includes('.')) {\n      return null\n    }\n\n    try {\n      // NSS returns 403 on this account page when the cookie session is valid.\n      const probeResponse = await fetch('/account/password/change', {\n        credentials: 'include',\n        redirect: 'manual',\n        cache: 'no-store'\n      })\n      if (probeResponse.status !== 403) {\n        return null\n      }\n      const origin = `${protocol}//${hostname}${port ? `:${port}` : ''}`\n      return `${origin}/profile/card#me`\n    } catch (_error) {\n      return null\n    }\n  }\n\n  /**\n   * Saves `webId` in `context.me`\n   * @param webId\n   * @param context\n   *\n   * @returns Returns the WebID, after setting it\n   */\n  saveUser (\n    webId: NamedNode | string | null,\n    context?: AuthenticationContext\n  ): NamedNode | null {\n    let webIdUri: string\n    if (webId) {\n      webIdUri = (typeof webId === 'string') ? webId : webId.uri\n      const me = namedNode(webIdUri)\n      if (context) {\n        context.me = me\n      }\n      return me\n    }\n    return null\n  }\n\n  /**\n   * @returns {Promise<string|null>} Resolves with WebID URI or null\n   */\n  webIdFromSession (\n    sessionInfo?: { webId?: string, isLoggedIn?: boolean },\n    sessionRoot?: { webId?: string, isLoggedIn?: boolean, isActive?: boolean }\n  ): string | null {\n    const webId = sessionInfo?.webId || sessionRoot?.webId\n    if (!webId) {\n      return null\n    }\n    const infoLoggedIn = sessionInfo?.isLoggedIn\n    const rootLoggedIn = sessionRoot?.isLoggedIn\n    const rootActive = sessionRoot?.isActive\n    if (infoLoggedIn === true || rootLoggedIn === true || rootActive === true) {\n      return webId\n    }\n    if (infoLoggedIn === false && rootLoggedIn === false && rootActive === false) {\n      return null\n    }\n    return webId\n  }\n\n}\n","import { NamedNode, sym } from 'rdflib'\n\nexport function newThing(doc: NamedNode): NamedNode {\n    return sym(doc.uri + '#' + 'id' + ('' + Date.now()))\n}\n\nexport function uniqueNodes (arr: NamedNode[]): NamedNode[] {\n    const uris = arr.map(x => x.uri)\n    const set = new Set(uris)\n    const uris2 = Array.from(set)\n    const arr2 = uris2.map(u => new NamedNode(u))\n    return arr2 // Array.from(new Set(arr.map(x => x.uri))).map(u => sym(u))\n}\n\nexport function getArchiveUrl(baseUrl: string, date: Date) {\n    const year = date.getUTCFullYear()\n    const month = ('0' + (date.getUTCMonth()+1)).slice(-2)\n    const day = ('0' + (date.getUTCDate())).slice(-2)\n    const parts = baseUrl.split('/')\n    const filename = parts[parts.length -1 ]\n    return new URL(`./archive/${year}/${month}/${day}/${filename}`, baseUrl).toString()\n}\n\nexport function differentOrigin(doc): boolean {\n    if (!doc) {\n        return true\n    }\n    return (\n        `${window.location.origin}/` !== new URL(doc.value).origin\n    )\n}\n\nexport function suggestPreferencesFile (me:NamedNode) {\n    const stripped = me.uri.replace('/profile/', '/').replace('/public/', '/')\n    // const stripped = me.uri.replace(\\/[p|P]rofile/\\g, '/').replace(\\/[p|P]ublic/\\g, '/')\n    const folderURI = stripped.split('/').slice(0,-1).join('/') + '/settings/'\n    const fileURI = folderURI + 'prefs.ttl'\n    return sym(fileURI)\n}\n\nexport function determineChatContainer(\n    invitee: NamedNode,\n    podRoot: NamedNode\n): NamedNode {\n    // Create chat\n    // See https://gitter.im/solid/chat-app?at=5f3c800f855be416a23ae74a\n    const chatContainerStr = new URL(\n        `IndividualChats/${new URL(invitee.value).host}/`,\n        podRoot.value\n    ).toString()\n    return new NamedNode(chatContainerStr)\n}\n","import { NamedNode, Node, st, term } from 'rdflib'\nimport { ChatLogic, CreatedPaneOptions, NewPaneOptions, Chat } from '../types'\nimport { ns as namespace } from '../util/ns'\nimport { determineChatContainer, newThing } from '../util/utils'\n\nconst CHAT_LOCATION_IN_CONTAINER = 'index.ttl#this'\n\nexport function createChatLogic(store, profileLogic): ChatLogic {\n    const ns = namespace\n\n    async function setAcl(\n        chatContainer: NamedNode,\n        me: NamedNode,\n        invitee: NamedNode\n    ): Promise<void> {\n        // Some servers don't present a Link http response header\n        // if the container doesn't exist yet, so refetch the container\n        // now that it has been created:\n        await store.fetcher.load(chatContainer)\n\n        // FIXME: check the Why value on this quad:\n        const chatAclDoc = store.any(\n            chatContainer,\n            new NamedNode('http://www.iana.org/assignments/link-relations/acl')\n        )\n        if (!chatAclDoc) {\n            throw new Error('Chat ACL doc not found!')\n        }\n\n        const aclBody = `\n            @prefix acl: <http://www.w3.org/ns/auth/acl#>.\n            <#owner>\n            a acl:Authorization;\n            acl:agent <${me.value}>;\n            acl:accessTo <.>;\n            acl:default <.>;\n            acl:mode\n                acl:Read, acl:Write, acl:Control.\n            <#invitee>\n            a acl:Authorization;\n            acl:agent <${invitee.value}>;\n            acl:accessTo <.>;\n            acl:default <.>;\n            acl:mode\n                acl:Read, acl:Append.\n            `\n        await store.fetcher.webOperation('PUT', chatAclDoc.value, {\n            data: aclBody,\n            contentType: 'text/turtle',\n        })\n    }\n\n    async function addToPrivateTypeIndex(chatThing, me) {\n        // Add to private type index\n        const privateTypeIndex = store.any(\n            me,\n            ns.solid('privateTypeIndex')\n        ) as NamedNode | null\n        if (!privateTypeIndex) {\n            throw new Error('Private type index not found!')\n        }\n        await store.fetcher.load(privateTypeIndex)\n        const reg = newThing(privateTypeIndex)\n        const ins = [\n            st(\n                reg,\n                ns.rdf('type'),\n                ns.solid('TypeRegistration'),\n                privateTypeIndex.doc()\n            ),\n            st(\n                reg,\n                ns.solid('forClass'),\n                ns.meeting('LongChat'),\n                privateTypeIndex.doc()\n            ),\n            st(reg, ns.solid('instance'), chatThing, privateTypeIndex.doc()),\n        ]\n        await new Promise((resolve, reject) => {\n            store.updater.update([], ins, function (_uri, ok, errm) {\n                if (!ok) {\n                    reject(new Error(errm))\n                } else {\n                    resolve(null)\n                }\n            })\n        })\n    }\n\n    async function findChat(invitee: NamedNode): Promise<Chat> {\n        const me = await profileLogic.loadMe()\n        const podRoot = await profileLogic.getPodRoot(me)\n        const chatContainer = determineChatContainer(invitee, podRoot)\n        let exists = true\n        try {\n            await store.fetcher.load(\n                new NamedNode(chatContainer.value + 'index.ttl#this')\n            )\n        } catch (e) {\n            exists = false\n        }\n        return { me, chatContainer, exists }\n    }\n\n    async function createChatThing(\n        chatContainer: NamedNode,\n        me: NamedNode\n    ): Promise<NamedNode> {\n        const created = await mintNew({\n            me,\n            newBase: chatContainer.value,\n        })\n        return created.newInstance\n    }\n\n    function mintNew(newPaneOptions: NewPaneOptions): Promise<CreatedPaneOptions> {\n        const kb = store\n        const updater = kb.updater\n        if (newPaneOptions.me && !newPaneOptions.me.uri) {\n            throw new Error('chat mintNew:  Invalid userid ' + newPaneOptions.me)\n        }\n\n        const newInstance = (newPaneOptions.newInstance =\n            newPaneOptions.newInstance ||\n            kb.sym(newPaneOptions.newBase + CHAT_LOCATION_IN_CONTAINER))\n        const newChatDoc = newInstance.doc()\n\n        kb.add(\n            newInstance,\n            ns.rdf('type'),\n            ns.meeting('LongChat'),\n            newChatDoc\n        )\n        kb.add(newInstance, ns.dc('title'), 'Chat channel', newChatDoc)\n        kb.add(\n            newInstance,\n            ns.dc('created'),\n            term<Node>(new Date(Date.now())),\n            newChatDoc\n        )\n        if (newPaneOptions.me) {\n            kb.add(newInstance, ns.dc('author'), newPaneOptions.me, newChatDoc)\n        }\n\n        return new Promise(function (resolve, reject) {\n            updater?.put(\n                newChatDoc,\n                kb.statementsMatching(undefined, undefined, undefined, newChatDoc),\n                'text/turtle',\n                function (uri2, ok, message) {\n                    if (ok) {\n                        resolve({\n                            ...newPaneOptions,\n                            newInstance,\n                        })\n                    } else {\n                        reject(\n                            new Error(\n                                'FAILED to save new chat channel at: ' + uri2 + ' : ' + message\n                            )\n                        )\n                    }\n                }\n            )\n        })\n    }\n\n    /**\n     * Find (and optionally create) an individual chat between the current user and the given invitee\n     * @param invitee - The person to chat with\n     * @param createIfMissing - Whether the chat should be created, if missing\n     * @returns null if missing, or a node referring to an already existing chat, or the newly created chat\n     */\n    async function getChat(\n        invitee: NamedNode,\n        createIfMissing = true\n    ): Promise<NamedNode | null> {\n        const { me, chatContainer, exists } = await findChat(invitee)\n        if (exists) {\n            return new NamedNode(chatContainer.value + CHAT_LOCATION_IN_CONTAINER)\n        }\n\n        if (createIfMissing) {\n            const chatThing = await createChatThing(chatContainer, me)\n            await sendInvite(invitee, chatThing)\n            await setAcl(chatContainer, me, invitee)\n            await addToPrivateTypeIndex(chatThing, me)\n            return chatThing\n        }\n        return null\n    }\n\n    async function sendInvite(invitee: NamedNode, chatThing: NamedNode) {\n        await store.fetcher.load(invitee.doc())\n        const inviteeInbox = store.any(\n            invitee,\n            ns.ldp('inbox'),\n            undefined,\n            invitee.doc()\n        )\n        if (!inviteeInbox) {\n            throw new Error(`Invitee inbox not found! ${invitee.value}`)\n        }\n        const inviteBody = `\n        <> a <http://www.w3.org/ns/pim/meeting#LongChatInvite> ;\n        ${ns.rdf('seeAlso')} <${chatThing.value}> .\n        `\n\n        const inviteResponse = await store.fetcher?.webOperation(\n            'POST',\n            inviteeInbox.value,\n            {\n                data: inviteBody,\n                contentType: 'text/turtle',\n            }\n        )\n        const locationStr = inviteResponse?.headers.get('location')\n        if (!locationStr) {\n            throw new Error(`Invite sending returned a ${inviteResponse?.status}`)\n        }\n    }\n    return {\n        setAcl, addToPrivateTypeIndex, findChat, createChatThing, getChat, sendInvite, mintNew\n    }\n}\n","import { NamedNode } from 'rdflib'\nimport { InboxLogic } from '../types'\nimport { getArchiveUrl } from '../util/utils'\n\nexport function createInboxLogic(store, profileLogic, utilityLogic, containerLogic, aclLogic): InboxLogic {\n\n    async function createInboxFor(peerWebId: string, nick: string) {\n      const myWebId: NamedNode = await profileLogic.loadMe()\n      const podRoot: NamedNode = await profileLogic.getPodRoot(myWebId)\n      const ourInbox = `${podRoot.value}p2p-inboxes/${encodeURIComponent(nick)}/`\n      await containerLogic.createContainer(ourInbox)\n      // const aclDocUrl = await aclLogic.findAclDocUrl(ourInbox);\n      await utilityLogic.setSinglePeerAccess({\n        ownerWebId: myWebId.value,\n        peerWebId,\n        accessToModes: 'acl:Append',\n        target: ourInbox\n      })\n      return ourInbox\n  }\n\n  async function getNewMessages(\n      user?: NamedNode\n    ): Promise<NamedNode[]> {\n      if (!user) {\n        user = await profileLogic.loadMe()\n      }\n      const inbox = await profileLogic.getMainInbox(user)\n      const urls = await containerLogic.getContainerMembers(inbox)\n      return urls.filter(url => !containerLogic.isContainer(url))\n  }\n\n  async function markAsRead(url: string, date: Date) {\n    const downloaded = await store.fetcher._fetch(url)\n    if (downloaded.status !== 200) {\n      throw new Error(`Not OK! ${url}`)\n    }\n    const archiveUrl = getArchiveUrl(url, date)\n    const options = {\n      method: 'PUT',\n      body: await downloaded.text(),\n      headers: [\n        ['Content-Type', downloaded.headers.get('Content-Type') || 'application/octet-stream']\n      ]\n    }\n    const uploaded = await store.fetcher._fetch(archiveUrl, options)\n    if (uploaded.status.toString()[0] === '2') {\n      await store.fetcher._fetch(url, {\n        method: 'DELETE'\n      })\n    }\n  }\n  return {\n    createInboxFor,\n    getNewMessages,\n    markAsRead\n  }\n}\n","class CustomError extends Error {\n    constructor(message?: string) {\n        super(message)\n        // see: typescriptlang.org/docs/handbook/release-notes/typescript-2-2.html\n        Object.setPrototypeOf(this, new.target.prototype) // restore prototype chain\n        this.name = new.target.name // stack traces display correctly now\n    }\n}\n\nexport class UnauthorizedError extends CustomError {}\n\nexport class CrossOriginForbiddenError extends CustomError {}\n\nexport class SameOriginForbiddenError extends CustomError {}\n\nexport class NotFoundError extends CustomError {}\n\nexport class NotEditableError extends CustomError { }\n\nexport class WebOperationError extends CustomError {}\n\nexport class FetchError extends CustomError {\n    status: number\n\n    constructor(status: number, message?: string) {\n        super(message)\n        this.status = status\n    }\n}","export function publicTypeIndexDocument(): string {\n    return [\n        '@prefix solid: <http://www.w3.org/ns/solid/terms#>.',\n        '<>',\n        '    a solid:TypeIndex ;',\n        '    a solid:ListedDocument.'\n    ].join('\\n')\n}\n\nexport function privateTypeIndexDocument(): string {\n    return [\n        '@prefix solid: <http://www.w3.org/ns/solid/terms#>.',\n        '<>',\n        '    a solid:TypeIndex ;',\n        '    a solid:UnlistedDocument.'\n    ].join('\\n')\n}","export function publicTypeIndexAclDocument(webId: string, publicTypeIndexUri: string): string {\n    const fileName = new URL(publicTypeIndexUri).pathname.split('/').pop() || 'publicTypeIndex.ttl'\n    return [\n        '# ACL resource for the Public Type Index',\n        '',\n        '@prefix acl: <http://www.w3.org/ns/auth/acl#>.',\n        '@prefix foaf: <http://xmlns.com/foaf/0.1/>.',\n        '',\n        '<#owner>',\n        '    a acl:Authorization;',\n        '',\n        '    acl:agent',\n        `        <${webId}>;`,\n        '',\n        `    acl:accessTo <./${fileName}>;`,\n        '',\n        '    acl:mode',\n        '        acl:Read, acl:Write, acl:Control.',\n        '',\n        '# Public-readable',\n        '<#public>',\n        '    a acl:Authorization;',\n        '',\n        '    acl:agentClass foaf:Agent;',\n        '',\n        `    acl:accessTo <./${fileName}>;`,\n        '',\n        '    acl:mode acl:Read.'\n    ].join('\\n')\n}\n","import { NamedNode, Statement, sym } from 'rdflib'\n\n/**\n * Container-related class\n */\nexport function createContainerLogic(store) {\n\n    function getContainerElements(containerNode: NamedNode): NamedNode[] {\n        return store\n            .statementsMatching(\n                containerNode,\n                sym('http://www.w3.org/ns/ldp#contains'),\n                undefined\n            )\n            .map((st: Statement) => st.object as NamedNode)\n    }\n\n    function isContainer(url: NamedNode) {\n        const nodeToString = url.value\n        return nodeToString.charAt(nodeToString.length - 1) === '/'\n    }\n\n    async function createContainer(url: string) {\n        const stringToNode = sym(url)\n        if (!isContainer(stringToNode)) {\n            throw new Error(`Not a container URL ${url}`)\n        }\n        // Copied from https://github.com/solidos/solid-crud-tests/blob/v3.1.0/test/surface/create-container.test.ts#L56-L64\n        const result = await store.fetcher._fetch(url, {\n            method: 'PUT',\n            headers: {\n                'Content-Type': 'text/turtle',\n                'If-None-Match': '*',\n                Link: '<http://www.w3.org/ns/ldp#BasicContainer>; rel=\"type\"', // See https://github.com/solidos/node-solid-server/issues/1465\n            },\n            body: ' ', // work around https://github.com/michielbdejong/community-server/issues/4#issuecomment-776222863\n        })\n        // Treat 409 as idempotent success: another process/request already created the container.\n        if (result.status === 409) {\n            return\n        }\n        if (result.status.toString()[0] !== '2') {\n            throw new Error(`Not OK: got ${result.status} response while creating container at ${url}`)\n        }\n    }\n\n    async function getContainerMembers(containerUrl: NamedNode): Promise<NamedNode[]> {\n        await store.fetcher.load(containerUrl)\n        return getContainerElements(containerUrl)\n    }\n    return {\n        isContainer,\n        createContainer,\n        getContainerElements,\n        getContainerMembers\n    }\n}","import { literal, NamedNode, st, sym } from 'rdflib'\nimport { ACL_LINK } from '../acl/aclLogic'\nimport { CrossOriginForbiddenError, FetchError, NotEditableError, SameOriginForbiddenError, UnauthorizedError, WebOperationError } from '../logic/CustomError'\nimport * as debug from '../util/debug'\nimport { ns as namespace } from '../util/ns'\nimport { privateTypeIndexDocument, publicTypeIndexDocument } from '../typeIndex/typeIndexDocuments'\nimport { publicTypeIndexAclDocument } from '../typeIndex/typeIndexAclDocuments'\nimport { preferencesFileDocument } from './profileDocuments'\nimport { ownerOnlyContainerAclDocument } from './profileAclDocuments'\nimport { createContainerLogic } from '../util/containerLogic'\nimport { differentOrigin, suggestPreferencesFile } from '../util/utils'\nimport { ProfileLogic } from '../types'\n\nexport function createProfileLogic(store, authn, utilityLogic): ProfileLogic {\n    const ns = namespace\n    const containerLogic = createContainerLogic(store)\n    const loadPreferencesInFlight = new Map<string, Promise<NamedNode>>()\n    const cachedPreferencesFileByWebId = new Map<string, NamedNode>()\n\n    function isAbsoluteHttpUri(uri: string | null | undefined): boolean {\n        return !!uri && (uri.startsWith('https://') || uri.startsWith('http://'))\n    }\n\n    function docDirUri(node: NamedNode): string | null {\n        const doc = node.doc()\n        const dir = doc.dir()\n        if (dir?.uri && isAbsoluteHttpUri(dir.uri)) return dir.uri\n        const docUri = doc.uri\n        if (!docUri || !isAbsoluteHttpUri(docUri)) return null\n        const withoutFragment = docUri.split('#')[0]\n        const lastSlash = withoutFragment.lastIndexOf('/')\n        if (lastSlash === -1) return null\n        return withoutFragment.slice(0, lastSlash + 1)\n    }\n\n    function suggestTypeIndexInPreferences(preferencesFile: NamedNode, filename: string): NamedNode {\n        const dirUri = docDirUri(preferencesFile)\n        if (!dirUri) throw new Error(`Cannot derive directory for preferences file ${preferencesFile.uri}`)\n        return sym(dirUri + filename)\n    }\n\n    function isNotFoundError(err: any): boolean {\n        if (err?.response?.status === 404) return true\n        const text = `${err?.message || err || ''}`\n        return text.includes('404') || text.includes('Not Found')\n    }\n\n    async function ensureContainerExists(containerUri: string): Promise<void> {\n        const containerNode = sym(containerUri)\n        try {\n            await store.fetcher.load(containerNode)\n            return\n        } catch (err) {\n            if (!isNotFoundError(err)) throw err\n        }\n        await containerLogic.createContainer(containerUri)\n    }\n\n    async function ensureOwnerOnlyAclForSettings(user: NamedNode, preferencesFile: NamedNode): Promise<void> {\n        const dirUri = docDirUri(preferencesFile)\n        if (!dirUri) throw new Error(`Cannot derive settings directory from ${preferencesFile.uri}`)\n        await ensureContainerExists(dirUri)\n\n        const containerNode = sym(dirUri)\n        let aclDocUri: string | undefined\n        try {\n            await store.fetcher.load(containerNode)\n            aclDocUri = store.any(containerNode, ACL_LINK)?.value\n        } catch (err) {\n            if (!isNotFoundError(err)) throw err\n        }\n        if (!aclDocUri) {\n            // Fallback for servers/tests where rel=acl is not exposed in mocked headers.\n            aclDocUri = `${dirUri}.acl`\n        }\n        const aclDoc = sym(aclDocUri)\n        try {\n            await store.fetcher.load(aclDoc)\n            return\n        } catch (err) {\n            if (!isNotFoundError(err)) throw err\n        }\n\n        await store.fetcher.webOperation('PUT', aclDoc.uri, {\n            data: ownerOnlyContainerAclDocument(user.uri),\n            contentType: 'text/turtle'\n        })\n    }\n\n    async function ensurePublicTypeIndexAclOnCreate(user: NamedNode, publicTypeIndex: NamedNode, ensureAcl = false): Promise<void> {\n        const created = await utilityLogic.loadOrCreateWithContentOnCreate(publicTypeIndex, publicTypeIndexDocument())\n        if (!created && !ensureAcl) return\n\n        let aclDocUri: string | undefined\n        try {\n            await store.fetcher.load(publicTypeIndex)\n            aclDocUri = store.any(publicTypeIndex, ACL_LINK)?.value\n        } catch (err) {\n            if (!isNotFoundError(err)) throw err\n        }\n        if (!aclDocUri) {\n            aclDocUri = `${publicTypeIndex.uri}.acl`\n        }\n\n        const aclDoc = sym(aclDocUri)\n        try {\n            await store.fetcher.webOperation('PUT', aclDoc.uri, {\n                data: publicTypeIndexAclDocument(user.uri, publicTypeIndex.uri),\n                contentType: 'text/turtle',\n                headers: { 'If-None-Match': '*' }\n            })\n        } catch (err: any) {\n            const status = err?.response?.status ?? err?.status\n            if (status !== 412) throw err\n        }\n    }\n\n    async function ensurePrivateTypeIndexOnCreate(privateTypeIndex: NamedNode): Promise<void> {\n        await utilityLogic.loadOrCreateWithContentOnCreate(privateTypeIndex, privateTypeIndexDocument())\n    }\n\n    async function initializePreferencesDefaults(user: NamedNode, preferencesFile: NamedNode): Promise<void> {\n        const preferencesDoc = preferencesFile.doc() as NamedNode\n        const profileDoc = user.doc() as NamedNode\n        await store.fetcher.load(preferencesDoc)\n\n        const profilePublicTypeIndex =\n            (store.any(user, ns.solid('publicTypeIndex'), null, profileDoc) as NamedNode | null)\n        const preferencesPublicTypeIndex =\n            (store.any(user, ns.solid('publicTypeIndex'), null, preferencesDoc) as NamedNode | null)\n        const publicTypeIndex =\n            profilePublicTypeIndex ||\n            preferencesPublicTypeIndex ||\n            suggestTypeIndexInPreferences(preferencesFile, 'publicTypeIndex.ttl')\n        const privateTypeIndex =\n            (store.any(user, ns.solid('privateTypeIndex'), null, preferencesDoc) as NamedNode | null) ||\n            suggestTypeIndexInPreferences(preferencesFile, 'privateTypeIndex.ttl')\n\n        // Keep discovery consistent with typeIndexLogic, which resolves publicTypeIndex from the profile doc.\n        const createdProfilePublicTypeIndexLink = !profilePublicTypeIndex\n        if (createdProfilePublicTypeIndexLink) {\n            await utilityLogic.followOrCreateLinkWithContentOnCreate(\n                user,\n                ns.solid('publicTypeIndex') as NamedNode,\n                publicTypeIndex,\n                profileDoc,\n                publicTypeIndexDocument()\n            )\n        }\n\n        const toInsert: any[] = []\n        if (!store.holds(preferencesDoc, ns.rdf('type'), ns.space('ConfigurationFile'), preferencesDoc)) {\n            toInsert.push(st(preferencesDoc, ns.rdf('type'), ns.space('ConfigurationFile'), preferencesDoc))\n        }\n        if (!store.holds(preferencesDoc, ns.dct('title'), undefined, preferencesDoc)) {\n            toInsert.push(st(preferencesDoc, ns.dct('title'), literal('Preferences file'), preferencesDoc))\n        }\n        if (!store.holds(user, ns.solid('publicTypeIndex'), publicTypeIndex, preferencesDoc)) {\n            toInsert.push(st(user, ns.solid('publicTypeIndex'), publicTypeIndex, preferencesDoc))\n        }\n        if (!store.holds(user, ns.solid('privateTypeIndex'), privateTypeIndex, preferencesDoc)) {\n            toInsert.push(st(user, ns.solid('privateTypeIndex'), privateTypeIndex, preferencesDoc))\n        }\n\n        if (toInsert.length > 0) {\n            await store.updater.update([], toInsert)\n            await store.fetcher.load(preferencesDoc)\n        }\n\n        await ensurePublicTypeIndexAclOnCreate(user, publicTypeIndex, createdProfilePublicTypeIndexLink)\n        await ensurePrivateTypeIndexOnCreate(privateTypeIndex)\n    }\n\n    async function ensurePreferencesDocExists(preferencesFile: NamedNode): Promise<boolean> {\n        try {\n            const created = await utilityLogic.loadOrCreateWithContentOnCreate(preferencesFile, preferencesFileDocument())\n            if (created) {\n                return true\n            }\n            return false\n        } catch (err) {\n            if (err.response?.status === 401) {\n                throw new UnauthorizedError()\n            }\n            if (err.response?.status === 403) {\n                if (differentOrigin(preferencesFile)) {\n                    throw new CrossOriginForbiddenError()\n                }\n                throw new SameOriginForbiddenError()\n            }\n            throw err\n        }\n    }\n\n    /**\n     * loads the preference without throwing errors - if it can create it it does so.\n     * remark: it still throws error if it cannot load profile.\n     * @param user\n     * @returns undefined if preferenceFile cannot be returned or NamedNode if it can find it or create it\n     */\n    async function silencedLoadPreferences(user: NamedNode): Promise <NamedNode | undefined> {\n        try {\n            return await loadPreferences(user)\n        } catch (err) {\n            return undefined\n        }\n    }\n\n    /**\n     * loads the preference without returning different errors if it cannot create or load it.\n     * remark: it also throws error if it cannot load profile.\n     * @param user\n     * @returns undefined if preferenceFile cannot be an Error or NamedNode if it can find it or create it\n     */\n    async function loadPreferences (user: NamedNode): Promise <NamedNode> {\n        const cachedPreferencesFile = cachedPreferencesFileByWebId.get(user.uri)\n        if (cachedPreferencesFile) {\n            return cachedPreferencesFile\n        }\n\n        const inFlight = loadPreferencesInFlight.get(user.uri)\n        if (inFlight) {\n            return inFlight\n        }\n\n        const run = (async (): Promise<NamedNode> => {\n        await loadProfile(user)\n\n        const possiblePreferencesFile = suggestPreferencesFile(user)\n        let preferencesFile\n        try {\n            const existingPreferencesFile = store.any(user, ns.space('preferencesFile'), null, user.doc()) as NamedNode | null\n            if (existingPreferencesFile) {\n                preferencesFile = existingPreferencesFile\n            } else {\n                preferencesFile = await utilityLogic.followOrCreateLink(user, ns.space('preferencesFile') as NamedNode, possiblePreferencesFile, user.doc())\n            }\n\n            await ensureOwnerOnlyAclForSettings(user, preferencesFile as NamedNode)\n            await ensurePreferencesDocExists(preferencesFile as NamedNode)\n            await initializePreferencesDefaults(user, preferencesFile as NamedNode)\n        } catch (err) {\n            const message = `User ${user} has no pointer in profile to preferences file.`\n            debug.warn(message)\n            // we are listing the possible errors\n            if (err instanceof NotEditableError) { throw err }\n            if (err instanceof WebOperationError) { throw err }\n            if (err instanceof UnauthorizedError) { throw err }\n            if (err instanceof CrossOriginForbiddenError) { throw err }\n            if (err instanceof SameOriginForbiddenError) { throw err }\n            if (err instanceof FetchError) { throw err }\n            throw err\n        }\n\n        try {\n            await store.fetcher.load(preferencesFile as NamedNode)\n        } catch (err) { // Maybe a permission problem or origin problem\n            const msg = `Unable to load preference of user ${user}: ${err}`\n            if (err.response?.status === 404) {\n                // Self-heal when a stale profile pointer references a missing preferences file.\n                await ensureOwnerOnlyAclForSettings(user, preferencesFile as NamedNode)\n                await ensurePreferencesDocExists(preferencesFile as NamedNode)\n                await initializePreferencesDefaults(user, preferencesFile as NamedNode)\n                await store.fetcher.load(preferencesFile as NamedNode)\n                return preferencesFile as NamedNode\n            }\n            debug.warn(msg)\n            if (err.response.status === 401) {\n                throw new UnauthorizedError()\n            }\n            if (err.response.status === 403) {\n                if (differentOrigin(preferencesFile)) {\n                throw new CrossOriginForbiddenError()\n                }\n                throw new SameOriginForbiddenError()\n            }\n            /*if (err.response.status === 404) {\n                throw new NotFoundError();\n            }*/\n            throw new Error(msg)\n        }\n        cachedPreferencesFileByWebId.set(user.uri, preferencesFile as NamedNode)\n        return preferencesFile as NamedNode\n        })()\n\n        loadPreferencesInFlight.set(user.uri, run)\n        try {\n            return await run\n        } finally {\n            if (loadPreferencesInFlight.get(user.uri) === run) {\n                loadPreferencesInFlight.delete(user.uri)\n            }\n        }\n    }\n\n    async function loadProfile (user: NamedNode):Promise <NamedNode> {\n        if (!user) {\n            throw new Error('loadProfile: no user given.')\n        }\n        try {\n            await store.fetcher.load(user.doc())\n        } catch (err) {\n            throw new Error(`Unable to load profile of user ${user}: ${err}`)\n        }\n        return user.doc()\n    }\n\n    async function loadMe(): Promise<NamedNode> {\n        const me = authn.currentUser()\n        if (me === null) {\n            throw new Error('Current user not found! Not logged in?')\n        }\n        await store.fetcher.load(me.doc())\n        return me\n    }\n\n    function getPodRoot(user: NamedNode): NamedNode {\n        const podRoot = findStorage(user)\n        if (!podRoot) {\n            throw new Error('User pod root not found!')\n        }\n        return podRoot as NamedNode\n    }\n\n    async function getMainInbox(user: NamedNode): Promise<NamedNode> {\n        await store.fetcher.load(user)\n        const mainInbox = store.any(user, ns.ldp('inbox'), undefined, user.doc())\n        if (!mainInbox) {\n            throw new Error('User main inbox not found!')\n        }\n        return mainInbox as NamedNode\n    }\n\n    function findStorage(me: NamedNode) {\n        return store.any(me, ns.space('storage'), undefined, me.doc())\n    }\n\n    return {\n        loadMe,\n        getPodRoot,\n        getMainInbox,\n        findStorage,\n        loadPreferences,\n        loadProfile,\n        silencedLoadPreferences\n    }\n}\n","export function ownerOnlyContainerAclDocument(webId: string): string {\n    return [\n        '@prefix acl: <http://www.w3.org/ns/auth/acl#>.',\n        '',\n        '<#owner>',\n        'a acl:Authorization;',\n        `acl:agent <${webId}>;`,\n        'acl:accessTo <./>;',\n        'acl:default <./>;',\n        'acl:mode acl:Read, acl:Write, acl:Control.'\n    ].join('\\n')\n}\n","export function preferencesFileDocument(): string {\n    return [\n        '@prefix dct: <http://purl.org/dc/terms/>.',\n        '@prefix pim: <http://www.w3.org/ns/pim/space#>.',\n        '@prefix solid: <http://www.w3.org/ns/solid/terms#>.',\n        '<>',\n        '    a pim:ConfigurationFile ;',\n        '    dct:title \"Preferences file\".'\n    ].join('\\n')\n}\n","import { NamedNode, st, sym } from 'rdflib'\nimport { ScopedApp, TypeIndexLogic, TypeIndexScope } from '../types'\nimport * as debug from '../util/debug'\nimport { ns as namespace } from '../util/ns'\nimport { newThing } from '../util/utils'\nimport { privateTypeIndexDocument, publicTypeIndexDocument } from './typeIndexDocuments'\n\nexport function createTypeIndexLogic(store, authn, profileLogic, utilityLogic): TypeIndexLogic {\n    const ns = namespace\n\n    function isAbsoluteHttpUri(uri: string | null | undefined): boolean {\n        return !!uri && (uri.startsWith('https://') || uri.startsWith('http://'))\n    }\n\n    function getRegistrations(instance, theClass) {\n        return store\n            .each(undefined, ns.solid('instance'), instance)\n            .filter((r) => {\n                return store.holds(r, ns.solid('forClass'), theClass)\n            })\n    }\n\n    async function loadTypeIndexesFor(user: NamedNode): Promise<Array<TypeIndexScope>> {\n        if (!user) throw new Error('loadTypeIndexesFor: No user given')\n        const profile = await profileLogic.loadProfile(user)\n\n        let suggestion: NamedNode | null = null\n        try {\n            suggestion = suggestPublicTypeIndex(user)\n        } catch (err) {\n            const message = `User ${user} has no usable profile document directory for publicTypeIndex.`\n            debug.warn(message)\n        }\n        let publicTypeIndex\n        try {\n            const existingPublicTypeIndex = store.any(user, ns.solid('publicTypeIndex'), undefined, profile)\n            if (existingPublicTypeIndex) {\n                publicTypeIndex = existingPublicTypeIndex\n            } else if (suggestion) {\n                publicTypeIndex = await utilityLogic.followOrCreateLinkWithContentOnCreate(\n                    user,\n                    ns.solid('publicTypeIndex') as NamedNode,\n                    suggestion,\n                    profile,\n                    publicTypeIndexDocument()\n                )\n            } else {\n                publicTypeIndex = null\n            }\n        } catch (err) {\n            const message = `User ${user} has no pointer in profile to publicTypeIndex file: ${err}`\n            debug.warn(message)\n        }\n        const publicScopes = publicTypeIndex ? [{ label: 'public', index: publicTypeIndex as NamedNode, agent: user }] : []\n\n        let preferencesFile\n        try {\n            preferencesFile = await profileLogic.silencedLoadPreferences(user)\n        } catch (err) {\n            preferencesFile = null\n        }\n\n        let privateScopes\n        if (preferencesFile) { // watch out - can be in either as spec was not clear.  Legacy is profile.\n            // If there is a legacy one linked from the profile, use that.\n            // Otherwiae use or make one linked from Preferences\n            let suggestedPrivateTypeIndex: NamedNode | null = null\n            try {\n                suggestedPrivateTypeIndex = suggestPrivateTypeIndex(preferencesFile)\n            } catch (err) {\n                const message = `User ${user} has no usable preferences document directory for privateTypeIndex.`\n                debug.warn(message)\n            }\n            let privateTypeIndex\n            try {\n                const existingPrivateTypeIndex = store.any(user, ns.solid('privateTypeIndex'), undefined, profile)\n                if (existingPrivateTypeIndex) {\n                    privateTypeIndex = existingPrivateTypeIndex\n                } else if (suggestedPrivateTypeIndex) {\n                    privateTypeIndex = await utilityLogic.followOrCreateLinkWithContentOnCreate(\n                        user,\n                        ns.solid('privateTypeIndex') as NamedNode,\n                        suggestedPrivateTypeIndex,\n                        preferencesFile,\n                        privateTypeIndexDocument()\n                    )\n                } else {\n                    privateTypeIndex = null\n                }\n            } catch (err) {\n                const message = `User ${user} has no pointer in preference file to privateTypeIndex file: ${err}`\n                debug.warn(message)\n            }\n            privateScopes = privateTypeIndex ? [{ label: 'private', index: privateTypeIndex as NamedNode, agent: user }] : []\n        } else {\n            privateScopes = []\n        }\n        const scopes = publicScopes.concat(privateScopes)\n        if (scopes.length === 0) return scopes\n        const files = scopes.map(scope => scope.index)\n        try {\n            await store.fetcher.load(files)\n        } catch (err) {\n            debug.warn('Problems loading type index: ', err)\n        }\n        return scopes\n    }\n\n    async function loadCommunityTypeIndexes(user: NamedNode): Promise<TypeIndexScope[]> {\n        let preferencesFile\n        try {\n            preferencesFile = await profileLogic.silencedLoadPreferences(user)\n        } catch (err) {\n            const message = `User ${user} has no pointer in profile to preferences file.`\n            debug.warn(message)\n        }\n        if (preferencesFile) { // For now, pick up communities as simple links from the preferences file.\n            const communities = store.each(user, ns.solid('community'), undefined, preferencesFile as NamedNode).concat(\n                store.each(user, ns.solid('community'), undefined, user.doc() as NamedNode)\n            )\n            let result = []\n            for (const org of communities) {\n                if (org.termType !== 'NamedNode' || !isAbsoluteHttpUri((org as NamedNode).uri)) {\n                    debug.warn(`Skipping malformed community node for ${user}: ${org}`)\n                    continue\n                }\n                try {\n                    result = result.concat(await loadTypeIndexesFor(org as NamedNode) as any)\n                } catch (err) {\n                    debug.warn(`Skipping community type indexes for ${(org as NamedNode).uri}: ${err}`)\n                }\n            }\n            return result\n        }\n        return [] // No communities\n    }\n\n    async function loadAllTypeIndexes(user: NamedNode) {\n        return (await loadTypeIndexesFor(user)).concat(await loadCommunityTypeIndexes(user))\n    }\n\n    async function getScopedAppInstances(klass: NamedNode, user: NamedNode): Promise<ScopedApp[]> {\n        const scopes = await loadAllTypeIndexes(user)\n        let scopedApps = []\n        for (const scope of scopes) {\n            const scopedApps0 = await getScopedAppsFromIndex(scope, klass) as any\n            scopedApps = scopedApps.concat(scopedApps0)\n        }\n        return scopedApps\n    }\n\n    // This is the function signature which used to be in solid-ui/logic\n    // Recommended to use getScopedAppInstances instead as it provides more information.\n    //\n    async function getAppInstances(klass: NamedNode): Promise<NamedNode[]> {\n        const user = authn.currentUser()\n        if (!user) throw new Error('getAppInstances: Must be logged in to find apps.')\n        const scopedAppInstances = await getScopedAppInstances(klass, user)\n        return scopedAppInstances.map(scoped => scoped.instance)\n    }\n\n    function docDirUri(node: NamedNode): string | null {\n        const doc = node.doc()\n        const dir = doc.dir()\n        if (dir?.uri && isAbsoluteHttpUri(dir.uri)) return dir.uri\n        const docUri = doc.uri\n        if (!docUri || !isAbsoluteHttpUri(docUri)) {\n            debug.log(`docDirUri: missing or non-http(s) doc uri for ${node?.uri}`)\n            return null\n        }\n        const withoutFragment = docUri.split('#')[0]\n        const lastSlash = withoutFragment.lastIndexOf('/')\n        if (lastSlash === -1) {\n            debug.log(`docDirUri: no slash in doc uri ${docUri}`)\n            return null\n        }\n        return withoutFragment.slice(0, lastSlash + 1)\n    }\n\n    function suggestPublicTypeIndex(me: NamedNode) {\n        const dirUri = docDirUri(me)\n        if (!dirUri) throw new Error(`suggestPublicTypeIndex: Cannot derive directory for ${me.uri}`)\n        return sym(dirUri + 'publicTypeIndex.ttl')\n    }\n    // Note this one is based off the pref file not the profile\n\n    function suggestPrivateTypeIndex(preferencesFile: NamedNode) {\n        const dirUri = docDirUri(preferencesFile)\n        if (!dirUri) throw new Error(`suggestPrivateTypeIndex: Cannot derive directory for ${preferencesFile.uri}`)\n        return sym(dirUri + 'privateTypeIndex.ttl')\n    }\n\n    /*\n    * Register a new app in a type index\n    * used in chat in bookmark.js (solid-ui)\n    * Returns the registration object if successful else null\n    */\n    async function registerInTypeIndex(\n        instance: NamedNode,\n        index: NamedNode,\n        theClass: NamedNode,\n        // agent: NamedNode\n    ): Promise<NamedNode | null> {\n        const registration = newThing(index)\n        const ins = [\n            // See https://github.com/solid/solid/blob/main/proposals/data-discovery.md\n            st(registration, ns.rdf('type'), ns.solid('TypeRegistration'), index),\n            st(registration, ns.solid('forClass'), theClass, index),\n            st(registration, ns.solid('instance'), instance, index)\n        ]\n        try {\n            await store.updater.update([], ins)\n        } catch (err) {\n            const msg = `Unable to register ${instance} in index ${index}: ${err}`\n            console.warn(msg)\n            return null\n        }\n        return registration\n    }\n\n    async function deleteTypeIndexRegistration(item) {\n        const reg = store.the(null, ns.solid('instance'), item.instance, item.scope.index) as NamedNode\n        if (!reg) throw new Error(`deleteTypeIndexRegistration: No registration found for ${item.instance}`)\n        const statements = store.statementsMatching(reg, null, null, item.scope.index)\n        await store.updater.update(statements, [])\n    }\n\n    async function getScopedAppsFromIndex(scope: TypeIndexScope, theClass: NamedNode | null): Promise<ScopedApp[]> {\n        const index = scope.index\n        const results: ScopedApp[] = []\n        const registrations = store.statementsMatching(null, ns.solid('instance'), null, index)\n            .concat(store.statementsMatching(null, ns.solid('instanceContainer'), null, index))\n            .map(st => st.subject)\n        for (const reg of registrations) {\n          const klass = store.any(reg, ns.solid('forClass'), null, index)\n          if (!theClass || klass.sameTerm(theClass)) {\n            const instances = store.each(reg, ns.solid('instance'), null, index)\n            for (const instance of instances) {\n              results.push({ instance, type: klass, scope })\n            }\n            const containers = store.each(reg, ns.solid('instanceContainer'), null, index)\n            for (const instance of containers) {\n                await store.fetcher.load(instance)\n                results.push({ instance: sym(instance.value), type: klass,  scope })\n            }\n          }\n        }\n        return results\n    }\n\n    return {\n        registerInTypeIndex,\n        getRegistrations,\n        loadTypeIndexesFor,\n        loadCommunityTypeIndexes,\n        loadAllTypeIndexes,\n        getScopedAppInstances,\n        getAppInstances,\n        suggestPublicTypeIndex,\n        suggestPrivateTypeIndex,\n        deleteTypeIndexRegistration,\n        getScopedAppsFromIndex\n    }\n}\n","import * as rdf from 'rdflib'\nimport { LiveStore, NamedNode, Statement } from 'rdflib'\nimport { createAclLogic } from '../acl/aclLogic'\nimport { SolidAuthnLogic } from '../authn/SolidAuthnLogic'\nimport type { SessionWithLegacyEvents } from '../authSession/authSession'\nimport { createChatLogic } from '../chat/chatLogic'\nimport { createInboxLogic } from '../inbox/inboxLogic'\nimport { createProfileLogic } from '../profile/profileLogic'\nimport { createTypeIndexLogic } from '../typeIndex/typeIndexLogic'\nimport { createContainerLogic } from '../util/containerLogic'\nimport { createUtilityLogic } from '../util/utilityLogic'\nimport type { AuthnLogic, SolidLogic } from '../types'\nimport * as debug from '../util/debug'\n/*\n** It is important to distinquish `fetch`, a function provided by the browser\n** and `Fetcher`, a helper object for the rdflib Store which turns it\n** into a `ConnectedStore` or a `LiveStore`.  A Fetcher object is\n** available at store.fetcher, and `fetch` function at `store.fetcher._fetch`,\n*/\nexport function createSolidLogic(specialFetch: { fetch: (url: any, requestInit: any) => any }, session: SessionWithLegacyEvents): SolidLogic {\n\n    debug.log('SolidLogic: Unique instance created.  There should only be one of these.')\n    const store: LiveStore = rdf.graph() as LiveStore\n    rdf.fetcher(store, {fetch: specialFetch.fetch}) // Attach a web I/O module, store.fetcher\n    store.updater = new rdf.UpdateManager(store) // Add real-time live updates store.updater\n    store.features = [] // disable automatic node merging on store load\n\n    const authn: AuthnLogic = new SolidAuthnLogic(session)\n    \n    const acl = createAclLogic(store)\n    const containerLogic = createContainerLogic(store)\n    const utilityLogic = createUtilityLogic(store, acl, containerLogic)\n    const profile = createProfileLogic(store, authn, utilityLogic)\n    const chat = createChatLogic(store, profile)\n    const inbox = createInboxLogic(store, profile, utilityLogic, containerLogic, acl)\n    const typeIndex = createTypeIndexLogic(store, authn, profile, utilityLogic)\n    debug.log('SolidAuthnLogic initialized')\n\n    function load(doc: NamedNode | NamedNode[] | string) {\n        return store.fetcher.load(doc)\n    }\n\n    // @@@@ use the one in rdflib.js when it is available and delete this\n    function updatePromise(\n        del: Array<Statement>,\n        ins: Array<Statement> = []\n    ): Promise<void> {\n        return new Promise((resolve, reject) => {\n        store.updater.update(del, ins, function (_uri, ok, errorBody) {\n            if (!ok) {\n            reject(new Error(errorBody))\n            } else {\n            resolve()\n            }\n        }) // callback\n        }) // promise\n    }\n\n    function clearStore() {\n        store.statements.slice().forEach(store.remove.bind(store))\n    }\n\n    return {\n        store,\n        authn,\n        acl,\n        inbox,\n        chat,\n        profile,\n        typeIndex,\n        load,\n        updatePromise,\n        clearStore\n    }\n}\n","import { NamedNode, st, sym } from 'rdflib'\nimport {\n  CrossOriginForbiddenError,\n  FetchError,\n  NotEditableError,\n  SameOriginForbiddenError,\n  UnauthorizedError,\n  WebOperationError\n} from '../logic/CustomError'\nimport * as debug from '../util/debug'\nimport { differentOrigin } from './utils'\n\nexport function createUtilityLogic(store, aclLogic, containerLogic) {\n  async function recursiveDelete(containerNode: NamedNode) {\n    try {\n      if (containerLogic.isContainer(containerNode)) {\n        const aclDocUrl = await aclLogic.findAclDocUrl(containerNode)\n        await store.fetcher._fetch(aclDocUrl, { method: 'DELETE' })\n        const containerMembers = await containerLogic.getContainerMembers(containerNode)\n        await Promise.all(containerMembers.map((url) => recursiveDelete(url)))\n      }\n      return store.fetcher._fetch(containerNode.value, { method: 'DELETE' })\n    } catch (e) {\n      debug.log(`Please manually remove ${containerNode.value} from your system.`, e)\n    }\n  }\n\n  /**\n   * Create a resource if it really does not exist.\n   * Be absolutely sure something does not exist before creating a new empty file,\n   * as otherwise existing content could be deleted.\n   */\n  async function loadOrCreateIfNotExists(doc: NamedNode) {\n    try {\n      return await store.fetcher.load(doc)\n    } catch (err: any) {\n      if (err?.response?.status === 404) {\n        try {\n          await store.fetcher.webOperation('PUT', doc.uri, {\n            data: '',\n            contentType: 'text/turtle',\n            headers: { 'If-None-Match': '*' }\n          })\n        } catch (putErr: any) {\n          const status = putErr?.response?.status ?? putErr?.status\n          if (status !== 412) {\n            const msg = `createIfNotExists: PUT FAILED: ${doc}: ${putErr}`\n            throw new WebOperationError(msg)\n          }\n        }\n        return await store.fetcher.load(doc)\n      }\n      if (err?.response?.status === 401) {\n        throw new UnauthorizedError()\n      }\n      if (err?.response?.status === 403) {\n        if (differentOrigin(doc)) {\n          throw new CrossOriginForbiddenError()\n        }\n        throw new SameOriginForbiddenError()\n      }\n      const msg = `createIfNotExists doc load error: ${doc}: ${err}`\n      throw new FetchError(err?.status, `${err?.message || ''}${msg}`)\n    }\n  }\n\n  async function loadOrCreateWithContentOnCreate(doc: NamedNode, data: string): Promise<boolean> {\n    try {\n      await store.fetcher.load(doc)\n      return false\n    } catch (err: any) {\n      const status = err?.response?.status ?? err?.status\n      if (status !== 404) {\n        throw err\n      }\n    }\n\n    try {\n      await store.fetcher.webOperation('PUT', doc.uri, {\n        data,\n        contentType: 'text/turtle',\n        headers: { 'If-None-Match': '*' }\n      })\n      return true\n    } catch (err: any) {\n      const status = err?.response?.status ?? err?.status\n      if (status === 412) {\n        // Another client created the resource between our 404 check and PUT.\n        return false\n      }\n      throw err\n    }\n  }\n\n  /*\n   * Follow link from this doc to another thing, or else make a new link.\n   * Returns existing object, or creates it if non-existent.\n   */\n  async function followOrCreateLink(\n    subject: NamedNode,\n    predicate: NamedNode,\n    object: NamedNode,\n    doc: NamedNode\n  ): Promise<NamedNode | null> {\n    await store.fetcher.load(doc)\n    const result = store.any(subject, predicate, null, doc)\n\n    if (result) return result as NamedNode\n    if (!store.updater.editable(doc)) {\n      const msg = `followOrCreateLink: cannot edit ${doc.value}`\n      debug.warn(msg)\n      throw new NotEditableError(msg)\n    }\n\n    try {\n      await store.updater.update([], [st(subject, predicate, object, doc)])\n    } catch (err) {\n      const msg = `followOrCreateLink: Error making link in ${doc} to ${object}: ${err}`\n      debug.warn(msg)\n      throw new WebOperationError(err)\n    }\n\n    try {\n      await loadOrCreateIfNotExists(object)\n    } catch (err) {\n      debug.warn(`followOrCreateLink: Error loading or saving new linked document: ${object}: ${err}`)\n      throw err\n    }\n    return object\n  }\n\n  async function followOrCreateLinkWithContentOnCreate(\n    subject: NamedNode,\n    predicate: NamedNode,\n    object: NamedNode,\n    doc: NamedNode,\n    data: string\n  ): Promise<NamedNode | null> {\n    await store.fetcher.load(doc)\n    const result = store.any(subject, predicate, null, doc)\n\n    if (result) return result as NamedNode\n    if (!store.updater.editable(doc)) {\n      const msg = `followOrCreateLinkWithContentOnCreate: cannot edit ${doc.value}`\n      debug.warn(msg)\n      throw new NotEditableError(msg)\n    }\n\n    try {\n      await store.updater.update([], [st(subject, predicate, object, doc)])\n    } catch (err) {\n      const msg = `followOrCreateLinkWithContentOnCreate: Error making link in ${doc} to ${object}: ${err}`\n      debug.warn(msg)\n      throw new WebOperationError(msg)\n    }\n\n    try {\n      await loadOrCreateWithContentOnCreate(object, data)\n    } catch (err) {\n      debug.warn(`followOrCreateLinkWithContentOnCreate: Error loading or saving new linked document: ${object}: ${err}`)\n      throw err\n    }\n    return object\n  }\n\n  // Copied from\n  // https://github.com/solidos/web-access-control-tests/blob/v3.0.0/test/surface/delete.test.ts#L5\n  async function setSinglePeerAccess(options: {\n    ownerWebId: string,\n    peerWebId: string,\n    accessToModes?: string,\n    defaultModes?: string,\n    target: string\n  }) {\n    let str = [\n      '@prefix acl: <http://www.w3.org/ns/auth/acl#>.',\n      '',\n      '<#alice> a acl:Authorization;\\n  acl:agent <' + options.ownerWebId + '>;',\n      `  acl:accessTo <${options.target}>;`,\n      `  acl:default <${options.target}>;`,\n      '  acl:mode acl:Read, acl:Write, acl:Control.',\n      ''\n    ].join('\\n')\n\n    if (options.accessToModes) {\n      str += [\n        '<#bobAccessTo> a acl:Authorization;',\n        `  acl:agent <${options.peerWebId}>;`,\n        `  acl:accessTo <${options.target}>;`,\n        `  acl:mode ${options.accessToModes}.`,\n        ''\n      ].join('\\n')\n    }\n\n    if (options.defaultModes) {\n      str += [\n        '<#bobDefault> a acl:Authorization;',\n        `  acl:agent <${options.peerWebId}>;`,\n        `  acl:default <${options.target}>;`,\n        `  acl:mode ${options.defaultModes}.`,\n        ''\n      ].join('\\n')\n    }\n\n    const aclDocUrl = await aclLogic.findAclDocUrl(sym(options.target))\n    return store.fetcher._fetch(aclDocUrl, {\n      method: 'PUT',\n      body: str,\n      headers: [['Content-Type', 'text/turtle']]\n    })\n  }\n\n  async function createEmptyRdfDoc(doc: NamedNode, comment: string) {\n    await store.fetcher.webOperation('PUT', doc.uri, {\n      data: `# ${new Date()} ${comment}\\n`,\n      contentType: 'text/turtle'\n    })\n  }\n\n  return {\n    recursiveDelete,\n    setSinglePeerAccess,\n    createEmptyRdfDoc,\n    followOrCreateLink,\n    followOrCreateLinkWithContentOnCreate,\n    loadOrCreateIfNotExists,\n    loadOrCreateWithContentOnCreate\n  }\n}\n","import * as debug from '../util/debug'\nimport { authSession } from '../authSession/authSession'\nimport { createSolidLogic } from './solidLogic'\nimport { SolidLogic } from '../types'\n\nconst _fetch = async (url, requestInit) => {\n    const omitCreds = requestInit && requestInit.credentials && requestInit.credentials == 'omit'\n    const sessionAny = authSession as any\n    const sessionWebId = sessionAny?.info?.webId || sessionAny?.webId\n    if (sessionWebId && !omitCreds) { // see https://github.com/solidos/solidos/issues/114\n        // In fact fetch should respect credentials omit itself\n        const authenticatedFetch = (typeof sessionAny.fetch === 'function')\n            ? sessionAny.fetch.bind(sessionAny)\n            : (typeof sessionAny.authFetch === 'function' ? sessionAny.authFetch.bind(sessionAny) : null)\n        if (authenticatedFetch) {\n            return authenticatedFetch(url, requestInit)\n        }\n        return window.fetch(url, requestInit)\n    } else {\n        return window.fetch(url, requestInit)\n    }\n}\n\n// Global singleton pattern to ensure unique store across library versions\nconst SINGLETON_SYMBOL = Symbol.for('solid-logic-singleton')\n\n// Type the global object properly with the singleton\ninterface GlobalWithSingleton {\n    [SINGLETON_SYMBOL]?: SolidLogic\n}\n\nconst globalTarget = (typeof window !== 'undefined' ? window : global) as GlobalWithSingleton\n\nfunction getOrCreateSingleton(): SolidLogic {\n    if (!globalTarget[SINGLETON_SYMBOL]) {\n        debug.log('SolidLogic: Creating new global singleton instance.')\n        globalTarget[SINGLETON_SYMBOL] = createSolidLogic({ fetch: _fetch }, authSession)\n        debug.log('Unique quadstore initialized.')\n    } else {\n        debug.log('SolidLogic: Using existing global singleton instance.')\n    }\n    return globalTarget[SINGLETON_SYMBOL]!\n}\n//this const makes solidLogicSingleton global accessible in mashlib\nconst solidLogicSingleton = getOrCreateSingleton()\n\nexport { solidLogicSingleton }","export type ServerLogoutOptions = {\n  issuer?: string\n  postLogoutRedirectPath?: string\n}\n\nexport async function performServerSideLogout (options: ServerLogoutOptions = {}): Promise<boolean> {\n  if (typeof window === 'undefined') {\n    return false\n  }\n  const issuer = options.issuer || ''\n  const postLogoutRedirectPath = options.postLogoutRedirectPath || '/'\n\n  // Provider-specific logout endpoint discovery (OIDC end_session_endpoint).\n  try {\n    if (issuer) {\n      const wellKnownUri = new URL(issuer)\n      wellKnownUri.pathname = '/.well-known/openid-configuration'\n      const wellKnownResult = await fetch(wellKnownUri.toString(), { credentials: 'include' })\n\n      if (wellKnownResult.status === 200) {\n        const openidConfiguration = await wellKnownResult.json()\n        if (openidConfiguration && openidConfiguration.end_session_endpoint) {\n          await fetch(openidConfiguration.end_session_endpoint, { credentials: 'include' })\n        }\n      }\n    }\n  } catch (_err) {\n    // Continue with local logout even if provider logout is unavailable.\n  }\n\n  // NSS well-known logout endpoint clears cookie-backed server sessions.\n  try {\n    const logoutResponse = await fetch('/.well-known/solid/logout', { credentials: 'include' })\n    if (logoutResponse.ok || logoutResponse.redirected) {\n      window.location.assign(postLogoutRedirectPath)\n      return true\n    }\n  } catch (_err) {\n    // Not all deployments expose this endpoint.\n  }\n\n  return false\n}","const DEFAULT_ISSUERS = [\n  {\n    name: 'Solid Community',\n    uri: 'https://solidcommunity.net'\n  },\n  {\n    name: 'Solid Web',\n    uri: 'https://solidweb.org'\n  },\n  {\n    name: 'Solid Web ME',\n    uri: 'https://solidweb.me'\n  },\n  {\n    name: 'Inrupt.com',\n    uri: 'https://login.inrupt.com'\n  }\n]\n\n/**\n * @returns - A list of suggested OIDC issuers\n */\nexport function getSuggestedIssuers (): { name: string, uri: string }[] {\n    // Suggest a default list of OIDC issuers\n    const issuers = [...DEFAULT_ISSUERS]\n  \n    // Suggest the current host if not already included\n    const { host, origin } = new URL(location.href)\n    const hosts = issuers.map(({ uri }) => new URL(uri).host)\n    if (!hosts.includes(host)) {\n      issuers.unshift({ name: host, uri: origin })\n    }\n  \n    return issuers\n  }","// Make these variables directly accessible as it is what you need most of the time\n// This also makes these variable globaly accesible in mashlib\nimport { solidLogicSingleton } from './logic/solidLogicSingleton'\n\nconst authn = solidLogicSingleton.authn\nconst authSession = solidLogicSingleton.authn.authSession\nconst store = solidLogicSingleton.store\n\nexport { ACL_LINK } from './acl/aclLogic'\nexport { offlineTestID, appContext } from './authn/authUtil'\nexport { performServerSideLogout } from './authn/serverLogout'\nexport { getSuggestedIssuers } from './issuer/issuerLogic'\nexport { createTypeIndexLogic } from './typeIndex/typeIndexLogic'\nexport type { AppDetails, SolidNamespace, AuthenticationContext, SolidLogic, ChatLogic } from './types'\nexport { UnauthorizedError, CrossOriginForbiddenError, SameOriginForbiddenError, NotFoundError, FetchError, NotEditableError, WebOperationError } from './logic/CustomError'\n\nexport {\n  solidLogicSingleton, // solidLogicSingleton is exported entirely because it is used in solid-panes\n  store,\n  authn,\n  authSession\n}\n\n"],"names":["root","factory","exports","module","require","define","amd","this","__WEBPACK_EXTERNAL_MODULE__264__","aliases","acl","arg","as","bookmark","cal","cco","cert","contact","dc","dct","doap","foaf","geo","gpx","gr","http","httph","icalTZ","ldp","link","log","meeting","mo","org","owl","pad","patch","prov","pto","qu","trip","rdf","rdfs","rss","sched","schema","sioc","skos","solid","space","stat","tab","tabont","ui","vann","vcard","wf","xsd","namedNode","u","namespaces","alias","expansion","localName","__webpack_module_cache__","__webpack_require__","moduleId","cachedModule","undefined","__webpack_modules__","m","n","getter","__esModule","d","a","definition","key","o","Object","defineProperty","enumerable","get","g","globalThis","Function","e","window","obj","prop","prototype","hasOwnProperty","call","r","Symbol","toStringTag","value","p","b","document","baseURI","self","location","href","args","console","warn","crypto$1","crypto","isCryptoKey","CryptoKey","digest$1","async","algorithm","data","subtleDigest","slice","Uint8Array","subtle","digest","encoder","TextEncoder","decoder","TextDecoder","concat","buffers","size","reduce","acc","length","buf","i","buffer","set","encode","input","unencoded","arr","push","String","fromCharCode","apply","subarray","btoa","join","encodeBase64","replace","decode$1","encoded","decode","binary","atob","bytes","charCodeAt","decodeBase64","TypeError","JOSEError","Error","constructor","message","options","super","code","name","captureStackTrace","JWTClaimValidationFailed","payload","claim","reason","cause","JWTExpired","JOSEAlgNotAllowed","arguments","JOSENotSupported","JWSInvalid","JWTInvalid","JWKInvalid","JWKSInvalid","JWKSNoMatchingKey","JWKSMultipleMatchingKeys","JWKSTimeout","JWSSignatureVerificationFailed","unusable","isAlgorithm","getHashLength","hash","parseInt","checkSigCryptoKey","alg","usages","expected","getNamedCurve","namedCurve","some","includes","msg","last","pop","checkUsage","actual","types","filter","Boolean","invalidKeyInput","withAlg","isKeyLike","isDisjoint$1","headers","sources","header","parameters","keys","parameter","has","add","Set","isObject","toString","getPrototypeOf","proto","checkKeyLength","startsWith","modulusLength","isJWK","kty","asKeyObject","jwk","keyUsages","crv","subtleMapping","rest","ext","key_ops","keyData","use","importKey","exportKeyValue","k","privCache","pubCache","isKeyObject","importAndCache","cache","freeze","cached","cryptoKey","normalize","export","format","dp","dq","q","qi","WeakMap","importJWK","oth","tag","jwkMatchesOp","usage","symmetricTypeCheck","allowJwk","isSecretJWK","type","checkKeyType","test","isPrivateJWK","isPublicJWK","asymmetricTypeCheck","bind","checkKeyTypeWithJwk","validateCrit","Err","recognizedDefault","recognizedOption","protectedHeader","joseHeader","crit","Array","isArray","recognized","Map","entries","validateAlgorithms$1","option","algorithms","s","keyToJWK$1","extractable","exportKey","exportJWK","subtleDsa","saltLength","getCryptoKey","verify$1","signature","verify","compactVerify","jws","split","verified","protected","parsedProt","JSON","parse","b64","resolvedKey","result","unprotectedHeader","flattenedVerify","epoch","date","Math","floor","getTime","day","hour","REGEX","secs","str","matched","exec","parseFloat","numericDate","toLowerCase","round","minute","normalizeTyp","jwtPayload","encodedPayload","typ","requiredClaims","issuer","subject","audience","maxTokenAge","presenceCheck","reverse","iss","sub","audPayload","aud","audOption","tolerance","clockTolerance","currentDate","now","Date","iat","nbf","exp","age","jwtVerify","jwt","sign$1","sign","FlattenedSign","_payload","setProtectedHeader","_protectedHeader","setUnprotectedHeader","_unprotectedHeader","stringify","CompactSign","_flattened","validateInput","label","Number","isFinite","ProduceJWT","setIssuer","setSubject","setAudience","setJti","jwtId","jti","setNotBefore","setExpirationTime","setIssuedAt","SignJWT","sig","check","description","calculateJwkThumbprint","digestAlgorithm","components","x","y","isJWKLike","clone","structuredClone","LocalJWKSet","jwks","_cached","every","isJWKSLike","_jwks","getKey","token","kid","getKtyFromAlg","candidates","candidate","error","asyncIterator","importWithAlgCache","createLocalJWKSet","localJWKSet","defineProperties","configurable","writable","fetchJwks$1","url","timeout","controller","id","timedOut","AbortController","setTimeout","abort","response","fetch","signal","redirect","catch","err","clearTimeout","status","json","USER_AGENT","navigator","userAgent","jwksCache","RemoteJWKSet","URL","cacheMaxAge","_url","_options","agent","_timeoutDuration","timeoutDuration","_cooldownDuration","cooldownDuration","_cacheMaxAge","_cache","uat","_jwksTimestamp","_local","coolingDown","fresh","reload","_pendingFetch","WebSocketPair","EdgeRuntime","Headers","fromEntries","then","createRemoteJWKSet","remoteJWKSet","reloading","getModulusLengthOption","generateKeyPair","publicExponent","generateKey","generateKeyPair$1","redirectForLogin","idp","redirect_uri","client_details","redirect_uri_","redirect_uri_sane","origin","pathname","search","idp_origin","openid_configuration","ok","trim_trailing_slash","endsWith","sessionStorage","setItem","client_id","registration_endpoint","client_registration","client_registration_request_body","grant_types","token_endpoint_auth_method","application_type","subject_type","method","body","requestDynamicClientRegistration","redirect_uris","pkce_code_verifier","pkce_code_challenge","getPKCEcode","csrf_token","randomUUID","redirect_to_idp","encodeURIComponent","requestAccessToken","authorization_code","token_endpoint","key_pair","jwk_public_key","publicKey","dpop","htu","htm","privateKey","URLSearchParams","grant_type","code_verifier","requestFreshTokens","refresh_token","SessionEvents","SessionCore","EventTarget","isActive_","exp_","webId_","currentAth_","information","database","refreshPromise","resolveRefresh","rejectRefresh","clientDetails","sessionOptions","authFetch","onSessionStateChange","addEventListener","STATE_CHANGE","event","onSessionExpirationWarning","EXPIRATION_WARNING","onSessionExpiration","EXPIRATION","login","handleRedirectFromLogin","newSessionInfo","searchParams","getItem","delete","history","pushState","title","token_response","accessToken","jwks_uri","dpopThumbprint","token_details","dpop_key_pair","idp_details","init","Promise","all","close","removeItem","idpDetails","tokenDetails","onIncomingRedirect","setTokenDetails","dispatchStateChangeEvent","restore","resolve","reject","wasActive","isActive","sessionDatabase","renewTokens","isExpired","dispatchExpirationEvent","dispatchExpirationWarningEvent","finally","clearRefreshPromise","logout","clear","dpopPayload","Request","_renewTokensIfExpired","toUpperCase","_createSignedDPoPToken","access_token","_updateSessionDetailsFromToken","webId","_isTokenExpired","getExpiresIn","_getTokenTTL","getTokenDetails","_computeAth","hashBuffer","hashArray","from","ath","decodedToken","decoded","decodeJwt","webid","bufferSeconds","isNaN","dispatchEvent","CustomEvent","detail","expires_in","RefreshMessageTypes","SessionIDB","dbName","storeName","dbVersion","db","request","indexedDB","open","onerror","target","onsuccess","onupgradeneeded","objectStoreNames","contains","createObjectStore","transaction","oncomplete","onabort","objectStore","put","deleteItem","WebWorkerSession","worker","workerUrl","SharedWorker","port","onmessage","handleWorkerMessage","postMessage","DISCONNECT","TOKEN_DETAILS","ERROR_ON_REFRESH","EXPIRED","SCHEDULE","REFRESH","STOP","core_crypto$1","core_isCryptoKey","core_digest$1","core_encoder","core_decoder","core_concat","core_encode","core_encodeBase64","core_decode$1","core_decodeBase64","core_JOSEError","core_JWTClaimValidationFailed","core_JWTExpired","core_JOSEAlgNotAllowed","core_JOSENotSupported","core_JWSInvalid","core_JWTInvalid","core_JWKInvalid","core_JWKSInvalid","core_JWKSNoMatchingKey","core_JWKSMultipleMatchingKeys","core_JWKSTimeout","core_JWSSignatureVerificationFailed","core_unusable","core_isAlgorithm","core_getHashLength","core_checkSigCryptoKey","core_getNamedCurve","core_checkUsage","core_message","core_invalidKeyInput","core_withAlg","core_isKeyLike","core_types","core_isDisjoint$1","core_isObject","core_checkKeyLength","core_isJWK","core_asKeyObject","core_subtleMapping","core_exportKeyValue","core_privCache","core_pubCache","core_isKeyObject","core_importAndCache","core_normalize","core_importJWK","core_tag","core_jwkMatchesOp","core_symmetricTypeCheck","core_isSecretJWK","core_checkKeyType","core_isPrivateJWK","core_isPublicJWK","core_asymmetricTypeCheck","core_checkKeyTypeWithJwk","core_validateCrit","core_validateAlgorithms$1","core_keyToJWK$1","core_exportJWK","core_subtleDsa","core_getCryptoKey","core_verify$1","core_compactVerify","core_flattenedVerify","core_epoch","core_day","core_hour","core_REGEX","core_secs","core_minute","core_normalizeTyp","core_jwtPayload","core_jwtVerify","core_sign$1","core_FlattenedSign","core_CompactSign","core_validateInput","core_ProduceJWT","core_SignJWT","core_check","core_calculateJwkThumbprint","core_isJWKLike","core_clone","core_LocalJWKSet","core_isJWKSLike","core_getKtyFromAlg","core_importWithAlgCache","core_createLocalJWKSet","core_fetchJwks$1","core_USER_AGENT","core_jwksCache","core_RemoteJWKSet","core_createRemoteJWKSet","core_decode","core_getModulusLengthOption","core_generateKeyPair","core_generateKeyPair$1","core_redirectForLogin","core_requestDynamicClientRegistration","core_getPKCEcode","core_requestAccessToken","core_requestFreshTokens","core_SessionEvents","core_SessionCore","core_onIncomingRedirect","core_renewTokens","core_decodeJwt","MemorySessionDatabase","map","shouldPreserveExistingRefreshToken","IndexedDbSessionDatabase","existing","withStore","store","mode","op","tx","_a","_b","SessionCoreCtor","coreAny","core_namespaceObject","_c","default","getSessionCoreCtor","_session","host","hostname","dbError","createSession","resolveIssuerForLogin","discoveredIssuer","issuerUrl","wellKnownUrl","wellKnownResponse","credentials","wellKnownPayload","_err","discoverIssuerFromWellKnown","sessionAny","originalLogin","compatLogin","idpOrOptions","redirectUri","oidcIssuer","redirectUrl","_d","events","listeners","on","handler","off","emit","forEach","h","_wasActive","isNowActive","authSession","assign","isLoggedIn","ns_ns","solid_namespace_default","external_$rdf_","ACL_LINK","sym","createAclLogic","ns","genACLText","docURI","me","aclURI","optPublic","public","graph","auth","Namespace","doc","defaultForNew","serialize","findAclDocUrl","fetcher","load","docNode","any","setACLUserPublic","aclDoc","fetchACLRel","aclText","uri","webOperation","contentType","appContext","SolidAppContext","viewingNoAuthPage","noAuth","params","viewedPage","decodeURI","ary","offlineTestID","$SolidTestEnvironment","username","div","getElementById","getAttribute","SolidAuthnLogic","solidAuthSession","checkUserInFlight","sessionRestoreHookAttached","fallbackWebId","session","currentUser","app","infoWebId","info","sessionWebId","infoLoggedIn","sessionActive","checkUser","setUserCallback","preLoginRedirectHash","localStorage","replaceState","resolveCurrentUser","inFlight","handleIncomingRedirect","restorePreviousSession","_e","_f","postLoginRedirectHash","curUrl","webIdFromSession","probeNssCookieBackedWebId","saveUser","protocol","localhostSuffix","podName","_error","context","webIdUri","sessionInfo","sessionRoot","rootLoggedIn","rootActive","newThing","differentOrigin","CHAT_LOCATION_IN_CONTAINER","createChatLogic","profileLogic","setAcl","chatContainer","invitee","chatAclDoc","NamedNode","aclBody","addToPrivateTypeIndex","chatThing","privateTypeIndex","reg","ins","st","updater","update","_uri","errm","findChat","loadMe","podRoot","chatContainerStr","determineChatContainer","getPodRoot","exists","createChatThing","mintNew","newBase","newInstance","newPaneOptions","kb","newChatDoc","term","statementsMatching","uri2","sendInvite","inviteeInbox","inviteBody","inviteResponse","getChat","createIfMissing","createInboxLogic","utilityLogic","containerLogic","aclLogic","createInboxFor","peerWebId","nick","myWebId","ourInbox","createContainer","setSinglePeerAccess","ownerWebId","accessToModes","getNewMessages","user","inbox","getMainInbox","getContainerMembers","isContainer","markAsRead","downloaded","_fetch","archiveUrl","baseUrl","year","getUTCFullYear","month","getUTCMonth","getUTCDate","parts","filename","getArchiveUrl","text","CustomError","setPrototypeOf","UnauthorizedError","CrossOriginForbiddenError","SameOriginForbiddenError","NotFoundError","NotEditableError","WebOperationError","FetchError","publicTypeIndexDocument","privateTypeIndexDocument","publicTypeIndexAclDocument","publicTypeIndexUri","fileName","createContainerLogic","getContainerElements","containerNode","object","nodeToString","charAt","Link","containerUrl","createProfileLogic","authn","loadPreferencesInFlight","cachedPreferencesFileByWebId","isAbsoluteHttpUri","docDirUri","node","dir","docUri","withoutFragment","lastSlash","lastIndexOf","suggestTypeIndexInPreferences","preferencesFile","dirUri","isNotFoundError","ensureOwnerOnlyAclForSettings","containerUri","ensureContainerExists","aclDocUri","initializePreferencesDefaults","preferencesDoc","profileDoc","profilePublicTypeIndex","preferencesPublicTypeIndex","publicTypeIndex","createdProfilePublicTypeIndexLink","followOrCreateLinkWithContentOnCreate","toInsert","holds","literal","ensureAcl","loadOrCreateWithContentOnCreate","ensurePublicTypeIndexAclOnCreate","ensurePrivateTypeIndexOnCreate","ensurePreferencesDocExists","loadPreferences","cachedPreferencesFile","run","loadProfile","possiblePreferencesFile","fileURI","folderURI","suggestPreferencesFile","existingPreferencesFile","followOrCreateLink","findStorage","mainInbox","silencedLoadPreferences","createTypeIndexLogic","loadTypeIndexesFor","profile","suggestion","suggestPublicTypeIndex","existingPublicTypeIndex","publicScopes","index","privateScopes","suggestedPrivateTypeIndex","suggestPrivateTypeIndex","existingPrivateTypeIndex","scopes","files","scope","loadCommunityTypeIndexes","communities","each","termType","loadAllTypeIndexes","getScopedAppInstances","klass","scopedApps","scopedApps0","getScopedAppsFromIndex","theClass","results","registrations","sameTerm","instances","instance","containers","registerInTypeIndex","registration","getRegistrations","getAppInstances","scoped","deleteTypeIndexRegistration","item","the","statements","createSolidLogic","specialFetch","UpdateManager","features","loadOrCreateIfNotExists","putErr","recursiveDelete","aclDocUrl","containerMembers","defaultModes","createEmptyRdfDoc","comment","predicate","editable","createUtilityLogic","chat","typeIndex","updatePromise","del","errorBody","clearStore","remove","requestInit","omitCreds","authenticatedFetch","SINGLETON_SYMBOL","for","globalTarget","solidLogicSingleton","performServerSideLogout","postLogoutRedirectPath","wellKnownUri","wellKnownResult","openidConfiguration","end_session_endpoint","logoutResponse","redirected","DEFAULT_ISSUERS","getSuggestedIssuers","issuers","unshift","src_authSession"],"sourceRoot":""}