{"mappings":"C,A,S,C,C,C,C,C,C,C,C,C,E,I,E,A,a,O,W,W,A,a,O,K,K,A,a,O,O,O,A,a,O,O,O,C,E,E,A,Y,O,C,C,E,E,C,C,E,C,E,E,K,E,C,E,E,A,a,O,Q,A,Y,O,O,O,E,O,O,C,I,C,Q,S,E,C,C,C,E,G,C,C,C,E,C,C,G,C,C,C,E,C,C,I,E,A,Y,O,C,C,E,E,C,C,E,C,G,C,G,E,O,E,E,C,G,G,E,O,E,E,C,G,G,G,A,U,O,E,O,E,G,I,E,A,M,uB,E,I,O,E,I,C,mB,C,C,E,O,C,S,C,E,I,E,C,C,E,C,E,C,E,C,O,A,M,E,E,C,E,E,K,C,C,E,I,E,C,C,E,C,I,E,M,C,G,C,C,E,C,E,C,I,C,E,O,C,E,E,E,O,C,I,C,C,O,C,C,E,C,O,C,S,E,C,E,I,E,E,O,C,G,M,A,C,I,E,C,E,E,E,C,C,E,e,C,C,E,E,M,C,S,C,E,I,C,E,C,E,I,C,M,C,E,I,C,O,C,C,C,E,E,O,C,E,E,K,C,E,E,M,C,E,E,Q,C,S,C,C,C,E,C,C,E,C,C,S,C,C,C,E,E,O,C,C,E,C,E,A,E,O,c,C,E,O,C,I,W,O,C,C,E,A,C,G,C,C,E,C,E,I,I,E,E,E,E,M,C,I,E,C,C,E,E,G,E,C,I,E,E,E,A,C,U,O,S,A,a,O,O,O,O,C,E,A,Y,O,Q,O,G,C,O,W,O,C,G,G,C,I,C,E,C,C,C,C,E,C,M,C,S,C,C,C,C,C,ECAA,EAAQ,mBAA6B,QAAQ,CAAC,EAAQ,oBAAwB,YAAY,CAAC,SAAS,KAAK,KAAK,CAAC,8I,E,C,kB,Q,mB,O,E,C,M,C,S,C,C,C,C,C,ECE/G,IAAI,EAAU,IAAI,GAgBlB,CAAA,EAAO,OAAO,CAAC,QAAQ,CAfvB,SAAkB,CAAO,CAAE,CAAQ,EACjC,IAAK,IAAI,EAAI,EAAG,EAAI,EAAS,MAAM,CAAG,EAAG,GAAK,EAC5C,EAAQ,GAAG,CAAC,CAAQ,CAAC,EAAE,CAAE,CACvB,QAAS,EACT,KAAM,CAAQ,CAAC,EAAI,EAAE,AACvB,EAEJ,EASA,EAAO,OAAO,CAAC,OAAO,CARtB,SAAiB,CAAE,EACjB,IAAI,EAAW,EAAQ,GAAG,CAAC,GAC3B,GAAI,AAAY,MAAZ,EACF,MAAM,AAAI,MAAM,oCAAsC,GAExD,OAAO,IAAI,IAAI,EAAS,IAAI,CAAE,EAAS,OAAO,EAAE,QAAQ,EAC1D,C,E,C,E,C,M,C,S,C,C,C,C,C,ECfA,IAAI,EAAY,CAAC,EAsBjB,SAAS,EAAW,CAAG,EACrB,MAAQ,AAAA,CAAA,GAAK,CAAA,EAAK,OAAO,CAAC,0EAA2E,MAAQ,GAC/G,CAUA,EAAQ,YAAY,CAjCpB,SAA4B,CAAE,EAC5B,IAAI,EAAQ,CAAS,CAAC,EAAG,CAKzB,OAJK,IACH,EAAQ,AAKZ,WACE,GAAI,CACF,MAAM,AAAI,OACZ,CAAE,MAAO,EAAK,CACZ,IAAI,EAAW,AAAA,CAAA,GAAK,EAAI,KAAI,AAAJ,EAAO,KAAK,CAAC,oEACrC,GAAI,EAGF,OAAO,EAAW,CAAO,CAAC,EAAE,CAEhC,CACA,MAAO,GACT,IAhBI,CAAS,CAAC,EAAG,CAAG,GAEX,CACT,EA2BA,EAAQ,UAAU,CAAG,EACrB,EAAQ,SAAS,CATjB,SAAmB,CAAG,EACpB,IAAI,EAAU,AAAC,CAAA,GAAK,CAAA,EAAK,KAAK,CAAC,iEAC/B,GAAI,CAAC,EACH,MAAM,AAAI,MAAM,oBAElB,OAAO,CAAO,CAAC,EAAE,AACnB,C,E,C,E,C,Q,C,S,C,C,C,C,C,ECnCA,IAAA,EAAA,EAAA,eAYA,IAAM,EAAQ,OAAO,IAAI,EAAI,EAAE,CAoB/B,GAnBA,OAAO,IAAI,CAAG,CACZ,KAAM,AAAC,IACL,GACF,EACA,WAAA,EAAA,UAAS,CACT,eAAA,EAAA,cAAa,CACb,YAAA,EAAA,WAAU,CACV,gBAAA,EAAA,eAAc,CACd,gBAAA,EAAA,eAAc,CACd,sBAAA,EAAA,qBAAoB,CACpB,4BAAA,EAAA,2BAA0B,CAC1B,sBAAA,EAAA,qBAAoB,CACpB,qBAAA,EAAA,oBAAmB,AACrB,EAEI,MAAM,OAAO,CAAC,IAChB,EAAM,OAAO,CAAC,AAAC,GAAmB,KAGhC,SAAS,aAAa,CAAE,CAC1B,IAAI,EAAW,SAAS,aAAa,CAAC,YAAY,CAAC,kBAC/C,EAAQ,SAAS,aAAa,CAAC,YAAY,CAAC,cAahD,GAVI,CAAC,GAAY,AAA4B,KAAA,IAArB,OAAO,SAAS,EAAoB,OAAO,SAAS,CAAC,MAAM,EAAI,OAAO,SAAS,CAAC,MAAM,CAAC,KAAK,EAElH,CAAA,EAAW,OAAO,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,AAAR,EAGtC,GAAS,AAAoB,aAApB,OAAO,UAEnB,CAAA,EAAQ,SAAS,KAAK,CAAC,OAAO,CAAC,KAAO,SAAS,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAG,EAAvE,EAGE,GAAY,EAAO,CACrB,GAAI,CAAC,SAAS,cAAc,CAAC,2BAA4B,CACvD,IAAI,EAAM,SAAS,aAAa,CAAC,MACjC,CAAA,EAAI,EAAE,CAAG,0BACT,SAAS,IAAI,CAAC,WAAW,CAAC,EAC5B,CACA,AAAA,CAAA,EAAA,EAAA,2BAA2B,AAA3B,EAA4B,CAC1B,SAAA,EACA,MAAA,CACF,EACF,MACE,QAAQ,IAAI,CAAC,qDAEjB,C,E,C,c,O,E,C,Q,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GCbA,EAAA,MAAA,CAAA,EAAA,YAAA,IAAgB,GAUhB,EAAA,MAAA,CAAA,EAAA,iBAAA,IAAgB,GAUhB,EAAA,MAAA,CAAA,EAAA,uBAAA,IAAsB,GAYtB,EAAA,MAAA,CAAA,EAAA,wBAAA,IAAsB,GAUtB,EAAA,MAAA,CAAA,EAAA,aAAA,IAAgB,GAUhB,EAAA,MAAA,CAAA,EAAA,cAAA,IAAsB,GAUtB,EAAA,MAAA,CAAA,EAAA,kBAAA,IAAgB,GAUhB,EAAA,MAAA,CAAA,EAAA,kBAAA,IAAsB,GAUtB,EAAA,MAAA,CAAA,EAAA,wBAAA,IAAsB,GAyDtB,EAAA,MAAA,CAAA,EAAA,wBAAA,IAAsB,GAwCtB,EAAA,MAAA,CAAA,EAAA,8BAAA,IAAsB,GAjOtB,IAAA,EAAA,EAAA,oBA8CO,SAAS,EAAU,CAAgB,EACxC,OAAO,IAAI,gBAAgB,AAAA,CAAA,EAAA,EAAA,SAAQ,AAAR,EAAU,CAAC,MAAM,EAAE,EAAS,OAAO,CAAC,EACjE,CAQO,SAAS,EAAe,CAAgB,EAC7C,MAAO,AAAA,CAAA,EAAA,EAAA,SAAQ,AAAR,EAAU,CAAC,MAAM,EAAE,EAAS,UAAU,CAAC,CAChD,CAQO,eAAe,EAAqB,CAAgB,EACzD,IAAM,EAAqB,MAAM,EAAsB,GAEvD,OAAO,GAAoB,CAAC,4CAA4C,EAAI,EAAE,AAChF,CAQO,eAAe,EAAsB,CAAgB,EAC1D,MAAO,AAAA,CAAA,EAAA,EAAA,YAAW,AAAX,EAAa,CAAC,MAAM,EAAE,EAAS,UAAU,CAAC,CACnD,CAQO,SAAS,EAAW,CAAgB,EACzC,MAAO,AAAA,CAAA,EAAA,EAAA,SAAQ,AAAR,EAAU,CAAC,MAAM,EAAE,EAAS,SAAS,CAAC,CAC/C,CAQO,eAAe,EAAY,CAAgB,EAChD,MAAO,AAAA,CAAA,EAAA,EAAA,YAAW,AAAX,EAAa,CAAC,MAAM,EAAE,EAAS,SAAS,CAAC,CAClD,CAQO,SAAS,EAAgB,CAAgB,EAC9C,MAAO,CAAC,CAAC,EAAe,IAAa,CAAC,CAAC,EAAW,EACpD,CAQO,eAAe,EAAgB,CAAgB,EACpD,IAAM,EAAW,MAAM,EAAY,SAEnC,EAAK,GAIE,EAAS,cAAc,AAChC,CAEO,eAAe,EAAsB,CAAgB,EAC1D,IAAM,EAAS,EAAU,GACnB,EAAW,MAAM,EAAY,GACnC,GAAI,EAAS,cAAc,EAAI,CAAC,EAAO,GAAG,CAAC,SAAW,CAAC,EAAO,GAAG,CAAC,eAChE,MAAO,CAAA,EAGT,IAAM,EAAe,IAAI,gBAAgB,CACvC,UAAW,EACX,cAAe,QACf,SAAU,iCACV,aAAc,CAAC,EAAE,OAAO,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAO,GAAG,CAAC,eAAe,CAAC,CACrE,cAAe,cACf,OAAQ,MACV,GAEM,EAAM,IAAI,IAAI,CAAC,EAAE,EAAO,GAAG,CAAC,UAAU,WAAW,EAAE,EAAa,CAAC,EACjE,EAAS,SAAS,aAAa,CAAC,UAEtC,OAAO,IAAI,QAAiB,AAAC,IAC3B,OAAO,gBAAgB,CAAC,UAAW,eAAe,EAAU,CAAK,EAC/D,GAAI,AAAoB,2BAApB,EAAM,IAAI,CAAC,IAAI,CAA+B,CAChD,OAAO,mBAAmB,CAAC,UAAW,GACtC,SAAS,IAAI,CAAC,WAAW,CAAC,GAE1B,IAAM,EAAwB,IAAI,IAAI,CAAC,EAAE,OAAO,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAO,GAAG,CAAC,QAAQ,qBAAqB,CAAC,EAC3G,EAAsB,YAAY,CAAC,MAAM,CAAC,UAAW,EAAS,GAAG,EACjE,IAAM,EAAQ,EAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAY9C,EAAQ,AAXK,CAAA,MAAM,IAAI,CAAC,KAAK,CAAC,EAAuB,CACnD,OAAQ,OACR,YAAa,OACb,QAAS,CACP,cAAe,UAAY,CAC7B,EACA,KAAM,KAAK,SAAS,CAAC,CACnB,SAAA,CACF,EACF,EAAA,EAEa,EAAE,CACjB,CACF,GACA,EAAO,GAAG,CAAG,EAAI,QAAQ,GACzB,SAAS,IAAI,CAAC,WAAW,CAAC,EAC5B,EACF,CAYO,eAAe,EAAsB,CAC1C,KAAA,CAAI,CACJ,MAAA,CAAK,CACL,SAAA,CAAQ,CACR,GAAA,CAAE,CAMH,EACC,GAAM,CAAE,4BAAA,CAA2B,CAAE,CAAG,MAAM,EAAO,oBAErD,GAAI,AAAS,YAAT,EACF,MAAM,AAAI,MAAM,CAAC,kBAAkB,EAAE,EAAK,wCAAwC,CAAC,EAGrF,GAAI,CAAC,EAAgB,GACnB,MAAM,AAAI,MAAM,8BAGlB,IAAM,EAAW,MAAM,EAAY,GAEnC,GAAI,EAAS,cAAc,CACzB,MAAM,AAAI,MAAM,mCAGlB,OAAO,EAA4B,EAAI,CAAE,MAAO,EAAS,KAAK,CAAE,MAAA,EAAO,SAAA,CAAS,EAClF,CAYO,eAAe,EAA4B,CAAE,SAAA,CAAQ,CAAE,MAAA,CAAK,CAAuC,EACxG,GAAI,CAAC,QAAQ,UAAU,QAAQ,SAAS,SACtC,OAGF,IAAM,EAAY,IAAI,IAAI,OAAO,QAAQ,CAAC,IAAI,EAC9C,EAAU,YAAY,CAAC,MAAM,CAAC,OAC9B,OAAO,OAAO,CAAC,YAAY,CAAC,QAAQ,KAAK,CAAE,KAAA,EAAW,EAAU,QAAQ,IACxE,IAAM,EAAW,MAAM,EAAY,GAEnC,GAAI,CAAC,EAAS,KAAK,CACjB,OAGF,GAAM,CAAE,wBAAA,CAAuB,CAAE,CAAG,MAAM,EAAO,oBAE7C,EAAO,SAAS,cAAc,CAAC,2BAenC,OAdK,IAEH,AADA,CAAA,EAAO,SAAS,aAAa,CAAC,MAA9B,EACK,EAAE,CAAG,0BACV,EAAK,SAAS,CAAG,qBACjB,OAAO,MAAM,CAAC,EAAK,KAAK,CAAE,CACxB,SAAU,WACV,IAAK,EACL,MAAO,EACP,OAAQ,MACV,IAGF,MAAM,EAAwB,EAAM,CAAE,MAAO,EAAS,KAAK,CAAE,MAAA,CAAM,GAE5D,IAAI,QAAQ,AAAC,IAClB,sBAAsB,KACf,SAAS,cAAc,CAAC,4BAC3B,SAAS,IAAI,CAAC,WAAW,CAAC,GAG5B,GACF,EACF,EACF,C,E,C,mB,Q,mB,Q,iB,Q,iD,O,E,C,M,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GCxQA,EAAA,MAAA,CAAA,EAAA,YAAA,IAAgB,GAWhB,EAAA,MAAA,CAAA,EAAA,eAAA,IAAgB,GAbhB,IAAA,EAAA,EAAA,QAEO,SAAS,EAAU,CAAkB,EAE3C,IAAK,IAAM,KADK,SAAS,MAAM,CAAC,KAAK,CAAC,KACb,CACxB,GAAM,CAAC,EAAM,GAAG,EAAM,CAAG,EAAE,KAAK,CAAC,KACjC,GAAI,EAAK,IAAI,KAAO,EACnB,OAAO,EAAM,IAAI,CAAC,IAEpB,CACA,OAAO,IACR,CAEO,SAAS,EAAa,CAAkB,EAC9C,IAAM,EAAS,EAAU,UAEzB,AAAK,EAIE,AAAA,CAAA,EAAA,EAAA,SAAQ,AAAR,EAAU,GAHT,IAIT,C,E,C,K,Q,iD,O,E,C,Q,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GCrBA,EAAA,MAAA,CAAA,EAAA,iBAAA,IAAA,EAAA,cAAA,EACA,EAAA,MAAA,CAAA,EAAA,mBAAA,IAAA,EAAA,gBAAA,EACA,EAAA,MAAA,CAAA,EAAA,iBAAA,IAAA,EAAA,cAAA,EACA,EAAA,MAAA,CAAA,EAAA,iBAAA,IAAA,EAAA,cAAA,EACA,EAAA,MAAA,CAAA,EAAA,gBAAA,IAAA,EAAA,aAAA,EACA,EAAA,MAAA,CAAA,EAAA,kBAAA,IAAA,EAAA,eAAA,EACA,EAAA,MAAA,CAAA,EAAA,gBAAA,IAAA,EAAA,aAAA,EACA,EAAA,MAAA,CAAA,EAAA,YAAA,IAAA,EAAA,SAAA,EACA,EAAA,MAAA,CAAA,EAAA,aAAA,IAAA,EAAA,UAAA,EACA,EAAA,MAAA,CAAA,EAAA,iBAAA,IAAA,EAAA,cAAA,EACA,EAAA,MAAA,CAAA,EAAA,mBAAA,IAAA,EAAA,gBAAA,EACA,EAAA,MAAA,CAAA,EAAA,cAAA,IAAA,EAAA,WAAA,EACA,EAAA,MAAA,CAAA,EAAA,gBAAA,IAAA,EAAA,aAAA,EACA,EAAA,MAAA,CAAA,EAAA,cAAA,IAAA,EAAA,WAAA,EACA,EAAA,MAAA,CAAA,EAAA,UAAA,IAAA,EAAA,OAAA,EACA,EAAA,MAAA,CAAA,EAAA,aAAA,IAAA,EAAA,UAAA,EACA,EAAA,MAAA,CAAA,EAAA,yBAAA,IAAA,EAAA,sBAAA,EAAA,EAAA,MAAA,CAAA,EAAA,4BAAA,IAAA,EAAA,yBAAA,EACA,EAAA,MAAA,CAAA,EAAA,cAAA,IAAA,EAAA,WAAA,EACA,EAAA,MAAA,CAAA,EAAA,oBAAA,IAAA,EAAA,iBAAA,EACA,EAAA,MAAA,CAAA,EAAA,qBAAA,IAAA,EAAA,kBAAA,EACA,EAAA,MAAA,CAAA,EAAA,eAAA,IAAA,EAAA,YAAA,EACA,EAAA,MAAA,CAAA,EAAA,cAAA,IAAA,EAAA,WAAA,EAAA,EAAA,MAAA,CAAA,EAAA,aAAA,IAAA,EAAA,UAAA,EAAA,EAAA,MAAA,CAAA,EAAA,YAAA,IAAA,EAAA,SAAA,EACA,EAAA,MAAA,CAAA,EAAA,aAAA,IAAA,EAAA,UAAA,EAAA,EAAA,MAAA,CAAA,EAAA,cAAA,IAAA,EAAA,WAAA,EAAA,EAAA,MAAA,CAAA,EAAA,aAAA,IAAA,EAAA,UAAA,EAAA,EAAA,MAAA,CAAA,EAAA,YAAA,IAAA,EAAA,SAAA,EACA,EAAA,MAAA,CAAA,EAAA,wBAAA,IAAA,EAAA,qBAAA,EACA,EAAA,MAAA,CAAA,EAAA,YAAA,IAAA,EAAA,SAAA,EAGA,EAAA,MAAA,CAAA,EAAA,kBAAA,IAAA,EAAA,eAAA,EACA,EAAA,MAAA,CAAA,EAAA,iBAAA,IAAA,EAAA,cAAA,EAGA,EAAA,MAAA,CAAA,EAAA,gBAAA,IAAA,EAAA,OAAA,EALA,EAAA,MAAA,CAAA,EAAA,SAAA,IAAS,GAIT,EAAA,MAAA,CAAA,EAAA,YAAA,IAAS,GA9BT,IAAA,EAAA,EAAA,4BACA,EAAA,EAAA,8BACA,EAAA,EAAA,4BACA,EAAA,EAAA,4BACA,EAAA,EAAA,2BACA,EAAA,EAAA,6BACA,EAAA,EAAA,2BACA,EAAA,EAAA,mBACA,EAAA,EAAA,oBACA,EAAA,EAAA,4BACA,EAAA,EAAA,8BACA,EAAA,EAAA,yBACA,EAAA,EAAA,2BACA,EAAA,EAAA,yBACA,EAAA,EAAA,iBACA,EAAA,EAAA,oBACA,EAAA,EAAA,uBACA,EAAA,EAAA,qBACA,EAAA,EAAA,mBACA,EAAA,EAAA,oBACA,EAAA,EAAA,sBACA,EAAA,EAAA,mBACA,EAAA,EAAA,mBACA,EAAA,EAAA,qCACA,EAAA,EAAA,wBACA,EAAA,EAAA,oBAEA,EAAA,EAAA,8BACA,EAAA,EAAA,4BACA,EAAA,EAAA,uBAEA,EAAA,EAAA,qB,E,E,c,C,E,E,C,2B,Q,6B,Q,2B,Q,2B,Q,0B,Q,4B,Q,0B,Q,kB,Q,mB,Q,2B,Q,6B,Q,wB,Q,0B,Q,wB,Q,gB,Q,mB,Q,sB,Q,oB,Q,kB,Q,mB,Q,qB,Q,kB,Q,kB,Q,oC,Q,uB,Q,mB,Q,6B,Q,2B,Q,sB,Q,oB,Q,iD,O,E,C,M,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GC5BA,EAAA,MAAA,CAAA,EAAA,iBAAA,IAAsB,GAHtB,IAAA,EAAA,EAAA,2BACA,EAAA,EAAA,wBACA,EAAA,EAAA,6BACO,eAAe,EAAe,CAAG,CAAE,CAAG,CAAE,CAAO,EAIlD,GAHI,aAAe,YACf,CAAA,EAAM,AAAA,CAAA,EAAA,EAAA,OAAM,AAAN,EAAQ,MAAM,CAAC,EADzB,EAGI,AAAe,UAAf,OAAO,EACP,MAAM,IAAI,EAAA,UAAU,CAAC,8CAEzB,GAAM,CAAE,EAAG,CAAe,CAAE,EAAG,CAAY,CAAE,EAAG,CAAE,CAAE,EAAG,CAAU,CAAE,EAAG,CAAG,CAAE,OAAA,CAAM,CAAG,CAAG,EAAI,KAAK,CAAC,KACjG,GAAI,AAAW,IAAX,EACA,MAAM,IAAI,EAAA,UAAU,CAAC,uBAEzB,IAAM,EAAY,MAAM,AAAA,CAAA,EAAA,EAAA,gBAAe,AAAf,EAAiB,CACrC,WAAA,EACA,GAAK,GAAM,KAAA,EACX,UAAW,GAAmB,KAAA,EAC9B,IAAM,GAAO,KAAA,EACb,cAAe,GAAgB,KAAA,CACnC,EAAG,EAAK,GACF,EAAS,CAAE,UAAW,EAAU,SAAS,CAAE,gBAAiB,EAAU,eAAe,AAAC,QAC5F,AAAI,AAAe,YAAf,OAAO,EACA,CAAE,GAAG,CAAM,CAAE,IAAK,EAAU,GAAG,AAAC,EAEpC,CACX,C,E,C,0B,Q,uB,Q,4B,Q,iD,O,E,C,Q,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GCfA,EAAA,MAAA,CAAA,EAAA,mBAAA,IAAsB,GAXtB,IAAA,EAAA,EAAA,8BACA,EAAA,EAAA,4B,E,E,c,C,GACA,EAAA,EAAA,yBACA,EAAA,EAAA,wBACA,EAAA,EAAA,4B,E,E,c,C,GACA,EAAA,EAAA,0B,E,E,c,C,GACA,EAAA,EAAA,uC,E,E,c,C,GACA,EAAA,EAAA,6BACA,EAAA,EAAA,oB,E,E,c,C,GACA,EAAA,EAAA,8B,E,E,c,C,GACA,EAAA,EAAA,oC,E,E,c,C,GACO,eAAe,EAAiB,CAAG,CAAE,CAAG,CAAE,CAAO,MAChD,MA+BA,EA2CA,EAcA,EAUA,EACA,EAcA,EAOA,EAvHJ,GAAI,CAAC,AAAA,CAAA,EAAA,EAAA,OAAO,AAAP,EAAS,GACV,MAAM,IAAI,EAAA,UAAS,CAAE,mCAEzB,GAAI,AAAkB,KAAA,IAAlB,EAAI,SAAS,EAAkB,AAAe,KAAA,IAAf,EAAI,MAAM,EAAkB,AAAoB,KAAA,IAApB,EAAI,WAAW,CAC1E,MAAM,IAAI,EAAA,UAAS,CAAE,uBAEzB,GAAI,AAAkB,UAAlB,OAAO,EAAI,EAAE,CACb,MAAM,IAAI,EAAA,UAAU,CAAC,uDAEzB,GAAI,AAA0B,UAA1B,OAAO,EAAI,UAAU,CACrB,MAAM,IAAI,EAAA,UAAU,CAAC,4CAEzB,GAAI,AAAmB,UAAnB,OAAO,EAAI,GAAG,CACd,MAAM,IAAI,EAAA,UAAU,CAAC,oDAEzB,GAAI,AAAkB,KAAA,IAAlB,EAAI,SAAS,EAAkB,AAAyB,UAAzB,OAAO,EAAI,SAAS,CACnD,MAAM,IAAI,EAAA,UAAS,CAAE,uCAEzB,GAAI,AAAsB,KAAA,IAAtB,EAAI,aAAa,EAAkB,AAA6B,UAA7B,OAAO,EAAI,aAAa,CAC3D,MAAM,IAAI,EAAA,UAAS,CAAE,oCAEzB,GAAI,AAAY,KAAA,IAAZ,EAAI,GAAG,EAAkB,AAAmB,UAAnB,OAAO,EAAI,GAAG,CACvC,MAAM,IAAI,EAAA,UAAS,CAAE,0BAEzB,GAAI,AAAe,KAAA,IAAf,EAAI,MAAM,EAAkB,CAAC,AAAA,CAAA,EAAA,EAAA,OAAO,AAAP,EAAS,EAAI,MAAM,EAChD,MAAM,IAAI,EAAA,UAAS,CAAE,gDAEzB,GAAI,AAAoB,KAAA,IAApB,EAAI,WAAW,EAAkB,CAAC,AAAA,CAAA,EAAA,EAAA,OAAO,AAAP,EAAS,EAAI,WAAW,EAC1D,MAAM,IAAI,EAAA,UAAS,CAAE,uDAGzB,GAAI,EAAI,SAAS,CACb,GAAI,CACA,IAAM,EAAkB,AAAA,CAAA,EAAA,EAAA,MAAS,AAAT,EAAU,EAAI,SAAS,EAC/C,EAAa,KAAK,KAAK,CAAC,AAAA,CAAA,EAAA,EAAA,OAAM,AAAN,EAAQ,MAAM,CAAC,GAC3C,CACA,MAAO,EAAI,CACP,MAAM,IAAI,EAAA,UAAS,CAAE,kCACzB,CAEJ,GAAI,CAAC,AAAA,CAAA,EAAA,EAAA,OAAU,AAAV,EAAW,EAAY,EAAI,MAAM,CAAE,EAAI,WAAW,EACnD,MAAM,IAAI,EAAA,UAAS,CAAE,oHAEzB,IAAM,EAAa,CACf,GAAG,CAAU,CACb,GAAG,EAAI,MAAM,CACb,GAAG,EAAI,WAAW,AACtB,EAEA,GADA,AAAA,CAAA,EAAA,EAAA,OAAY,AAAZ,EAAa,EAAA,UAAS,CAAG,IAAI,IAAO,MAAA,EAAyC,KAAK,EAAI,EAAQ,IAAI,CAAE,EAAY,GAC5G,AAAmB,KAAA,IAAnB,EAAW,GAAG,CAAgB,CAC9B,GAAI,CAAC,GAAc,CAAC,EAAW,GAAG,CAC9B,MAAM,IAAI,EAAA,UAAS,CAAE,wEAEzB,GAAI,AAAmB,QAAnB,EAAW,GAAG,CACd,MAAM,IAAI,EAAA,gBAAgB,CAAC,uEAEnC,CACA,GAAM,CAAE,IAAA,CAAG,CAAE,IAAA,CAAG,CAAE,CAAG,EACrB,GAAI,AAAe,UAAf,OAAO,GAAoB,CAAC,EAC5B,MAAM,IAAI,EAAA,UAAU,CAAC,6CAEzB,GAAI,AAAe,UAAf,OAAO,GAAoB,CAAC,EAC5B,MAAM,IAAI,EAAA,UAAU,CAAC,wDAEzB,IAAM,EAA0B,GAAW,AAAA,CAAA,EAAA,EAAA,OAAkB,AAAlB,EAAmB,0BAA2B,EAAQ,uBAAuB,EAClH,EAA8B,GAChC,AAAA,CAAA,EAAA,EAAA,OAAkB,AAAlB,EAAmB,8BAA+B,EAAQ,2BAA2B,EACzF,GAAI,GAA2B,CAAC,EAAwB,GAAG,CAAC,GACxD,MAAM,IAAI,EAAA,iBAAgB,CAAE,kDAEhC,GAAI,GAA+B,CAAC,EAA4B,GAAG,CAAC,GAChE,MAAM,IAAI,EAAA,iBAAgB,CAAE,6DAGhC,GAAI,AAAsB,KAAA,IAAtB,EAAI,aAAa,CACjB,GAAI,CACA,EAAe,AAAA,CAAA,EAAA,EAAA,MAAS,AAAT,EAAU,EAAI,aAAa,CAC9C,CACA,MAAO,EAAI,CACP,MAAM,IAAI,EAAA,UAAS,CAAE,+CACzB,CAEJ,IAAI,EAAc,CAAA,CACC,CAAA,YAAf,OAAO,IACP,EAAM,MAAM,EAAI,EAAY,GAC5B,EAAc,CAAA,GAGlB,GAAI,CACA,EAAM,MAAM,AAAA,CAAA,EAAA,EAAA,OAAmB,AAAnB,EAAqB,EAAK,EAAK,EAAc,EAAY,EACzE,CACA,MAAO,EAAK,CACR,GAAI,aAAe,WAAa,aAAe,EAAA,UAAS,EAAK,aAAe,EAAA,gBAAgB,CACxF,MAAM,EAEV,EAAM,AAAA,CAAA,EAAA,EAAA,OAAU,AAAV,EAAY,EACtB,CAGA,GAAI,CACA,EAAK,AAAA,CAAA,EAAA,EAAA,MAAS,AAAT,EAAU,EAAI,EAAE,CACzB,CACA,MAAO,EAAI,CACP,MAAM,IAAI,EAAA,UAAS,CAAE,oCACzB,CACA,GAAI,CACA,EAAM,AAAA,CAAA,EAAA,EAAA,MAAS,AAAT,EAAU,EAAI,GAAG,CAC3B,CACA,MAAO,EAAI,CACP,MAAM,IAAI,EAAA,UAAS,CAAE,qCACzB,CACA,IAAM,EAAkB,AAAA,CAAA,EAAA,EAAA,OAAO,AAAP,EAAQ,MAAM,CAAE,AAAwB,OAAxB,CAAA,EAAK,EAAI,SAAS,AAAT,GAAuB,AAAO,KAAK,IAAZ,EAAgB,EAAK,IAGzF,EADA,AAAY,KAAA,IAAZ,EAAI,GAAG,CACU,AAAA,CAAA,EAAA,EAAA,MAAM,AAAN,EAAO,EAAiB,AAAA,CAAA,EAAA,EAAA,OAAO,AAAP,EAAQ,MAAM,CAAC,KAAM,AAAA,CAAA,EAAA,EAAA,OAAO,AAAP,EAAQ,MAAM,CAAC,EAAI,GAAG,GAGnE,EAGrB,GAAI,CACA,EAAa,AAAA,CAAA,EAAA,EAAA,MAAS,AAAT,EAAU,EAAI,UAAU,CACzC,CACA,MAAO,EAAI,CACP,MAAM,IAAI,EAAA,UAAS,CAAE,4CACzB,CACA,IAAI,EAAY,MAAM,AAAA,CAAA,EAAA,EAAA,OAAM,AAAN,EAAQ,EAAK,EAAK,EAAY,EAAI,EAAK,EACtC,CAAA,QAAnB,EAAW,GAAG,EACd,CAAA,EAAY,MAAM,AAAC,CAAA,AAAC,CAAA,MAAA,EAAyC,KAAK,EAAI,EAAQ,UAAU,AAAV,GAAe,CAAA,EAAA,EAAA,OAAM,AAAN,CAAM,EAAG,EAD1G,EAGA,IAAM,EAAS,CAAE,UAAA,CAAU,EAI3B,GAHsB,KAAA,IAAlB,EAAI,SAAS,EACb,CAAA,EAAO,eAAe,CAAG,CAD7B,EAGI,AAAY,KAAA,IAAZ,EAAI,GAAG,CACP,GAAI,CACA,EAAO,2BAA2B,CAAG,AAAA,CAAA,EAAA,EAAA,MAAQ,AAAR,EAAU,EAAI,GAAG,CAC1D,CACA,MAAO,EAAI,CACP,MAAM,IAAI,EAAA,UAAS,CAAE,qCACzB,OAQJ,CANwB,KAAA,IAApB,EAAI,WAAW,EACf,CAAA,EAAO,uBAAuB,CAAG,EAAI,WAAW,AAAX,EAEtB,KAAA,IAAf,EAAI,MAAM,EACV,CAAA,EAAO,iBAAiB,CAAG,EAAI,MAAM,AAAN,EAE/B,GACO,CAAE,GAAG,CAAM,CAAE,IAAA,CAAI,EAErB,CACX,C,E,C,6B,Q,2B,Q,wB,Q,uB,Q,2B,Q,yB,Q,sC,Q,4B,Q,mB,Q,6B,Q,mC,Q,iD,O,E,C,Q,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GCpKa,EAAA,MAAA,CAAA,EAAA,eAAA,IAAA,GAYA,EAAA,MAAA,CAAA,EAAA,SAAA,IAAA,GAGA,EAAA,MAAA,CAAA,EAAA,eAAA,IAAA,GAQA,EAAA,MAAA,CAAA,EAAA,SAAA,IAAA,GAxBb,IAAA,EAAA,EAAA,0BACO,IAAM,EAAe,AAAC,IACzB,IAAI,EAAY,CACS,CAAA,UAArB,OAAO,GACP,CAAA,EAAY,AAAA,CAAA,EAAA,EAAA,OAAO,AAAP,EAAQ,MAAM,CAAC,EAD/B,EAIA,IAAM,EAAM,EAAE,CACd,IAAK,IAAI,EAAI,EAAG,EAAI,EAAU,MAAM,CAAE,GAFnB,MAGf,EAAI,IAAI,CAAC,OAAO,YAAY,CAAC,KAAK,CAAC,KAAM,EAAU,QAAQ,CAAC,EAAG,EAHhD,SAKnB,OAAO,KAAK,EAAI,IAAI,CAAC,IACzB,EACa,EAAS,AAAC,GACZ,EAAa,GAAO,OAAO,CAAC,KAAM,IAAI,OAAO,CAAC,MAAO,KAAK,OAAO,CAAC,MAAO,KAEvE,EAAe,AAAC,IACzB,IAAM,EAAS,KAAK,GACd,EAAQ,IAAI,WAAW,EAAO,MAAM,EAC1C,IAAK,IAAI,EAAI,EAAG,EAAI,EAAO,MAAM,CAAE,IAC/B,CAAK,CAAC,EAAE,CAAG,EAAO,UAAU,CAAC,GAEjC,OAAO,CACX,EACa,EAAS,AAAC,IACnB,IAAI,EAAU,EACV,aAAmB,YACnB,CAAA,EAAU,AAAA,CAAA,EAAA,EAAA,OAAM,AAAN,EAAQ,MAAM,CAAC,EAD7B,EAGA,EAAU,EAAQ,OAAO,CAAC,KAAM,KAAK,OAAO,CAAC,KAAM,KAAK,OAAO,CAAC,MAAO,IACvE,GAAI,CACA,OAAO,EAAa,EACxB,CACA,MAAO,EAAI,CACP,MAAM,AAAI,UAAU,oDACxB,CACJ,C,E,C,yB,Q,iD,O,E,C,M,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GCnCa,EAAA,MAAA,CAAA,EAAA,UAAA,IAAA,GACA,EAAA,MAAA,CAAA,EAAA,UAAA,IAAA,GAEb,EAAA,MAAA,CAAA,EAAA,SAAA,IAAgB,GAUhB,EAAA,MAAA,CAAA,EAAA,MAAA,IAAgB,GAShB,EAAA,MAAA,CAAA,EAAA,WAAA,IAAgB,GAQhB,EAAA,MAAA,CAAA,EAAA,WAAA,IAAgB,GAKhB,EAAA,MAAA,CAAA,EAAA,iBAAA,IAAgB,GAGhB,EAAA,MAAA,CAAA,EAAA,YAAA,IAAsB,GAvCtB,IAAA,EAAA,EAAA,wB,E,E,c,C,GACO,IAAM,EAAU,IAAI,YACd,EAAU,IAAI,YAEpB,SAAS,EAAO,GAAG,CAAO,EAC7B,IAAM,EAAO,EAAQ,MAAM,CAAC,CAAC,EAAK,CAAE,OAAA,CAAM,CAAE,GAAK,EAAM,EAAQ,GACzD,EAAM,IAAI,WAAW,GACvB,EAAI,EAKR,OAJA,EAAQ,OAAO,CAAC,AAAC,IACb,EAAI,GAAG,CAAC,EAAQ,GAChB,GAAK,EAAO,MAAM,AACtB,GACO,CACX,CACO,SAAS,EAAI,CAAG,CAAE,CAAQ,EAC7B,OAAO,EAAO,EAAQ,MAAM,CAAC,GAAM,IAAI,WAAW,CAAC,EAAE,EAAG,EAC5D,CACA,SAAS,EAAc,CAAG,CAAE,CAAK,CAAE,CAAM,EACrC,GAAI,EAAQ,GAAK,GAfH,WAgBV,MAAM,AAAI,WAAW,CAAC,0BAA0B,EAAE,AAhBxC,WAgBoD,EAAE,WAAW,EAAE,EAAM,CAAC,EAExF,EAAI,GAAG,CAAC,CAAC,IAAU,GAAI,IAAU,GAAI,IAAU,EAAG,AAAQ,IAAR,EAAa,CAAE,EACrE,CACO,SAAS,EAAS,CAAK,EAG1B,IAAM,EAAM,IAAI,WAAW,GAG3B,OAFA,EAAc,EAHD,KAAK,KAAK,CAAC,EArBV,YAwBW,GACzB,EAAc,EAHF,EAtBE,WAyBU,GACjB,CACX,CACO,SAAS,EAAS,CAAK,EAC1B,IAAM,EAAM,IAAI,WAAW,GAE3B,OADA,EAAc,EAAK,GACZ,CACX,CACO,SAAS,EAAe,CAAK,EAChC,OAAO,EAAO,EAAS,EAAM,MAAM,EAAG,EAC1C,CACO,eAAe,EAAU,CAAM,CAAE,CAAI,CAAE,CAAK,EAC/C,IAAM,EAAa,KAAK,IAAI,CAAC,AAAC,CAAA,GAAQ,CAAA,EAAK,IACrC,EAAM,IAAI,WAAW,AAAa,GAAb,GAC3B,IAAK,IAAI,EAAO,EAAG,EAAO,EAAY,IAAQ,CAC1C,IAAM,EAAM,IAAI,WAAW,EAAI,EAAO,MAAM,CAAG,EAAM,MAAM,EAC3D,EAAI,GAAG,CAAC,EAAS,EAAO,IACxB,EAAI,GAAG,CAAC,EAAQ,GAChB,EAAI,GAAG,CAAC,EAAO,EAAI,EAAO,MAAM,EAChC,EAAI,GAAG,CAAC,MAAM,AAAA,CAAA,EAAA,EAAA,OAAK,AAAL,EAAO,SAAU,GAAM,AAAO,GAAP,EACzC,CACA,OAAO,EAAI,KAAK,CAAC,EAAG,GAAQ,EAChC,C,E,C,uB,Q,iD,O,E,C,M,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GClDA,IAAA,EAAA,EAAA,kB,E,E,c,C,GACA,IAAM,EAAS,MAAO,EAAW,KAC7B,IAAM,EAAe,CAAC,IAAI,EAAE,EAAU,KAAK,CAAC,IAAI,CAAC,CACjD,OAAO,IAAI,WAAW,MAAM,AAAA,CAAA,EAAA,EAAA,OAAM,AAAN,EAAO,MAAM,CAAC,MAAM,CAAC,EAAc,GACnE,CACe,CAAA,EAAA,OAAA,CAAA,C,E,C,iB,Q,iD,O,E,C,M,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GCJF,EAAA,MAAA,CAAA,EAAA,cAAA,IAAA,GADE,EAAA,OAAA,CAAA,OACR,IAAM,EAAc,AAAC,GAAQ,aAAe,S,E,C,iD,O,E,C,M,C,S,C,C,C,C,C,ECDnD,EAAQ,cAAc,CAAG,SAAU,CAAC,EAClC,OAAO,GAAK,EAAE,UAAU,CAAG,EAAI,CAAC,QAAS,CAAC,CAC5C,EAEA,EAAQ,iBAAiB,CAAG,SAAU,CAAC,EACrC,OAAO,cAAc,CAAC,EAAG,aAAc,CAAC,MAAO,CAAA,CAAI,EACrD,EAEA,EAAQ,SAAS,CAAG,SAAU,CAAM,CAAE,CAAI,EAkBxC,OAjBA,OAAO,IAAI,CAAC,GAAQ,OAAO,CAAC,SAAU,CAAG,EAE7B,YAAR,GACA,AAAQ,eAAR,GACA,OAAO,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,EAAM,IAK7C,OAAO,cAAc,CAAC,EAAM,EAAK,CAC/B,WAAY,CAAA,EACZ,IAAK,WACH,OAAO,CAAM,CAAC,EAAI,AACpB,CACF,EACF,GAEO,CACT,EAEA,EAAQ,MAAM,CAAG,SAAU,CAAI,CAAE,CAAQ,CAAE,CAAG,EAC5C,OAAO,cAAc,CAAC,EAAM,EAAU,CACpC,WAAY,CAAA,EACZ,IAAK,CACP,EACF,C,E,C,E,C,M,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GClCA,IAAA,EAAA,EAAA,0BACA,EAAA,EAAA,6B,E,E,c,C,GACA,EAAA,EAAA,yB,E,E,c,C,GACA,EAAA,EAAA,0B,E,E,c,C,GACA,EAAA,EAAA,qBACA,EAAA,EAAA,kB,E,E,c,C,GACA,EAAA,EAAA,wBACA,EAAA,EAAA,+B,E,E,c,C,GACA,EAAA,EAAA,oBACA,eAAe,EAAW,CAAG,CAAE,CAAG,CAAE,CAAU,CAAE,CAAE,CAAE,CAAG,CAAE,CAAG,MAYpD,EASA,EApBJ,GAAI,CAAE,CAAA,aAAe,UAAA,EACjB,MAAM,AAAI,UAAU,AAAA,CAAA,EAAA,EAAA,OAAe,AAAf,EAAgB,EAAK,eAE7C,IAAM,EAAU,SAAS,EAAI,KAAK,CAAC,EAAG,GAAI,IACpC,EAAS,MAAM,AAAA,CAAA,EAAA,EAAA,OAAK,AAAL,EAAO,MAAM,CAAC,SAAS,CAAC,MAAO,EAAI,QAAQ,CAAC,GAAW,GAAI,UAAW,CAAA,EAAO,CAAC,UAAU,EACvG,EAAS,MAAM,AAAA,CAAA,EAAA,EAAA,OAAK,AAAL,EAAO,MAAM,CAAC,SAAS,CAAC,MAAO,EAAI,QAAQ,CAAC,EAAG,GAAW,GAAI,CAC/E,KAAM,CAAC,IAAI,EAAE,GAAW,EAAE,CAAC,CAC3B,KAAM,MACV,EAAG,CAAA,EAAO,CAAC,OAAO,EACZ,EAAU,AAAA,CAAA,EAAA,EAAA,MAAK,AAAL,EAAO,EAAK,EAAI,EAAY,AAAA,CAAA,EAAA,EAAA,QAAO,AAAP,EAAS,EAAI,MAAM,EAAI,IAC7D,EAAc,IAAI,WAAY,AAAA,CAAA,MAAM,AAAA,CAAA,EAAA,EAAA,OAAK,AAAL,EAAO,MAAM,CAAC,IAAI,CAAC,OAAQ,EAAQ,EAAA,EAAU,KAAK,CAAC,EAAG,GAAW,IAE3G,GAAI,CACA,EAAiB,AAAA,CAAA,EAAA,EAAA,OAAe,AAAf,EAAgB,EAAK,EAC1C,CACA,MAAO,EAAI,CACX,CACA,GAAI,CAAC,EACD,MAAM,IAAI,EAAA,mBAAmB,CAGjC,GAAI,CACA,EAAY,IAAI,WAAW,MAAM,AAAA,CAAA,EAAA,EAAA,OAAM,AAAN,EAAO,MAAM,CAAC,OAAO,CAAC,CAAE,GAAA,EAAI,KAAM,SAAU,EAAG,EAAQ,GAC5F,CACA,MAAO,EAAI,CACX,CACA,GAAI,CAAC,EACD,MAAM,IAAI,EAAA,mBAAmB,CAEjC,OAAO,CACX,CACA,eAAe,EAAW,CAAG,CAAE,CAAG,CAAE,CAAU,CAAE,CAAE,CAAE,CAAG,CAAE,CAAG,EACxD,IAAI,CACA,CAAA,aAAe,WACf,EAAS,MAAM,AAAA,CAAA,EAAA,EAAA,OAAK,AAAL,EAAO,MAAM,CAAC,SAAS,CAAC,MAAO,EAAK,UAAW,CAAA,EAAO,CAAC,UAAU,GAGhF,AAAA,CAAA,EAAA,EAAA,iBAAgB,AAAhB,EAAkB,EAAK,EAAK,WAC5B,EAAS,GAEb,GAAI,CACA,OAAO,IAAI,WAAW,MAAM,AAAA,CAAA,EAAA,EAAA,OAAM,AAAN,EAAO,MAAM,CAAC,OAAO,CAAC,CAC9C,eAAgB,EAChB,GAAA,EACA,KAAM,UACN,UAAW,GACf,EAAG,EAAQ,AAAA,CAAA,EAAA,EAAA,MAAK,AAAL,EAAO,EAAY,IAClC,CACA,MAAO,EAAI,CACP,MAAM,IAAI,EAAA,mBAAmB,AACjC,CACJ,CACA,IAAM,EAAU,MAAO,EAAK,EAAK,EAAY,EAAI,EAAK,KAClD,GAAI,CAAC,AAAA,CAAA,EAAA,EAAA,WAAW,AAAX,EAAY,IAAQ,CAAE,CAAA,aAAe,UAAA,EACtC,MAAM,AAAI,UAAU,AAAA,CAAA,EAAA,EAAA,OAAc,AAAd,EAAgB,KAAQ,EAAA,KAAK,CAAE,eAGvD,OADA,AAAA,CAAA,EAAA,EAAA,OAAa,AAAb,EAAc,EAAK,GACX,GACJ,IAAK,gBACL,IAAK,gBACL,IAAK,gBAGD,OAFI,aAAe,YACf,AAAA,CAAA,EAAA,EAAA,OAAa,AAAb,EAAe,EAAK,SAAS,EAAI,KAAK,CAAC,IAAK,KACzC,EAAW,EAAK,EAAK,EAAY,EAAI,EAAK,EACrD,KAAK,UACL,IAAK,UACL,IAAK,UAGD,OAFI,aAAe,YACf,AAAA,CAAA,EAAA,EAAA,OAAc,AAAd,EAAe,EAAK,SAAS,EAAI,KAAK,CAAC,EAAG,GAAI,KAC3C,EAAW,EAAK,EAAK,EAAY,EAAI,EAAK,EACrD,SACI,MAAM,IAAI,EAAA,gBAAe,CAAE,+CACnC,CACJ,CACe,CAAA,EAAA,OAAA,CAAA,C,E,C,yB,Q,4B,Q,wB,Q,yB,Q,oB,Q,iB,Q,uB,Q,8B,Q,mB,Q,iD,O,E,C,Q,C,S,C,C,C,C,C,E,A,E,kD,iB,C,GCpFf,IAAA,EAAA,EAAA,qBACA,EAAA,EAAA,UAMe,CAAA,EAAA,OAAA,CALO,CAAC,EAAK,KACxB,GAAI,EAAG,MAAM,EAAI,IAAM,AAAA,CAAA,EAAA,EAAA,SAAQ,AAAR,EAAU,GAC7B,MAAM,IAAI,EAAA,UAAS,CAAE,uCAE7B,C,E,C,oB,Q,U,Q,iD,O,E,C,Q,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GCNA,EAAA,MAAA,CAAA,EAAA,YAAA,IAAa,GAYb,EAAA,MAAA,CAAA,EAAA,2BAAA,IAAa,GAWb,EAAA,MAAA,CAAA,EAAA,aAAA,IAAa,GAWb,EAAA,MAAA,CAAA,EAAA,oBAAA,IAAa,GASb,EAAA,MAAA,CAAA,EAAA,mBAAA,IAAa,GASb,EAAA,MAAA,CAAA,EAAA,sBAAA,IAAa,GAUb,EAAA,MAAA,CAAA,EAAA,aAAA,IAAa,GASb,EAAA,MAAA,CAAA,EAAA,aAAA,IAAa,GASb,EAAA,MAAA,CAAA,EAAA,aAAA,IAAa,GASb,EAAA,MAAA,CAAA,EAAA,aAAA,IAAa,GASb,EAAA,MAAA,CAAA,EAAA,cAAA,IAAa,GASb,EAAA,MAAA,CAAA,EAAA,oBAAA,IAAa,GAUb,EAAA,MAAA,CAAA,EAAA,2BAAA,IAAa,GAWb,EAAA,MAAA,CAAA,EAAA,cAAA,IAAa,GAUb,EAAA,MAAA,CAAA,EAAA,iCAAA,IAAa,EA1IN,OAAM,UAAkB,MAC3B,WAAW,MAAO,CACd,MAAO,kBACX,CACA,YAAY,CAAO,CAAE,CACjB,IAAI,EACJ,KAAK,CAAC,GACN,IAAI,CAAC,IAAI,CAAG,mBACZ,IAAI,CAAC,IAAI,CAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAChC,AAAkC,OAAlC,CAAA,EAAK,MAAM,iBAAgB,AAAhB,GAA+B,AAAO,KAAK,IAAZ,GAAyB,EAAG,IAAI,CAAC,MAAO,IAAI,CAAE,IAAI,CAAC,WAAW,CAC7G,CACJ,CACO,MAAM,UAAiC,EAC1C,WAAW,MAAO,CACd,MAAO,iCACX,CACA,YAAY,CAAO,CAAE,EAAQ,aAAa,CAAE,EAAS,aAAa,CAAE,CAChE,KAAK,CAAC,GACN,IAAI,CAAC,IAAI,CAAG,kCACZ,IAAI,CAAC,KAAK,CAAG,EACb,IAAI,CAAC,MAAM,CAAG,CAClB,CACJ,CACO,MAAM,UAAmB,EAC5B,WAAW,MAAO,CACd,MAAO,iBACX,CACA,YAAY,CAAO,CAAE,EAAQ,aAAa,CAAE,EAAS,aAAa,CAAE,CAChE,KAAK,CAAC,GACN,IAAI,CAAC,IAAI,CAAG,kBACZ,IAAI,CAAC,KAAK,CAAG,EACb,IAAI,CAAC,MAAM,CAAG,CAClB,CACJ,CACO,MAAM,UAA0B,EACnC,aAAc,CACV,KAAK,IAAI,WACT,IAAI,CAAC,IAAI,CAAG,0BAChB,CACA,WAAW,MAAO,CACd,MAAO,0BACX,CACJ,CACO,MAAM,UAAyB,EAClC,aAAc,CACV,KAAK,IAAI,WACT,IAAI,CAAC,IAAI,CAAG,wBAChB,CACA,WAAW,MAAO,CACd,MAAO,wBACX,CACJ,CACO,MAAM,UAA4B,EACrC,aAAc,CACV,KAAK,IAAI,WACT,IAAI,CAAC,IAAI,CAAG,4BACZ,IAAI,CAAC,OAAO,CAAG,6BACnB,CACA,WAAW,MAAO,CACd,MAAO,2BACX,CACJ,CACO,MAAM,UAAmB,EAC5B,aAAc,CACV,KAAK,IAAI,WACT,IAAI,CAAC,IAAI,CAAG,iBAChB,CACA,WAAW,MAAO,CACd,MAAO,iBACX,CACJ,CACO,MAAM,UAAmB,EAC5B,aAAc,CACV,KAAK,IAAI,WACT,IAAI,CAAC,IAAI,CAAG,iBAChB,CACA,WAAW,MAAO,CACd,MAAO,iBACX,CACJ,CACO,MAAM,UAAmB,EAC5B,aAAc,CACV,KAAK,IAAI,WACT,IAAI,CAAC,IAAI,CAAG,iBAChB,CACA,WAAW,MAAO,CACd,MAAO,iBACX,CACJ,CACO,MAAM,UAAmB,EAC5B,aAAc,CACV,KAAK,IAAI,WACT,IAAI,CAAC,IAAI,CAAG,iBAChB,CACA,WAAW,MAAO,CACd,MAAO,iBACX,CACJ,CACO,MAAM,UAAoB,EAC7B,aAAc,CACV,KAAK,IAAI,WACT,IAAI,CAAC,IAAI,CAAG,kBAChB,CACA,WAAW,MAAO,CACd,MAAO,kBACX,CACJ,CACO,MAAM,UAA0B,EACnC,aAAc,CACV,KAAK,IAAI,WACT,IAAI,CAAC,IAAI,CAAG,2BACZ,IAAI,CAAC,OAAO,CAAG,iDACnB,CACA,WAAW,MAAO,CACd,MAAO,0BACX,CACJ,CACO,MAAM,UAAiC,EAC1C,aAAc,CACV,KAAK,IAAI,WACT,IAAI,CAAC,IAAI,CAAG,kCACZ,IAAI,CAAC,OAAO,CAAG,sDACnB,CACA,WAAW,MAAO,CACd,MAAO,iCACX,CACJ,CAEO,MAAM,UAAoB,EAC7B,aAAc,CACV,KAAK,IAAI,WACT,IAAI,CAAC,IAAI,CAAG,mBACZ,IAAI,CAAC,OAAO,CAAG,mBACnB,CACA,WAAW,MAAO,CACd,MAAO,kBACX,CACJ,CACO,MAAM,UAAuC,EAChD,aAAc,CACV,KAAK,IAAI,WACT,IAAI,CAAC,IAAI,CAAG,wCACZ,IAAI,CAAC,OAAO,CAAG,+BACnB,CACA,WAAW,MAAO,CACd,MAAO,uCACX,CACJ,C,E,C,iD,O,E,C,M,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GCjJA,EAAA,MAAA,CAAA,EAAA,YAAA,IAAgB,GAFhB,IAAA,EAAA,EAAA,qBACA,EAAA,EAAA,wB,E,E,c,C,GACO,SAAS,EAAU,CAAG,EACzB,OAAQ,GACJ,IAAK,UACL,IAAK,YACL,IAAK,UACL,IAAK,YACL,IAAK,UACL,IAAK,YACD,OAAO,EACX,KAAK,gBACL,IAAK,gBACL,IAAK,gBACD,OAAO,GACX,SACI,MAAM,IAAI,EAAA,gBAAe,CAAE,CAAC,2BAA2B,EAAE,EAAI,CAAC,CACtE,CACJ,CACe,EAAA,OAAA,CAAA,AAAC,GAAQ,AAAA,CAAA,EAAA,EAAA,OAAK,AAAL,EAAO,IAAI,WAAW,EAAU,IAAQ,G,E,C,oB,Q,uB,Q,iD,O,E,C,Q,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GCnBhE,IAAA,EAAA,EAAA,kB,E,E,c,C,EACe,CAAA,EAAA,OAAA,CAAA,AAAA,CAAA,EAAA,EAAA,OAAM,AAAN,EAAO,eAAe,CAAC,IAAI,CAAC,EAAA,OAAK,C,E,C,iB,Q,iD,O,E,C,Q,C,S,C,C,C,C,C,E,A,E,kD,iB,C,GCDhD,IAAA,EAAA,EAAA,oBAOe,CAAA,EAAA,OAAA,CANQ,CAAC,EAAK,KACzB,IAAM,EAAS,EAAI,UAAU,EAAI,EACjC,GAAI,IAAW,EACX,MAAM,IAAI,EAAA,UAAU,CAAC,CAAC,gDAAgD,EAAE,EAAS,WAAW,EAAE,EAAO,KAAK,CAAC,CAEnH,C,E,C,oB,Q,iD,O,E,C,M,C,S,C,C,C,C,C,E,A,E,kD,iB,C,GCYe,EAAA,OAAA,CAlBS,CAAC,EAAG,KACxB,GAAI,CAAE,CAAA,aAAa,UAAA,EACf,MAAM,AAAI,UAAU,mCAExB,GAAI,CAAE,CAAA,aAAa,UAAA,EACf,MAAM,AAAI,UAAU,oCAExB,GAAI,EAAE,MAAM,GAAK,EAAE,MAAM,CACrB,MAAM,AAAI,UAAU,2CAExB,IAAM,EAAM,EAAE,MAAM,CAChB,EAAM,EACN,EAAI,GACR,KAAO,EAAE,EAAI,GACT,GAAO,CAAC,CAAC,EAAE,CAAG,CAAC,CAAC,EAAE,CAEtB,OAAO,AAAQ,IAAR,CACX,C,E,C,iD,O,E,C,M,C,S,C,C,C,C,C,E,I,E,E,kDCjBA,SAAS,EAAS,CAAI,CAAE,EAAO,gBAAgB,EAC3C,OAAO,AAAI,UAAU,CAAC,+CAA+C,EAAE,EAAK,SAAS,EAAE,EAAK,CAAC,CACjG,CACA,SAAS,EAAY,CAAS,CAAE,CAAI,EAChC,OAAO,EAAU,IAAI,GAAK,CAC9B,CACA,SAAS,EAAc,CAAI,EACvB,OAAO,SAAS,EAAK,IAAI,CAAC,KAAK,CAAC,GAAI,GACxC,CAaA,SAAS,EAAW,CAAG,CAAE,CAAM,EAC3B,GAAI,EAAO,MAAM,EAAI,CAAC,EAAO,IAAI,CAAC,AAAC,GAAa,EAAI,MAAM,CAAC,QAAQ,CAAC,IAAY,CAC5E,IAAI,EAAM,sEACV,GAAI,EAAO,MAAM,CAAG,EAAG,CACnB,IAAM,EAAO,EAAO,GAAG,GACvB,GAAO,CAAC,OAAO,EAAE,EAAO,IAAI,CAAC,MAAM,KAAK,EAAE,EAAK,CAAC,CAAC,AACrD,MACS,AAAkB,IAAlB,EAAO,MAAM,CAClB,GAAO,CAAC,OAAO,EAAE,CAAM,CAAC,EAAE,CAAC,IAAI,EAAE,CAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAG7C,GAAO,CAAC,EAAE,CAAM,CAAC,EAAE,CAAC,CAAC,CAAC,AAE1B,OAAM,AAAI,UAAU,EACxB,CACJ,CACO,SAAS,EAAkB,CAAG,CAAE,CAAG,CAAE,GAAG,CAAM,EACjD,OAAQ,GACJ,IAAK,QACL,IAAK,QACL,IAAK,QAAS,CACV,GAAI,CAAC,EAAY,EAAI,SAAS,CAAE,QAC5B,MAAM,EAAS,QACnB,IAAM,EAAW,SAAS,EAAI,KAAK,CAAC,GAAI,IAExC,GAAI,AADW,EAAc,EAAI,SAAS,CAAC,IAAI,IAChC,EACX,MAAM,EAAS,CAAC,IAAI,EAAE,EAAS,CAAC,CAAE,kBACtC,KACJ,CACA,IAAK,QACL,IAAK,QACL,IAAK,QAAS,CACV,GAAI,CAAC,EAAY,EAAI,SAAS,CAAE,qBAC5B,MAAM,EAAS,qBACnB,IAAM,EAAW,SAAS,EAAI,KAAK,CAAC,GAAI,IAExC,GAAI,AADW,EAAc,EAAI,SAAS,CAAC,IAAI,IAChC,EACX,MAAM,EAAS,CAAC,IAAI,EAAE,EAAS,CAAC,CAAE,kBACtC,KACJ,CACA,IAAK,QACL,IAAK,QACL,IAAK,QAAS,CACV,GAAI,CAAC,EAAY,EAAI,SAAS,CAAE,WAC5B,MAAM,EAAS,WACnB,IAAM,EAAW,SAAS,EAAI,KAAK,CAAC,GAAI,IAExC,GAAI,AADW,EAAc,EAAI,SAAS,CAAC,IAAI,IAChC,EACX,MAAM,EAAS,CAAC,IAAI,EAAE,EAAS,CAAC,CAAE,kBACtC,KACJ,CACA,IAAK,QACD,GAAI,AAAuB,YAAvB,EAAI,SAAS,CAAC,IAAI,EAAkB,AAAuB,UAAvB,EAAI,SAAS,CAAC,IAAI,CACtD,MAAM,EAAS,oBAEnB,KAEJ,KAAK,QACL,IAAK,QACL,IAAK,QAAS,CACV,GAAI,CAAC,EAAY,EAAI,SAAS,CAAE,SAC5B,MAAM,EAAS,SACnB,IAAM,EAAW,AA1E7B,SAAuB,CAAG,EACtB,OAAQ,GACJ,IAAK,QACD,MAAO,OACX,KAAK,QACD,MAAO,OACX,KAAK,QACD,MAAO,OACX,SACI,MAAM,AAAI,MAAM,cACxB,CACJ,EA+D2C,GAE/B,GAAI,AADW,EAAI,SAAS,CAAC,UAAU,GACxB,EACX,MAAM,EAAS,EAAU,wBAC7B,KACJ,CACA,QACI,MAAM,AAAI,UAAU,4CAC5B,CACA,EAAW,EAAK,EACpB,CACO,SAAS,EAAkB,CAAG,CAAE,CAAG,CAAE,GAAG,CAAM,EACjD,OAAQ,GACJ,IAAK,UACL,IAAK,UACL,IAAK,UAAW,CACZ,GAAI,CAAC,EAAY,EAAI,SAAS,CAAE,WAC5B,MAAM,EAAS,WACnB,IAAM,EAAW,SAAS,EAAI,KAAK,CAAC,EAAG,GAAI,IAE3C,GAAI,AADW,EAAI,SAAS,CAAC,MAAM,GACpB,EACX,MAAM,EAAS,EAAU,oBAC7B,KACJ,CACA,IAAK,SACL,IAAK,SACL,IAAK,SAAU,CACX,GAAI,CAAC,EAAY,EAAI,SAAS,CAAE,UAC5B,MAAM,EAAS,UACnB,IAAM,EAAW,SAAS,EAAI,KAAK,CAAC,EAAG,GAAI,IAE3C,GAAI,AADW,EAAI,SAAS,CAAC,MAAM,GACpB,EACX,MAAM,EAAS,EAAU,oBAC7B,KACJ,CACA,IAAK,OACD,OAAQ,EAAI,SAAS,CAAC,IAAI,EACtB,IAAK,OACL,IAAK,SACL,IAAK,OACD,KACJ,SACI,MAAM,EAAS,wBACvB,CACA,KAEJ,KAAK,qBACL,IAAK,qBACL,IAAK,qBACD,GAAI,CAAC,EAAY,EAAI,SAAS,CAAE,UAC5B,MAAM,EAAS,UACnB,KACJ,KAAK,WACL,IAAK,eACL,IAAK,eACL,IAAK,eAAgB,CACjB,GAAI,CAAC,EAAY,EAAI,SAAS,CAAE,YAC5B,MAAM,EAAS,YACnB,IAAM,EAAW,SAAS,EAAI,KAAK,CAAC,GAAI,KAAO,EAE/C,GAAI,AADW,EAAc,EAAI,SAAS,CAAC,IAAI,IAChC,EACX,MAAM,EAAS,CAAC,IAAI,EAAE,EAAS,CAAC,CAAE,kBACtC,KACJ,CACA,QACI,MAAM,AAAI,UAAU,4CAC5B,CACA,EAAW,EAAK,EACpB,C,E,iB,C,GAlHA,EAAA,MAAA,CAAA,EAAA,oBAAA,IAAgB,GAyDhB,EAAA,MAAA,CAAA,EAAA,oBAAA,IAAgB,E,E,C,iD,O,E,C,Q,C,S,C,C,C,C,C,E,I,E,E,kDC9FhB,SAAS,EAAQ,CAAG,CAAE,CAAM,CAAE,GAAG,CAAK,EAClC,GAAI,EAAM,MAAM,CAAG,EAAG,CAClB,IAAM,EAAO,EAAM,GAAG,GACtB,GAAO,CAAC,YAAY,EAAE,EAAM,IAAI,CAAC,MAAM,KAAK,EAAE,EAAK,CAAC,CAAC,AACzD,MACS,AAAiB,IAAjB,EAAM,MAAM,CACjB,GAAO,CAAC,YAAY,EAAE,CAAK,CAAC,EAAE,CAAC,IAAI,EAAE,CAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAGhD,GAAO,CAAC,QAAQ,EAAE,CAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAajC,OAXI,AAAU,MAAV,EACA,GAAO,CAAC,UAAU,EAAE,EAAO,CAAC,CAEvB,AAAkB,YAAlB,OAAO,GAAyB,EAAO,IAAI,CAChD,GAAO,CAAC,mBAAmB,EAAE,EAAO,IAAI,CAAC,CAAC,CAEnB,UAAlB,OAAO,GAAuB,AAAU,MAAV,GAC/B,EAAO,WAAW,EAAI,EAAO,WAAW,CAAC,IAAI,EAC7C,CAAA,GAAO,CAAC,yBAAyB,EAAE,EAAO,WAAW,CAAC,IAAI,CAAC,CAAC,AAAD,EAG5D,CACX,CAIO,SAAS,EAAQ,CAAG,CAAE,CAAM,CAAE,GAAG,CAAK,EACzC,OAAO,EAAQ,CAAC,YAAY,EAAE,EAAI,mBAAmB,CAAC,CAAE,KAAW,EACvE,C,E,iB,C,GAFA,EAAA,MAAA,CAAA,EAAA,UAAA,IAAgB,GAHD,EAAA,OAAA,CAAA,CAAC,EAAQ,GAAG,IAChB,EAAQ,eAAgB,KAAW,E,E,C,iD,O,E,C,Q,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GCrBjC,EAAA,MAAA,CAAA,EAAA,QAAA,IAAA,GAJb,IAAA,EAAA,EAAA,iBACe,CAAA,EAAA,OAAA,CAAA,AAAC,GACL,AAAA,CAAA,EAAA,EAAA,WAAU,AAAV,EAAY,GAEhB,IAAM,EAAQ,CAAC,YAAY,A,E,C,iB,Q,iD,O,E,C,M,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GCHrB,EAAA,MAAA,CAAA,EAAA,UAAA,IAAA,GAGA,EAAA,MAAA,CAAA,EAAA,UAAA,IAAA,GAJb,IAAA,EAAA,EAAA,qBACO,IAAM,EAAU,UACnB,MAAM,IAAI,EAAA,gBAAe,CAAE,yLAC/B,EACa,EAAU,UACnB,MAAM,IAAI,EAAA,gBAAe,CAAE,yLAC/B,C,E,C,oB,Q,iD,O,E,C,Q,C,S,C,C,C,C,C,E,A,E,kD,iB,C,GCee,EAAA,OAAA,CArBI,CAAC,GAAG,SAKf,EAJJ,IAAM,EAAU,EAAQ,MAAM,CAAC,SAC/B,GAAI,AAAmB,IAAnB,EAAQ,MAAM,EAAU,AAAmB,IAAnB,EAAQ,MAAM,CACtC,MAAO,CAAA,EAGX,IAAK,IAAM,KAAU,EAAS,CAC1B,IAAM,EAAa,OAAO,IAAI,CAAC,GAC/B,GAAI,CAAC,GAAO,AAAa,IAAb,EAAI,IAAI,CAAQ,CACxB,EAAM,IAAI,IAAI,GACd,QACJ,CACA,IAAK,IAAM,KAAa,EAAY,CAChC,GAAI,EAAI,GAAG,CAAC,GACR,MAAO,CAAA,EAEX,EAAI,GAAG,CAAC,EACZ,CACJ,CACA,MAAO,CAAA,CACX,C,E,C,iD,O,E,C,M,C,S,C,C,C,C,C,E,I,E,E,kDCjBe,SAAS,EAAS,CAAK,EAClC,GAAI,CAHG,CAAA,AAAiB,UAAjB,OAGW,GAHkB,AAAU,OAG5B,CAHlB,GAG4B,AAA0C,oBAA1C,OAAO,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,GACvD,MAAO,CAAA,EAEX,GAAI,AAAiC,OAAjC,OAAO,cAAc,CAAC,GACtB,MAAO,CAAA,EAEX,IAAI,EAAQ,EACZ,KAAO,AAAiC,OAAjC,OAAO,cAAc,CAAC,IACzB,EAAQ,OAAO,cAAc,CAAC,GAElC,OAAO,OAAO,cAAc,CAAC,KAAW,CAC5C,C,E,iB,C,GAZwB,EAAA,MAAA,CAAA,EAAA,UAAA,IAAA,E,E,C,iD,O,E,C,M,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GCHxB,IAAA,EAAA,EAAA,uBACA,EAAA,EAAA,wBACA,EAAA,EAAA,yBACA,EAAA,EAAA,uBACA,EAAA,EAAA,2BACA,EAAA,EAAA,qBACA,EAAA,EAAA,iBACA,EAAA,EAAA,oBACA,EAAA,EAAA,uB,E,E,c,C,GACA,EAAA,EAAA,kB,E,E,c,C,GACA,EAAA,EAAA,iBACA,eAAe,EAAqB,CAAG,CAAE,CAAG,CAAE,CAAY,CAAE,CAAU,CAAE,CAAO,EAE3E,OADA,AAAA,CAAA,EAAA,EAAA,OAAW,AAAX,EAAa,EAAK,EAAK,WACf,GACJ,IAAK,MACD,GAAI,AAAiB,KAAA,IAAjB,EACA,MAAM,IAAI,EAAA,UAAU,CAAC,4CACzB,OAAO,CAEX,KAAK,UACD,GAAI,AAAiB,KAAA,IAAjB,EACA,MAAM,IAAI,EAAA,UAAU,CAAC,2CAC7B,KAAK,iBACL,IAAK,iBACL,IAAK,iBAAkB,KAMf,EACA,EANJ,GAAI,CAAC,AAAA,CAAA,EAAA,EAAA,OAAQ,AAAR,EAAS,EAAW,GAAG,EACxB,MAAM,IAAI,EAAA,UAAS,CAAE,+DACzB,GAAI,CAAC,EAAK,WAAW,CAAC,GAClB,MAAM,IAAI,EAAA,gBAAgB,CAAC,yFAC/B,IAAM,EAAM,MAAM,AAAA,CAAA,EAAA,EAAA,SAAS,AAAT,EAAU,EAAW,GAAG,CAAE,GAG5C,GAAI,AAAmB,KAAA,IAAnB,EAAW,GAAG,CAAgB,CAC9B,GAAI,AAA0B,UAA1B,OAAO,EAAW,GAAG,CACrB,MAAM,IAAI,EAAA,UAAU,CAAC,oDACzB,GAAI,CACA,EAAa,AAAA,CAAA,EAAA,EAAA,MAAS,AAAT,EAAU,EAAW,GAAG,CACzC,CACA,MAAO,EAAI,CACP,MAAM,IAAI,EAAA,UAAS,CAAE,qCACzB,CACJ,CACA,GAAI,AAAmB,KAAA,IAAnB,EAAW,GAAG,CAAgB,CAC9B,GAAI,AAA0B,UAA1B,OAAO,EAAW,GAAG,CACrB,MAAM,IAAI,EAAA,UAAU,CAAC,oDACzB,GAAI,CACA,EAAa,AAAA,CAAA,EAAA,EAAA,MAAS,AAAT,EAAU,EAAW,GAAG,CACzC,CACA,MAAO,EAAI,CACP,MAAM,IAAI,EAAA,UAAS,CAAE,qCACzB,CACJ,CACA,IAAM,EAAe,MAAM,EAAK,SAAS,CAAC,EAAK,EAAK,AAAQ,YAAR,EAAoB,EAAW,GAAG,CAAG,EAAK,AAAQ,YAAR,EAAoB,AAAA,CAAA,EAAA,EAAA,SAAS,AAAT,EAAU,EAAW,GAAG,EAAI,SAAS,EAAI,KAAK,CAAC,GAAI,IAAK,IAAK,EAAY,GAC3L,GAAI,AAAQ,YAAR,EACA,OAAO,EACX,GAAI,AAAiB,KAAA,IAAjB,EACA,MAAM,IAAI,EAAA,UAAU,CAAC,6BACzB,MAAO,AAAA,CAAA,EAAA,EAAA,MAAI,AAAJ,EAAM,EAAI,KAAK,CAAC,IAAK,EAAc,EAC9C,CACA,IAAK,SACL,IAAK,WACL,IAAK,eACL,IAAK,eACL,IAAK,eACD,GAAI,AAAiB,KAAA,IAAjB,EACA,MAAM,IAAI,EAAA,UAAU,CAAC,6BACzB,MAAO,AAAA,CAAA,EAAA,EAAA,OAAK,AAAL,EAAM,EAAK,EAAK,EAE3B,KAAK,qBACL,IAAK,qBACL,IAAK,qBAAsB,KAUnB,EATJ,GAAI,AAAiB,KAAA,IAAjB,EACA,MAAM,IAAI,EAAA,UAAU,CAAC,6BACzB,GAAI,AAA0B,UAA1B,OAAO,EAAW,GAAG,CACrB,MAAM,IAAI,EAAA,UAAU,CAAC,sDACzB,IAAM,EAAW,AAAC,CAAA,MAAA,EAAyC,KAAK,EAAI,EAAQ,aAAY,AAAZ,GAAkB,IAC9F,GAAI,EAAW,GAAG,CAAG,EACjB,MAAM,IAAI,EAAA,UAAU,CAAC,+DACzB,GAAI,AAA0B,UAA1B,OAAO,EAAW,GAAG,CACrB,MAAM,IAAI,EAAA,UAAU,CAAC,qDAEzB,GAAI,CACA,EAAM,AAAA,CAAA,EAAA,EAAA,MAAS,AAAT,EAAU,EAAW,GAAG,CAClC,CACA,MAAO,EAAI,CACP,MAAM,IAAI,EAAA,UAAS,CAAE,qCACzB,CACA,MAAO,AAAA,CAAA,EAAA,EAAA,OAAM,AAAN,EAAQ,EAAK,EAAK,EAAc,EAAW,GAAG,CAAE,EAC3D,CACA,IAAK,SACL,IAAK,SACL,IAAK,SACD,GAAI,AAAiB,KAAA,IAAjB,EACA,MAAM,IAAI,EAAA,UAAU,CAAC,6BACzB,MAAO,AAAA,CAAA,EAAA,EAAA,MAAK,AAAL,EAAM,EAAK,EAAK,EAE3B,KAAK,YACL,IAAK,YACL,IAAK,YAAa,KAOV,EAOA,EAbJ,GAAI,AAAiB,KAAA,IAAjB,EACA,MAAM,IAAI,EAAA,UAAU,CAAC,6BACzB,GAAI,AAAyB,UAAzB,OAAO,EAAW,EAAE,CACpB,MAAM,IAAI,EAAA,UAAU,CAAC,+DACzB,GAAI,AAA0B,UAA1B,OAAO,EAAW,GAAG,CACrB,MAAM,IAAI,EAAA,UAAU,CAAC,6DAEzB,GAAI,CACA,EAAK,AAAA,CAAA,EAAA,EAAA,MAAS,AAAT,EAAU,EAAW,EAAE,CAChC,CACA,MAAO,EAAI,CACP,MAAM,IAAI,EAAA,UAAS,CAAE,oCACzB,CAEA,GAAI,CACA,EAAM,AAAA,CAAA,EAAA,EAAA,MAAS,AAAT,EAAU,EAAW,GAAG,CAClC,CACA,MAAO,EAAI,CACP,MAAM,IAAI,EAAA,UAAS,CAAE,qCACzB,CACA,MAAO,AAAA,CAAA,EAAA,EAAA,MAAO,AAAP,EAAS,EAAK,EAAK,EAAc,EAAI,EAChD,CACA,QACI,MAAM,IAAI,EAAA,gBAAe,CAAE,4DAEnC,CACJ,CACe,EAAA,OAAA,CAAA,C,E,C,sB,Q,uB,Q,wB,Q,sB,Q,0B,Q,oB,Q,gB,Q,mB,Q,sB,Q,iB,Q,gB,Q,iD,O,E,C,Q,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GC1GF,EAAA,MAAA,CAAA,EAAA,OAAA,IAAA,GAMA,EAAA,MAAA,CAAA,EAAA,SAAA,IAAA,GA1Bb,IAAA,EAAA,EAAA,c,E,E,c,C,GACA,EAAA,EAAA,kB,E,E,c,C,GACA,EAAA,EAAA,wBACA,EAAA,EAAA,+B,E,E,c,C,GACA,EAAA,EAAA,oBACA,SAAS,EAAa,CAAG,CAAE,CAAG,EAC1B,GAAI,EAAI,SAAS,CAAC,MAAM,GAAK,SAAS,EAAI,KAAK,CAAC,EAAG,GAAI,IACnD,MAAM,AAAI,UAAU,CAAC,0BAA0B,EAAE,EAAI,CAAC,CAE9D,CACA,SAAS,EAAa,CAAG,CAAE,CAAG,CAAE,CAAK,EACjC,GAAI,AAAA,CAAA,EAAA,EAAA,WAAW,AAAX,EAAY,GAEZ,MADA,AAAA,CAAA,EAAA,EAAA,iBAAgB,AAAhB,EAAkB,EAAK,EAAK,GACrB,EAEX,GAAI,aAAe,WACf,MAAO,AAAA,CAAA,EAAA,EAAA,OAAM,AAAN,EAAO,MAAM,CAAC,SAAS,CAAC,MAAO,EAAK,SAAU,CAAA,EAAM,CAAC,EAAM,CAEtE,OAAM,AAAI,UAAU,AAAA,CAAA,EAAA,EAAA,OAAc,AAAd,EAAgB,KAAQ,EAAA,KAAI,CAAG,cACvD,CACO,IAAM,EAAO,MAAO,EAAK,EAAK,KACjC,IAAM,EAAY,MAAM,EAAa,EAAK,EAAK,WAC/C,EAAa,EAAW,GACxB,IAAM,EAAe,MAAM,AAAA,CAAA,EAAA,EAAA,OAAK,AAAL,EAAO,MAAM,CAAC,SAAS,CAAC,MAAO,KAAQ,EAAA,OAAc,EAChF,OAAO,IAAI,WAAW,MAAM,AAAA,CAAA,EAAA,EAAA,OAAK,AAAL,EAAO,MAAM,CAAC,OAAO,CAAC,MAAO,EAAc,EAAW,UACtF,EACa,EAAS,MAAO,EAAK,EAAK,KACnC,IAAM,EAAY,MAAM,EAAa,EAAK,EAAK,aAC/C,EAAa,EAAW,GACxB,IAAM,EAAe,MAAM,AAAA,CAAA,EAAA,EAAA,OAAK,AAAL,EAAO,MAAM,CAAC,SAAS,CAAC,MAAO,EAAc,EAAW,YAAa,EAAA,OAAc,EAC9G,OAAO,IAAI,WAAW,MAAM,AAAA,CAAA,EAAA,EAAA,OAAM,AAAN,EAAO,MAAM,CAAC,SAAS,CAAC,MAAO,GAC/D,C,E,C,a,Q,iB,Q,uB,Q,8B,Q,mB,Q,iD,O,E,C,Q,C,S,C,C,C,C,C,E,A,E,kD,iB,C,GC1Be,EAAA,OAAA,CALQ,CACnB,CAAE,KAAM,UAAW,KAAM,MAAO,EAChC,CAAA,EACA,CAAC,OAAO,CACX,A,E,C,iD,O,E,C,Q,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GCCD,EAAA,MAAA,CAAA,EAAA,YAAA,IAAsB,GA2BtB,EAAA,MAAA,CAAA,EAAA,cAAA,IAAsB,GAMtB,EAAA,MAAA,CAAA,EAAA,cAAA,IAAgB,GAtChB,IAAA,EAAA,EAAA,0BACA,EAAA,EAAA,kB,E,E,c,C,GACA,EAAA,EAAA,wBACA,EAAA,EAAA,+B,E,E,c,C,GACA,EAAA,EAAA,oBACO,eAAe,EAAU,CAAS,CAAE,CAAU,CAAE,CAAS,CAAE,CAAS,CAAE,EAAM,IAAI,WAAW,EAAE,CAAE,EAAM,IAAI,WAAW,EAAE,MAUrH,EATJ,GAAI,CAAC,AAAA,CAAA,EAAA,EAAA,WAAW,AAAX,EAAY,GACb,MAAM,AAAI,UAAU,AAAA,CAAA,EAAA,EAAA,OAAe,AAAf,EAAgB,KAAc,EAAA,KAAK,GAG3D,GADA,AAAA,CAAA,EAAA,EAAA,iBAAiB,AAAjB,EAAkB,EAAW,QACzB,CAAC,AAAA,CAAA,EAAA,EAAA,WAAW,AAAX,EAAY,GACb,MAAM,AAAI,UAAU,AAAA,CAAA,EAAA,EAAA,OAAe,AAAf,EAAgB,KAAe,EAAA,KAAK,GAE5D,AAAA,CAAA,EAAA,EAAA,iBAAgB,AAAhB,EAAkB,EAAY,OAAQ,cACtC,IAAM,EAAQ,AAAA,CAAA,EAAA,EAAA,MAAK,AAAL,EAAO,AAAA,CAAA,EAAA,EAAA,cAAa,AAAb,EAAe,AAAA,CAAA,EAAA,EAAA,OAAM,AAAN,EAAQ,MAAM,CAAC,IAAa,AAAA,CAAA,EAAA,EAAA,cAAa,AAAb,EAAe,GAAM,AAAA,CAAA,EAAA,EAAA,cAAc,AAAd,EAAe,GAAM,AAAA,CAAA,EAAA,EAAA,QAAO,AAAP,EAAS,IAG/G,EADA,AAA6B,WAA7B,EAAU,SAAS,CAAC,IAAI,CACf,IAEJ,AAA6B,SAA7B,EAAU,SAAS,CAAC,IAAI,CACpB,IAIL,KAAK,IAAI,CAAC,SAAS,EAAU,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,IAAK,IAAM,IAAM,EAElF,IAAM,EAAe,IAAI,WAAW,MAAM,AAAA,CAAA,EAAA,EAAA,OAAK,AAAL,EAAO,MAAM,CAAC,UAAU,CAAC,CAC/D,KAAM,EAAU,SAAS,CAAC,IAAI,CAC9B,OAAQ,CACZ,EAAG,EAAY,IACf,MAAO,AAAA,CAAA,EAAA,EAAA,SAAS,AAAT,EAAU,EAAc,EAAW,EAC9C,CACO,eAAe,EAAY,CAAG,EACjC,GAAI,CAAC,AAAA,CAAA,EAAA,EAAA,WAAW,AAAX,EAAY,GACb,MAAM,AAAI,UAAU,AAAA,CAAA,EAAA,EAAA,OAAe,AAAf,EAAgB,KAAQ,EAAA,KAAK,GAErD,MAAO,AAAA,CAAA,EAAA,EAAA,OAAK,AAAL,EAAO,MAAM,CAAC,WAAW,CAAC,EAAI,SAAS,CAAE,CAAA,EAAM,CAAC,aAAa,CACxE,CACO,SAAS,EAAY,CAAG,EAC3B,GAAI,CAAC,AAAA,CAAA,EAAA,EAAA,WAAW,AAAX,EAAY,GACb,MAAM,AAAI,UAAU,AAAA,CAAA,EAAA,EAAA,OAAe,AAAf,EAAgB,KAAQ,EAAA,KAAK,GAErD,MAAQ,CAAC,QAAS,QAAS,QAAQ,CAAC,QAAQ,CAAC,EAAI,SAAS,CAAC,UAAU,GACjE,AAAuB,WAAvB,EAAI,SAAS,CAAC,IAAI,EAClB,AAAuB,SAAvB,EAAI,SAAS,CAAC,IAAI,AAC1B,C,E,C,yB,Q,iB,Q,uB,Q,8B,Q,mB,Q,iD,O,E,C,Q,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GCHa,EAAA,MAAA,CAAA,EAAA,UAAA,IAAA,GAKA,EAAA,MAAA,CAAA,EAAA,UAAA,IAAA,GA/Cb,IAAA,EAAA,EAAA,e,E,E,c,C,GACA,EAAA,EAAA,0BACA,EAAA,EAAA,kBACA,EAAA,EAAA,cACA,EAAA,EAAA,uB,E,E,c,C,GACA,EAAA,EAAA,kB,E,E,c,C,GACA,EAAA,EAAA,wBACA,EAAA,EAAA,+B,E,E,c,C,GACA,EAAA,EAAA,oBAWA,eAAe,EAAU,CAAG,CAAE,CAAG,CAAE,CAAG,CAAE,CAAG,EACvC,AAAA,CAAA,EAAA,EAAA,OAAQ,AAAR,EAAS,GACT,IAAM,EAAO,AAAA,CAAA,EAAA,EAAA,GAAS,AAAT,EAAW,EAAK,GACvB,EAAS,SAAS,EAAI,KAAK,CAAC,GAAI,IAAK,IACrC,EAAY,CACd,KAAM,CAAC,IAAI,EAAE,EAAI,KAAK,CAAC,EAAG,IAAI,CAAC,CAC/B,WAAY,EACZ,KAAM,SACN,KAAA,CACJ,EAKM,EAAY,MAAM,AAxB5B,SAAsB,CAAG,CAAE,CAAG,EAC1B,GAAI,aAAe,WACf,MAAO,AAAA,CAAA,EAAA,EAAA,OAAM,AAAN,EAAO,MAAM,CAAC,SAAS,CAAC,MAAO,EAAK,SAAU,CAAA,EAAO,CAAC,aAAa,EAE9E,GAAI,AAAA,CAAA,EAAA,EAAA,WAAW,AAAX,EAAY,GAEZ,MADA,AAAA,CAAA,EAAA,EAAA,iBAAgB,AAAhB,EAAkB,EAAK,EAAK,aAAc,aACnC,CAEX,OAAM,AAAI,UAAU,AAAA,CAAA,EAAA,EAAA,OAAc,AAAd,EAAgB,KAAQ,EAAA,KAAI,CAAG,cACvD,EAeyC,EAAK,GAC1C,GAAI,EAAU,MAAM,CAAC,QAAQ,CAAC,cAC1B,OAAO,IAAI,WAAW,MAAM,AAAA,CAAA,EAAA,EAAA,OAAM,AAAN,EAAO,MAAM,CAAC,UAAU,CAAC,EAAW,EAAW,IAE/E,GAAI,EAAU,MAAM,CAAC,QAAQ,CAAC,aAC1B,MAAO,AAAA,CAAA,EAAA,EAAA,OAAM,AAAN,EAAO,MAAM,CAAC,SAAS,CAAC,EAAW,EAT9B,CACZ,OAAQ,EACR,KAAM,QACV,EAMkE,CAAA,EAAO,CAAC,UAAW,YAAY,CAEjG,OAAM,AAAI,UAAU,+DACxB,CACO,IAAM,EAAU,MAAO,EAAK,EAAK,EAAK,EAAM,IAAI,CAAE,EAAM,AAAA,CAAA,EAAA,EAAA,OAAK,AAAL,EAAO,IAAI,WAAW,IAAI,IACrF,IAAM,EAAU,MAAM,EAAU,EAAK,EAAK,EAAK,GAE/C,MAAO,CAAE,aADY,MAAM,AAAA,CAAA,EAAA,EAAA,IAAG,AAAH,EAAK,EAAI,KAAK,CAAC,IAAK,EAAS,GACjC,IAAA,EAAK,IAAK,AAAA,CAAA,EAAA,EAAA,MAAQ,AAAR,EAAU,EAAK,CACpD,EACa,EAAU,MAAO,EAAK,EAAK,EAAc,EAAK,KACvD,IAAM,EAAU,MAAM,EAAU,EAAK,EAAK,EAAK,GAC/C,MAAO,AAAA,CAAA,EAAA,EAAA,MAAK,AAAL,EAAO,EAAI,KAAK,CAAC,IAAK,EAAS,EAC1C,C,E,C,c,Q,yB,Q,iB,Q,a,Q,sB,Q,iB,Q,uB,Q,8B,Q,mB,Q,iD,O,E,C,Q,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GCjDwB,EAAA,MAAA,CAAA,EAAA,UAAA,IAAA,GADxB,IAAA,EAAA,EAAA,qBACe,SAAS,EAAS,CAAG,EAChC,GAAI,CAAE,CAAA,aAAe,UAAA,GAAe,EAAI,MAAM,CAAG,EAC7C,MAAM,IAAI,EAAA,UAAS,CAAE,4CAE7B,C,E,C,oB,Q,iD,O,E,C,Q,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GCEa,EAAA,MAAA,CAAA,EAAA,UAAA,IAAA,GAeA,EAAA,MAAA,CAAA,EAAA,UAAA,IAAA,GAtBb,IAAA,EAAA,EAAA,qB,E,E,c,C,GACA,EAAA,EAAA,c,E,E,c,C,GACA,EAAA,EAAA,kB,E,E,c,C,GACA,EAAA,EAAA,wBACA,EAAA,EAAA,yB,E,E,c,C,GACA,EAAA,EAAA,+B,E,E,c,C,GACA,EAAA,EAAA,oBACO,IAAM,EAAU,MAAO,EAAK,EAAK,KACpC,GAAI,CAAC,AAAA,CAAA,EAAA,EAAA,WAAW,AAAX,EAAY,GACb,MAAM,AAAI,UAAU,AAAA,CAAA,EAAA,EAAA,OAAe,AAAf,EAAgB,KAAQ,EAAA,KAAK,GAIrD,GAFA,AAAA,CAAA,EAAA,EAAA,iBAAgB,AAAhB,EAAkB,EAAK,EAAK,UAAW,WACvC,AAAA,CAAA,EAAA,EAAA,OAAc,AAAd,EAAe,EAAK,GAChB,EAAI,MAAM,CAAC,QAAQ,CAAC,WACpB,OAAO,IAAI,WAAW,MAAM,AAAA,CAAA,EAAA,EAAA,OAAM,AAAN,EAAO,MAAM,CAAC,OAAO,CAAC,AAAA,CAAA,EAAA,EAAA,OAAe,AAAf,EAAgB,GAAM,EAAK,IAEjF,GAAI,EAAI,MAAM,CAAC,QAAQ,CAAC,WAAY,CAChC,IAAM,EAAe,MAAM,AAAA,CAAA,EAAA,EAAA,OAAK,AAAL,EAAO,MAAM,CAAC,SAAS,CAAC,MAAO,KAAQ,EAAA,OAAc,EAChF,OAAO,IAAI,WAAW,MAAM,AAAA,CAAA,EAAA,EAAA,OAAK,AAAL,EAAO,MAAM,CAAC,OAAO,CAAC,MAAO,EAAc,EAAK,AAAA,CAAA,EAAA,EAAA,OAAc,AAAd,EAAgB,IAChG,CACA,MAAM,AAAI,UAAU,+EACxB,EACa,EAAU,MAAO,EAAK,EAAK,KACpC,GAAI,CAAC,AAAA,CAAA,EAAA,EAAA,WAAW,AAAX,EAAY,GACb,MAAM,AAAI,UAAU,AAAA,CAAA,EAAA,EAAA,OAAe,AAAf,EAAgB,KAAQ,EAAA,KAAK,GAIrD,GAFA,AAAA,CAAA,EAAA,EAAA,iBAAgB,AAAhB,EAAkB,EAAK,EAAK,UAAW,aACvC,AAAA,CAAA,EAAA,EAAA,OAAc,AAAd,EAAe,EAAK,GAChB,EAAI,MAAM,CAAC,QAAQ,CAAC,WACpB,OAAO,IAAI,WAAW,MAAM,AAAA,CAAA,EAAA,EAAA,OAAM,AAAN,EAAO,MAAM,CAAC,OAAO,CAAC,AAAA,CAAA,EAAA,EAAA,OAAe,AAAf,EAAgB,GAAM,EAAK,IAEjF,GAAI,EAAI,MAAM,CAAC,QAAQ,CAAC,aAAc,CAClC,IAAM,EAAe,MAAM,AAAA,CAAA,EAAA,EAAA,OAAM,AAAN,EAAO,MAAM,CAAC,SAAS,CAAC,MAAO,EAAc,EAAK,AAAA,CAAA,EAAA,EAAA,OAAc,AAAd,EAAgB,MAAS,EAAA,OAAa,EACnH,OAAO,IAAI,WAAW,MAAM,AAAA,CAAA,EAAA,EAAA,OAAM,AAAN,EAAO,MAAM,CAAC,SAAS,CAAC,MAAO,GAC/D,CACA,MAAM,AAAI,UAAU,iFACxB,C,E,C,oB,Q,a,Q,iB,Q,uB,Q,wB,Q,8B,Q,mB,Q,iD,O,E,C,M,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GCnCwB,EAAA,MAAA,CAAA,EAAA,UAAA,IAAA,GADxB,IAAA,EAAA,EAAA,qBACe,SAAS,EAAY,CAAG,EACnC,OAAQ,GACJ,IAAK,WACL,IAAK,eACL,IAAK,eACL,IAAK,eACD,MAAO,UACX,SACI,MAAM,IAAI,EAAA,gBAAgB,CAAC,CAAC,IAAI,EAAE,EAAI,2DAA2D,CAAC,CAC1G,CACJ,C,E,C,oB,Q,iD,O,E,C,Q,C,S,C,C,C,C,C,E,A,E,kD,iB,C,GCXe,EAAA,OAAA,CAAA,CAAC,EAAK,KACjB,GAAI,EAAI,UAAU,CAAC,OAAS,EAAI,UAAU,CAAC,MAAO,CAC9C,GAAM,CAAE,cAAA,CAAa,CAAE,CAAG,EAAI,SAAS,CACvC,GAAI,AAAyB,UAAzB,OAAO,GAA8B,EAAgB,KACrD,MAAM,AAAI,UAAU,CAAC,EAAE,EAAI,qDAAqD,CAAC,CAEzF,CACJ,C,E,C,iD,O,E,C,M,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GCLA,EAAA,MAAA,CAAA,EAAA,YAAA,IAAgB,GAFhB,IAAA,EAAA,EAAA,qBACA,EAAA,EAAA,wB,E,E,c,C,GACO,SAAS,EAAU,CAAG,EACzB,OAAQ,GACJ,IAAK,UACD,OAAO,GACX,KAAK,UACD,OAAO,GACX,KAAK,UACL,IAAK,gBACD,OAAO,GACX,KAAK,gBACD,OAAO,GACX,KAAK,gBACD,OAAO,GACX,SACI,MAAM,IAAI,EAAA,gBAAe,CAAE,CAAC,2BAA2B,EAAE,EAAI,CAAC,CACtE,CACJ,CACe,EAAA,OAAA,CAAA,AAAC,GAAQ,AAAA,CAAA,EAAA,EAAA,OAAK,AAAL,EAAO,IAAI,WAAW,EAAU,IAAQ,G,E,C,oB,Q,uB,Q,iD,O,E,C,Q,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GCdhE,EAAA,MAAA,CAAA,EAAA,aAAA,IAAsB,GAMtB,EAAA,MAAA,CAAA,EAAA,aAAA,IAAsB,GAMtB,EAAA,MAAA,CAAA,EAAA,cAAA,IAAsB,GAMtB,EAAA,MAAA,CAAA,EAAA,YAAA,IAAsB,GAvBtB,IAAA,EAAA,EAAA,2BACA,EAAA,EAAA,sBACA,EAAA,EAAA,4B,E,E,c,C,GACA,EAAA,EAAA,qBACA,EAAA,EAAA,uB,E,E,c,C,GACO,eAAe,EAAW,CAAI,CAAE,CAAG,CAAE,CAAO,EAC/C,GAAI,AAAgB,UAAhB,OAAO,GAAqB,AAA+C,IAA/C,EAAK,OAAO,CAAC,8BACzC,MAAM,AAAI,UAAU,wCAExB,MAAO,AAAA,CAAA,EAAA,EAAA,QAAQ,AAAR,EAAS,EAAM,EAAK,EAC/B,CACO,eAAe,EAAW,CAAI,CAAE,CAAG,CAAE,CAAO,EAC/C,GAAI,AAAgB,UAAhB,OAAO,GAAqB,AAAgD,IAAhD,EAAK,OAAO,CAAC,+BACzC,MAAM,AAAI,UAAU,yCAExB,MAAO,AAAA,CAAA,EAAA,EAAA,QAAQ,AAAR,EAAS,EAAM,EAAK,EAC/B,CACO,eAAe,EAAY,CAAK,CAAE,CAAG,CAAE,CAAO,EACjD,GAAI,AAAiB,UAAjB,OAAO,GAAsB,AAAiD,IAAjD,EAAM,OAAO,CAAC,+BAC3C,MAAM,AAAI,UAAU,2CAExB,MAAO,AAAA,CAAA,EAAA,EAAA,SAAS,AAAT,EAAU,EAAO,EAAK,EACjC,CACO,eAAe,EAAU,CAAG,CAAE,CAAG,CAAE,CAAc,EACpD,IAAI,EACJ,GAAI,CAAC,AAAA,CAAA,EAAA,EAAA,OAAO,AAAP,EAAS,GACV,MAAM,AAAI,UAAU,yBAGxB,OADA,GAAQ,CAAA,EAAM,EAAI,GAAG,AAAH,EACV,EAAI,GAAG,EACX,IAAK,MACD,GAAI,AAAiB,UAAjB,OAAO,EAAI,CAAC,EAAiB,CAAC,EAAI,CAAC,CACnC,MAAM,AAAI,UAAU,2CAGxB,GADA,MAAA,GAAyE,CAAA,EAAiB,AAAY,CAAA,IAAZ,EAAI,GAAG,AAAjG,EACI,EACA,MAAO,AAAA,CAAA,EAAA,EAAA,OAAU,AAAV,EAAY,CAAE,GAAG,CAAG,CAAE,IAAA,EAAK,IAAK,AAAmB,OAAlB,CAAA,EAAK,EAAI,GAAE,AAAF,GAAiB,AAAO,KAAK,IAAZ,GAAgB,CAAW,GAEjG,MAAO,AAAA,CAAA,EAAA,EAAA,MAAe,AAAf,EAAgB,EAAI,CAAC,CAChC,KAAK,MACD,GAAI,AAAY,KAAA,IAAZ,EAAI,GAAG,CACP,MAAM,IAAI,EAAA,gBAAgB,CAAC,qEAEnC,KAAK,KACL,IAAK,MACD,MAAO,AAAA,CAAA,EAAA,EAAA,OAAU,AAAV,EAAY,CAAE,GAAG,CAAG,CAAE,IAAA,CAAI,EACrC,SACI,MAAM,IAAI,EAAA,gBAAe,CAAE,+CACnC,CACJ,C,E,C,0B,Q,qB,Q,2B,Q,oB,Q,sB,Q,iD,O,E,C,M,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GC/Ba,EAAA,MAAA,CAAA,EAAA,SAAA,IAAA,GAGA,EAAA,MAAA,CAAA,EAAA,UAAA,IAAA,GAiGA,EAAA,MAAA,CAAA,EAAA,YAAA,IAAA,GAGA,EAAA,MAAA,CAAA,EAAA,WAAA,IAAA,GAuEA,EAAA,MAAA,CAAA,EAAA,WAAA,IAAA,GAhMb,IAAA,EAAA,EAAA,kB,E,E,c,C,GACA,EAAA,EAAA,+B,E,E,c,C,GACA,EAAA,EAAA,kBACA,EAAA,EAAA,wB,E,E,c,C,GACA,EAAA,EAAA,qBACA,EAAA,EAAA,oBACA,IAAM,EAAgB,MAAO,EAAS,EAAW,KAC7C,GAAI,CAAC,AAAA,CAAA,EAAA,EAAA,WAAW,AAAX,EAAY,GACb,MAAM,AAAI,UAAU,AAAA,CAAA,EAAA,EAAA,OAAe,AAAf,EAAgB,KAAQ,EAAA,KAAK,GAErD,GAAI,CAAC,EAAI,WAAW,CAChB,MAAM,AAAI,UAAU,gCAExB,GAAI,EAAI,IAAI,GAAK,EACb,MAAM,AAAI,UAAU,CAAC,aAAa,EAAE,EAAQ,IAAI,CAAC,EAErD,MAAO,AAAA,CAAA,EAAA,EAAA,OAAS,AAAT,EAAU,AAAA,CAAA,EAAA,EAAA,YAAW,AAAX,EAAa,IAAI,WAAW,MAAM,AAAA,CAAA,EAAA,EAAA,OAAK,AAAL,EAAO,MAAM,CAAC,SAAS,CAAC,EAAW,KAAQ,CAAC,EAAE,EAAQ,WAAW,GAAG,IAAI,CAAC,CAChI,EACa,EAAS,AAAC,GACZ,EAAc,SAAU,OAAQ,GAE9B,EAAU,AAAC,GACb,EAAc,UAAW,QAAS,GAEvC,EAAU,CAAC,EAAS,EAAK,EAAO,CAAC,IACtB,IAAT,IACA,EAAI,OAAO,CAAC,EAAI,MAAM,EACtB,EAAI,OAAO,CAAC,IAEhB,IAAI,EAAI,EAAQ,OAAO,CAAC,CAAG,CAAC,EAAE,CAAE,GAChC,GAAI,AAAM,KAAN,EACA,MAAO,CAAA,EACX,IAAM,EAAM,EAAQ,QAAQ,CAAC,EAAG,EAAI,EAAI,MAAM,SAC9C,AAAI,EAAI,MAAM,GAAK,EAAI,MAAM,EAEtB,CAAA,EAAI,KAAK,CAAC,CAAC,EAAO,IAAU,IAAU,CAAG,CAAC,EAAM,GAAK,EAAQ,EAAS,EAAK,EAAI,EAAtF,CACJ,EACM,EAAgB,AAAC,IACnB,OAAQ,CAAA,GACJ,KAAK,EAAQ,EAAS,CAAC,GAAM,IAAM,GAAM,IAAM,GAAM,EAAM,EAAM,EAAK,EAClE,MAAO,OACX,MAAK,EAAQ,EAAS,CAAC,GAAM,IAAM,EAAM,EAAM,GAAK,EAChD,MAAO,OACX,MAAK,EAAQ,EAAS,CAAC,GAAM,IAAM,EAAM,EAAM,GAAK,EAChD,MAAO,OACX,MAAK,EAAQ,EAAS,CAAC,GAAM,IAAM,IAAK,EACpC,MAAO,QACX,MAAK,EAAQ,EAAS,CAAC,GAAM,IAAM,IAAK,EACpC,MAAO,MACX,MAAK,EAAQ,EAAS,CAAC,GAAM,IAAM,IAAK,EACpC,MAAO,SACX,MAAK,EAAQ,EAAS,CAAC,GAAM,IAAM,IAAK,EACpC,MAAO,OACX,SACI,MAAM,IAAI,EAAA,gBAAe,CAAE,0DACnC,CACJ,EACM,EAAgB,MAAO,EAAS,EAAW,EAAK,EAAK,SACnD,MACA,EACA,EACJ,IAAM,EAAU,IAAI,WAAW,KAAK,EAAI,OAAO,CAAC,EAAS,KACpD,KAAK,CAAC,IACN,GAAG,CAAC,AAAC,GAAM,EAAE,UAAU,CAAC,KACvB,EAAW,AAAc,SAAd,EACjB,OAAQ,GACJ,IAAK,QACL,IAAK,QACL,IAAK,QACD,EAAY,CAAE,KAAM,UAAW,KAAM,CAAC,IAAI,EAAE,EAAI,KAAK,CAAC,IAAI,CAAC,AAAC,EAC5D,EAAY,EAAW,CAAC,SAAS,CAAG,CAAC,OAAO,CAC5C,KACJ,KAAK,QACL,IAAK,QACL,IAAK,QACD,EAAY,CAAE,KAAM,oBAAqB,KAAM,CAAC,IAAI,EAAE,EAAI,KAAK,CAAC,IAAI,CAAC,AAAC,EACtE,EAAY,EAAW,CAAC,SAAS,CAAG,CAAC,OAAO,CAC5C,KACJ,KAAK,WACL,IAAK,eACL,IAAK,eACL,IAAK,eACD,EAAY,CACR,KAAM,WACN,KAAM,CAAC,IAAI,EAAE,SAAS,EAAI,KAAK,CAAC,IAAK,KAAO,EAAE,CAAC,AACnD,EACA,EAAY,EAAW,CAAC,UAAW,UAAU,CAAG,CAAC,UAAW,YAAY,CACxE,KACJ,KAAK,QACD,EAAY,CAAE,KAAM,QAAS,WAAY,OAAQ,EACjD,EAAY,EAAW,CAAC,SAAS,CAAG,CAAC,OAAO,CAC5C,KACJ,KAAK,QACD,EAAY,CAAE,KAAM,QAAS,WAAY,OAAQ,EACjD,EAAY,EAAW,CAAC,SAAS,CAAG,CAAC,OAAO,CAC5C,KACJ,KAAK,QACD,EAAY,CAAE,KAAM,QAAS,WAAY,OAAQ,EACjD,EAAY,EAAW,CAAC,SAAS,CAAG,CAAC,OAAO,CAC5C,KACJ,KAAK,UACL,IAAK,iBACL,IAAK,iBACL,IAAK,iBAAkB,CACnB,IAAM,EAAa,EAAc,GACjC,EAAY,EAAW,UAAU,CAAC,MAAQ,CAAE,KAAM,OAAQ,WAAA,CAAW,EAAI,CAAE,KAAM,CAAW,EAC5F,EAAY,EAAW,EAAE,CAAG,CAAC,aAAa,CAC1C,KACJ,CACA,IAAK,QACD,EAAY,CAAE,KAAM,EAAc,EAAS,EAC3C,EAAY,EAAW,CAAC,SAAS,CAAG,CAAC,OAAO,CAC5C,KACJ,SACI,MAAM,IAAI,EAAA,gBAAe,CAAE,iDACnC,CACA,MAAO,AAAA,CAAA,EAAA,EAAA,OAAM,AAAN,EAAO,MAAM,CAAC,SAAS,CAAC,EAAW,EAAS,EAAW,AAAiF,OAAhF,CAAA,EAAK,MAAA,EAAyC,KAAK,EAAI,EAAQ,WAAU,AAAV,GAAyB,AAAO,KAAK,IAAZ,GAAgB,EAAY,EACvL,EACa,EAAY,CAAC,EAAK,EAAK,IACzB,EAAc,8CAA+C,QAAS,EAAK,EAAK,GAE9E,EAAW,CAAC,EAAK,EAAK,IACxB,EAAc,6CAA8C,OAAQ,EAAK,EAAK,GAEzF,SAAS,EAAW,CAAG,EACnB,IAAI,EAAS,EAAE,CACX,EAAO,EACX,KAAO,EAAO,EAAI,MAAM,EAAE,CACtB,IAAI,EAAW,EAAa,EAAI,QAAQ,CAAC,IACzC,EAAO,IAAI,CAAC,GACZ,GAAQ,EAAS,UAAU,AAC/B,CACA,OAAO,CACX,CACA,SAAS,EAAa,CAAK,EACvB,IAAI,EAAW,EACX,EAAM,AAAW,GAAX,CAAK,CAAC,EAAE,CAElB,GADA,IACI,AAAQ,KAAR,EAAc,CAEd,IADA,EAAM,EACC,CAAK,CAAC,EAAS,EAAI,KACtB,EAAM,AAAM,IAAN,EAAY,CAAK,CAAC,EAAS,CAAG,IACpC,IAEJ,EAAM,AAAM,IAAN,EAAY,CAAK,CAAC,EAAS,CAAG,IACpC,GACJ,CACA,IAAI,EAAS,EACb,GAAI,CAAK,CAAC,EAAS,CAAG,IAClB,EAAS,CAAK,CAAC,EAAS,CACxB,SAEC,GAAI,AAAW,MAAX,EAAiB,CAEtB,IADA,EAAS,EACF,AAA6B,IAA7B,CAAK,CAAC,EAAW,EAAO,EAAU,AAAiC,IAAjC,CAAK,CAAC,EAAW,EAAS,EAAE,EAAQ,CACzE,GAAI,EAAS,EAAM,UAAU,CACzB,MAAM,AAAI,UAAU,iCAExB,CAAA,GACJ,CACA,IAAM,EAAa,EAAW,EAAS,EACvC,MAAO,CACH,WAAA,EACA,SAAU,EAAM,QAAQ,CAAC,EAAU,EAAW,GAC9C,IAAK,EAAM,QAAQ,CAAC,EAAG,EAC3B,CACJ,KACK,CACD,IAAI,EAAiB,AAAkB,IAAlB,CAAK,CAAC,EAAS,AACpC,CAAA,IACA,EAAS,EACT,IAAK,IAAI,EAAI,EAAG,EAAI,EAAgB,IAChC,EAAS,AAAS,IAAT,EAAe,CAAK,CAAC,EAAS,CACvC,GAER,CACA,IAAM,EAAa,EAAW,EAC9B,MAAO,CACH,WAAA,EACA,SAAU,EAAM,QAAQ,CAAC,EAAU,GACnC,IAAK,EAAM,QAAQ,CAAC,EAAG,EAC3B,CACJ,CAUO,IAAM,EAAW,CAAC,EAAK,EAAK,KAC/B,IAAI,EACJ,GAAI,CACA,EAAO,AARf,SAAiB,CAAI,EACjB,IAAM,EAAM,EAAK,OAAO,CAAC,8CAA+C,IAClE,EAAM,AAAA,CAAA,EAAA,EAAA,YAAW,AAAX,EAAa,GACzB,MAAO,AAAA,CAAA,EAAA,EAAA,OAAS,AAAT,EAAU,AAPrB,SAAsB,CAAG,EACrB,IAAM,EAAiB,EAAW,EAAW,EAAa,GAAK,QAAQ,CAAC,CAAC,EAAE,CAAC,QAAQ,EACpF,MAAO,AAAA,CAAA,EAAA,EAAA,YAAW,AAAX,EAAa,CAAc,CAAC,AAA6B,MAA7B,CAAc,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAY,EAAI,EAAE,CAAC,GAAG,CACrF,EAIkC,GAAM,aACxC,EAIuB,EACnB,CACA,MAAO,EAAO,CACV,MAAM,AAAI,UAAU,wCAAyC,CAAE,MAAA,CAAM,EACzE,CACA,OAAO,EAAS,EAAM,EAAK,EAC/B,C,E,C,iB,Q,8B,Q,iB,Q,uB,Q,oB,Q,mB,Q,iD,O,E,C,Q,C,S,C,C,C,C,C,E,A,E,kD,iB,C,GCzMe,EAAA,OAAA,CAAA,CAAC,EAAK,KACjB,IAAM,EAAY,AAAA,CAAA,EAAI,KAAK,CAAC,aAAe,EAAE,AAAF,EAAI,IAAI,CAAC,MACpD,MAAO,CAAC,WAAW,EAAE,EAAW;AAAO,EAAE,EAAS;SAAW,EAAE,EAAW,KAAK,CAAC,AACpF,C,E,C,iD,O,E,C,Q,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GCHA,IAAA,EAAA,EAAA,kB,E,E,c,C,GACA,EAAA,EAAA,qBACA,EAAA,EAAA,kBAyHA,IAAM,EAAQ,MAAO,IACjB,IAAI,EAAI,EACR,GAAI,CAAC,EAAI,GAAG,CACR,MAAM,AAAI,UAAU,4DAExB,GAAM,CAAE,UAAA,CAAS,CAAE,UAAA,CAAS,CAAE,CAAG,AA7HrC,SAAuB,CAAG,EACtB,IAAI,EACA,EACJ,OAAQ,EAAI,GAAG,EACX,IAAK,MACD,OAAQ,EAAI,GAAG,EACX,IAAK,QACL,IAAK,QACL,IAAK,QACD,EAAY,CAAE,KAAM,OAAQ,KAAM,CAAC,IAAI,EAAE,EAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,AAAC,EAC7D,EAAY,CAAC,OAAQ,SAAS,CAC9B,KACJ,KAAK,gBACL,IAAK,gBACL,IAAK,gBACD,MAAM,IAAI,EAAA,gBAAgB,CAAC,CAAC,EAAE,EAAI,GAAG,CAAC,+CAA+C,CAAC,CAC1F,KAAK,UACL,IAAK,UACL,IAAK,UACL,IAAK,YACL,IAAK,YACL,IAAK,YACD,EAAY,CAAE,KAAM,SAAU,EAC9B,EAAY,CAAC,UAAW,UAAU,CAClC,KACJ,KAAK,SACL,IAAK,SACL,IAAK,SACD,EAAY,CAAE,KAAM,QAAS,EAC7B,EAAY,CAAC,UAAW,YAAY,CACpC,KACJ,KAAK,qBACL,IAAK,qBACL,IAAK,qBACD,EAAY,CAAE,KAAM,QAAS,EAC7B,EAAY,CAAC,aAAa,CAC1B,KACJ,SACI,MAAM,IAAI,EAAA,gBAAe,CAAE,+DACnC,CACA,KAEJ,KAAK,MACD,OAAQ,EAAI,GAAG,EACX,IAAK,QACL,IAAK,QACL,IAAK,QACD,EAAY,CAAE,KAAM,UAAW,KAAM,CAAC,IAAI,EAAE,EAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,AAAC,EAChE,EAAY,EAAI,CAAC,CAAG,CAAC,OAAO,CAAG,CAAC,SAAS,CACzC,KACJ,KAAK,QACL,IAAK,QACL,IAAK,QACD,EAAY,CAAE,KAAM,oBAAqB,KAAM,CAAC,IAAI,EAAE,EAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,AAAC,EAC1E,EAAY,EAAI,CAAC,CAAG,CAAC,OAAO,CAAG,CAAC,SAAS,CACzC,KACJ,KAAK,WACL,IAAK,eACL,IAAK,eACL,IAAK,eACD,EAAY,CACR,KAAM,WACN,KAAM,CAAC,IAAI,EAAE,SAAS,EAAI,GAAG,CAAC,KAAK,CAAC,IAAK,KAAO,EAAE,CAAC,AACvD,EACA,EAAY,EAAI,CAAC,CAAG,CAAC,UAAW,YAAY,CAAG,CAAC,UAAW,UAAU,CACrE,KACJ,SACI,MAAM,IAAI,EAAA,gBAAe,CAAE,+DACnC,CACA,KAEJ,KAAK,KACD,OAAQ,EAAI,GAAG,EACX,IAAK,QACD,EAAY,CAAE,KAAM,QAAS,WAAY,OAAQ,EACjD,EAAY,EAAI,CAAC,CAAG,CAAC,OAAO,CAAG,CAAC,SAAS,CACzC,KACJ,KAAK,QACD,EAAY,CAAE,KAAM,QAAS,WAAY,OAAQ,EACjD,EAAY,EAAI,CAAC,CAAG,CAAC,OAAO,CAAG,CAAC,SAAS,CACzC,KACJ,KAAK,QACD,EAAY,CAAE,KAAM,QAAS,WAAY,OAAQ,EACjD,EAAY,EAAI,CAAC,CAAG,CAAC,OAAO,CAAG,CAAC,SAAS,CACzC,KACJ,KAAK,UACL,IAAK,iBACL,IAAK,iBACL,IAAK,iBACD,EAAY,CAAE,KAAM,OAAQ,WAAY,EAAI,GAAG,AAAC,EAChD,EAAY,EAAI,CAAC,CAAG,CAAC,aAAa,CAAG,EAAE,CACvC,KACJ,SACI,MAAM,IAAI,EAAA,gBAAe,CAAE,+DACnC,CACA,KAEJ,KAAK,MACD,OAAQ,EAAI,GAAG,EACX,IAAK,QACD,EAAY,CAAE,KAAM,EAAI,GAAG,AAAC,EAC5B,EAAY,EAAI,CAAC,CAAG,CAAC,OAAO,CAAG,CAAC,SAAS,CACzC,KACJ,KAAK,UACL,IAAK,iBACL,IAAK,iBACL,IAAK,iBACD,EAAY,CAAE,KAAM,EAAI,GAAG,AAAC,EAC5B,EAAY,EAAI,CAAC,CAAG,CAAC,aAAa,CAAG,EAAE,CACvC,KACJ,SACI,MAAM,IAAI,EAAA,gBAAe,CAAE,+DACnC,CACA,KAEJ,SACI,MAAM,IAAI,EAAA,gBAAe,CAAE,8DACnC,CACA,MAAO,CAAE,UAAA,EAAW,UAAA,CAAU,CAClC,EAMmD,GACzC,EAAO,CACT,EACC,AAAkB,OAAlB,CAAA,EAAK,EAAI,GAAE,AAAF,GAAiB,AAAO,KAAK,IAAZ,GAAgB,EAC1C,AAAsB,OAAtB,CAAA,EAAK,EAAI,OAAM,AAAN,GAAqB,AAAO,KAAK,IAAZ,EAAgB,EAAK,EACvD,CACD,GAAI,AAAmB,WAAnB,EAAU,IAAI,CACd,MAAO,AAAA,CAAA,EAAA,EAAA,OAAM,AAAN,EAAO,MAAM,CAAC,SAAS,CAAC,MAAO,AAAA,CAAA,EAAA,EAAA,MAAS,AAAT,EAAU,EAAI,CAAC,KAAM,GAE/D,IAAM,EAAU,CAAE,GAAG,CAAG,AAAC,EAGzB,OAFA,OAAO,EAAQ,GAAG,CAClB,OAAO,EAAQ,GAAG,CACX,AAAA,CAAA,EAAA,EAAA,OAAK,AAAL,EAAO,MAAM,CAAC,SAAS,CAAC,MAAO,KAAY,EACtD,CACe,CAAA,EAAA,OAAA,CAAA,C,E,C,iB,Q,oB,Q,iB,Q,iD,O,E,C,Q,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GC9If,IAAA,EAAA,EAAA,0BACA,EAAA,EAAA,6B,E,E,c,C,GACA,IAAM,EAAqB,CAAC,EAAK,KAC7B,IAAI,CAAA,aAAe,UAAA,GAEnB,GAAI,CAAC,AAAA,CAAA,EAAA,EAAA,OAAQ,AAAR,EAAU,GACX,MAAM,AAAI,UAAU,AAAA,CAAA,EAAA,EAAA,OAAc,AAAd,EAAgB,EAAK,KAAQ,EAAA,KAAK,CAAE,eAE5D,GAAI,AAAa,WAAb,EAAI,IAAI,CACR,MAAM,AAAI,UAAU,CAAC,EAAE,AAAA,CAAA,EAAA,EAAA,KAAK,AAAL,EAAM,IAAI,CAAC,QAAQ,4DAA4D,CAAC,EAE/G,EACM,EAAsB,CAAC,EAAK,EAAK,KACnC,GAAI,CAAC,AAAA,CAAA,EAAA,EAAA,OAAS,AAAT,EAAU,GACX,MAAM,AAAI,UAAU,AAAA,CAAA,EAAA,EAAA,OAAe,AAAf,EAAgB,EAAK,KAAQ,EAAA,KAAI,GAEzD,GAAI,AAAa,WAAb,EAAI,IAAI,CACR,MAAM,AAAI,UAAU,CAAC,EAAE,AAAA,CAAA,EAAA,EAAA,KAAK,AAAL,EAAM,IAAI,CAAC,QAAQ,iEAAiE,CAAC,EAEhH,GAAI,AAAU,SAAV,GAAoB,AAAa,WAAb,EAAI,IAAI,CAC5B,MAAM,AAAI,UAAU,CAAC,EAAE,AAAA,CAAA,EAAA,EAAA,KAAI,AAAJ,EAAM,IAAI,CAAC,QAAQ,qEAAqE,CAAC,EAEpH,GAAI,AAAU,YAAV,GAAuB,AAAa,WAAb,EAAI,IAAI,CAC/B,MAAM,AAAI,UAAU,CAAC,EAAE,AAAA,CAAA,EAAA,EAAA,KAAI,AAAJ,EAAM,IAAI,CAAC,QAAQ,wEAAwE,CAAC,EAEvH,GAAI,EAAI,SAAS,EAAI,AAAU,WAAV,GAAsB,AAAa,YAAb,EAAI,IAAI,CAC/C,MAAM,AAAI,UAAU,CAAC,EAAE,AAAA,CAAA,EAAA,EAAA,KAAI,AAAJ,EAAM,IAAI,CAAC,QAAQ,sEAAsE,CAAC,EAErH,GAAI,EAAI,SAAS,EAAI,AAAU,YAAV,GAAuB,AAAa,YAAb,EAAI,IAAI,CAChD,MAAM,AAAI,UAAU,CAAC,EAAE,AAAA,CAAA,EAAA,EAAA,KAAI,AAAJ,EAAM,IAAI,CAAC,QAAQ,uEAAuE,CAAC,CAE1H,CAae,CAAA,EAAA,OAAA,CAZM,CAAC,EAAK,EAAK,KACV,EAAI,UAAU,CAAC,OAC7B,AAAQ,QAAR,GACA,EAAI,UAAU,CAAC,UACf,qBAAqB,IAAI,CAAC,GAE1B,EAAmB,EAAK,GAGxB,EAAoB,EAAK,EAAK,EAEtC,C,E,C,yB,Q,4B,Q,iD,O,E,C,Q,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GCvCA,EAAA,MAAA,CAAA,EAAA,OAAA,IAAsB,GAMtB,EAAA,MAAA,CAAA,EAAA,SAAA,IAAsB,GAVtB,IAAA,EAAA,EAAA,yB,E,E,c,C,GACA,EAAA,EAAA,yB,E,E,c,C,GACA,EAAA,EAAA,W,E,E,c,C,GACA,EAAA,EAAA,2BACO,eAAe,EAAK,CAAG,CAAE,CAAG,CAAE,CAAG,CAAE,CAAE,EACxC,IAAM,EAAe,EAAI,KAAK,CAAC,EAAG,EAClC,CAAA,GAAO,CAAA,EAAK,AAAA,CAAA,EAAA,EAAA,OAAS,AAAT,EAAW,EAAA,EACvB,GAAM,CAAE,WAAY,CAAY,CAAE,IAAA,CAAG,CAAE,CAAG,MAAM,AAAA,CAAA,EAAA,EAAA,OAAM,AAAN,EAAQ,EAAc,EAAK,EAAK,EAAI,IAAI,WAAW,IACnG,MAAO,CAAE,aAAA,EAAc,GAAI,AAAA,CAAA,EAAA,EAAA,MAAQ,AAAR,EAAU,GAAK,IAAK,AAAA,CAAA,EAAA,EAAA,MAAQ,AAAR,EAAU,EAAK,CAClE,CACO,eAAe,EAAO,CAAG,CAAE,CAAG,CAAE,CAAY,CAAE,CAAE,CAAE,CAAG,EACxD,IAAM,EAAe,EAAI,KAAK,CAAC,EAAG,GAClC,MAAO,AAAA,CAAA,EAAA,EAAA,OAAM,AAAN,EAAQ,EAAc,EAAK,EAAc,EAAI,EAAK,IAAI,WAAW,GAC5E,C,E,C,wB,Q,wB,Q,U,Q,0B,Q,iD,O,E,C,M,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GCbA,IAAA,EAAA,EAAA,0BACA,EAAA,EAAA,6B,E,E,c,C,GACA,EAAA,EAAA,yB,E,E,c,C,GACA,EAAA,EAAA,kB,E,E,c,C,GACA,EAAA,EAAA,wBACA,EAAA,EAAA,+B,E,E,c,C,GACA,EAAA,EAAA,qBACA,EAAA,EAAA,oBACA,eAAe,EAAW,CAAG,CAAE,CAAS,CAAE,CAAG,CAAE,CAAE,CAAE,CAAG,EAClD,GAAI,CAAE,CAAA,aAAe,UAAA,EACjB,MAAM,AAAI,UAAU,AAAA,CAAA,EAAA,EAAA,OAAe,AAAf,EAAgB,EAAK,eAE7C,IAAM,EAAU,SAAS,EAAI,KAAK,CAAC,EAAG,GAAI,IACpC,EAAS,MAAM,AAAA,CAAA,EAAA,EAAA,OAAK,AAAL,EAAO,MAAM,CAAC,SAAS,CAAC,MAAO,EAAI,QAAQ,CAAC,GAAW,GAAI,UAAW,CAAA,EAAO,CAAC,UAAU,EACvG,EAAS,MAAM,AAAA,CAAA,EAAA,EAAA,OAAK,AAAL,EAAO,MAAM,CAAC,SAAS,CAAC,MAAO,EAAI,QAAQ,CAAC,EAAG,GAAW,GAAI,CAC/E,KAAM,CAAC,IAAI,EAAE,GAAW,EAAE,CAAC,CAC3B,KAAM,MACV,EAAG,CAAA,EAAO,CAAC,OAAO,EACZ,EAAa,IAAI,WAAW,MAAM,AAAA,CAAA,EAAA,EAAA,OAAK,AAAL,EAAO,MAAM,CAAC,OAAO,CAAC,CAC1D,GAAA,EACA,KAAM,SACV,EAAG,EAAQ,IACL,EAAU,AAAA,CAAA,EAAA,EAAA,MAAK,AAAL,EAAO,EAAK,EAAI,EAAY,AAAA,CAAA,EAAA,EAAA,QAAO,AAAP,EAAS,EAAI,MAAM,EAAI,IAEnE,MAAO,CAAE,WAAA,EAAY,IADT,IAAI,WAAY,AAAA,CAAA,MAAM,AAAA,CAAA,EAAA,EAAA,OAAK,AAAL,EAAO,MAAM,CAAC,IAAI,CAAC,OAAQ,EAAQ,EAAA,EAAU,KAAK,CAAC,EAAG,GAAW,GAC1E,CAC7B,CACA,eAAe,EAAW,CAAG,CAAE,CAAS,CAAE,CAAG,CAAE,CAAE,CAAE,CAAG,MAC9C,CACA,CAAA,aAAe,WACf,EAAS,MAAM,AAAA,CAAA,EAAA,EAAA,OAAK,AAAL,EAAO,MAAM,CAAC,SAAS,CAAC,MAAO,EAAK,UAAW,CAAA,EAAO,CAAC,UAAU,GAGhF,AAAA,CAAA,EAAA,EAAA,iBAAgB,AAAhB,EAAkB,EAAK,EAAK,WAC5B,EAAS,GAEb,IAAM,EAAY,IAAI,WAAW,MAAM,AAAA,CAAA,EAAA,EAAA,OAAK,AAAL,EAAO,MAAM,CAAC,OAAO,CAAC,CACzD,eAAgB,EAChB,GAAA,EACA,KAAM,UACN,UAAW,GACf,EAAG,EAAQ,IACL,EAAM,EAAU,KAAK,CAAC,KAE5B,MAAO,CAAE,WADU,EAAU,KAAK,CAAC,EAAG,KACjB,IAAA,CAAI,CAC7B,CACA,IAAM,EAAU,MAAO,EAAK,EAAW,EAAK,EAAI,KAC5C,GAAI,CAAC,AAAA,CAAA,EAAA,EAAA,WAAW,AAAX,EAAY,IAAQ,CAAE,CAAA,aAAe,UAAA,EACtC,MAAM,AAAI,UAAU,AAAA,CAAA,EAAA,EAAA,OAAc,AAAd,EAAgB,KAAQ,EAAA,KAAK,CAAE,eAGvD,OADA,AAAA,CAAA,EAAA,EAAA,OAAa,AAAb,EAAc,EAAK,GACX,GACJ,IAAK,gBACL,IAAK,gBACL,IAAK,gBAGD,OAFI,aAAe,YACf,AAAA,CAAA,EAAA,EAAA,OAAa,AAAb,EAAe,EAAK,SAAS,EAAI,KAAK,CAAC,IAAK,KACzC,EAAW,EAAK,EAAW,EAAK,EAAI,EAC/C,KAAK,UACL,IAAK,UACL,IAAK,UAGD,OAFI,aAAe,YACf,AAAA,CAAA,EAAA,EAAA,OAAc,AAAd,EAAe,EAAK,SAAS,EAAI,KAAK,CAAC,EAAG,GAAI,KAC3C,EAAW,EAAK,EAAW,EAAK,EAAI,EAC/C,SACI,MAAM,IAAI,EAAA,gBAAe,CAAE,+CACnC,CACJ,CACe,CAAA,EAAA,OAAA,CAAA,C,E,C,yB,Q,4B,Q,wB,Q,iB,Q,uB,Q,8B,Q,oB,Q,mB,Q,iD,O,E,C,Q,C,S,C,C,C,C,C,E,A,E,kD,iB,C,GCnEf,IAAA,EAAA,EAAA,oBAiCe,CAAA,EAAA,OAAA,CAhCf,SAAsB,CAAG,CAAE,CAAiB,CAAE,CAAgB,CAAE,CAAe,CAAE,CAAU,MAYnF,EAXJ,GAAI,AAAoB,KAAA,IAApB,EAAW,IAAI,EAAkB,AAAyB,KAAA,IAAzB,EAAgB,IAAI,CACrD,MAAM,IAAI,EAAI,kEAElB,GAAI,CAAC,GAAmB,AAAyB,KAAA,IAAzB,EAAgB,IAAI,CACxC,OAAO,IAAI,IAEf,GAAI,CAAC,MAAM,OAAO,CAAC,EAAgB,IAAI,GACnC,AAAgC,IAAhC,EAAgB,IAAI,CAAC,MAAM,EAC3B,EAAgB,IAAI,CAAC,IAAI,CAAC,AAAC,GAAU,AAAiB,UAAjB,OAAO,GAAsB,AAAiB,IAAjB,EAAM,MAAM,EAC9E,MAAM,IAAI,EAAI,yFASlB,IAAK,IAAM,KALP,EADA,AAAqB,KAAA,IAArB,EACa,IAAI,IAAI,IAAI,OAAO,OAAO,CAAC,MAAsB,EAAkB,OAAO,GAAG,EAG7E,EAEO,EAAgB,IAAI,EAAE,CAC1C,GAAI,CAAC,EAAW,GAAG,CAAC,GAChB,MAAM,IAAI,EAAA,gBAAe,CAAE,CAAC,4BAA4B,EAAE,EAAU,mBAAmB,CAAC,EAE5F,GAAI,AAA0B,KAAA,IAA1B,CAAU,CAAC,EAAU,CACrB,MAAM,IAAI,EAAI,CAAC,4BAA4B,EAAE,EAAU,YAAY,CAAC,EAEnE,GAAI,EAAW,GAAG,CAAC,IAAc,AAA+B,KAAA,IAA/B,CAAe,CAAC,EAAU,CAC5D,MAAM,IAAI,EAAI,CAAC,4BAA4B,EAAE,EAAU,6BAA6B,CAAC,CAE7F,CACA,OAAO,IAAI,IAAI,EAAgB,IAAI,CACvC,C,E,C,oB,Q,iD,O,E,C,M,C,S,C,C,C,C,C,E,A,E,kD,iB,C,GCtBe,EAAA,OAAA,CAVY,CAAC,EAAQ,KAChC,GAAI,AAAe,KAAA,IAAf,GACC,CAAA,CAAC,MAAM,OAAO,CAAC,IAAe,EAAW,IAAI,CAAC,AAAC,GAAM,AAAa,UAAb,OAAO,EAAM,EACnE,MAAM,AAAI,UAAU,CAAC,CAAC,EAAE,EAAO,oCAAoC,CAAC,EAExE,GAAK,EAGL,OAAO,IAAI,IAAI,EACnB,C,E,C,iD,O,E,C,M,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GCNA,EAAA,MAAA,CAAA,EAAA,iBAAA,IAAsB,GAHtB,IAAA,EAAA,EAAA,2BACA,EAAA,EAAA,wBACA,EAAA,EAAA,0B,E,E,c,C,GACO,eAAe,EAAe,CAAG,CAAE,CAAG,CAAE,CAAO,EAClD,GAAI,CAAC,AAAA,CAAA,EAAA,EAAA,OAAO,AAAP,EAAS,GACV,MAAM,IAAI,EAAA,UAAS,CAAE,iCAEzB,GAAI,CAAC,MAAM,OAAO,CAAC,EAAI,UAAU,GAAK,CAAC,EAAI,UAAU,CAAC,KAAK,CAAC,EAAA,OAAQ,EAChE,MAAM,IAAI,EAAA,UAAU,CAAC,4CAEzB,GAAI,CAAC,EAAI,UAAU,CAAC,MAAM,CACtB,MAAM,IAAI,EAAA,UAAS,CAAE,iCAEzB,IAAK,IAAM,KAAa,EAAI,UAAU,CAClC,GAAI,CACA,OAAO,MAAM,AAAA,CAAA,EAAA,EAAA,gBAAe,AAAf,EAAiB,CAC1B,IAAK,EAAI,GAAG,CACZ,WAAY,EAAI,UAAU,CAC1B,cAAe,EAAU,aAAa,CACtC,OAAQ,EAAU,MAAM,CACxB,GAAI,EAAI,EAAE,CACV,UAAW,EAAI,SAAS,CACxB,IAAK,EAAI,GAAG,CACZ,YAAa,EAAI,WAAW,AAChC,EAAG,EAAK,EACZ,CACA,MAAO,EAAI,CACX,CAEJ,MAAM,IAAI,EAAA,mBAAmB,AACjC,C,E,C,0B,Q,uB,Q,yB,Q,iD,O,E,C,M,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GCAA,EAAA,MAAA,CAAA,EAAA,iBAAA,IAAa,GA9Bb,IAAA,EAAA,EAAA,2BACA,EAAA,EAAA,wBACA,EAAA,EAAA,oB,E,E,c,C,GACA,EAAA,EAAA,4B,E,E,c,C,GACA,EAAA,EAAA,uC,E,E,c,C,GACA,EAAA,EAAA,8BACA,EAAA,EAAA,8B,E,E,c,C,EACA,OAAM,EACF,YAAY,CAAG,CAAE,CAAG,CAAE,CAAO,CAAE,CAC3B,IAAI,CAAC,MAAM,CAAG,EACd,IAAI,CAAC,GAAG,CAAG,EACX,IAAI,CAAC,OAAO,CAAG,CACnB,CACA,qBAAqB,CAAiB,CAAE,CACpC,GAAI,IAAI,CAAC,iBAAiB,CACtB,MAAM,AAAI,UAAU,gDAGxB,OADA,IAAI,CAAC,iBAAiB,CAAG,EAClB,IAAI,AACf,CACA,aAAa,GAAG,CAAI,CAAE,CAClB,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,EACvC,CACA,QAAQ,GAAG,CAAI,CAAE,CACb,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,EAClC,CACA,MAAO,CACH,OAAO,IAAI,CAAC,MAAM,AACtB,CACJ,CACO,MAAM,EACT,YAAY,CAAS,CAAE,CACnB,IAAI,CAAC,WAAW,CAAG,EAAE,CACrB,IAAI,CAAC,UAAU,CAAG,CACtB,CACA,aAAa,CAAG,CAAE,CAAO,CAAE,CACvB,IAAM,EAAY,IAAI,EAAoB,IAAI,CAAE,EAAK,CAAE,KAAM,MAAA,EAAyC,KAAK,EAAI,EAAQ,IAAI,AAAC,GAE5H,OADA,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GACf,CACX,CACA,mBAAmB,CAAe,CAAE,CAChC,GAAI,IAAI,CAAC,gBAAgB,CACrB,MAAM,AAAI,UAAU,8CAGxB,OADA,IAAI,CAAC,gBAAgB,CAAG,EACjB,IAAI,AACf,CACA,2BAA2B,CAAuB,CAAE,CAChD,GAAI,IAAI,CAAC,kBAAkB,CACvB,MAAM,AAAI,UAAU,sDAGxB,OADA,IAAI,CAAC,kBAAkB,CAAG,EACnB,IAAI,AACf,CACA,+BAA+B,CAAG,CAAE,CAEhC,OADA,IAAI,CAAC,IAAI,CAAG,EACL,IAAI,AACf,CACA,MAAM,QAAQ,CAAO,CAAE,KACf,EAAI,EAAI,MA+BR,EA9BJ,GAAI,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CACxB,MAAM,IAAI,EAAA,UAAS,CAAE,wCAGzB,GADA,EAAU,CAAE,WAAY,MAAA,EAAyC,KAAK,EAAI,EAAQ,UAAU,AAAC,EACzF,AAA4B,IAA5B,IAAI,CAAC,WAAW,CAAC,MAAM,CAAQ,CAC/B,GAAM,CAAC,EAAU,CAAG,IAAI,CAAC,WAAW,CAC9B,EAAY,MAAM,GAAI,CAAA,EAAA,EAAA,gBAAe,AAAf,EAAiB,IAAI,CAAC,UAAU,EACvD,8BAA8B,CAAC,IAAI,CAAC,IAAI,EACxC,kBAAkB,CAAC,IAAI,CAAC,gBAAgB,EACxC,0BAA0B,CAAC,IAAI,CAAC,kBAAkB,EAClD,oBAAoB,CAAC,EAAU,iBAAiB,EAChD,OAAO,CAAC,EAAU,GAAG,CAAE,CAAE,GAAG,EAAU,OAAO,CAAE,GAAG,CAAO,AAAC,GAC3D,EAAM,CACN,WAAY,EAAU,UAAU,CAChC,GAAI,EAAU,EAAE,CAChB,WAAY,CAAC,CAAC,EAAE,CAChB,IAAK,EAAU,GAAG,AACtB,EAWA,OAVI,EAAU,GAAG,EACb,CAAA,EAAI,GAAG,CAAG,EAAU,GAAG,AAAH,EACpB,EAAU,SAAS,EACnB,CAAA,EAAI,SAAS,CAAG,EAAU,SAAS,AAAT,EAC1B,EAAU,WAAW,EACrB,CAAA,EAAI,WAAW,CAAG,EAAU,WAAW,AAAX,EAC5B,EAAU,aAAa,EACvB,CAAA,EAAI,UAAU,CAAC,EAAE,CAAC,aAAa,CAAG,EAAU,aAAa,AAAb,EAC5C,EAAU,MAAM,EAChB,CAAA,EAAI,UAAU,CAAC,EAAE,CAAC,MAAM,CAAG,EAAU,MAAM,AAAN,EAClC,CACX,CAEA,IAAK,IAAI,EAAI,EAAG,EAAI,IAAI,CAAC,WAAW,CAAC,MAAM,CAAE,IAAK,CAC9C,IAAM,EAAY,IAAI,CAAC,WAAW,CAAC,EAAE,CACrC,GAAI,CAAC,AAAA,CAAA,EAAA,EAAA,OAAS,AAAT,EAAW,IAAI,CAAC,gBAAgB,CAAE,IAAI,CAAC,kBAAkB,CAAE,EAAU,iBAAiB,EACvF,MAAM,IAAI,EAAA,UAAU,CAAC,uGAEzB,IAAM,EAAa,CACf,GAAG,IAAI,CAAC,gBAAgB,CACxB,GAAG,IAAI,CAAC,kBAAkB,CAC1B,GAAG,EAAU,iBAAiB,AAClC,EACM,CAAE,IAAA,CAAG,CAAE,CAAG,EAChB,GAAI,AAAe,UAAf,OAAO,GAAoB,CAAC,EAC5B,MAAM,IAAI,EAAA,UAAU,CAAC,6DAEzB,GAAI,AAAQ,QAAR,GAAiB,AAAQ,YAAR,EACjB,MAAM,IAAI,EAAA,UAAU,CAAC,oEAEzB,GAAI,AAA0B,UAA1B,OAAO,EAAW,GAAG,EAAiB,CAAC,EAAW,GAAG,CACrD,MAAM,IAAI,EAAA,UAAS,CAAE,wEAEzB,GAAK,EAGA,CAAA,GAAI,IAAQ,EAAW,GAAG,CAC3B,MAAM,IAAI,EAAA,UAAU,CAAC,wFADpB,MAFD,EAAM,EAAW,GAAG,CAMxB,GADA,AAAA,CAAA,EAAA,EAAA,OAAW,AAAX,EAAa,EAAA,UAAU,CAAE,IAAI,IAAO,EAAU,OAAO,CAAC,IAAI,CAAE,IAAI,CAAC,gBAAgB,CAAE,GAC/E,AAAmB,KAAA,IAAnB,EAAW,GAAG,EACV,CAAA,CAAC,IAAI,CAAC,gBAAgB,EAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,AAAH,EACjD,MAAM,IAAI,EAAA,UAAS,CAAE,uEAGjC,CACA,IAAM,EAAM,AAAA,CAAA,EAAA,EAAA,OAAU,AAAV,EAAY,GACpB,EAAM,CACN,WAAY,GACZ,GAAI,GACJ,WAAY,EAAE,CACd,IAAK,EACT,EACA,IAAK,IAAI,EAAI,EAAG,EAAI,IAAI,CAAC,WAAW,CAAC,MAAM,CAAE,IAAK,CAC9C,IAAM,EAAY,IAAI,CAAC,WAAW,CAAC,EAAE,CAC/B,EAAS,CAAC,EAChB,EAAI,UAAU,CAAC,IAAI,CAAC,GAMpB,IAAM,EAAM,AALO,CAAA,CACf,GAAG,IAAI,CAAC,gBAAgB,CACxB,GAAG,IAAI,CAAC,kBAAkB,CAC1B,GAAG,EAAU,iBAAiB,AAClC,CAAA,EACuB,GAAG,CAAC,UAAU,CAAC,SAAW,KAAO,EAAI,KAAA,EAC5D,GAAI,AAAM,IAAN,EAAS,CACT,IAAM,EAAY,MAAM,GAAI,CAAA,EAAA,EAAA,gBAAe,AAAf,EAAiB,IAAI,CAAC,UAAU,EACvD,8BAA8B,CAAC,IAAI,CAAC,IAAI,EACxC,uBAAuB,CAAC,GACxB,kBAAkB,CAAC,IAAI,CAAC,gBAAgB,EACxC,0BAA0B,CAAC,IAAI,CAAC,kBAAkB,EAClD,oBAAoB,CAAC,EAAU,iBAAiB,EAChD,0BAA0B,CAAC,CAAE,IAAA,CAAI,GACjC,OAAO,CAAC,EAAU,GAAG,CAAE,CACxB,GAAG,EAAU,OAAO,CACpB,GAAG,CAAO,CACV,CAAC,EAAA,WAAW,CAAC,CAAE,CAAA,CACnB,EACA,CAAA,EAAI,UAAU,CAAG,EAAU,UAAU,CACrC,EAAI,EAAE,CAAG,EAAU,EAAE,CACrB,EAAI,GAAG,CAAG,EAAU,GAAG,CACnB,EAAU,GAAG,EACb,CAAA,EAAI,GAAG,CAAG,EAAU,GAAG,AAAH,EACpB,EAAU,SAAS,EACnB,CAAA,EAAI,SAAS,CAAG,EAAU,SAAS,AAAT,EAC1B,EAAU,WAAW,EACrB,CAAA,EAAI,WAAW,CAAG,EAAU,WAAW,AAAX,EAChC,EAAO,aAAa,CAAG,EAAU,aAAa,CAC1C,EAAU,MAAM,EAChB,CAAA,EAAO,MAAM,CAAG,EAAU,MAAM,AAAN,EAC9B,QACJ,CACA,GAAM,CAAE,aAAA,CAAY,CAAE,WAAA,CAAU,CAAE,CAAG,MAAM,AAAA,CAAA,EAAA,EAAA,OAAmB,AAAnB,EAAsB,AAAC,CAAA,AAAsC,OAAtC,CAAA,EAAK,EAAU,iBAAgB,AAAhB,GAA+B,AAAO,KAAK,IAAZ,EAAgB,KAAK,EAAI,EAAG,GAAE,AAAF,GACtI,CAAA,AAAgC,OAAhC,CAAA,EAAK,IAAI,CAAC,gBAAe,AAAf,GAA8B,AAAO,KAAK,IAAZ,EAAgB,KAAK,EAAI,EAAG,GAAE,AAAF,GACpE,CAAA,AAAkC,OAAlC,CAAA,EAAK,IAAI,CAAC,kBAAiB,AAAjB,GAAgC,AAAO,KAAK,IAAZ,EAAgB,KAAK,EAAI,EAAG,GAAE,AAAF,EAAM,EAAK,EAAU,GAAG,CAAE,EAAK,CAAE,IAAA,CAAI,EACjH,CAAA,EAAO,aAAa,CAAG,AAAA,CAAA,EAAA,EAAA,MAAQ,AAAR,EAAU,GAC7B,CAAA,EAAU,iBAAiB,EAAI,CAAA,GAC/B,CAAA,EAAO,MAAM,CAAG,CAAE,GAAG,EAAU,iBAAiB,CAAE,GAAG,CAAU,AAAC,CAAA,CACxE,CACA,OAAO,CACX,CACJ,C,E,C,0B,Q,uB,Q,mB,Q,2B,Q,sC,Q,6B,Q,6B,Q,iD,O,E,C,M,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GCxKa,EAAA,MAAA,CAAA,EAAA,cAAA,IAAA,GACb,EAAA,MAAA,CAAA,EAAA,mBAAA,IAAa,GAVb,IAAA,EAAA,EAAA,8BACA,EAAA,EAAA,4B,E,E,c,C,GACA,EAAA,EAAA,yBACA,EAAA,EAAA,mB,E,E,c,C,GACA,EAAA,EAAA,uC,E,E,c,C,GACA,EAAA,EAAA,wBACA,EAAA,EAAA,4B,E,E,c,C,GACA,EAAA,EAAA,6BACA,EAAA,EAAA,8B,E,E,c,C,GACO,IAAM,EAAc,QACpB,OAAM,EACT,YAAY,CAAS,CAAE,CACnB,GAAI,CAAE,CAAA,aAAqB,UAAA,EACvB,MAAM,AAAI,UAAU,8CAExB,CAAA,IAAI,CAAC,UAAU,CAAG,CACtB,CACA,2BAA2B,CAAU,CAAE,CACnC,GAAI,IAAI,CAAC,wBAAwB,CAC7B,MAAM,AAAI,UAAU,sDAGxB,OADA,IAAI,CAAC,wBAAwB,CAAG,EACzB,IAAI,AACf,CACA,mBAAmB,CAAe,CAAE,CAChC,GAAI,IAAI,CAAC,gBAAgB,CACrB,MAAM,AAAI,UAAU,8CAGxB,OADA,IAAI,CAAC,gBAAgB,CAAG,EACjB,IAAI,AACf,CACA,2BAA2B,CAAuB,CAAE,CAChD,GAAI,IAAI,CAAC,wBAAwB,CAC7B,MAAM,AAAI,UAAU,sDAGxB,OADA,IAAI,CAAC,wBAAwB,CAAG,EACzB,IAAI,AACf,CACA,qBAAqB,CAAiB,CAAE,CACpC,GAAI,IAAI,CAAC,kBAAkB,CACvB,MAAM,AAAI,UAAU,gDAGxB,OADA,IAAI,CAAC,kBAAkB,CAAG,EACnB,IAAI,AACf,CACA,+BAA+B,CAAG,CAAE,CAEhC,OADA,IAAI,CAAC,IAAI,CAAG,EACL,IAAI,AACf,CACA,wBAAwB,CAAG,CAAE,CACzB,GAAI,IAAI,CAAC,IAAI,CACT,MAAM,AAAI,UAAU,mDAGxB,OADA,IAAI,CAAC,IAAI,CAAG,EACL,IAAI,AACf,CACA,wBAAwB,CAAE,CAAE,CACxB,GAAI,IAAI,CAAC,GAAG,CACR,MAAM,AAAI,UAAU,mDAGxB,OADA,IAAI,CAAC,GAAG,CAAG,EACJ,IAAI,AACf,CACA,MAAM,QAAQ,CAAG,CAAE,CAAO,CAAE,KA4BpB,EAWA,EAwBA,EACA,EACA,EAcA,EACA,EA/EJ,GAAI,CAAC,IAAI,CAAC,gBAAgB,EAAI,CAAC,IAAI,CAAC,kBAAkB,EAAI,CAAC,IAAI,CAAC,wBAAwB,CACpF,MAAM,IAAI,EAAA,UAAU,CAAC,gHAEzB,GAAI,CAAC,AAAA,CAAA,EAAA,EAAA,OAAS,AAAT,EAAW,IAAI,CAAC,gBAAgB,CAAE,IAAI,CAAC,kBAAkB,CAAE,IAAI,CAAC,wBAAwB,EACzF,MAAM,IAAI,EAAA,UAAU,CAAC,uGAEzB,IAAM,EAAa,CACf,GAAG,IAAI,CAAC,gBAAgB,CACxB,GAAG,IAAI,CAAC,kBAAkB,CAC1B,GAAG,IAAI,CAAC,wBAAwB,AACpC,EAEA,GADA,AAAA,CAAA,EAAA,EAAA,OAAY,AAAZ,EAAa,EAAA,UAAU,CAAE,IAAI,IAAO,MAAA,EAAyC,KAAK,EAAI,EAAQ,IAAI,CAAE,IAAI,CAAC,gBAAgB,CAAE,GACvH,AAAmB,KAAA,IAAnB,EAAW,GAAG,CAAgB,CAC9B,GAAI,CAAC,IAAI,CAAC,gBAAgB,EAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CACpD,MAAM,IAAI,EAAA,UAAS,CAAE,wEAEzB,GAAI,AAAmB,QAAnB,EAAW,GAAG,CACd,MAAM,IAAI,EAAA,gBAAgB,CAAC,uEAEnC,CACA,GAAM,CAAE,IAAA,CAAG,CAAE,IAAA,CAAG,CAAE,CAAG,EACrB,GAAI,AAAe,UAAf,OAAO,GAAoB,CAAC,EAC5B,MAAM,IAAI,EAAA,UAAU,CAAC,6DAEzB,GAAI,AAAe,UAAf,OAAO,GAAoB,CAAC,EAC5B,MAAM,IAAI,EAAA,UAAU,CAAC,wEAGzB,GAAI,AAAQ,QAAR,EACA,CAAA,GAAI,IAAI,CAAC,IAAI,CACT,MAAM,AAAI,UAAU,wEADxB,MAIC,GAAI,AAAQ,YAAR,GACD,IAAI,CAAC,IAAI,CACT,MAAM,AAAI,UAAU,2EAI5B,EACI,IAAI,EACH,CAAA,CAAE,IAAA,CAAG,CAAE,aAAA,CAAY,CAAE,WAAA,CAAU,CAAE,CAAG,MAAM,AAAA,CAAA,EAAA,EAAA,OAAoB,AAApB,EAAqB,EAAK,EAAK,EAAK,IAAI,CAAC,IAAI,CAAE,IAAI,CAAC,wBAAwB,CAAA,EACnH,IACI,GAAW,KAAe,EACrB,IAAI,CAAC,kBAAkB,CAIxB,IAAI,CAAC,kBAAkB,CAAG,CAAE,GAAG,IAAI,CAAC,kBAAkB,CAAE,GAAG,CAAU,AAAC,EAHtE,IAAI,CAAC,oBAAoB,CAAC,GAOzB,IAAI,CAAC,gBAAgB,CAItB,IAAI,CAAC,gBAAgB,CAAG,CAAE,GAAG,IAAI,CAAC,gBAAgB,CAAE,GAAG,CAAU,AAAC,EAHlE,IAAI,CAAC,kBAAkB,CAAC,GAOxC,CAoBA,GAnBA,IAAI,CAAC,GAAG,EAAK,CAAA,IAAI,CAAC,GAAG,CAAG,AAAA,CAAA,EAAA,EAAA,OAAU,AAAV,EAAW,EAAA,EAK/B,EADA,IAAI,CAAC,gBAAgB,CACH,AAAA,CAAA,EAAA,EAAA,OAAO,AAAP,EAAQ,MAAM,CAAC,AAAA,CAAA,EAAA,EAAA,MAAS,AAAT,EAAU,KAAK,SAAS,CAAC,IAAI,CAAC,gBAAgB,IAG7D,AAAA,CAAA,EAAA,EAAA,OAAO,AAAP,EAAQ,MAAM,CAAC,IAEjC,IAAI,CAAC,IAAI,EACT,EAAY,AAAA,CAAA,EAAA,EAAA,MAAQ,AAAR,EAAU,IAAI,CAAC,IAAI,EAC/B,EAAiB,AAAA,CAAA,EAAA,EAAA,MAAK,AAAL,EAAO,EAAiB,AAAA,CAAA,EAAA,EAAA,OAAM,AAAN,EAAQ,MAAM,CAAC,KAAM,AAAA,CAAA,EAAA,EAAA,OAAM,AAAN,EAAQ,MAAM,CAAC,KAG7E,EAAiB,EAIjB,AAAmB,QAAnB,EAAW,GAAG,CAAY,CAC1B,IAAM,EAAW,MAAM,AAAC,CAAA,AAAC,CAAA,MAAA,EAAyC,KAAK,EAAI,EAAQ,UAAU,AAAV,GAAe,CAAA,EAAA,EAAA,OAAO,AAAP,CAAO,EAAE,IAAI,CAAC,UAAU,EACzH,CAAA,CAAE,WAAA,CAAU,CAAE,IAAA,CAAG,CAAE,CAAG,MAAM,AAAA,CAAA,EAAA,EAAA,OAAO,AAAP,EAAQ,EAAK,EAAU,EAAK,IAAI,CAAC,GAAG,CAAE,EAAA,CACvE,KAGK,CAAA,CAAE,WAAA,CAAU,CAAE,IAAA,CAAG,CAAE,CAAG,MAAM,AAAA,CAAA,EAAA,EAAA,OAAM,AAAN,EAAQ,EAAK,IAAI,CAAC,UAAU,CAAE,EAAK,IAAI,CAAC,GAAG,CAAE,EAAA,EAE9E,IAAM,EAAM,CACR,WAAY,AAAA,CAAA,EAAA,EAAA,MAAQ,AAAR,EAAU,GACtB,GAAI,AAAA,CAAA,EAAA,EAAA,MAAQ,AAAR,EAAU,IAAI,CAAC,GAAG,EACtB,IAAK,AAAA,CAAA,EAAA,EAAA,MAAQ,AAAR,EAAU,EACnB,EAgBA,OAfI,GACA,CAAA,EAAI,aAAa,CAAG,AAAA,CAAA,EAAA,EAAA,MAAS,AAAT,EAAU,EADlC,EAGI,GACA,CAAA,EAAI,GAAG,CAAG,CADd,EAGI,IAAI,CAAC,gBAAgB,EACrB,CAAA,EAAI,SAAS,CAAG,AAAA,CAAA,EAAA,EAAA,OAAM,AAAN,EAAQ,MAAM,CAAC,EADnC,EAGI,IAAI,CAAC,wBAAwB,EAC7B,CAAA,EAAI,WAAW,CAAG,IAAI,CAAC,wBAAwB,AAAxB,EAEvB,IAAI,CAAC,kBAAkB,EACvB,CAAA,EAAI,MAAM,CAAG,IAAI,CAAC,kBAAkB,AAAlB,EAEf,CACX,CACJ,C,E,C,6B,Q,2B,Q,wB,Q,kB,Q,sC,Q,uB,Q,2B,Q,4B,Q,6B,Q,iD,O,E,C,M,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GC9KA,IAAA,EAAA,EAAA,uBACA,EAAA,EAAA,wBACA,EAAA,EAAA,yBACA,EAAA,EAAA,uBACA,EAAA,EAAA,2BACA,EAAA,EAAA,iB,E,E,c,C,GACA,EAAA,EAAA,qBACA,EAAA,EAAA,oBACA,EAAA,EAAA,uB,E,E,c,C,GACA,EAAA,EAAA,iBACA,eAAe,EAAqB,CAAG,CAAE,CAAG,CAAE,CAAG,CAAE,CAAW,CAAE,EAAqB,CAAC,CAAC,EACnF,IAAI,EACA,EACA,EAEJ,OADA,AAAA,CAAA,EAAA,EAAA,OAAW,AAAX,EAAa,EAAK,EAAK,WACf,GACJ,IAAK,MACD,EAAM,EACN,KAEJ,KAAK,UACL,IAAK,iBACL,IAAK,iBACL,IAAK,iBAAkB,CACnB,GAAI,CAAC,EAAK,WAAW,CAAC,GAClB,MAAM,IAAI,EAAA,gBAAgB,CAAC,yFAE/B,GAAM,CAAE,IAAA,CAAG,CAAE,IAAA,CAAG,CAAE,CAAG,EACjB,CAAE,IAAK,CAAY,CAAE,CAAG,CAC5B,CAAA,GAAiB,CAAA,EAAe,AAAC,CAAA,MAAM,EAAK,WAAW,CAAC,EAAA,EAAM,UAAS,AAAT,EAC9D,GAAM,CAAE,EAAA,CAAC,CAAE,EAAA,CAAC,CAAE,IAAA,CAAG,CAAE,IAAA,CAAG,CAAE,CAAG,MAAM,AAAA,CAAA,EAAA,EAAA,SAAQ,AAAR,EAAU,GACrC,EAAe,MAAM,EAAK,SAAS,CAAC,EAAK,EAAc,AAAQ,YAAR,EAAoB,EAAM,EAAK,AAAQ,YAAR,EAAoB,AAAA,CAAA,EAAA,EAAA,SAAQ,AAAR,EAAU,GAAO,SAAS,EAAI,KAAK,CAAC,GAAI,IAAK,IAAK,EAAK,GAQvK,GAPA,EAAa,CAAE,IAAK,CAAE,EAAA,EAAG,IAAA,EAAK,IAAA,CAAI,CAAE,EACxB,OAAR,GACA,CAAA,EAAW,GAAG,CAAC,CAAC,CAAG,CAAA,EACnB,GACA,CAAA,EAAW,GAAG,CAAG,AAAA,CAAA,EAAA,EAAA,MAAS,AAAT,EAAU,EAD/B,EAEI,GACA,CAAA,EAAW,GAAG,CAAG,AAAA,CAAA,EAAA,EAAA,MAAS,AAAT,EAAU,EAD/B,EAEI,AAAQ,YAAR,EAAmB,CACnB,EAAM,EACN,KACJ,CACA,EAAM,GAAe,AAAA,CAAA,EAAA,EAAA,OAAU,AAAV,EAAY,GACjC,IAAM,EAAQ,EAAI,KAAK,CAAC,IACxB,EAAe,MAAM,AAAA,CAAA,EAAA,EAAA,IAAK,AAAL,EAAM,EAAO,EAAc,GAChD,KACJ,CACA,IAAK,SACL,IAAK,WACL,IAAK,eACL,IAAK,eACL,IAAK,eACD,EAAM,GAAe,AAAA,CAAA,EAAA,EAAA,OAAU,AAAV,EAAY,GACjC,EAAe,MAAM,AAAA,CAAA,EAAA,EAAA,OAAK,AAAL,EAAM,EAAK,EAAK,GACrC,KAEJ,KAAK,qBACL,IAAK,qBACL,IAAK,qBAAsB,CACvB,EAAM,GAAe,AAAA,CAAA,EAAA,EAAA,OAAU,AAAV,EAAY,GACjC,GAAM,CAAE,IAAA,CAAG,CAAE,IAAA,CAAG,CAAE,CAAG,EACpB,CAAA,CAAE,aAAA,CAAY,CAAE,GAAG,EAAY,CAAG,MAAM,AAAA,CAAA,EAAA,EAAA,OAAM,AAAN,EAAQ,EAAK,EAAK,EAAK,EAAK,EAAA,EACrE,KACJ,CACA,IAAK,SACL,IAAK,SACL,IAAK,SACD,EAAM,GAAe,AAAA,CAAA,EAAA,EAAA,OAAU,AAAV,EAAY,GACjC,EAAe,MAAM,AAAA,CAAA,EAAA,EAAA,IAAK,AAAL,EAAM,EAAK,EAAK,GACrC,KAEJ,KAAK,YACL,IAAK,YACL,IAAK,YAAa,CACd,EAAM,GAAe,AAAA,CAAA,EAAA,EAAA,OAAU,AAAV,EAAY,GACjC,GAAM,CAAE,GAAA,CAAE,CAAE,CAAG,EACd,CAAA,CAAE,aAAA,CAAY,CAAE,GAAG,EAAY,CAAG,MAAM,AAAA,CAAA,EAAA,EAAA,IAAO,AAAP,EAAS,EAAK,EAAK,EAAK,EAAA,EACjE,KACJ,CACA,QACI,MAAM,IAAI,EAAA,gBAAe,CAAE,4DAEnC,CACA,MAAO,CAAE,IAAA,EAAK,aAAA,EAAc,WAAA,CAAW,CAC3C,CACe,EAAA,OAAA,CAAA,C,E,C,sB,Q,uB,Q,wB,Q,sB,Q,0B,Q,gB,Q,oB,Q,mB,Q,sB,Q,gB,Q,iD,O,E,C,Q,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GCnFf,EAAA,MAAA,CAAA,EAAA,aAAA,IAAsB,GAGtB,EAAA,MAAA,CAAA,EAAA,cAAA,IAAsB,GAGtB,EAAA,MAAA,CAAA,EAAA,YAAA,IAAsB,GATtB,IAAA,EAAA,EAAA,sBAEA,EAAA,EAAA,4B,E,E,c,C,GACO,eAAe,EAAW,CAAG,EAChC,MAAO,AAAA,CAAA,EAAA,EAAA,MAAW,AAAX,EAAa,EACxB,CACO,eAAe,EAAY,CAAG,EACjC,MAAO,AAAA,CAAA,EAAA,EAAA,OAAY,AAAZ,EAAc,EACzB,CACO,eAAe,EAAU,CAAG,EAC/B,MAAO,AAAA,CAAA,EAAA,EAAA,OAAO,AAAP,EAAS,EACpB,C,E,C,qB,Q,2B,Q,iD,O,E,C,M,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GCXA,IAAA,EAAA,EAAA,kB,E,E,c,C,GACA,EAAA,EAAA,+B,E,E,c,C,GACA,EAAA,EAAA,kBACA,EAAA,EAAA,oBACA,IAAM,EAAW,MAAO,IACpB,GAAI,aAAe,WACf,MAAO,CACH,IAAK,MACL,EAAG,AAAA,CAAA,EAAA,EAAA,MAAQ,AAAR,EAAU,EACjB,EAEJ,GAAI,CAAC,AAAA,CAAA,EAAA,EAAA,WAAW,AAAX,EAAY,GACb,MAAM,AAAI,UAAU,AAAA,CAAA,EAAA,EAAA,OAAe,AAAf,EAAgB,KAAQ,EAAA,KAAK,CAAE,eAEvD,GAAI,CAAC,EAAI,WAAW,CAChB,MAAM,AAAI,UAAU,yDAExB,GAAM,CAAE,IAAA,CAAG,CAAE,QAAA,CAAO,CAAE,IAAA,CAAG,CAAE,IAAA,CAAG,CAAE,GAAG,EAAK,CAAG,MAAM,AAAA,CAAA,EAAA,EAAA,OAAK,AAAL,EAAO,MAAM,CAAC,SAAS,CAAC,MAAO,GAChF,OAAO,CACX,CACe,CAAA,EAAA,OAAA,CAAA,C,E,C,iB,Q,8B,Q,iB,Q,mB,Q,iD,O,E,C,M,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GCjBf,EAAA,MAAA,CAAA,EAAA,gBAAA,IAAsB,GAHtB,IAAA,EAAA,EAAA,0BACA,EAAA,EAAA,wBACA,EAAA,EAAA,6BACO,eAAe,EAAc,CAAG,CAAE,CAAG,CAAE,CAAO,EAIjD,GAHI,aAAe,YACf,CAAA,EAAM,AAAA,CAAA,EAAA,EAAA,OAAM,AAAN,EAAQ,MAAM,CAAC,EADzB,EAGI,AAAe,UAAf,OAAO,EACP,MAAM,IAAI,EAAA,UAAU,CAAC,8CAEzB,GAAM,CAAE,EAAG,CAAe,CAAE,EAAG,CAAO,CAAE,EAAG,CAAS,CAAE,OAAA,CAAM,CAAE,CAAG,EAAI,KAAK,CAAC,KAC3E,GAAI,AAAW,IAAX,EACA,MAAM,IAAI,EAAA,UAAU,CAAC,uBAEzB,IAAM,EAAW,MAAM,AAAA,CAAA,EAAA,EAAA,eAAc,AAAd,EAAgB,CAAE,QAAA,EAAS,UAAW,EAAiB,UAAA,CAAU,EAAG,EAAK,GAC1F,EAAS,CAAE,QAAS,EAAS,OAAO,CAAE,gBAAiB,EAAS,eAAe,AAAC,QACtF,AAAI,AAAe,YAAf,OAAO,EACA,CAAE,GAAG,CAAM,CAAE,IAAK,EAAS,GAAG,AAAC,EAEnC,CACX,C,E,C,yB,Q,uB,Q,4B,Q,iD,O,E,C,Q,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GCXA,EAAA,MAAA,CAAA,EAAA,kBAAA,IAAsB,GATtB,IAAA,EAAA,EAAA,8BACA,EAAA,EAAA,2B,E,E,c,C,GACA,EAAA,EAAA,wBACA,EAAA,EAAA,6BACA,EAAA,EAAA,4B,E,E,c,C,GACA,EAAA,EAAA,0B,E,E,c,C,GACA,EAAA,EAAA,+B,E,E,c,C,GACA,EAAA,EAAA,8B,E,E,c,C,GACA,EAAA,EAAA,oC,E,E,c,C,GACO,eAAe,EAAgB,CAAG,CAAE,CAAG,CAAE,CAAO,MAC/C,MAmEA,EAWA,EA7EJ,GAAI,CAAC,AAAA,CAAA,EAAA,EAAA,OAAO,AAAP,EAAS,GACV,MAAM,IAAI,EAAA,UAAS,CAAE,mCAEzB,GAAI,AAAkB,KAAA,IAAlB,EAAI,SAAS,EAAkB,AAAe,KAAA,IAAf,EAAI,MAAM,CACzC,MAAM,IAAI,EAAA,UAAS,CAAE,yEAEzB,GAAI,AAAkB,KAAA,IAAlB,EAAI,SAAS,EAAkB,AAAyB,UAAzB,OAAO,EAAI,SAAS,CACnD,MAAM,IAAI,EAAA,UAAS,CAAE,uCAEzB,GAAI,AAAgB,KAAA,IAAhB,EAAI,OAAO,CACX,MAAM,IAAI,EAAA,UAAU,CAAC,uBAEzB,GAAI,AAAyB,UAAzB,OAAO,EAAI,SAAS,CACpB,MAAM,IAAI,EAAA,UAAU,CAAC,2CAEzB,GAAI,AAAe,KAAA,IAAf,EAAI,MAAM,EAAkB,CAAC,AAAA,CAAA,EAAA,EAAA,OAAO,AAAP,EAAS,EAAI,MAAM,EAChD,MAAM,IAAI,EAAA,UAAS,CAAE,yCAEzB,IAAI,EAAa,CAAC,EAClB,GAAI,EAAI,SAAS,CACb,GAAI,CACA,IAAM,EAAkB,AAAA,CAAA,EAAA,EAAA,MAAS,AAAT,EAAU,EAAI,SAAS,EAC/C,EAAa,KAAK,KAAK,CAAC,AAAA,CAAA,EAAA,EAAA,OAAM,AAAN,EAAQ,MAAM,CAAC,GAC3C,CACA,MAAO,EAAI,CACP,MAAM,IAAI,EAAA,UAAS,CAAE,kCACzB,CAEJ,GAAI,CAAC,AAAA,CAAA,EAAA,EAAA,OAAS,AAAT,EAAW,EAAY,EAAI,MAAM,EAClC,MAAM,IAAI,EAAA,UAAS,CAAE,6EAEzB,IAAM,EAAa,CACf,GAAG,CAAU,CACb,GAAG,EAAI,MAAM,AACjB,EACM,EAAa,AAAA,CAAA,EAAA,EAAA,OAAY,AAAZ,EAAa,EAAA,UAAS,CAAG,IAAI,IAAI,CAAC,CAAC,MAAO,CAAA,EAAK,CAAC,EAAG,MAAA,EAAyC,KAAK,EAAI,EAAQ,IAAI,CAAE,EAAY,GAC9I,EAAM,CAAA,EACV,GAAI,EAAW,GAAG,CAAC,QAEX,AAAe,WAAf,MADJ,CAAA,EAAM,EAAW,GAAG,AAAH,EAEb,MAAM,IAAI,EAAA,UAAU,CAAC,2EAG7B,GAAM,CAAE,IAAA,CAAG,CAAE,CAAG,EAChB,GAAI,AAAe,UAAf,OAAO,GAAoB,CAAC,EAC5B,MAAM,IAAI,EAAA,UAAU,CAAC,6DAEzB,IAAM,EAAa,GAAW,AAAA,CAAA,EAAA,EAAA,OAAkB,AAAlB,EAAmB,aAAc,EAAQ,UAAU,EACjF,GAAI,GAAc,CAAC,EAAW,GAAG,CAAC,GAC9B,MAAM,IAAI,EAAA,iBAAgB,CAAE,kDAEhC,GAAI,EACA,CAAA,GAAI,AAAuB,UAAvB,OAAO,EAAI,OAAO,CAClB,MAAM,IAAI,EAAA,UAAU,CAAC,+BADzB,MAIC,GAAI,AAAuB,UAAvB,OAAO,EAAI,OAAO,EAAiB,CAAE,CAAA,EAAI,OAAO,YAAY,UAAA,EACjE,MAAM,IAAI,EAAA,UAAS,CAAE,0DAEzB,IAAI,EAAc,CAAA,CACC,CAAA,YAAf,OAAO,IACP,EAAM,MAAM,EAAI,EAAY,GAC5B,EAAc,CAAA,GAElB,AAAA,CAAA,EAAA,EAAA,OAAW,AAAX,EAAa,EAAK,EAAK,UACvB,IAAM,EAAO,AAAA,CAAA,EAAA,EAAA,MAAK,AAAL,EAAO,AAAA,CAAA,EAAA,EAAA,OAAO,AAAP,EAAQ,MAAM,CAAE,AAAwB,OAAxB,CAAA,EAAK,EAAI,SAAQ,AAAR,GAAuB,AAAO,KAAK,IAAZ,EAAgB,EAAK,IAAK,AAAA,CAAA,EAAA,EAAA,OAAO,AAAP,EAAQ,MAAM,CAAC,KAAM,AAAuB,UAAvB,OAAO,EAAI,OAAO,CAAgB,AAAA,CAAA,EAAA,EAAA,OAAM,AAAN,EAAQ,MAAM,CAAC,EAAI,OAAO,EAAI,EAAI,OAAO,EAE9L,GAAI,CACA,EAAY,AAAA,CAAA,EAAA,EAAA,MAAS,AAAT,EAAU,EAAI,SAAS,CACvC,CACA,MAAO,EAAI,CACP,MAAM,IAAI,EAAA,UAAS,CAAE,2CACzB,CAEA,GAAI,CADa,MAAM,AAAA,CAAA,EAAA,EAAA,OAAM,AAAN,EAAO,EAAK,EAAK,EAAW,GAE/C,MAAM,IAAI,EAAA,8BAA8B,CAG5C,GAAI,EACA,GAAI,CACA,EAAU,AAAA,CAAA,EAAA,EAAA,MAAS,AAAT,EAAU,EAAI,OAAO,CACnC,CACA,MAAO,EAAI,CACP,MAAM,IAAI,EAAA,UAAS,CAAE,yCACzB,MAGA,EADK,AAAuB,UAAvB,OAAO,EAAI,OAAO,CACb,AAAA,CAAA,EAAA,EAAA,OAAM,AAAN,EAAQ,MAAM,CAAC,EAAI,OAAO,EAG1B,EAAI,OAAO,CAEzB,IAAM,EAAS,CAAE,QAAA,CAAQ,QAOzB,CANsB,KAAA,IAAlB,EAAI,SAAS,EACb,CAAA,EAAO,eAAe,CAAG,CAD7B,EAGmB,KAAA,IAAf,EAAI,MAAM,EACV,CAAA,EAAO,iBAAiB,CAAG,EAAI,MAAM,AAAN,EAE/B,GACO,CAAE,GAAG,CAAM,CAAE,IAAA,CAAI,EAErB,CACX,C,E,C,6B,Q,0B,Q,uB,Q,4B,Q,2B,Q,yB,Q,8B,Q,6B,Q,mC,Q,iD,O,E,C,M,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GClHA,IAAA,EAAA,EAAA,mB,E,E,c,C,GACA,EAAA,EAAA,kB,E,E,c,C,GACA,EAAA,EAAA,yB,E,E,c,C,GACA,EAAA,EAAA,4B,E,E,c,C,GACA,IAAM,EAAS,MAAO,EAAK,EAAK,EAAW,KACvC,IAAM,EAAY,MAAM,AAAA,CAAA,EAAA,EAAA,OAAW,AAAX,EAAa,EAAK,EAAK,UAC/C,AAAA,CAAA,EAAA,EAAA,OAAc,AAAd,EAAe,EAAK,GACpB,IAAM,EAAY,AAAA,CAAA,EAAA,EAAA,OAAe,AAAf,EAAgB,EAAK,EAAU,SAAS,EAC1D,GAAI,CACA,OAAO,MAAM,AAAA,CAAA,EAAA,EAAA,OAAM,AAAN,EAAO,MAAM,CAAC,MAAM,CAAC,EAAW,EAAW,EAAW,EACvE,CACA,MAAO,EAAI,CACP,MAAO,CAAA,CACX,CACJ,CACe,CAAA,EAAA,OAAA,CAAA,C,E,C,kB,Q,iB,Q,wB,Q,2B,Q,iD,O,E,C,Q,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GCdS,EAAA,MAAA,CAAA,EAAA,UAAA,IAAA,GADxB,IAAA,EAAA,EAAA,qBACe,SAAS,EAAU,CAAG,CAAE,CAAS,EAC5C,IAAM,EAAO,CAAC,IAAI,EAAE,EAAI,KAAK,CAAC,IAAI,CAAC,CACnC,OAAQ,GACJ,IAAK,QACL,IAAK,QACL,IAAK,QACD,MAAO,CAAE,KAAA,EAAM,KAAM,MAAO,CAChC,KAAK,QACL,IAAK,QACL,IAAK,QACD,MAAO,CAAE,KAAA,EAAM,KAAM,UAAW,WAAY,EAAI,KAAK,CAAC,KAAO,CAAE,CACnE,KAAK,QACL,IAAK,QACL,IAAK,QACD,MAAO,CAAE,KAAA,EAAM,KAAM,mBAAoB,CAC7C,KAAK,QACL,IAAK,QACL,IAAK,QACD,MAAO,CAAE,KAAA,EAAM,KAAM,QAAS,WAAY,EAAU,UAAU,AAAC,CACnE,KAAK,QACD,MAAO,CAAE,KAAM,EAAU,IAAI,AAAC,CAClC,SACI,MAAM,IAAI,EAAA,gBAAgB,CAAC,CAAC,IAAI,EAAE,EAAI,2DAA2D,CAAC,CAC1G,CACJ,C,E,C,oB,Q,iD,O,E,C,M,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GCrBwB,EAAA,MAAA,CAAA,EAAA,UAAA,IAAA,GAJxB,IAAA,EAAA,EAAA,kB,E,E,c,C,GACA,EAAA,EAAA,wBACA,EAAA,EAAA,+B,E,E,c,C,GACA,EAAA,EAAA,oBACe,SAAS,EAAa,CAAG,CAAE,CAAG,CAAE,CAAK,EAChD,GAAI,AAAA,CAAA,EAAA,EAAA,WAAW,AAAX,EAAY,GAEZ,MADA,AAAA,CAAA,EAAA,EAAA,iBAAgB,AAAhB,EAAkB,EAAK,EAAK,GACrB,EAEX,GAAI,aAAe,WAAY,CAC3B,GAAI,CAAC,EAAI,UAAU,CAAC,MAChB,MAAM,AAAI,UAAU,AAAA,CAAA,EAAA,EAAA,OAAc,AAAd,EAAgB,KAAQ,EAAA,KAAK,GAErD,MAAO,AAAA,CAAA,EAAA,EAAA,OAAK,AAAL,EAAO,MAAM,CAAC,SAAS,CAAC,MAAO,EAAK,CAAE,KAAM,CAAC,IAAI,EAAE,EAAI,KAAK,CAAC,IAAI,CAAC,CAAE,KAAM,MAAO,EAAG,CAAA,EAAO,CAAC,EAAM,CAC7G,CACA,MAAM,AAAI,UAAU,AAAA,CAAA,EAAA,EAAA,OAAc,AAAd,EAAgB,KAAQ,EAAA,KAAI,CAAG,cACvD,C,E,C,iB,Q,uB,Q,8B,Q,mB,Q,iD,O,E,C,M,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GCbA,EAAA,MAAA,CAAA,EAAA,gBAAA,IAAsB,GAHtB,IAAA,EAAA,EAAA,0BACA,EAAA,EAAA,wBACA,EAAA,EAAA,0B,E,E,c,C,GACO,eAAe,EAAc,CAAG,CAAE,CAAG,CAAE,CAAO,EACjD,GAAI,CAAC,AAAA,CAAA,EAAA,EAAA,OAAO,AAAP,EAAS,GACV,MAAM,IAAI,EAAA,UAAS,CAAE,iCAEzB,GAAI,CAAC,MAAM,OAAO,CAAC,EAAI,UAAU,GAAK,CAAC,EAAI,UAAU,CAAC,KAAK,CAAC,EAAA,OAAQ,EAChE,MAAM,IAAI,EAAA,UAAU,CAAC,4CAEzB,IAAK,IAAM,KAAa,EAAI,UAAU,CAClC,GAAI,CACA,OAAO,MAAM,AAAA,CAAA,EAAA,EAAA,eAAc,AAAd,EAAgB,CACzB,OAAQ,EAAU,MAAM,CACxB,QAAS,EAAI,OAAO,CACpB,UAAW,EAAU,SAAS,CAC9B,UAAW,EAAU,SAAS,AAClC,EAAG,EAAK,EACZ,CACA,MAAO,EAAI,CACX,CAEJ,MAAM,IAAI,EAAA,8BAA8B,AAC5C,C,E,C,yB,Q,uB,Q,yB,Q,iD,O,E,C,Q,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GCpBA,EAAA,MAAA,CAAA,EAAA,YAAA,IAAsB,GAHtB,IAAA,EAAA,EAAA,4BACA,EAAA,EAAA,4B,E,E,c,C,GACA,EAAA,EAAA,qBACO,eAAe,EAAU,CAAG,CAAE,CAAG,CAAE,CAAO,EAC7C,IAAI,EACJ,IAAM,EAAW,MAAM,AAAA,CAAA,EAAA,EAAA,aAAY,AAAZ,EAAc,EAAK,EAAK,GAC/C,GAAK,AAAC,CAAA,AAAwC,OAAxC,CAAA,EAAK,EAAS,eAAe,CAAC,IAAG,AAAH,GAAkB,AAAO,KAAK,IAAZ,EAAgB,KAAK,EAAI,EAAG,QAAQ,CAAC,MAAA,GAAW,AAAiC,CAAA,IAAjC,EAAS,eAAe,CAAC,GAAG,CAC9H,MAAM,IAAI,EAAA,UAAS,CAAE,uCAGzB,IAAM,EAAS,CAAE,QADD,AAAA,CAAA,EAAA,EAAA,OAAU,AAAV,EAAW,EAAS,eAAe,CAAE,EAAS,OAAO,CAAE,GAC7C,gBAAiB,EAAS,eAAe,AAAC,QACpE,AAAI,AAAe,YAAf,OAAO,EACA,CAAE,GAAG,CAAM,CAAE,IAAK,EAAS,GAAG,AAAC,EAEnC,CACX,C,E,C,2B,Q,2B,Q,oB,Q,iD,O,E,C,M,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GCfA,IAAA,EAAA,EAAA,qBACA,EAAA,EAAA,qBACA,EAAA,EAAA,c,E,E,c,C,GACA,EAAA,EAAA,a,E,E,c,C,GACA,EAAA,EAAA,kB,E,E,c,C,GACA,IAAM,EAAe,AAAC,GAAU,EAAM,WAAW,GAAG,OAAO,CAAC,iBAAkB,IACxE,EAAwB,CAAC,EAAY,IACvC,AAAI,AAAsB,UAAtB,OAAO,EACA,EAAU,QAAQ,CAAC,KAE1B,MAAM,OAAO,CAAC,IACP,EAAU,IAAI,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,IAI9C,CAAA,EAAA,OAAA,CAAA,CAAC,EAAiB,EAAgB,EAAU,CAAC,CAAC,QAOrD,EAiCA,EAvCJ,GAAM,CAAE,IAAA,CAAG,CAAE,CAAG,EAChB,GAAI,GACC,CAAA,AAA+B,UAA/B,OAAO,EAAgB,GAAG,EACvB,EAAa,EAAgB,GAAG,IAAM,EAAa,EAAA,EACvD,MAAM,IAAI,EAAA,wBAAuB,CAAE,oCAAqC,MAAO,gBAGnF,GAAI,CACA,EAAU,KAAK,KAAK,CAAC,AAAA,CAAA,EAAA,EAAA,OAAM,AAAN,EAAQ,MAAM,CAAC,GACxC,CACA,MAAO,EAAI,CACX,CACA,GAAI,CAAC,AAAA,CAAA,EAAA,EAAA,OAAO,AAAP,EAAS,GACV,MAAM,IAAI,EAAA,UAAS,CAAE,kDAEzB,GAAM,CAAE,eAAA,EAAiB,EAAE,CAAE,OAAA,CAAM,CAAE,QAAA,CAAO,CAAE,SAAA,CAAQ,CAAE,YAAA,CAAW,CAAE,CAAG,EASxE,IAAK,IAAM,KARS,KAAA,IAAhB,GACA,EAAe,IAAI,CAAC,OACP,KAAA,IAAb,GACA,EAAe,IAAI,CAAC,OACR,KAAA,IAAZ,GACA,EAAe,IAAI,CAAC,OACT,KAAA,IAAX,GACA,EAAe,IAAI,CAAC,OACJ,IAAI,IAAI,EAAe,OAAO,KAC9C,GAAI,CAAE,CAAA,KAAS,CAAA,EACX,MAAM,IAAI,EAAA,wBAAwB,CAAC,CAAC,kBAAkB,EAAE,EAAM,OAAO,CAAC,CAAE,EAAO,WAGvF,GAAI,GAAU,CAAE,AAAA,CAAA,MAAM,OAAO,CAAC,GAAU,EAAS,CAAC,EAAM,AAAC,EAAE,QAAQ,CAAC,EAAQ,GAAG,EAC3E,MAAM,IAAI,EAAA,wBAAuB,CAAE,+BAAgC,MAAO,gBAE9E,GAAI,GAAW,EAAQ,GAAG,GAAK,EAC3B,MAAM,IAAI,EAAA,wBAAuB,CAAE,+BAAgC,MAAO,gBAE9E,GAAI,GACA,CAAC,EAAsB,EAAQ,GAAG,CAAE,AAAoB,UAApB,OAAO,EAAwB,CAAC,EAAS,CAAG,GAChF,MAAM,IAAI,EAAA,wBAAuB,CAAE,+BAAgC,MAAO,gBAG9E,OAAQ,OAAO,EAAQ,cAAc,EACjC,IAAK,SACD,EAAY,AAAA,CAAA,EAAA,EAAA,OAAI,AAAJ,EAAK,EAAQ,cAAc,EACvC,KACJ,KAAK,SACD,EAAY,EAAQ,cAAc,CAClC,KACJ,KAAK,YACD,EAAY,EACZ,KACJ,SACI,MAAM,AAAI,UAAU,qCAC5B,CACA,GAAM,CAAE,YAAA,CAAW,CAAE,CAAG,EAClB,EAAM,AAAA,CAAA,EAAA,EAAA,OAAK,AAAL,EAAM,GAAe,IAAI,MACrC,GAAI,AAAC,CAAA,AAAgB,KAAA,IAAhB,EAAQ,GAAG,EAAkB,CAAA,GAAgB,AAAuB,UAAvB,OAAO,EAAQ,GAAG,CAChE,MAAM,IAAI,EAAA,wBAAuB,CAAE,+BAAgC,MAAO,WAE9E,GAAI,AAAgB,KAAA,IAAhB,EAAQ,GAAG,CAAgB,CAC3B,GAAI,AAAuB,UAAvB,OAAO,EAAQ,GAAG,CAClB,MAAM,IAAI,EAAA,wBAAuB,CAAE,+BAAgC,MAAO,WAE9E,GAAI,EAAQ,GAAG,CAAG,EAAM,EACpB,MAAM,IAAI,EAAA,wBAAuB,CAAE,qCAAsC,MAAO,eAExF,CACA,GAAI,AAAgB,KAAA,IAAhB,EAAQ,GAAG,CAAgB,CAC3B,GAAI,AAAuB,UAAvB,OAAO,EAAQ,GAAG,CAClB,MAAM,IAAI,EAAA,wBAAuB,CAAE,+BAAgC,MAAO,WAE9E,GAAI,EAAQ,GAAG,EAAI,EAAM,EACrB,MAAM,IAAI,EAAA,UAAS,CAAE,qCAAsC,MAAO,eAE1E,CACA,GAAI,EAAa,CACb,IAAM,EAAM,EAAM,EAAQ,GAAG,CAE7B,GAAI,EAAM,EADE,CAAA,AAAuB,UAAvB,OAAO,EAA2B,EAAc,AAAA,CAAA,EAAA,EAAA,OAAI,AAAJ,EAAK,EAAjE,EAEI,MAAM,IAAI,EAAA,UAAU,CAAC,2DAA4D,MAAO,gBAE5F,GAAI,EAAM,EAAI,EACV,MAAM,IAAI,EAAA,wBAAwB,CAAC,gEAAiE,MAAO,eAEnH,CACA,OAAO,CACX,C,E,C,oB,Q,oB,Q,a,Q,Y,Q,iB,Q,iD,O,E,C,M,C,S,C,C,C,C,C,E,A,E,kD,iB,C,GCrGe,EAAA,OAAA,CAAA,AAAC,GAAS,KAAK,KAAK,CAAC,EAAK,OAAO,GAAK,I,E,C,iD,O,E,C,Q,C,S,C,C,C,C,C,E,A,E,kD,iB,C,GCCrD,IAIM,EAAQ,qGACC,CAAA,EAAA,OAAA,CAAA,AAAC,IACZ,IAAM,EAAU,EAAM,IAAI,CAAC,GAC3B,GAAI,CAAC,EACD,MAAM,AAAI,UAAU,8BAExB,IAAM,EAAQ,WAAW,CAAO,CAAC,EAAE,EAEnC,OADa,CAAO,CAAC,EAAE,CAAC,WAAW,IAE/B,IAAK,MACL,IAAK,OACL,IAAK,SACL,IAAK,UACL,IAAK,IACD,OAAO,KAAK,KAAK,CAAC,EACtB,KAAK,SACL,IAAK,UACL,IAAK,MACL,IAAK,OACL,IAAK,IACD,OAAO,KAAK,KAAK,CAAC,AAzBf,GAyBe,EACtB,KAAK,OACL,IAAK,QACL,IAAK,KACL,IAAK,MACL,IAAK,IACD,OAAO,KAAK,KAAK,CAAC,AA9BjB,KA8BiB,EACtB,KAAK,MACL,IAAK,OACL,IAAK,IACD,OAAO,KAAK,KAAK,CAAC,AAjClB,MAiCkB,EACtB,KAAK,OACL,IAAK,QACL,IAAK,IACD,OAAO,KAAK,KAAK,CAAC,AApCjB,OAoCiB,EACtB,SACI,OAAO,KAAK,KAAK,CAAC,AArCjB,SAqCiB,EAC1B,CACJ,C,E,C,iD,O,E,C,M,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GCxCA,EAAA,MAAA,CAAA,EAAA,aAAA,IAAsB,GAHtB,IAAA,EAAA,EAAA,6BACA,EAAA,EAAA,4B,E,E,c,C,GACA,EAAA,EAAA,qBACO,eAAe,EAAW,CAAG,CAAE,CAAG,CAAE,CAAO,EAC9C,IAAM,EAAY,MAAM,AAAA,CAAA,EAAA,EAAA,cAAa,AAAb,EAAe,EAAK,EAAK,GAC3C,EAAU,AAAA,CAAA,EAAA,EAAA,OAAU,AAAV,EAAW,EAAU,eAAe,CAAE,EAAU,SAAS,CAAE,GACrE,CAAE,gBAAA,CAAe,CAAE,CAAG,EAC5B,GAAI,AAAwB,KAAA,IAAxB,EAAgB,GAAG,EAAkB,EAAgB,GAAG,GAAK,EAAQ,GAAG,CACxE,MAAM,IAAI,EAAA,wBAAwB,CAAC,mDAAoD,MAAO,YAElG,GAAI,AAAwB,KAAA,IAAxB,EAAgB,GAAG,EAAkB,EAAgB,GAAG,GAAK,EAAQ,GAAG,CACxE,MAAM,IAAI,EAAA,wBAAwB,CAAC,mDAAoD,MAAO,YAElG,GAAI,AAAwB,KAAA,IAAxB,EAAgB,GAAG,EACnB,KAAK,SAAS,CAAC,EAAgB,GAAG,IAAM,KAAK,SAAS,CAAC,EAAQ,GAAG,EAClE,MAAM,IAAI,EAAA,wBAAwB,CAAC,mDAAoD,MAAO,YAElG,IAAM,EAAS,CAAE,QAAA,EAAS,gBAAA,CAAgB,QAC1C,AAAI,AAAe,YAAf,OAAO,EACA,CAAE,GAAG,CAAM,CAAE,IAAK,EAAU,GAAG,AAAC,EAEpC,CACX,C,E,C,4B,Q,2B,Q,oB,Q,iD,O,E,C,Q,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GCrBA,EAAA,MAAA,CAAA,EAAA,iBAAA,IAAa,GADb,IAAA,EAAA,EAAA,0BACO,OAAM,EACT,YAAY,CAAS,CAAE,CACnB,IAAI,CAAC,UAAU,CAAG,IAAI,EAAA,gBAAgB,CAAC,EAC3C,CACA,wBAAwB,CAAG,CAAE,CAEzB,OADA,IAAI,CAAC,UAAU,CAAC,uBAAuB,CAAC,GACjC,IAAI,AACf,CACA,wBAAwB,CAAE,CAAE,CAExB,OADA,IAAI,CAAC,UAAU,CAAC,uBAAuB,CAAC,GACjC,IAAI,AACf,CACA,mBAAmB,CAAe,CAAE,CAEhC,OADA,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,GAC5B,IAAI,AACf,CACA,2BAA2B,CAAU,CAAE,CAEnC,OADA,IAAI,CAAC,UAAU,CAAC,0BAA0B,CAAC,GACpC,IAAI,AACf,CACA,MAAM,QAAQ,CAAG,CAAE,CAAO,CAAE,CACxB,IAAM,EAAM,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAK,GAC/C,MAAO,CAAC,EAAI,SAAS,CAAE,EAAI,aAAa,CAAE,EAAI,EAAE,CAAE,EAAI,UAAU,CAAE,EAAI,GAAG,CAAC,CAAC,IAAI,CAAC,IACpF,CACJ,C,E,C,0B,Q,iD,O,E,C,Q,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GCxBA,EAAA,MAAA,CAAA,EAAA,cAAA,IAAa,GADb,IAAA,EAAA,EAAA,uBACO,OAAM,EACT,YAAY,CAAO,CAAE,CACjB,IAAI,CAAC,UAAU,CAAG,IAAI,EAAA,aAAa,CAAC,EACxC,CACA,mBAAmB,CAAe,CAAE,CAEhC,OADA,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,GAC5B,IAAI,AACf,CACA,MAAM,KAAK,CAAG,CAAE,CAAO,CAAE,CACrB,IAAM,EAAM,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAK,GAC5C,GAAI,AAAgB,KAAA,IAAhB,EAAI,OAAO,CACX,MAAM,AAAI,UAAU,6DAExB,MAAO,CAAC,EAAE,EAAI,SAAS,CAAC,CAAC,EAAE,EAAI,OAAO,CAAC,CAAC,EAAE,EAAI,SAAS,CAAC,CAAC,AAC7D,CACJ,C,E,C,uB,Q,iD,O,E,C,M,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GCTA,EAAA,MAAA,CAAA,EAAA,gBAAA,IAAa,GAPb,IAAA,EAAA,EAAA,8BACA,EAAA,EAAA,yB,E,E,c,C,GACA,EAAA,EAAA,4B,E,E,c,C,GACA,EAAA,EAAA,wBACA,EAAA,EAAA,6BACA,EAAA,EAAA,+B,E,E,c,C,GACA,EAAA,EAAA,8B,E,E,c,C,EACO,OAAM,EACT,YAAY,CAAO,CAAE,CACjB,GAAI,CAAE,CAAA,aAAmB,UAAA,EACrB,MAAM,AAAI,UAAU,4CAExB,CAAA,IAAI,CAAC,QAAQ,CAAG,CACpB,CACA,mBAAmB,CAAe,CAAE,CAChC,GAAI,IAAI,CAAC,gBAAgB,CACrB,MAAM,AAAI,UAAU,8CAGxB,OADA,IAAI,CAAC,gBAAgB,CAAG,EACjB,IAAI,AACf,CACA,qBAAqB,CAAiB,CAAE,CACpC,GAAI,IAAI,CAAC,kBAAkB,CACvB,MAAM,AAAI,UAAU,gDAGxB,OADA,IAAI,CAAC,kBAAkB,CAAG,EACnB,IAAI,AACf,CACA,MAAM,KAAK,CAAG,CAAE,CAAO,CAAE,KA4BjB,EA3BJ,GAAI,CAAC,IAAI,CAAC,gBAAgB,EAAI,CAAC,IAAI,CAAC,kBAAkB,CAClD,MAAM,IAAI,EAAA,UAAS,CAAE,mFAEzB,GAAI,CAAC,AAAA,CAAA,EAAA,EAAA,OAAU,AAAV,EAAW,IAAI,CAAC,gBAAgB,CAAE,IAAI,CAAC,kBAAkB,EAC1D,MAAM,IAAI,EAAA,UAAU,CAAC,6EAEzB,IAAM,EAAa,CACf,GAAG,IAAI,CAAC,gBAAgB,CACxB,GAAG,IAAI,CAAC,kBAAkB,AAC9B,EACM,EAAa,AAAA,CAAA,EAAA,EAAA,OAAY,AAAZ,EAAa,EAAA,UAAS,CAAG,IAAI,IAAI,CAAC,CAAC,MAAO,CAAA,EAAK,CAAC,EAAG,MAAA,EAAyC,KAAK,EAAI,EAAQ,IAAI,CAAE,IAAI,CAAC,gBAAgB,CAAE,GACzJ,EAAM,CAAA,EACV,GAAI,EAAW,GAAG,CAAC,QAEX,AAAe,WAAf,MADJ,CAAA,EAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,AAAH,EAExB,MAAM,IAAI,EAAA,UAAU,CAAC,2EAG7B,GAAM,CAAE,IAAA,CAAG,CAAE,CAAG,EAChB,GAAI,AAAe,UAAf,OAAO,GAAoB,CAAC,EAC5B,MAAM,IAAI,EAAA,UAAU,CAAC,6DAEzB,AAAA,CAAA,EAAA,EAAA,OAAW,AAAX,EAAa,EAAK,EAAK,QACvB,IAAI,EAAU,IAAI,CAAC,QAAQ,CACvB,GACA,CAAA,EAAU,AAAA,CAAA,EAAA,EAAA,OAAO,AAAP,EAAQ,MAAM,CAAC,AAAA,CAAA,EAAA,EAAA,MAAQ,AAAR,EAAU,GADvC,EAKI,EADA,IAAI,CAAC,gBAAgB,CACH,AAAA,CAAA,EAAA,EAAA,OAAO,AAAP,EAAQ,MAAM,CAAC,AAAA,CAAA,EAAA,EAAA,MAAS,AAAT,EAAU,KAAK,SAAS,CAAC,IAAI,CAAC,gBAAgB,IAG7D,AAAA,CAAA,EAAA,EAAA,OAAO,AAAP,EAAQ,MAAM,CAAC,IAErC,IAAM,EAAO,AAAA,CAAA,EAAA,EAAA,MAAK,AAAL,EAAO,EAAiB,AAAA,CAAA,EAAA,EAAA,OAAO,AAAP,EAAQ,MAAM,CAAC,KAAM,GACpD,EAAY,MAAM,AAAA,CAAA,EAAA,EAAA,OAAG,AAAH,EAAK,EAAK,EAAK,GACjC,EAAM,CACR,UAAW,AAAA,CAAA,EAAA,EAAA,MAAQ,AAAR,EAAU,GACrB,QAAS,EACb,EAUA,OATI,GACA,CAAA,EAAI,OAAO,CAAG,AAAA,CAAA,EAAA,EAAA,OAAO,AAAP,EAAQ,MAAM,CAAC,EADjC,EAGI,IAAI,CAAC,kBAAkB,EACvB,CAAA,EAAI,MAAM,CAAG,IAAI,CAAC,kBAAkB,AAAlB,EAElB,IAAI,CAAC,gBAAgB,EACrB,CAAA,EAAI,SAAS,CAAG,AAAA,CAAA,EAAA,EAAA,OAAM,AAAN,EAAQ,MAAM,CAAC,EADnC,EAGO,CACX,CACJ,C,E,C,6B,Q,wB,Q,2B,Q,uB,Q,4B,Q,8B,Q,6B,Q,iD,O,E,C,Q,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GChFA,IAAA,EAAA,EAAA,mB,E,E,c,C,GACA,EAAA,EAAA,kB,E,E,c,C,GACA,EAAA,EAAA,yB,E,E,c,C,GACA,EAAA,EAAA,4B,E,E,c,C,GACA,IAAM,EAAO,MAAO,EAAK,EAAK,KAC1B,IAAM,EAAY,MAAM,AAAA,CAAA,EAAA,EAAA,OAAS,AAAT,EAAW,EAAK,EAAK,QAC7C,AAAA,CAAA,EAAA,EAAA,OAAc,AAAd,EAAe,EAAK,GACpB,IAAM,EAAY,MAAM,AAAA,CAAA,EAAA,EAAA,OAAK,AAAL,EAAO,MAAM,CAAC,IAAI,CAAC,AAAA,CAAA,EAAA,EAAA,OAAc,AAAd,EAAgB,EAAK,EAAU,SAAS,EAAG,EAAW,GACjG,OAAO,IAAI,WAAW,EAC1B,CACe,CAAA,EAAA,OAAA,CAAA,C,E,C,kB,Q,iB,Q,wB,Q,2B,Q,iD,O,E,C,M,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GCsBf,EAAA,MAAA,CAAA,EAAA,cAAA,IAAa,GAhCb,IAAA,EAAA,EAAA,wBACA,EAAA,EAAA,uBACA,OAAM,EACF,YAAY,CAAG,CAAE,CAAG,CAAE,CAAO,CAAE,CAC3B,IAAI,CAAC,MAAM,CAAG,EACd,IAAI,CAAC,GAAG,CAAG,EACX,IAAI,CAAC,OAAO,CAAG,CACnB,CACA,mBAAmB,CAAe,CAAE,CAChC,GAAI,IAAI,CAAC,eAAe,CACpB,MAAM,AAAI,UAAU,8CAGxB,OADA,IAAI,CAAC,eAAe,CAAG,EAChB,IAAI,AACf,CACA,qBAAqB,CAAiB,CAAE,CACpC,GAAI,IAAI,CAAC,iBAAiB,CACtB,MAAM,AAAI,UAAU,gDAGxB,OADA,IAAI,CAAC,iBAAiB,CAAG,EAClB,IAAI,AACf,CACA,aAAa,GAAG,CAAI,CAAE,CAClB,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,EACvC,CACA,KAAK,GAAG,CAAI,CAAE,CACV,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,EAC/B,CACA,MAAO,CACH,OAAO,IAAI,CAAC,MAAM,AACtB,CACJ,CACO,MAAM,EACT,YAAY,CAAO,CAAE,CACjB,IAAI,CAAC,WAAW,CAAG,EAAE,CACrB,IAAI,CAAC,QAAQ,CAAG,CACpB,CACA,aAAa,CAAG,CAAE,CAAO,CAAE,CACvB,IAAM,EAAY,IAAI,EAAoB,IAAI,CAAE,EAAK,GAErD,OADA,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GACf,CACX,CACA,MAAM,MAAO,CACT,GAAI,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CACxB,MAAM,IAAI,EAAA,UAAS,CAAE,wCAEzB,IAAM,EAAM,CACR,WAAY,EAAE,CACd,QAAS,EACb,EACA,IAAK,IAAI,EAAI,EAAG,EAAI,IAAI,CAAC,WAAW,CAAC,MAAM,CAAE,IAAK,CAC9C,IAAM,EAAY,IAAI,CAAC,WAAW,CAAC,EAAE,CAC/B,EAAY,IAAI,EAAA,aAAa,CAAC,IAAI,CAAC,QAAQ,EACjD,EAAU,kBAAkB,CAAC,EAAU,eAAe,EACtD,EAAU,oBAAoB,CAAC,EAAU,iBAAiB,EAC1D,GAAM,CAAE,QAAA,CAAO,CAAE,GAAG,EAAM,CAAG,MAAM,EAAU,IAAI,CAAC,EAAU,GAAG,CAAE,EAAU,OAAO,EAClF,GAAI,AAAM,IAAN,EACA,EAAI,OAAO,CAAG,OAEb,GAAI,EAAI,OAAO,GAAK,EACrB,MAAM,IAAI,EAAA,UAAU,CAAC,uDAEzB,EAAI,UAAU,CAAC,IAAI,CAAC,EACxB,CACA,OAAO,CACX,CACJ,C,E,C,uB,Q,uB,Q,iD,O,E,C,M,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GC9DA,EAAA,MAAA,CAAA,EAAA,UAAA,IAAa,GAJb,IAAA,EAAA,EAAA,0BACA,EAAA,EAAA,qBACA,EAAA,EAAA,0BACA,EAAA,EAAA,eACO,OAAM,UAAgB,EAAA,UAAU,CACnC,mBAAmB,CAAe,CAAE,CAEhC,OADA,IAAI,CAAC,gBAAgB,CAAG,EACjB,IAAI,AACf,CACA,MAAM,KAAK,CAAG,CAAE,CAAO,CAAE,CACrB,IAAI,EACJ,IAAM,EAAM,IAAI,EAAA,WAAU,CAAE,AAAA,CAAA,EAAA,EAAA,OAAO,AAAP,EAAQ,MAAM,CAAC,KAAK,SAAS,CAAC,IAAI,CAAC,QAAQ,IAEvE,GADA,EAAI,kBAAkB,CAAC,IAAI,CAAC,gBAAgB,EACxC,MAAM,OAAO,CAAE,AAAgC,OAAhC,CAAA,EAAK,IAAI,CAAC,gBAAe,AAAf,GAA8B,AAAO,KAAK,IAAZ,EAAgB,KAAK,EAAI,EAAG,IAAI,GACvF,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,QACpC,AAA8B,CAAA,IAA9B,IAAI,CAAC,gBAAgB,CAAC,GAAG,CACzB,MAAM,IAAI,EAAA,UAAS,CAAE,uCAEzB,OAAO,EAAI,IAAI,CAAC,EAAK,EACzB,CACJ,C,E,C,yB,Q,oB,Q,yB,Q,e,Q,iD,O,E,C,Q,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GCjBA,EAAA,MAAA,CAAA,EAAA,aAAA,IAAa,GAHb,IAAA,EAAA,EAAA,mB,E,E,c,C,GACA,EAAA,EAAA,uB,E,E,c,C,GACA,EAAA,EAAA,kB,E,E,c,C,EACO,OAAM,EACT,YAAY,CAAO,CAAE,CACjB,GAAI,CAAC,AAAA,CAAA,EAAA,EAAA,OAAO,AAAP,EAAS,GACV,MAAM,AAAI,UAAU,mCAExB,CAAA,IAAI,CAAC,QAAQ,CAAG,CACpB,CACA,UAAU,CAAM,CAAE,CAEd,OADA,IAAI,CAAC,QAAQ,CAAG,CAAE,GAAG,IAAI,CAAC,QAAQ,CAAE,IAAK,CAAO,EACzC,IAAI,AACf,CACA,WAAW,CAAO,CAAE,CAEhB,OADA,IAAI,CAAC,QAAQ,CAAG,CAAE,GAAG,IAAI,CAAC,QAAQ,CAAE,IAAK,CAAQ,EAC1C,IAAI,AACf,CACA,YAAY,CAAQ,CAAE,CAElB,OADA,IAAI,CAAC,QAAQ,CAAG,CAAE,GAAG,IAAI,CAAC,QAAQ,CAAE,IAAK,CAAS,EAC3C,IAAI,AACf,CACA,OAAO,CAAK,CAAE,CAEV,OADA,IAAI,CAAC,QAAQ,CAAG,CAAE,GAAG,IAAI,CAAC,QAAQ,CAAE,IAAK,CAAM,EACxC,IAAI,AACf,CACA,aAAa,CAAK,CAAE,CAOhB,MANI,AAAiB,UAAjB,OAAO,EACP,IAAI,CAAC,QAAQ,CAAG,CAAE,GAAG,IAAI,CAAC,QAAQ,CAAE,IAAK,CAAM,EAG/C,IAAI,CAAC,QAAQ,CAAG,CAAE,GAAG,IAAI,CAAC,QAAQ,CAAE,IAAK,AAAA,CAAA,EAAA,EAAA,OAAI,AAAJ,EAAM,IAAI,MAAU,AAAA,CAAA,EAAA,EAAA,OAAI,AAAJ,EAAK,EAAO,EAEtE,IAAI,AACf,CACA,kBAAkB,CAAK,CAAE,CAOrB,MANI,AAAiB,UAAjB,OAAO,EACP,IAAI,CAAC,QAAQ,CAAG,CAAE,GAAG,IAAI,CAAC,QAAQ,CAAE,IAAK,CAAM,EAG/C,IAAI,CAAC,QAAQ,CAAG,CAAE,GAAG,IAAI,CAAC,QAAQ,CAAE,IAAK,AAAA,CAAA,EAAA,EAAA,OAAI,AAAJ,EAAM,IAAI,MAAU,AAAA,CAAA,EAAA,EAAA,OAAI,AAAJ,EAAK,EAAO,EAEtE,IAAI,AACf,CACA,YAAY,CAAK,CAAE,CAOf,OANI,AAAiB,KAAA,IAAV,EACP,IAAI,CAAC,QAAQ,CAAG,CAAE,GAAG,IAAI,CAAC,QAAQ,CAAE,IAAK,AAAA,CAAA,EAAA,EAAA,OAAK,AAAL,EAAM,IAAI,KAAQ,EAG3D,IAAI,CAAC,QAAQ,CAAG,CAAE,GAAG,IAAI,CAAC,QAAQ,CAAE,IAAK,CAAM,EAE5C,IAAI,AACf,CACJ,C,E,C,kB,Q,sB,Q,iB,Q,iD,O,E,C,Q,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GClDA,EAAA,MAAA,CAAA,EAAA,aAAA,IAAa,GAHb,IAAA,EAAA,EAAA,6BACA,EAAA,EAAA,0BACA,EAAA,EAAA,eACO,OAAM,UAAmB,EAAA,UAAU,CACtC,mBAAmB,CAAe,CAAE,CAChC,GAAI,IAAI,CAAC,gBAAgB,CACrB,MAAM,AAAI,UAAU,8CAGxB,OADA,IAAI,CAAC,gBAAgB,CAAG,EACjB,IAAI,AACf,CACA,2BAA2B,CAAU,CAAE,CACnC,GAAI,IAAI,CAAC,wBAAwB,CAC7B,MAAM,AAAI,UAAU,sDAGxB,OADA,IAAI,CAAC,wBAAwB,CAAG,EACzB,IAAI,AACf,CACA,wBAAwB,CAAG,CAAE,CACzB,GAAI,IAAI,CAAC,IAAI,CACT,MAAM,AAAI,UAAU,mDAGxB,OADA,IAAI,CAAC,IAAI,CAAG,EACL,IAAI,AACf,CACA,wBAAwB,CAAE,CAAE,CACxB,GAAI,IAAI,CAAC,GAAG,CACR,MAAM,AAAI,UAAU,mDAGxB,OADA,IAAI,CAAC,GAAG,CAAG,EACJ,IAAI,AACf,CACA,yBAA0B,CAEtB,OADA,IAAI,CAAC,wBAAwB,CAAG,CAAA,EACzB,IAAI,AACf,CACA,0BAA2B,CAEvB,OADA,IAAI,CAAC,yBAAyB,CAAG,CAAA,EAC1B,IAAI,AACf,CACA,2BAA4B,CAExB,OADA,IAAI,CAAC,0BAA0B,CAAG,CAAA,EAC3B,IAAI,AACf,CACA,MAAM,QAAQ,CAAG,CAAE,CAAO,CAAE,CACxB,IAAM,EAAM,IAAI,EAAA,cAAa,CAAE,AAAA,CAAA,EAAA,EAAA,OAAO,AAAP,EAAQ,MAAM,CAAC,KAAK,SAAS,CAAC,IAAI,CAAC,QAAQ,IAoB1E,OAnBI,IAAI,CAAC,wBAAwB,EAC7B,CAAA,IAAI,CAAC,gBAAgB,CAAG,CAAE,GAAG,IAAI,CAAC,gBAAgB,CAAE,IAAK,IAAI,CAAC,QAAQ,CAAC,GAAG,AAAC,CAAA,EAE3E,IAAI,CAAC,yBAAyB,EAC9B,CAAA,IAAI,CAAC,gBAAgB,CAAG,CAAE,GAAG,IAAI,CAAC,gBAAgB,CAAE,IAAK,IAAI,CAAC,QAAQ,CAAC,GAAG,AAAC,CAAA,EAE3E,IAAI,CAAC,0BAA0B,EAC/B,CAAA,IAAI,CAAC,gBAAgB,CAAG,CAAE,GAAG,IAAI,CAAC,gBAAgB,CAAE,IAAK,IAAI,CAAC,QAAQ,CAAC,GAAG,AAAC,CAAA,EAE/E,EAAI,kBAAkB,CAAC,IAAI,CAAC,gBAAgB,EACxC,IAAI,CAAC,GAAG,EACR,EAAI,uBAAuB,CAAC,IAAI,CAAC,GAAG,EAEpC,IAAI,CAAC,IAAI,EACT,EAAI,uBAAuB,CAAC,IAAI,CAAC,IAAI,EAErC,IAAI,CAAC,wBAAwB,EAC7B,EAAI,0BAA0B,CAAC,IAAI,CAAC,wBAAwB,EAEzD,EAAI,OAAO,CAAC,EAAK,EAC5B,CACJ,C,E,C,4B,Q,yB,Q,e,Q,iD,O,E,C,M,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GCzDA,EAAA,MAAA,CAAA,EAAA,yBAAA,IAAsB,GAsCtB,EAAA,MAAA,CAAA,EAAA,4BAAA,IAAsB,GAhDtB,IAAA,EAAA,EAAA,wB,E,E,c,C,GACA,EAAA,EAAA,2BACA,EAAA,EAAA,qBACA,EAAA,EAAA,0BACA,EAAA,EAAA,uB,E,E,c,C,GACA,IAAM,EAAQ,CAAC,EAAO,KAClB,GAAI,AAAiB,UAAjB,OAAO,GAAsB,CAAC,EAC9B,MAAM,IAAI,EAAA,UAAS,CAAE,CAAC,EAAE,EAAY,mBAAmB,CAAC,CAEhE,EACO,eAAe,EAAuB,CAAG,CAAE,CAAe,MAUzD,EATJ,GAAI,CAAC,AAAA,CAAA,EAAA,EAAA,OAAO,AAAP,EAAS,GACV,MAAM,AAAI,UAAU,yBAGxB,GADA,MAAA,GAA4E,CAAA,EAAkB,QAA9F,EACI,AAAoB,WAApB,GACA,AAAoB,WAApB,GACA,AAAoB,WAApB,EACA,MAAM,AAAI,UAAU,+DAGxB,OAAQ,EAAI,GAAG,EACX,IAAK,KACD,EAAM,EAAI,GAAG,CAAE,2BACf,EAAM,EAAI,CAAC,CAAE,gCACb,EAAM,EAAI,CAAC,CAAE,gCACb,EAAa,CAAE,IAAK,EAAI,GAAG,CAAE,IAAK,EAAI,GAAG,CAAE,EAAG,EAAI,CAAC,CAAE,EAAG,EAAI,CAAC,AAAC,EAC9D,KACJ,KAAK,MACD,EAAM,EAAI,GAAG,CAAE,yCACf,EAAM,EAAI,CAAC,CAAE,8BACb,EAAa,CAAE,IAAK,EAAI,GAAG,CAAE,IAAK,EAAI,GAAG,CAAE,EAAG,EAAI,CAAC,AAAC,EACpD,KACJ,KAAK,MACD,EAAM,EAAI,CAAC,CAAE,4BACb,EAAM,EAAI,CAAC,CAAE,2BACb,EAAa,CAAE,EAAG,EAAI,CAAC,CAAE,IAAK,EAAI,GAAG,CAAE,EAAG,EAAI,CAAC,AAAC,EAChD,KACJ,KAAK,MACD,EAAM,EAAI,CAAC,CAAE,6BACb,EAAa,CAAE,EAAG,EAAI,CAAC,CAAE,IAAK,EAAI,GAAG,AAAC,EACtC,KACJ,SACI,MAAM,IAAI,EAAA,gBAAe,CAAE,oDACnC,CACA,IAAM,EAAO,AAAA,CAAA,EAAA,EAAA,OAAM,AAAN,EAAQ,MAAM,CAAC,KAAK,SAAS,CAAC,IAC3C,MAAO,AAAA,CAAA,EAAA,EAAA,MAAQ,AAAR,EAAU,MAAM,AAAA,CAAA,EAAA,EAAA,OAAK,AAAL,EAAO,EAAiB,GACnD,CACO,eAAe,EAA0B,CAAG,CAAE,CAAe,EAChE,MAAA,GAA4E,CAAA,EAAkB,QAA9F,EACA,IAAM,EAAa,MAAM,EAAuB,EAAK,GACrD,MAAO,CAAC,yCAAyC,EAAE,EAAgB,KAAK,CAAC,IAAI,CAAC,EAAE,EAAW,CAAC,AAChG,C,E,C,uB,Q,0B,Q,oB,Q,yB,Q,sB,Q,iD,O,E,C,M,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GCjDA,EAAA,MAAA,CAAA,EAAA,cAAA,IAAsB,GAHtB,IAAA,EAAA,EAAA,oBACA,EAAA,EAAA,uB,E,E,c,C,GACA,EAAA,EAAA,qBACO,eAAe,EAAY,CAAe,CAAE,CAAK,EACpD,IAAM,EAAa,CACf,GAAG,CAAe,CAClB,GAAG,MAAA,EAAqC,KAAK,EAAI,EAAM,MAAM,AACjE,EACA,GAAI,CAAC,AAAA,CAAA,EAAA,EAAA,OAAO,AAAP,EAAS,EAAW,GAAG,EACxB,MAAM,IAAI,EAAA,UAAS,CAAE,+DAEzB,IAAM,EAAM,MAAM,AAAA,CAAA,EAAA,EAAA,SAAQ,AAAR,EAAU,CAAE,GAAG,EAAW,GAAG,CAAE,IAAK,CAAA,CAAK,EAAG,EAAW,GAAG,CAAE,CAAA,GAC9E,GAAI,aAAe,YAAc,AAAa,WAAb,EAAI,IAAI,CACrC,MAAM,IAAI,EAAA,UAAS,CAAE,8DAEzB,OAAO,CACX,C,E,C,mB,Q,sB,Q,oB,Q,iD,O,E,C,M,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GCAA,EAAA,MAAA,CAAA,EAAA,aAAA,IAAgB,GAehB,EAAA,MAAA,CAAA,EAAA,cAAA,IAAa,GA+Eb,EAAA,MAAA,CAAA,EAAA,oBAAA,IAAgB,GA9GhB,IAAA,EAAA,EAAA,oBACA,EAAA,EAAA,qBACA,EAAA,EAAA,uB,E,E,c,C,GAcO,SAAS,EAAW,CAAI,EAC3B,OAAQ,GACJ,AAAgB,UAAhB,OAAO,GACP,MAAM,OAAO,CAAC,EAAK,IAAI,GACvB,EAAK,IAAI,CAAC,KAAK,CAAC,EACxB,CACA,SAAS,EAAU,CAAG,EAClB,MAAO,AAAA,CAAA,EAAA,EAAA,OAAO,AAAP,EAAS,EACpB,CAOO,MAAM,EACT,YAAY,CAAI,CAAE,CAEd,GADA,IAAI,CAAC,OAAO,CAAG,IAAI,QACf,CAAC,EAAW,GACZ,MAAM,IAAI,EAAA,WAAW,CAAC,6BAE1B,CAAA,IAAI,CAAC,KAAK,CAXd,AAAI,AAA2B,YAA3B,OAAO,gBACA,gBAUY,GARhB,KAAK,KAAK,CAAC,KAAK,SAAS,CAQT,GACvB,CACA,MAAM,OAAO,CAAe,CAAE,CAAK,CAAE,CACjC,GAAM,CAAE,IAAA,CAAG,CAAE,IAAA,CAAG,CAAE,CAAG,CAAE,GAAG,CAAe,CAAE,GAAG,MAAA,EAAqC,KAAK,EAAI,EAAM,MAAM,AAAC,EACnG,EAAM,AAtCpB,SAAuB,CAAG,EACtB,OAAQ,AAAe,UAAf,OAAO,GAAoB,EAAI,KAAK,CAAC,EAAG,IAC5C,IAAK,KACL,IAAK,KACD,MAAO,KACX,KAAK,KACD,MAAO,IACX,KAAK,KACD,MAAO,KACX,SACI,MAAM,IAAI,EAAA,gBAAe,CAAE,iDACnC,CACJ,EA0BkC,GACpB,EAAa,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,AAAC,IACvC,IAAI,EAAY,IAAQ,EAAI,GAAG,CAgB/B,GAfI,GAAa,AAAe,UAAf,OAAO,GACpB,CAAA,EAAY,IAAQ,EAAI,GAAG,AAAH,EAExB,GAAa,AAAmB,UAAnB,OAAO,EAAI,GAAG,EAC3B,CAAA,EAAY,IAAQ,EAAI,GAAG,AAAH,EAExB,GAAa,AAAmB,UAAnB,OAAO,EAAI,GAAG,EAC3B,CAAA,EAAY,AAAY,QAAZ,EAAI,GAAG,AADvB,EAGI,GAAa,MAAM,OAAO,CAAC,EAAI,OAAO,GACtC,CAAA,EAAY,EAAI,OAAO,CAAC,QAAQ,CAAC,SADrC,EAGI,GAAa,AAAQ,UAAR,GACb,CAAA,EAAY,AAAY,YAAZ,EAAI,GAAG,EAAkB,AAAY,UAAZ,EAAI,GAAG,AADhD,EAGI,EACA,OAAQ,GACJ,IAAK,QACD,EAAY,AAAY,UAAZ,EAAI,GAAG,CACnB,KACJ,KAAK,SACD,EAAY,AAAY,cAAZ,EAAI,GAAG,CACnB,KACJ,KAAK,QACD,EAAY,AAAY,UAAZ,EAAI,GAAG,CACnB,KACJ,KAAK,QACD,EAAY,AAAY,UAAZ,EAAI,GAAG,AAE3B,CAEJ,OAAO,CACX,GACM,CAAE,EAAG,CAAG,CAAE,OAAA,CAAM,CAAE,CAAG,EAC3B,GAAI,AAAW,IAAX,EACA,MAAM,IAAI,EAAA,iBAAiB,CAE1B,GAAI,AAAW,IAAX,EAAc,CACnB,IAAM,EAAQ,IAAI,EAAA,wBAAwB,CACpC,CAAE,QAAA,CAAO,CAAE,CAAG,IAAI,AAWxB,OAVA,CAAK,CAAC,OAAO,aAAa,CAAC,CAAG,kBAC1B,IAAK,IAAM,KAAO,EACd,GAAI,CACA,MAAM,MAAM,EAAmB,EAAS,EAAK,EACjD,CACA,MAAO,EAAI,CACP,QACJ,CAER,EACM,CACV,CACA,OAAO,EAAmB,IAAI,CAAC,OAAO,CAAE,EAAK,EACjD,CACJ,CACA,eAAe,EAAmB,CAAK,CAAE,CAAG,CAAE,CAAG,EAC7C,IAAM,EAAS,EAAM,GAAG,CAAC,IAAQ,EAAM,GAAG,CAAC,EAAK,CAAC,GAAG,GAAG,CAAC,GACxD,GAAI,AAAgB,KAAA,IAAhB,CAAM,CAAC,EAAI,CAAgB,CAC3B,IAAM,EAAM,MAAM,AAAA,CAAA,EAAA,EAAA,SAAQ,AAAR,EAAU,CAAE,GAAG,CAAG,CAAE,IAAK,CAAA,CAAK,EAAG,GACnD,GAAI,aAAe,YAAc,AAAa,WAAb,EAAI,IAAI,CACrC,MAAM,IAAI,EAAA,WAAU,CAAE,+CAE1B,CAAA,CAAM,CAAC,EAAI,CAAG,CAClB,CACA,OAAO,CAAM,CAAC,EAAI,AACtB,CACO,SAAS,EAAkB,CAAI,EAClC,IAAM,EAAM,IAAI,EAAY,GAC5B,OAAO,eAAgB,CAAe,CAAE,CAAK,EACzC,OAAO,EAAI,MAAM,CAAC,EAAiB,EACvC,CACJ,C,E,C,mB,Q,oB,Q,sB,Q,iD,O,E,C,M,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GC7CA,EAAA,MAAA,CAAA,EAAA,qBAAA,IAAgB,GAtEhB,IAAA,EAAA,EAAA,4B,E,E,c,C,GACA,EAAA,EAAA,qBACA,EAAA,EAAA,aAMA,OAAM,UAAqB,EAAA,WAAW,CAClC,YAAY,CAAG,CAAE,CAAO,CAAE,CAGtB,GAFA,KAAK,CAAC,CAAE,KAAM,EAAE,AAAC,GACjB,IAAI,CAAC,KAAK,CAAG,KAAA,EACT,CAAE,CAAA,aAAe,GAAA,EACjB,MAAM,AAAI,UAAU,iCAExB,CAAA,IAAI,CAAC,IAAI,CAAG,IAAI,IAAI,EAAI,IAAI,EAC5B,IAAI,CAAC,QAAQ,CAAG,CAAE,MAAO,MAAA,EAAyC,KAAK,EAAI,EAAQ,KAAK,CAAE,QAAS,MAAA,EAAyC,KAAK,EAAI,EAAQ,OAAO,AAAC,EACrK,IAAI,CAAC,gBAAgB,CACjB,AAAuF,UAAvF,MAAQ,CAAA,MAAA,EAAyC,KAAK,EAAI,EAAQ,eAAc,AAAd,EAAgC,MAAA,EAAyC,KAAK,EAAI,EAAQ,eAAe,CAAG,IAClL,IAAI,CAAC,iBAAiB,CAClB,AAAwF,UAAxF,MAAQ,CAAA,MAAA,EAAyC,KAAK,EAAI,EAAQ,gBAAe,AAAf,EAAiC,MAAA,EAAyC,KAAK,EAAI,EAAQ,gBAAgB,CAAG,IACpL,IAAI,CAAC,YAAY,CAAG,AAAmF,UAAnF,MAAQ,CAAA,MAAA,EAAyC,KAAK,EAAI,EAAQ,WAAU,AAAV,EAA4B,MAAA,EAAyC,KAAK,EAAI,EAAQ,WAAW,CAAG,GAC9L,CACA,aAAc,CACV,MAAO,AAA+B,UAA/B,OAAO,IAAI,CAAC,cAAc,EAC3B,KAAK,GAAG,GAAK,IAAI,CAAC,cAAc,CAAG,IAAI,CAAC,iBAAiB,AAEnE,CACA,OAAQ,CACJ,MAAO,AAA+B,UAA/B,OAAO,IAAI,CAAC,cAAc,EAC3B,KAAK,GAAG,GAAK,IAAI,CAAC,cAAc,CAAG,IAAI,CAAC,YAAY,AAE9D,CACA,MAAM,OAAO,CAAe,CAAE,CAAK,CAAE,CAC5B,IAAI,CAAC,KAAK,EAAK,IAAI,CAAC,KAAK,IAC1B,MAAM,IAAI,CAAC,MAAM,GAErB,GAAI,CACA,OAAO,MAAM,KAAK,CAAC,OAAO,EAAiB,EAC/C,CACA,MAAO,EAAK,CACR,GAAI,aAAe,EAAA,iBAAgB,EAC3B,AAAuB,CAAA,IAAvB,IAAI,CAAC,WAAW,GAEhB,OADA,MAAM,IAAI,CAAC,MAAM,GACV,KAAK,CAAC,OAAO,EAAiB,EAG7C,OAAM,CACV,CACJ,CACA,MAAM,QAAS,CACP,IAAI,CAAC,aAAa,EA/ClB,CAAA,AAAyB,aAAzB,OAAO,eACV,AAAqB,aAArB,OAAO,WAA6B,AAAwB,uBAAxB,UAAU,SAAS,EACvD,AAAuB,aAAvB,OAAO,aAA+B,AAAgB,WAAhB,WAF3C,GAgDQ,CAAA,IAAI,CAAC,aAAa,CAAG,KAAA,CADzB,EAGA,IAAI,CAAC,aAAa,EAAK,CAAA,IAAI,CAAC,aAAa,CAAG,AAAA,CAAA,EAAA,EAAA,OAAQ,AAAR,EAAU,IAAI,CAAC,IAAI,CAAE,IAAI,CAAC,gBAAgB,CAAE,IAAI,CAAC,QAAQ,EAChG,IAAI,CAAC,AAAC,IACP,GAAI,CAAC,AAAA,CAAA,EAAA,EAAA,UAAS,AAAT,EAAW,GACZ,MAAM,IAAI,EAAA,WAAU,CAAE,6BAE1B,CAAA,IAAI,CAAC,KAAK,CAAG,CAAE,KAAM,EAAK,IAAI,AAAC,EAC/B,IAAI,CAAC,cAAc,CAAG,KAAK,GAAG,GAC9B,IAAI,CAAC,aAAa,CAAG,KAAA,CACzB,GACK,KAAK,CAAC,AAAC,IAER,MADA,IAAI,CAAC,aAAa,CAAG,KAAA,EACf,CACV,EAAA,EACA,MAAM,IAAI,CAAC,aAAa,AAC5B,CACJ,CACO,SAAS,EAAmB,CAAG,CAAE,CAAO,EAC3C,IAAM,EAAM,IAAI,EAAa,EAAK,GAClC,OAAO,eAAgB,CAAe,CAAE,CAAK,EACzC,OAAO,EAAI,MAAM,CAAC,EAAiB,EACvC,CACJ,C,E,C,2B,Q,oB,Q,a,Q,iD,O,E,C,M,C,S,C,C,C,C,C,E,A,E,kD,iB,C,GC3EA,IAAA,EAAA,EAAA,qBACA,IAAM,EAAY,MAAO,EAAK,EAAS,SAC/B,EACA,EACJ,IAAI,EAAW,CAAA,CACgB,CAAA,YAA3B,OAAO,kBACP,EAAa,IAAI,gBACjB,EAAK,WAAW,KACZ,EAAW,CAAA,EACX,EAAW,KAAK,EACpB,EAAG,IAEP,IAAM,EAAW,MAAM,MAAM,EAAI,IAAI,CAAE,CACnC,OAAQ,EAAa,EAAW,MAAM,CAAG,KAAA,EACzC,SAAU,SACV,QAAS,EAAQ,OAAO,AAC5B,GAAG,KAAK,CAAC,AAAC,IACN,GAAI,EACA,MAAM,IAAI,EAAA,WAAW,AACzB,OAAM,CACV,GAGA,GAFW,KAAA,IAAP,GACA,aAAa,GACb,AAAoB,MAApB,EAAS,MAAM,CACf,MAAM,IAAI,EAAA,SAAS,CAAC,2DAExB,GAAI,CACA,OAAO,MAAM,EAAS,IAAI,EAC9B,CACA,MAAO,EAAI,CACP,MAAM,IAAI,EAAA,SAAQ,CAAE,6DACxB,CACJ,CACe,CAAA,EAAA,OAAA,CAAA,C,E,C,oB,Q,iD,O,E,C,Q,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GC5Bf,EAAA,MAAA,CAAA,EAAA,eAAA,IAAa,GALb,IAAA,EAAA,EAAA,2BACA,EAAA,EAAA,0BACA,EAAA,EAAA,qBACA,EAAA,EAAA,4B,E,E,c,C,GACA,EAAA,EAAA,eACO,OAAM,UAAqB,EAAA,UAAU,CACxC,QAAS,CACL,IAAM,EAAS,EAAU,MAAM,CAAC,KAAK,SAAS,CAAC,CAAE,IAAK,MAAO,IACvD,EAAU,EAAU,MAAM,CAAC,KAAK,SAAS,CAAC,IAAI,CAAC,QAAQ,GAC7D,MAAO,CAAC,EAAE,EAAO,CAAC,EAAE,EAAQ,CAAC,CAAC,AAClC,CACA,OAAO,OAAO,CAAG,CAAE,CAAO,CAAE,KAQpB,EAPJ,GAAI,AAAe,UAAf,OAAO,EACP,MAAM,IAAI,EAAA,UAAU,CAAC,kCAEzB,GAAM,CAAE,EAAG,CAAa,CAAE,EAAG,CAAc,CAAE,EAAG,CAAS,CAAE,OAAA,CAAM,CAAE,CAAG,EAAI,KAAK,CAAC,KAChF,GAAI,AAAW,IAAX,GAAgB,AAAc,KAAd,EAChB,MAAM,IAAI,EAAA,UAAU,CAAC,yBAGzB,GAAI,CAEA,GADA,EAAS,KAAK,KAAK,CAAC,AAAA,CAAA,EAAA,EAAA,OAAO,AAAP,EAAQ,MAAM,CAAC,EAAU,MAAM,CAAC,KAChD,AAAe,SAAf,EAAO,GAAG,CACV,MAAM,AAAI,OAClB,CACA,MAAO,EAAI,CACP,MAAM,IAAI,EAAA,UAAS,CAAE,wBACzB,CAEA,MAAO,CAAE,QADO,AAAA,CAAA,EAAA,EAAA,OAAS,AAAT,EAAW,EAAQ,EAAU,MAAM,CAAC,GAAiB,GACnD,OAAA,CAAO,CAC7B,CACJ,C,E,C,0B,Q,yB,Q,oB,Q,2B,Q,e,Q,iD,O,E,C,M,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GC5BA,EAAA,MAAA,CAAA,EAAA,wBAAA,IAAgB,GAHhB,IAAA,EAAA,EAAA,kBACA,EAAA,EAAA,0BACA,EAAA,EAAA,uB,E,E,c,C,GACO,SAAS,EAAsB,CAAK,EACvC,IAAI,EACJ,GAAI,AAAiB,UAAjB,OAAO,EAAoB,CAC3B,IAAM,EAAQ,EAAM,KAAK,CAAC,KACtB,CAAA,AAAiB,IAAjB,EAAM,MAAM,EAAU,AAAiB,IAAjB,EAAM,MAAM,AAAK,GAEvC,CAAA,CAAC,EAAc,CAAG,CAFtB,CAIJ,MACK,GAAI,AAAiB,UAAjB,OAAO,GAAsB,GAClC,GAAI,cAAe,EACf,EAAgB,EAAM,SAAS,MAG/B,MAAM,AAAI,UAAU,6CAG5B,GAAI,CACA,GAAI,AAAyB,UAAzB,OAAO,GAA8B,CAAC,EACtC,MAAM,AAAI,QAEd,IAAM,EAAS,KAAK,KAAK,CAAC,AAAA,CAAA,EAAA,EAAA,OAAM,AAAN,EAAQ,MAAM,CAAC,AAAA,CAAA,EAAA,EAAA,MAAQ,AAAR,EAAU,KACnD,GAAI,CAAC,AAAA,CAAA,EAAA,EAAA,OAAQ,AAAR,EAAS,GACV,MAAM,AAAI,QAEd,OAAO,CACX,CACA,MAAO,EAAI,CACP,MAAM,AAAI,UAAU,+CACxB,CACJ,C,E,C,iB,Q,yB,Q,sB,Q,iD,O,E,C,M,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GChCa,EAAA,MAAA,CAAA,EAAA,SAAA,IAAA,GACA,EAAA,MAAA,CAAA,EAAA,SAAA,IAAA,GAFb,IAAA,EAAA,EAAA,2BACO,IAAM,EAAS,EAAU,MAAM,CACzB,EAAS,EAAU,MAAM,A,E,C,0B,Q,iD,O,E,C,M,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GCEtC,EAAA,MAAA,CAAA,EAAA,YAAA,IAAgB,GAJhB,IAAA,EAAA,EAAA,kBACA,EAAA,EAAA,0BACA,EAAA,EAAA,uB,E,E,c,C,GACA,EAAA,EAAA,eACO,SAAS,EAAU,CAAG,MAUrB,EAOA,EAhBJ,GAAI,AAAe,UAAf,OAAO,EACP,MAAM,IAAI,EAAA,UAAU,CAAC,iEACzB,GAAM,CAAE,EAAG,CAAO,CAAE,OAAA,CAAM,CAAE,CAAG,EAAI,KAAK,CAAC,KACzC,GAAI,AAAW,IAAX,EACA,MAAM,IAAI,EAAA,UAAU,CAAC,4DACzB,GAAI,AAAW,IAAX,EACA,MAAM,IAAI,EAAA,UAAU,CAAC,eACzB,GAAI,CAAC,EACD,MAAM,IAAI,EAAA,UAAU,CAAC,+BAEzB,GAAI,CACA,EAAU,AAAA,CAAA,EAAA,EAAA,MAAQ,AAAR,EAAU,EACxB,CACA,MAAO,EAAI,CACP,MAAM,IAAI,EAAA,UAAS,CAAE,yCACzB,CAEA,GAAI,CACA,EAAS,KAAK,KAAK,CAAC,AAAA,CAAA,EAAA,EAAA,OAAM,AAAN,EAAQ,MAAM,CAAC,GACvC,CACA,MAAO,EAAI,CACP,MAAM,IAAI,EAAA,UAAS,CAAE,8CACzB,CACA,GAAI,CAAC,AAAA,CAAA,EAAA,EAAA,OAAO,AAAP,EAAS,GACV,MAAM,IAAI,EAAA,UAAS,CAAE,0BACzB,OAAO,CACX,C,E,C,iB,Q,yB,Q,sB,Q,c,Q,iD,O,E,C,M,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GC9BA,EAAA,MAAA,CAAA,EAAA,kBAAA,IAAsB,GADtB,IAAA,EAAA,EAAA,0BACO,eAAe,EAAgB,CAAG,CAAE,CAAO,EAC9C,MAAO,AAAA,CAAA,EAAA,EAAA,eAAQ,AAAR,EAAS,EAAK,EACzB,C,E,C,yB,Q,iD,O,E,C,M,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GCAA,EAAA,MAAA,CAAA,EAAA,iBAAA,IAAsB,GAgDtB,EAAA,MAAA,CAAA,EAAA,kBAAA,IAAsB,GAnDtB,IAAA,EAAA,EAAA,kB,E,E,c,C,GACA,EAAA,EAAA,qBACA,EAAA,EAAA,e,E,E,c,C,GACO,eAAe,EAAe,CAAG,CAAE,CAAO,MACzC,MACA,EACA,EACA,EACJ,OAAQ,GACJ,IAAK,QACL,IAAK,QACL,IAAK,QACD,EAAS,SAAS,EAAI,KAAK,CAAC,IAAK,IACjC,EAAY,CAAE,KAAM,OAAQ,KAAM,CAAC,IAAI,EAAE,EAAO,CAAC,CAAE,OAAA,CAAO,EAC1D,EAAY,CAAC,OAAQ,SAAS,CAC9B,KACJ,KAAK,gBACL,IAAK,gBACL,IAAK,gBAED,OADA,EAAS,SAAS,EAAI,KAAK,CAAC,IAAK,IAC1B,AAAA,CAAA,EAAA,EAAA,OAAK,AAAL,EAAO,IAAI,WAAW,GAAU,GAC3C,KAAK,SACL,IAAK,SACL,IAAK,SAED,EAAY,CAAE,KAAM,SAAU,OAD9B,EAAS,SAAS,EAAI,KAAK,CAAC,EAAG,GAAI,GACE,EACrC,EAAY,CAAC,UAAW,YAAY,CACpC,KACJ,KAAK,YACL,IAAK,YACL,IAAK,YACL,IAAK,UACL,IAAK,UACL,IAAK,UAED,EAAY,CAAE,KAAM,UAAW,OAD/B,EAAS,SAAS,EAAI,KAAK,CAAC,EAAG,GAAI,GACG,EACtC,EAAY,CAAC,UAAW,UAAU,CAClC,KACJ,SACI,MAAM,IAAI,EAAA,gBAAe,CAAE,+DACnC,CACA,MAAO,AAAA,CAAA,EAAA,EAAA,OAAM,AAAN,EAAO,MAAM,CAAC,WAAW,CAAC,EAAY,AAAgF,OAAhF,CAAA,EAAK,MAAA,EAAyC,KAAK,EAAI,EAAQ,WAAU,AAAV,GAAyB,AAAO,KAAK,IAAZ,GAAgB,EAAY,EACrK,CACA,SAAS,EAAuB,CAAO,EACnC,IAAI,EACJ,IAAM,EAAgB,AAAmF,OAAlF,CAAA,EAAK,MAAA,EAAyC,KAAK,EAAI,EAAQ,aAAa,AAAb,GAA2B,AAAO,KAAK,IAAZ,EAAgB,EAAK,KACtI,GAAI,AAAyB,UAAzB,OAAO,GAA8B,EAAgB,KACrD,MAAM,IAAI,EAAA,gBAAgB,CAAC,+FAE/B,OAAO,CACX,CACO,eAAe,EAAgB,CAAG,CAAE,CAAO,MAC1C,EAAI,EAAI,MACR,EACA,EACJ,OAAQ,GACJ,IAAK,QACL,IAAK,QACL,IAAK,QACD,EAAY,CACR,KAAM,UACN,KAAM,CAAC,IAAI,EAAE,EAAI,KAAK,CAAC,IAAI,CAAC,CAC5B,eAAgB,IAAI,WAAW,CAAC,EAAM,EAAM,EAAK,EACjD,cAAe,EAAuB,EAC1C,EACA,EAAY,CAAC,OAAQ,SAAS,CAC9B,KACJ,KAAK,QACL,IAAK,QACL,IAAK,QACD,EAAY,CACR,KAAM,oBACN,KAAM,CAAC,IAAI,EAAE,EAAI,KAAK,CAAC,IAAI,CAAC,CAC5B,eAAgB,IAAI,WAAW,CAAC,EAAM,EAAM,EAAK,EACjD,cAAe,EAAuB,EAC1C,EACA,EAAY,CAAC,OAAQ,SAAS,CAC9B,KACJ,KAAK,WACL,IAAK,eACL,IAAK,eACL,IAAK,eACD,EAAY,CACR,KAAM,WACN,KAAM,CAAC,IAAI,EAAE,SAAS,EAAI,KAAK,CAAC,IAAK,KAAO,EAAE,CAAC,CAC/C,eAAgB,IAAI,WAAW,CAAC,EAAM,EAAM,EAAK,EACjD,cAAe,EAAuB,EAC1C,EACA,EAAY,CAAC,UAAW,YAAa,UAAW,UAAU,CAC1D,KACJ,KAAK,QACD,EAAY,CAAE,KAAM,QAAS,WAAY,OAAQ,EACjD,EAAY,CAAC,OAAQ,SAAS,CAC9B,KACJ,KAAK,QACD,EAAY,CAAE,KAAM,QAAS,WAAY,OAAQ,EACjD,EAAY,CAAC,OAAQ,SAAS,CAC9B,KACJ,KAAK,QACD,EAAY,CAAE,KAAM,QAAS,WAAY,OAAQ,EACjD,EAAY,CAAC,OAAQ,SAAS,CAC9B,KACJ,KAAK,QACD,EAAY,CAAC,OAAQ,SAAS,CAC9B,IAAM,EAAM,AAAyE,OAAxE,CAAA,EAAK,MAAA,EAAyC,KAAK,EAAI,EAAQ,GAAG,AAAH,GAAiB,AAAO,KAAK,IAAZ,EAAgB,EAAK,UAClH,OAAQ,GACJ,IAAK,UACL,IAAK,QACD,EAAY,CAAE,KAAM,CAAI,EACxB,KACJ,SACI,MAAM,IAAI,EAAA,gBAAe,CAAE,6CACnC,CACA,KACJ,KAAK,UACL,IAAK,iBACL,IAAK,iBACL,IAAK,iBAAkB,CACnB,EAAY,CAAC,YAAa,aAAa,CACvC,IAAM,EAAM,AAAyE,OAAxE,CAAA,EAAK,MAAA,EAAyC,KAAK,EAAI,EAAQ,GAAG,AAAH,GAAiB,AAAO,KAAK,IAAZ,EAAgB,EAAK,QAClH,OAAQ,GACJ,IAAK,QACL,IAAK,QACL,IAAK,QACD,EAAY,CAAE,KAAM,OAAQ,WAAY,CAAI,EAC5C,KAEJ,KAAK,SACL,IAAK,OACD,EAAY,CAAE,KAAM,CAAI,EACxB,KACJ,SACI,MAAM,IAAI,EAAA,gBAAe,CAAE,yGACnC,CACA,KACJ,CACA,QACI,MAAM,IAAI,EAAA,gBAAe,CAAE,+DACnC,CACA,MAAQ,AAAA,CAAA,EAAA,EAAA,OAAM,AAAN,EAAO,MAAM,CAAC,WAAW,CAAC,EAAY,AAAgF,OAAhF,CAAA,EAAK,MAAA,EAAyC,KAAK,EAAI,EAAQ,WAAU,AAAV,GAAyB,AAAO,KAAK,IAAZ,GAAgB,EAAY,EACtK,C,E,C,iB,Q,oB,Q,c,Q,iD,O,E,C,M,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GC3IA,EAAA,MAAA,CAAA,EAAA,iBAAA,IAAsB,GADtB,IAAA,EAAA,EAAA,0BACO,eAAe,EAAe,CAAG,CAAE,CAAO,EAC7C,MAAO,AAAA,CAAA,EAAA,EAAA,cAAQ,AAAR,EAAS,EAAK,EACzB,C,E,C,yB,Q,iD,O,E,C,M,C,S,C,C,C,C,C,E,I,E,E,kD,E,iB,C,GCHA,IAAA,EAAA,EAAA,yB,E,E,c,C,EACe,CAAA,EAAA,OAAA,CAAA,EAAA,OAAI,A,E,C,wB,Q,iD,O,E,C,M,C,S,C,C,C,C,C,E,A,E,kD,iB,C,GCDJ,EAAA,OAAA,CAAA,c,E,C,iD,O,E,C,M,C,S,C,C,C,C,C,ECAf,EAAO,OAAO,CAAI,EAAQ,oBAA+B,EAAQ,oBAA6B,OAAO,CAAC,UAAW,IAAI,CAAC,IAAM,EAAO,MAAM,CAAC,IAAI,CAAC,S,E,C,mB,Q,mB,O,E,C,M,C,S,C,C,C,C,C,ECE/I,IAAI,EAAc,EAAQ,mBAC1B,CAAA,EAAO,OAAO,CAAG,EAAY,SAAU,CAAM,EAC3C,OAAO,IAAI,QAAQ,SAAU,CAAO,CAAE,CAAM,EAG1C,GAAI,EAAE,CAAC,MAAM,CADS,SAAS,oBAAoB,CAAC,WACrB,IAAI,CAAC,SAAyB,CAAM,EACjE,OAAO,EAAO,GAAG,GAAK,CACxB,GAAI,CACF,IACA,MACF,CACA,IAAI,EAAc,SAAS,aAAa,CAAC,OACzC,CAAA,EAAY,IAAI,CAAG,EACnB,EAAY,GAAG,CAAG,UAClB,EAAY,EAAE,CAAG,SACjB,SAAS,IAAI,CAAC,WAAW,CAAC,GAC1B,IAAI,EAAS,SAAS,aAAa,CAAC,SACpC,CAAA,EAAO,KAAK,CAAG,CAAA,EACf,EAAO,IAAI,CAAG,kBACd,EAAO,GAAG,CAAG,EACb,EAAO,OAAO,CAAG,SAAU,CAAC,EAC1B,IAAI,EAAQ,AAAI,UAAU,gDAAgD,MAAM,CAAC,EAAQ,aAAa,MAAM,CAAC,EAAE,OAAO,EACtH,CAAA,EAAO,OAAO,CAAG,EAAO,MAAM,CAAG,KACjC,EAAO,MAAM,GACb,EAAO,EACT,EACA,EAAO,MAAM,CAAG,WACd,EAAO,OAAO,CAAG,EAAO,MAAM,CAAG,KACjC,GACF,EACA,SAAS,oBAAoB,CAAC,OAAO,CAAC,EAAE,CAAC,WAAW,CAAC,EACvD,EACF,E,E,C,iB,O,E,C,Q,C,S,C,C,C,C,C,EChCA,IAAI,EAAgB,CAAC,EACjB,EAAiB,CAAC,EAClB,EAAmB,CAAC,CAWxB,CAAA,EAAO,OAAO,CAAG,SAAU,CAAM,CAAE,CAAI,EACrC,OAAO,SAAU,CAAM,EACrB,IAAI,EAAQ,AAZhB,SAAkB,CAAI,EACpB,OAAQ,GACN,IAAK,UACH,OAAO,CACT,KAAK,WACH,OAAO,CACT,SACE,OAAO,CACX,CACF,EAGyB,UACrB,AAAI,CAAK,CAAC,EAAO,CACR,CAAK,CAAC,EAAO,CAEf,CAAK,CAAC,EAAO,CAAG,EAAO,KAAK,CAAC,KAAM,WAAW,KAAK,CAAC,SAAU,CAAC,EAEpE,MADA,OAAO,CAAK,CAAC,EAAO,CACd,CACR,EACF,CACF,C,E,C,E,C,M,C,S,C,C,C,C,C,EC1BA,EAAO,OAAO,CAAI,EAAQ,oBAA+B,EAAQ,oBAA6B,OAAO,CAAC,UAAW,IAAI,CAAC,IAAM,EAAO,MAAM,CAAC,IAAI,CAAC,S,E,C,iB,Q,mB,O,E,E,C,Q,Q,C,Q","sources":["<anon>","node_modules/@parcel/runtime-js/lib/runtime-b881bf4633c252ce.js","node_modules/@parcel/runtime-js/lib/helpers/bundle-manifest.js","node_modules/@parcel/runtime-js/lib/helpers/bundle-url.js","src/index.ts","src/auth0-sdk.ts","src/modules/cookie/index.ts","node_modules/jose/dist/browser/index.js","node_modules/jose/dist/browser/jwe/compact/decrypt.js","node_modules/jose/dist/browser/jwe/flattened/decrypt.js","node_modules/jose/dist/browser/runtime/base64url.js","node_modules/jose/dist/browser/lib/buffer_utils.js","node_modules/jose/dist/browser/runtime/digest.js","node_modules/jose/dist/browser/runtime/webcrypto.js","node_modules/@parcel/transformer-js/src/esmodule-helpers.js","node_modules/jose/dist/browser/runtime/decrypt.js","node_modules/jose/dist/browser/lib/check_iv_length.js","node_modules/jose/dist/browser/util/errors.js","node_modules/jose/dist/browser/lib/iv.js","node_modules/jose/dist/browser/runtime/random.js","node_modules/jose/dist/browser/runtime/check_cek_length.js","node_modules/jose/dist/browser/runtime/timing_safe_equal.js","node_modules/jose/dist/browser/lib/crypto_key.js","node_modules/jose/dist/browser/lib/invalid_key_input.js","node_modules/jose/dist/browser/runtime/is_key_like.js","node_modules/jose/dist/browser/runtime/zlib.js","node_modules/jose/dist/browser/lib/is_disjoint.js","node_modules/jose/dist/browser/lib/is_object.js","node_modules/jose/dist/browser/lib/decrypt_key_management.js","node_modules/jose/dist/browser/runtime/aeskw.js","node_modules/jose/dist/browser/runtime/bogus.js","node_modules/jose/dist/browser/runtime/ecdhes.js","node_modules/jose/dist/browser/runtime/pbes2kw.js","node_modules/jose/dist/browser/lib/check_p2s.js","node_modules/jose/dist/browser/runtime/rsaes.js","node_modules/jose/dist/browser/runtime/subtle_rsaes.js","node_modules/jose/dist/browser/runtime/check_key_length.js","node_modules/jose/dist/browser/lib/cek.js","node_modules/jose/dist/browser/key/import.js","node_modules/jose/dist/browser/runtime/asn1.js","node_modules/jose/dist/browser/lib/format_pem.js","node_modules/jose/dist/browser/runtime/jwk_to_key.js","node_modules/jose/dist/browser/lib/check_key_type.js","node_modules/jose/dist/browser/lib/aesgcmkw.js","node_modules/jose/dist/browser/runtime/encrypt.js","node_modules/jose/dist/browser/lib/validate_crit.js","node_modules/jose/dist/browser/lib/validate_algorithms.js","node_modules/jose/dist/browser/jwe/general/decrypt.js","node_modules/jose/dist/browser/jwe/general/encrypt.js","node_modules/jose/dist/browser/jwe/flattened/encrypt.js","node_modules/jose/dist/browser/lib/encrypt_key_management.js","node_modules/jose/dist/browser/key/export.js","node_modules/jose/dist/browser/runtime/key_to_jwk.js","node_modules/jose/dist/browser/jws/compact/verify.js","node_modules/jose/dist/browser/jws/flattened/verify.js","node_modules/jose/dist/browser/runtime/verify.js","node_modules/jose/dist/browser/runtime/subtle_dsa.js","node_modules/jose/dist/browser/runtime/get_sign_verify_key.js","node_modules/jose/dist/browser/jws/general/verify.js","node_modules/jose/dist/browser/jwt/verify.js","node_modules/jose/dist/browser/lib/jwt_claims_set.js","node_modules/jose/dist/browser/lib/epoch.js","node_modules/jose/dist/browser/lib/secs.js","node_modules/jose/dist/browser/jwt/decrypt.js","node_modules/jose/dist/browser/jwe/compact/encrypt.js","node_modules/jose/dist/browser/jws/compact/sign.js","node_modules/jose/dist/browser/jws/flattened/sign.js","node_modules/jose/dist/browser/runtime/sign.js","node_modules/jose/dist/browser/jws/general/sign.js","node_modules/jose/dist/browser/jwt/sign.js","node_modules/jose/dist/browser/jwt/produce.js","node_modules/jose/dist/browser/jwt/encrypt.js","node_modules/jose/dist/browser/jwk/thumbprint.js","node_modules/jose/dist/browser/jwk/embedded.js","node_modules/jose/dist/browser/jwks/local.js","node_modules/jose/dist/browser/jwks/remote.js","node_modules/jose/dist/browser/runtime/fetch_jwks.js","node_modules/jose/dist/browser/jwt/unsecured.js","node_modules/jose/dist/browser/util/decode_protected_header.js","node_modules/jose/dist/browser/util/base64url.js","node_modules/jose/dist/browser/util/decode_jwt.js","node_modules/jose/dist/browser/key/generate_key_pair.js","node_modules/jose/dist/browser/runtime/generate.js","node_modules/jose/dist/browser/key/generate_secret.js","node_modules/jose/dist/browser/util/runtime.js","node_modules/jose/dist/browser/runtime/runtime.js","node_modules/@parcel/runtime-js/lib/runtime-8bfe7d84f6e9d3a2.js","node_modules/@parcel/runtime-js/lib/helpers/browser/js-loader.js","node_modules/@parcel/runtime-js/lib/helpers/cacheLoader.js","node_modules/@parcel/runtime-js/lib/runtime-385bf4426cb267d1.js"],"sourcesContent":["// modules are defined as an array\n// [ module function, map of requires ]\n//\n// map of requires is short require name -> numeric require\n//\n// anything defined in a previous bundle is accessed via the\n// orig method which is the require for previous bundles\n\n(function (modules, entry, mainEntry, parcelRequireName, globalName) {\n  /* eslint-disable no-undef */\n  var globalObject =\n    typeof globalThis !== 'undefined'\n      ? globalThis\n      : typeof self !== 'undefined'\n      ? self\n      : typeof window !== 'undefined'\n      ? window\n      : typeof global !== 'undefined'\n      ? global\n      : {};\n  /* eslint-enable no-undef */\n\n  // Save the require from previous bundle to this closure if any\n  var previousRequire =\n    typeof globalObject[parcelRequireName] === 'function' &&\n    globalObject[parcelRequireName];\n\n  var cache = previousRequire.cache || {};\n  // Do not use `require` to prevent Webpack from trying to bundle this call\n  var nodeRequire =\n    typeof module !== 'undefined' &&\n    typeof module.require === 'function' &&\n    module.require.bind(module);\n\n  function newRequire(name, jumped) {\n    if (!cache[name]) {\n      if (!modules[name]) {\n        // if we cannot find the module within our internal map or\n        // cache jump to the current global require ie. the last bundle\n        // that was added to the page.\n        var currentRequire =\n          typeof globalObject[parcelRequireName] === 'function' &&\n          globalObject[parcelRequireName];\n        if (!jumped && currentRequire) {\n          return currentRequire(name, true);\n        }\n\n        // If there are other bundles on this page the require from the\n        // previous one is saved to 'previousRequire'. Repeat this as\n        // many times as there are bundles until the module is found or\n        // we exhaust the require chain.\n        if (previousRequire) {\n          return previousRequire(name, true);\n        }\n\n        // Try the node require function if it exists.\n        if (nodeRequire && typeof name === 'string') {\n          return nodeRequire(name);\n        }\n\n        var err = new Error(\"Cannot find module '\" + name + \"'\");\n        err.code = 'MODULE_NOT_FOUND';\n        throw err;\n      }\n\n      localRequire.resolve = resolve;\n      localRequire.cache = {};\n\n      var module = (cache[name] = new newRequire.Module(name));\n\n      modules[name][0].call(\n        module.exports,\n        localRequire,\n        module,\n        module.exports,\n        this\n      );\n    }\n\n    return cache[name].exports;\n\n    function localRequire(x) {\n      var res = localRequire.resolve(x);\n      return res === false ? {} : newRequire(res);\n    }\n\n    function resolve(x) {\n      var id = modules[name][1][x];\n      return id != null ? id : x;\n    }\n  }\n\n  function Module(moduleName) {\n    this.id = moduleName;\n    this.bundle = newRequire;\n    this.exports = {};\n  }\n\n  newRequire.isParcelRequire = true;\n  newRequire.Module = Module;\n  newRequire.modules = modules;\n  newRequire.cache = cache;\n  newRequire.parent = previousRequire;\n  newRequire.register = function (id, exports) {\n    modules[id] = [\n      function (require, module) {\n        module.exports = exports;\n      },\n      {},\n    ];\n  };\n\n  Object.defineProperty(newRequire, 'root', {\n    get: function () {\n      return globalObject[parcelRequireName];\n    },\n  });\n\n  globalObject[parcelRequireName] = newRequire;\n\n  for (var i = 0; i < entry.length; i++) {\n    newRequire(entry[i]);\n  }\n\n  if (mainEntry) {\n    // Expose entry point to Node, AMD or browser globals\n    // Based on https://github.com/ForbesLindesay/umd/blob/master/template.js\n    var mainExports = newRequire(mainEntry);\n\n    // CommonJS\n    if (typeof exports === 'object' && typeof module !== 'undefined') {\n      module.exports = mainExports;\n\n      // RequireJS\n    } else if (typeof define === 'function' && define.amd) {\n      define(function () {\n        return mainExports;\n      });\n\n      // <script>\n    } else if (globalName) {\n      this[globalName] = mainExports;\n    }\n  }\n})({\"gb59R\":[function(require,module,exports) {\nrequire(\"13a07b7c90bd3ca\").register(require(\"82e551bc0106d234\").getBundleURL(\"c4cLN\"), JSON.parse('[\"c4cLN\",\"index.js\",\"joS1N\",\"EmailConfirmationWall.28f4a906.js\",\"g9O5g\",\"NotificationToast.31b92c6e.js\"]'));\n\n},{\"13a07b7c90bd3ca\":\"fyJL2\",\"82e551bc0106d234\":\"c7Tr5\"}],\"fyJL2\":[function(require,module,exports) {\n\"use strict\";\nvar mapping = new Map();\nfunction register(baseUrl, manifest) {\n    for(var i = 0; i < manifest.length - 1; i += 2)mapping.set(manifest[i], {\n        baseUrl: baseUrl,\n        path: manifest[i + 1]\n    });\n}\nfunction resolve(id) {\n    var resolved = mapping.get(id);\n    if (resolved == null) throw new Error(\"Could not resolve bundle with id \" + id);\n    return new URL(resolved.path, resolved.baseUrl).toString();\n}\nmodule.exports.register = register;\nmodule.exports.resolve = resolve;\n\n},{}],\"c7Tr5\":[function(require,module,exports) {\n\"use strict\";\nvar bundleURL = {};\nfunction getBundleURLCached(id) {\n    var value = bundleURL[id];\n    if (!value) {\n        value = getBundleURL();\n        bundleURL[id] = value;\n    }\n    return value;\n}\nfunction getBundleURL() {\n    try {\n        throw new Error();\n    } catch (err) {\n        var matches = (\"\" + err.stack).match(/(https?|file|ftp|(chrome|moz|safari-web)-extension):\\/\\/[^)\\n]+/g);\n        if (matches) // The first two stack frames will be this function and getBundleURLCached.\n        // Use the 3rd one, which will be a runtime in the original bundle.\n        return getBaseURL(matches[2]);\n    }\n    return \"/\";\n}\nfunction getBaseURL(url) {\n    return (\"\" + url).replace(/^((?:https?|file|ftp|(chrome|moz|safari-web)-extension):\\/\\/.+)\\/[^/]+$/, \"$1\") + \"/\";\n}\n// TODO: Replace uses with `new URL(url).origin` when ie11 is no longer supported.\nfunction getOrigin(url) {\n    var matches = (\"\" + url).match(/(https?|file|ftp|(chrome|moz|safari-web)-extension):\\/\\/[^/]+/);\n    if (!matches) throw new Error(\"Origin not found\");\n    return matches[0];\n}\nexports.getBundleURL = getBundleURLCached;\nexports.getBaseURL = getBaseURL;\nexports.getOrigin = getOrigin;\n\n},{}],\"8RSWf\":[function(require,module,exports) {\nvar _auth0Sdk = require(\"./auth0-sdk\");\nconst queue = window.CIAM || [];\nwindow.CIAM = {\n    push: (fn)=>{\n        fn();\n    },\n    getIdToken: (0, _auth0Sdk.getIdToken),\n    getAccessToken: (0, _auth0Sdk.getAccessToken),\n    getUserInfo: (0, _auth0Sdk.getUserInfo),\n    isAuthenticated: (0, _auth0Sdk.isAuthenticated),\n    isEmailVerified: (0, _auth0Sdk.isEmailVerified),\n    showEmailConfirmation: (0, _auth0Sdk.showEmailConfirmation),\n    showSilentLoginNotification: (0, _auth0Sdk.showSilentLoginNotification),\n    sendEmailVerification: (0, _auth0Sdk.sendEmailVerification),\n    getUserSubscriptions: (0, _auth0Sdk.getUserSubscriptions)\n};\nif (Array.isArray(queue)) queue.forEach((fn)=>fn());\nif (document.currentScript) {\n    let clientId = document.currentScript.getAttribute(\"data-client-id\");\n    let brand = document.currentScript.getAttribute(\"data-brand\");\n    // @ts-ignore\n    if (!clientId && typeof window.MEDIAHUIS !== \"undefined\" && window.MEDIAHUIS.config && window.MEDIAHUIS.config.auth0) // @ts-ignore\n    clientId = window.MEDIAHUIS.config.auth0.clientId;\n    // @ts-ignore\n    if (!brand && typeof document !== \"undefined\") // @ts-ignore\n    brand = document.title.indexOf(\"-\") ? document.title.split(\" - \")[1] : \"\";\n    if (clientId && brand) {\n        if (!document.getElementById(\"auth0_silent-login-root\")) {\n            var doc = document.createElement(\"div\");\n            doc.id = \"auth0_silent-login-root\";\n            document.body.appendChild(doc);\n        }\n        (0, _auth0Sdk.showSilentLoginNotification)({\n            clientId,\n            brand\n        });\n    } else console.warn('Missing \"data-client-id\" or \"data-brand\" attribute');\n}\n\n},{\"./auth0-sdk\":\"3ELjX\"}],\"3ELjX\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\n/**\n * @private\n * @param clientId Auth0 client id\n * @returns URLSearchParams\n */ parcelHelpers.export(exports, \"getConfig\", ()=>getConfig);\n/**\n * Get the access token of a logged in user. Useful when you need to send this token to a backend service from the client.\n *\n * @param clientId Auth0 client id\n * @returns Access token or null\n */ parcelHelpers.export(exports, \"getAccessToken\", ()=>getAccessToken);\n/**\n * Returns the access token fully parsed and decoded of a loggedin user.\n *\n * @param clientId Auth0 client id\n * @returns The parsed access token or null\n */ parcelHelpers.export(exports, \"getUserSubscriptions\", ()=>getUserSubscriptions);\n/**\n * Returns the access token fully parsed and decoded of a loggedin user.\n *\n * @param clientId Auth0 client id\n * @returns The parsed access token or null\n */ parcelHelpers.export(exports, \"getDecodedAccessToken\", ()=>getDecodedAccessToken);\n/**\n * Retrieve the raw id token of a logged in user. If you're looking to extract this infomration you can simply use the `getUserInfo` function instead.\n *\n * @param clientId Auth0 client id\n * @returns Raw JWT id token or null\n */ parcelHelpers.export(exports, \"getIdToken\", ()=>getIdToken);\n/**\n * Returns the id token fully parsed and decoded of a loggedin user.\n *\n * @param clientId Auth0 client id\n * @returns The parsed id token or null\n */ parcelHelpers.export(exports, \"getUserInfo\", ()=>getUserInfo);\n/**\n * Is the user authenticated?\n *\n * @param clientId Auth0 client id\n * @returns True if the user is authenticated, false otherwise\n */ parcelHelpers.export(exports, \"isAuthenticated\", ()=>isAuthenticated);\n/**\n * Is the email verified?\n *\n * @param clientId Auth0 client id\n * @returns True if the email is verified, false otherwise\n */ parcelHelpers.export(exports, \"isEmailVerified\", ()=>isEmailVerified);\nparcelHelpers.export(exports, \"sendEmailVerification\", ()=>sendEmailVerification);\n/**\n * Some brands require to show an email confirmation before reading any metered or plus articles.\n * showEmailConfirmation let you put our shared component based on the Mediahuis design system in your page.\n *\n * @param options The list of options to pass to the popup\n * @param options.clientId Auth0 client id\n * @param options.type The type of email confirmation to show\n * @param options.el The DOM element to render the email confirmation in\n * @returns\n */ parcelHelpers.export(exports, \"showEmailConfirmation\", ()=>showEmailConfirmation);\n/**\n * If you want to control when to show the silent login popup.\n *\n * Note that we're using the Mediahuis design system to create these popups.\n *\n * @param options The list of options to pass to the popup\n * @param options.clientId Auth0 client id\n * @param options.brand The full name of the brand (e.g. \"De Standaard\")\n * @returns\n */ parcelHelpers.export(exports, \"showSilentLoginNotification\", ()=>showSilentLoginNotification);\nvar _cookie = require(\"./modules/cookie\");\nfunction getConfig(clientId) {\n    return new URLSearchParams((0, _cookie.getCookie)(`auth0_${clientId}_config`));\n}\nfunction getAccessToken(clientId) {\n    return (0, _cookie.getCookie)(`auth0_${clientId}_acc_token`);\n}\nasync function getUserSubscriptions(clientId) {\n    const decodedAccessToken = await getDecodedAccessToken(clientId);\n    return decodedAccessToken?.[\"https://mediahuis.com/subscribed-accesses\"] ?? [];\n}\nasync function getDecodedAccessToken(clientId) {\n    return (0, _cookie.extractToken)(`auth0_${clientId}_acc_token`);\n}\nfunction getIdToken(clientId) {\n    return (0, _cookie.getCookie)(`auth0_${clientId}_id_token`);\n}\nasync function getUserInfo(clientId) {\n    return (0, _cookie.extractToken)(`auth0_${clientId}_id_token`);\n}\nfunction isAuthenticated(clientId) {\n    return !!getAccessToken(clientId) && !!getIdToken(clientId);\n}\nasync function isEmailVerified(clientId) {\n    const userInfo = await getUserInfo(clientId);\n    if (!userInfo) return false;\n    return userInfo.email_verified;\n}\nasync function sendEmailVerification(clientId) {\n    const config = getConfig(clientId);\n    const userInfo = await getUserInfo(clientId);\n    if (userInfo.email_verified || !config.has(\"base\") || !config.has(\"redirectUri\")) return false;\n    const searchParams = new URLSearchParams({\n        client_id: clientId,\n        response_type: \"token\",\n        audience: \"https://ciam-api.mediahuis.com\",\n        redirect_uri: `${window.location.origin}${config.get(\"redirectUri\")}`,\n        response_mode: \"web_message\",\n        prompt: \"none\"\n    });\n    const url = new URL(`${config.get(\"issuer\")}/authorize?${searchParams}`);\n    const iframe = document.createElement(\"iframe\");\n    return new Promise((resolve)=>{\n        window.addEventListener(\"message\", async function onMessage(event) {\n            if (event.data.type === \"authorization_response\") {\n                window.removeEventListener(\"message\", onMessage);\n                document.body.removeChild(iframe);\n                const verifyEmailRequestURL = new URL(`${window.location.origin}${config.get(\"base\")}/verify-email-request`);\n                verifyEmailRequestURL.searchParams.append(\"account\", userInfo.sub);\n                const token = event.data.response.access_token;\n                const resp = await this.fetch(verifyEmailRequestURL, {\n                    method: \"POST\",\n                    credentials: \"omit\",\n                    headers: {\n                        authorization: \"Bearer \" + token\n                    },\n                    body: JSON.stringify({\n                        clientId\n                    })\n                });\n                resolve(resp.ok);\n            }\n        });\n        iframe.src = url.toString();\n        document.body.appendChild(iframe);\n    });\n}\nasync function showEmailConfirmation({ type, brand, clientId, el }) {\n    const { appendEmailVerificationWall } = await require(\"66a47a449972960f\");\n    if (type !== \"paywall\") throw new Error(`Unsupported type: ${type}, only paywall is currently implemented.`);\n    if (!isAuthenticated(clientId)) throw new Error(`User is not authenticated.`);\n    const userInfo = await getUserInfo(clientId);\n    if (userInfo.email_verified) throw new Error(`User has already been verified.`);\n    return appendEmailVerificationWall(el, {\n        email: userInfo.email,\n        brand,\n        clientId\n    });\n}\nasync function showSilentLoginNotification({ clientId, brand }) {\n    if (!window?.location?.search?.includes(\"_sl=1\")) return;\n    const parsedUrl = new URL(window.location.href);\n    parsedUrl.searchParams.delete(\"_sl\");\n    window.history.replaceState(history.state, undefined, parsedUrl.toString());\n    const userInfo = await getUserInfo(clientId);\n    if (!userInfo.email) return;\n    const { appendNotificationToast } = await require(\"de87de1e0bec0e97\");\n    let root = document.getElementById(\"auth0_silent-login-root\");\n    if (!root) {\n        root = document.createElement(\"div\");\n        root.id = \"auth0_silent-login-root\";\n        root.className = \"chameleon-theme-mh\";\n        Object.assign(root.style, {\n            position: \"absolute\",\n            top: 0,\n            right: 0,\n            zIndex: \"9999\"\n        });\n    }\n    await appendNotificationToast(root, {\n        email: userInfo.email,\n        brand\n    });\n    return new Promise((resolve)=>{\n        requestAnimationFrame(()=>{\n            if (!document.getElementById(\"auth0_silent-login-root\")) document.body.appendChild(root);\n            resolve();\n        });\n    });\n}\n\n},{\"./modules/cookie\":\"lK6AJ\",\"66a47a449972960f\":\"jCXmG\",\"de87de1e0bec0e97\":\"cUaV9\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"lK6AJ\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nparcelHelpers.export(exports, \"getCookie\", ()=>getCookie);\nparcelHelpers.export(exports, \"extractToken\", ()=>extractToken);\nvar _jose = require(\"jose\");\nfunction getCookie(cookieName) {\n    const cookies = document.cookie.split(\";\");\n    for (const c of cookies){\n        const [name, ...value] = c.split(\"=\");\n        if (name.trim() === cookieName) return value.join(\"=\");\n    }\n    return null;\n}\nfunction extractToken(cookieName) {\n    const cookie = getCookie(cookieName);\n    if (!cookie) return null;\n    return (0, _jose.decodeJwt)(cookie);\n}\n\n},{\"jose\":\"6gglG\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"6gglG\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nparcelHelpers.export(exports, \"compactDecrypt\", ()=>(0, _decryptJs.compactDecrypt));\nparcelHelpers.export(exports, \"flattenedDecrypt\", ()=>(0, _decryptJs1.flattenedDecrypt));\nparcelHelpers.export(exports, \"generalDecrypt\", ()=>(0, _decryptJs2.generalDecrypt));\nparcelHelpers.export(exports, \"GeneralEncrypt\", ()=>(0, _encryptJs.GeneralEncrypt));\nparcelHelpers.export(exports, \"compactVerify\", ()=>(0, _verifyJs.compactVerify));\nparcelHelpers.export(exports, \"flattenedVerify\", ()=>(0, _verifyJs1.flattenedVerify));\nparcelHelpers.export(exports, \"generalVerify\", ()=>(0, _verifyJs2.generalVerify));\nparcelHelpers.export(exports, \"jwtVerify\", ()=>(0, _verifyJs3.jwtVerify));\nparcelHelpers.export(exports, \"jwtDecrypt\", ()=>(0, _decryptJs3.jwtDecrypt));\nparcelHelpers.export(exports, \"CompactEncrypt\", ()=>(0, _encryptJs1.CompactEncrypt));\nparcelHelpers.export(exports, \"FlattenedEncrypt\", ()=>(0, _encryptJs2.FlattenedEncrypt));\nparcelHelpers.export(exports, \"CompactSign\", ()=>(0, _signJs.CompactSign));\nparcelHelpers.export(exports, \"FlattenedSign\", ()=>(0, _signJs1.FlattenedSign));\nparcelHelpers.export(exports, \"GeneralSign\", ()=>(0, _signJs2.GeneralSign));\nparcelHelpers.export(exports, \"SignJWT\", ()=>(0, _signJs3.SignJWT));\nparcelHelpers.export(exports, \"EncryptJWT\", ()=>(0, _encryptJs3.EncryptJWT));\nparcelHelpers.export(exports, \"calculateJwkThumbprint\", ()=>(0, _thumbprintJs.calculateJwkThumbprint));\nparcelHelpers.export(exports, \"calculateJwkThumbprintUri\", ()=>(0, _thumbprintJs.calculateJwkThumbprintUri));\nparcelHelpers.export(exports, \"EmbeddedJWK\", ()=>(0, _embeddedJs.EmbeddedJWK));\nparcelHelpers.export(exports, \"createLocalJWKSet\", ()=>(0, _localJs.createLocalJWKSet));\nparcelHelpers.export(exports, \"createRemoteJWKSet\", ()=>(0, _remoteJs.createRemoteJWKSet));\nparcelHelpers.export(exports, \"UnsecuredJWT\", ()=>(0, _unsecuredJs.UnsecuredJWT));\nparcelHelpers.export(exports, \"exportPKCS8\", ()=>(0, _exportJs.exportPKCS8));\nparcelHelpers.export(exports, \"exportSPKI\", ()=>(0, _exportJs.exportSPKI));\nparcelHelpers.export(exports, \"exportJWK\", ()=>(0, _exportJs.exportJWK));\nparcelHelpers.export(exports, \"importSPKI\", ()=>(0, _importJs.importSPKI));\nparcelHelpers.export(exports, \"importPKCS8\", ()=>(0, _importJs.importPKCS8));\nparcelHelpers.export(exports, \"importX509\", ()=>(0, _importJs.importX509));\nparcelHelpers.export(exports, \"importJWK\", ()=>(0, _importJs.importJWK));\nparcelHelpers.export(exports, \"decodeProtectedHeader\", ()=>(0, _decodeProtectedHeaderJs.decodeProtectedHeader));\nparcelHelpers.export(exports, \"decodeJwt\", ()=>(0, _decodeJwtJs.decodeJwt));\nparcelHelpers.export(exports, \"generateKeyPair\", ()=>(0, _generateKeyPairJs.generateKeyPair));\nparcelHelpers.export(exports, \"generateSecret\", ()=>(0, _generateSecretJs.generateSecret));\nparcelHelpers.export(exports, \"cryptoRuntime\", ()=>(0, _runtimeJsDefault.default));\nparcelHelpers.export(exports, \"errors\", ()=>_errorsJs);\nparcelHelpers.export(exports, \"base64url\", ()=>_base64UrlJs);\nvar _decryptJs = require(\"./jwe/compact/decrypt.js\");\nvar _decryptJs1 = require(\"./jwe/flattened/decrypt.js\");\nvar _decryptJs2 = require(\"./jwe/general/decrypt.js\");\nvar _encryptJs = require(\"./jwe/general/encrypt.js\");\nvar _verifyJs = require(\"./jws/compact/verify.js\");\nvar _verifyJs1 = require(\"./jws/flattened/verify.js\");\nvar _verifyJs2 = require(\"./jws/general/verify.js\");\nvar _verifyJs3 = require(\"./jwt/verify.js\");\nvar _decryptJs3 = require(\"./jwt/decrypt.js\");\nvar _encryptJs1 = require(\"./jwe/compact/encrypt.js\");\nvar _encryptJs2 = require(\"./jwe/flattened/encrypt.js\");\nvar _signJs = require(\"./jws/compact/sign.js\");\nvar _signJs1 = require(\"./jws/flattened/sign.js\");\nvar _signJs2 = require(\"./jws/general/sign.js\");\nvar _signJs3 = require(\"./jwt/sign.js\");\nvar _encryptJs3 = require(\"./jwt/encrypt.js\");\nvar _thumbprintJs = require(\"./jwk/thumbprint.js\");\nvar _embeddedJs = require(\"./jwk/embedded.js\");\nvar _localJs = require(\"./jwks/local.js\");\nvar _remoteJs = require(\"./jwks/remote.js\");\nvar _unsecuredJs = require(\"./jwt/unsecured.js\");\nvar _exportJs = require(\"./key/export.js\");\nvar _importJs = require(\"./key/import.js\");\nvar _decodeProtectedHeaderJs = require(\"./util/decode_protected_header.js\");\nvar _decodeJwtJs = require(\"./util/decode_jwt.js\");\nvar _errorsJs = require(\"./util/errors.js\");\nvar _generateKeyPairJs = require(\"./key/generate_key_pair.js\");\nvar _generateSecretJs = require(\"./key/generate_secret.js\");\nvar _base64UrlJs = require(\"./util/base64url.js\");\nvar _runtimeJs = require(\"./util/runtime.js\");\nvar _runtimeJsDefault = parcelHelpers.interopDefault(_runtimeJs);\n\n},{\"./jwe/compact/decrypt.js\":\"e85ol\",\"./jwe/flattened/decrypt.js\":\"5HUvj\",\"./jwe/general/decrypt.js\":\"av2Hr\",\"./jwe/general/encrypt.js\":\"bS3zk\",\"./jws/compact/verify.js\":\"dFemI\",\"./jws/flattened/verify.js\":\"2EX3K\",\"./jws/general/verify.js\":\"f4rEE\",\"./jwt/verify.js\":\"9uAkr\",\"./jwt/decrypt.js\":\"lrzVM\",\"./jwe/compact/encrypt.js\":\"2Mv4N\",\"./jwe/flattened/encrypt.js\":\"gNmwl\",\"./jws/compact/sign.js\":\"4n4CU\",\"./jws/flattened/sign.js\":\"lqvdz\",\"./jws/general/sign.js\":\"chvqI\",\"./jwt/sign.js\":\"ix6nL\",\"./jwt/encrypt.js\":\"0M0j5\",\"./jwk/thumbprint.js\":\"dM89g\",\"./jwk/embedded.js\":\"kUHEj\",\"./jwks/local.js\":\"gZQHZ\",\"./jwks/remote.js\":\"gn9Cj\",\"./jwt/unsecured.js\":\"8DlpU\",\"./key/export.js\":\"1EYA6\",\"./key/import.js\":\"661YL\",\"./util/decode_protected_header.js\":\"kBsUQ\",\"./util/decode_jwt.js\":\"aGTXa\",\"./util/errors.js\":\"4fsOp\",\"./key/generate_key_pair.js\":\"h6CYR\",\"./key/generate_secret.js\":\"jmQID\",\"./util/base64url.js\":\"bljA2\",\"./util/runtime.js\":\"l9K66\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"e85ol\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nparcelHelpers.export(exports, \"compactDecrypt\", ()=>compactDecrypt);\nvar _decryptJs = require(\"../flattened/decrypt.js\");\nvar _errorsJs = require(\"../../util/errors.js\");\nvar _bufferUtilsJs = require(\"../../lib/buffer_utils.js\");\nasync function compactDecrypt(jwe, key, options) {\n    if (jwe instanceof Uint8Array) jwe = (0, _bufferUtilsJs.decoder).decode(jwe);\n    if (typeof jwe !== \"string\") throw new (0, _errorsJs.JWEInvalid)(\"Compact JWE must be a string or Uint8Array\");\n    const { 0: protectedHeader, 1: encryptedKey, 2: iv, 3: ciphertext, 4: tag, length } = jwe.split(\".\");\n    if (length !== 5) throw new (0, _errorsJs.JWEInvalid)(\"Invalid Compact JWE\");\n    const decrypted = await (0, _decryptJs.flattenedDecrypt)({\n        ciphertext,\n        iv: iv || undefined,\n        protected: protectedHeader || undefined,\n        tag: tag || undefined,\n        encrypted_key: encryptedKey || undefined\n    }, key, options);\n    const result = {\n        plaintext: decrypted.plaintext,\n        protectedHeader: decrypted.protectedHeader\n    };\n    if (typeof key === \"function\") return {\n        ...result,\n        key: decrypted.key\n    };\n    return result;\n}\n\n},{\"../flattened/decrypt.js\":\"5HUvj\",\"../../util/errors.js\":\"4fsOp\",\"../../lib/buffer_utils.js\":\"h0x9u\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"5HUvj\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nparcelHelpers.export(exports, \"flattenedDecrypt\", ()=>flattenedDecrypt);\nvar _base64UrlJs = require(\"../../runtime/base64url.js\");\nvar _decryptJs = require(\"../../runtime/decrypt.js\");\nvar _decryptJsDefault = parcelHelpers.interopDefault(_decryptJs);\nvar _zlibJs = require(\"../../runtime/zlib.js\");\nvar _errorsJs = require(\"../../util/errors.js\");\nvar _isDisjointJs = require(\"../../lib/is_disjoint.js\");\nvar _isDisjointJsDefault = parcelHelpers.interopDefault(_isDisjointJs);\nvar _isObjectJs = require(\"../../lib/is_object.js\");\nvar _isObjectJsDefault = parcelHelpers.interopDefault(_isObjectJs);\nvar _decryptKeyManagementJs = require(\"../../lib/decrypt_key_management.js\");\nvar _decryptKeyManagementJsDefault = parcelHelpers.interopDefault(_decryptKeyManagementJs);\nvar _bufferUtilsJs = require(\"../../lib/buffer_utils.js\");\nvar _cekJs = require(\"../../lib/cek.js\");\nvar _cekJsDefault = parcelHelpers.interopDefault(_cekJs);\nvar _validateCritJs = require(\"../../lib/validate_crit.js\");\nvar _validateCritJsDefault = parcelHelpers.interopDefault(_validateCritJs);\nvar _validateAlgorithmsJs = require(\"../../lib/validate_algorithms.js\");\nvar _validateAlgorithmsJsDefault = parcelHelpers.interopDefault(_validateAlgorithmsJs);\nasync function flattenedDecrypt(jwe, key, options) {\n    var _a;\n    if (!(0, _isObjectJsDefault.default)(jwe)) throw new (0, _errorsJs.JWEInvalid)(\"Flattened JWE must be an object\");\n    if (jwe.protected === undefined && jwe.header === undefined && jwe.unprotected === undefined) throw new (0, _errorsJs.JWEInvalid)(\"JOSE Header missing\");\n    if (typeof jwe.iv !== \"string\") throw new (0, _errorsJs.JWEInvalid)(\"JWE Initialization Vector missing or incorrect type\");\n    if (typeof jwe.ciphertext !== \"string\") throw new (0, _errorsJs.JWEInvalid)(\"JWE Ciphertext missing or incorrect type\");\n    if (typeof jwe.tag !== \"string\") throw new (0, _errorsJs.JWEInvalid)(\"JWE Authentication Tag missing or incorrect type\");\n    if (jwe.protected !== undefined && typeof jwe.protected !== \"string\") throw new (0, _errorsJs.JWEInvalid)(\"JWE Protected Header incorrect type\");\n    if (jwe.encrypted_key !== undefined && typeof jwe.encrypted_key !== \"string\") throw new (0, _errorsJs.JWEInvalid)(\"JWE Encrypted Key incorrect type\");\n    if (jwe.aad !== undefined && typeof jwe.aad !== \"string\") throw new (0, _errorsJs.JWEInvalid)(\"JWE AAD incorrect type\");\n    if (jwe.header !== undefined && !(0, _isObjectJsDefault.default)(jwe.header)) throw new (0, _errorsJs.JWEInvalid)(\"JWE Shared Unprotected Header incorrect type\");\n    if (jwe.unprotected !== undefined && !(0, _isObjectJsDefault.default)(jwe.unprotected)) throw new (0, _errorsJs.JWEInvalid)(\"JWE Per-Recipient Unprotected Header incorrect type\");\n    let parsedProt;\n    if (jwe.protected) try {\n        const protectedHeader = (0, _base64UrlJs.decode)(jwe.protected);\n        parsedProt = JSON.parse((0, _bufferUtilsJs.decoder).decode(protectedHeader));\n    } catch (_b) {\n        throw new (0, _errorsJs.JWEInvalid)(\"JWE Protected Header is invalid\");\n    }\n    if (!(0, _isDisjointJsDefault.default)(parsedProt, jwe.header, jwe.unprotected)) throw new (0, _errorsJs.JWEInvalid)(\"JWE Protected, JWE Unprotected Header, and JWE Per-Recipient Unprotected Header Parameter names must be disjoint\");\n    const joseHeader = {\n        ...parsedProt,\n        ...jwe.header,\n        ...jwe.unprotected\n    };\n    (0, _validateCritJsDefault.default)((0, _errorsJs.JWEInvalid), new Map(), options === null || options === void 0 ? void 0 : options.crit, parsedProt, joseHeader);\n    if (joseHeader.zip !== undefined) {\n        if (!parsedProt || !parsedProt.zip) throw new (0, _errorsJs.JWEInvalid)('JWE \"zip\" (Compression Algorithm) Header MUST be integrity protected');\n        if (joseHeader.zip !== \"DEF\") throw new (0, _errorsJs.JOSENotSupported)('Unsupported JWE \"zip\" (Compression Algorithm) Header Parameter value');\n    }\n    const { alg, enc } = joseHeader;\n    if (typeof alg !== \"string\" || !alg) throw new (0, _errorsJs.JWEInvalid)(\"missing JWE Algorithm (alg) in JWE Header\");\n    if (typeof enc !== \"string\" || !enc) throw new (0, _errorsJs.JWEInvalid)(\"missing JWE Encryption Algorithm (enc) in JWE Header\");\n    const keyManagementAlgorithms = options && (0, _validateAlgorithmsJsDefault.default)(\"keyManagementAlgorithms\", options.keyManagementAlgorithms);\n    const contentEncryptionAlgorithms = options && (0, _validateAlgorithmsJsDefault.default)(\"contentEncryptionAlgorithms\", options.contentEncryptionAlgorithms);\n    if (keyManagementAlgorithms && !keyManagementAlgorithms.has(alg)) throw new (0, _errorsJs.JOSEAlgNotAllowed)('\"alg\" (Algorithm) Header Parameter not allowed');\n    if (contentEncryptionAlgorithms && !contentEncryptionAlgorithms.has(enc)) throw new (0, _errorsJs.JOSEAlgNotAllowed)('\"enc\" (Encryption Algorithm) Header Parameter not allowed');\n    let encryptedKey;\n    if (jwe.encrypted_key !== undefined) try {\n        encryptedKey = (0, _base64UrlJs.decode)(jwe.encrypted_key);\n    } catch (_c) {\n        throw new (0, _errorsJs.JWEInvalid)(\"Failed to base64url decode the encrypted_key\");\n    }\n    let resolvedKey = false;\n    if (typeof key === \"function\") {\n        key = await key(parsedProt, jwe);\n        resolvedKey = true;\n    }\n    let cek;\n    try {\n        cek = await (0, _decryptKeyManagementJsDefault.default)(alg, key, encryptedKey, joseHeader, options);\n    } catch (err) {\n        if (err instanceof TypeError || err instanceof (0, _errorsJs.JWEInvalid) || err instanceof (0, _errorsJs.JOSENotSupported)) throw err;\n        cek = (0, _cekJsDefault.default)(enc);\n    }\n    let iv;\n    let tag;\n    try {\n        iv = (0, _base64UrlJs.decode)(jwe.iv);\n    } catch (_d) {\n        throw new (0, _errorsJs.JWEInvalid)(\"Failed to base64url decode the iv\");\n    }\n    try {\n        tag = (0, _base64UrlJs.decode)(jwe.tag);\n    } catch (_e) {\n        throw new (0, _errorsJs.JWEInvalid)(\"Failed to base64url decode the tag\");\n    }\n    const protectedHeader = (0, _bufferUtilsJs.encoder).encode((_a = jwe.protected) !== null && _a !== void 0 ? _a : \"\");\n    let additionalData;\n    if (jwe.aad !== undefined) additionalData = (0, _bufferUtilsJs.concat)(protectedHeader, (0, _bufferUtilsJs.encoder).encode(\".\"), (0, _bufferUtilsJs.encoder).encode(jwe.aad));\n    else additionalData = protectedHeader;\n    let ciphertext;\n    try {\n        ciphertext = (0, _base64UrlJs.decode)(jwe.ciphertext);\n    } catch (_f) {\n        throw new (0, _errorsJs.JWEInvalid)(\"Failed to base64url decode the ciphertext\");\n    }\n    let plaintext = await (0, _decryptJsDefault.default)(enc, cek, ciphertext, iv, tag, additionalData);\n    if (joseHeader.zip === \"DEF\") plaintext = await ((options === null || options === void 0 ? void 0 : options.inflateRaw) || (0, _zlibJs.inflate))(plaintext);\n    const result = {\n        plaintext\n    };\n    if (jwe.protected !== undefined) result.protectedHeader = parsedProt;\n    if (jwe.aad !== undefined) try {\n        result.additionalAuthenticatedData = (0, _base64UrlJs.decode)(jwe.aad);\n    } catch (_g) {\n        throw new (0, _errorsJs.JWEInvalid)(\"Failed to base64url decode the aad\");\n    }\n    if (jwe.unprotected !== undefined) result.sharedUnprotectedHeader = jwe.unprotected;\n    if (jwe.header !== undefined) result.unprotectedHeader = jwe.header;\n    if (resolvedKey) return {\n        ...result,\n        key\n    };\n    return result;\n}\n\n},{\"../../runtime/base64url.js\":\"8Djx4\",\"../../runtime/decrypt.js\":\"dPMLp\",\"../../runtime/zlib.js\":\"dM1d1\",\"../../util/errors.js\":\"4fsOp\",\"../../lib/is_disjoint.js\":\"91YXn\",\"../../lib/is_object.js\":\"daSnu\",\"../../lib/decrypt_key_management.js\":\"bdNgc\",\"../../lib/buffer_utils.js\":\"h0x9u\",\"../../lib/cek.js\":\"cA5vi\",\"../../lib/validate_crit.js\":\"1cFtE\",\"../../lib/validate_algorithms.js\":\"fDDwK\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"8Djx4\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nparcelHelpers.export(exports, \"encodeBase64\", ()=>encodeBase64);\nparcelHelpers.export(exports, \"encode\", ()=>encode);\nparcelHelpers.export(exports, \"decodeBase64\", ()=>decodeBase64);\nparcelHelpers.export(exports, \"decode\", ()=>decode);\nvar _bufferUtilsJs = require(\"../lib/buffer_utils.js\");\nconst encodeBase64 = (input)=>{\n    let unencoded = input;\n    if (typeof unencoded === \"string\") unencoded = (0, _bufferUtilsJs.encoder).encode(unencoded);\n    const CHUNK_SIZE = 0x8000;\n    const arr = [];\n    for(let i = 0; i < unencoded.length; i += CHUNK_SIZE)arr.push(String.fromCharCode.apply(null, unencoded.subarray(i, i + CHUNK_SIZE)));\n    return btoa(arr.join(\"\"));\n};\nconst encode = (input)=>{\n    return encodeBase64(input).replace(/=/g, \"\").replace(/\\+/g, \"-\").replace(/\\//g, \"_\");\n};\nconst decodeBase64 = (encoded)=>{\n    const binary = atob(encoded);\n    const bytes = new Uint8Array(binary.length);\n    for(let i = 0; i < binary.length; i++)bytes[i] = binary.charCodeAt(i);\n    return bytes;\n};\nconst decode = (input)=>{\n    let encoded = input;\n    if (encoded instanceof Uint8Array) encoded = (0, _bufferUtilsJs.decoder).decode(encoded);\n    encoded = encoded.replace(/-/g, \"+\").replace(/_/g, \"/\").replace(/\\s/g, \"\");\n    try {\n        return decodeBase64(encoded);\n    } catch (_a) {\n        throw new TypeError(\"The input to be decoded is not correctly encoded.\");\n    }\n};\n\n},{\"../lib/buffer_utils.js\":\"h0x9u\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"h0x9u\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nparcelHelpers.export(exports, \"encoder\", ()=>encoder);\nparcelHelpers.export(exports, \"decoder\", ()=>decoder);\nparcelHelpers.export(exports, \"concat\", ()=>concat);\nparcelHelpers.export(exports, \"p2s\", ()=>p2s);\nparcelHelpers.export(exports, \"uint64be\", ()=>uint64be);\nparcelHelpers.export(exports, \"uint32be\", ()=>uint32be);\nparcelHelpers.export(exports, \"lengthAndInput\", ()=>lengthAndInput);\nparcelHelpers.export(exports, \"concatKdf\", ()=>concatKdf);\nvar _digestJs = require(\"../runtime/digest.js\");\nvar _digestJsDefault = parcelHelpers.interopDefault(_digestJs);\nconst encoder = new TextEncoder();\nconst decoder = new TextDecoder();\nconst MAX_INT32 = 2 ** 32;\nfunction concat(...buffers) {\n    const size = buffers.reduce((acc, { length })=>acc + length, 0);\n    const buf = new Uint8Array(size);\n    let i = 0;\n    buffers.forEach((buffer)=>{\n        buf.set(buffer, i);\n        i += buffer.length;\n    });\n    return buf;\n}\nfunction p2s(alg, p2sInput) {\n    return concat(encoder.encode(alg), new Uint8Array([\n        0\n    ]), p2sInput);\n}\nfunction writeUInt32BE(buf, value, offset) {\n    if (value < 0 || value >= MAX_INT32) throw new RangeError(`value must be >= 0 and <= ${MAX_INT32 - 1}. Received ${value}`);\n    buf.set([\n        value >>> 24,\n        value >>> 16,\n        value >>> 8,\n        value & 0xff\n    ], offset);\n}\nfunction uint64be(value) {\n    const high = Math.floor(value / MAX_INT32);\n    const low = value % MAX_INT32;\n    const buf = new Uint8Array(8);\n    writeUInt32BE(buf, high, 0);\n    writeUInt32BE(buf, low, 4);\n    return buf;\n}\nfunction uint32be(value) {\n    const buf = new Uint8Array(4);\n    writeUInt32BE(buf, value);\n    return buf;\n}\nfunction lengthAndInput(input) {\n    return concat(uint32be(input.length), input);\n}\nasync function concatKdf(secret, bits, value) {\n    const iterations = Math.ceil((bits >> 3) / 32);\n    const res = new Uint8Array(iterations * 32);\n    for(let iter = 0; iter < iterations; iter++){\n        const buf = new Uint8Array(4 + secret.length + value.length);\n        buf.set(uint32be(iter + 1));\n        buf.set(secret, 4);\n        buf.set(value, 4 + secret.length);\n        res.set(await (0, _digestJsDefault.default)(\"sha256\", buf), iter * 32);\n    }\n    return res.slice(0, bits >> 3);\n}\n\n},{\"../runtime/digest.js\":\"hdTL7\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"hdTL7\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nvar _webcryptoJs = require(\"./webcrypto.js\");\nvar _webcryptoJsDefault = parcelHelpers.interopDefault(_webcryptoJs);\nconst digest = async (algorithm, data)=>{\n    const subtleDigest = `SHA-${algorithm.slice(-3)}`;\n    return new Uint8Array(await (0, _webcryptoJsDefault.default).subtle.digest(subtleDigest, data));\n};\nexports.default = digest;\n\n},{\"./webcrypto.js\":\"aUHBb\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"aUHBb\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nparcelHelpers.export(exports, \"isCryptoKey\", ()=>isCryptoKey);\nexports.default = crypto;\nconst isCryptoKey = (key)=>key instanceof CryptoKey;\n\n},{\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"k3151\":[function(require,module,exports) {\nexports.interopDefault = function(a) {\n    return a && a.__esModule ? a : {\n        default: a\n    };\n};\nexports.defineInteropFlag = function(a) {\n    Object.defineProperty(a, \"__esModule\", {\n        value: true\n    });\n};\nexports.exportAll = function(source, dest) {\n    Object.keys(source).forEach(function(key) {\n        if (key === \"default\" || key === \"__esModule\" || Object.prototype.hasOwnProperty.call(dest, key)) return;\n        Object.defineProperty(dest, key, {\n            enumerable: true,\n            get: function() {\n                return source[key];\n            }\n        });\n    });\n    return dest;\n};\nexports.export = function(dest, destName, get) {\n    Object.defineProperty(dest, destName, {\n        enumerable: true,\n        get: get\n    });\n};\n\n},{}],\"dPMLp\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nvar _bufferUtilsJs = require(\"../lib/buffer_utils.js\");\nvar _checkIvLengthJs = require(\"../lib/check_iv_length.js\");\nvar _checkIvLengthJsDefault = parcelHelpers.interopDefault(_checkIvLengthJs);\nvar _checkCekLengthJs = require(\"./check_cek_length.js\");\nvar _checkCekLengthJsDefault = parcelHelpers.interopDefault(_checkCekLengthJs);\nvar _timingSafeEqualJs = require(\"./timing_safe_equal.js\");\nvar _timingSafeEqualJsDefault = parcelHelpers.interopDefault(_timingSafeEqualJs);\nvar _errorsJs = require(\"../util/errors.js\");\nvar _webcryptoJs = require(\"./webcrypto.js\");\nvar _webcryptoJsDefault = parcelHelpers.interopDefault(_webcryptoJs);\nvar _cryptoKeyJs = require(\"../lib/crypto_key.js\");\nvar _invalidKeyInputJs = require(\"../lib/invalid_key_input.js\");\nvar _invalidKeyInputJsDefault = parcelHelpers.interopDefault(_invalidKeyInputJs);\nvar _isKeyLikeJs = require(\"./is_key_like.js\");\nasync function cbcDecrypt(enc, cek, ciphertext, iv, tag, aad) {\n    if (!(cek instanceof Uint8Array)) throw new TypeError((0, _invalidKeyInputJsDefault.default)(cek, \"Uint8Array\"));\n    const keySize = parseInt(enc.slice(1, 4), 10);\n    const encKey = await (0, _webcryptoJsDefault.default).subtle.importKey(\"raw\", cek.subarray(keySize >> 3), \"AES-CBC\", false, [\n        \"decrypt\"\n    ]);\n    const macKey = await (0, _webcryptoJsDefault.default).subtle.importKey(\"raw\", cek.subarray(0, keySize >> 3), {\n        hash: `SHA-${keySize << 1}`,\n        name: \"HMAC\"\n    }, false, [\n        \"sign\"\n    ]);\n    const macData = (0, _bufferUtilsJs.concat)(aad, iv, ciphertext, (0, _bufferUtilsJs.uint64be)(aad.length << 3));\n    const expectedTag = new Uint8Array((await (0, _webcryptoJsDefault.default).subtle.sign(\"HMAC\", macKey, macData)).slice(0, keySize >> 3));\n    let macCheckPassed;\n    try {\n        macCheckPassed = (0, _timingSafeEqualJsDefault.default)(tag, expectedTag);\n    } catch (_a) {}\n    if (!macCheckPassed) throw new (0, _errorsJs.JWEDecryptionFailed)();\n    let plaintext;\n    try {\n        plaintext = new Uint8Array(await (0, _webcryptoJsDefault.default).subtle.decrypt({\n            iv,\n            name: \"AES-CBC\"\n        }, encKey, ciphertext));\n    } catch (_b) {}\n    if (!plaintext) throw new (0, _errorsJs.JWEDecryptionFailed)();\n    return plaintext;\n}\nasync function gcmDecrypt(enc, cek, ciphertext, iv, tag, aad) {\n    let encKey;\n    if (cek instanceof Uint8Array) encKey = await (0, _webcryptoJsDefault.default).subtle.importKey(\"raw\", cek, \"AES-GCM\", false, [\n        \"decrypt\"\n    ]);\n    else {\n        (0, _cryptoKeyJs.checkEncCryptoKey)(cek, enc, \"decrypt\");\n        encKey = cek;\n    }\n    try {\n        return new Uint8Array(await (0, _webcryptoJsDefault.default).subtle.decrypt({\n            additionalData: aad,\n            iv,\n            name: \"AES-GCM\",\n            tagLength: 128\n        }, encKey, (0, _bufferUtilsJs.concat)(ciphertext, tag)));\n    } catch (_a) {\n        throw new (0, _errorsJs.JWEDecryptionFailed)();\n    }\n}\nconst decrypt = async (enc, cek, ciphertext, iv, tag, aad)=>{\n    if (!(0, _webcryptoJs.isCryptoKey)(cek) && !(cek instanceof Uint8Array)) throw new TypeError((0, _invalidKeyInputJsDefault.default)(cek, ...(0, _isKeyLikeJs.types), \"Uint8Array\"));\n    (0, _checkIvLengthJsDefault.default)(enc, iv);\n    switch(enc){\n        case \"A128CBC-HS256\":\n        case \"A192CBC-HS384\":\n        case \"A256CBC-HS512\":\n            if (cek instanceof Uint8Array) (0, _checkCekLengthJsDefault.default)(cek, parseInt(enc.slice(-3), 10));\n            return cbcDecrypt(enc, cek, ciphertext, iv, tag, aad);\n        case \"A128GCM\":\n        case \"A192GCM\":\n        case \"A256GCM\":\n            if (cek instanceof Uint8Array) (0, _checkCekLengthJsDefault.default)(cek, parseInt(enc.slice(1, 4), 10));\n            return gcmDecrypt(enc, cek, ciphertext, iv, tag, aad);\n        default:\n            throw new (0, _errorsJs.JOSENotSupported)(\"Unsupported JWE Content Encryption Algorithm\");\n    }\n};\nexports.default = decrypt;\n\n},{\"../lib/buffer_utils.js\":\"h0x9u\",\"../lib/check_iv_length.js\":\"7za2M\",\"./check_cek_length.js\":\"9VrK5\",\"./timing_safe_equal.js\":\"k4wY7\",\"../util/errors.js\":\"4fsOp\",\"./webcrypto.js\":\"aUHBb\",\"../lib/crypto_key.js\":\"gM0cz\",\"../lib/invalid_key_input.js\":\"5GTGb\",\"./is_key_like.js\":\"9kDjz\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"7za2M\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nvar _errorsJs = require(\"../util/errors.js\");\nvar _ivJs = require(\"./iv.js\");\nconst checkIvLength = (enc, iv)=>{\n    if (iv.length << 3 !== (0, _ivJs.bitLength)(enc)) throw new (0, _errorsJs.JWEInvalid)(\"Invalid Initialization Vector length\");\n};\nexports.default = checkIvLength;\n\n},{\"../util/errors.js\":\"4fsOp\",\"./iv.js\":\"bvMJc\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"4fsOp\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nparcelHelpers.export(exports, \"JOSEError\", ()=>JOSEError);\nparcelHelpers.export(exports, \"JWTClaimValidationFailed\", ()=>JWTClaimValidationFailed);\nparcelHelpers.export(exports, \"JWTExpired\", ()=>JWTExpired);\nparcelHelpers.export(exports, \"JOSEAlgNotAllowed\", ()=>JOSEAlgNotAllowed);\nparcelHelpers.export(exports, \"JOSENotSupported\", ()=>JOSENotSupported);\nparcelHelpers.export(exports, \"JWEDecryptionFailed\", ()=>JWEDecryptionFailed);\nparcelHelpers.export(exports, \"JWEInvalid\", ()=>JWEInvalid);\nparcelHelpers.export(exports, \"JWSInvalid\", ()=>JWSInvalid);\nparcelHelpers.export(exports, \"JWTInvalid\", ()=>JWTInvalid);\nparcelHelpers.export(exports, \"JWKInvalid\", ()=>JWKInvalid);\nparcelHelpers.export(exports, \"JWKSInvalid\", ()=>JWKSInvalid);\nparcelHelpers.export(exports, \"JWKSNoMatchingKey\", ()=>JWKSNoMatchingKey);\nparcelHelpers.export(exports, \"JWKSMultipleMatchingKeys\", ()=>JWKSMultipleMatchingKeys);\nparcelHelpers.export(exports, \"JWKSTimeout\", ()=>JWKSTimeout);\nparcelHelpers.export(exports, \"JWSSignatureVerificationFailed\", ()=>JWSSignatureVerificationFailed);\nclass JOSEError extends Error {\n    static get code() {\n        return \"ERR_JOSE_GENERIC\";\n    }\n    constructor(message){\n        var _a;\n        super(message);\n        this.code = \"ERR_JOSE_GENERIC\";\n        this.name = this.constructor.name;\n        (_a = Error.captureStackTrace) === null || _a === void 0 || _a.call(Error, this, this.constructor);\n    }\n}\nclass JWTClaimValidationFailed extends JOSEError {\n    static get code() {\n        return \"ERR_JWT_CLAIM_VALIDATION_FAILED\";\n    }\n    constructor(message, claim = \"unspecified\", reason = \"unspecified\"){\n        super(message);\n        this.code = \"ERR_JWT_CLAIM_VALIDATION_FAILED\";\n        this.claim = claim;\n        this.reason = reason;\n    }\n}\nclass JWTExpired extends JOSEError {\n    static get code() {\n        return \"ERR_JWT_EXPIRED\";\n    }\n    constructor(message, claim = \"unspecified\", reason = \"unspecified\"){\n        super(message);\n        this.code = \"ERR_JWT_EXPIRED\";\n        this.claim = claim;\n        this.reason = reason;\n    }\n}\nclass JOSEAlgNotAllowed extends JOSEError {\n    constructor(){\n        super(...arguments);\n        this.code = \"ERR_JOSE_ALG_NOT_ALLOWED\";\n    }\n    static get code() {\n        return \"ERR_JOSE_ALG_NOT_ALLOWED\";\n    }\n}\nclass JOSENotSupported extends JOSEError {\n    constructor(){\n        super(...arguments);\n        this.code = \"ERR_JOSE_NOT_SUPPORTED\";\n    }\n    static get code() {\n        return \"ERR_JOSE_NOT_SUPPORTED\";\n    }\n}\nclass JWEDecryptionFailed extends JOSEError {\n    constructor(){\n        super(...arguments);\n        this.code = \"ERR_JWE_DECRYPTION_FAILED\";\n        this.message = \"decryption operation failed\";\n    }\n    static get code() {\n        return \"ERR_JWE_DECRYPTION_FAILED\";\n    }\n}\nclass JWEInvalid extends JOSEError {\n    constructor(){\n        super(...arguments);\n        this.code = \"ERR_JWE_INVALID\";\n    }\n    static get code() {\n        return \"ERR_JWE_INVALID\";\n    }\n}\nclass JWSInvalid extends JOSEError {\n    constructor(){\n        super(...arguments);\n        this.code = \"ERR_JWS_INVALID\";\n    }\n    static get code() {\n        return \"ERR_JWS_INVALID\";\n    }\n}\nclass JWTInvalid extends JOSEError {\n    constructor(){\n        super(...arguments);\n        this.code = \"ERR_JWT_INVALID\";\n    }\n    static get code() {\n        return \"ERR_JWT_INVALID\";\n    }\n}\nclass JWKInvalid extends JOSEError {\n    constructor(){\n        super(...arguments);\n        this.code = \"ERR_JWK_INVALID\";\n    }\n    static get code() {\n        return \"ERR_JWK_INVALID\";\n    }\n}\nclass JWKSInvalid extends JOSEError {\n    constructor(){\n        super(...arguments);\n        this.code = \"ERR_JWKS_INVALID\";\n    }\n    static get code() {\n        return \"ERR_JWKS_INVALID\";\n    }\n}\nclass JWKSNoMatchingKey extends JOSEError {\n    constructor(){\n        super(...arguments);\n        this.code = \"ERR_JWKS_NO_MATCHING_KEY\";\n        this.message = \"no applicable key found in the JSON Web Key Set\";\n    }\n    static get code() {\n        return \"ERR_JWKS_NO_MATCHING_KEY\";\n    }\n}\nclass JWKSMultipleMatchingKeys extends JOSEError {\n    constructor(){\n        super(...arguments);\n        this.code = \"ERR_JWKS_MULTIPLE_MATCHING_KEYS\";\n        this.message = \"multiple matching keys found in the JSON Web Key Set\";\n    }\n    static get code() {\n        return \"ERR_JWKS_MULTIPLE_MATCHING_KEYS\";\n    }\n}\nSymbol.asyncIterator;\nclass JWKSTimeout extends JOSEError {\n    constructor(){\n        super(...arguments);\n        this.code = \"ERR_JWKS_TIMEOUT\";\n        this.message = \"request timed out\";\n    }\n    static get code() {\n        return \"ERR_JWKS_TIMEOUT\";\n    }\n}\nclass JWSSignatureVerificationFailed extends JOSEError {\n    constructor(){\n        super(...arguments);\n        this.code = \"ERR_JWS_SIGNATURE_VERIFICATION_FAILED\";\n        this.message = \"signature verification failed\";\n    }\n    static get code() {\n        return \"ERR_JWS_SIGNATURE_VERIFICATION_FAILED\";\n    }\n}\n\n},{\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"bvMJc\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nparcelHelpers.export(exports, \"bitLength\", ()=>bitLength);\nvar _errorsJs = require(\"../util/errors.js\");\nvar _randomJs = require(\"../runtime/random.js\");\nvar _randomJsDefault = parcelHelpers.interopDefault(_randomJs);\nfunction bitLength(alg) {\n    switch(alg){\n        case \"A128GCM\":\n        case \"A128GCMKW\":\n        case \"A192GCM\":\n        case \"A192GCMKW\":\n        case \"A256GCM\":\n        case \"A256GCMKW\":\n            return 96;\n        case \"A128CBC-HS256\":\n        case \"A192CBC-HS384\":\n        case \"A256CBC-HS512\":\n            return 128;\n        default:\n            throw new (0, _errorsJs.JOSENotSupported)(`Unsupported JWE Algorithm: ${alg}`);\n    }\n}\nexports.default = (alg)=>(0, _randomJsDefault.default)(new Uint8Array(bitLength(alg) >> 3));\n\n},{\"../util/errors.js\":\"4fsOp\",\"../runtime/random.js\":\"4nPoE\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"4nPoE\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nvar _webcryptoJs = require(\"./webcrypto.js\");\nvar _webcryptoJsDefault = parcelHelpers.interopDefault(_webcryptoJs);\nexports.default = (0, _webcryptoJsDefault.default).getRandomValues.bind((0, _webcryptoJsDefault.default));\n\n},{\"./webcrypto.js\":\"aUHBb\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"9VrK5\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nvar _errorsJs = require(\"../util/errors.js\");\nconst checkCekLength = (cek, expected)=>{\n    const actual = cek.byteLength << 3;\n    if (actual !== expected) throw new (0, _errorsJs.JWEInvalid)(`Invalid Content Encryption Key length. Expected ${expected} bits, got ${actual} bits`);\n};\nexports.default = checkCekLength;\n\n},{\"../util/errors.js\":\"4fsOp\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"k4wY7\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nconst timingSafeEqual = (a, b)=>{\n    if (!(a instanceof Uint8Array)) throw new TypeError(\"First argument must be a buffer\");\n    if (!(b instanceof Uint8Array)) throw new TypeError(\"Second argument must be a buffer\");\n    if (a.length !== b.length) throw new TypeError(\"Input buffers must have the same length\");\n    const len = a.length;\n    let out = 0;\n    let i = -1;\n    while(++i < len)out |= a[i] ^ b[i];\n    return out === 0;\n};\nexports.default = timingSafeEqual;\n\n},{\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"gM0cz\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nparcelHelpers.export(exports, \"checkSigCryptoKey\", ()=>checkSigCryptoKey);\nparcelHelpers.export(exports, \"checkEncCryptoKey\", ()=>checkEncCryptoKey);\nfunction unusable(name, prop = \"algorithm.name\") {\n    return new TypeError(`CryptoKey does not support this operation, its ${prop} must be ${name}`);\n}\nfunction isAlgorithm(algorithm, name) {\n    return algorithm.name === name;\n}\nfunction getHashLength(hash) {\n    return parseInt(hash.name.slice(4), 10);\n}\nfunction getNamedCurve(alg) {\n    switch(alg){\n        case \"ES256\":\n            return \"P-256\";\n        case \"ES384\":\n            return \"P-384\";\n        case \"ES512\":\n            return \"P-521\";\n        default:\n            throw new Error(\"unreachable\");\n    }\n}\nfunction checkUsage(key, usages) {\n    if (usages.length && !usages.some((expected)=>key.usages.includes(expected))) {\n        let msg = \"CryptoKey does not support this operation, its usages must include \";\n        if (usages.length > 2) {\n            const last = usages.pop();\n            msg += `one of ${usages.join(\", \")}, or ${last}.`;\n        } else if (usages.length === 2) msg += `one of ${usages[0]} or ${usages[1]}.`;\n        else msg += `${usages[0]}.`;\n        throw new TypeError(msg);\n    }\n}\nfunction checkSigCryptoKey(key, alg, ...usages) {\n    switch(alg){\n        case \"HS256\":\n        case \"HS384\":\n        case \"HS512\":\n            {\n                if (!isAlgorithm(key.algorithm, \"HMAC\")) throw unusable(\"HMAC\");\n                const expected = parseInt(alg.slice(2), 10);\n                const actual = getHashLength(key.algorithm.hash);\n                if (actual !== expected) throw unusable(`SHA-${expected}`, \"algorithm.hash\");\n                break;\n            }\n        case \"RS256\":\n        case \"RS384\":\n        case \"RS512\":\n            {\n                if (!isAlgorithm(key.algorithm, \"RSASSA-PKCS1-v1_5\")) throw unusable(\"RSASSA-PKCS1-v1_5\");\n                const expected = parseInt(alg.slice(2), 10);\n                const actual = getHashLength(key.algorithm.hash);\n                if (actual !== expected) throw unusable(`SHA-${expected}`, \"algorithm.hash\");\n                break;\n            }\n        case \"PS256\":\n        case \"PS384\":\n        case \"PS512\":\n            {\n                if (!isAlgorithm(key.algorithm, \"RSA-PSS\")) throw unusable(\"RSA-PSS\");\n                const expected = parseInt(alg.slice(2), 10);\n                const actual = getHashLength(key.algorithm.hash);\n                if (actual !== expected) throw unusable(`SHA-${expected}`, \"algorithm.hash\");\n                break;\n            }\n        case \"EdDSA\":\n            if (key.algorithm.name !== \"Ed25519\" && key.algorithm.name !== \"Ed448\") throw unusable(\"Ed25519 or Ed448\");\n            break;\n        case \"ES256\":\n        case \"ES384\":\n        case \"ES512\":\n            {\n                if (!isAlgorithm(key.algorithm, \"ECDSA\")) throw unusable(\"ECDSA\");\n                const expected = getNamedCurve(alg);\n                const actual = key.algorithm.namedCurve;\n                if (actual !== expected) throw unusable(expected, \"algorithm.namedCurve\");\n                break;\n            }\n        default:\n            throw new TypeError(\"CryptoKey does not support this operation\");\n    }\n    checkUsage(key, usages);\n}\nfunction checkEncCryptoKey(key, alg, ...usages) {\n    switch(alg){\n        case \"A128GCM\":\n        case \"A192GCM\":\n        case \"A256GCM\":\n            {\n                if (!isAlgorithm(key.algorithm, \"AES-GCM\")) throw unusable(\"AES-GCM\");\n                const expected = parseInt(alg.slice(1, 4), 10);\n                const actual = key.algorithm.length;\n                if (actual !== expected) throw unusable(expected, \"algorithm.length\");\n                break;\n            }\n        case \"A128KW\":\n        case \"A192KW\":\n        case \"A256KW\":\n            {\n                if (!isAlgorithm(key.algorithm, \"AES-KW\")) throw unusable(\"AES-KW\");\n                const expected = parseInt(alg.slice(1, 4), 10);\n                const actual = key.algorithm.length;\n                if (actual !== expected) throw unusable(expected, \"algorithm.length\");\n                break;\n            }\n        case \"ECDH\":\n            switch(key.algorithm.name){\n                case \"ECDH\":\n                case \"X25519\":\n                case \"X448\":\n                    break;\n                default:\n                    throw unusable(\"ECDH, X25519, or X448\");\n            }\n            break;\n        case \"PBES2-HS256+A128KW\":\n        case \"PBES2-HS384+A192KW\":\n        case \"PBES2-HS512+A256KW\":\n            if (!isAlgorithm(key.algorithm, \"PBKDF2\")) throw unusable(\"PBKDF2\");\n            break;\n        case \"RSA-OAEP\":\n        case \"RSA-OAEP-256\":\n        case \"RSA-OAEP-384\":\n        case \"RSA-OAEP-512\":\n            {\n                if (!isAlgorithm(key.algorithm, \"RSA-OAEP\")) throw unusable(\"RSA-OAEP\");\n                const expected = parseInt(alg.slice(9), 10) || 1;\n                const actual = getHashLength(key.algorithm.hash);\n                if (actual !== expected) throw unusable(`SHA-${expected}`, \"algorithm.hash\");\n                break;\n            }\n        default:\n            throw new TypeError(\"CryptoKey does not support this operation\");\n    }\n    checkUsage(key, usages);\n}\n\n},{\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"5GTGb\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nparcelHelpers.export(exports, \"withAlg\", ()=>withAlg);\nfunction message(msg, actual, ...types) {\n    if (types.length > 2) {\n        const last = types.pop();\n        msg += `one of type ${types.join(\", \")}, or ${last}.`;\n    } else if (types.length === 2) msg += `one of type ${types[0]} or ${types[1]}.`;\n    else msg += `of type ${types[0]}.`;\n    if (actual == null) msg += ` Received ${actual}`;\n    else if (typeof actual === \"function\" && actual.name) msg += ` Received function ${actual.name}`;\n    else if (typeof actual === \"object\" && actual != null) {\n        if (actual.constructor && actual.constructor.name) msg += ` Received an instance of ${actual.constructor.name}`;\n    }\n    return msg;\n}\nexports.default = (actual, ...types)=>{\n    return message(\"Key must be \", actual, ...types);\n};\nfunction withAlg(alg, actual, ...types) {\n    return message(`Key for the ${alg} algorithm must be `, actual, ...types);\n}\n\n},{\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"9kDjz\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nparcelHelpers.export(exports, \"types\", ()=>types);\nvar _webcryptoJs = require(\"./webcrypto.js\");\nexports.default = (key)=>{\n    return (0, _webcryptoJs.isCryptoKey)(key);\n};\nconst types = [\n    \"CryptoKey\"\n];\n\n},{\"./webcrypto.js\":\"aUHBb\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"dM1d1\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nparcelHelpers.export(exports, \"inflate\", ()=>inflate);\nparcelHelpers.export(exports, \"deflate\", ()=>deflate);\nvar _errorsJs = require(\"../util/errors.js\");\nconst inflate = async ()=>{\n    throw new (0, _errorsJs.JOSENotSupported)('JWE \"zip\" (Compression Algorithm) Header Parameter is not supported by your javascript runtime. You need to use the `inflateRaw` decrypt option to provide Inflate Raw implementation.');\n};\nconst deflate = async ()=>{\n    throw new (0, _errorsJs.JOSENotSupported)('JWE \"zip\" (Compression Algorithm) Header Parameter is not supported by your javascript runtime. You need to use the `deflateRaw` encrypt option to provide Deflate Raw implementation.');\n};\n\n},{\"../util/errors.js\":\"4fsOp\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"91YXn\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nconst isDisjoint = (...headers)=>{\n    const sources = headers.filter(Boolean);\n    if (sources.length === 0 || sources.length === 1) return true;\n    let acc;\n    for (const header of sources){\n        const parameters = Object.keys(header);\n        if (!acc || acc.size === 0) {\n            acc = new Set(parameters);\n            continue;\n        }\n        for (const parameter of parameters){\n            if (acc.has(parameter)) return false;\n            acc.add(parameter);\n        }\n    }\n    return true;\n};\nexports.default = isDisjoint;\n\n},{\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"daSnu\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nparcelHelpers.export(exports, \"default\", ()=>isObject);\nfunction isObjectLike(value) {\n    return typeof value === \"object\" && value !== null;\n}\nfunction isObject(input) {\n    if (!isObjectLike(input) || Object.prototype.toString.call(input) !== \"[object Object]\") return false;\n    if (Object.getPrototypeOf(input) === null) return true;\n    let proto = input;\n    while(Object.getPrototypeOf(proto) !== null)proto = Object.getPrototypeOf(proto);\n    return Object.getPrototypeOf(input) === proto;\n}\n\n},{\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"bdNgc\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nvar _aeskwJs = require(\"../runtime/aeskw.js\");\nvar _ecdhesJs = require(\"../runtime/ecdhes.js\");\nvar _pbes2KwJs = require(\"../runtime/pbes2kw.js\");\nvar _rsaesJs = require(\"../runtime/rsaes.js\");\nvar _base64UrlJs = require(\"../runtime/base64url.js\");\nvar _errorsJs = require(\"../util/errors.js\");\nvar _cekJs = require(\"../lib/cek.js\");\nvar _importJs = require(\"../key/import.js\");\nvar _checkKeyTypeJs = require(\"./check_key_type.js\");\nvar _checkKeyTypeJsDefault = parcelHelpers.interopDefault(_checkKeyTypeJs);\nvar _isObjectJs = require(\"./is_object.js\");\nvar _isObjectJsDefault = parcelHelpers.interopDefault(_isObjectJs);\nvar _aesgcmkwJs = require(\"./aesgcmkw.js\");\nasync function decryptKeyManagement(alg, key, encryptedKey, joseHeader, options) {\n    (0, _checkKeyTypeJsDefault.default)(alg, key, \"decrypt\");\n    switch(alg){\n        case \"dir\":\n            if (encryptedKey !== undefined) throw new (0, _errorsJs.JWEInvalid)(\"Encountered unexpected JWE Encrypted Key\");\n            return key;\n        case \"ECDH-ES\":\n            if (encryptedKey !== undefined) throw new (0, _errorsJs.JWEInvalid)(\"Encountered unexpected JWE Encrypted Key\");\n        case \"ECDH-ES+A128KW\":\n        case \"ECDH-ES+A192KW\":\n        case \"ECDH-ES+A256KW\":\n            {\n                if (!(0, _isObjectJsDefault.default)(joseHeader.epk)) throw new (0, _errorsJs.JWEInvalid)(`JOSE Header \"epk\" (Ephemeral Public Key) missing or invalid`);\n                if (!_ecdhesJs.ecdhAllowed(key)) throw new (0, _errorsJs.JOSENotSupported)(\"ECDH with the provided key is not allowed or not supported by your javascript runtime\");\n                const epk = await (0, _importJs.importJWK)(joseHeader.epk, alg);\n                let partyUInfo;\n                let partyVInfo;\n                if (joseHeader.apu !== undefined) {\n                    if (typeof joseHeader.apu !== \"string\") throw new (0, _errorsJs.JWEInvalid)(`JOSE Header \"apu\" (Agreement PartyUInfo) invalid`);\n                    try {\n                        partyUInfo = (0, _base64UrlJs.decode)(joseHeader.apu);\n                    } catch (_a) {\n                        throw new (0, _errorsJs.JWEInvalid)(\"Failed to base64url decode the apu\");\n                    }\n                }\n                if (joseHeader.apv !== undefined) {\n                    if (typeof joseHeader.apv !== \"string\") throw new (0, _errorsJs.JWEInvalid)(`JOSE Header \"apv\" (Agreement PartyVInfo) invalid`);\n                    try {\n                        partyVInfo = (0, _base64UrlJs.decode)(joseHeader.apv);\n                    } catch (_b) {\n                        throw new (0, _errorsJs.JWEInvalid)(\"Failed to base64url decode the apv\");\n                    }\n                }\n                const sharedSecret = await _ecdhesJs.deriveKey(epk, key, alg === \"ECDH-ES\" ? joseHeader.enc : alg, alg === \"ECDH-ES\" ? (0, _cekJs.bitLength)(joseHeader.enc) : parseInt(alg.slice(-5, -2), 10), partyUInfo, partyVInfo);\n                if (alg === \"ECDH-ES\") return sharedSecret;\n                if (encryptedKey === undefined) throw new (0, _errorsJs.JWEInvalid)(\"JWE Encrypted Key missing\");\n                return (0, _aeskwJs.unwrap)(alg.slice(-6), sharedSecret, encryptedKey);\n            }\n        case \"RSA1_5\":\n        case \"RSA-OAEP\":\n        case \"RSA-OAEP-256\":\n        case \"RSA-OAEP-384\":\n        case \"RSA-OAEP-512\":\n            if (encryptedKey === undefined) throw new (0, _errorsJs.JWEInvalid)(\"JWE Encrypted Key missing\");\n            return (0, _rsaesJs.decrypt)(alg, key, encryptedKey);\n        case \"PBES2-HS256+A128KW\":\n        case \"PBES2-HS384+A192KW\":\n        case \"PBES2-HS512+A256KW\":\n            {\n                if (encryptedKey === undefined) throw new (0, _errorsJs.JWEInvalid)(\"JWE Encrypted Key missing\");\n                if (typeof joseHeader.p2c !== \"number\") throw new (0, _errorsJs.JWEInvalid)(`JOSE Header \"p2c\" (PBES2 Count) missing or invalid`);\n                const p2cLimit = (options === null || options === void 0 ? void 0 : options.maxPBES2Count) || 10000;\n                if (joseHeader.p2c > p2cLimit) throw new (0, _errorsJs.JWEInvalid)(`JOSE Header \"p2c\" (PBES2 Count) out is of acceptable bounds`);\n                if (typeof joseHeader.p2s !== \"string\") throw new (0, _errorsJs.JWEInvalid)(`JOSE Header \"p2s\" (PBES2 Salt) missing or invalid`);\n                let p2s;\n                try {\n                    p2s = (0, _base64UrlJs.decode)(joseHeader.p2s);\n                } catch (_c) {\n                    throw new (0, _errorsJs.JWEInvalid)(\"Failed to base64url decode the p2s\");\n                }\n                return (0, _pbes2KwJs.decrypt)(alg, key, encryptedKey, joseHeader.p2c, p2s);\n            }\n        case \"A128KW\":\n        case \"A192KW\":\n        case \"A256KW\":\n            if (encryptedKey === undefined) throw new (0, _errorsJs.JWEInvalid)(\"JWE Encrypted Key missing\");\n            return (0, _aeskwJs.unwrap)(alg, key, encryptedKey);\n        case \"A128GCMKW\":\n        case \"A192GCMKW\":\n        case \"A256GCMKW\":\n            {\n                if (encryptedKey === undefined) throw new (0, _errorsJs.JWEInvalid)(\"JWE Encrypted Key missing\");\n                if (typeof joseHeader.iv !== \"string\") throw new (0, _errorsJs.JWEInvalid)(`JOSE Header \"iv\" (Initialization Vector) missing or invalid`);\n                if (typeof joseHeader.tag !== \"string\") throw new (0, _errorsJs.JWEInvalid)(`JOSE Header \"tag\" (Authentication Tag) missing or invalid`);\n                let iv;\n                try {\n                    iv = (0, _base64UrlJs.decode)(joseHeader.iv);\n                } catch (_d) {\n                    throw new (0, _errorsJs.JWEInvalid)(\"Failed to base64url decode the iv\");\n                }\n                let tag;\n                try {\n                    tag = (0, _base64UrlJs.decode)(joseHeader.tag);\n                } catch (_e) {\n                    throw new (0, _errorsJs.JWEInvalid)(\"Failed to base64url decode the tag\");\n                }\n                return (0, _aesgcmkwJs.unwrap)(alg, key, encryptedKey, iv, tag);\n            }\n        default:\n            throw new (0, _errorsJs.JOSENotSupported)('Invalid or unsupported \"alg\" (JWE Algorithm) header value');\n    }\n}\nexports.default = decryptKeyManagement;\n\n},{\"../runtime/aeskw.js\":\"2J708\",\"../runtime/ecdhes.js\":\"74mdv\",\"../runtime/pbes2kw.js\":\"43KtE\",\"../runtime/rsaes.js\":\"3mFhj\",\"../runtime/base64url.js\":\"8Djx4\",\"../util/errors.js\":\"4fsOp\",\"../lib/cek.js\":\"cA5vi\",\"../key/import.js\":\"661YL\",\"./check_key_type.js\":\"5ompv\",\"./is_object.js\":\"daSnu\",\"./aesgcmkw.js\":\"6zfNV\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"2J708\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nparcelHelpers.export(exports, \"wrap\", ()=>wrap);\nparcelHelpers.export(exports, \"unwrap\", ()=>unwrap);\nvar _bogusJs = require(\"./bogus.js\");\nvar _bogusJsDefault = parcelHelpers.interopDefault(_bogusJs);\nvar _webcryptoJs = require(\"./webcrypto.js\");\nvar _webcryptoJsDefault = parcelHelpers.interopDefault(_webcryptoJs);\nvar _cryptoKeyJs = require(\"../lib/crypto_key.js\");\nvar _invalidKeyInputJs = require(\"../lib/invalid_key_input.js\");\nvar _invalidKeyInputJsDefault = parcelHelpers.interopDefault(_invalidKeyInputJs);\nvar _isKeyLikeJs = require(\"./is_key_like.js\");\nfunction checkKeySize(key, alg) {\n    if (key.algorithm.length !== parseInt(alg.slice(1, 4), 10)) throw new TypeError(`Invalid key size for alg: ${alg}`);\n}\nfunction getCryptoKey(key, alg, usage) {\n    if ((0, _webcryptoJs.isCryptoKey)(key)) {\n        (0, _cryptoKeyJs.checkEncCryptoKey)(key, alg, usage);\n        return key;\n    }\n    if (key instanceof Uint8Array) return (0, _webcryptoJsDefault.default).subtle.importKey(\"raw\", key, \"AES-KW\", true, [\n        usage\n    ]);\n    throw new TypeError((0, _invalidKeyInputJsDefault.default)(key, ...(0, _isKeyLikeJs.types), \"Uint8Array\"));\n}\nconst wrap = async (alg, key, cek)=>{\n    const cryptoKey = await getCryptoKey(key, alg, \"wrapKey\");\n    checkKeySize(cryptoKey, alg);\n    const cryptoKeyCek = await (0, _webcryptoJsDefault.default).subtle.importKey(\"raw\", cek, ...(0, _bogusJsDefault.default));\n    return new Uint8Array(await (0, _webcryptoJsDefault.default).subtle.wrapKey(\"raw\", cryptoKeyCek, cryptoKey, \"AES-KW\"));\n};\nconst unwrap = async (alg, key, encryptedKey)=>{\n    const cryptoKey = await getCryptoKey(key, alg, \"unwrapKey\");\n    checkKeySize(cryptoKey, alg);\n    const cryptoKeyCek = await (0, _webcryptoJsDefault.default).subtle.unwrapKey(\"raw\", encryptedKey, cryptoKey, \"AES-KW\", ...(0, _bogusJsDefault.default));\n    return new Uint8Array(await (0, _webcryptoJsDefault.default).subtle.exportKey(\"raw\", cryptoKeyCek));\n};\n\n},{\"./bogus.js\":\"6Fge1\",\"./webcrypto.js\":\"aUHBb\",\"../lib/crypto_key.js\":\"gM0cz\",\"../lib/invalid_key_input.js\":\"5GTGb\",\"./is_key_like.js\":\"9kDjz\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"6Fge1\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nconst bogusWebCrypto = [\n    {\n        hash: \"SHA-256\",\n        name: \"HMAC\"\n    },\n    true,\n    [\n        \"sign\"\n    ]\n];\nexports.default = bogusWebCrypto;\n\n},{\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"74mdv\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nparcelHelpers.export(exports, \"deriveKey\", ()=>deriveKey);\nparcelHelpers.export(exports, \"generateEpk\", ()=>generateEpk);\nparcelHelpers.export(exports, \"ecdhAllowed\", ()=>ecdhAllowed);\nvar _bufferUtilsJs = require(\"../lib/buffer_utils.js\");\nvar _webcryptoJs = require(\"./webcrypto.js\");\nvar _webcryptoJsDefault = parcelHelpers.interopDefault(_webcryptoJs);\nvar _cryptoKeyJs = require(\"../lib/crypto_key.js\");\nvar _invalidKeyInputJs = require(\"../lib/invalid_key_input.js\");\nvar _invalidKeyInputJsDefault = parcelHelpers.interopDefault(_invalidKeyInputJs);\nvar _isKeyLikeJs = require(\"./is_key_like.js\");\nasync function deriveKey(publicKey, privateKey, algorithm, keyLength, apu = new Uint8Array(0), apv = new Uint8Array(0)) {\n    if (!(0, _webcryptoJs.isCryptoKey)(publicKey)) throw new TypeError((0, _invalidKeyInputJsDefault.default)(publicKey, ...(0, _isKeyLikeJs.types)));\n    (0, _cryptoKeyJs.checkEncCryptoKey)(publicKey, \"ECDH\");\n    if (!(0, _webcryptoJs.isCryptoKey)(privateKey)) throw new TypeError((0, _invalidKeyInputJsDefault.default)(privateKey, ...(0, _isKeyLikeJs.types)));\n    (0, _cryptoKeyJs.checkEncCryptoKey)(privateKey, \"ECDH\", \"deriveBits\");\n    const value = (0, _bufferUtilsJs.concat)((0, _bufferUtilsJs.lengthAndInput)((0, _bufferUtilsJs.encoder).encode(algorithm)), (0, _bufferUtilsJs.lengthAndInput)(apu), (0, _bufferUtilsJs.lengthAndInput)(apv), (0, _bufferUtilsJs.uint32be)(keyLength));\n    let length;\n    if (publicKey.algorithm.name === \"X25519\") length = 256;\n    else if (publicKey.algorithm.name === \"X448\") length = 448;\n    else length = Math.ceil(parseInt(publicKey.algorithm.namedCurve.substr(-3), 10) / 8) << 3;\n    const sharedSecret = new Uint8Array(await (0, _webcryptoJsDefault.default).subtle.deriveBits({\n        name: publicKey.algorithm.name,\n        public: publicKey\n    }, privateKey, length));\n    return (0, _bufferUtilsJs.concatKdf)(sharedSecret, keyLength, value);\n}\nasync function generateEpk(key) {\n    if (!(0, _webcryptoJs.isCryptoKey)(key)) throw new TypeError((0, _invalidKeyInputJsDefault.default)(key, ...(0, _isKeyLikeJs.types)));\n    return (0, _webcryptoJsDefault.default).subtle.generateKey(key.algorithm, true, [\n        \"deriveBits\"\n    ]);\n}\nfunction ecdhAllowed(key) {\n    if (!(0, _webcryptoJs.isCryptoKey)(key)) throw new TypeError((0, _invalidKeyInputJsDefault.default)(key, ...(0, _isKeyLikeJs.types)));\n    return [\n        \"P-256\",\n        \"P-384\",\n        \"P-521\"\n    ].includes(key.algorithm.namedCurve) || key.algorithm.name === \"X25519\" || key.algorithm.name === \"X448\";\n}\n\n},{\"../lib/buffer_utils.js\":\"h0x9u\",\"./webcrypto.js\":\"aUHBb\",\"../lib/crypto_key.js\":\"gM0cz\",\"../lib/invalid_key_input.js\":\"5GTGb\",\"./is_key_like.js\":\"9kDjz\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"43KtE\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nparcelHelpers.export(exports, \"encrypt\", ()=>encrypt);\nparcelHelpers.export(exports, \"decrypt\", ()=>decrypt);\nvar _randomJs = require(\"./random.js\");\nvar _randomJsDefault = parcelHelpers.interopDefault(_randomJs);\nvar _bufferUtilsJs = require(\"../lib/buffer_utils.js\");\nvar _base64UrlJs = require(\"./base64url.js\");\nvar _aeskwJs = require(\"./aeskw.js\");\nvar _checkP2SJs = require(\"../lib/check_p2s.js\");\nvar _checkP2SJsDefault = parcelHelpers.interopDefault(_checkP2SJs);\nvar _webcryptoJs = require(\"./webcrypto.js\");\nvar _webcryptoJsDefault = parcelHelpers.interopDefault(_webcryptoJs);\nvar _cryptoKeyJs = require(\"../lib/crypto_key.js\");\nvar _invalidKeyInputJs = require(\"../lib/invalid_key_input.js\");\nvar _invalidKeyInputJsDefault = parcelHelpers.interopDefault(_invalidKeyInputJs);\nvar _isKeyLikeJs = require(\"./is_key_like.js\");\nfunction getCryptoKey(key, alg) {\n    if (key instanceof Uint8Array) return (0, _webcryptoJsDefault.default).subtle.importKey(\"raw\", key, \"PBKDF2\", false, [\n        \"deriveBits\"\n    ]);\n    if ((0, _webcryptoJs.isCryptoKey)(key)) {\n        (0, _cryptoKeyJs.checkEncCryptoKey)(key, alg, \"deriveBits\", \"deriveKey\");\n        return key;\n    }\n    throw new TypeError((0, _invalidKeyInputJsDefault.default)(key, ...(0, _isKeyLikeJs.types), \"Uint8Array\"));\n}\nasync function deriveKey(p2s, alg, p2c, key) {\n    (0, _checkP2SJsDefault.default)(p2s);\n    const salt = (0, _bufferUtilsJs.p2s)(alg, p2s);\n    const keylen = parseInt(alg.slice(13, 16), 10);\n    const subtleAlg = {\n        hash: `SHA-${alg.slice(8, 11)}`,\n        iterations: p2c,\n        name: \"PBKDF2\",\n        salt\n    };\n    const wrapAlg = {\n        length: keylen,\n        name: \"AES-KW\"\n    };\n    const cryptoKey = await getCryptoKey(key, alg);\n    if (cryptoKey.usages.includes(\"deriveBits\")) return new Uint8Array(await (0, _webcryptoJsDefault.default).subtle.deriveBits(subtleAlg, cryptoKey, keylen));\n    if (cryptoKey.usages.includes(\"deriveKey\")) return (0, _webcryptoJsDefault.default).subtle.deriveKey(subtleAlg, cryptoKey, wrapAlg, false, [\n        \"wrapKey\",\n        \"unwrapKey\"\n    ]);\n    throw new TypeError('PBKDF2 key \"usages\" must include \"deriveBits\" or \"deriveKey\"');\n}\nconst encrypt = async (alg, key, cek, p2c = 2048, p2s = (0, _randomJsDefault.default)(new Uint8Array(16)))=>{\n    const derived = await deriveKey(p2s, alg, p2c, key);\n    const encryptedKey = await (0, _aeskwJs.wrap)(alg.slice(-6), derived, cek);\n    return {\n        encryptedKey,\n        p2c,\n        p2s: (0, _base64UrlJs.encode)(p2s)\n    };\n};\nconst decrypt = async (alg, key, encryptedKey, p2c, p2s)=>{\n    const derived = await deriveKey(p2s, alg, p2c, key);\n    return (0, _aeskwJs.unwrap)(alg.slice(-6), derived, encryptedKey);\n};\n\n},{\"./random.js\":\"4nPoE\",\"../lib/buffer_utils.js\":\"h0x9u\",\"./base64url.js\":\"8Djx4\",\"./aeskw.js\":\"2J708\",\"../lib/check_p2s.js\":\"4YP4w\",\"./webcrypto.js\":\"aUHBb\",\"../lib/crypto_key.js\":\"gM0cz\",\"../lib/invalid_key_input.js\":\"5GTGb\",\"./is_key_like.js\":\"9kDjz\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"4YP4w\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nparcelHelpers.export(exports, \"default\", ()=>checkP2s);\nvar _errorsJs = require(\"../util/errors.js\");\nfunction checkP2s(p2s) {\n    if (!(p2s instanceof Uint8Array) || p2s.length < 8) throw new (0, _errorsJs.JWEInvalid)(\"PBES2 Salt Input must be 8 or more octets\");\n}\n\n},{\"../util/errors.js\":\"4fsOp\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"3mFhj\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nparcelHelpers.export(exports, \"encrypt\", ()=>encrypt);\nparcelHelpers.export(exports, \"decrypt\", ()=>decrypt);\nvar _subtleRsaesJs = require(\"./subtle_rsaes.js\");\nvar _subtleRsaesJsDefault = parcelHelpers.interopDefault(_subtleRsaesJs);\nvar _bogusJs = require(\"./bogus.js\");\nvar _bogusJsDefault = parcelHelpers.interopDefault(_bogusJs);\nvar _webcryptoJs = require(\"./webcrypto.js\");\nvar _webcryptoJsDefault = parcelHelpers.interopDefault(_webcryptoJs);\nvar _cryptoKeyJs = require(\"../lib/crypto_key.js\");\nvar _checkKeyLengthJs = require(\"./check_key_length.js\");\nvar _checkKeyLengthJsDefault = parcelHelpers.interopDefault(_checkKeyLengthJs);\nvar _invalidKeyInputJs = require(\"../lib/invalid_key_input.js\");\nvar _invalidKeyInputJsDefault = parcelHelpers.interopDefault(_invalidKeyInputJs);\nvar _isKeyLikeJs = require(\"./is_key_like.js\");\nconst encrypt = async (alg, key, cek)=>{\n    if (!(0, _webcryptoJs.isCryptoKey)(key)) throw new TypeError((0, _invalidKeyInputJsDefault.default)(key, ...(0, _isKeyLikeJs.types)));\n    (0, _cryptoKeyJs.checkEncCryptoKey)(key, alg, \"encrypt\", \"wrapKey\");\n    (0, _checkKeyLengthJsDefault.default)(alg, key);\n    if (key.usages.includes(\"encrypt\")) return new Uint8Array(await (0, _webcryptoJsDefault.default).subtle.encrypt((0, _subtleRsaesJsDefault.default)(alg), key, cek));\n    if (key.usages.includes(\"wrapKey\")) {\n        const cryptoKeyCek = await (0, _webcryptoJsDefault.default).subtle.importKey(\"raw\", cek, ...(0, _bogusJsDefault.default));\n        return new Uint8Array(await (0, _webcryptoJsDefault.default).subtle.wrapKey(\"raw\", cryptoKeyCek, key, (0, _subtleRsaesJsDefault.default)(alg)));\n    }\n    throw new TypeError('RSA-OAEP key \"usages\" must include \"encrypt\" or \"wrapKey\" for this operation');\n};\nconst decrypt = async (alg, key, encryptedKey)=>{\n    if (!(0, _webcryptoJs.isCryptoKey)(key)) throw new TypeError((0, _invalidKeyInputJsDefault.default)(key, ...(0, _isKeyLikeJs.types)));\n    (0, _cryptoKeyJs.checkEncCryptoKey)(key, alg, \"decrypt\", \"unwrapKey\");\n    (0, _checkKeyLengthJsDefault.default)(alg, key);\n    if (key.usages.includes(\"decrypt\")) return new Uint8Array(await (0, _webcryptoJsDefault.default).subtle.decrypt((0, _subtleRsaesJsDefault.default)(alg), key, encryptedKey));\n    if (key.usages.includes(\"unwrapKey\")) {\n        const cryptoKeyCek = await (0, _webcryptoJsDefault.default).subtle.unwrapKey(\"raw\", encryptedKey, key, (0, _subtleRsaesJsDefault.default)(alg), ...(0, _bogusJsDefault.default));\n        return new Uint8Array(await (0, _webcryptoJsDefault.default).subtle.exportKey(\"raw\", cryptoKeyCek));\n    }\n    throw new TypeError('RSA-OAEP key \"usages\" must include \"decrypt\" or \"unwrapKey\" for this operation');\n};\n\n},{\"./subtle_rsaes.js\":\"jqv9c\",\"./bogus.js\":\"6Fge1\",\"./webcrypto.js\":\"aUHBb\",\"../lib/crypto_key.js\":\"gM0cz\",\"./check_key_length.js\":\"0CfW9\",\"../lib/invalid_key_input.js\":\"5GTGb\",\"./is_key_like.js\":\"9kDjz\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"jqv9c\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nparcelHelpers.export(exports, \"default\", ()=>subtleRsaEs);\nvar _errorsJs = require(\"../util/errors.js\");\nfunction subtleRsaEs(alg) {\n    switch(alg){\n        case \"RSA-OAEP\":\n        case \"RSA-OAEP-256\":\n        case \"RSA-OAEP-384\":\n        case \"RSA-OAEP-512\":\n            return \"RSA-OAEP\";\n        default:\n            throw new (0, _errorsJs.JOSENotSupported)(`alg ${alg} is not supported either by JOSE or your javascript runtime`);\n    }\n}\n\n},{\"../util/errors.js\":\"4fsOp\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"0CfW9\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nexports.default = (alg, key)=>{\n    if (alg.startsWith(\"RS\") || alg.startsWith(\"PS\")) {\n        const { modulusLength } = key.algorithm;\n        if (typeof modulusLength !== \"number\" || modulusLength < 2048) throw new TypeError(`${alg} requires key modulusLength to be 2048 bits or larger`);\n    }\n};\n\n},{\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"cA5vi\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nparcelHelpers.export(exports, \"bitLength\", ()=>bitLength);\nvar _errorsJs = require(\"../util/errors.js\");\nvar _randomJs = require(\"../runtime/random.js\");\nvar _randomJsDefault = parcelHelpers.interopDefault(_randomJs);\nfunction bitLength(alg) {\n    switch(alg){\n        case \"A128GCM\":\n            return 128;\n        case \"A192GCM\":\n            return 192;\n        case \"A256GCM\":\n        case \"A128CBC-HS256\":\n            return 256;\n        case \"A192CBC-HS384\":\n            return 384;\n        case \"A256CBC-HS512\":\n            return 512;\n        default:\n            throw new (0, _errorsJs.JOSENotSupported)(`Unsupported JWE Algorithm: ${alg}`);\n    }\n}\nexports.default = (alg)=>(0, _randomJsDefault.default)(new Uint8Array(bitLength(alg) >> 3));\n\n},{\"../util/errors.js\":\"4fsOp\",\"../runtime/random.js\":\"4nPoE\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"661YL\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nparcelHelpers.export(exports, \"importSPKI\", ()=>importSPKI);\nparcelHelpers.export(exports, \"importX509\", ()=>importX509);\nparcelHelpers.export(exports, \"importPKCS8\", ()=>importPKCS8);\nparcelHelpers.export(exports, \"importJWK\", ()=>importJWK);\nvar _base64UrlJs = require(\"../runtime/base64url.js\");\nvar _asn1Js = require(\"../runtime/asn1.js\");\nvar _jwkToKeyJs = require(\"../runtime/jwk_to_key.js\");\nvar _jwkToKeyJsDefault = parcelHelpers.interopDefault(_jwkToKeyJs);\nvar _errorsJs = require(\"../util/errors.js\");\nvar _isObjectJs = require(\"../lib/is_object.js\");\nvar _isObjectJsDefault = parcelHelpers.interopDefault(_isObjectJs);\nasync function importSPKI(spki, alg, options) {\n    if (typeof spki !== \"string\" || spki.indexOf(\"-----BEGIN PUBLIC KEY-----\") !== 0) throw new TypeError('\"spki\" must be SPKI formatted string');\n    return (0, _asn1Js.fromSPKI)(spki, alg, options);\n}\nasync function importX509(x509, alg, options) {\n    if (typeof x509 !== \"string\" || x509.indexOf(\"-----BEGIN CERTIFICATE-----\") !== 0) throw new TypeError('\"x509\" must be X.509 formatted string');\n    return (0, _asn1Js.fromX509)(x509, alg, options);\n}\nasync function importPKCS8(pkcs8, alg, options) {\n    if (typeof pkcs8 !== \"string\" || pkcs8.indexOf(\"-----BEGIN PRIVATE KEY-----\") !== 0) throw new TypeError('\"pkcs8\" must be PKCS#8 formatted string');\n    return (0, _asn1Js.fromPKCS8)(pkcs8, alg, options);\n}\nasync function importJWK(jwk, alg, octAsKeyObject) {\n    var _a;\n    if (!(0, _isObjectJsDefault.default)(jwk)) throw new TypeError(\"JWK must be an object\");\n    alg || (alg = jwk.alg);\n    switch(jwk.kty){\n        case \"oct\":\n            if (typeof jwk.k !== \"string\" || !jwk.k) throw new TypeError('missing \"k\" (Key Value) Parameter value');\n            octAsKeyObject !== null && octAsKeyObject !== void 0 ? octAsKeyObject : octAsKeyObject = jwk.ext !== true;\n            if (octAsKeyObject) return (0, _jwkToKeyJsDefault.default)({\n                ...jwk,\n                alg,\n                ext: (_a = jwk.ext) !== null && _a !== void 0 ? _a : false\n            });\n            return (0, _base64UrlJs.decode)(jwk.k);\n        case \"RSA\":\n            if (jwk.oth !== undefined) throw new (0, _errorsJs.JOSENotSupported)('RSA JWK \"oth\" (Other Primes Info) Parameter value is not supported');\n        case \"EC\":\n        case \"OKP\":\n            return (0, _jwkToKeyJsDefault.default)({\n                ...jwk,\n                alg\n            });\n        default:\n            throw new (0, _errorsJs.JOSENotSupported)('Unsupported \"kty\" (Key Type) Parameter value');\n    }\n}\n\n},{\"../runtime/base64url.js\":\"8Djx4\",\"../runtime/asn1.js\":\"CWUVr\",\"../runtime/jwk_to_key.js\":\"1ZP72\",\"../util/errors.js\":\"4fsOp\",\"../lib/is_object.js\":\"daSnu\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"CWUVr\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nparcelHelpers.export(exports, \"toSPKI\", ()=>toSPKI);\nparcelHelpers.export(exports, \"toPKCS8\", ()=>toPKCS8);\nparcelHelpers.export(exports, \"fromPKCS8\", ()=>fromPKCS8);\nparcelHelpers.export(exports, \"fromSPKI\", ()=>fromSPKI);\nparcelHelpers.export(exports, \"fromX509\", ()=>fromX509);\nvar _webcryptoJs = require(\"./webcrypto.js\");\nvar _webcryptoJsDefault = parcelHelpers.interopDefault(_webcryptoJs);\nvar _invalidKeyInputJs = require(\"../lib/invalid_key_input.js\");\nvar _invalidKeyInputJsDefault = parcelHelpers.interopDefault(_invalidKeyInputJs);\nvar _base64UrlJs = require(\"./base64url.js\");\nvar _formatPemJs = require(\"../lib/format_pem.js\");\nvar _formatPemJsDefault = parcelHelpers.interopDefault(_formatPemJs);\nvar _errorsJs = require(\"../util/errors.js\");\nvar _isKeyLikeJs = require(\"./is_key_like.js\");\nconst genericExport = async (keyType, keyFormat, key)=>{\n    if (!(0, _webcryptoJs.isCryptoKey)(key)) throw new TypeError((0, _invalidKeyInputJsDefault.default)(key, ...(0, _isKeyLikeJs.types)));\n    if (!key.extractable) throw new TypeError(\"CryptoKey is not extractable\");\n    if (key.type !== keyType) throw new TypeError(`key is not a ${keyType} key`);\n    return (0, _formatPemJsDefault.default)((0, _base64UrlJs.encodeBase64)(new Uint8Array(await (0, _webcryptoJsDefault.default).subtle.exportKey(keyFormat, key))), `${keyType.toUpperCase()} KEY`);\n};\nconst toSPKI = (key)=>{\n    return genericExport(\"public\", \"spki\", key);\n};\nconst toPKCS8 = (key)=>{\n    return genericExport(\"private\", \"pkcs8\", key);\n};\nconst findOid = (keyData, oid, from = 0)=>{\n    if (from === 0) {\n        oid.unshift(oid.length);\n        oid.unshift(0x06);\n    }\n    let i = keyData.indexOf(oid[0], from);\n    if (i === -1) return false;\n    const sub = keyData.subarray(i, i + oid.length);\n    if (sub.length !== oid.length) return false;\n    return sub.every((value, index)=>value === oid[index]) || findOid(keyData, oid, i + 1);\n};\nconst getNamedCurve = (keyData)=>{\n    switch(true){\n        case findOid(keyData, [\n            0x2a,\n            0x86,\n            0x48,\n            0xce,\n            0x3d,\n            0x03,\n            0x01,\n            0x07\n        ]):\n            return \"P-256\";\n        case findOid(keyData, [\n            0x2b,\n            0x81,\n            0x04,\n            0x00,\n            0x22\n        ]):\n            return \"P-384\";\n        case findOid(keyData, [\n            0x2b,\n            0x81,\n            0x04,\n            0x00,\n            0x23\n        ]):\n            return \"P-521\";\n        case findOid(keyData, [\n            0x2b,\n            0x65,\n            0x6e\n        ]):\n            return \"X25519\";\n        case findOid(keyData, [\n            0x2b,\n            0x65,\n            0x6f\n        ]):\n            return \"X448\";\n        case findOid(keyData, [\n            0x2b,\n            0x65,\n            0x70\n        ]):\n            return \"Ed25519\";\n        case findOid(keyData, [\n            0x2b,\n            0x65,\n            0x71\n        ]):\n            return \"Ed448\";\n        default:\n            throw new (0, _errorsJs.JOSENotSupported)(\"Invalid or unsupported EC Key Curve or OKP Key Sub Type\");\n    }\n};\nconst genericImport = async (replace, keyFormat, pem, alg, options)=>{\n    var _a;\n    let algorithm;\n    let keyUsages;\n    const keyData = new Uint8Array(atob(pem.replace(replace, \"\")).split(\"\").map((c)=>c.charCodeAt(0)));\n    const isPublic = keyFormat === \"spki\";\n    switch(alg){\n        case \"PS256\":\n        case \"PS384\":\n        case \"PS512\":\n            algorithm = {\n                name: \"RSA-PSS\",\n                hash: `SHA-${alg.slice(-3)}`\n            };\n            keyUsages = isPublic ? [\n                \"verify\"\n            ] : [\n                \"sign\"\n            ];\n            break;\n        case \"RS256\":\n        case \"RS384\":\n        case \"RS512\":\n            algorithm = {\n                name: \"RSASSA-PKCS1-v1_5\",\n                hash: `SHA-${alg.slice(-3)}`\n            };\n            keyUsages = isPublic ? [\n                \"verify\"\n            ] : [\n                \"sign\"\n            ];\n            break;\n        case \"RSA-OAEP\":\n        case \"RSA-OAEP-256\":\n        case \"RSA-OAEP-384\":\n        case \"RSA-OAEP-512\":\n            algorithm = {\n                name: \"RSA-OAEP\",\n                hash: `SHA-${parseInt(alg.slice(-3), 10) || 1}`\n            };\n            keyUsages = isPublic ? [\n                \"encrypt\",\n                \"wrapKey\"\n            ] : [\n                \"decrypt\",\n                \"unwrapKey\"\n            ];\n            break;\n        case \"ES256\":\n            algorithm = {\n                name: \"ECDSA\",\n                namedCurve: \"P-256\"\n            };\n            keyUsages = isPublic ? [\n                \"verify\"\n            ] : [\n                \"sign\"\n            ];\n            break;\n        case \"ES384\":\n            algorithm = {\n                name: \"ECDSA\",\n                namedCurve: \"P-384\"\n            };\n            keyUsages = isPublic ? [\n                \"verify\"\n            ] : [\n                \"sign\"\n            ];\n            break;\n        case \"ES512\":\n            algorithm = {\n                name: \"ECDSA\",\n                namedCurve: \"P-521\"\n            };\n            keyUsages = isPublic ? [\n                \"verify\"\n            ] : [\n                \"sign\"\n            ];\n            break;\n        case \"ECDH-ES\":\n        case \"ECDH-ES+A128KW\":\n        case \"ECDH-ES+A192KW\":\n        case \"ECDH-ES+A256KW\":\n            {\n                const namedCurve = getNamedCurve(keyData);\n                algorithm = namedCurve.startsWith(\"P-\") ? {\n                    name: \"ECDH\",\n                    namedCurve\n                } : {\n                    name: namedCurve\n                };\n                keyUsages = isPublic ? [] : [\n                    \"deriveBits\"\n                ];\n                break;\n            }\n        case \"EdDSA\":\n            algorithm = {\n                name: getNamedCurve(keyData)\n            };\n            keyUsages = isPublic ? [\n                \"verify\"\n            ] : [\n                \"sign\"\n            ];\n            break;\n        default:\n            throw new (0, _errorsJs.JOSENotSupported)('Invalid or unsupported \"alg\" (Algorithm) value');\n    }\n    return (0, _webcryptoJsDefault.default).subtle.importKey(keyFormat, keyData, algorithm, (_a = options === null || options === void 0 ? void 0 : options.extractable) !== null && _a !== void 0 ? _a : false, keyUsages);\n};\nconst fromPKCS8 = (pem, alg, options)=>{\n    return genericImport(/(?:-----(?:BEGIN|END) PRIVATE KEY-----|\\s)/g, \"pkcs8\", pem, alg, options);\n};\nconst fromSPKI = (pem, alg, options)=>{\n    return genericImport(/(?:-----(?:BEGIN|END) PUBLIC KEY-----|\\s)/g, \"spki\", pem, alg, options);\n};\nfunction getElement(seq) {\n    let result = [];\n    let next = 0;\n    while(next < seq.length){\n        let nextPart = parseElement(seq.subarray(next));\n        result.push(nextPart);\n        next += nextPart.byteLength;\n    }\n    return result;\n}\nfunction parseElement(bytes) {\n    let position = 0;\n    let tag = bytes[0] & 0x1f;\n    position++;\n    if (tag === 0x1f) {\n        tag = 0;\n        while(bytes[position] >= 0x80){\n            tag = tag * 128 + bytes[position] - 0x80;\n            position++;\n        }\n        tag = tag * 128 + bytes[position] - 0x80;\n        position++;\n    }\n    let length = 0;\n    if (bytes[position] < 0x80) {\n        length = bytes[position];\n        position++;\n    } else if (length === 0x80) {\n        length = 0;\n        while(bytes[position + length] !== 0 || bytes[position + length + 1] !== 0){\n            if (length > bytes.byteLength) throw new TypeError(\"invalid indefinite form length\");\n            length++;\n        }\n        const byteLength = position + length + 2;\n        return {\n            byteLength,\n            contents: bytes.subarray(position, position + length),\n            raw: bytes.subarray(0, byteLength)\n        };\n    } else {\n        let numberOfDigits = bytes[position] & 0x7f;\n        position++;\n        length = 0;\n        for(let i = 0; i < numberOfDigits; i++){\n            length = length * 256 + bytes[position];\n            position++;\n        }\n    }\n    const byteLength = position + length;\n    return {\n        byteLength,\n        contents: bytes.subarray(position, byteLength),\n        raw: bytes.subarray(0, byteLength)\n    };\n}\nfunction spkiFromX509(buf) {\n    const tbsCertificate = getElement(getElement(parseElement(buf).contents)[0].contents);\n    return (0, _base64UrlJs.encodeBase64)(tbsCertificate[tbsCertificate[0].raw[0] === 0xa0 ? 6 : 5].raw);\n}\nfunction getSPKI(x509) {\n    const pem = x509.replace(/(?:-----(?:BEGIN|END) CERTIFICATE-----|\\s)/g, \"\");\n    const raw = (0, _base64UrlJs.decodeBase64)(pem);\n    return (0, _formatPemJsDefault.default)(spkiFromX509(raw), \"PUBLIC KEY\");\n}\nconst fromX509 = (pem, alg, options)=>{\n    let spki;\n    try {\n        spki = getSPKI(pem);\n    } catch (cause) {\n        throw new TypeError(\"Failed to parse the X.509 certificate\", {\n            cause\n        });\n    }\n    return fromSPKI(spki, alg, options);\n};\n\n},{\"./webcrypto.js\":\"aUHBb\",\"../lib/invalid_key_input.js\":\"5GTGb\",\"./base64url.js\":\"8Djx4\",\"../lib/format_pem.js\":\"47l3h\",\"../util/errors.js\":\"4fsOp\",\"./is_key_like.js\":\"9kDjz\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"47l3h\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nexports.default = (b64, descriptor)=>{\n    const newlined = (b64.match(/.{1,64}/g) || []).join(\"\\n\");\n    return `-----BEGIN ${descriptor}-----\\n${newlined}\\n-----END ${descriptor}-----`;\n};\n\n},{\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"1ZP72\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nvar _webcryptoJs = require(\"./webcrypto.js\");\nvar _webcryptoJsDefault = parcelHelpers.interopDefault(_webcryptoJs);\nvar _errorsJs = require(\"../util/errors.js\");\nvar _base64UrlJs = require(\"./base64url.js\");\nfunction subtleMapping(jwk) {\n    let algorithm;\n    let keyUsages;\n    switch(jwk.kty){\n        case \"oct\":\n            switch(jwk.alg){\n                case \"HS256\":\n                case \"HS384\":\n                case \"HS512\":\n                    algorithm = {\n                        name: \"HMAC\",\n                        hash: `SHA-${jwk.alg.slice(-3)}`\n                    };\n                    keyUsages = [\n                        \"sign\",\n                        \"verify\"\n                    ];\n                    break;\n                case \"A128CBC-HS256\":\n                case \"A192CBC-HS384\":\n                case \"A256CBC-HS512\":\n                    throw new (0, _errorsJs.JOSENotSupported)(`${jwk.alg} keys cannot be imported as CryptoKey instances`);\n                case \"A128GCM\":\n                case \"A192GCM\":\n                case \"A256GCM\":\n                case \"A128GCMKW\":\n                case \"A192GCMKW\":\n                case \"A256GCMKW\":\n                    algorithm = {\n                        name: \"AES-GCM\"\n                    };\n                    keyUsages = [\n                        \"encrypt\",\n                        \"decrypt\"\n                    ];\n                    break;\n                case \"A128KW\":\n                case \"A192KW\":\n                case \"A256KW\":\n                    algorithm = {\n                        name: \"AES-KW\"\n                    };\n                    keyUsages = [\n                        \"wrapKey\",\n                        \"unwrapKey\"\n                    ];\n                    break;\n                case \"PBES2-HS256+A128KW\":\n                case \"PBES2-HS384+A192KW\":\n                case \"PBES2-HS512+A256KW\":\n                    algorithm = {\n                        name: \"PBKDF2\"\n                    };\n                    keyUsages = [\n                        \"deriveBits\"\n                    ];\n                    break;\n                default:\n                    throw new (0, _errorsJs.JOSENotSupported)('Invalid or unsupported JWK \"alg\" (Algorithm) Parameter value');\n            }\n            break;\n        case \"RSA\":\n            switch(jwk.alg){\n                case \"PS256\":\n                case \"PS384\":\n                case \"PS512\":\n                    algorithm = {\n                        name: \"RSA-PSS\",\n                        hash: `SHA-${jwk.alg.slice(-3)}`\n                    };\n                    keyUsages = jwk.d ? [\n                        \"sign\"\n                    ] : [\n                        \"verify\"\n                    ];\n                    break;\n                case \"RS256\":\n                case \"RS384\":\n                case \"RS512\":\n                    algorithm = {\n                        name: \"RSASSA-PKCS1-v1_5\",\n                        hash: `SHA-${jwk.alg.slice(-3)}`\n                    };\n                    keyUsages = jwk.d ? [\n                        \"sign\"\n                    ] : [\n                        \"verify\"\n                    ];\n                    break;\n                case \"RSA-OAEP\":\n                case \"RSA-OAEP-256\":\n                case \"RSA-OAEP-384\":\n                case \"RSA-OAEP-512\":\n                    algorithm = {\n                        name: \"RSA-OAEP\",\n                        hash: `SHA-${parseInt(jwk.alg.slice(-3), 10) || 1}`\n                    };\n                    keyUsages = jwk.d ? [\n                        \"decrypt\",\n                        \"unwrapKey\"\n                    ] : [\n                        \"encrypt\",\n                        \"wrapKey\"\n                    ];\n                    break;\n                default:\n                    throw new (0, _errorsJs.JOSENotSupported)('Invalid or unsupported JWK \"alg\" (Algorithm) Parameter value');\n            }\n            break;\n        case \"EC\":\n            switch(jwk.alg){\n                case \"ES256\":\n                    algorithm = {\n                        name: \"ECDSA\",\n                        namedCurve: \"P-256\"\n                    };\n                    keyUsages = jwk.d ? [\n                        \"sign\"\n                    ] : [\n                        \"verify\"\n                    ];\n                    break;\n                case \"ES384\":\n                    algorithm = {\n                        name: \"ECDSA\",\n                        namedCurve: \"P-384\"\n                    };\n                    keyUsages = jwk.d ? [\n                        \"sign\"\n                    ] : [\n                        \"verify\"\n                    ];\n                    break;\n                case \"ES512\":\n                    algorithm = {\n                        name: \"ECDSA\",\n                        namedCurve: \"P-521\"\n                    };\n                    keyUsages = jwk.d ? [\n                        \"sign\"\n                    ] : [\n                        \"verify\"\n                    ];\n                    break;\n                case \"ECDH-ES\":\n                case \"ECDH-ES+A128KW\":\n                case \"ECDH-ES+A192KW\":\n                case \"ECDH-ES+A256KW\":\n                    algorithm = {\n                        name: \"ECDH\",\n                        namedCurve: jwk.crv\n                    };\n                    keyUsages = jwk.d ? [\n                        \"deriveBits\"\n                    ] : [];\n                    break;\n                default:\n                    throw new (0, _errorsJs.JOSENotSupported)('Invalid or unsupported JWK \"alg\" (Algorithm) Parameter value');\n            }\n            break;\n        case \"OKP\":\n            switch(jwk.alg){\n                case \"EdDSA\":\n                    algorithm = {\n                        name: jwk.crv\n                    };\n                    keyUsages = jwk.d ? [\n                        \"sign\"\n                    ] : [\n                        \"verify\"\n                    ];\n                    break;\n                case \"ECDH-ES\":\n                case \"ECDH-ES+A128KW\":\n                case \"ECDH-ES+A192KW\":\n                case \"ECDH-ES+A256KW\":\n                    algorithm = {\n                        name: jwk.crv\n                    };\n                    keyUsages = jwk.d ? [\n                        \"deriveBits\"\n                    ] : [];\n                    break;\n                default:\n                    throw new (0, _errorsJs.JOSENotSupported)('Invalid or unsupported JWK \"alg\" (Algorithm) Parameter value');\n            }\n            break;\n        default:\n            throw new (0, _errorsJs.JOSENotSupported)('Invalid or unsupported JWK \"kty\" (Key Type) Parameter value');\n    }\n    return {\n        algorithm,\n        keyUsages\n    };\n}\nconst parse = async (jwk)=>{\n    var _a, _b;\n    if (!jwk.alg) throw new TypeError('\"alg\" argument is required when \"jwk.alg\" is not present');\n    const { algorithm, keyUsages } = subtleMapping(jwk);\n    const rest = [\n        algorithm,\n        (_a = jwk.ext) !== null && _a !== void 0 ? _a : false,\n        (_b = jwk.key_ops) !== null && _b !== void 0 ? _b : keyUsages\n    ];\n    if (algorithm.name === \"PBKDF2\") return (0, _webcryptoJsDefault.default).subtle.importKey(\"raw\", (0, _base64UrlJs.decode)(jwk.k), ...rest);\n    const keyData = {\n        ...jwk\n    };\n    delete keyData.alg;\n    delete keyData.use;\n    return (0, _webcryptoJsDefault.default).subtle.importKey(\"jwk\", keyData, ...rest);\n};\nexports.default = parse;\n\n},{\"./webcrypto.js\":\"aUHBb\",\"../util/errors.js\":\"4fsOp\",\"./base64url.js\":\"8Djx4\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"5ompv\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nvar _invalidKeyInputJs = require(\"./invalid_key_input.js\");\nvar _isKeyLikeJs = require(\"../runtime/is_key_like.js\");\nvar _isKeyLikeJsDefault = parcelHelpers.interopDefault(_isKeyLikeJs);\nconst symmetricTypeCheck = (alg, key)=>{\n    if (key instanceof Uint8Array) return;\n    if (!(0, _isKeyLikeJsDefault.default)(key)) throw new TypeError((0, _invalidKeyInputJs.withAlg)(alg, key, ...(0, _isKeyLikeJs.types), \"Uint8Array\"));\n    if (key.type !== \"secret\") throw new TypeError(`${(0, _isKeyLikeJs.types).join(\" or \")} instances for symmetric algorithms must be of type \"secret\"`);\n};\nconst asymmetricTypeCheck = (alg, key, usage)=>{\n    if (!(0, _isKeyLikeJsDefault.default)(key)) throw new TypeError((0, _invalidKeyInputJs.withAlg)(alg, key, ...(0, _isKeyLikeJs.types)));\n    if (key.type === \"secret\") throw new TypeError(`${(0, _isKeyLikeJs.types).join(\" or \")} instances for asymmetric algorithms must not be of type \"secret\"`);\n    if (usage === \"sign\" && key.type === \"public\") throw new TypeError(`${(0, _isKeyLikeJs.types).join(\" or \")} instances for asymmetric algorithm signing must be of type \"private\"`);\n    if (usage === \"decrypt\" && key.type === \"public\") throw new TypeError(`${(0, _isKeyLikeJs.types).join(\" or \")} instances for asymmetric algorithm decryption must be of type \"private\"`);\n    if (key.algorithm && usage === \"verify\" && key.type === \"private\") throw new TypeError(`${(0, _isKeyLikeJs.types).join(\" or \")} instances for asymmetric algorithm verifying must be of type \"public\"`);\n    if (key.algorithm && usage === \"encrypt\" && key.type === \"private\") throw new TypeError(`${(0, _isKeyLikeJs.types).join(\" or \")} instances for asymmetric algorithm encryption must be of type \"public\"`);\n};\nconst checkKeyType = (alg, key, usage)=>{\n    const symmetric = alg.startsWith(\"HS\") || alg === \"dir\" || alg.startsWith(\"PBES2\") || /^A\\d{3}(?:GCM)?KW$/.test(alg);\n    if (symmetric) symmetricTypeCheck(alg, key);\n    else asymmetricTypeCheck(alg, key, usage);\n};\nexports.default = checkKeyType;\n\n},{\"./invalid_key_input.js\":\"5GTGb\",\"../runtime/is_key_like.js\":\"9kDjz\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"6zfNV\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nparcelHelpers.export(exports, \"wrap\", ()=>wrap);\nparcelHelpers.export(exports, \"unwrap\", ()=>unwrap);\nvar _encryptJs = require(\"../runtime/encrypt.js\");\nvar _encryptJsDefault = parcelHelpers.interopDefault(_encryptJs);\nvar _decryptJs = require(\"../runtime/decrypt.js\");\nvar _decryptJsDefault = parcelHelpers.interopDefault(_decryptJs);\nvar _ivJs = require(\"./iv.js\");\nvar _ivJsDefault = parcelHelpers.interopDefault(_ivJs);\nvar _base64UrlJs = require(\"../runtime/base64url.js\");\nasync function wrap(alg, key, cek, iv) {\n    const jweAlgorithm = alg.slice(0, 7);\n    iv || (iv = (0, _ivJsDefault.default)(jweAlgorithm));\n    const { ciphertext: encryptedKey, tag } = await (0, _encryptJsDefault.default)(jweAlgorithm, cek, key, iv, new Uint8Array(0));\n    return {\n        encryptedKey,\n        iv: (0, _base64UrlJs.encode)(iv),\n        tag: (0, _base64UrlJs.encode)(tag)\n    };\n}\nasync function unwrap(alg, key, encryptedKey, iv, tag) {\n    const jweAlgorithm = alg.slice(0, 7);\n    return (0, _decryptJsDefault.default)(jweAlgorithm, key, encryptedKey, iv, tag, new Uint8Array(0));\n}\n\n},{\"../runtime/encrypt.js\":\"lfNrn\",\"../runtime/decrypt.js\":\"dPMLp\",\"./iv.js\":\"bvMJc\",\"../runtime/base64url.js\":\"8Djx4\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"lfNrn\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nvar _bufferUtilsJs = require(\"../lib/buffer_utils.js\");\nvar _checkIvLengthJs = require(\"../lib/check_iv_length.js\");\nvar _checkIvLengthJsDefault = parcelHelpers.interopDefault(_checkIvLengthJs);\nvar _checkCekLengthJs = require(\"./check_cek_length.js\");\nvar _checkCekLengthJsDefault = parcelHelpers.interopDefault(_checkCekLengthJs);\nvar _webcryptoJs = require(\"./webcrypto.js\");\nvar _webcryptoJsDefault = parcelHelpers.interopDefault(_webcryptoJs);\nvar _cryptoKeyJs = require(\"../lib/crypto_key.js\");\nvar _invalidKeyInputJs = require(\"../lib/invalid_key_input.js\");\nvar _invalidKeyInputJsDefault = parcelHelpers.interopDefault(_invalidKeyInputJs);\nvar _errorsJs = require(\"../util/errors.js\");\nvar _isKeyLikeJs = require(\"./is_key_like.js\");\nasync function cbcEncrypt(enc, plaintext, cek, iv, aad) {\n    if (!(cek instanceof Uint8Array)) throw new TypeError((0, _invalidKeyInputJsDefault.default)(cek, \"Uint8Array\"));\n    const keySize = parseInt(enc.slice(1, 4), 10);\n    const encKey = await (0, _webcryptoJsDefault.default).subtle.importKey(\"raw\", cek.subarray(keySize >> 3), \"AES-CBC\", false, [\n        \"encrypt\"\n    ]);\n    const macKey = await (0, _webcryptoJsDefault.default).subtle.importKey(\"raw\", cek.subarray(0, keySize >> 3), {\n        hash: `SHA-${keySize << 1}`,\n        name: \"HMAC\"\n    }, false, [\n        \"sign\"\n    ]);\n    const ciphertext = new Uint8Array(await (0, _webcryptoJsDefault.default).subtle.encrypt({\n        iv,\n        name: \"AES-CBC\"\n    }, encKey, plaintext));\n    const macData = (0, _bufferUtilsJs.concat)(aad, iv, ciphertext, (0, _bufferUtilsJs.uint64be)(aad.length << 3));\n    const tag = new Uint8Array((await (0, _webcryptoJsDefault.default).subtle.sign(\"HMAC\", macKey, macData)).slice(0, keySize >> 3));\n    return {\n        ciphertext,\n        tag\n    };\n}\nasync function gcmEncrypt(enc, plaintext, cek, iv, aad) {\n    let encKey;\n    if (cek instanceof Uint8Array) encKey = await (0, _webcryptoJsDefault.default).subtle.importKey(\"raw\", cek, \"AES-GCM\", false, [\n        \"encrypt\"\n    ]);\n    else {\n        (0, _cryptoKeyJs.checkEncCryptoKey)(cek, enc, \"encrypt\");\n        encKey = cek;\n    }\n    const encrypted = new Uint8Array(await (0, _webcryptoJsDefault.default).subtle.encrypt({\n        additionalData: aad,\n        iv,\n        name: \"AES-GCM\",\n        tagLength: 128\n    }, encKey, plaintext));\n    const tag = encrypted.slice(-16);\n    const ciphertext = encrypted.slice(0, -16);\n    return {\n        ciphertext,\n        tag\n    };\n}\nconst encrypt = async (enc, plaintext, cek, iv, aad)=>{\n    if (!(0, _webcryptoJs.isCryptoKey)(cek) && !(cek instanceof Uint8Array)) throw new TypeError((0, _invalidKeyInputJsDefault.default)(cek, ...(0, _isKeyLikeJs.types), \"Uint8Array\"));\n    (0, _checkIvLengthJsDefault.default)(enc, iv);\n    switch(enc){\n        case \"A128CBC-HS256\":\n        case \"A192CBC-HS384\":\n        case \"A256CBC-HS512\":\n            if (cek instanceof Uint8Array) (0, _checkCekLengthJsDefault.default)(cek, parseInt(enc.slice(-3), 10));\n            return cbcEncrypt(enc, plaintext, cek, iv, aad);\n        case \"A128GCM\":\n        case \"A192GCM\":\n        case \"A256GCM\":\n            if (cek instanceof Uint8Array) (0, _checkCekLengthJsDefault.default)(cek, parseInt(enc.slice(1, 4), 10));\n            return gcmEncrypt(enc, plaintext, cek, iv, aad);\n        default:\n            throw new (0, _errorsJs.JOSENotSupported)(\"Unsupported JWE Content Encryption Algorithm\");\n    }\n};\nexports.default = encrypt;\n\n},{\"../lib/buffer_utils.js\":\"h0x9u\",\"../lib/check_iv_length.js\":\"7za2M\",\"./check_cek_length.js\":\"9VrK5\",\"./webcrypto.js\":\"aUHBb\",\"../lib/crypto_key.js\":\"gM0cz\",\"../lib/invalid_key_input.js\":\"5GTGb\",\"../util/errors.js\":\"4fsOp\",\"./is_key_like.js\":\"9kDjz\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"1cFtE\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nvar _errorsJs = require(\"../util/errors.js\");\nfunction validateCrit(Err, recognizedDefault, recognizedOption, protectedHeader, joseHeader) {\n    if (joseHeader.crit !== undefined && protectedHeader.crit === undefined) throw new Err('\"crit\" (Critical) Header Parameter MUST be integrity protected');\n    if (!protectedHeader || protectedHeader.crit === undefined) return new Set();\n    if (!Array.isArray(protectedHeader.crit) || protectedHeader.crit.length === 0 || protectedHeader.crit.some((input)=>typeof input !== \"string\" || input.length === 0)) throw new Err('\"crit\" (Critical) Header Parameter MUST be an array of non-empty strings when present');\n    let recognized;\n    if (recognizedOption !== undefined) recognized = new Map([\n        ...Object.entries(recognizedOption),\n        ...recognizedDefault.entries()\n    ]);\n    else recognized = recognizedDefault;\n    for (const parameter of protectedHeader.crit){\n        if (!recognized.has(parameter)) throw new (0, _errorsJs.JOSENotSupported)(`Extension Header Parameter \"${parameter}\" is not recognized`);\n        if (joseHeader[parameter] === undefined) throw new Err(`Extension Header Parameter \"${parameter}\" is missing`);\n        else if (recognized.get(parameter) && protectedHeader[parameter] === undefined) throw new Err(`Extension Header Parameter \"${parameter}\" MUST be integrity protected`);\n    }\n    return new Set(protectedHeader.crit);\n}\nexports.default = validateCrit;\n\n},{\"../util/errors.js\":\"4fsOp\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"fDDwK\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nconst validateAlgorithms = (option, algorithms)=>{\n    if (algorithms !== undefined && (!Array.isArray(algorithms) || algorithms.some((s)=>typeof s !== \"string\"))) throw new TypeError(`\"${option}\" option must be an array of strings`);\n    if (!algorithms) return undefined;\n    return new Set(algorithms);\n};\nexports.default = validateAlgorithms;\n\n},{\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"av2Hr\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nparcelHelpers.export(exports, \"generalDecrypt\", ()=>generalDecrypt);\nvar _decryptJs = require(\"../flattened/decrypt.js\");\nvar _errorsJs = require(\"../../util/errors.js\");\nvar _isObjectJs = require(\"../../lib/is_object.js\");\nvar _isObjectJsDefault = parcelHelpers.interopDefault(_isObjectJs);\nasync function generalDecrypt(jwe, key, options) {\n    if (!(0, _isObjectJsDefault.default)(jwe)) throw new (0, _errorsJs.JWEInvalid)(\"General JWE must be an object\");\n    if (!Array.isArray(jwe.recipients) || !jwe.recipients.every((0, _isObjectJsDefault.default))) throw new (0, _errorsJs.JWEInvalid)(\"JWE Recipients missing or incorrect type\");\n    if (!jwe.recipients.length) throw new (0, _errorsJs.JWEInvalid)(\"JWE Recipients has no members\");\n    for (const recipient of jwe.recipients)try {\n        return await (0, _decryptJs.flattenedDecrypt)({\n            aad: jwe.aad,\n            ciphertext: jwe.ciphertext,\n            encrypted_key: recipient.encrypted_key,\n            header: recipient.header,\n            iv: jwe.iv,\n            protected: jwe.protected,\n            tag: jwe.tag,\n            unprotected: jwe.unprotected\n        }, key, options);\n    } catch (_a) {}\n    throw new (0, _errorsJs.JWEDecryptionFailed)();\n}\n\n},{\"../flattened/decrypt.js\":\"5HUvj\",\"../../util/errors.js\":\"4fsOp\",\"../../lib/is_object.js\":\"daSnu\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"bS3zk\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nparcelHelpers.export(exports, \"GeneralEncrypt\", ()=>GeneralEncrypt);\nvar _encryptJs = require(\"../flattened/encrypt.js\");\nvar _errorsJs = require(\"../../util/errors.js\");\nvar _cekJs = require(\"../../lib/cek.js\");\nvar _cekJsDefault = parcelHelpers.interopDefault(_cekJs);\nvar _isDisjointJs = require(\"../../lib/is_disjoint.js\");\nvar _isDisjointJsDefault = parcelHelpers.interopDefault(_isDisjointJs);\nvar _encryptKeyManagementJs = require(\"../../lib/encrypt_key_management.js\");\nvar _encryptKeyManagementJsDefault = parcelHelpers.interopDefault(_encryptKeyManagementJs);\nvar _base64UrlJs = require(\"../../runtime/base64url.js\");\nvar _validateCritJs = require(\"../../lib/validate_crit.js\");\nvar _validateCritJsDefault = parcelHelpers.interopDefault(_validateCritJs);\nclass IndividualRecipient {\n    constructor(enc, key, options){\n        this.parent = enc;\n        this.key = key;\n        this.options = options;\n    }\n    setUnprotectedHeader(unprotectedHeader) {\n        if (this.unprotectedHeader) throw new TypeError(\"setUnprotectedHeader can only be called once\");\n        this.unprotectedHeader = unprotectedHeader;\n        return this;\n    }\n    addRecipient(...args) {\n        return this.parent.addRecipient(...args);\n    }\n    encrypt(...args) {\n        return this.parent.encrypt(...args);\n    }\n    done() {\n        return this.parent;\n    }\n}\nclass GeneralEncrypt {\n    constructor(plaintext){\n        this._recipients = [];\n        this._plaintext = plaintext;\n    }\n    addRecipient(key, options) {\n        const recipient = new IndividualRecipient(this, key, {\n            crit: options === null || options === void 0 ? void 0 : options.crit\n        });\n        this._recipients.push(recipient);\n        return recipient;\n    }\n    setProtectedHeader(protectedHeader) {\n        if (this._protectedHeader) throw new TypeError(\"setProtectedHeader can only be called once\");\n        this._protectedHeader = protectedHeader;\n        return this;\n    }\n    setSharedUnprotectedHeader(sharedUnprotectedHeader) {\n        if (this._unprotectedHeader) throw new TypeError(\"setSharedUnprotectedHeader can only be called once\");\n        this._unprotectedHeader = sharedUnprotectedHeader;\n        return this;\n    }\n    setAdditionalAuthenticatedData(aad) {\n        this._aad = aad;\n        return this;\n    }\n    async encrypt(options) {\n        var _a, _b, _c;\n        if (!this._recipients.length) throw new (0, _errorsJs.JWEInvalid)(\"at least one recipient must be added\");\n        options = {\n            deflateRaw: options === null || options === void 0 ? void 0 : options.deflateRaw\n        };\n        if (this._recipients.length === 1) {\n            const [recipient] = this._recipients;\n            const flattened = await new (0, _encryptJs.FlattenedEncrypt)(this._plaintext).setAdditionalAuthenticatedData(this._aad).setProtectedHeader(this._protectedHeader).setSharedUnprotectedHeader(this._unprotectedHeader).setUnprotectedHeader(recipient.unprotectedHeader).encrypt(recipient.key, {\n                ...recipient.options,\n                ...options\n            });\n            let jwe = {\n                ciphertext: flattened.ciphertext,\n                iv: flattened.iv,\n                recipients: [\n                    {}\n                ],\n                tag: flattened.tag\n            };\n            if (flattened.aad) jwe.aad = flattened.aad;\n            if (flattened.protected) jwe.protected = flattened.protected;\n            if (flattened.unprotected) jwe.unprotected = flattened.unprotected;\n            if (flattened.encrypted_key) jwe.recipients[0].encrypted_key = flattened.encrypted_key;\n            if (flattened.header) jwe.recipients[0].header = flattened.header;\n            return jwe;\n        }\n        let enc;\n        for(let i = 0; i < this._recipients.length; i++){\n            const recipient = this._recipients[i];\n            if (!(0, _isDisjointJsDefault.default)(this._protectedHeader, this._unprotectedHeader, recipient.unprotectedHeader)) throw new (0, _errorsJs.JWEInvalid)(\"JWE Protected, JWE Shared Unprotected and JWE Per-Recipient Header Parameter names must be disjoint\");\n            const joseHeader = {\n                ...this._protectedHeader,\n                ...this._unprotectedHeader,\n                ...recipient.unprotectedHeader\n            };\n            const { alg } = joseHeader;\n            if (typeof alg !== \"string\" || !alg) throw new (0, _errorsJs.JWEInvalid)('JWE \"alg\" (Algorithm) Header Parameter missing or invalid');\n            if (alg === \"dir\" || alg === \"ECDH-ES\") throw new (0, _errorsJs.JWEInvalid)('\"dir\" and \"ECDH-ES\" alg may only be used with a single recipient');\n            if (typeof joseHeader.enc !== \"string\" || !joseHeader.enc) throw new (0, _errorsJs.JWEInvalid)('JWE \"enc\" (Encryption Algorithm) Header Parameter missing or invalid');\n            if (!enc) enc = joseHeader.enc;\n            else if (enc !== joseHeader.enc) throw new (0, _errorsJs.JWEInvalid)('JWE \"enc\" (Encryption Algorithm) Header Parameter must be the same for all recipients');\n            (0, _validateCritJsDefault.default)((0, _errorsJs.JWEInvalid), new Map(), recipient.options.crit, this._protectedHeader, joseHeader);\n            if (joseHeader.zip !== undefined) {\n                if (!this._protectedHeader || !this._protectedHeader.zip) throw new (0, _errorsJs.JWEInvalid)('JWE \"zip\" (Compression Algorithm) Header MUST be integrity protected');\n            }\n        }\n        const cek = (0, _cekJsDefault.default)(enc);\n        let jwe = {\n            ciphertext: \"\",\n            iv: \"\",\n            recipients: [],\n            tag: \"\"\n        };\n        for(let i = 0; i < this._recipients.length; i++){\n            const recipient = this._recipients[i];\n            const target = {};\n            jwe.recipients.push(target);\n            const joseHeader = {\n                ...this._protectedHeader,\n                ...this._unprotectedHeader,\n                ...recipient.unprotectedHeader\n            };\n            const p2c = joseHeader.alg.startsWith(\"PBES2\") ? 2048 + i : undefined;\n            if (i === 0) {\n                const flattened = await new (0, _encryptJs.FlattenedEncrypt)(this._plaintext).setAdditionalAuthenticatedData(this._aad).setContentEncryptionKey(cek).setProtectedHeader(this._protectedHeader).setSharedUnprotectedHeader(this._unprotectedHeader).setUnprotectedHeader(recipient.unprotectedHeader).setKeyManagementParameters({\n                    p2c\n                }).encrypt(recipient.key, {\n                    ...recipient.options,\n                    ...options,\n                    [(0, _encryptJs.unprotected)]: true\n                });\n                jwe.ciphertext = flattened.ciphertext;\n                jwe.iv = flattened.iv;\n                jwe.tag = flattened.tag;\n                if (flattened.aad) jwe.aad = flattened.aad;\n                if (flattened.protected) jwe.protected = flattened.protected;\n                if (flattened.unprotected) jwe.unprotected = flattened.unprotected;\n                target.encrypted_key = flattened.encrypted_key;\n                if (flattened.header) target.header = flattened.header;\n                continue;\n            }\n            const { encryptedKey, parameters } = await (0, _encryptKeyManagementJsDefault.default)(((_a = recipient.unprotectedHeader) === null || _a === void 0 ? void 0 : _a.alg) || ((_b = this._protectedHeader) === null || _b === void 0 ? void 0 : _b.alg) || ((_c = this._unprotectedHeader) === null || _c === void 0 ? void 0 : _c.alg), enc, recipient.key, cek, {\n                p2c\n            });\n            target.encrypted_key = (0, _base64UrlJs.encode)(encryptedKey);\n            if (recipient.unprotectedHeader || parameters) target.header = {\n                ...recipient.unprotectedHeader,\n                ...parameters\n            };\n        }\n        return jwe;\n    }\n}\n\n},{\"../flattened/encrypt.js\":\"gNmwl\",\"../../util/errors.js\":\"4fsOp\",\"../../lib/cek.js\":\"cA5vi\",\"../../lib/is_disjoint.js\":\"91YXn\",\"../../lib/encrypt_key_management.js\":\"lMdet\",\"../../runtime/base64url.js\":\"8Djx4\",\"../../lib/validate_crit.js\":\"1cFtE\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"gNmwl\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nparcelHelpers.export(exports, \"unprotected\", ()=>unprotected);\nparcelHelpers.export(exports, \"FlattenedEncrypt\", ()=>FlattenedEncrypt);\nvar _base64UrlJs = require(\"../../runtime/base64url.js\");\nvar _encryptJs = require(\"../../runtime/encrypt.js\");\nvar _encryptJsDefault = parcelHelpers.interopDefault(_encryptJs);\nvar _zlibJs = require(\"../../runtime/zlib.js\");\nvar _ivJs = require(\"../../lib/iv.js\");\nvar _ivJsDefault = parcelHelpers.interopDefault(_ivJs);\nvar _encryptKeyManagementJs = require(\"../../lib/encrypt_key_management.js\");\nvar _encryptKeyManagementJsDefault = parcelHelpers.interopDefault(_encryptKeyManagementJs);\nvar _errorsJs = require(\"../../util/errors.js\");\nvar _isDisjointJs = require(\"../../lib/is_disjoint.js\");\nvar _isDisjointJsDefault = parcelHelpers.interopDefault(_isDisjointJs);\nvar _bufferUtilsJs = require(\"../../lib/buffer_utils.js\");\nvar _validateCritJs = require(\"../../lib/validate_crit.js\");\nvar _validateCritJsDefault = parcelHelpers.interopDefault(_validateCritJs);\nconst unprotected = Symbol();\nclass FlattenedEncrypt {\n    constructor(plaintext){\n        if (!(plaintext instanceof Uint8Array)) throw new TypeError(\"plaintext must be an instance of Uint8Array\");\n        this._plaintext = plaintext;\n    }\n    setKeyManagementParameters(parameters) {\n        if (this._keyManagementParameters) throw new TypeError(\"setKeyManagementParameters can only be called once\");\n        this._keyManagementParameters = parameters;\n        return this;\n    }\n    setProtectedHeader(protectedHeader) {\n        if (this._protectedHeader) throw new TypeError(\"setProtectedHeader can only be called once\");\n        this._protectedHeader = protectedHeader;\n        return this;\n    }\n    setSharedUnprotectedHeader(sharedUnprotectedHeader) {\n        if (this._sharedUnprotectedHeader) throw new TypeError(\"setSharedUnprotectedHeader can only be called once\");\n        this._sharedUnprotectedHeader = sharedUnprotectedHeader;\n        return this;\n    }\n    setUnprotectedHeader(unprotectedHeader) {\n        if (this._unprotectedHeader) throw new TypeError(\"setUnprotectedHeader can only be called once\");\n        this._unprotectedHeader = unprotectedHeader;\n        return this;\n    }\n    setAdditionalAuthenticatedData(aad) {\n        this._aad = aad;\n        return this;\n    }\n    setContentEncryptionKey(cek) {\n        if (this._cek) throw new TypeError(\"setContentEncryptionKey can only be called once\");\n        this._cek = cek;\n        return this;\n    }\n    setInitializationVector(iv) {\n        if (this._iv) throw new TypeError(\"setInitializationVector can only be called once\");\n        this._iv = iv;\n        return this;\n    }\n    async encrypt(key, options) {\n        if (!this._protectedHeader && !this._unprotectedHeader && !this._sharedUnprotectedHeader) throw new (0, _errorsJs.JWEInvalid)(\"either setProtectedHeader, setUnprotectedHeader, or sharedUnprotectedHeader must be called before #encrypt()\");\n        if (!(0, _isDisjointJsDefault.default)(this._protectedHeader, this._unprotectedHeader, this._sharedUnprotectedHeader)) throw new (0, _errorsJs.JWEInvalid)(\"JWE Protected, JWE Shared Unprotected and JWE Per-Recipient Header Parameter names must be disjoint\");\n        const joseHeader = {\n            ...this._protectedHeader,\n            ...this._unprotectedHeader,\n            ...this._sharedUnprotectedHeader\n        };\n        (0, _validateCritJsDefault.default)((0, _errorsJs.JWEInvalid), new Map(), options === null || options === void 0 ? void 0 : options.crit, this._protectedHeader, joseHeader);\n        if (joseHeader.zip !== undefined) {\n            if (!this._protectedHeader || !this._protectedHeader.zip) throw new (0, _errorsJs.JWEInvalid)('JWE \"zip\" (Compression Algorithm) Header MUST be integrity protected');\n            if (joseHeader.zip !== \"DEF\") throw new (0, _errorsJs.JOSENotSupported)('Unsupported JWE \"zip\" (Compression Algorithm) Header Parameter value');\n        }\n        const { alg, enc } = joseHeader;\n        if (typeof alg !== \"string\" || !alg) throw new (0, _errorsJs.JWEInvalid)('JWE \"alg\" (Algorithm) Header Parameter missing or invalid');\n        if (typeof enc !== \"string\" || !enc) throw new (0, _errorsJs.JWEInvalid)('JWE \"enc\" (Encryption Algorithm) Header Parameter missing or invalid');\n        let encryptedKey;\n        if (alg === \"dir\") {\n            if (this._cek) throw new TypeError(\"setContentEncryptionKey cannot be called when using Direct Encryption\");\n        } else if (alg === \"ECDH-ES\") {\n            if (this._cek) throw new TypeError(\"setContentEncryptionKey cannot be called when using Direct Key Agreement\");\n        }\n        let cek;\n        {\n            let parameters;\n            ({ cek, encryptedKey, parameters } = await (0, _encryptKeyManagementJsDefault.default)(alg, enc, key, this._cek, this._keyManagementParameters));\n            if (parameters) {\n                if (options && unprotected in options) {\n                    if (!this._unprotectedHeader) this.setUnprotectedHeader(parameters);\n                    else this._unprotectedHeader = {\n                        ...this._unprotectedHeader,\n                        ...parameters\n                    };\n                } else if (!this._protectedHeader) this.setProtectedHeader(parameters);\n                else this._protectedHeader = {\n                    ...this._protectedHeader,\n                    ...parameters\n                };\n            }\n        }\n        this._iv || (this._iv = (0, _ivJsDefault.default)(enc));\n        let additionalData;\n        let protectedHeader;\n        let aadMember;\n        if (this._protectedHeader) protectedHeader = (0, _bufferUtilsJs.encoder).encode((0, _base64UrlJs.encode)(JSON.stringify(this._protectedHeader)));\n        else protectedHeader = (0, _bufferUtilsJs.encoder).encode(\"\");\n        if (this._aad) {\n            aadMember = (0, _base64UrlJs.encode)(this._aad);\n            additionalData = (0, _bufferUtilsJs.concat)(protectedHeader, (0, _bufferUtilsJs.encoder).encode(\".\"), (0, _bufferUtilsJs.encoder).encode(aadMember));\n        } else additionalData = protectedHeader;\n        let ciphertext;\n        let tag;\n        if (joseHeader.zip === \"DEF\") {\n            const deflated = await ((options === null || options === void 0 ? void 0 : options.deflateRaw) || (0, _zlibJs.deflate))(this._plaintext);\n            ({ ciphertext, tag } = await (0, _encryptJsDefault.default)(enc, deflated, cek, this._iv, additionalData));\n        } else ({ ciphertext, tag } = await (0, _encryptJsDefault.default)(enc, this._plaintext, cek, this._iv, additionalData));\n        const jwe = {\n            ciphertext: (0, _base64UrlJs.encode)(ciphertext),\n            iv: (0, _base64UrlJs.encode)(this._iv),\n            tag: (0, _base64UrlJs.encode)(tag)\n        };\n        if (encryptedKey) jwe.encrypted_key = (0, _base64UrlJs.encode)(encryptedKey);\n        if (aadMember) jwe.aad = aadMember;\n        if (this._protectedHeader) jwe.protected = (0, _bufferUtilsJs.decoder).decode(protectedHeader);\n        if (this._sharedUnprotectedHeader) jwe.unprotected = this._sharedUnprotectedHeader;\n        if (this._unprotectedHeader) jwe.header = this._unprotectedHeader;\n        return jwe;\n    }\n}\n\n},{\"../../runtime/base64url.js\":\"8Djx4\",\"../../runtime/encrypt.js\":\"lfNrn\",\"../../runtime/zlib.js\":\"dM1d1\",\"../../lib/iv.js\":\"bvMJc\",\"../../lib/encrypt_key_management.js\":\"lMdet\",\"../../util/errors.js\":\"4fsOp\",\"../../lib/is_disjoint.js\":\"91YXn\",\"../../lib/buffer_utils.js\":\"h0x9u\",\"../../lib/validate_crit.js\":\"1cFtE\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"lMdet\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nvar _aeskwJs = require(\"../runtime/aeskw.js\");\nvar _ecdhesJs = require(\"../runtime/ecdhes.js\");\nvar _pbes2KwJs = require(\"../runtime/pbes2kw.js\");\nvar _rsaesJs = require(\"../runtime/rsaes.js\");\nvar _base64UrlJs = require(\"../runtime/base64url.js\");\nvar _cekJs = require(\"../lib/cek.js\");\nvar _cekJsDefault = parcelHelpers.interopDefault(_cekJs);\nvar _errorsJs = require(\"../util/errors.js\");\nvar _exportJs = require(\"../key/export.js\");\nvar _checkKeyTypeJs = require(\"./check_key_type.js\");\nvar _checkKeyTypeJsDefault = parcelHelpers.interopDefault(_checkKeyTypeJs);\nvar _aesgcmkwJs = require(\"./aesgcmkw.js\");\nasync function encryptKeyManagement(alg, enc, key, providedCek, providedParameters = {}) {\n    let encryptedKey;\n    let parameters;\n    let cek;\n    (0, _checkKeyTypeJsDefault.default)(alg, key, \"encrypt\");\n    switch(alg){\n        case \"dir\":\n            cek = key;\n            break;\n        case \"ECDH-ES\":\n        case \"ECDH-ES+A128KW\":\n        case \"ECDH-ES+A192KW\":\n        case \"ECDH-ES+A256KW\":\n            {\n                if (!_ecdhesJs.ecdhAllowed(key)) throw new (0, _errorsJs.JOSENotSupported)(\"ECDH with the provided key is not allowed or not supported by your javascript runtime\");\n                const { apu, apv } = providedParameters;\n                let { epk: ephemeralKey } = providedParameters;\n                ephemeralKey || (ephemeralKey = (await _ecdhesJs.generateEpk(key)).privateKey);\n                const { x, y, crv, kty } = await (0, _exportJs.exportJWK)(ephemeralKey);\n                const sharedSecret = await _ecdhesJs.deriveKey(key, ephemeralKey, alg === \"ECDH-ES\" ? enc : alg, alg === \"ECDH-ES\" ? (0, _cekJs.bitLength)(enc) : parseInt(alg.slice(-5, -2), 10), apu, apv);\n                parameters = {\n                    epk: {\n                        x,\n                        crv,\n                        kty\n                    }\n                };\n                if (kty === \"EC\") parameters.epk.y = y;\n                if (apu) parameters.apu = (0, _base64UrlJs.encode)(apu);\n                if (apv) parameters.apv = (0, _base64UrlJs.encode)(apv);\n                if (alg === \"ECDH-ES\") {\n                    cek = sharedSecret;\n                    break;\n                }\n                cek = providedCek || (0, _cekJsDefault.default)(enc);\n                const kwAlg = alg.slice(-6);\n                encryptedKey = await (0, _aeskwJs.wrap)(kwAlg, sharedSecret, cek);\n                break;\n            }\n        case \"RSA1_5\":\n        case \"RSA-OAEP\":\n        case \"RSA-OAEP-256\":\n        case \"RSA-OAEP-384\":\n        case \"RSA-OAEP-512\":\n            cek = providedCek || (0, _cekJsDefault.default)(enc);\n            encryptedKey = await (0, _rsaesJs.encrypt)(alg, key, cek);\n            break;\n        case \"PBES2-HS256+A128KW\":\n        case \"PBES2-HS384+A192KW\":\n        case \"PBES2-HS512+A256KW\":\n            {\n                cek = providedCek || (0, _cekJsDefault.default)(enc);\n                const { p2c, p2s } = providedParameters;\n                ({ encryptedKey, ...parameters } = await (0, _pbes2KwJs.encrypt)(alg, key, cek, p2c, p2s));\n                break;\n            }\n        case \"A128KW\":\n        case \"A192KW\":\n        case \"A256KW\":\n            cek = providedCek || (0, _cekJsDefault.default)(enc);\n            encryptedKey = await (0, _aeskwJs.wrap)(alg, key, cek);\n            break;\n        case \"A128GCMKW\":\n        case \"A192GCMKW\":\n        case \"A256GCMKW\":\n            {\n                cek = providedCek || (0, _cekJsDefault.default)(enc);\n                const { iv } = providedParameters;\n                ({ encryptedKey, ...parameters } = await (0, _aesgcmkwJs.wrap)(alg, key, cek, iv));\n                break;\n            }\n        default:\n            throw new (0, _errorsJs.JOSENotSupported)('Invalid or unsupported \"alg\" (JWE Algorithm) header value');\n    }\n    return {\n        cek,\n        encryptedKey,\n        parameters\n    };\n}\nexports.default = encryptKeyManagement;\n\n},{\"../runtime/aeskw.js\":\"2J708\",\"../runtime/ecdhes.js\":\"74mdv\",\"../runtime/pbes2kw.js\":\"43KtE\",\"../runtime/rsaes.js\":\"3mFhj\",\"../runtime/base64url.js\":\"8Djx4\",\"../lib/cek.js\":\"cA5vi\",\"../util/errors.js\":\"4fsOp\",\"../key/export.js\":\"1EYA6\",\"./check_key_type.js\":\"5ompv\",\"./aesgcmkw.js\":\"6zfNV\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"1EYA6\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nparcelHelpers.export(exports, \"exportSPKI\", ()=>exportSPKI);\nparcelHelpers.export(exports, \"exportPKCS8\", ()=>exportPKCS8);\nparcelHelpers.export(exports, \"exportJWK\", ()=>exportJWK);\nvar _asn1Js = require(\"../runtime/asn1.js\");\nvar _keyToJwkJs = require(\"../runtime/key_to_jwk.js\");\nvar _keyToJwkJsDefault = parcelHelpers.interopDefault(_keyToJwkJs);\nasync function exportSPKI(key) {\n    return (0, _asn1Js.toSPKI)(key);\n}\nasync function exportPKCS8(key) {\n    return (0, _asn1Js.toPKCS8)(key);\n}\nasync function exportJWK(key) {\n    return (0, _keyToJwkJsDefault.default)(key);\n}\n\n},{\"../runtime/asn1.js\":\"CWUVr\",\"../runtime/key_to_jwk.js\":\"hWtcO\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"hWtcO\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nvar _webcryptoJs = require(\"./webcrypto.js\");\nvar _webcryptoJsDefault = parcelHelpers.interopDefault(_webcryptoJs);\nvar _invalidKeyInputJs = require(\"../lib/invalid_key_input.js\");\nvar _invalidKeyInputJsDefault = parcelHelpers.interopDefault(_invalidKeyInputJs);\nvar _base64UrlJs = require(\"./base64url.js\");\nvar _isKeyLikeJs = require(\"./is_key_like.js\");\nconst keyToJWK = async (key)=>{\n    if (key instanceof Uint8Array) return {\n        kty: \"oct\",\n        k: (0, _base64UrlJs.encode)(key)\n    };\n    if (!(0, _webcryptoJs.isCryptoKey)(key)) throw new TypeError((0, _invalidKeyInputJsDefault.default)(key, ...(0, _isKeyLikeJs.types), \"Uint8Array\"));\n    if (!key.extractable) throw new TypeError(\"non-extractable CryptoKey cannot be exported as a JWK\");\n    const { ext, key_ops, alg, use, ...jwk } = await (0, _webcryptoJsDefault.default).subtle.exportKey(\"jwk\", key);\n    return jwk;\n};\nexports.default = keyToJWK;\n\n},{\"./webcrypto.js\":\"aUHBb\",\"../lib/invalid_key_input.js\":\"5GTGb\",\"./base64url.js\":\"8Djx4\",\"./is_key_like.js\":\"9kDjz\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"dFemI\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nparcelHelpers.export(exports, \"compactVerify\", ()=>compactVerify);\nvar _verifyJs = require(\"../flattened/verify.js\");\nvar _errorsJs = require(\"../../util/errors.js\");\nvar _bufferUtilsJs = require(\"../../lib/buffer_utils.js\");\nasync function compactVerify(jws, key, options) {\n    if (jws instanceof Uint8Array) jws = (0, _bufferUtilsJs.decoder).decode(jws);\n    if (typeof jws !== \"string\") throw new (0, _errorsJs.JWSInvalid)(\"Compact JWS must be a string or Uint8Array\");\n    const { 0: protectedHeader, 1: payload, 2: signature, length } = jws.split(\".\");\n    if (length !== 3) throw new (0, _errorsJs.JWSInvalid)(\"Invalid Compact JWS\");\n    const verified = await (0, _verifyJs.flattenedVerify)({\n        payload,\n        protected: protectedHeader,\n        signature\n    }, key, options);\n    const result = {\n        payload: verified.payload,\n        protectedHeader: verified.protectedHeader\n    };\n    if (typeof key === \"function\") return {\n        ...result,\n        key: verified.key\n    };\n    return result;\n}\n\n},{\"../flattened/verify.js\":\"2EX3K\",\"../../util/errors.js\":\"4fsOp\",\"../../lib/buffer_utils.js\":\"h0x9u\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"2EX3K\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nparcelHelpers.export(exports, \"flattenedVerify\", ()=>flattenedVerify);\nvar _base64UrlJs = require(\"../../runtime/base64url.js\");\nvar _verifyJs = require(\"../../runtime/verify.js\");\nvar _verifyJsDefault = parcelHelpers.interopDefault(_verifyJs);\nvar _errorsJs = require(\"../../util/errors.js\");\nvar _bufferUtilsJs = require(\"../../lib/buffer_utils.js\");\nvar _isDisjointJs = require(\"../../lib/is_disjoint.js\");\nvar _isDisjointJsDefault = parcelHelpers.interopDefault(_isDisjointJs);\nvar _isObjectJs = require(\"../../lib/is_object.js\");\nvar _isObjectJsDefault = parcelHelpers.interopDefault(_isObjectJs);\nvar _checkKeyTypeJs = require(\"../../lib/check_key_type.js\");\nvar _checkKeyTypeJsDefault = parcelHelpers.interopDefault(_checkKeyTypeJs);\nvar _validateCritJs = require(\"../../lib/validate_crit.js\");\nvar _validateCritJsDefault = parcelHelpers.interopDefault(_validateCritJs);\nvar _validateAlgorithmsJs = require(\"../../lib/validate_algorithms.js\");\nvar _validateAlgorithmsJsDefault = parcelHelpers.interopDefault(_validateAlgorithmsJs);\nasync function flattenedVerify(jws, key, options) {\n    var _a;\n    if (!(0, _isObjectJsDefault.default)(jws)) throw new (0, _errorsJs.JWSInvalid)(\"Flattened JWS must be an object\");\n    if (jws.protected === undefined && jws.header === undefined) throw new (0, _errorsJs.JWSInvalid)('Flattened JWS must have either of the \"protected\" or \"header\" members');\n    if (jws.protected !== undefined && typeof jws.protected !== \"string\") throw new (0, _errorsJs.JWSInvalid)(\"JWS Protected Header incorrect type\");\n    if (jws.payload === undefined) throw new (0, _errorsJs.JWSInvalid)(\"JWS Payload missing\");\n    if (typeof jws.signature !== \"string\") throw new (0, _errorsJs.JWSInvalid)(\"JWS Signature missing or incorrect type\");\n    if (jws.header !== undefined && !(0, _isObjectJsDefault.default)(jws.header)) throw new (0, _errorsJs.JWSInvalid)(\"JWS Unprotected Header incorrect type\");\n    let parsedProt = {};\n    if (jws.protected) try {\n        const protectedHeader = (0, _base64UrlJs.decode)(jws.protected);\n        parsedProt = JSON.parse((0, _bufferUtilsJs.decoder).decode(protectedHeader));\n    } catch (_b) {\n        throw new (0, _errorsJs.JWSInvalid)(\"JWS Protected Header is invalid\");\n    }\n    if (!(0, _isDisjointJsDefault.default)(parsedProt, jws.header)) throw new (0, _errorsJs.JWSInvalid)(\"JWS Protected and JWS Unprotected Header Parameter names must be disjoint\");\n    const joseHeader = {\n        ...parsedProt,\n        ...jws.header\n    };\n    const extensions = (0, _validateCritJsDefault.default)((0, _errorsJs.JWSInvalid), new Map([\n        [\n            \"b64\",\n            true\n        ]\n    ]), options === null || options === void 0 ? void 0 : options.crit, parsedProt, joseHeader);\n    let b64 = true;\n    if (extensions.has(\"b64\")) {\n        b64 = parsedProt.b64;\n        if (typeof b64 !== \"boolean\") throw new (0, _errorsJs.JWSInvalid)('The \"b64\" (base64url-encode payload) Header Parameter must be a boolean');\n    }\n    const { alg } = joseHeader;\n    if (typeof alg !== \"string\" || !alg) throw new (0, _errorsJs.JWSInvalid)('JWS \"alg\" (Algorithm) Header Parameter missing or invalid');\n    const algorithms = options && (0, _validateAlgorithmsJsDefault.default)(\"algorithms\", options.algorithms);\n    if (algorithms && !algorithms.has(alg)) throw new (0, _errorsJs.JOSEAlgNotAllowed)('\"alg\" (Algorithm) Header Parameter not allowed');\n    if (b64) {\n        if (typeof jws.payload !== \"string\") throw new (0, _errorsJs.JWSInvalid)(\"JWS Payload must be a string\");\n    } else if (typeof jws.payload !== \"string\" && !(jws.payload instanceof Uint8Array)) throw new (0, _errorsJs.JWSInvalid)(\"JWS Payload must be a string or an Uint8Array instance\");\n    let resolvedKey = false;\n    if (typeof key === \"function\") {\n        key = await key(parsedProt, jws);\n        resolvedKey = true;\n    }\n    (0, _checkKeyTypeJsDefault.default)(alg, key, \"verify\");\n    const data = (0, _bufferUtilsJs.concat)((0, _bufferUtilsJs.encoder).encode((_a = jws.protected) !== null && _a !== void 0 ? _a : \"\"), (0, _bufferUtilsJs.encoder).encode(\".\"), typeof jws.payload === \"string\" ? (0, _bufferUtilsJs.encoder).encode(jws.payload) : jws.payload);\n    let signature;\n    try {\n        signature = (0, _base64UrlJs.decode)(jws.signature);\n    } catch (_c) {\n        throw new (0, _errorsJs.JWSInvalid)(\"Failed to base64url decode the signature\");\n    }\n    const verified = await (0, _verifyJsDefault.default)(alg, key, signature, data);\n    if (!verified) throw new (0, _errorsJs.JWSSignatureVerificationFailed)();\n    let payload;\n    if (b64) try {\n        payload = (0, _base64UrlJs.decode)(jws.payload);\n    } catch (_d) {\n        throw new (0, _errorsJs.JWSInvalid)(\"Failed to base64url decode the payload\");\n    }\n    else if (typeof jws.payload === \"string\") payload = (0, _bufferUtilsJs.encoder).encode(jws.payload);\n    else payload = jws.payload;\n    const result = {\n        payload\n    };\n    if (jws.protected !== undefined) result.protectedHeader = parsedProt;\n    if (jws.header !== undefined) result.unprotectedHeader = jws.header;\n    if (resolvedKey) return {\n        ...result,\n        key\n    };\n    return result;\n}\n\n},{\"../../runtime/base64url.js\":\"8Djx4\",\"../../runtime/verify.js\":\"dznWE\",\"../../util/errors.js\":\"4fsOp\",\"../../lib/buffer_utils.js\":\"h0x9u\",\"../../lib/is_disjoint.js\":\"91YXn\",\"../../lib/is_object.js\":\"daSnu\",\"../../lib/check_key_type.js\":\"5ompv\",\"../../lib/validate_crit.js\":\"1cFtE\",\"../../lib/validate_algorithms.js\":\"fDDwK\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"dznWE\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nvar _subtleDsaJs = require(\"./subtle_dsa.js\");\nvar _subtleDsaJsDefault = parcelHelpers.interopDefault(_subtleDsaJs);\nvar _webcryptoJs = require(\"./webcrypto.js\");\nvar _webcryptoJsDefault = parcelHelpers.interopDefault(_webcryptoJs);\nvar _checkKeyLengthJs = require(\"./check_key_length.js\");\nvar _checkKeyLengthJsDefault = parcelHelpers.interopDefault(_checkKeyLengthJs);\nvar _getSignVerifyKeyJs = require(\"./get_sign_verify_key.js\");\nvar _getSignVerifyKeyJsDefault = parcelHelpers.interopDefault(_getSignVerifyKeyJs);\nconst verify = async (alg, key, signature, data)=>{\n    const cryptoKey = await (0, _getSignVerifyKeyJsDefault.default)(alg, key, \"verify\");\n    (0, _checkKeyLengthJsDefault.default)(alg, cryptoKey);\n    const algorithm = (0, _subtleDsaJsDefault.default)(alg, cryptoKey.algorithm);\n    try {\n        return await (0, _webcryptoJsDefault.default).subtle.verify(algorithm, cryptoKey, signature, data);\n    } catch (_a) {\n        return false;\n    }\n};\nexports.default = verify;\n\n},{\"./subtle_dsa.js\":\"92soc\",\"./webcrypto.js\":\"aUHBb\",\"./check_key_length.js\":\"0CfW9\",\"./get_sign_verify_key.js\":\"pIGMc\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"92soc\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nparcelHelpers.export(exports, \"default\", ()=>subtleDsa);\nvar _errorsJs = require(\"../util/errors.js\");\nfunction subtleDsa(alg, algorithm) {\n    const hash = `SHA-${alg.slice(-3)}`;\n    switch(alg){\n        case \"HS256\":\n        case \"HS384\":\n        case \"HS512\":\n            return {\n                hash,\n                name: \"HMAC\"\n            };\n        case \"PS256\":\n        case \"PS384\":\n        case \"PS512\":\n            return {\n                hash,\n                name: \"RSA-PSS\",\n                saltLength: alg.slice(-3) >> 3\n            };\n        case \"RS256\":\n        case \"RS384\":\n        case \"RS512\":\n            return {\n                hash,\n                name: \"RSASSA-PKCS1-v1_5\"\n            };\n        case \"ES256\":\n        case \"ES384\":\n        case \"ES512\":\n            return {\n                hash,\n                name: \"ECDSA\",\n                namedCurve: algorithm.namedCurve\n            };\n        case \"EdDSA\":\n            return {\n                name: algorithm.name\n            };\n        default:\n            throw new (0, _errorsJs.JOSENotSupported)(`alg ${alg} is not supported either by JOSE or your javascript runtime`);\n    }\n}\n\n},{\"../util/errors.js\":\"4fsOp\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"pIGMc\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nparcelHelpers.export(exports, \"default\", ()=>getCryptoKey);\nvar _webcryptoJs = require(\"./webcrypto.js\");\nvar _webcryptoJsDefault = parcelHelpers.interopDefault(_webcryptoJs);\nvar _cryptoKeyJs = require(\"../lib/crypto_key.js\");\nvar _invalidKeyInputJs = require(\"../lib/invalid_key_input.js\");\nvar _invalidKeyInputJsDefault = parcelHelpers.interopDefault(_invalidKeyInputJs);\nvar _isKeyLikeJs = require(\"./is_key_like.js\");\nfunction getCryptoKey(alg, key, usage) {\n    if ((0, _webcryptoJs.isCryptoKey)(key)) {\n        (0, _cryptoKeyJs.checkSigCryptoKey)(key, alg, usage);\n        return key;\n    }\n    if (key instanceof Uint8Array) {\n        if (!alg.startsWith(\"HS\")) throw new TypeError((0, _invalidKeyInputJsDefault.default)(key, ...(0, _isKeyLikeJs.types)));\n        return (0, _webcryptoJsDefault.default).subtle.importKey(\"raw\", key, {\n            hash: `SHA-${alg.slice(-3)}`,\n            name: \"HMAC\"\n        }, false, [\n            usage\n        ]);\n    }\n    throw new TypeError((0, _invalidKeyInputJsDefault.default)(key, ...(0, _isKeyLikeJs.types), \"Uint8Array\"));\n}\n\n},{\"./webcrypto.js\":\"aUHBb\",\"../lib/crypto_key.js\":\"gM0cz\",\"../lib/invalid_key_input.js\":\"5GTGb\",\"./is_key_like.js\":\"9kDjz\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"f4rEE\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nparcelHelpers.export(exports, \"generalVerify\", ()=>generalVerify);\nvar _verifyJs = require(\"../flattened/verify.js\");\nvar _errorsJs = require(\"../../util/errors.js\");\nvar _isObjectJs = require(\"../../lib/is_object.js\");\nvar _isObjectJsDefault = parcelHelpers.interopDefault(_isObjectJs);\nasync function generalVerify(jws, key, options) {\n    if (!(0, _isObjectJsDefault.default)(jws)) throw new (0, _errorsJs.JWSInvalid)(\"General JWS must be an object\");\n    if (!Array.isArray(jws.signatures) || !jws.signatures.every((0, _isObjectJsDefault.default))) throw new (0, _errorsJs.JWSInvalid)(\"JWS Signatures missing or incorrect type\");\n    for (const signature of jws.signatures)try {\n        return await (0, _verifyJs.flattenedVerify)({\n            header: signature.header,\n            payload: jws.payload,\n            protected: signature.protected,\n            signature: signature.signature\n        }, key, options);\n    } catch (_a) {}\n    throw new (0, _errorsJs.JWSSignatureVerificationFailed)();\n}\n\n},{\"../flattened/verify.js\":\"2EX3K\",\"../../util/errors.js\":\"4fsOp\",\"../../lib/is_object.js\":\"daSnu\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"9uAkr\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nparcelHelpers.export(exports, \"jwtVerify\", ()=>jwtVerify);\nvar _verifyJs = require(\"../jws/compact/verify.js\");\nvar _jwtClaimsSetJs = require(\"../lib/jwt_claims_set.js\");\nvar _jwtClaimsSetJsDefault = parcelHelpers.interopDefault(_jwtClaimsSetJs);\nvar _errorsJs = require(\"../util/errors.js\");\nasync function jwtVerify(jwt, key, options) {\n    var _a;\n    const verified = await (0, _verifyJs.compactVerify)(jwt, key, options);\n    if (((_a = verified.protectedHeader.crit) === null || _a === void 0 ? void 0 : _a.includes(\"b64\")) && verified.protectedHeader.b64 === false) throw new (0, _errorsJs.JWTInvalid)(\"JWTs MUST NOT use unencoded payload\");\n    const payload = (0, _jwtClaimsSetJsDefault.default)(verified.protectedHeader, verified.payload, options);\n    const result = {\n        payload,\n        protectedHeader: verified.protectedHeader\n    };\n    if (typeof key === \"function\") return {\n        ...result,\n        key: verified.key\n    };\n    return result;\n}\n\n},{\"../jws/compact/verify.js\":\"dFemI\",\"../lib/jwt_claims_set.js\":\"eRU3a\",\"../util/errors.js\":\"4fsOp\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"eRU3a\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nvar _errorsJs = require(\"../util/errors.js\");\nvar _bufferUtilsJs = require(\"./buffer_utils.js\");\nvar _epochJs = require(\"./epoch.js\");\nvar _epochJsDefault = parcelHelpers.interopDefault(_epochJs);\nvar _secsJs = require(\"./secs.js\");\nvar _secsJsDefault = parcelHelpers.interopDefault(_secsJs);\nvar _isObjectJs = require(\"./is_object.js\");\nvar _isObjectJsDefault = parcelHelpers.interopDefault(_isObjectJs);\nconst normalizeTyp = (value)=>value.toLowerCase().replace(/^application\\//, \"\");\nconst checkAudiencePresence = (audPayload, audOption)=>{\n    if (typeof audPayload === \"string\") return audOption.includes(audPayload);\n    if (Array.isArray(audPayload)) return audOption.some(Set.prototype.has.bind(new Set(audPayload)));\n    return false;\n};\nexports.default = (protectedHeader, encodedPayload, options = {})=>{\n    const { typ } = options;\n    if (typ && (typeof protectedHeader.typ !== \"string\" || normalizeTyp(protectedHeader.typ) !== normalizeTyp(typ))) throw new (0, _errorsJs.JWTClaimValidationFailed)('unexpected \"typ\" JWT header value', \"typ\", \"check_failed\");\n    let payload;\n    try {\n        payload = JSON.parse((0, _bufferUtilsJs.decoder).decode(encodedPayload));\n    } catch (_a) {}\n    if (!(0, _isObjectJsDefault.default)(payload)) throw new (0, _errorsJs.JWTInvalid)(\"JWT Claims Set must be a top-level JSON object\");\n    const { requiredClaims = [], issuer, subject, audience, maxTokenAge } = options;\n    if (maxTokenAge !== undefined) requiredClaims.push(\"iat\");\n    if (audience !== undefined) requiredClaims.push(\"aud\");\n    if (subject !== undefined) requiredClaims.push(\"sub\");\n    if (issuer !== undefined) requiredClaims.push(\"iss\");\n    for (const claim of new Set(requiredClaims.reverse())){\n        if (!(claim in payload)) throw new (0, _errorsJs.JWTClaimValidationFailed)(`missing required \"${claim}\" claim`, claim, \"missing\");\n    }\n    if (issuer && !(Array.isArray(issuer) ? issuer : [\n        issuer\n    ]).includes(payload.iss)) throw new (0, _errorsJs.JWTClaimValidationFailed)('unexpected \"iss\" claim value', \"iss\", \"check_failed\");\n    if (subject && payload.sub !== subject) throw new (0, _errorsJs.JWTClaimValidationFailed)('unexpected \"sub\" claim value', \"sub\", \"check_failed\");\n    if (audience && !checkAudiencePresence(payload.aud, typeof audience === \"string\" ? [\n        audience\n    ] : audience)) throw new (0, _errorsJs.JWTClaimValidationFailed)('unexpected \"aud\" claim value', \"aud\", \"check_failed\");\n    let tolerance;\n    switch(typeof options.clockTolerance){\n        case \"string\":\n            tolerance = (0, _secsJsDefault.default)(options.clockTolerance);\n            break;\n        case \"number\":\n            tolerance = options.clockTolerance;\n            break;\n        case \"undefined\":\n            tolerance = 0;\n            break;\n        default:\n            throw new TypeError(\"Invalid clockTolerance option type\");\n    }\n    const { currentDate } = options;\n    const now = (0, _epochJsDefault.default)(currentDate || new Date());\n    if ((payload.iat !== undefined || maxTokenAge) && typeof payload.iat !== \"number\") throw new (0, _errorsJs.JWTClaimValidationFailed)('\"iat\" claim must be a number', \"iat\", \"invalid\");\n    if (payload.nbf !== undefined) {\n        if (typeof payload.nbf !== \"number\") throw new (0, _errorsJs.JWTClaimValidationFailed)('\"nbf\" claim must be a number', \"nbf\", \"invalid\");\n        if (payload.nbf > now + tolerance) throw new (0, _errorsJs.JWTClaimValidationFailed)('\"nbf\" claim timestamp check failed', \"nbf\", \"check_failed\");\n    }\n    if (payload.exp !== undefined) {\n        if (typeof payload.exp !== \"number\") throw new (0, _errorsJs.JWTClaimValidationFailed)('\"exp\" claim must be a number', \"exp\", \"invalid\");\n        if (payload.exp <= now - tolerance) throw new (0, _errorsJs.JWTExpired)('\"exp\" claim timestamp check failed', \"exp\", \"check_failed\");\n    }\n    if (maxTokenAge) {\n        const age = now - payload.iat;\n        const max = typeof maxTokenAge === \"number\" ? maxTokenAge : (0, _secsJsDefault.default)(maxTokenAge);\n        if (age - tolerance > max) throw new (0, _errorsJs.JWTExpired)('\"iat\" claim timestamp check failed (too far in the past)', \"iat\", \"check_failed\");\n        if (age < 0 - tolerance) throw new (0, _errorsJs.JWTClaimValidationFailed)('\"iat\" claim timestamp check failed (it should be in the past)', \"iat\", \"check_failed\");\n    }\n    return payload;\n};\n\n},{\"../util/errors.js\":\"4fsOp\",\"./buffer_utils.js\":\"h0x9u\",\"./epoch.js\":\"htxcB\",\"./secs.js\":\"55mqE\",\"./is_object.js\":\"daSnu\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"htxcB\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nexports.default = (date)=>Math.floor(date.getTime() / 1000);\n\n},{\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"55mqE\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nconst minute = 60;\nconst hour = minute * 60;\nconst day = hour * 24;\nconst week = day * 7;\nconst year = day * 365.25;\nconst REGEX = /^(\\d+|\\d+\\.\\d+) ?(seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|weeks?|w|years?|yrs?|y)$/i;\nexports.default = (str)=>{\n    const matched = REGEX.exec(str);\n    if (!matched) throw new TypeError(\"Invalid time period format\");\n    const value = parseFloat(matched[1]);\n    const unit = matched[2].toLowerCase();\n    switch(unit){\n        case \"sec\":\n        case \"secs\":\n        case \"second\":\n        case \"seconds\":\n        case \"s\":\n            return Math.round(value);\n        case \"minute\":\n        case \"minutes\":\n        case \"min\":\n        case \"mins\":\n        case \"m\":\n            return Math.round(value * minute);\n        case \"hour\":\n        case \"hours\":\n        case \"hr\":\n        case \"hrs\":\n        case \"h\":\n            return Math.round(value * hour);\n        case \"day\":\n        case \"days\":\n        case \"d\":\n            return Math.round(value * day);\n        case \"week\":\n        case \"weeks\":\n        case \"w\":\n            return Math.round(value * week);\n        default:\n            return Math.round(value * year);\n    }\n};\n\n},{\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"lrzVM\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nparcelHelpers.export(exports, \"jwtDecrypt\", ()=>jwtDecrypt);\nvar _decryptJs = require(\"../jwe/compact/decrypt.js\");\nvar _jwtClaimsSetJs = require(\"../lib/jwt_claims_set.js\");\nvar _jwtClaimsSetJsDefault = parcelHelpers.interopDefault(_jwtClaimsSetJs);\nvar _errorsJs = require(\"../util/errors.js\");\nasync function jwtDecrypt(jwt, key, options) {\n    const decrypted = await (0, _decryptJs.compactDecrypt)(jwt, key, options);\n    const payload = (0, _jwtClaimsSetJsDefault.default)(decrypted.protectedHeader, decrypted.plaintext, options);\n    const { protectedHeader } = decrypted;\n    if (protectedHeader.iss !== undefined && protectedHeader.iss !== payload.iss) throw new (0, _errorsJs.JWTClaimValidationFailed)('replicated \"iss\" claim header parameter mismatch', \"iss\", \"mismatch\");\n    if (protectedHeader.sub !== undefined && protectedHeader.sub !== payload.sub) throw new (0, _errorsJs.JWTClaimValidationFailed)('replicated \"sub\" claim header parameter mismatch', \"sub\", \"mismatch\");\n    if (protectedHeader.aud !== undefined && JSON.stringify(protectedHeader.aud) !== JSON.stringify(payload.aud)) throw new (0, _errorsJs.JWTClaimValidationFailed)('replicated \"aud\" claim header parameter mismatch', \"aud\", \"mismatch\");\n    const result = {\n        payload,\n        protectedHeader\n    };\n    if (typeof key === \"function\") return {\n        ...result,\n        key: decrypted.key\n    };\n    return result;\n}\n\n},{\"../jwe/compact/decrypt.js\":\"e85ol\",\"../lib/jwt_claims_set.js\":\"eRU3a\",\"../util/errors.js\":\"4fsOp\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"2Mv4N\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nparcelHelpers.export(exports, \"CompactEncrypt\", ()=>CompactEncrypt);\nvar _encryptJs = require(\"../flattened/encrypt.js\");\nclass CompactEncrypt {\n    constructor(plaintext){\n        this._flattened = new (0, _encryptJs.FlattenedEncrypt)(plaintext);\n    }\n    setContentEncryptionKey(cek) {\n        this._flattened.setContentEncryptionKey(cek);\n        return this;\n    }\n    setInitializationVector(iv) {\n        this._flattened.setInitializationVector(iv);\n        return this;\n    }\n    setProtectedHeader(protectedHeader) {\n        this._flattened.setProtectedHeader(protectedHeader);\n        return this;\n    }\n    setKeyManagementParameters(parameters) {\n        this._flattened.setKeyManagementParameters(parameters);\n        return this;\n    }\n    async encrypt(key, options) {\n        const jwe = await this._flattened.encrypt(key, options);\n        return [\n            jwe.protected,\n            jwe.encrypted_key,\n            jwe.iv,\n            jwe.ciphertext,\n            jwe.tag\n        ].join(\".\");\n    }\n}\n\n},{\"../flattened/encrypt.js\":\"gNmwl\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"4n4CU\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nparcelHelpers.export(exports, \"CompactSign\", ()=>CompactSign);\nvar _signJs = require(\"../flattened/sign.js\");\nclass CompactSign {\n    constructor(payload){\n        this._flattened = new (0, _signJs.FlattenedSign)(payload);\n    }\n    setProtectedHeader(protectedHeader) {\n        this._flattened.setProtectedHeader(protectedHeader);\n        return this;\n    }\n    async sign(key, options) {\n        const jws = await this._flattened.sign(key, options);\n        if (jws.payload === undefined) throw new TypeError(\"use the flattened module for creating JWS with b64: false\");\n        return `${jws.protected}.${jws.payload}.${jws.signature}`;\n    }\n}\n\n},{\"../flattened/sign.js\":\"lqvdz\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"lqvdz\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nparcelHelpers.export(exports, \"FlattenedSign\", ()=>FlattenedSign);\nvar _base64UrlJs = require(\"../../runtime/base64url.js\");\nvar _signJs = require(\"../../runtime/sign.js\");\nvar _signJsDefault = parcelHelpers.interopDefault(_signJs);\nvar _isDisjointJs = require(\"../../lib/is_disjoint.js\");\nvar _isDisjointJsDefault = parcelHelpers.interopDefault(_isDisjointJs);\nvar _errorsJs = require(\"../../util/errors.js\");\nvar _bufferUtilsJs = require(\"../../lib/buffer_utils.js\");\nvar _checkKeyTypeJs = require(\"../../lib/check_key_type.js\");\nvar _checkKeyTypeJsDefault = parcelHelpers.interopDefault(_checkKeyTypeJs);\nvar _validateCritJs = require(\"../../lib/validate_crit.js\");\nvar _validateCritJsDefault = parcelHelpers.interopDefault(_validateCritJs);\nclass FlattenedSign {\n    constructor(payload){\n        if (!(payload instanceof Uint8Array)) throw new TypeError(\"payload must be an instance of Uint8Array\");\n        this._payload = payload;\n    }\n    setProtectedHeader(protectedHeader) {\n        if (this._protectedHeader) throw new TypeError(\"setProtectedHeader can only be called once\");\n        this._protectedHeader = protectedHeader;\n        return this;\n    }\n    setUnprotectedHeader(unprotectedHeader) {\n        if (this._unprotectedHeader) throw new TypeError(\"setUnprotectedHeader can only be called once\");\n        this._unprotectedHeader = unprotectedHeader;\n        return this;\n    }\n    async sign(key, options) {\n        if (!this._protectedHeader && !this._unprotectedHeader) throw new (0, _errorsJs.JWSInvalid)(\"either setProtectedHeader or setUnprotectedHeader must be called before #sign()\");\n        if (!(0, _isDisjointJsDefault.default)(this._protectedHeader, this._unprotectedHeader)) throw new (0, _errorsJs.JWSInvalid)(\"JWS Protected and JWS Unprotected Header Parameter names must be disjoint\");\n        const joseHeader = {\n            ...this._protectedHeader,\n            ...this._unprotectedHeader\n        };\n        const extensions = (0, _validateCritJsDefault.default)((0, _errorsJs.JWSInvalid), new Map([\n            [\n                \"b64\",\n                true\n            ]\n        ]), options === null || options === void 0 ? void 0 : options.crit, this._protectedHeader, joseHeader);\n        let b64 = true;\n        if (extensions.has(\"b64\")) {\n            b64 = this._protectedHeader.b64;\n            if (typeof b64 !== \"boolean\") throw new (0, _errorsJs.JWSInvalid)('The \"b64\" (base64url-encode payload) Header Parameter must be a boolean');\n        }\n        const { alg } = joseHeader;\n        if (typeof alg !== \"string\" || !alg) throw new (0, _errorsJs.JWSInvalid)('JWS \"alg\" (Algorithm) Header Parameter missing or invalid');\n        (0, _checkKeyTypeJsDefault.default)(alg, key, \"sign\");\n        let payload = this._payload;\n        if (b64) payload = (0, _bufferUtilsJs.encoder).encode((0, _base64UrlJs.encode)(payload));\n        let protectedHeader;\n        if (this._protectedHeader) protectedHeader = (0, _bufferUtilsJs.encoder).encode((0, _base64UrlJs.encode)(JSON.stringify(this._protectedHeader)));\n        else protectedHeader = (0, _bufferUtilsJs.encoder).encode(\"\");\n        const data = (0, _bufferUtilsJs.concat)(protectedHeader, (0, _bufferUtilsJs.encoder).encode(\".\"), payload);\n        const signature = await (0, _signJsDefault.default)(alg, key, data);\n        const jws = {\n            signature: (0, _base64UrlJs.encode)(signature),\n            payload: \"\"\n        };\n        if (b64) jws.payload = (0, _bufferUtilsJs.decoder).decode(payload);\n        if (this._unprotectedHeader) jws.header = this._unprotectedHeader;\n        if (this._protectedHeader) jws.protected = (0, _bufferUtilsJs.decoder).decode(protectedHeader);\n        return jws;\n    }\n}\n\n},{\"../../runtime/base64url.js\":\"8Djx4\",\"../../runtime/sign.js\":\"3bvVs\",\"../../lib/is_disjoint.js\":\"91YXn\",\"../../util/errors.js\":\"4fsOp\",\"../../lib/buffer_utils.js\":\"h0x9u\",\"../../lib/check_key_type.js\":\"5ompv\",\"../../lib/validate_crit.js\":\"1cFtE\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"3bvVs\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nvar _subtleDsaJs = require(\"./subtle_dsa.js\");\nvar _subtleDsaJsDefault = parcelHelpers.interopDefault(_subtleDsaJs);\nvar _webcryptoJs = require(\"./webcrypto.js\");\nvar _webcryptoJsDefault = parcelHelpers.interopDefault(_webcryptoJs);\nvar _checkKeyLengthJs = require(\"./check_key_length.js\");\nvar _checkKeyLengthJsDefault = parcelHelpers.interopDefault(_checkKeyLengthJs);\nvar _getSignVerifyKeyJs = require(\"./get_sign_verify_key.js\");\nvar _getSignVerifyKeyJsDefault = parcelHelpers.interopDefault(_getSignVerifyKeyJs);\nconst sign = async (alg, key, data)=>{\n    const cryptoKey = await (0, _getSignVerifyKeyJsDefault.default)(alg, key, \"sign\");\n    (0, _checkKeyLengthJsDefault.default)(alg, cryptoKey);\n    const signature = await (0, _webcryptoJsDefault.default).subtle.sign((0, _subtleDsaJsDefault.default)(alg, cryptoKey.algorithm), cryptoKey, data);\n    return new Uint8Array(signature);\n};\nexports.default = sign;\n\n},{\"./subtle_dsa.js\":\"92soc\",\"./webcrypto.js\":\"aUHBb\",\"./check_key_length.js\":\"0CfW9\",\"./get_sign_verify_key.js\":\"pIGMc\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"chvqI\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nparcelHelpers.export(exports, \"GeneralSign\", ()=>GeneralSign);\nvar _signJs = require(\"../flattened/sign.js\");\nvar _errorsJs = require(\"../../util/errors.js\");\nclass IndividualSignature {\n    constructor(sig, key, options){\n        this.parent = sig;\n        this.key = key;\n        this.options = options;\n    }\n    setProtectedHeader(protectedHeader) {\n        if (this.protectedHeader) throw new TypeError(\"setProtectedHeader can only be called once\");\n        this.protectedHeader = protectedHeader;\n        return this;\n    }\n    setUnprotectedHeader(unprotectedHeader) {\n        if (this.unprotectedHeader) throw new TypeError(\"setUnprotectedHeader can only be called once\");\n        this.unprotectedHeader = unprotectedHeader;\n        return this;\n    }\n    addSignature(...args) {\n        return this.parent.addSignature(...args);\n    }\n    sign(...args) {\n        return this.parent.sign(...args);\n    }\n    done() {\n        return this.parent;\n    }\n}\nclass GeneralSign {\n    constructor(payload){\n        this._signatures = [];\n        this._payload = payload;\n    }\n    addSignature(key, options) {\n        const signature = new IndividualSignature(this, key, options);\n        this._signatures.push(signature);\n        return signature;\n    }\n    async sign() {\n        if (!this._signatures.length) throw new (0, _errorsJs.JWSInvalid)(\"at least one signature must be added\");\n        const jws = {\n            signatures: [],\n            payload: \"\"\n        };\n        for(let i = 0; i < this._signatures.length; i++){\n            const signature = this._signatures[i];\n            const flattened = new (0, _signJs.FlattenedSign)(this._payload);\n            flattened.setProtectedHeader(signature.protectedHeader);\n            flattened.setUnprotectedHeader(signature.unprotectedHeader);\n            const { payload, ...rest } = await flattened.sign(signature.key, signature.options);\n            if (i === 0) jws.payload = payload;\n            else if (jws.payload !== payload) throw new (0, _errorsJs.JWSInvalid)(\"inconsistent use of JWS Unencoded Payload (RFC7797)\");\n            jws.signatures.push(rest);\n        }\n        return jws;\n    }\n}\n\n},{\"../flattened/sign.js\":\"lqvdz\",\"../../util/errors.js\":\"4fsOp\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"ix6nL\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nparcelHelpers.export(exports, \"SignJWT\", ()=>SignJWT);\nvar _signJs = require(\"../jws/compact/sign.js\");\nvar _errorsJs = require(\"../util/errors.js\");\nvar _bufferUtilsJs = require(\"../lib/buffer_utils.js\");\nvar _produceJs = require(\"./produce.js\");\nclass SignJWT extends (0, _produceJs.ProduceJWT) {\n    setProtectedHeader(protectedHeader) {\n        this._protectedHeader = protectedHeader;\n        return this;\n    }\n    async sign(key, options) {\n        var _a;\n        const sig = new (0, _signJs.CompactSign)((0, _bufferUtilsJs.encoder).encode(JSON.stringify(this._payload)));\n        sig.setProtectedHeader(this._protectedHeader);\n        if (Array.isArray((_a = this._protectedHeader) === null || _a === void 0 ? void 0 : _a.crit) && this._protectedHeader.crit.includes(\"b64\") && this._protectedHeader.b64 === false) throw new (0, _errorsJs.JWTInvalid)(\"JWTs MUST NOT use unencoded payload\");\n        return sig.sign(key, options);\n    }\n}\n\n},{\"../jws/compact/sign.js\":\"4n4CU\",\"../util/errors.js\":\"4fsOp\",\"../lib/buffer_utils.js\":\"h0x9u\",\"./produce.js\":\"9X7QN\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"9X7QN\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nparcelHelpers.export(exports, \"ProduceJWT\", ()=>ProduceJWT);\nvar _epochJs = require(\"../lib/epoch.js\");\nvar _epochJsDefault = parcelHelpers.interopDefault(_epochJs);\nvar _isObjectJs = require(\"../lib/is_object.js\");\nvar _isObjectJsDefault = parcelHelpers.interopDefault(_isObjectJs);\nvar _secsJs = require(\"../lib/secs.js\");\nvar _secsJsDefault = parcelHelpers.interopDefault(_secsJs);\nclass ProduceJWT {\n    constructor(payload){\n        if (!(0, _isObjectJsDefault.default)(payload)) throw new TypeError(\"JWT Claims Set MUST be an object\");\n        this._payload = payload;\n    }\n    setIssuer(issuer) {\n        this._payload = {\n            ...this._payload,\n            iss: issuer\n        };\n        return this;\n    }\n    setSubject(subject) {\n        this._payload = {\n            ...this._payload,\n            sub: subject\n        };\n        return this;\n    }\n    setAudience(audience) {\n        this._payload = {\n            ...this._payload,\n            aud: audience\n        };\n        return this;\n    }\n    setJti(jwtId) {\n        this._payload = {\n            ...this._payload,\n            jti: jwtId\n        };\n        return this;\n    }\n    setNotBefore(input) {\n        if (typeof input === \"number\") this._payload = {\n            ...this._payload,\n            nbf: input\n        };\n        else this._payload = {\n            ...this._payload,\n            nbf: (0, _epochJsDefault.default)(new Date()) + (0, _secsJsDefault.default)(input)\n        };\n        return this;\n    }\n    setExpirationTime(input) {\n        if (typeof input === \"number\") this._payload = {\n            ...this._payload,\n            exp: input\n        };\n        else this._payload = {\n            ...this._payload,\n            exp: (0, _epochJsDefault.default)(new Date()) + (0, _secsJsDefault.default)(input)\n        };\n        return this;\n    }\n    setIssuedAt(input) {\n        if (typeof input === \"undefined\") this._payload = {\n            ...this._payload,\n            iat: (0, _epochJsDefault.default)(new Date())\n        };\n        else this._payload = {\n            ...this._payload,\n            iat: input\n        };\n        return this;\n    }\n}\n\n},{\"../lib/epoch.js\":\"htxcB\",\"../lib/is_object.js\":\"daSnu\",\"../lib/secs.js\":\"55mqE\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"0M0j5\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nparcelHelpers.export(exports, \"EncryptJWT\", ()=>EncryptJWT);\nvar _encryptJs = require(\"../jwe/compact/encrypt.js\");\nvar _bufferUtilsJs = require(\"../lib/buffer_utils.js\");\nvar _produceJs = require(\"./produce.js\");\nclass EncryptJWT extends (0, _produceJs.ProduceJWT) {\n    setProtectedHeader(protectedHeader) {\n        if (this._protectedHeader) throw new TypeError(\"setProtectedHeader can only be called once\");\n        this._protectedHeader = protectedHeader;\n        return this;\n    }\n    setKeyManagementParameters(parameters) {\n        if (this._keyManagementParameters) throw new TypeError(\"setKeyManagementParameters can only be called once\");\n        this._keyManagementParameters = parameters;\n        return this;\n    }\n    setContentEncryptionKey(cek) {\n        if (this._cek) throw new TypeError(\"setContentEncryptionKey can only be called once\");\n        this._cek = cek;\n        return this;\n    }\n    setInitializationVector(iv) {\n        if (this._iv) throw new TypeError(\"setInitializationVector can only be called once\");\n        this._iv = iv;\n        return this;\n    }\n    replicateIssuerAsHeader() {\n        this._replicateIssuerAsHeader = true;\n        return this;\n    }\n    replicateSubjectAsHeader() {\n        this._replicateSubjectAsHeader = true;\n        return this;\n    }\n    replicateAudienceAsHeader() {\n        this._replicateAudienceAsHeader = true;\n        return this;\n    }\n    async encrypt(key, options) {\n        const enc = new (0, _encryptJs.CompactEncrypt)((0, _bufferUtilsJs.encoder).encode(JSON.stringify(this._payload)));\n        if (this._replicateIssuerAsHeader) this._protectedHeader = {\n            ...this._protectedHeader,\n            iss: this._payload.iss\n        };\n        if (this._replicateSubjectAsHeader) this._protectedHeader = {\n            ...this._protectedHeader,\n            sub: this._payload.sub\n        };\n        if (this._replicateAudienceAsHeader) this._protectedHeader = {\n            ...this._protectedHeader,\n            aud: this._payload.aud\n        };\n        enc.setProtectedHeader(this._protectedHeader);\n        if (this._iv) enc.setInitializationVector(this._iv);\n        if (this._cek) enc.setContentEncryptionKey(this._cek);\n        if (this._keyManagementParameters) enc.setKeyManagementParameters(this._keyManagementParameters);\n        return enc.encrypt(key, options);\n    }\n}\n\n},{\"../jwe/compact/encrypt.js\":\"2Mv4N\",\"../lib/buffer_utils.js\":\"h0x9u\",\"./produce.js\":\"9X7QN\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"dM89g\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nparcelHelpers.export(exports, \"calculateJwkThumbprint\", ()=>calculateJwkThumbprint);\nparcelHelpers.export(exports, \"calculateJwkThumbprintUri\", ()=>calculateJwkThumbprintUri);\nvar _digestJs = require(\"../runtime/digest.js\");\nvar _digestJsDefault = parcelHelpers.interopDefault(_digestJs);\nvar _base64UrlJs = require(\"../runtime/base64url.js\");\nvar _errorsJs = require(\"../util/errors.js\");\nvar _bufferUtilsJs = require(\"../lib/buffer_utils.js\");\nvar _isObjectJs = require(\"../lib/is_object.js\");\nvar _isObjectJsDefault = parcelHelpers.interopDefault(_isObjectJs);\nconst check = (value, description)=>{\n    if (typeof value !== \"string\" || !value) throw new (0, _errorsJs.JWKInvalid)(`${description} missing or invalid`);\n};\nasync function calculateJwkThumbprint(jwk, digestAlgorithm) {\n    if (!(0, _isObjectJsDefault.default)(jwk)) throw new TypeError(\"JWK must be an object\");\n    digestAlgorithm !== null && digestAlgorithm !== void 0 ? digestAlgorithm : digestAlgorithm = \"sha256\";\n    if (digestAlgorithm !== \"sha256\" && digestAlgorithm !== \"sha384\" && digestAlgorithm !== \"sha512\") throw new TypeError('digestAlgorithm must one of \"sha256\", \"sha384\", or \"sha512\"');\n    let components;\n    switch(jwk.kty){\n        case \"EC\":\n            check(jwk.crv, '\"crv\" (Curve) Parameter');\n            check(jwk.x, '\"x\" (X Coordinate) Parameter');\n            check(jwk.y, '\"y\" (Y Coordinate) Parameter');\n            components = {\n                crv: jwk.crv,\n                kty: jwk.kty,\n                x: jwk.x,\n                y: jwk.y\n            };\n            break;\n        case \"OKP\":\n            check(jwk.crv, '\"crv\" (Subtype of Key Pair) Parameter');\n            check(jwk.x, '\"x\" (Public Key) Parameter');\n            components = {\n                crv: jwk.crv,\n                kty: jwk.kty,\n                x: jwk.x\n            };\n            break;\n        case \"RSA\":\n            check(jwk.e, '\"e\" (Exponent) Parameter');\n            check(jwk.n, '\"n\" (Modulus) Parameter');\n            components = {\n                e: jwk.e,\n                kty: jwk.kty,\n                n: jwk.n\n            };\n            break;\n        case \"oct\":\n            check(jwk.k, '\"k\" (Key Value) Parameter');\n            components = {\n                k: jwk.k,\n                kty: jwk.kty\n            };\n            break;\n        default:\n            throw new (0, _errorsJs.JOSENotSupported)('\"kty\" (Key Type) Parameter missing or unsupported');\n    }\n    const data = (0, _bufferUtilsJs.encoder).encode(JSON.stringify(components));\n    return (0, _base64UrlJs.encode)(await (0, _digestJsDefault.default)(digestAlgorithm, data));\n}\nasync function calculateJwkThumbprintUri(jwk, digestAlgorithm) {\n    digestAlgorithm !== null && digestAlgorithm !== void 0 ? digestAlgorithm : digestAlgorithm = \"sha256\";\n    const thumbprint = await calculateJwkThumbprint(jwk, digestAlgorithm);\n    return `urn:ietf:params:oauth:jwk-thumbprint:sha-${digestAlgorithm.slice(-3)}:${thumbprint}`;\n}\n\n},{\"../runtime/digest.js\":\"hdTL7\",\"../runtime/base64url.js\":\"8Djx4\",\"../util/errors.js\":\"4fsOp\",\"../lib/buffer_utils.js\":\"h0x9u\",\"../lib/is_object.js\":\"daSnu\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"kUHEj\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nparcelHelpers.export(exports, \"EmbeddedJWK\", ()=>EmbeddedJWK);\nvar _importJs = require(\"../key/import.js\");\nvar _isObjectJs = require(\"../lib/is_object.js\");\nvar _isObjectJsDefault = parcelHelpers.interopDefault(_isObjectJs);\nvar _errorsJs = require(\"../util/errors.js\");\nasync function EmbeddedJWK(protectedHeader, token) {\n    const joseHeader = {\n        ...protectedHeader,\n        ...token === null || token === void 0 ? void 0 : token.header\n    };\n    if (!(0, _isObjectJsDefault.default)(joseHeader.jwk)) throw new (0, _errorsJs.JWSInvalid)('\"jwk\" (JSON Web Key) Header Parameter must be a JSON object');\n    const key = await (0, _importJs.importJWK)({\n        ...joseHeader.jwk,\n        ext: true\n    }, joseHeader.alg, true);\n    if (key instanceof Uint8Array || key.type !== \"public\") throw new (0, _errorsJs.JWSInvalid)('\"jwk\" (JSON Web Key) Header Parameter must be a public key');\n    return key;\n}\n\n},{\"../key/import.js\":\"661YL\",\"../lib/is_object.js\":\"daSnu\",\"../util/errors.js\":\"4fsOp\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"gZQHZ\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nparcelHelpers.export(exports, \"isJWKSLike\", ()=>isJWKSLike);\nparcelHelpers.export(exports, \"LocalJWKSet\", ()=>LocalJWKSet);\nparcelHelpers.export(exports, \"createLocalJWKSet\", ()=>createLocalJWKSet);\nvar _importJs = require(\"../key/import.js\");\nvar _errorsJs = require(\"../util/errors.js\");\nvar _isObjectJs = require(\"../lib/is_object.js\");\nvar _isObjectJsDefault = parcelHelpers.interopDefault(_isObjectJs);\nfunction getKtyFromAlg(alg) {\n    switch(typeof alg === \"string\" && alg.slice(0, 2)){\n        case \"RS\":\n        case \"PS\":\n            return \"RSA\";\n        case \"ES\":\n            return \"EC\";\n        case \"Ed\":\n            return \"OKP\";\n        default:\n            throw new (0, _errorsJs.JOSENotSupported)('Unsupported \"alg\" value for a JSON Web Key Set');\n    }\n}\nfunction isJWKSLike(jwks) {\n    return jwks && typeof jwks === \"object\" && Array.isArray(jwks.keys) && jwks.keys.every(isJWKLike);\n}\nfunction isJWKLike(key) {\n    return (0, _isObjectJsDefault.default)(key);\n}\nfunction clone(obj) {\n    if (typeof structuredClone === \"function\") return structuredClone(obj);\n    return JSON.parse(JSON.stringify(obj));\n}\nclass LocalJWKSet {\n    constructor(jwks){\n        this._cached = new WeakMap();\n        if (!isJWKSLike(jwks)) throw new (0, _errorsJs.JWKSInvalid)(\"JSON Web Key Set malformed\");\n        this._jwks = clone(jwks);\n    }\n    async getKey(protectedHeader, token) {\n        const { alg, kid } = {\n            ...protectedHeader,\n            ...token === null || token === void 0 ? void 0 : token.header\n        };\n        const kty = getKtyFromAlg(alg);\n        const candidates = this._jwks.keys.filter((jwk)=>{\n            let candidate = kty === jwk.kty;\n            if (candidate && typeof kid === \"string\") candidate = kid === jwk.kid;\n            if (candidate && typeof jwk.alg === \"string\") candidate = alg === jwk.alg;\n            if (candidate && typeof jwk.use === \"string\") candidate = jwk.use === \"sig\";\n            if (candidate && Array.isArray(jwk.key_ops)) candidate = jwk.key_ops.includes(\"verify\");\n            if (candidate && alg === \"EdDSA\") candidate = jwk.crv === \"Ed25519\" || jwk.crv === \"Ed448\";\n            if (candidate) switch(alg){\n                case \"ES256\":\n                    candidate = jwk.crv === \"P-256\";\n                    break;\n                case \"ES256K\":\n                    candidate = jwk.crv === \"secp256k1\";\n                    break;\n                case \"ES384\":\n                    candidate = jwk.crv === \"P-384\";\n                    break;\n                case \"ES512\":\n                    candidate = jwk.crv === \"P-521\";\n                    break;\n            }\n            return candidate;\n        });\n        const { 0: jwk, length } = candidates;\n        if (length === 0) throw new (0, _errorsJs.JWKSNoMatchingKey)();\n        else if (length !== 1) {\n            const error = new (0, _errorsJs.JWKSMultipleMatchingKeys)();\n            const { _cached } = this;\n            error[Symbol.asyncIterator] = async function*() {\n                for (const jwk of candidates)try {\n                    yield await importWithAlgCache(_cached, jwk, alg);\n                } catch (_a) {\n                    continue;\n                }\n            };\n            throw error;\n        }\n        return importWithAlgCache(this._cached, jwk, alg);\n    }\n}\nasync function importWithAlgCache(cache, jwk, alg) {\n    const cached = cache.get(jwk) || cache.set(jwk, {}).get(jwk);\n    if (cached[alg] === undefined) {\n        const key = await (0, _importJs.importJWK)({\n            ...jwk,\n            ext: true\n        }, alg);\n        if (key instanceof Uint8Array || key.type !== \"public\") throw new (0, _errorsJs.JWKSInvalid)(\"JSON Web Key Set members must be public keys\");\n        cached[alg] = key;\n    }\n    return cached[alg];\n}\nfunction createLocalJWKSet(jwks) {\n    const set = new LocalJWKSet(jwks);\n    return async function(protectedHeader, token) {\n        return set.getKey(protectedHeader, token);\n    };\n}\n\n},{\"../key/import.js\":\"661YL\",\"../util/errors.js\":\"4fsOp\",\"../lib/is_object.js\":\"daSnu\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"gn9Cj\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nparcelHelpers.export(exports, \"createRemoteJWKSet\", ()=>createRemoteJWKSet);\nvar _fetchJwksJs = require(\"../runtime/fetch_jwks.js\");\nvar _fetchJwksJsDefault = parcelHelpers.interopDefault(_fetchJwksJs);\nvar _errorsJs = require(\"../util/errors.js\");\nvar _localJs = require(\"./local.js\");\nfunction isCloudflareWorkers() {\n    return typeof WebSocketPair !== \"undefined\" || typeof navigator !== \"undefined\" && navigator.userAgent === \"Cloudflare-Workers\" || typeof EdgeRuntime !== \"undefined\" && EdgeRuntime === \"vercel\";\n}\nclass RemoteJWKSet extends (0, _localJs.LocalJWKSet) {\n    constructor(url, options){\n        super({\n            keys: []\n        });\n        this._jwks = undefined;\n        if (!(url instanceof URL)) throw new TypeError(\"url must be an instance of URL\");\n        this._url = new URL(url.href);\n        this._options = {\n            agent: options === null || options === void 0 ? void 0 : options.agent,\n            headers: options === null || options === void 0 ? void 0 : options.headers\n        };\n        this._timeoutDuration = typeof (options === null || options === void 0 ? void 0 : options.timeoutDuration) === \"number\" ? options === null || options === void 0 ? void 0 : options.timeoutDuration : 5000;\n        this._cooldownDuration = typeof (options === null || options === void 0 ? void 0 : options.cooldownDuration) === \"number\" ? options === null || options === void 0 ? void 0 : options.cooldownDuration : 30000;\n        this._cacheMaxAge = typeof (options === null || options === void 0 ? void 0 : options.cacheMaxAge) === \"number\" ? options === null || options === void 0 ? void 0 : options.cacheMaxAge : 600000;\n    }\n    coolingDown() {\n        return typeof this._jwksTimestamp === \"number\" ? Date.now() < this._jwksTimestamp + this._cooldownDuration : false;\n    }\n    fresh() {\n        return typeof this._jwksTimestamp === \"number\" ? Date.now() < this._jwksTimestamp + this._cacheMaxAge : false;\n    }\n    async getKey(protectedHeader, token) {\n        if (!this._jwks || !this.fresh()) await this.reload();\n        try {\n            return await super.getKey(protectedHeader, token);\n        } catch (err) {\n            if (err instanceof (0, _errorsJs.JWKSNoMatchingKey)) {\n                if (this.coolingDown() === false) {\n                    await this.reload();\n                    return super.getKey(protectedHeader, token);\n                }\n            }\n            throw err;\n        }\n    }\n    async reload() {\n        if (this._pendingFetch && isCloudflareWorkers()) this._pendingFetch = undefined;\n        this._pendingFetch || (this._pendingFetch = (0, _fetchJwksJsDefault.default)(this._url, this._timeoutDuration, this._options).then((json)=>{\n            if (!(0, _localJs.isJWKSLike)(json)) throw new (0, _errorsJs.JWKSInvalid)(\"JSON Web Key Set malformed\");\n            this._jwks = {\n                keys: json.keys\n            };\n            this._jwksTimestamp = Date.now();\n            this._pendingFetch = undefined;\n        }).catch((err)=>{\n            this._pendingFetch = undefined;\n            throw err;\n        }));\n        await this._pendingFetch;\n    }\n}\nfunction createRemoteJWKSet(url, options) {\n    const set = new RemoteJWKSet(url, options);\n    return async function(protectedHeader, token) {\n        return set.getKey(protectedHeader, token);\n    };\n}\n\n},{\"../runtime/fetch_jwks.js\":\"ev1hB\",\"../util/errors.js\":\"4fsOp\",\"./local.js\":\"gZQHZ\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"ev1hB\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nvar _errorsJs = require(\"../util/errors.js\");\nconst fetchJwks = async (url, timeout, options)=>{\n    let controller;\n    let id;\n    let timedOut = false;\n    if (typeof AbortController === \"function\") {\n        controller = new AbortController();\n        id = setTimeout(()=>{\n            timedOut = true;\n            controller.abort();\n        }, timeout);\n    }\n    const response = await fetch(url.href, {\n        signal: controller ? controller.signal : undefined,\n        redirect: \"manual\",\n        headers: options.headers\n    }).catch((err)=>{\n        if (timedOut) throw new (0, _errorsJs.JWKSTimeout)();\n        throw err;\n    });\n    if (id !== undefined) clearTimeout(id);\n    if (response.status !== 200) throw new (0, _errorsJs.JOSEError)(\"Expected 200 OK from the JSON Web Key Set HTTP response\");\n    try {\n        return await response.json();\n    } catch (_a) {\n        throw new (0, _errorsJs.JOSEError)(\"Failed to parse the JSON Web Key Set HTTP response as JSON\");\n    }\n};\nexports.default = fetchJwks;\n\n},{\"../util/errors.js\":\"4fsOp\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"8DlpU\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nparcelHelpers.export(exports, \"UnsecuredJWT\", ()=>UnsecuredJWT);\nvar _base64UrlJs = require(\"../runtime/base64url.js\");\nvar _bufferUtilsJs = require(\"../lib/buffer_utils.js\");\nvar _errorsJs = require(\"../util/errors.js\");\nvar _jwtClaimsSetJs = require(\"../lib/jwt_claims_set.js\");\nvar _jwtClaimsSetJsDefault = parcelHelpers.interopDefault(_jwtClaimsSetJs);\nvar _produceJs = require(\"./produce.js\");\nclass UnsecuredJWT extends (0, _produceJs.ProduceJWT) {\n    encode() {\n        const header = _base64UrlJs.encode(JSON.stringify({\n            alg: \"none\"\n        }));\n        const payload = _base64UrlJs.encode(JSON.stringify(this._payload));\n        return `${header}.${payload}.`;\n    }\n    static decode(jwt, options) {\n        if (typeof jwt !== \"string\") throw new (0, _errorsJs.JWTInvalid)(\"Unsecured JWT must be a string\");\n        const { 0: encodedHeader, 1: encodedPayload, 2: signature, length } = jwt.split(\".\");\n        if (length !== 3 || signature !== \"\") throw new (0, _errorsJs.JWTInvalid)(\"Invalid Unsecured JWT\");\n        let header;\n        try {\n            header = JSON.parse((0, _bufferUtilsJs.decoder).decode(_base64UrlJs.decode(encodedHeader)));\n            if (header.alg !== \"none\") throw new Error();\n        } catch (_a) {\n            throw new (0, _errorsJs.JWTInvalid)(\"Invalid Unsecured JWT\");\n        }\n        const payload = (0, _jwtClaimsSetJsDefault.default)(header, _base64UrlJs.decode(encodedPayload), options);\n        return {\n            payload,\n            header\n        };\n    }\n}\n\n},{\"../runtime/base64url.js\":\"8Djx4\",\"../lib/buffer_utils.js\":\"h0x9u\",\"../util/errors.js\":\"4fsOp\",\"../lib/jwt_claims_set.js\":\"eRU3a\",\"./produce.js\":\"9X7QN\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"kBsUQ\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nparcelHelpers.export(exports, \"decodeProtectedHeader\", ()=>decodeProtectedHeader);\nvar _base64UrlJs = require(\"./base64url.js\");\nvar _bufferUtilsJs = require(\"../lib/buffer_utils.js\");\nvar _isObjectJs = require(\"../lib/is_object.js\");\nvar _isObjectJsDefault = parcelHelpers.interopDefault(_isObjectJs);\nfunction decodeProtectedHeader(token) {\n    let protectedB64u;\n    if (typeof token === \"string\") {\n        const parts = token.split(\".\");\n        if (parts.length === 3 || parts.length === 5) [protectedB64u] = parts;\n    } else if (typeof token === \"object\" && token) {\n        if (\"protected\" in token) protectedB64u = token.protected;\n        else throw new TypeError(\"Token does not contain a Protected Header\");\n    }\n    try {\n        if (typeof protectedB64u !== \"string\" || !protectedB64u) throw new Error();\n        const result = JSON.parse((0, _bufferUtilsJs.decoder).decode((0, _base64UrlJs.decode)(protectedB64u)));\n        if (!(0, _isObjectJsDefault.default)(result)) throw new Error();\n        return result;\n    } catch (_a) {\n        throw new TypeError(\"Invalid Token or Protected Header formatting\");\n    }\n}\n\n},{\"./base64url.js\":\"bljA2\",\"../lib/buffer_utils.js\":\"h0x9u\",\"../lib/is_object.js\":\"daSnu\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"bljA2\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nparcelHelpers.export(exports, \"encode\", ()=>encode);\nparcelHelpers.export(exports, \"decode\", ()=>decode);\nvar _base64UrlJs = require(\"../runtime/base64url.js\");\nconst encode = _base64UrlJs.encode;\nconst decode = _base64UrlJs.decode;\n\n},{\"../runtime/base64url.js\":\"8Djx4\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"aGTXa\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nparcelHelpers.export(exports, \"decodeJwt\", ()=>decodeJwt);\nvar _base64UrlJs = require(\"./base64url.js\");\nvar _bufferUtilsJs = require(\"../lib/buffer_utils.js\");\nvar _isObjectJs = require(\"../lib/is_object.js\");\nvar _isObjectJsDefault = parcelHelpers.interopDefault(_isObjectJs);\nvar _errorsJs = require(\"./errors.js\");\nfunction decodeJwt(jwt) {\n    if (typeof jwt !== \"string\") throw new (0, _errorsJs.JWTInvalid)(\"JWTs must use Compact JWS serialization, JWT must be a string\");\n    const { 1: payload, length } = jwt.split(\".\");\n    if (length === 5) throw new (0, _errorsJs.JWTInvalid)(\"Only JWTs using Compact JWS serialization can be decoded\");\n    if (length !== 3) throw new (0, _errorsJs.JWTInvalid)(\"Invalid JWT\");\n    if (!payload) throw new (0, _errorsJs.JWTInvalid)(\"JWTs must contain a payload\");\n    let decoded;\n    try {\n        decoded = (0, _base64UrlJs.decode)(payload);\n    } catch (_a) {\n        throw new (0, _errorsJs.JWTInvalid)(\"Failed to base64url decode the payload\");\n    }\n    let result;\n    try {\n        result = JSON.parse((0, _bufferUtilsJs.decoder).decode(decoded));\n    } catch (_b) {\n        throw new (0, _errorsJs.JWTInvalid)(\"Failed to parse the decoded payload as JSON\");\n    }\n    if (!(0, _isObjectJsDefault.default)(result)) throw new (0, _errorsJs.JWTInvalid)(\"Invalid JWT Claims Set\");\n    return result;\n}\n\n},{\"./base64url.js\":\"bljA2\",\"../lib/buffer_utils.js\":\"h0x9u\",\"../lib/is_object.js\":\"daSnu\",\"./errors.js\":\"4fsOp\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"h6CYR\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nparcelHelpers.export(exports, \"generateKeyPair\", ()=>generateKeyPair);\nvar _generateJs = require(\"../runtime/generate.js\");\nasync function generateKeyPair(alg, options) {\n    return (0, _generateJs.generateKeyPair)(alg, options);\n}\n\n},{\"../runtime/generate.js\":\"gDjpj\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"gDjpj\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nparcelHelpers.export(exports, \"generateSecret\", ()=>generateSecret);\nparcelHelpers.export(exports, \"generateKeyPair\", ()=>generateKeyPair);\nvar _webcryptoJs = require(\"./webcrypto.js\");\nvar _webcryptoJsDefault = parcelHelpers.interopDefault(_webcryptoJs);\nvar _errorsJs = require(\"../util/errors.js\");\nvar _randomJs = require(\"./random.js\");\nvar _randomJsDefault = parcelHelpers.interopDefault(_randomJs);\nasync function generateSecret(alg, options) {\n    var _a;\n    let length;\n    let algorithm;\n    let keyUsages;\n    switch(alg){\n        case \"HS256\":\n        case \"HS384\":\n        case \"HS512\":\n            length = parseInt(alg.slice(-3), 10);\n            algorithm = {\n                name: \"HMAC\",\n                hash: `SHA-${length}`,\n                length\n            };\n            keyUsages = [\n                \"sign\",\n                \"verify\"\n            ];\n            break;\n        case \"A128CBC-HS256\":\n        case \"A192CBC-HS384\":\n        case \"A256CBC-HS512\":\n            length = parseInt(alg.slice(-3), 10);\n            return (0, _randomJsDefault.default)(new Uint8Array(length >> 3));\n        case \"A128KW\":\n        case \"A192KW\":\n        case \"A256KW\":\n            length = parseInt(alg.slice(1, 4), 10);\n            algorithm = {\n                name: \"AES-KW\",\n                length\n            };\n            keyUsages = [\n                \"wrapKey\",\n                \"unwrapKey\"\n            ];\n            break;\n        case \"A128GCMKW\":\n        case \"A192GCMKW\":\n        case \"A256GCMKW\":\n        case \"A128GCM\":\n        case \"A192GCM\":\n        case \"A256GCM\":\n            length = parseInt(alg.slice(1, 4), 10);\n            algorithm = {\n                name: \"AES-GCM\",\n                length\n            };\n            keyUsages = [\n                \"encrypt\",\n                \"decrypt\"\n            ];\n            break;\n        default:\n            throw new (0, _errorsJs.JOSENotSupported)('Invalid or unsupported JWK \"alg\" (Algorithm) Parameter value');\n    }\n    return (0, _webcryptoJsDefault.default).subtle.generateKey(algorithm, (_a = options === null || options === void 0 ? void 0 : options.extractable) !== null && _a !== void 0 ? _a : false, keyUsages);\n}\nfunction getModulusLengthOption(options) {\n    var _a;\n    const modulusLength = (_a = options === null || options === void 0 ? void 0 : options.modulusLength) !== null && _a !== void 0 ? _a : 2048;\n    if (typeof modulusLength !== \"number\" || modulusLength < 2048) throw new (0, _errorsJs.JOSENotSupported)(\"Invalid or unsupported modulusLength option provided, 2048 bits or larger keys must be used\");\n    return modulusLength;\n}\nasync function generateKeyPair(alg, options) {\n    var _a, _b, _c;\n    let algorithm;\n    let keyUsages;\n    switch(alg){\n        case \"PS256\":\n        case \"PS384\":\n        case \"PS512\":\n            algorithm = {\n                name: \"RSA-PSS\",\n                hash: `SHA-${alg.slice(-3)}`,\n                publicExponent: new Uint8Array([\n                    0x01,\n                    0x00,\n                    0x01\n                ]),\n                modulusLength: getModulusLengthOption(options)\n            };\n            keyUsages = [\n                \"sign\",\n                \"verify\"\n            ];\n            break;\n        case \"RS256\":\n        case \"RS384\":\n        case \"RS512\":\n            algorithm = {\n                name: \"RSASSA-PKCS1-v1_5\",\n                hash: `SHA-${alg.slice(-3)}`,\n                publicExponent: new Uint8Array([\n                    0x01,\n                    0x00,\n                    0x01\n                ]),\n                modulusLength: getModulusLengthOption(options)\n            };\n            keyUsages = [\n                \"sign\",\n                \"verify\"\n            ];\n            break;\n        case \"RSA-OAEP\":\n        case \"RSA-OAEP-256\":\n        case \"RSA-OAEP-384\":\n        case \"RSA-OAEP-512\":\n            algorithm = {\n                name: \"RSA-OAEP\",\n                hash: `SHA-${parseInt(alg.slice(-3), 10) || 1}`,\n                publicExponent: new Uint8Array([\n                    0x01,\n                    0x00,\n                    0x01\n                ]),\n                modulusLength: getModulusLengthOption(options)\n            };\n            keyUsages = [\n                \"decrypt\",\n                \"unwrapKey\",\n                \"encrypt\",\n                \"wrapKey\"\n            ];\n            break;\n        case \"ES256\":\n            algorithm = {\n                name: \"ECDSA\",\n                namedCurve: \"P-256\"\n            };\n            keyUsages = [\n                \"sign\",\n                \"verify\"\n            ];\n            break;\n        case \"ES384\":\n            algorithm = {\n                name: \"ECDSA\",\n                namedCurve: \"P-384\"\n            };\n            keyUsages = [\n                \"sign\",\n                \"verify\"\n            ];\n            break;\n        case \"ES512\":\n            algorithm = {\n                name: \"ECDSA\",\n                namedCurve: \"P-521\"\n            };\n            keyUsages = [\n                \"sign\",\n                \"verify\"\n            ];\n            break;\n        case \"EdDSA\":\n            keyUsages = [\n                \"sign\",\n                \"verify\"\n            ];\n            const crv = (_a = options === null || options === void 0 ? void 0 : options.crv) !== null && _a !== void 0 ? _a : \"Ed25519\";\n            switch(crv){\n                case \"Ed25519\":\n                case \"Ed448\":\n                    algorithm = {\n                        name: crv\n                    };\n                    break;\n                default:\n                    throw new (0, _errorsJs.JOSENotSupported)(\"Invalid or unsupported crv option provided\");\n            }\n            break;\n        case \"ECDH-ES\":\n        case \"ECDH-ES+A128KW\":\n        case \"ECDH-ES+A192KW\":\n        case \"ECDH-ES+A256KW\":\n            {\n                keyUsages = [\n                    \"deriveKey\",\n                    \"deriveBits\"\n                ];\n                const crv = (_b = options === null || options === void 0 ? void 0 : options.crv) !== null && _b !== void 0 ? _b : \"P-256\";\n                switch(crv){\n                    case \"P-256\":\n                    case \"P-384\":\n                    case \"P-521\":\n                        algorithm = {\n                            name: \"ECDH\",\n                            namedCurve: crv\n                        };\n                        break;\n                    case \"X25519\":\n                    case \"X448\":\n                        algorithm = {\n                            name: crv\n                        };\n                        break;\n                    default:\n                        throw new (0, _errorsJs.JOSENotSupported)(\"Invalid or unsupported crv option provided, supported values are P-256, P-384, P-521, X25519, and X448\");\n                }\n                break;\n            }\n        default:\n            throw new (0, _errorsJs.JOSENotSupported)('Invalid or unsupported JWK \"alg\" (Algorithm) Parameter value');\n    }\n    return (0, _webcryptoJsDefault.default).subtle.generateKey(algorithm, (_c = options === null || options === void 0 ? void 0 : options.extractable) !== null && _c !== void 0 ? _c : false, keyUsages);\n}\n\n},{\"./webcrypto.js\":\"aUHBb\",\"../util/errors.js\":\"4fsOp\",\"./random.js\":\"4nPoE\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"jmQID\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nparcelHelpers.export(exports, \"generateSecret\", ()=>generateSecret);\nvar _generateJs = require(\"../runtime/generate.js\");\nasync function generateSecret(alg, options) {\n    return (0, _generateJs.generateSecret)(alg, options);\n}\n\n},{\"../runtime/generate.js\":\"gDjpj\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"l9K66\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nvar _runtimeJs = require(\"../runtime/runtime.js\");\nvar _runtimeJsDefault = parcelHelpers.interopDefault(_runtimeJs);\nexports.default = (0, _runtimeJsDefault.default);\n\n},{\"../runtime/runtime.js\":\"jOm8H\",\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"jOm8H\":[function(require,module,exports) {\nvar parcelHelpers = require(\"@parcel/transformer-js/src/esmodule-helpers.js\");\nparcelHelpers.defineInteropFlag(exports);\nexports.default = \"WebCryptoAPI\";\n\n},{\"@parcel/transformer-js/src/esmodule-helpers.js\":\"k3151\"}],\"jCXmG\":[function(require,module,exports) {\nmodule.exports = require(\"85ca41a4cefc5905\")(require(\"3bc3c00f30e1a1a4\").resolve(\"joS1N\")).then(()=>module.bundle.root(\"fRpeL\"));\n\n},{\"85ca41a4cefc5905\":\"hpx0h\",\"3bc3c00f30e1a1a4\":\"fyJL2\"}],\"hpx0h\":[function(require,module,exports) {\n\"use strict\";\nvar cacheLoader = require(\"ca2a84f7fa4a3bb0\");\nmodule.exports = cacheLoader(function(bundle) {\n    return new Promise(function(resolve, reject) {\n        // Don't insert the same script twice (e.g. if it was already in the HTML)\n        var existingScripts = document.getElementsByTagName(\"script\");\n        if ([].concat(existingScripts).some(function isCurrentBundle(script) {\n            return script.src === bundle;\n        })) {\n            resolve();\n            return;\n        }\n        var preloadLink = document.createElement(\"link\");\n        preloadLink.href = bundle;\n        preloadLink.rel = \"preload\";\n        preloadLink.as = \"script\";\n        document.head.appendChild(preloadLink);\n        var script = document.createElement(\"script\");\n        script.async = true;\n        script.type = \"text/javascript\";\n        script.src = bundle;\n        script.onerror = function(e) {\n            var error = new TypeError(\"Failed to fetch dynamically imported module: \".concat(bundle, \". Error: \").concat(e.message));\n            script.onerror = script.onload = null;\n            script.remove();\n            reject(error);\n        };\n        script.onload = function() {\n            script.onerror = script.onload = null;\n            resolve();\n        };\n        document.getElementsByTagName(\"head\")[0].appendChild(script);\n    });\n});\n\n},{\"ca2a84f7fa4a3bb0\":\"1uYxD\"}],\"1uYxD\":[function(require,module,exports) {\n\"use strict\";\nvar cachedBundles = {};\nvar cachedPreloads = {};\nvar cachedPrefetches = {};\nfunction getCache(type) {\n    switch(type){\n        case \"preload\":\n            return cachedPreloads;\n        case \"prefetch\":\n            return cachedPrefetches;\n        default:\n            return cachedBundles;\n    }\n}\nmodule.exports = function(loader, type) {\n    return function(bundle) {\n        var cache = getCache(type);\n        if (cache[bundle]) return cache[bundle];\n        return cache[bundle] = loader.apply(null, arguments).catch(function(e) {\n            delete cache[bundle];\n            throw e;\n        });\n    };\n};\n\n},{}],\"cUaV9\":[function(require,module,exports) {\nmodule.exports = require(\"dfb3980264b9a375\")(require(\"834bed7596d2bea5\").resolve(\"g9O5g\")).then(()=>module.bundle.root(\"7jSY4\"));\n\n},{\"dfb3980264b9a375\":\"hpx0h\",\"834bed7596d2bea5\":\"fyJL2\"}]},[\"gb59R\",\"8RSWf\"], \"8RSWf\", \"parcelRequire819c\")\n\n//# sourceMappingURL=index.js.map\n","require('./helpers/bundle-manifest').register(require('./helpers/bundle-url').getBundleURL('c4cLN'),JSON.parse(\"[\\\"c4cLN\\\",\\\"index.js\\\",\\\"joS1N\\\",\\\"EmailConfirmationWall.28f4a906.js\\\",\\\"g9O5g\\\",\\\"NotificationToast.31b92c6e.js\\\"]\"));","\"use strict\";\n\nvar mapping = new Map();\nfunction register(baseUrl, manifest) {\n  for (var i = 0; i < manifest.length - 1; i += 2) {\n    mapping.set(manifest[i], {\n      baseUrl: baseUrl,\n      path: manifest[i + 1]\n    });\n  }\n}\nfunction resolve(id) {\n  var resolved = mapping.get(id);\n  if (resolved == null) {\n    throw new Error('Could not resolve bundle with id ' + id);\n  }\n  return new URL(resolved.path, resolved.baseUrl).toString();\n}\nmodule.exports.register = register;\nmodule.exports.resolve = resolve;","\"use strict\";\n\nvar bundleURL = {};\nfunction getBundleURLCached(id) {\n  var value = bundleURL[id];\n  if (!value) {\n    value = getBundleURL();\n    bundleURL[id] = value;\n  }\n  return value;\n}\nfunction getBundleURL() {\n  try {\n    throw new Error();\n  } catch (err) {\n    var matches = ('' + err.stack).match(/(https?|file|ftp|(chrome|moz|safari-web)-extension):\\/\\/[^)\\n]+/g);\n    if (matches) {\n      // The first two stack frames will be this function and getBundleURLCached.\n      // Use the 3rd one, which will be a runtime in the original bundle.\n      return getBaseURL(matches[2]);\n    }\n  }\n  return '/';\n}\nfunction getBaseURL(url) {\n  return ('' + url).replace(/^((?:https?|file|ftp|(chrome|moz|safari-web)-extension):\\/\\/.+)\\/[^/]+$/, '$1') + '/';\n}\n\n// TODO: Replace uses with `new URL(url).origin` when ie11 is no longer supported.\nfunction getOrigin(url) {\n  var matches = ('' + url).match(/(https?|file|ftp|(chrome|moz|safari-web)-extension):\\/\\/[^/]+/);\n  if (!matches) {\n    throw new Error('Origin not found');\n  }\n  return matches[0];\n}\nexports.getBundleURL = getBundleURLCached;\nexports.getBaseURL = getBaseURL;\nexports.getOrigin = getOrigin;","import {\n  getIdToken,\n  getAccessToken,\n  getUserInfo,\n  isAuthenticated,\n  isEmailVerified,\n  showEmailConfirmation,\n  showSilentLoginNotification,\n  sendEmailVerification,\n  getUserSubscriptions,\n} from './auth0-sdk';\n\nconst queue = window.CIAM || [];\nwindow.CIAM = {\n  push: (fn: () => void) => {\n    fn();\n  },\n  getIdToken,\n  getAccessToken,\n  getUserInfo,\n  isAuthenticated,\n  isEmailVerified,\n  showEmailConfirmation,\n  showSilentLoginNotification,\n  sendEmailVerification,\n  getUserSubscriptions,\n};\n\nif (Array.isArray(queue)) {\n  queue.forEach((fn: () => void) => fn());\n}\n\nif (document.currentScript) {\n  let clientId = document.currentScript.getAttribute('data-client-id');\n  let brand = document.currentScript.getAttribute('data-brand');\n\n  // @ts-ignore\n  if (!clientId && typeof window.MEDIAHUIS !== 'undefined' && window.MEDIAHUIS.config && window.MEDIAHUIS.config.auth0) {\n    // @ts-ignore\n    clientId = window.MEDIAHUIS.config.auth0.clientId;\n  }\n  // @ts-ignore\n  if (!brand && typeof document !== 'undefined') {\n    // @ts-ignore\n    brand = document.title.indexOf('-') ? document.title.split(' - ')[1] : '';\n  }\n\n  if (clientId && brand) {\n    if (!document.getElementById('auth0_silent-login-root')) {\n      var doc = document.createElement('div');\n      doc.id = 'auth0_silent-login-root';\n      document.body.appendChild(doc);\n    }\n    showSilentLoginNotification({\n      clientId,\n      brand,\n    });\n  } else {\n    console.warn('Missing \"data-client-id\" or \"data-brand\" attribute');\n  }\n}\n","import { JWTPayload } from 'jose';\nimport { extractToken, getCookie } from './modules/cookie';\n\n/**\n * A quick note on the types used in this file:\n */\n\n/**\n * The id token is a JWT token that contains information about the user.\n */\nexport interface IdToken extends JWTPayload {\n  isInFirstTimeLoginBrand: boolean;\n  'https://mediahuis.com/principal-type': 'USER';\n  'https://mediahuis.com/subscribed-accesses': Array<string>;\n  given_name: string;\n  family_name: string;\n  nickname: string;\n  name: string;\n  picture: string;\n  gender: {\n    type: 'Male' | 'Female' | 'Other';\n  };\n  updated_at: string;\n  email: string;\n  email_verified: boolean;\n}\n\n/**\n * The access token is a JWT token that contains access information about the user.\n */\nexport interface AccessToken extends JWTPayload {\n  'https://mediahuis.com/principal-type': 'USER';\n  'https://mediahuis.com/subscribed-accesses': Array<string>;\n  iss: string;\n  sub: string;\n  aud: Array<string>;\n  iat: number;\n  exp: number;\n  azp: string;\n  scope: string;\n}\n\n/**\n * @private\n * @param clientId Auth0 client id\n * @returns URLSearchParams\n */\nexport function getConfig(clientId: string) {\n  return new URLSearchParams(getCookie(`auth0_${clientId}_config`));\n}\n\n/**\n * Get the access token of a logged in user. Useful when you need to send this token to a backend service from the client.\n *\n * @param clientId Auth0 client id\n * @returns Access token or null\n */\nexport function getAccessToken(clientId: string) {\n  return getCookie(`auth0_${clientId}_acc_token`);\n}\n\n/**\n * Returns the access token fully parsed and decoded of a loggedin user.\n *\n * @param clientId Auth0 client id\n * @returns The parsed access token or null\n */\nexport async function getUserSubscriptions(clientId: string) {\n  const decodedAccessToken = await getDecodedAccessToken(clientId);\n\n  return decodedAccessToken?.['https://mediahuis.com/subscribed-accesses'] ?? [];\n}\n\n/**\n * Returns the access token fully parsed and decoded of a loggedin user.\n *\n * @param clientId Auth0 client id\n * @returns The parsed access token or null\n */\nexport async function getDecodedAccessToken(clientId: string) {\n  return extractToken(`auth0_${clientId}_acc_token`) as AccessToken;\n}\n\n/**\n * Retrieve the raw id token of a logged in user. If you're looking to extract this infomration you can simply use the `getUserInfo` function instead.\n *\n * @param clientId Auth0 client id\n * @returns Raw JWT id token or null\n */\nexport function getIdToken(clientId: string) {\n  return getCookie(`auth0_${clientId}_id_token`);\n}\n\n/**\n * Returns the id token fully parsed and decoded of a loggedin user.\n *\n * @param clientId Auth0 client id\n * @returns The parsed id token or null\n */\nexport async function getUserInfo(clientId: string): Promise<IdToken> {\n  return extractToken(`auth0_${clientId}_id_token`) as IdToken;\n}\n\n/**\n * Is the user authenticated?\n *\n * @param clientId Auth0 client id\n * @returns True if the user is authenticated, false otherwise\n */\nexport function isAuthenticated(clientId: string): boolean {\n  return !!getAccessToken(clientId) && !!getIdToken(clientId);\n}\n\n/**\n * Is the email verified?\n *\n * @param clientId Auth0 client id\n * @returns True if the email is verified, false otherwise\n */\nexport async function isEmailVerified(clientId: string): Promise<boolean> {\n  const userInfo = await getUserInfo(clientId);\n\n  if (!userInfo) {\n    return false;\n  }\n\n  return userInfo.email_verified;\n}\n\nexport async function sendEmailVerification(clientId: string): Promise<boolean> {\n  const config = getConfig(clientId);\n  const userInfo = await getUserInfo(clientId);\n  if (userInfo.email_verified || !config.has('base') || !config.has('redirectUri')) {\n    return false;\n  }\n\n  const searchParams = new URLSearchParams({\n    client_id: clientId,\n    response_type: 'token',\n    audience: 'https://ciam-api.mediahuis.com',\n    redirect_uri: `${window.location.origin}${config.get('redirectUri')}`,\n    response_mode: 'web_message',\n    prompt: 'none',\n  });\n\n  const url = new URL(`${config.get('issuer')}/authorize?${searchParams}`);\n  const iframe = document.createElement('iframe');\n\n  return new Promise<boolean>((resolve) => {\n    window.addEventListener('message', async function onMessage(event) {\n      if (event.data.type === 'authorization_response') {\n        window.removeEventListener('message', onMessage);\n        document.body.removeChild(iframe);\n\n        const verifyEmailRequestURL = new URL(`${window.location.origin}${config.get('base')}/verify-email-request`);\n        verifyEmailRequestURL.searchParams.append('account', userInfo.sub);\n        const token = event.data.response.access_token;\n        const resp = await this.fetch(verifyEmailRequestURL, {\n          method: 'POST',\n          credentials: 'omit',\n          headers: {\n            authorization: 'Bearer ' + token,\n          },\n          body: JSON.stringify({\n            clientId,\n          }),\n        });\n\n        resolve(resp.ok);\n      }\n    });\n    iframe.src = url.toString();\n    document.body.appendChild(iframe);\n  });\n}\n\n/**\n * Some brands require to show an email confirmation before reading any metered or plus articles.\n * showEmailConfirmation let you put our shared component based on the Mediahuis design system in your page.\n *\n * @param options The list of options to pass to the popup\n * @param options.clientId Auth0 client id\n * @param options.type The type of email confirmation to show\n * @param options.el The DOM element to render the email confirmation in\n * @returns\n */\nexport async function showEmailConfirmation({\n  type,\n  brand,\n  clientId,\n  el,\n}: {\n  type: 'paywall';\n  clientId: string;\n  brand: string;\n  el: HTMLElement;\n}): Promise<void> {\n  const { appendEmailVerificationWall } = await import('./modules/email-confirmation/EmailConfirmationWall');\n\n  if (type !== 'paywall') {\n    throw new Error(`Unsupported type: ${type}, only paywall is currently implemented.`);\n  }\n\n  if (!isAuthenticated(clientId)) {\n    throw new Error(`User is not authenticated.`);\n  }\n\n  const userInfo = await getUserInfo(clientId);\n\n  if (userInfo.email_verified) {\n    throw new Error(`User has already been verified.`);\n  }\n\n  return appendEmailVerificationWall(el, { email: userInfo.email, brand, clientId });\n}\n\n/**\n * If you want to control when to show the silent login popup.\n *\n * Note that we're using the Mediahuis design system to create these popups.\n *\n * @param options The list of options to pass to the popup\n * @param options.clientId Auth0 client id\n * @param options.brand The full name of the brand (e.g. \"De Standaard\")\n * @returns\n */\nexport async function showSilentLoginNotification({ clientId, brand }: { clientId: string; brand: string }): Promise<void> {\n  if (!window?.location?.search?.includes('_sl=1')) {\n    return;\n  }\n\n  const parsedUrl = new URL(window.location.href);\n  parsedUrl.searchParams.delete('_sl');\n  window.history.replaceState(history.state, undefined, parsedUrl.toString());\n  const userInfo = await getUserInfo(clientId);\n\n  if (!userInfo.email) {\n    return;\n  }\n\n  const { appendNotificationToast } = await import('./modules/silent-login/NotificationToast');\n\n  let root = document.getElementById('auth0_silent-login-root') as HTMLElement;\n  if (!root) {\n    root = document.createElement('div');\n    root.id = 'auth0_silent-login-root';\n    root.className = 'chameleon-theme-mh';\n    Object.assign(root.style, {\n      position: 'absolute',\n      top: 0,\n      right: 0,\n      zIndex: '9999',\n    });\n  }\n\n  await appendNotificationToast(root, { email: userInfo.email, brand });\n\n  return new Promise((resolve) => {\n    requestAnimationFrame(() => {\n      if (!document.getElementById('auth0_silent-login-root')) {\n        document.body.appendChild(root);\n      }\n\n      resolve();\n    });\n  });\n}\n","import { decodeJwt } from 'jose';\n\nexport function getCookie(cookieName: string): string | null {\n\tconst cookies = document.cookie.split(';');\n\tfor (const c of cookies) {\n\t\tconst [name, ...value] = c.split('=');\n\t\tif (name.trim() === cookieName) {\n\t\t\treturn value.join('=');\n\t\t}\n\t}\n\treturn null;\n}\n\nexport function extractToken(cookieName: string): Record<string, any> | null {\n\tconst cookie = getCookie(cookieName);\n\n\tif (!cookie) {\n\t\treturn null;\n\t}\n\n\treturn decodeJwt(cookie);\n}\n","export { compactDecrypt } from './jwe/compact/decrypt.js';\nexport { flattenedDecrypt } from './jwe/flattened/decrypt.js';\nexport { generalDecrypt } from './jwe/general/decrypt.js';\nexport { GeneralEncrypt } from './jwe/general/encrypt.js';\nexport { compactVerify } from './jws/compact/verify.js';\nexport { flattenedVerify } from './jws/flattened/verify.js';\nexport { generalVerify } from './jws/general/verify.js';\nexport { jwtVerify } from './jwt/verify.js';\nexport { jwtDecrypt } from './jwt/decrypt.js';\nexport { CompactEncrypt } from './jwe/compact/encrypt.js';\nexport { FlattenedEncrypt } from './jwe/flattened/encrypt.js';\nexport { CompactSign } from './jws/compact/sign.js';\nexport { FlattenedSign } from './jws/flattened/sign.js';\nexport { GeneralSign } from './jws/general/sign.js';\nexport { SignJWT } from './jwt/sign.js';\nexport { EncryptJWT } from './jwt/encrypt.js';\nexport { calculateJwkThumbprint, calculateJwkThumbprintUri } from './jwk/thumbprint.js';\nexport { EmbeddedJWK } from './jwk/embedded.js';\nexport { createLocalJWKSet } from './jwks/local.js';\nexport { createRemoteJWKSet } from './jwks/remote.js';\nexport { UnsecuredJWT } from './jwt/unsecured.js';\nexport { exportPKCS8, exportSPKI, exportJWK } from './key/export.js';\nexport { importSPKI, importPKCS8, importX509, importJWK } from './key/import.js';\nexport { decodeProtectedHeader } from './util/decode_protected_header.js';\nexport { decodeJwt } from './util/decode_jwt.js';\nimport * as errors_1 from './util/errors.js';\nexport { errors_1 as errors };\nexport { generateKeyPair } from './key/generate_key_pair.js';\nexport { generateSecret } from './key/generate_secret.js';\nimport * as base64url_1 from './util/base64url.js';\nexport { base64url_1 as base64url };\nexport { default as cryptoRuntime } from './util/runtime.js';\n","import { flattenedDecrypt } from '../flattened/decrypt.js';\nimport { JWEInvalid } from '../../util/errors.js';\nimport { decoder } from '../../lib/buffer_utils.js';\nexport async function compactDecrypt(jwe, key, options) {\n    if (jwe instanceof Uint8Array) {\n        jwe = decoder.decode(jwe);\n    }\n    if (typeof jwe !== 'string') {\n        throw new JWEInvalid('Compact JWE must be a string or Uint8Array');\n    }\n    const { 0: protectedHeader, 1: encryptedKey, 2: iv, 3: ciphertext, 4: tag, length, } = jwe.split('.');\n    if (length !== 5) {\n        throw new JWEInvalid('Invalid Compact JWE');\n    }\n    const decrypted = await flattenedDecrypt({\n        ciphertext,\n        iv: (iv || undefined),\n        protected: protectedHeader || undefined,\n        tag: (tag || undefined),\n        encrypted_key: encryptedKey || undefined,\n    }, key, options);\n    const result = { plaintext: decrypted.plaintext, protectedHeader: decrypted.protectedHeader };\n    if (typeof key === 'function') {\n        return { ...result, key: decrypted.key };\n    }\n    return result;\n}\n","import { decode as base64url } from '../../runtime/base64url.js';\nimport decrypt from '../../runtime/decrypt.js';\nimport { inflate } from '../../runtime/zlib.js';\nimport { JOSEAlgNotAllowed, JOSENotSupported, JWEInvalid } from '../../util/errors.js';\nimport isDisjoint from '../../lib/is_disjoint.js';\nimport isObject from '../../lib/is_object.js';\nimport decryptKeyManagement from '../../lib/decrypt_key_management.js';\nimport { encoder, decoder, concat } from '../../lib/buffer_utils.js';\nimport generateCek from '../../lib/cek.js';\nimport validateCrit from '../../lib/validate_crit.js';\nimport validateAlgorithms from '../../lib/validate_algorithms.js';\nexport async function flattenedDecrypt(jwe, key, options) {\n    var _a;\n    if (!isObject(jwe)) {\n        throw new JWEInvalid('Flattened JWE must be an object');\n    }\n    if (jwe.protected === undefined && jwe.header === undefined && jwe.unprotected === undefined) {\n        throw new JWEInvalid('JOSE Header missing');\n    }\n    if (typeof jwe.iv !== 'string') {\n        throw new JWEInvalid('JWE Initialization Vector missing or incorrect type');\n    }\n    if (typeof jwe.ciphertext !== 'string') {\n        throw new JWEInvalid('JWE Ciphertext missing or incorrect type');\n    }\n    if (typeof jwe.tag !== 'string') {\n        throw new JWEInvalid('JWE Authentication Tag missing or incorrect type');\n    }\n    if (jwe.protected !== undefined && typeof jwe.protected !== 'string') {\n        throw new JWEInvalid('JWE Protected Header incorrect type');\n    }\n    if (jwe.encrypted_key !== undefined && typeof jwe.encrypted_key !== 'string') {\n        throw new JWEInvalid('JWE Encrypted Key incorrect type');\n    }\n    if (jwe.aad !== undefined && typeof jwe.aad !== 'string') {\n        throw new JWEInvalid('JWE AAD incorrect type');\n    }\n    if (jwe.header !== undefined && !isObject(jwe.header)) {\n        throw new JWEInvalid('JWE Shared Unprotected Header incorrect type');\n    }\n    if (jwe.unprotected !== undefined && !isObject(jwe.unprotected)) {\n        throw new JWEInvalid('JWE Per-Recipient Unprotected Header incorrect type');\n    }\n    let parsedProt;\n    if (jwe.protected) {\n        try {\n            const protectedHeader = base64url(jwe.protected);\n            parsedProt = JSON.parse(decoder.decode(protectedHeader));\n        }\n        catch (_b) {\n            throw new JWEInvalid('JWE Protected Header is invalid');\n        }\n    }\n    if (!isDisjoint(parsedProt, jwe.header, jwe.unprotected)) {\n        throw new JWEInvalid('JWE Protected, JWE Unprotected Header, and JWE Per-Recipient Unprotected Header Parameter names must be disjoint');\n    }\n    const joseHeader = {\n        ...parsedProt,\n        ...jwe.header,\n        ...jwe.unprotected,\n    };\n    validateCrit(JWEInvalid, new Map(), options === null || options === void 0 ? void 0 : options.crit, parsedProt, joseHeader);\n    if (joseHeader.zip !== undefined) {\n        if (!parsedProt || !parsedProt.zip) {\n            throw new JWEInvalid('JWE \"zip\" (Compression Algorithm) Header MUST be integrity protected');\n        }\n        if (joseHeader.zip !== 'DEF') {\n            throw new JOSENotSupported('Unsupported JWE \"zip\" (Compression Algorithm) Header Parameter value');\n        }\n    }\n    const { alg, enc } = joseHeader;\n    if (typeof alg !== 'string' || !alg) {\n        throw new JWEInvalid('missing JWE Algorithm (alg) in JWE Header');\n    }\n    if (typeof enc !== 'string' || !enc) {\n        throw new JWEInvalid('missing JWE Encryption Algorithm (enc) in JWE Header');\n    }\n    const keyManagementAlgorithms = options && validateAlgorithms('keyManagementAlgorithms', options.keyManagementAlgorithms);\n    const contentEncryptionAlgorithms = options &&\n        validateAlgorithms('contentEncryptionAlgorithms', options.contentEncryptionAlgorithms);\n    if (keyManagementAlgorithms && !keyManagementAlgorithms.has(alg)) {\n        throw new JOSEAlgNotAllowed('\"alg\" (Algorithm) Header Parameter not allowed');\n    }\n    if (contentEncryptionAlgorithms && !contentEncryptionAlgorithms.has(enc)) {\n        throw new JOSEAlgNotAllowed('\"enc\" (Encryption Algorithm) Header Parameter not allowed');\n    }\n    let encryptedKey;\n    if (jwe.encrypted_key !== undefined) {\n        try {\n            encryptedKey = base64url(jwe.encrypted_key);\n        }\n        catch (_c) {\n            throw new JWEInvalid('Failed to base64url decode the encrypted_key');\n        }\n    }\n    let resolvedKey = false;\n    if (typeof key === 'function') {\n        key = await key(parsedProt, jwe);\n        resolvedKey = true;\n    }\n    let cek;\n    try {\n        cek = await decryptKeyManagement(alg, key, encryptedKey, joseHeader, options);\n    }\n    catch (err) {\n        if (err instanceof TypeError || err instanceof JWEInvalid || err instanceof JOSENotSupported) {\n            throw err;\n        }\n        cek = generateCek(enc);\n    }\n    let iv;\n    let tag;\n    try {\n        iv = base64url(jwe.iv);\n    }\n    catch (_d) {\n        throw new JWEInvalid('Failed to base64url decode the iv');\n    }\n    try {\n        tag = base64url(jwe.tag);\n    }\n    catch (_e) {\n        throw new JWEInvalid('Failed to base64url decode the tag');\n    }\n    const protectedHeader = encoder.encode((_a = jwe.protected) !== null && _a !== void 0 ? _a : '');\n    let additionalData;\n    if (jwe.aad !== undefined) {\n        additionalData = concat(protectedHeader, encoder.encode('.'), encoder.encode(jwe.aad));\n    }\n    else {\n        additionalData = protectedHeader;\n    }\n    let ciphertext;\n    try {\n        ciphertext = base64url(jwe.ciphertext);\n    }\n    catch (_f) {\n        throw new JWEInvalid('Failed to base64url decode the ciphertext');\n    }\n    let plaintext = await decrypt(enc, cek, ciphertext, iv, tag, additionalData);\n    if (joseHeader.zip === 'DEF') {\n        plaintext = await ((options === null || options === void 0 ? void 0 : options.inflateRaw) || inflate)(plaintext);\n    }\n    const result = { plaintext };\n    if (jwe.protected !== undefined) {\n        result.protectedHeader = parsedProt;\n    }\n    if (jwe.aad !== undefined) {\n        try {\n            result.additionalAuthenticatedData = base64url(jwe.aad);\n        }\n        catch (_g) {\n            throw new JWEInvalid('Failed to base64url decode the aad');\n        }\n    }\n    if (jwe.unprotected !== undefined) {\n        result.sharedUnprotectedHeader = jwe.unprotected;\n    }\n    if (jwe.header !== undefined) {\n        result.unprotectedHeader = jwe.header;\n    }\n    if (resolvedKey) {\n        return { ...result, key };\n    }\n    return result;\n}\n","import { encoder, decoder } from '../lib/buffer_utils.js';\nexport const encodeBase64 = (input) => {\n    let unencoded = input;\n    if (typeof unencoded === 'string') {\n        unencoded = encoder.encode(unencoded);\n    }\n    const CHUNK_SIZE = 0x8000;\n    const arr = [];\n    for (let i = 0; i < unencoded.length; i += CHUNK_SIZE) {\n        arr.push(String.fromCharCode.apply(null, unencoded.subarray(i, i + CHUNK_SIZE)));\n    }\n    return btoa(arr.join(''));\n};\nexport const encode = (input) => {\n    return encodeBase64(input).replace(/=/g, '').replace(/\\+/g, '-').replace(/\\//g, '_');\n};\nexport const decodeBase64 = (encoded) => {\n    const binary = atob(encoded);\n    const bytes = new Uint8Array(binary.length);\n    for (let i = 0; i < binary.length; i++) {\n        bytes[i] = binary.charCodeAt(i);\n    }\n    return bytes;\n};\nexport const decode = (input) => {\n    let encoded = input;\n    if (encoded instanceof Uint8Array) {\n        encoded = decoder.decode(encoded);\n    }\n    encoded = encoded.replace(/-/g, '+').replace(/_/g, '/').replace(/\\s/g, '');\n    try {\n        return decodeBase64(encoded);\n    }\n    catch (_a) {\n        throw new TypeError('The input to be decoded is not correctly encoded.');\n    }\n};\n","import digest from '../runtime/digest.js';\nexport const encoder = new TextEncoder();\nexport const decoder = new TextDecoder();\nconst MAX_INT32 = 2 ** 32;\nexport function concat(...buffers) {\n    const size = buffers.reduce((acc, { length }) => acc + length, 0);\n    const buf = new Uint8Array(size);\n    let i = 0;\n    buffers.forEach((buffer) => {\n        buf.set(buffer, i);\n        i += buffer.length;\n    });\n    return buf;\n}\nexport function p2s(alg, p2sInput) {\n    return concat(encoder.encode(alg), new Uint8Array([0]), p2sInput);\n}\nfunction writeUInt32BE(buf, value, offset) {\n    if (value < 0 || value >= MAX_INT32) {\n        throw new RangeError(`value must be >= 0 and <= ${MAX_INT32 - 1}. Received ${value}`);\n    }\n    buf.set([value >>> 24, value >>> 16, value >>> 8, value & 0xff], offset);\n}\nexport function uint64be(value) {\n    const high = Math.floor(value / MAX_INT32);\n    const low = value % MAX_INT32;\n    const buf = new Uint8Array(8);\n    writeUInt32BE(buf, high, 0);\n    writeUInt32BE(buf, low, 4);\n    return buf;\n}\nexport function uint32be(value) {\n    const buf = new Uint8Array(4);\n    writeUInt32BE(buf, value);\n    return buf;\n}\nexport function lengthAndInput(input) {\n    return concat(uint32be(input.length), input);\n}\nexport async function concatKdf(secret, bits, value) {\n    const iterations = Math.ceil((bits >> 3) / 32);\n    const res = new Uint8Array(iterations * 32);\n    for (let iter = 0; iter < iterations; iter++) {\n        const buf = new Uint8Array(4 + secret.length + value.length);\n        buf.set(uint32be(iter + 1));\n        buf.set(secret, 4);\n        buf.set(value, 4 + secret.length);\n        res.set(await digest('sha256', buf), iter * 32);\n    }\n    return res.slice(0, bits >> 3);\n}\n","import crypto from './webcrypto.js';\nconst digest = async (algorithm, data) => {\n    const subtleDigest = `SHA-${algorithm.slice(-3)}`;\n    return new Uint8Array(await crypto.subtle.digest(subtleDigest, data));\n};\nexport default digest;\n","export default crypto;\nexport const isCryptoKey = (key) => key instanceof CryptoKey;\n","exports.interopDefault = function (a) {\n  return a && a.__esModule ? a : {default: a};\n};\n\nexports.defineInteropFlag = function (a) {\n  Object.defineProperty(a, '__esModule', {value: true});\n};\n\nexports.exportAll = function (source, dest) {\n  Object.keys(source).forEach(function (key) {\n    if (\n      key === 'default' ||\n      key === '__esModule' ||\n      Object.prototype.hasOwnProperty.call(dest, key)\n    ) {\n      return;\n    }\n\n    Object.defineProperty(dest, key, {\n      enumerable: true,\n      get: function () {\n        return source[key];\n      },\n    });\n  });\n\n  return dest;\n};\n\nexports.export = function (dest, destName, get) {\n  Object.defineProperty(dest, destName, {\n    enumerable: true,\n    get: get,\n  });\n};\n","import { concat, uint64be } from '../lib/buffer_utils.js';\nimport checkIvLength from '../lib/check_iv_length.js';\nimport checkCekLength from './check_cek_length.js';\nimport timingSafeEqual from './timing_safe_equal.js';\nimport { JOSENotSupported, JWEDecryptionFailed } from '../util/errors.js';\nimport crypto, { isCryptoKey } from './webcrypto.js';\nimport { checkEncCryptoKey } from '../lib/crypto_key.js';\nimport invalidKeyInput from '../lib/invalid_key_input.js';\nimport { types } from './is_key_like.js';\nasync function cbcDecrypt(enc, cek, ciphertext, iv, tag, aad) {\n    if (!(cek instanceof Uint8Array)) {\n        throw new TypeError(invalidKeyInput(cek, 'Uint8Array'));\n    }\n    const keySize = parseInt(enc.slice(1, 4), 10);\n    const encKey = await crypto.subtle.importKey('raw', cek.subarray(keySize >> 3), 'AES-CBC', false, ['decrypt']);\n    const macKey = await crypto.subtle.importKey('raw', cek.subarray(0, keySize >> 3), {\n        hash: `SHA-${keySize << 1}`,\n        name: 'HMAC',\n    }, false, ['sign']);\n    const macData = concat(aad, iv, ciphertext, uint64be(aad.length << 3));\n    const expectedTag = new Uint8Array((await crypto.subtle.sign('HMAC', macKey, macData)).slice(0, keySize >> 3));\n    let macCheckPassed;\n    try {\n        macCheckPassed = timingSafeEqual(tag, expectedTag);\n    }\n    catch (_a) {\n    }\n    if (!macCheckPassed) {\n        throw new JWEDecryptionFailed();\n    }\n    let plaintext;\n    try {\n        plaintext = new Uint8Array(await crypto.subtle.decrypt({ iv, name: 'AES-CBC' }, encKey, ciphertext));\n    }\n    catch (_b) {\n    }\n    if (!plaintext) {\n        throw new JWEDecryptionFailed();\n    }\n    return plaintext;\n}\nasync function gcmDecrypt(enc, cek, ciphertext, iv, tag, aad) {\n    let encKey;\n    if (cek instanceof Uint8Array) {\n        encKey = await crypto.subtle.importKey('raw', cek, 'AES-GCM', false, ['decrypt']);\n    }\n    else {\n        checkEncCryptoKey(cek, enc, 'decrypt');\n        encKey = cek;\n    }\n    try {\n        return new Uint8Array(await crypto.subtle.decrypt({\n            additionalData: aad,\n            iv,\n            name: 'AES-GCM',\n            tagLength: 128,\n        }, encKey, concat(ciphertext, tag)));\n    }\n    catch (_a) {\n        throw new JWEDecryptionFailed();\n    }\n}\nconst decrypt = async (enc, cek, ciphertext, iv, tag, aad) => {\n    if (!isCryptoKey(cek) && !(cek instanceof Uint8Array)) {\n        throw new TypeError(invalidKeyInput(cek, ...types, 'Uint8Array'));\n    }\n    checkIvLength(enc, iv);\n    switch (enc) {\n        case 'A128CBC-HS256':\n        case 'A192CBC-HS384':\n        case 'A256CBC-HS512':\n            if (cek instanceof Uint8Array)\n                checkCekLength(cek, parseInt(enc.slice(-3), 10));\n            return cbcDecrypt(enc, cek, ciphertext, iv, tag, aad);\n        case 'A128GCM':\n        case 'A192GCM':\n        case 'A256GCM':\n            if (cek instanceof Uint8Array)\n                checkCekLength(cek, parseInt(enc.slice(1, 4), 10));\n            return gcmDecrypt(enc, cek, ciphertext, iv, tag, aad);\n        default:\n            throw new JOSENotSupported('Unsupported JWE Content Encryption Algorithm');\n    }\n};\nexport default decrypt;\n","import { JWEInvalid } from '../util/errors.js';\nimport { bitLength } from './iv.js';\nconst checkIvLength = (enc, iv) => {\n    if (iv.length << 3 !== bitLength(enc)) {\n        throw new JWEInvalid('Invalid Initialization Vector length');\n    }\n};\nexport default checkIvLength;\n","export class JOSEError extends Error {\n    static get code() {\n        return 'ERR_JOSE_GENERIC';\n    }\n    constructor(message) {\n        var _a;\n        super(message);\n        this.code = 'ERR_JOSE_GENERIC';\n        this.name = this.constructor.name;\n        (_a = Error.captureStackTrace) === null || _a === void 0 ? void 0 : _a.call(Error, this, this.constructor);\n    }\n}\nexport class JWTClaimValidationFailed extends JOSEError {\n    static get code() {\n        return 'ERR_JWT_CLAIM_VALIDATION_FAILED';\n    }\n    constructor(message, claim = 'unspecified', reason = 'unspecified') {\n        super(message);\n        this.code = 'ERR_JWT_CLAIM_VALIDATION_FAILED';\n        this.claim = claim;\n        this.reason = reason;\n    }\n}\nexport class JWTExpired extends JOSEError {\n    static get code() {\n        return 'ERR_JWT_EXPIRED';\n    }\n    constructor(message, claim = 'unspecified', reason = 'unspecified') {\n        super(message);\n        this.code = 'ERR_JWT_EXPIRED';\n        this.claim = claim;\n        this.reason = reason;\n    }\n}\nexport class JOSEAlgNotAllowed extends JOSEError {\n    constructor() {\n        super(...arguments);\n        this.code = 'ERR_JOSE_ALG_NOT_ALLOWED';\n    }\n    static get code() {\n        return 'ERR_JOSE_ALG_NOT_ALLOWED';\n    }\n}\nexport class JOSENotSupported extends JOSEError {\n    constructor() {\n        super(...arguments);\n        this.code = 'ERR_JOSE_NOT_SUPPORTED';\n    }\n    static get code() {\n        return 'ERR_JOSE_NOT_SUPPORTED';\n    }\n}\nexport class JWEDecryptionFailed extends JOSEError {\n    constructor() {\n        super(...arguments);\n        this.code = 'ERR_JWE_DECRYPTION_FAILED';\n        this.message = 'decryption operation failed';\n    }\n    static get code() {\n        return 'ERR_JWE_DECRYPTION_FAILED';\n    }\n}\nexport class JWEInvalid extends JOSEError {\n    constructor() {\n        super(...arguments);\n        this.code = 'ERR_JWE_INVALID';\n    }\n    static get code() {\n        return 'ERR_JWE_INVALID';\n    }\n}\nexport class JWSInvalid extends JOSEError {\n    constructor() {\n        super(...arguments);\n        this.code = 'ERR_JWS_INVALID';\n    }\n    static get code() {\n        return 'ERR_JWS_INVALID';\n    }\n}\nexport class JWTInvalid extends JOSEError {\n    constructor() {\n        super(...arguments);\n        this.code = 'ERR_JWT_INVALID';\n    }\n    static get code() {\n        return 'ERR_JWT_INVALID';\n    }\n}\nexport class JWKInvalid extends JOSEError {\n    constructor() {\n        super(...arguments);\n        this.code = 'ERR_JWK_INVALID';\n    }\n    static get code() {\n        return 'ERR_JWK_INVALID';\n    }\n}\nexport class JWKSInvalid extends JOSEError {\n    constructor() {\n        super(...arguments);\n        this.code = 'ERR_JWKS_INVALID';\n    }\n    static get code() {\n        return 'ERR_JWKS_INVALID';\n    }\n}\nexport class JWKSNoMatchingKey extends JOSEError {\n    constructor() {\n        super(...arguments);\n        this.code = 'ERR_JWKS_NO_MATCHING_KEY';\n        this.message = 'no applicable key found in the JSON Web Key Set';\n    }\n    static get code() {\n        return 'ERR_JWKS_NO_MATCHING_KEY';\n    }\n}\nexport class JWKSMultipleMatchingKeys extends JOSEError {\n    constructor() {\n        super(...arguments);\n        this.code = 'ERR_JWKS_MULTIPLE_MATCHING_KEYS';\n        this.message = 'multiple matching keys found in the JSON Web Key Set';\n    }\n    static get code() {\n        return 'ERR_JWKS_MULTIPLE_MATCHING_KEYS';\n    }\n}\nSymbol.asyncIterator;\nexport class JWKSTimeout extends JOSEError {\n    constructor() {\n        super(...arguments);\n        this.code = 'ERR_JWKS_TIMEOUT';\n        this.message = 'request timed out';\n    }\n    static get code() {\n        return 'ERR_JWKS_TIMEOUT';\n    }\n}\nexport class JWSSignatureVerificationFailed extends JOSEError {\n    constructor() {\n        super(...arguments);\n        this.code = 'ERR_JWS_SIGNATURE_VERIFICATION_FAILED';\n        this.message = 'signature verification failed';\n    }\n    static get code() {\n        return 'ERR_JWS_SIGNATURE_VERIFICATION_FAILED';\n    }\n}\n","import { JOSENotSupported } from '../util/errors.js';\nimport random from '../runtime/random.js';\nexport function bitLength(alg) {\n    switch (alg) {\n        case 'A128GCM':\n        case 'A128GCMKW':\n        case 'A192GCM':\n        case 'A192GCMKW':\n        case 'A256GCM':\n        case 'A256GCMKW':\n            return 96;\n        case 'A128CBC-HS256':\n        case 'A192CBC-HS384':\n        case 'A256CBC-HS512':\n            return 128;\n        default:\n            throw new JOSENotSupported(`Unsupported JWE Algorithm: ${alg}`);\n    }\n}\nexport default (alg) => random(new Uint8Array(bitLength(alg) >> 3));\n","import crypto from './webcrypto.js';\nexport default crypto.getRandomValues.bind(crypto);\n","import { JWEInvalid } from '../util/errors.js';\nconst checkCekLength = (cek, expected) => {\n    const actual = cek.byteLength << 3;\n    if (actual !== expected) {\n        throw new JWEInvalid(`Invalid Content Encryption Key length. Expected ${expected} bits, got ${actual} bits`);\n    }\n};\nexport default checkCekLength;\n","const timingSafeEqual = (a, b) => {\n    if (!(a instanceof Uint8Array)) {\n        throw new TypeError('First argument must be a buffer');\n    }\n    if (!(b instanceof Uint8Array)) {\n        throw new TypeError('Second argument must be a buffer');\n    }\n    if (a.length !== b.length) {\n        throw new TypeError('Input buffers must have the same length');\n    }\n    const len = a.length;\n    let out = 0;\n    let i = -1;\n    while (++i < len) {\n        out |= a[i] ^ b[i];\n    }\n    return out === 0;\n};\nexport default timingSafeEqual;\n","function unusable(name, prop = 'algorithm.name') {\n    return new TypeError(`CryptoKey does not support this operation, its ${prop} must be ${name}`);\n}\nfunction isAlgorithm(algorithm, name) {\n    return algorithm.name === name;\n}\nfunction getHashLength(hash) {\n    return parseInt(hash.name.slice(4), 10);\n}\nfunction getNamedCurve(alg) {\n    switch (alg) {\n        case 'ES256':\n            return 'P-256';\n        case 'ES384':\n            return 'P-384';\n        case 'ES512':\n            return 'P-521';\n        default:\n            throw new Error('unreachable');\n    }\n}\nfunction checkUsage(key, usages) {\n    if (usages.length && !usages.some((expected) => key.usages.includes(expected))) {\n        let msg = 'CryptoKey does not support this operation, its usages must include ';\n        if (usages.length > 2) {\n            const last = usages.pop();\n            msg += `one of ${usages.join(', ')}, or ${last}.`;\n        }\n        else if (usages.length === 2) {\n            msg += `one of ${usages[0]} or ${usages[1]}.`;\n        }\n        else {\n            msg += `${usages[0]}.`;\n        }\n        throw new TypeError(msg);\n    }\n}\nexport function checkSigCryptoKey(key, alg, ...usages) {\n    switch (alg) {\n        case 'HS256':\n        case 'HS384':\n        case 'HS512': {\n            if (!isAlgorithm(key.algorithm, 'HMAC'))\n                throw unusable('HMAC');\n            const expected = parseInt(alg.slice(2), 10);\n            const actual = getHashLength(key.algorithm.hash);\n            if (actual !== expected)\n                throw unusable(`SHA-${expected}`, 'algorithm.hash');\n            break;\n        }\n        case 'RS256':\n        case 'RS384':\n        case 'RS512': {\n            if (!isAlgorithm(key.algorithm, 'RSASSA-PKCS1-v1_5'))\n                throw unusable('RSASSA-PKCS1-v1_5');\n            const expected = parseInt(alg.slice(2), 10);\n            const actual = getHashLength(key.algorithm.hash);\n            if (actual !== expected)\n                throw unusable(`SHA-${expected}`, 'algorithm.hash');\n            break;\n        }\n        case 'PS256':\n        case 'PS384':\n        case 'PS512': {\n            if (!isAlgorithm(key.algorithm, 'RSA-PSS'))\n                throw unusable('RSA-PSS');\n            const expected = parseInt(alg.slice(2), 10);\n            const actual = getHashLength(key.algorithm.hash);\n            if (actual !== expected)\n                throw unusable(`SHA-${expected}`, 'algorithm.hash');\n            break;\n        }\n        case 'EdDSA': {\n            if (key.algorithm.name !== 'Ed25519' && key.algorithm.name !== 'Ed448') {\n                throw unusable('Ed25519 or Ed448');\n            }\n            break;\n        }\n        case 'ES256':\n        case 'ES384':\n        case 'ES512': {\n            if (!isAlgorithm(key.algorithm, 'ECDSA'))\n                throw unusable('ECDSA');\n            const expected = getNamedCurve(alg);\n            const actual = key.algorithm.namedCurve;\n            if (actual !== expected)\n                throw unusable(expected, 'algorithm.namedCurve');\n            break;\n        }\n        default:\n            throw new TypeError('CryptoKey does not support this operation');\n    }\n    checkUsage(key, usages);\n}\nexport function checkEncCryptoKey(key, alg, ...usages) {\n    switch (alg) {\n        case 'A128GCM':\n        case 'A192GCM':\n        case 'A256GCM': {\n            if (!isAlgorithm(key.algorithm, 'AES-GCM'))\n                throw unusable('AES-GCM');\n            const expected = parseInt(alg.slice(1, 4), 10);\n            const actual = key.algorithm.length;\n            if (actual !== expected)\n                throw unusable(expected, 'algorithm.length');\n            break;\n        }\n        case 'A128KW':\n        case 'A192KW':\n        case 'A256KW': {\n            if (!isAlgorithm(key.algorithm, 'AES-KW'))\n                throw unusable('AES-KW');\n            const expected = parseInt(alg.slice(1, 4), 10);\n            const actual = key.algorithm.length;\n            if (actual !== expected)\n                throw unusable(expected, 'algorithm.length');\n            break;\n        }\n        case 'ECDH': {\n            switch (key.algorithm.name) {\n                case 'ECDH':\n                case 'X25519':\n                case 'X448':\n                    break;\n                default:\n                    throw unusable('ECDH, X25519, or X448');\n            }\n            break;\n        }\n        case 'PBES2-HS256+A128KW':\n        case 'PBES2-HS384+A192KW':\n        case 'PBES2-HS512+A256KW':\n            if (!isAlgorithm(key.algorithm, 'PBKDF2'))\n                throw unusable('PBKDF2');\n            break;\n        case 'RSA-OAEP':\n        case 'RSA-OAEP-256':\n        case 'RSA-OAEP-384':\n        case 'RSA-OAEP-512': {\n            if (!isAlgorithm(key.algorithm, 'RSA-OAEP'))\n                throw unusable('RSA-OAEP');\n            const expected = parseInt(alg.slice(9), 10) || 1;\n            const actual = getHashLength(key.algorithm.hash);\n            if (actual !== expected)\n                throw unusable(`SHA-${expected}`, 'algorithm.hash');\n            break;\n        }\n        default:\n            throw new TypeError('CryptoKey does not support this operation');\n    }\n    checkUsage(key, usages);\n}\n","function message(msg, actual, ...types) {\n    if (types.length > 2) {\n        const last = types.pop();\n        msg += `one of type ${types.join(', ')}, or ${last}.`;\n    }\n    else if (types.length === 2) {\n        msg += `one of type ${types[0]} or ${types[1]}.`;\n    }\n    else {\n        msg += `of type ${types[0]}.`;\n    }\n    if (actual == null) {\n        msg += ` Received ${actual}`;\n    }\n    else if (typeof actual === 'function' && actual.name) {\n        msg += ` Received function ${actual.name}`;\n    }\n    else if (typeof actual === 'object' && actual != null) {\n        if (actual.constructor && actual.constructor.name) {\n            msg += ` Received an instance of ${actual.constructor.name}`;\n        }\n    }\n    return msg;\n}\nexport default (actual, ...types) => {\n    return message('Key must be ', actual, ...types);\n};\nexport function withAlg(alg, actual, ...types) {\n    return message(`Key for the ${alg} algorithm must be `, actual, ...types);\n}\n","import { isCryptoKey } from './webcrypto.js';\nexport default (key) => {\n    return isCryptoKey(key);\n};\nexport const types = ['CryptoKey'];\n","import { JOSENotSupported } from '../util/errors.js';\nexport const inflate = async () => {\n    throw new JOSENotSupported('JWE \"zip\" (Compression Algorithm) Header Parameter is not supported by your javascript runtime. You need to use the `inflateRaw` decrypt option to provide Inflate Raw implementation.');\n};\nexport const deflate = async () => {\n    throw new JOSENotSupported('JWE \"zip\" (Compression Algorithm) Header Parameter is not supported by your javascript runtime. You need to use the `deflateRaw` encrypt option to provide Deflate Raw implementation.');\n};\n","const isDisjoint = (...headers) => {\n    const sources = headers.filter(Boolean);\n    if (sources.length === 0 || sources.length === 1) {\n        return true;\n    }\n    let acc;\n    for (const header of sources) {\n        const parameters = Object.keys(header);\n        if (!acc || acc.size === 0) {\n            acc = new Set(parameters);\n            continue;\n        }\n        for (const parameter of parameters) {\n            if (acc.has(parameter)) {\n                return false;\n            }\n            acc.add(parameter);\n        }\n    }\n    return true;\n};\nexport default isDisjoint;\n","function isObjectLike(value) {\n    return typeof value === 'object' && value !== null;\n}\nexport default function isObject(input) {\n    if (!isObjectLike(input) || Object.prototype.toString.call(input) !== '[object Object]') {\n        return false;\n    }\n    if (Object.getPrototypeOf(input) === null) {\n        return true;\n    }\n    let proto = input;\n    while (Object.getPrototypeOf(proto) !== null) {\n        proto = Object.getPrototypeOf(proto);\n    }\n    return Object.getPrototypeOf(input) === proto;\n}\n","import { unwrap as aesKw } from '../runtime/aeskw.js';\nimport * as ECDH from '../runtime/ecdhes.js';\nimport { decrypt as pbes2Kw } from '../runtime/pbes2kw.js';\nimport { decrypt as rsaEs } from '../runtime/rsaes.js';\nimport { decode as base64url } from '../runtime/base64url.js';\nimport { JOSENotSupported, JWEInvalid } from '../util/errors.js';\nimport { bitLength as cekLength } from '../lib/cek.js';\nimport { importJWK } from '../key/import.js';\nimport checkKeyType from './check_key_type.js';\nimport isObject from './is_object.js';\nimport { unwrap as aesGcmKw } from './aesgcmkw.js';\nasync function decryptKeyManagement(alg, key, encryptedKey, joseHeader, options) {\n    checkKeyType(alg, key, 'decrypt');\n    switch (alg) {\n        case 'dir': {\n            if (encryptedKey !== undefined)\n                throw new JWEInvalid('Encountered unexpected JWE Encrypted Key');\n            return key;\n        }\n        case 'ECDH-ES':\n            if (encryptedKey !== undefined)\n                throw new JWEInvalid('Encountered unexpected JWE Encrypted Key');\n        case 'ECDH-ES+A128KW':\n        case 'ECDH-ES+A192KW':\n        case 'ECDH-ES+A256KW': {\n            if (!isObject(joseHeader.epk))\n                throw new JWEInvalid(`JOSE Header \"epk\" (Ephemeral Public Key) missing or invalid`);\n            if (!ECDH.ecdhAllowed(key))\n                throw new JOSENotSupported('ECDH with the provided key is not allowed or not supported by your javascript runtime');\n            const epk = await importJWK(joseHeader.epk, alg);\n            let partyUInfo;\n            let partyVInfo;\n            if (joseHeader.apu !== undefined) {\n                if (typeof joseHeader.apu !== 'string')\n                    throw new JWEInvalid(`JOSE Header \"apu\" (Agreement PartyUInfo) invalid`);\n                try {\n                    partyUInfo = base64url(joseHeader.apu);\n                }\n                catch (_a) {\n                    throw new JWEInvalid('Failed to base64url decode the apu');\n                }\n            }\n            if (joseHeader.apv !== undefined) {\n                if (typeof joseHeader.apv !== 'string')\n                    throw new JWEInvalid(`JOSE Header \"apv\" (Agreement PartyVInfo) invalid`);\n                try {\n                    partyVInfo = base64url(joseHeader.apv);\n                }\n                catch (_b) {\n                    throw new JWEInvalid('Failed to base64url decode the apv');\n                }\n            }\n            const sharedSecret = await ECDH.deriveKey(epk, key, alg === 'ECDH-ES' ? joseHeader.enc : alg, alg === 'ECDH-ES' ? cekLength(joseHeader.enc) : parseInt(alg.slice(-5, -2), 10), partyUInfo, partyVInfo);\n            if (alg === 'ECDH-ES')\n                return sharedSecret;\n            if (encryptedKey === undefined)\n                throw new JWEInvalid('JWE Encrypted Key missing');\n            return aesKw(alg.slice(-6), sharedSecret, encryptedKey);\n        }\n        case 'RSA1_5':\n        case 'RSA-OAEP':\n        case 'RSA-OAEP-256':\n        case 'RSA-OAEP-384':\n        case 'RSA-OAEP-512': {\n            if (encryptedKey === undefined)\n                throw new JWEInvalid('JWE Encrypted Key missing');\n            return rsaEs(alg, key, encryptedKey);\n        }\n        case 'PBES2-HS256+A128KW':\n        case 'PBES2-HS384+A192KW':\n        case 'PBES2-HS512+A256KW': {\n            if (encryptedKey === undefined)\n                throw new JWEInvalid('JWE Encrypted Key missing');\n            if (typeof joseHeader.p2c !== 'number')\n                throw new JWEInvalid(`JOSE Header \"p2c\" (PBES2 Count) missing or invalid`);\n            const p2cLimit = (options === null || options === void 0 ? void 0 : options.maxPBES2Count) || 10000;\n            if (joseHeader.p2c > p2cLimit)\n                throw new JWEInvalid(`JOSE Header \"p2c\" (PBES2 Count) out is of acceptable bounds`);\n            if (typeof joseHeader.p2s !== 'string')\n                throw new JWEInvalid(`JOSE Header \"p2s\" (PBES2 Salt) missing or invalid`);\n            let p2s;\n            try {\n                p2s = base64url(joseHeader.p2s);\n            }\n            catch (_c) {\n                throw new JWEInvalid('Failed to base64url decode the p2s');\n            }\n            return pbes2Kw(alg, key, encryptedKey, joseHeader.p2c, p2s);\n        }\n        case 'A128KW':\n        case 'A192KW':\n        case 'A256KW': {\n            if (encryptedKey === undefined)\n                throw new JWEInvalid('JWE Encrypted Key missing');\n            return aesKw(alg, key, encryptedKey);\n        }\n        case 'A128GCMKW':\n        case 'A192GCMKW':\n        case 'A256GCMKW': {\n            if (encryptedKey === undefined)\n                throw new JWEInvalid('JWE Encrypted Key missing');\n            if (typeof joseHeader.iv !== 'string')\n                throw new JWEInvalid(`JOSE Header \"iv\" (Initialization Vector) missing or invalid`);\n            if (typeof joseHeader.tag !== 'string')\n                throw new JWEInvalid(`JOSE Header \"tag\" (Authentication Tag) missing or invalid`);\n            let iv;\n            try {\n                iv = base64url(joseHeader.iv);\n            }\n            catch (_d) {\n                throw new JWEInvalid('Failed to base64url decode the iv');\n            }\n            let tag;\n            try {\n                tag = base64url(joseHeader.tag);\n            }\n            catch (_e) {\n                throw new JWEInvalid('Failed to base64url decode the tag');\n            }\n            return aesGcmKw(alg, key, encryptedKey, iv, tag);\n        }\n        default: {\n            throw new JOSENotSupported('Invalid or unsupported \"alg\" (JWE Algorithm) header value');\n        }\n    }\n}\nexport default decryptKeyManagement;\n","import bogusWebCrypto from './bogus.js';\nimport crypto, { isCryptoKey } from './webcrypto.js';\nimport { checkEncCryptoKey } from '../lib/crypto_key.js';\nimport invalidKeyInput from '../lib/invalid_key_input.js';\nimport { types } from './is_key_like.js';\nfunction checkKeySize(key, alg) {\n    if (key.algorithm.length !== parseInt(alg.slice(1, 4), 10)) {\n        throw new TypeError(`Invalid key size for alg: ${alg}`);\n    }\n}\nfunction getCryptoKey(key, alg, usage) {\n    if (isCryptoKey(key)) {\n        checkEncCryptoKey(key, alg, usage);\n        return key;\n    }\n    if (key instanceof Uint8Array) {\n        return crypto.subtle.importKey('raw', key, 'AES-KW', true, [usage]);\n    }\n    throw new TypeError(invalidKeyInput(key, ...types, 'Uint8Array'));\n}\nexport const wrap = async (alg, key, cek) => {\n    const cryptoKey = await getCryptoKey(key, alg, 'wrapKey');\n    checkKeySize(cryptoKey, alg);\n    const cryptoKeyCek = await crypto.subtle.importKey('raw', cek, ...bogusWebCrypto);\n    return new Uint8Array(await crypto.subtle.wrapKey('raw', cryptoKeyCek, cryptoKey, 'AES-KW'));\n};\nexport const unwrap = async (alg, key, encryptedKey) => {\n    const cryptoKey = await getCryptoKey(key, alg, 'unwrapKey');\n    checkKeySize(cryptoKey, alg);\n    const cryptoKeyCek = await crypto.subtle.unwrapKey('raw', encryptedKey, cryptoKey, 'AES-KW', ...bogusWebCrypto);\n    return new Uint8Array(await crypto.subtle.exportKey('raw', cryptoKeyCek));\n};\n","const bogusWebCrypto = [\n    { hash: 'SHA-256', name: 'HMAC' },\n    true,\n    ['sign'],\n];\nexport default bogusWebCrypto;\n","import { encoder, concat, uint32be, lengthAndInput, concatKdf } from '../lib/buffer_utils.js';\nimport crypto, { isCryptoKey } from './webcrypto.js';\nimport { checkEncCryptoKey } from '../lib/crypto_key.js';\nimport invalidKeyInput from '../lib/invalid_key_input.js';\nimport { types } from './is_key_like.js';\nexport async function deriveKey(publicKey, privateKey, algorithm, keyLength, apu = new Uint8Array(0), apv = new Uint8Array(0)) {\n    if (!isCryptoKey(publicKey)) {\n        throw new TypeError(invalidKeyInput(publicKey, ...types));\n    }\n    checkEncCryptoKey(publicKey, 'ECDH');\n    if (!isCryptoKey(privateKey)) {\n        throw new TypeError(invalidKeyInput(privateKey, ...types));\n    }\n    checkEncCryptoKey(privateKey, 'ECDH', 'deriveBits');\n    const value = concat(lengthAndInput(encoder.encode(algorithm)), lengthAndInput(apu), lengthAndInput(apv), uint32be(keyLength));\n    let length;\n    if (publicKey.algorithm.name === 'X25519') {\n        length = 256;\n    }\n    else if (publicKey.algorithm.name === 'X448') {\n        length = 448;\n    }\n    else {\n        length =\n            Math.ceil(parseInt(publicKey.algorithm.namedCurve.substr(-3), 10) / 8) << 3;\n    }\n    const sharedSecret = new Uint8Array(await crypto.subtle.deriveBits({\n        name: publicKey.algorithm.name,\n        public: publicKey,\n    }, privateKey, length));\n    return concatKdf(sharedSecret, keyLength, value);\n}\nexport async function generateEpk(key) {\n    if (!isCryptoKey(key)) {\n        throw new TypeError(invalidKeyInput(key, ...types));\n    }\n    return crypto.subtle.generateKey(key.algorithm, true, ['deriveBits']);\n}\nexport function ecdhAllowed(key) {\n    if (!isCryptoKey(key)) {\n        throw new TypeError(invalidKeyInput(key, ...types));\n    }\n    return (['P-256', 'P-384', 'P-521'].includes(key.algorithm.namedCurve) ||\n        key.algorithm.name === 'X25519' ||\n        key.algorithm.name === 'X448');\n}\n","import random from './random.js';\nimport { p2s as concatSalt } from '../lib/buffer_utils.js';\nimport { encode as base64url } from './base64url.js';\nimport { wrap, unwrap } from './aeskw.js';\nimport checkP2s from '../lib/check_p2s.js';\nimport crypto, { isCryptoKey } from './webcrypto.js';\nimport { checkEncCryptoKey } from '../lib/crypto_key.js';\nimport invalidKeyInput from '../lib/invalid_key_input.js';\nimport { types } from './is_key_like.js';\nfunction getCryptoKey(key, alg) {\n    if (key instanceof Uint8Array) {\n        return crypto.subtle.importKey('raw', key, 'PBKDF2', false, ['deriveBits']);\n    }\n    if (isCryptoKey(key)) {\n        checkEncCryptoKey(key, alg, 'deriveBits', 'deriveKey');\n        return key;\n    }\n    throw new TypeError(invalidKeyInput(key, ...types, 'Uint8Array'));\n}\nasync function deriveKey(p2s, alg, p2c, key) {\n    checkP2s(p2s);\n    const salt = concatSalt(alg, p2s);\n    const keylen = parseInt(alg.slice(13, 16), 10);\n    const subtleAlg = {\n        hash: `SHA-${alg.slice(8, 11)}`,\n        iterations: p2c,\n        name: 'PBKDF2',\n        salt,\n    };\n    const wrapAlg = {\n        length: keylen,\n        name: 'AES-KW',\n    };\n    const cryptoKey = await getCryptoKey(key, alg);\n    if (cryptoKey.usages.includes('deriveBits')) {\n        return new Uint8Array(await crypto.subtle.deriveBits(subtleAlg, cryptoKey, keylen));\n    }\n    if (cryptoKey.usages.includes('deriveKey')) {\n        return crypto.subtle.deriveKey(subtleAlg, cryptoKey, wrapAlg, false, ['wrapKey', 'unwrapKey']);\n    }\n    throw new TypeError('PBKDF2 key \"usages\" must include \"deriveBits\" or \"deriveKey\"');\n}\nexport const encrypt = async (alg, key, cek, p2c = 2048, p2s = random(new Uint8Array(16))) => {\n    const derived = await deriveKey(p2s, alg, p2c, key);\n    const encryptedKey = await wrap(alg.slice(-6), derived, cek);\n    return { encryptedKey, p2c, p2s: base64url(p2s) };\n};\nexport const decrypt = async (alg, key, encryptedKey, p2c, p2s) => {\n    const derived = await deriveKey(p2s, alg, p2c, key);\n    return unwrap(alg.slice(-6), derived, encryptedKey);\n};\n","import { JWEInvalid } from '../util/errors.js';\nexport default function checkP2s(p2s) {\n    if (!(p2s instanceof Uint8Array) || p2s.length < 8) {\n        throw new JWEInvalid('PBES2 Salt Input must be 8 or more octets');\n    }\n}\n","import subtleAlgorithm from './subtle_rsaes.js';\nimport bogusWebCrypto from './bogus.js';\nimport crypto, { isCryptoKey } from './webcrypto.js';\nimport { checkEncCryptoKey } from '../lib/crypto_key.js';\nimport checkKeyLength from './check_key_length.js';\nimport invalidKeyInput from '../lib/invalid_key_input.js';\nimport { types } from './is_key_like.js';\nexport const encrypt = async (alg, key, cek) => {\n    if (!isCryptoKey(key)) {\n        throw new TypeError(invalidKeyInput(key, ...types));\n    }\n    checkEncCryptoKey(key, alg, 'encrypt', 'wrapKey');\n    checkKeyLength(alg, key);\n    if (key.usages.includes('encrypt')) {\n        return new Uint8Array(await crypto.subtle.encrypt(subtleAlgorithm(alg), key, cek));\n    }\n    if (key.usages.includes('wrapKey')) {\n        const cryptoKeyCek = await crypto.subtle.importKey('raw', cek, ...bogusWebCrypto);\n        return new Uint8Array(await crypto.subtle.wrapKey('raw', cryptoKeyCek, key, subtleAlgorithm(alg)));\n    }\n    throw new TypeError('RSA-OAEP key \"usages\" must include \"encrypt\" or \"wrapKey\" for this operation');\n};\nexport const decrypt = async (alg, key, encryptedKey) => {\n    if (!isCryptoKey(key)) {\n        throw new TypeError(invalidKeyInput(key, ...types));\n    }\n    checkEncCryptoKey(key, alg, 'decrypt', 'unwrapKey');\n    checkKeyLength(alg, key);\n    if (key.usages.includes('decrypt')) {\n        return new Uint8Array(await crypto.subtle.decrypt(subtleAlgorithm(alg), key, encryptedKey));\n    }\n    if (key.usages.includes('unwrapKey')) {\n        const cryptoKeyCek = await crypto.subtle.unwrapKey('raw', encryptedKey, key, subtleAlgorithm(alg), ...bogusWebCrypto);\n        return new Uint8Array(await crypto.subtle.exportKey('raw', cryptoKeyCek));\n    }\n    throw new TypeError('RSA-OAEP key \"usages\" must include \"decrypt\" or \"unwrapKey\" for this operation');\n};\n","import { JOSENotSupported } from '../util/errors.js';\nexport default function subtleRsaEs(alg) {\n    switch (alg) {\n        case 'RSA-OAEP':\n        case 'RSA-OAEP-256':\n        case 'RSA-OAEP-384':\n        case 'RSA-OAEP-512':\n            return 'RSA-OAEP';\n        default:\n            throw new JOSENotSupported(`alg ${alg} is not supported either by JOSE or your javascript runtime`);\n    }\n}\n","export default (alg, key) => {\n    if (alg.startsWith('RS') || alg.startsWith('PS')) {\n        const { modulusLength } = key.algorithm;\n        if (typeof modulusLength !== 'number' || modulusLength < 2048) {\n            throw new TypeError(`${alg} requires key modulusLength to be 2048 bits or larger`);\n        }\n    }\n};\n","import { JOSENotSupported } from '../util/errors.js';\nimport random from '../runtime/random.js';\nexport function bitLength(alg) {\n    switch (alg) {\n        case 'A128GCM':\n            return 128;\n        case 'A192GCM':\n            return 192;\n        case 'A256GCM':\n        case 'A128CBC-HS256':\n            return 256;\n        case 'A192CBC-HS384':\n            return 384;\n        case 'A256CBC-HS512':\n            return 512;\n        default:\n            throw new JOSENotSupported(`Unsupported JWE Algorithm: ${alg}`);\n    }\n}\nexport default (alg) => random(new Uint8Array(bitLength(alg) >> 3));\n","import { decode as decodeBase64URL } from '../runtime/base64url.js';\nimport { fromSPKI, fromPKCS8, fromX509 } from '../runtime/asn1.js';\nimport asKeyObject from '../runtime/jwk_to_key.js';\nimport { JOSENotSupported } from '../util/errors.js';\nimport isObject from '../lib/is_object.js';\nexport async function importSPKI(spki, alg, options) {\n    if (typeof spki !== 'string' || spki.indexOf('-----BEGIN PUBLIC KEY-----') !== 0) {\n        throw new TypeError('\"spki\" must be SPKI formatted string');\n    }\n    return fromSPKI(spki, alg, options);\n}\nexport async function importX509(x509, alg, options) {\n    if (typeof x509 !== 'string' || x509.indexOf('-----BEGIN CERTIFICATE-----') !== 0) {\n        throw new TypeError('\"x509\" must be X.509 formatted string');\n    }\n    return fromX509(x509, alg, options);\n}\nexport async function importPKCS8(pkcs8, alg, options) {\n    if (typeof pkcs8 !== 'string' || pkcs8.indexOf('-----BEGIN PRIVATE KEY-----') !== 0) {\n        throw new TypeError('\"pkcs8\" must be PKCS#8 formatted string');\n    }\n    return fromPKCS8(pkcs8, alg, options);\n}\nexport async function importJWK(jwk, alg, octAsKeyObject) {\n    var _a;\n    if (!isObject(jwk)) {\n        throw new TypeError('JWK must be an object');\n    }\n    alg || (alg = jwk.alg);\n    switch (jwk.kty) {\n        case 'oct':\n            if (typeof jwk.k !== 'string' || !jwk.k) {\n                throw new TypeError('missing \"k\" (Key Value) Parameter value');\n            }\n            octAsKeyObject !== null && octAsKeyObject !== void 0 ? octAsKeyObject : (octAsKeyObject = jwk.ext !== true);\n            if (octAsKeyObject) {\n                return asKeyObject({ ...jwk, alg, ext: (_a = jwk.ext) !== null && _a !== void 0 ? _a : false });\n            }\n            return decodeBase64URL(jwk.k);\n        case 'RSA':\n            if (jwk.oth !== undefined) {\n                throw new JOSENotSupported('RSA JWK \"oth\" (Other Primes Info) Parameter value is not supported');\n            }\n        case 'EC':\n        case 'OKP':\n            return asKeyObject({ ...jwk, alg });\n        default:\n            throw new JOSENotSupported('Unsupported \"kty\" (Key Type) Parameter value');\n    }\n}\n","import crypto, { isCryptoKey } from './webcrypto.js';\nimport invalidKeyInput from '../lib/invalid_key_input.js';\nimport { encodeBase64, decodeBase64 } from './base64url.js';\nimport formatPEM from '../lib/format_pem.js';\nimport { JOSENotSupported } from '../util/errors.js';\nimport { types } from './is_key_like.js';\nconst genericExport = async (keyType, keyFormat, key) => {\n    if (!isCryptoKey(key)) {\n        throw new TypeError(invalidKeyInput(key, ...types));\n    }\n    if (!key.extractable) {\n        throw new TypeError('CryptoKey is not extractable');\n    }\n    if (key.type !== keyType) {\n        throw new TypeError(`key is not a ${keyType} key`);\n    }\n    return formatPEM(encodeBase64(new Uint8Array(await crypto.subtle.exportKey(keyFormat, key))), `${keyType.toUpperCase()} KEY`);\n};\nexport const toSPKI = (key) => {\n    return genericExport('public', 'spki', key);\n};\nexport const toPKCS8 = (key) => {\n    return genericExport('private', 'pkcs8', key);\n};\nconst findOid = (keyData, oid, from = 0) => {\n    if (from === 0) {\n        oid.unshift(oid.length);\n        oid.unshift(0x06);\n    }\n    let i = keyData.indexOf(oid[0], from);\n    if (i === -1)\n        return false;\n    const sub = keyData.subarray(i, i + oid.length);\n    if (sub.length !== oid.length)\n        return false;\n    return sub.every((value, index) => value === oid[index]) || findOid(keyData, oid, i + 1);\n};\nconst getNamedCurve = (keyData) => {\n    switch (true) {\n        case findOid(keyData, [0x2a, 0x86, 0x48, 0xce, 0x3d, 0x03, 0x01, 0x07]):\n            return 'P-256';\n        case findOid(keyData, [0x2b, 0x81, 0x04, 0x00, 0x22]):\n            return 'P-384';\n        case findOid(keyData, [0x2b, 0x81, 0x04, 0x00, 0x23]):\n            return 'P-521';\n        case findOid(keyData, [0x2b, 0x65, 0x6e]):\n            return 'X25519';\n        case findOid(keyData, [0x2b, 0x65, 0x6f]):\n            return 'X448';\n        case findOid(keyData, [0x2b, 0x65, 0x70]):\n            return 'Ed25519';\n        case findOid(keyData, [0x2b, 0x65, 0x71]):\n            return 'Ed448';\n        default:\n            throw new JOSENotSupported('Invalid or unsupported EC Key Curve or OKP Key Sub Type');\n    }\n};\nconst genericImport = async (replace, keyFormat, pem, alg, options) => {\n    var _a;\n    let algorithm;\n    let keyUsages;\n    const keyData = new Uint8Array(atob(pem.replace(replace, ''))\n        .split('')\n        .map((c) => c.charCodeAt(0)));\n    const isPublic = keyFormat === 'spki';\n    switch (alg) {\n        case 'PS256':\n        case 'PS384':\n        case 'PS512':\n            algorithm = { name: 'RSA-PSS', hash: `SHA-${alg.slice(-3)}` };\n            keyUsages = isPublic ? ['verify'] : ['sign'];\n            break;\n        case 'RS256':\n        case 'RS384':\n        case 'RS512':\n            algorithm = { name: 'RSASSA-PKCS1-v1_5', hash: `SHA-${alg.slice(-3)}` };\n            keyUsages = isPublic ? ['verify'] : ['sign'];\n            break;\n        case 'RSA-OAEP':\n        case 'RSA-OAEP-256':\n        case 'RSA-OAEP-384':\n        case 'RSA-OAEP-512':\n            algorithm = {\n                name: 'RSA-OAEP',\n                hash: `SHA-${parseInt(alg.slice(-3), 10) || 1}`,\n            };\n            keyUsages = isPublic ? ['encrypt', 'wrapKey'] : ['decrypt', 'unwrapKey'];\n            break;\n        case 'ES256':\n            algorithm = { name: 'ECDSA', namedCurve: 'P-256' };\n            keyUsages = isPublic ? ['verify'] : ['sign'];\n            break;\n        case 'ES384':\n            algorithm = { name: 'ECDSA', namedCurve: 'P-384' };\n            keyUsages = isPublic ? ['verify'] : ['sign'];\n            break;\n        case 'ES512':\n            algorithm = { name: 'ECDSA', namedCurve: 'P-521' };\n            keyUsages = isPublic ? ['verify'] : ['sign'];\n            break;\n        case 'ECDH-ES':\n        case 'ECDH-ES+A128KW':\n        case 'ECDH-ES+A192KW':\n        case 'ECDH-ES+A256KW': {\n            const namedCurve = getNamedCurve(keyData);\n            algorithm = namedCurve.startsWith('P-') ? { name: 'ECDH', namedCurve } : { name: namedCurve };\n            keyUsages = isPublic ? [] : ['deriveBits'];\n            break;\n        }\n        case 'EdDSA':\n            algorithm = { name: getNamedCurve(keyData) };\n            keyUsages = isPublic ? ['verify'] : ['sign'];\n            break;\n        default:\n            throw new JOSENotSupported('Invalid or unsupported \"alg\" (Algorithm) value');\n    }\n    return crypto.subtle.importKey(keyFormat, keyData, algorithm, (_a = options === null || options === void 0 ? void 0 : options.extractable) !== null && _a !== void 0 ? _a : false, keyUsages);\n};\nexport const fromPKCS8 = (pem, alg, options) => {\n    return genericImport(/(?:-----(?:BEGIN|END) PRIVATE KEY-----|\\s)/g, 'pkcs8', pem, alg, options);\n};\nexport const fromSPKI = (pem, alg, options) => {\n    return genericImport(/(?:-----(?:BEGIN|END) PUBLIC KEY-----|\\s)/g, 'spki', pem, alg, options);\n};\nfunction getElement(seq) {\n    let result = [];\n    let next = 0;\n    while (next < seq.length) {\n        let nextPart = parseElement(seq.subarray(next));\n        result.push(nextPart);\n        next += nextPart.byteLength;\n    }\n    return result;\n}\nfunction parseElement(bytes) {\n    let position = 0;\n    let tag = bytes[0] & 0x1f;\n    position++;\n    if (tag === 0x1f) {\n        tag = 0;\n        while (bytes[position] >= 0x80) {\n            tag = tag * 128 + bytes[position] - 0x80;\n            position++;\n        }\n        tag = tag * 128 + bytes[position] - 0x80;\n        position++;\n    }\n    let length = 0;\n    if (bytes[position] < 0x80) {\n        length = bytes[position];\n        position++;\n    }\n    else if (length === 0x80) {\n        length = 0;\n        while (bytes[position + length] !== 0 || bytes[position + length + 1] !== 0) {\n            if (length > bytes.byteLength) {\n                throw new TypeError('invalid indefinite form length');\n            }\n            length++;\n        }\n        const byteLength = position + length + 2;\n        return {\n            byteLength,\n            contents: bytes.subarray(position, position + length),\n            raw: bytes.subarray(0, byteLength),\n        };\n    }\n    else {\n        let numberOfDigits = bytes[position] & 0x7f;\n        position++;\n        length = 0;\n        for (let i = 0; i < numberOfDigits; i++) {\n            length = length * 256 + bytes[position];\n            position++;\n        }\n    }\n    const byteLength = position + length;\n    return {\n        byteLength,\n        contents: bytes.subarray(position, byteLength),\n        raw: bytes.subarray(0, byteLength),\n    };\n}\nfunction spkiFromX509(buf) {\n    const tbsCertificate = getElement(getElement(parseElement(buf).contents)[0].contents);\n    return encodeBase64(tbsCertificate[tbsCertificate[0].raw[0] === 0xa0 ? 6 : 5].raw);\n}\nfunction getSPKI(x509) {\n    const pem = x509.replace(/(?:-----(?:BEGIN|END) CERTIFICATE-----|\\s)/g, '');\n    const raw = decodeBase64(pem);\n    return formatPEM(spkiFromX509(raw), 'PUBLIC KEY');\n}\nexport const fromX509 = (pem, alg, options) => {\n    let spki;\n    try {\n        spki = getSPKI(pem);\n    }\n    catch (cause) {\n        throw new TypeError('Failed to parse the X.509 certificate', { cause });\n    }\n    return fromSPKI(spki, alg, options);\n};\n","export default (b64, descriptor) => {\n    const newlined = (b64.match(/.{1,64}/g) || []).join('\\n');\n    return `-----BEGIN ${descriptor}-----\\n${newlined}\\n-----END ${descriptor}-----`;\n};\n","import crypto from './webcrypto.js';\nimport { JOSENotSupported } from '../util/errors.js';\nimport { decode as base64url } from './base64url.js';\nfunction subtleMapping(jwk) {\n    let algorithm;\n    let keyUsages;\n    switch (jwk.kty) {\n        case 'oct': {\n            switch (jwk.alg) {\n                case 'HS256':\n                case 'HS384':\n                case 'HS512':\n                    algorithm = { name: 'HMAC', hash: `SHA-${jwk.alg.slice(-3)}` };\n                    keyUsages = ['sign', 'verify'];\n                    break;\n                case 'A128CBC-HS256':\n                case 'A192CBC-HS384':\n                case 'A256CBC-HS512':\n                    throw new JOSENotSupported(`${jwk.alg} keys cannot be imported as CryptoKey instances`);\n                case 'A128GCM':\n                case 'A192GCM':\n                case 'A256GCM':\n                case 'A128GCMKW':\n                case 'A192GCMKW':\n                case 'A256GCMKW':\n                    algorithm = { name: 'AES-GCM' };\n                    keyUsages = ['encrypt', 'decrypt'];\n                    break;\n                case 'A128KW':\n                case 'A192KW':\n                case 'A256KW':\n                    algorithm = { name: 'AES-KW' };\n                    keyUsages = ['wrapKey', 'unwrapKey'];\n                    break;\n                case 'PBES2-HS256+A128KW':\n                case 'PBES2-HS384+A192KW':\n                case 'PBES2-HS512+A256KW':\n                    algorithm = { name: 'PBKDF2' };\n                    keyUsages = ['deriveBits'];\n                    break;\n                default:\n                    throw new JOSENotSupported('Invalid or unsupported JWK \"alg\" (Algorithm) Parameter value');\n            }\n            break;\n        }\n        case 'RSA': {\n            switch (jwk.alg) {\n                case 'PS256':\n                case 'PS384':\n                case 'PS512':\n                    algorithm = { name: 'RSA-PSS', hash: `SHA-${jwk.alg.slice(-3)}` };\n                    keyUsages = jwk.d ? ['sign'] : ['verify'];\n                    break;\n                case 'RS256':\n                case 'RS384':\n                case 'RS512':\n                    algorithm = { name: 'RSASSA-PKCS1-v1_5', hash: `SHA-${jwk.alg.slice(-3)}` };\n                    keyUsages = jwk.d ? ['sign'] : ['verify'];\n                    break;\n                case 'RSA-OAEP':\n                case 'RSA-OAEP-256':\n                case 'RSA-OAEP-384':\n                case 'RSA-OAEP-512':\n                    algorithm = {\n                        name: 'RSA-OAEP',\n                        hash: `SHA-${parseInt(jwk.alg.slice(-3), 10) || 1}`,\n                    };\n                    keyUsages = jwk.d ? ['decrypt', 'unwrapKey'] : ['encrypt', 'wrapKey'];\n                    break;\n                default:\n                    throw new JOSENotSupported('Invalid or unsupported JWK \"alg\" (Algorithm) Parameter value');\n            }\n            break;\n        }\n        case 'EC': {\n            switch (jwk.alg) {\n                case 'ES256':\n                    algorithm = { name: 'ECDSA', namedCurve: 'P-256' };\n                    keyUsages = jwk.d ? ['sign'] : ['verify'];\n                    break;\n                case 'ES384':\n                    algorithm = { name: 'ECDSA', namedCurve: 'P-384' };\n                    keyUsages = jwk.d ? ['sign'] : ['verify'];\n                    break;\n                case 'ES512':\n                    algorithm = { name: 'ECDSA', namedCurve: 'P-521' };\n                    keyUsages = jwk.d ? ['sign'] : ['verify'];\n                    break;\n                case 'ECDH-ES':\n                case 'ECDH-ES+A128KW':\n                case 'ECDH-ES+A192KW':\n                case 'ECDH-ES+A256KW':\n                    algorithm = { name: 'ECDH', namedCurve: jwk.crv };\n                    keyUsages = jwk.d ? ['deriveBits'] : [];\n                    break;\n                default:\n                    throw new JOSENotSupported('Invalid or unsupported JWK \"alg\" (Algorithm) Parameter value');\n            }\n            break;\n        }\n        case 'OKP': {\n            switch (jwk.alg) {\n                case 'EdDSA':\n                    algorithm = { name: jwk.crv };\n                    keyUsages = jwk.d ? ['sign'] : ['verify'];\n                    break;\n                case 'ECDH-ES':\n                case 'ECDH-ES+A128KW':\n                case 'ECDH-ES+A192KW':\n                case 'ECDH-ES+A256KW':\n                    algorithm = { name: jwk.crv };\n                    keyUsages = jwk.d ? ['deriveBits'] : [];\n                    break;\n                default:\n                    throw new JOSENotSupported('Invalid or unsupported JWK \"alg\" (Algorithm) Parameter value');\n            }\n            break;\n        }\n        default:\n            throw new JOSENotSupported('Invalid or unsupported JWK \"kty\" (Key Type) Parameter value');\n    }\n    return { algorithm, keyUsages };\n}\nconst parse = async (jwk) => {\n    var _a, _b;\n    if (!jwk.alg) {\n        throw new TypeError('\"alg\" argument is required when \"jwk.alg\" is not present');\n    }\n    const { algorithm, keyUsages } = subtleMapping(jwk);\n    const rest = [\n        algorithm,\n        (_a = jwk.ext) !== null && _a !== void 0 ? _a : false,\n        (_b = jwk.key_ops) !== null && _b !== void 0 ? _b : keyUsages,\n    ];\n    if (algorithm.name === 'PBKDF2') {\n        return crypto.subtle.importKey('raw', base64url(jwk.k), ...rest);\n    }\n    const keyData = { ...jwk };\n    delete keyData.alg;\n    delete keyData.use;\n    return crypto.subtle.importKey('jwk', keyData, ...rest);\n};\nexport default parse;\n","import { withAlg as invalidKeyInput } from './invalid_key_input.js';\nimport isKeyLike, { types } from '../runtime/is_key_like.js';\nconst symmetricTypeCheck = (alg, key) => {\n    if (key instanceof Uint8Array)\n        return;\n    if (!isKeyLike(key)) {\n        throw new TypeError(invalidKeyInput(alg, key, ...types, 'Uint8Array'));\n    }\n    if (key.type !== 'secret') {\n        throw new TypeError(`${types.join(' or ')} instances for symmetric algorithms must be of type \"secret\"`);\n    }\n};\nconst asymmetricTypeCheck = (alg, key, usage) => {\n    if (!isKeyLike(key)) {\n        throw new TypeError(invalidKeyInput(alg, key, ...types));\n    }\n    if (key.type === 'secret') {\n        throw new TypeError(`${types.join(' or ')} instances for asymmetric algorithms must not be of type \"secret\"`);\n    }\n    if (usage === 'sign' && key.type === 'public') {\n        throw new TypeError(`${types.join(' or ')} instances for asymmetric algorithm signing must be of type \"private\"`);\n    }\n    if (usage === 'decrypt' && key.type === 'public') {\n        throw new TypeError(`${types.join(' or ')} instances for asymmetric algorithm decryption must be of type \"private\"`);\n    }\n    if (key.algorithm && usage === 'verify' && key.type === 'private') {\n        throw new TypeError(`${types.join(' or ')} instances for asymmetric algorithm verifying must be of type \"public\"`);\n    }\n    if (key.algorithm && usage === 'encrypt' && key.type === 'private') {\n        throw new TypeError(`${types.join(' or ')} instances for asymmetric algorithm encryption must be of type \"public\"`);\n    }\n};\nconst checkKeyType = (alg, key, usage) => {\n    const symmetric = alg.startsWith('HS') ||\n        alg === 'dir' ||\n        alg.startsWith('PBES2') ||\n        /^A\\d{3}(?:GCM)?KW$/.test(alg);\n    if (symmetric) {\n        symmetricTypeCheck(alg, key);\n    }\n    else {\n        asymmetricTypeCheck(alg, key, usage);\n    }\n};\nexport default checkKeyType;\n","import encrypt from '../runtime/encrypt.js';\nimport decrypt from '../runtime/decrypt.js';\nimport generateIv from './iv.js';\nimport { encode as base64url } from '../runtime/base64url.js';\nexport async function wrap(alg, key, cek, iv) {\n    const jweAlgorithm = alg.slice(0, 7);\n    iv || (iv = generateIv(jweAlgorithm));\n    const { ciphertext: encryptedKey, tag } = await encrypt(jweAlgorithm, cek, key, iv, new Uint8Array(0));\n    return { encryptedKey, iv: base64url(iv), tag: base64url(tag) };\n}\nexport async function unwrap(alg, key, encryptedKey, iv, tag) {\n    const jweAlgorithm = alg.slice(0, 7);\n    return decrypt(jweAlgorithm, key, encryptedKey, iv, tag, new Uint8Array(0));\n}\n","import { concat, uint64be } from '../lib/buffer_utils.js';\nimport checkIvLength from '../lib/check_iv_length.js';\nimport checkCekLength from './check_cek_length.js';\nimport crypto, { isCryptoKey } from './webcrypto.js';\nimport { checkEncCryptoKey } from '../lib/crypto_key.js';\nimport invalidKeyInput from '../lib/invalid_key_input.js';\nimport { JOSENotSupported } from '../util/errors.js';\nimport { types } from './is_key_like.js';\nasync function cbcEncrypt(enc, plaintext, cek, iv, aad) {\n    if (!(cek instanceof Uint8Array)) {\n        throw new TypeError(invalidKeyInput(cek, 'Uint8Array'));\n    }\n    const keySize = parseInt(enc.slice(1, 4), 10);\n    const encKey = await crypto.subtle.importKey('raw', cek.subarray(keySize >> 3), 'AES-CBC', false, ['encrypt']);\n    const macKey = await crypto.subtle.importKey('raw', cek.subarray(0, keySize >> 3), {\n        hash: `SHA-${keySize << 1}`,\n        name: 'HMAC',\n    }, false, ['sign']);\n    const ciphertext = new Uint8Array(await crypto.subtle.encrypt({\n        iv,\n        name: 'AES-CBC',\n    }, encKey, plaintext));\n    const macData = concat(aad, iv, ciphertext, uint64be(aad.length << 3));\n    const tag = new Uint8Array((await crypto.subtle.sign('HMAC', macKey, macData)).slice(0, keySize >> 3));\n    return { ciphertext, tag };\n}\nasync function gcmEncrypt(enc, plaintext, cek, iv, aad) {\n    let encKey;\n    if (cek instanceof Uint8Array) {\n        encKey = await crypto.subtle.importKey('raw', cek, 'AES-GCM', false, ['encrypt']);\n    }\n    else {\n        checkEncCryptoKey(cek, enc, 'encrypt');\n        encKey = cek;\n    }\n    const encrypted = new Uint8Array(await crypto.subtle.encrypt({\n        additionalData: aad,\n        iv,\n        name: 'AES-GCM',\n        tagLength: 128,\n    }, encKey, plaintext));\n    const tag = encrypted.slice(-16);\n    const ciphertext = encrypted.slice(0, -16);\n    return { ciphertext, tag };\n}\nconst encrypt = async (enc, plaintext, cek, iv, aad) => {\n    if (!isCryptoKey(cek) && !(cek instanceof Uint8Array)) {\n        throw new TypeError(invalidKeyInput(cek, ...types, 'Uint8Array'));\n    }\n    checkIvLength(enc, iv);\n    switch (enc) {\n        case 'A128CBC-HS256':\n        case 'A192CBC-HS384':\n        case 'A256CBC-HS512':\n            if (cek instanceof Uint8Array)\n                checkCekLength(cek, parseInt(enc.slice(-3), 10));\n            return cbcEncrypt(enc, plaintext, cek, iv, aad);\n        case 'A128GCM':\n        case 'A192GCM':\n        case 'A256GCM':\n            if (cek instanceof Uint8Array)\n                checkCekLength(cek, parseInt(enc.slice(1, 4), 10));\n            return gcmEncrypt(enc, plaintext, cek, iv, aad);\n        default:\n            throw new JOSENotSupported('Unsupported JWE Content Encryption Algorithm');\n    }\n};\nexport default encrypt;\n","import { JOSENotSupported } from '../util/errors.js';\nfunction validateCrit(Err, recognizedDefault, recognizedOption, protectedHeader, joseHeader) {\n    if (joseHeader.crit !== undefined && protectedHeader.crit === undefined) {\n        throw new Err('\"crit\" (Critical) Header Parameter MUST be integrity protected');\n    }\n    if (!protectedHeader || protectedHeader.crit === undefined) {\n        return new Set();\n    }\n    if (!Array.isArray(protectedHeader.crit) ||\n        protectedHeader.crit.length === 0 ||\n        protectedHeader.crit.some((input) => typeof input !== 'string' || input.length === 0)) {\n        throw new Err('\"crit\" (Critical) Header Parameter MUST be an array of non-empty strings when present');\n    }\n    let recognized;\n    if (recognizedOption !== undefined) {\n        recognized = new Map([...Object.entries(recognizedOption), ...recognizedDefault.entries()]);\n    }\n    else {\n        recognized = recognizedDefault;\n    }\n    for (const parameter of protectedHeader.crit) {\n        if (!recognized.has(parameter)) {\n            throw new JOSENotSupported(`Extension Header Parameter \"${parameter}\" is not recognized`);\n        }\n        if (joseHeader[parameter] === undefined) {\n            throw new Err(`Extension Header Parameter \"${parameter}\" is missing`);\n        }\n        else if (recognized.get(parameter) && protectedHeader[parameter] === undefined) {\n            throw new Err(`Extension Header Parameter \"${parameter}\" MUST be integrity protected`);\n        }\n    }\n    return new Set(protectedHeader.crit);\n}\nexport default validateCrit;\n","const validateAlgorithms = (option, algorithms) => {\n    if (algorithms !== undefined &&\n        (!Array.isArray(algorithms) || algorithms.some((s) => typeof s !== 'string'))) {\n        throw new TypeError(`\"${option}\" option must be an array of strings`);\n    }\n    if (!algorithms) {\n        return undefined;\n    }\n    return new Set(algorithms);\n};\nexport default validateAlgorithms;\n","import { flattenedDecrypt } from '../flattened/decrypt.js';\nimport { JWEDecryptionFailed, JWEInvalid } from '../../util/errors.js';\nimport isObject from '../../lib/is_object.js';\nexport async function generalDecrypt(jwe, key, options) {\n    if (!isObject(jwe)) {\n        throw new JWEInvalid('General JWE must be an object');\n    }\n    if (!Array.isArray(jwe.recipients) || !jwe.recipients.every(isObject)) {\n        throw new JWEInvalid('JWE Recipients missing or incorrect type');\n    }\n    if (!jwe.recipients.length) {\n        throw new JWEInvalid('JWE Recipients has no members');\n    }\n    for (const recipient of jwe.recipients) {\n        try {\n            return await flattenedDecrypt({\n                aad: jwe.aad,\n                ciphertext: jwe.ciphertext,\n                encrypted_key: recipient.encrypted_key,\n                header: recipient.header,\n                iv: jwe.iv,\n                protected: jwe.protected,\n                tag: jwe.tag,\n                unprotected: jwe.unprotected,\n            }, key, options);\n        }\n        catch (_a) {\n        }\n    }\n    throw new JWEDecryptionFailed();\n}\n","import { FlattenedEncrypt, unprotected } from '../flattened/encrypt.js';\nimport { JWEInvalid } from '../../util/errors.js';\nimport generateCek from '../../lib/cek.js';\nimport isDisjoint from '../../lib/is_disjoint.js';\nimport encryptKeyManagement from '../../lib/encrypt_key_management.js';\nimport { encode as base64url } from '../../runtime/base64url.js';\nimport validateCrit from '../../lib/validate_crit.js';\nclass IndividualRecipient {\n    constructor(enc, key, options) {\n        this.parent = enc;\n        this.key = key;\n        this.options = options;\n    }\n    setUnprotectedHeader(unprotectedHeader) {\n        if (this.unprotectedHeader) {\n            throw new TypeError('setUnprotectedHeader can only be called once');\n        }\n        this.unprotectedHeader = unprotectedHeader;\n        return this;\n    }\n    addRecipient(...args) {\n        return this.parent.addRecipient(...args);\n    }\n    encrypt(...args) {\n        return this.parent.encrypt(...args);\n    }\n    done() {\n        return this.parent;\n    }\n}\nexport class GeneralEncrypt {\n    constructor(plaintext) {\n        this._recipients = [];\n        this._plaintext = plaintext;\n    }\n    addRecipient(key, options) {\n        const recipient = new IndividualRecipient(this, key, { crit: options === null || options === void 0 ? void 0 : options.crit });\n        this._recipients.push(recipient);\n        return recipient;\n    }\n    setProtectedHeader(protectedHeader) {\n        if (this._protectedHeader) {\n            throw new TypeError('setProtectedHeader can only be called once');\n        }\n        this._protectedHeader = protectedHeader;\n        return this;\n    }\n    setSharedUnprotectedHeader(sharedUnprotectedHeader) {\n        if (this._unprotectedHeader) {\n            throw new TypeError('setSharedUnprotectedHeader can only be called once');\n        }\n        this._unprotectedHeader = sharedUnprotectedHeader;\n        return this;\n    }\n    setAdditionalAuthenticatedData(aad) {\n        this._aad = aad;\n        return this;\n    }\n    async encrypt(options) {\n        var _a, _b, _c;\n        if (!this._recipients.length) {\n            throw new JWEInvalid('at least one recipient must be added');\n        }\n        options = { deflateRaw: options === null || options === void 0 ? void 0 : options.deflateRaw };\n        if (this._recipients.length === 1) {\n            const [recipient] = this._recipients;\n            const flattened = await new FlattenedEncrypt(this._plaintext)\n                .setAdditionalAuthenticatedData(this._aad)\n                .setProtectedHeader(this._protectedHeader)\n                .setSharedUnprotectedHeader(this._unprotectedHeader)\n                .setUnprotectedHeader(recipient.unprotectedHeader)\n                .encrypt(recipient.key, { ...recipient.options, ...options });\n            let jwe = {\n                ciphertext: flattened.ciphertext,\n                iv: flattened.iv,\n                recipients: [{}],\n                tag: flattened.tag,\n            };\n            if (flattened.aad)\n                jwe.aad = flattened.aad;\n            if (flattened.protected)\n                jwe.protected = flattened.protected;\n            if (flattened.unprotected)\n                jwe.unprotected = flattened.unprotected;\n            if (flattened.encrypted_key)\n                jwe.recipients[0].encrypted_key = flattened.encrypted_key;\n            if (flattened.header)\n                jwe.recipients[0].header = flattened.header;\n            return jwe;\n        }\n        let enc;\n        for (let i = 0; i < this._recipients.length; i++) {\n            const recipient = this._recipients[i];\n            if (!isDisjoint(this._protectedHeader, this._unprotectedHeader, recipient.unprotectedHeader)) {\n                throw new JWEInvalid('JWE Protected, JWE Shared Unprotected and JWE Per-Recipient Header Parameter names must be disjoint');\n            }\n            const joseHeader = {\n                ...this._protectedHeader,\n                ...this._unprotectedHeader,\n                ...recipient.unprotectedHeader,\n            };\n            const { alg } = joseHeader;\n            if (typeof alg !== 'string' || !alg) {\n                throw new JWEInvalid('JWE \"alg\" (Algorithm) Header Parameter missing or invalid');\n            }\n            if (alg === 'dir' || alg === 'ECDH-ES') {\n                throw new JWEInvalid('\"dir\" and \"ECDH-ES\" alg may only be used with a single recipient');\n            }\n            if (typeof joseHeader.enc !== 'string' || !joseHeader.enc) {\n                throw new JWEInvalid('JWE \"enc\" (Encryption Algorithm) Header Parameter missing or invalid');\n            }\n            if (!enc) {\n                enc = joseHeader.enc;\n            }\n            else if (enc !== joseHeader.enc) {\n                throw new JWEInvalid('JWE \"enc\" (Encryption Algorithm) Header Parameter must be the same for all recipients');\n            }\n            validateCrit(JWEInvalid, new Map(), recipient.options.crit, this._protectedHeader, joseHeader);\n            if (joseHeader.zip !== undefined) {\n                if (!this._protectedHeader || !this._protectedHeader.zip) {\n                    throw new JWEInvalid('JWE \"zip\" (Compression Algorithm) Header MUST be integrity protected');\n                }\n            }\n        }\n        const cek = generateCek(enc);\n        let jwe = {\n            ciphertext: '',\n            iv: '',\n            recipients: [],\n            tag: '',\n        };\n        for (let i = 0; i < this._recipients.length; i++) {\n            const recipient = this._recipients[i];\n            const target = {};\n            jwe.recipients.push(target);\n            const joseHeader = {\n                ...this._protectedHeader,\n                ...this._unprotectedHeader,\n                ...recipient.unprotectedHeader,\n            };\n            const p2c = joseHeader.alg.startsWith('PBES2') ? 2048 + i : undefined;\n            if (i === 0) {\n                const flattened = await new FlattenedEncrypt(this._plaintext)\n                    .setAdditionalAuthenticatedData(this._aad)\n                    .setContentEncryptionKey(cek)\n                    .setProtectedHeader(this._protectedHeader)\n                    .setSharedUnprotectedHeader(this._unprotectedHeader)\n                    .setUnprotectedHeader(recipient.unprotectedHeader)\n                    .setKeyManagementParameters({ p2c })\n                    .encrypt(recipient.key, {\n                    ...recipient.options,\n                    ...options,\n                    [unprotected]: true,\n                });\n                jwe.ciphertext = flattened.ciphertext;\n                jwe.iv = flattened.iv;\n                jwe.tag = flattened.tag;\n                if (flattened.aad)\n                    jwe.aad = flattened.aad;\n                if (flattened.protected)\n                    jwe.protected = flattened.protected;\n                if (flattened.unprotected)\n                    jwe.unprotected = flattened.unprotected;\n                target.encrypted_key = flattened.encrypted_key;\n                if (flattened.header)\n                    target.header = flattened.header;\n                continue;\n            }\n            const { encryptedKey, parameters } = await encryptKeyManagement(((_a = recipient.unprotectedHeader) === null || _a === void 0 ? void 0 : _a.alg) ||\n                ((_b = this._protectedHeader) === null || _b === void 0 ? void 0 : _b.alg) ||\n                ((_c = this._unprotectedHeader) === null || _c === void 0 ? void 0 : _c.alg), enc, recipient.key, cek, { p2c });\n            target.encrypted_key = base64url(encryptedKey);\n            if (recipient.unprotectedHeader || parameters)\n                target.header = { ...recipient.unprotectedHeader, ...parameters };\n        }\n        return jwe;\n    }\n}\n","import { encode as base64url } from '../../runtime/base64url.js';\nimport encrypt from '../../runtime/encrypt.js';\nimport { deflate } from '../../runtime/zlib.js';\nimport generateIv from '../../lib/iv.js';\nimport encryptKeyManagement from '../../lib/encrypt_key_management.js';\nimport { JOSENotSupported, JWEInvalid } from '../../util/errors.js';\nimport isDisjoint from '../../lib/is_disjoint.js';\nimport { encoder, decoder, concat } from '../../lib/buffer_utils.js';\nimport validateCrit from '../../lib/validate_crit.js';\nexport const unprotected = Symbol();\nexport class FlattenedEncrypt {\n    constructor(plaintext) {\n        if (!(plaintext instanceof Uint8Array)) {\n            throw new TypeError('plaintext must be an instance of Uint8Array');\n        }\n        this._plaintext = plaintext;\n    }\n    setKeyManagementParameters(parameters) {\n        if (this._keyManagementParameters) {\n            throw new TypeError('setKeyManagementParameters can only be called once');\n        }\n        this._keyManagementParameters = parameters;\n        return this;\n    }\n    setProtectedHeader(protectedHeader) {\n        if (this._protectedHeader) {\n            throw new TypeError('setProtectedHeader can only be called once');\n        }\n        this._protectedHeader = protectedHeader;\n        return this;\n    }\n    setSharedUnprotectedHeader(sharedUnprotectedHeader) {\n        if (this._sharedUnprotectedHeader) {\n            throw new TypeError('setSharedUnprotectedHeader can only be called once');\n        }\n        this._sharedUnprotectedHeader = sharedUnprotectedHeader;\n        return this;\n    }\n    setUnprotectedHeader(unprotectedHeader) {\n        if (this._unprotectedHeader) {\n            throw new TypeError('setUnprotectedHeader can only be called once');\n        }\n        this._unprotectedHeader = unprotectedHeader;\n        return this;\n    }\n    setAdditionalAuthenticatedData(aad) {\n        this._aad = aad;\n        return this;\n    }\n    setContentEncryptionKey(cek) {\n        if (this._cek) {\n            throw new TypeError('setContentEncryptionKey can only be called once');\n        }\n        this._cek = cek;\n        return this;\n    }\n    setInitializationVector(iv) {\n        if (this._iv) {\n            throw new TypeError('setInitializationVector can only be called once');\n        }\n        this._iv = iv;\n        return this;\n    }\n    async encrypt(key, options) {\n        if (!this._protectedHeader && !this._unprotectedHeader && !this._sharedUnprotectedHeader) {\n            throw new JWEInvalid('either setProtectedHeader, setUnprotectedHeader, or sharedUnprotectedHeader must be called before #encrypt()');\n        }\n        if (!isDisjoint(this._protectedHeader, this._unprotectedHeader, this._sharedUnprotectedHeader)) {\n            throw new JWEInvalid('JWE Protected, JWE Shared Unprotected and JWE Per-Recipient Header Parameter names must be disjoint');\n        }\n        const joseHeader = {\n            ...this._protectedHeader,\n            ...this._unprotectedHeader,\n            ...this._sharedUnprotectedHeader,\n        };\n        validateCrit(JWEInvalid, new Map(), options === null || options === void 0 ? void 0 : options.crit, this._protectedHeader, joseHeader);\n        if (joseHeader.zip !== undefined) {\n            if (!this._protectedHeader || !this._protectedHeader.zip) {\n                throw new JWEInvalid('JWE \"zip\" (Compression Algorithm) Header MUST be integrity protected');\n            }\n            if (joseHeader.zip !== 'DEF') {\n                throw new JOSENotSupported('Unsupported JWE \"zip\" (Compression Algorithm) Header Parameter value');\n            }\n        }\n        const { alg, enc } = joseHeader;\n        if (typeof alg !== 'string' || !alg) {\n            throw new JWEInvalid('JWE \"alg\" (Algorithm) Header Parameter missing or invalid');\n        }\n        if (typeof enc !== 'string' || !enc) {\n            throw new JWEInvalid('JWE \"enc\" (Encryption Algorithm) Header Parameter missing or invalid');\n        }\n        let encryptedKey;\n        if (alg === 'dir') {\n            if (this._cek) {\n                throw new TypeError('setContentEncryptionKey cannot be called when using Direct Encryption');\n            }\n        }\n        else if (alg === 'ECDH-ES') {\n            if (this._cek) {\n                throw new TypeError('setContentEncryptionKey cannot be called when using Direct Key Agreement');\n            }\n        }\n        let cek;\n        {\n            let parameters;\n            ({ cek, encryptedKey, parameters } = await encryptKeyManagement(alg, enc, key, this._cek, this._keyManagementParameters));\n            if (parameters) {\n                if (options && unprotected in options) {\n                    if (!this._unprotectedHeader) {\n                        this.setUnprotectedHeader(parameters);\n                    }\n                    else {\n                        this._unprotectedHeader = { ...this._unprotectedHeader, ...parameters };\n                    }\n                }\n                else {\n                    if (!this._protectedHeader) {\n                        this.setProtectedHeader(parameters);\n                    }\n                    else {\n                        this._protectedHeader = { ...this._protectedHeader, ...parameters };\n                    }\n                }\n            }\n        }\n        this._iv || (this._iv = generateIv(enc));\n        let additionalData;\n        let protectedHeader;\n        let aadMember;\n        if (this._protectedHeader) {\n            protectedHeader = encoder.encode(base64url(JSON.stringify(this._protectedHeader)));\n        }\n        else {\n            protectedHeader = encoder.encode('');\n        }\n        if (this._aad) {\n            aadMember = base64url(this._aad);\n            additionalData = concat(protectedHeader, encoder.encode('.'), encoder.encode(aadMember));\n        }\n        else {\n            additionalData = protectedHeader;\n        }\n        let ciphertext;\n        let tag;\n        if (joseHeader.zip === 'DEF') {\n            const deflated = await ((options === null || options === void 0 ? void 0 : options.deflateRaw) || deflate)(this._plaintext);\n            ({ ciphertext, tag } = await encrypt(enc, deflated, cek, this._iv, additionalData));\n        }\n        else {\n            ;\n            ({ ciphertext, tag } = await encrypt(enc, this._plaintext, cek, this._iv, additionalData));\n        }\n        const jwe = {\n            ciphertext: base64url(ciphertext),\n            iv: base64url(this._iv),\n            tag: base64url(tag),\n        };\n        if (encryptedKey) {\n            jwe.encrypted_key = base64url(encryptedKey);\n        }\n        if (aadMember) {\n            jwe.aad = aadMember;\n        }\n        if (this._protectedHeader) {\n            jwe.protected = decoder.decode(protectedHeader);\n        }\n        if (this._sharedUnprotectedHeader) {\n            jwe.unprotected = this._sharedUnprotectedHeader;\n        }\n        if (this._unprotectedHeader) {\n            jwe.header = this._unprotectedHeader;\n        }\n        return jwe;\n    }\n}\n","import { wrap as aesKw } from '../runtime/aeskw.js';\nimport * as ECDH from '../runtime/ecdhes.js';\nimport { encrypt as pbes2Kw } from '../runtime/pbes2kw.js';\nimport { encrypt as rsaEs } from '../runtime/rsaes.js';\nimport { encode as base64url } from '../runtime/base64url.js';\nimport generateCek, { bitLength as cekLength } from '../lib/cek.js';\nimport { JOSENotSupported } from '../util/errors.js';\nimport { exportJWK } from '../key/export.js';\nimport checkKeyType from './check_key_type.js';\nimport { wrap as aesGcmKw } from './aesgcmkw.js';\nasync function encryptKeyManagement(alg, enc, key, providedCek, providedParameters = {}) {\n    let encryptedKey;\n    let parameters;\n    let cek;\n    checkKeyType(alg, key, 'encrypt');\n    switch (alg) {\n        case 'dir': {\n            cek = key;\n            break;\n        }\n        case 'ECDH-ES':\n        case 'ECDH-ES+A128KW':\n        case 'ECDH-ES+A192KW':\n        case 'ECDH-ES+A256KW': {\n            if (!ECDH.ecdhAllowed(key)) {\n                throw new JOSENotSupported('ECDH with the provided key is not allowed or not supported by your javascript runtime');\n            }\n            const { apu, apv } = providedParameters;\n            let { epk: ephemeralKey } = providedParameters;\n            ephemeralKey || (ephemeralKey = (await ECDH.generateEpk(key)).privateKey);\n            const { x, y, crv, kty } = await exportJWK(ephemeralKey);\n            const sharedSecret = await ECDH.deriveKey(key, ephemeralKey, alg === 'ECDH-ES' ? enc : alg, alg === 'ECDH-ES' ? cekLength(enc) : parseInt(alg.slice(-5, -2), 10), apu, apv);\n            parameters = { epk: { x, crv, kty } };\n            if (kty === 'EC')\n                parameters.epk.y = y;\n            if (apu)\n                parameters.apu = base64url(apu);\n            if (apv)\n                parameters.apv = base64url(apv);\n            if (alg === 'ECDH-ES') {\n                cek = sharedSecret;\n                break;\n            }\n            cek = providedCek || generateCek(enc);\n            const kwAlg = alg.slice(-6);\n            encryptedKey = await aesKw(kwAlg, sharedSecret, cek);\n            break;\n        }\n        case 'RSA1_5':\n        case 'RSA-OAEP':\n        case 'RSA-OAEP-256':\n        case 'RSA-OAEP-384':\n        case 'RSA-OAEP-512': {\n            cek = providedCek || generateCek(enc);\n            encryptedKey = await rsaEs(alg, key, cek);\n            break;\n        }\n        case 'PBES2-HS256+A128KW':\n        case 'PBES2-HS384+A192KW':\n        case 'PBES2-HS512+A256KW': {\n            cek = providedCek || generateCek(enc);\n            const { p2c, p2s } = providedParameters;\n            ({ encryptedKey, ...parameters } = await pbes2Kw(alg, key, cek, p2c, p2s));\n            break;\n        }\n        case 'A128KW':\n        case 'A192KW':\n        case 'A256KW': {\n            cek = providedCek || generateCek(enc);\n            encryptedKey = await aesKw(alg, key, cek);\n            break;\n        }\n        case 'A128GCMKW':\n        case 'A192GCMKW':\n        case 'A256GCMKW': {\n            cek = providedCek || generateCek(enc);\n            const { iv } = providedParameters;\n            ({ encryptedKey, ...parameters } = await aesGcmKw(alg, key, cek, iv));\n            break;\n        }\n        default: {\n            throw new JOSENotSupported('Invalid or unsupported \"alg\" (JWE Algorithm) header value');\n        }\n    }\n    return { cek, encryptedKey, parameters };\n}\nexport default encryptKeyManagement;\n","import { toSPKI as exportPublic } from '../runtime/asn1.js';\nimport { toPKCS8 as exportPrivate } from '../runtime/asn1.js';\nimport keyToJWK from '../runtime/key_to_jwk.js';\nexport async function exportSPKI(key) {\n    return exportPublic(key);\n}\nexport async function exportPKCS8(key) {\n    return exportPrivate(key);\n}\nexport async function exportJWK(key) {\n    return keyToJWK(key);\n}\n","import crypto, { isCryptoKey } from './webcrypto.js';\nimport invalidKeyInput from '../lib/invalid_key_input.js';\nimport { encode as base64url } from './base64url.js';\nimport { types } from './is_key_like.js';\nconst keyToJWK = async (key) => {\n    if (key instanceof Uint8Array) {\n        return {\n            kty: 'oct',\n            k: base64url(key),\n        };\n    }\n    if (!isCryptoKey(key)) {\n        throw new TypeError(invalidKeyInput(key, ...types, 'Uint8Array'));\n    }\n    if (!key.extractable) {\n        throw new TypeError('non-extractable CryptoKey cannot be exported as a JWK');\n    }\n    const { ext, key_ops, alg, use, ...jwk } = await crypto.subtle.exportKey('jwk', key);\n    return jwk;\n};\nexport default keyToJWK;\n","import { flattenedVerify } from '../flattened/verify.js';\nimport { JWSInvalid } from '../../util/errors.js';\nimport { decoder } from '../../lib/buffer_utils.js';\nexport async function compactVerify(jws, key, options) {\n    if (jws instanceof Uint8Array) {\n        jws = decoder.decode(jws);\n    }\n    if (typeof jws !== 'string') {\n        throw new JWSInvalid('Compact JWS must be a string or Uint8Array');\n    }\n    const { 0: protectedHeader, 1: payload, 2: signature, length } = jws.split('.');\n    if (length !== 3) {\n        throw new JWSInvalid('Invalid Compact JWS');\n    }\n    const verified = await flattenedVerify({ payload, protected: protectedHeader, signature }, key, options);\n    const result = { payload: verified.payload, protectedHeader: verified.protectedHeader };\n    if (typeof key === 'function') {\n        return { ...result, key: verified.key };\n    }\n    return result;\n}\n","import { decode as base64url } from '../../runtime/base64url.js';\nimport verify from '../../runtime/verify.js';\nimport { JOSEAlgNotAllowed, JWSInvalid, JWSSignatureVerificationFailed } from '../../util/errors.js';\nimport { concat, encoder, decoder } from '../../lib/buffer_utils.js';\nimport isDisjoint from '../../lib/is_disjoint.js';\nimport isObject from '../../lib/is_object.js';\nimport checkKeyType from '../../lib/check_key_type.js';\nimport validateCrit from '../../lib/validate_crit.js';\nimport validateAlgorithms from '../../lib/validate_algorithms.js';\nexport async function flattenedVerify(jws, key, options) {\n    var _a;\n    if (!isObject(jws)) {\n        throw new JWSInvalid('Flattened JWS must be an object');\n    }\n    if (jws.protected === undefined && jws.header === undefined) {\n        throw new JWSInvalid('Flattened JWS must have either of the \"protected\" or \"header\" members');\n    }\n    if (jws.protected !== undefined && typeof jws.protected !== 'string') {\n        throw new JWSInvalid('JWS Protected Header incorrect type');\n    }\n    if (jws.payload === undefined) {\n        throw new JWSInvalid('JWS Payload missing');\n    }\n    if (typeof jws.signature !== 'string') {\n        throw new JWSInvalid('JWS Signature missing or incorrect type');\n    }\n    if (jws.header !== undefined && !isObject(jws.header)) {\n        throw new JWSInvalid('JWS Unprotected Header incorrect type');\n    }\n    let parsedProt = {};\n    if (jws.protected) {\n        try {\n            const protectedHeader = base64url(jws.protected);\n            parsedProt = JSON.parse(decoder.decode(protectedHeader));\n        }\n        catch (_b) {\n            throw new JWSInvalid('JWS Protected Header is invalid');\n        }\n    }\n    if (!isDisjoint(parsedProt, jws.header)) {\n        throw new JWSInvalid('JWS Protected and JWS Unprotected Header Parameter names must be disjoint');\n    }\n    const joseHeader = {\n        ...parsedProt,\n        ...jws.header,\n    };\n    const extensions = validateCrit(JWSInvalid, new Map([['b64', true]]), options === null || options === void 0 ? void 0 : options.crit, parsedProt, joseHeader);\n    let b64 = true;\n    if (extensions.has('b64')) {\n        b64 = parsedProt.b64;\n        if (typeof b64 !== 'boolean') {\n            throw new JWSInvalid('The \"b64\" (base64url-encode payload) Header Parameter must be a boolean');\n        }\n    }\n    const { alg } = joseHeader;\n    if (typeof alg !== 'string' || !alg) {\n        throw new JWSInvalid('JWS \"alg\" (Algorithm) Header Parameter missing or invalid');\n    }\n    const algorithms = options && validateAlgorithms('algorithms', options.algorithms);\n    if (algorithms && !algorithms.has(alg)) {\n        throw new JOSEAlgNotAllowed('\"alg\" (Algorithm) Header Parameter not allowed');\n    }\n    if (b64) {\n        if (typeof jws.payload !== 'string') {\n            throw new JWSInvalid('JWS Payload must be a string');\n        }\n    }\n    else if (typeof jws.payload !== 'string' && !(jws.payload instanceof Uint8Array)) {\n        throw new JWSInvalid('JWS Payload must be a string or an Uint8Array instance');\n    }\n    let resolvedKey = false;\n    if (typeof key === 'function') {\n        key = await key(parsedProt, jws);\n        resolvedKey = true;\n    }\n    checkKeyType(alg, key, 'verify');\n    const data = concat(encoder.encode((_a = jws.protected) !== null && _a !== void 0 ? _a : ''), encoder.encode('.'), typeof jws.payload === 'string' ? encoder.encode(jws.payload) : jws.payload);\n    let signature;\n    try {\n        signature = base64url(jws.signature);\n    }\n    catch (_c) {\n        throw new JWSInvalid('Failed to base64url decode the signature');\n    }\n    const verified = await verify(alg, key, signature, data);\n    if (!verified) {\n        throw new JWSSignatureVerificationFailed();\n    }\n    let payload;\n    if (b64) {\n        try {\n            payload = base64url(jws.payload);\n        }\n        catch (_d) {\n            throw new JWSInvalid('Failed to base64url decode the payload');\n        }\n    }\n    else if (typeof jws.payload === 'string') {\n        payload = encoder.encode(jws.payload);\n    }\n    else {\n        payload = jws.payload;\n    }\n    const result = { payload };\n    if (jws.protected !== undefined) {\n        result.protectedHeader = parsedProt;\n    }\n    if (jws.header !== undefined) {\n        result.unprotectedHeader = jws.header;\n    }\n    if (resolvedKey) {\n        return { ...result, key };\n    }\n    return result;\n}\n","import subtleAlgorithm from './subtle_dsa.js';\nimport crypto from './webcrypto.js';\nimport checkKeyLength from './check_key_length.js';\nimport getVerifyKey from './get_sign_verify_key.js';\nconst verify = async (alg, key, signature, data) => {\n    const cryptoKey = await getVerifyKey(alg, key, 'verify');\n    checkKeyLength(alg, cryptoKey);\n    const algorithm = subtleAlgorithm(alg, cryptoKey.algorithm);\n    try {\n        return await crypto.subtle.verify(algorithm, cryptoKey, signature, data);\n    }\n    catch (_a) {\n        return false;\n    }\n};\nexport default verify;\n","import { JOSENotSupported } from '../util/errors.js';\nexport default function subtleDsa(alg, algorithm) {\n    const hash = `SHA-${alg.slice(-3)}`;\n    switch (alg) {\n        case 'HS256':\n        case 'HS384':\n        case 'HS512':\n            return { hash, name: 'HMAC' };\n        case 'PS256':\n        case 'PS384':\n        case 'PS512':\n            return { hash, name: 'RSA-PSS', saltLength: alg.slice(-3) >> 3 };\n        case 'RS256':\n        case 'RS384':\n        case 'RS512':\n            return { hash, name: 'RSASSA-PKCS1-v1_5' };\n        case 'ES256':\n        case 'ES384':\n        case 'ES512':\n            return { hash, name: 'ECDSA', namedCurve: algorithm.namedCurve };\n        case 'EdDSA':\n            return { name: algorithm.name };\n        default:\n            throw new JOSENotSupported(`alg ${alg} is not supported either by JOSE or your javascript runtime`);\n    }\n}\n","import crypto, { isCryptoKey } from './webcrypto.js';\nimport { checkSigCryptoKey } from '../lib/crypto_key.js';\nimport invalidKeyInput from '../lib/invalid_key_input.js';\nimport { types } from './is_key_like.js';\nexport default function getCryptoKey(alg, key, usage) {\n    if (isCryptoKey(key)) {\n        checkSigCryptoKey(key, alg, usage);\n        return key;\n    }\n    if (key instanceof Uint8Array) {\n        if (!alg.startsWith('HS')) {\n            throw new TypeError(invalidKeyInput(key, ...types));\n        }\n        return crypto.subtle.importKey('raw', key, { hash: `SHA-${alg.slice(-3)}`, name: 'HMAC' }, false, [usage]);\n    }\n    throw new TypeError(invalidKeyInput(key, ...types, 'Uint8Array'));\n}\n","import { flattenedVerify } from '../flattened/verify.js';\nimport { JWSInvalid, JWSSignatureVerificationFailed } from '../../util/errors.js';\nimport isObject from '../../lib/is_object.js';\nexport async function generalVerify(jws, key, options) {\n    if (!isObject(jws)) {\n        throw new JWSInvalid('General JWS must be an object');\n    }\n    if (!Array.isArray(jws.signatures) || !jws.signatures.every(isObject)) {\n        throw new JWSInvalid('JWS Signatures missing or incorrect type');\n    }\n    for (const signature of jws.signatures) {\n        try {\n            return await flattenedVerify({\n                header: signature.header,\n                payload: jws.payload,\n                protected: signature.protected,\n                signature: signature.signature,\n            }, key, options);\n        }\n        catch (_a) {\n        }\n    }\n    throw new JWSSignatureVerificationFailed();\n}\n","import { compactVerify } from '../jws/compact/verify.js';\nimport jwtPayload from '../lib/jwt_claims_set.js';\nimport { JWTInvalid } from '../util/errors.js';\nexport async function jwtVerify(jwt, key, options) {\n    var _a;\n    const verified = await compactVerify(jwt, key, options);\n    if (((_a = verified.protectedHeader.crit) === null || _a === void 0 ? void 0 : _a.includes('b64')) && verified.protectedHeader.b64 === false) {\n        throw new JWTInvalid('JWTs MUST NOT use unencoded payload');\n    }\n    const payload = jwtPayload(verified.protectedHeader, verified.payload, options);\n    const result = { payload, protectedHeader: verified.protectedHeader };\n    if (typeof key === 'function') {\n        return { ...result, key: verified.key };\n    }\n    return result;\n}\n","import { JWTClaimValidationFailed, JWTExpired, JWTInvalid } from '../util/errors.js';\nimport { decoder } from './buffer_utils.js';\nimport epoch from './epoch.js';\nimport secs from './secs.js';\nimport isObject from './is_object.js';\nconst normalizeTyp = (value) => value.toLowerCase().replace(/^application\\//, '');\nconst checkAudiencePresence = (audPayload, audOption) => {\n    if (typeof audPayload === 'string') {\n        return audOption.includes(audPayload);\n    }\n    if (Array.isArray(audPayload)) {\n        return audOption.some(Set.prototype.has.bind(new Set(audPayload)));\n    }\n    return false;\n};\nexport default (protectedHeader, encodedPayload, options = {}) => {\n    const { typ } = options;\n    if (typ &&\n        (typeof protectedHeader.typ !== 'string' ||\n            normalizeTyp(protectedHeader.typ) !== normalizeTyp(typ))) {\n        throw new JWTClaimValidationFailed('unexpected \"typ\" JWT header value', 'typ', 'check_failed');\n    }\n    let payload;\n    try {\n        payload = JSON.parse(decoder.decode(encodedPayload));\n    }\n    catch (_a) {\n    }\n    if (!isObject(payload)) {\n        throw new JWTInvalid('JWT Claims Set must be a top-level JSON object');\n    }\n    const { requiredClaims = [], issuer, subject, audience, maxTokenAge } = options;\n    if (maxTokenAge !== undefined)\n        requiredClaims.push('iat');\n    if (audience !== undefined)\n        requiredClaims.push('aud');\n    if (subject !== undefined)\n        requiredClaims.push('sub');\n    if (issuer !== undefined)\n        requiredClaims.push('iss');\n    for (const claim of new Set(requiredClaims.reverse())) {\n        if (!(claim in payload)) {\n            throw new JWTClaimValidationFailed(`missing required \"${claim}\" claim`, claim, 'missing');\n        }\n    }\n    if (issuer && !(Array.isArray(issuer) ? issuer : [issuer]).includes(payload.iss)) {\n        throw new JWTClaimValidationFailed('unexpected \"iss\" claim value', 'iss', 'check_failed');\n    }\n    if (subject && payload.sub !== subject) {\n        throw new JWTClaimValidationFailed('unexpected \"sub\" claim value', 'sub', 'check_failed');\n    }\n    if (audience &&\n        !checkAudiencePresence(payload.aud, typeof audience === 'string' ? [audience] : audience)) {\n        throw new JWTClaimValidationFailed('unexpected \"aud\" claim value', 'aud', 'check_failed');\n    }\n    let tolerance;\n    switch (typeof options.clockTolerance) {\n        case 'string':\n            tolerance = secs(options.clockTolerance);\n            break;\n        case 'number':\n            tolerance = options.clockTolerance;\n            break;\n        case 'undefined':\n            tolerance = 0;\n            break;\n        default:\n            throw new TypeError('Invalid clockTolerance option type');\n    }\n    const { currentDate } = options;\n    const now = epoch(currentDate || new Date());\n    if ((payload.iat !== undefined || maxTokenAge) && typeof payload.iat !== 'number') {\n        throw new JWTClaimValidationFailed('\"iat\" claim must be a number', 'iat', 'invalid');\n    }\n    if (payload.nbf !== undefined) {\n        if (typeof payload.nbf !== 'number') {\n            throw new JWTClaimValidationFailed('\"nbf\" claim must be a number', 'nbf', 'invalid');\n        }\n        if (payload.nbf > now + tolerance) {\n            throw new JWTClaimValidationFailed('\"nbf\" claim timestamp check failed', 'nbf', 'check_failed');\n        }\n    }\n    if (payload.exp !== undefined) {\n        if (typeof payload.exp !== 'number') {\n            throw new JWTClaimValidationFailed('\"exp\" claim must be a number', 'exp', 'invalid');\n        }\n        if (payload.exp <= now - tolerance) {\n            throw new JWTExpired('\"exp\" claim timestamp check failed', 'exp', 'check_failed');\n        }\n    }\n    if (maxTokenAge) {\n        const age = now - payload.iat;\n        const max = typeof maxTokenAge === 'number' ? maxTokenAge : secs(maxTokenAge);\n        if (age - tolerance > max) {\n            throw new JWTExpired('\"iat\" claim timestamp check failed (too far in the past)', 'iat', 'check_failed');\n        }\n        if (age < 0 - tolerance) {\n            throw new JWTClaimValidationFailed('\"iat\" claim timestamp check failed (it should be in the past)', 'iat', 'check_failed');\n        }\n    }\n    return payload;\n};\n","export default (date) => Math.floor(date.getTime() / 1000);\n","const minute = 60;\nconst hour = minute * 60;\nconst day = hour * 24;\nconst week = day * 7;\nconst year = day * 365.25;\nconst REGEX = /^(\\d+|\\d+\\.\\d+) ?(seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|weeks?|w|years?|yrs?|y)$/i;\nexport default (str) => {\n    const matched = REGEX.exec(str);\n    if (!matched) {\n        throw new TypeError('Invalid time period format');\n    }\n    const value = parseFloat(matched[1]);\n    const unit = matched[2].toLowerCase();\n    switch (unit) {\n        case 'sec':\n        case 'secs':\n        case 'second':\n        case 'seconds':\n        case 's':\n            return Math.round(value);\n        case 'minute':\n        case 'minutes':\n        case 'min':\n        case 'mins':\n        case 'm':\n            return Math.round(value * minute);\n        case 'hour':\n        case 'hours':\n        case 'hr':\n        case 'hrs':\n        case 'h':\n            return Math.round(value * hour);\n        case 'day':\n        case 'days':\n        case 'd':\n            return Math.round(value * day);\n        case 'week':\n        case 'weeks':\n        case 'w':\n            return Math.round(value * week);\n        default:\n            return Math.round(value * year);\n    }\n};\n","import { compactDecrypt } from '../jwe/compact/decrypt.js';\nimport jwtPayload from '../lib/jwt_claims_set.js';\nimport { JWTClaimValidationFailed } from '../util/errors.js';\nexport async function jwtDecrypt(jwt, key, options) {\n    const decrypted = await compactDecrypt(jwt, key, options);\n    const payload = jwtPayload(decrypted.protectedHeader, decrypted.plaintext, options);\n    const { protectedHeader } = decrypted;\n    if (protectedHeader.iss !== undefined && protectedHeader.iss !== payload.iss) {\n        throw new JWTClaimValidationFailed('replicated \"iss\" claim header parameter mismatch', 'iss', 'mismatch');\n    }\n    if (protectedHeader.sub !== undefined && protectedHeader.sub !== payload.sub) {\n        throw new JWTClaimValidationFailed('replicated \"sub\" claim header parameter mismatch', 'sub', 'mismatch');\n    }\n    if (protectedHeader.aud !== undefined &&\n        JSON.stringify(protectedHeader.aud) !== JSON.stringify(payload.aud)) {\n        throw new JWTClaimValidationFailed('replicated \"aud\" claim header parameter mismatch', 'aud', 'mismatch');\n    }\n    const result = { payload, protectedHeader };\n    if (typeof key === 'function') {\n        return { ...result, key: decrypted.key };\n    }\n    return result;\n}\n","import { FlattenedEncrypt } from '../flattened/encrypt.js';\nexport class CompactEncrypt {\n    constructor(plaintext) {\n        this._flattened = new FlattenedEncrypt(plaintext);\n    }\n    setContentEncryptionKey(cek) {\n        this._flattened.setContentEncryptionKey(cek);\n        return this;\n    }\n    setInitializationVector(iv) {\n        this._flattened.setInitializationVector(iv);\n        return this;\n    }\n    setProtectedHeader(protectedHeader) {\n        this._flattened.setProtectedHeader(protectedHeader);\n        return this;\n    }\n    setKeyManagementParameters(parameters) {\n        this._flattened.setKeyManagementParameters(parameters);\n        return this;\n    }\n    async encrypt(key, options) {\n        const jwe = await this._flattened.encrypt(key, options);\n        return [jwe.protected, jwe.encrypted_key, jwe.iv, jwe.ciphertext, jwe.tag].join('.');\n    }\n}\n","import { FlattenedSign } from '../flattened/sign.js';\nexport class CompactSign {\n    constructor(payload) {\n        this._flattened = new FlattenedSign(payload);\n    }\n    setProtectedHeader(protectedHeader) {\n        this._flattened.setProtectedHeader(protectedHeader);\n        return this;\n    }\n    async sign(key, options) {\n        const jws = await this._flattened.sign(key, options);\n        if (jws.payload === undefined) {\n            throw new TypeError('use the flattened module for creating JWS with b64: false');\n        }\n        return `${jws.protected}.${jws.payload}.${jws.signature}`;\n    }\n}\n","import { encode as base64url } from '../../runtime/base64url.js';\nimport sign from '../../runtime/sign.js';\nimport isDisjoint from '../../lib/is_disjoint.js';\nimport { JWSInvalid } from '../../util/errors.js';\nimport { encoder, decoder, concat } from '../../lib/buffer_utils.js';\nimport checkKeyType from '../../lib/check_key_type.js';\nimport validateCrit from '../../lib/validate_crit.js';\nexport class FlattenedSign {\n    constructor(payload) {\n        if (!(payload instanceof Uint8Array)) {\n            throw new TypeError('payload must be an instance of Uint8Array');\n        }\n        this._payload = payload;\n    }\n    setProtectedHeader(protectedHeader) {\n        if (this._protectedHeader) {\n            throw new TypeError('setProtectedHeader can only be called once');\n        }\n        this._protectedHeader = protectedHeader;\n        return this;\n    }\n    setUnprotectedHeader(unprotectedHeader) {\n        if (this._unprotectedHeader) {\n            throw new TypeError('setUnprotectedHeader can only be called once');\n        }\n        this._unprotectedHeader = unprotectedHeader;\n        return this;\n    }\n    async sign(key, options) {\n        if (!this._protectedHeader && !this._unprotectedHeader) {\n            throw new JWSInvalid('either setProtectedHeader or setUnprotectedHeader must be called before #sign()');\n        }\n        if (!isDisjoint(this._protectedHeader, this._unprotectedHeader)) {\n            throw new JWSInvalid('JWS Protected and JWS Unprotected Header Parameter names must be disjoint');\n        }\n        const joseHeader = {\n            ...this._protectedHeader,\n            ...this._unprotectedHeader,\n        };\n        const extensions = validateCrit(JWSInvalid, new Map([['b64', true]]), options === null || options === void 0 ? void 0 : options.crit, this._protectedHeader, joseHeader);\n        let b64 = true;\n        if (extensions.has('b64')) {\n            b64 = this._protectedHeader.b64;\n            if (typeof b64 !== 'boolean') {\n                throw new JWSInvalid('The \"b64\" (base64url-encode payload) Header Parameter must be a boolean');\n            }\n        }\n        const { alg } = joseHeader;\n        if (typeof alg !== 'string' || !alg) {\n            throw new JWSInvalid('JWS \"alg\" (Algorithm) Header Parameter missing or invalid');\n        }\n        checkKeyType(alg, key, 'sign');\n        let payload = this._payload;\n        if (b64) {\n            payload = encoder.encode(base64url(payload));\n        }\n        let protectedHeader;\n        if (this._protectedHeader) {\n            protectedHeader = encoder.encode(base64url(JSON.stringify(this._protectedHeader)));\n        }\n        else {\n            protectedHeader = encoder.encode('');\n        }\n        const data = concat(protectedHeader, encoder.encode('.'), payload);\n        const signature = await sign(alg, key, data);\n        const jws = {\n            signature: base64url(signature),\n            payload: '',\n        };\n        if (b64) {\n            jws.payload = decoder.decode(payload);\n        }\n        if (this._unprotectedHeader) {\n            jws.header = this._unprotectedHeader;\n        }\n        if (this._protectedHeader) {\n            jws.protected = decoder.decode(protectedHeader);\n        }\n        return jws;\n    }\n}\n","import subtleAlgorithm from './subtle_dsa.js';\nimport crypto from './webcrypto.js';\nimport checkKeyLength from './check_key_length.js';\nimport getSignKey from './get_sign_verify_key.js';\nconst sign = async (alg, key, data) => {\n    const cryptoKey = await getSignKey(alg, key, 'sign');\n    checkKeyLength(alg, cryptoKey);\n    const signature = await crypto.subtle.sign(subtleAlgorithm(alg, cryptoKey.algorithm), cryptoKey, data);\n    return new Uint8Array(signature);\n};\nexport default sign;\n","import { FlattenedSign } from '../flattened/sign.js';\nimport { JWSInvalid } from '../../util/errors.js';\nclass IndividualSignature {\n    constructor(sig, key, options) {\n        this.parent = sig;\n        this.key = key;\n        this.options = options;\n    }\n    setProtectedHeader(protectedHeader) {\n        if (this.protectedHeader) {\n            throw new TypeError('setProtectedHeader can only be called once');\n        }\n        this.protectedHeader = protectedHeader;\n        return this;\n    }\n    setUnprotectedHeader(unprotectedHeader) {\n        if (this.unprotectedHeader) {\n            throw new TypeError('setUnprotectedHeader can only be called once');\n        }\n        this.unprotectedHeader = unprotectedHeader;\n        return this;\n    }\n    addSignature(...args) {\n        return this.parent.addSignature(...args);\n    }\n    sign(...args) {\n        return this.parent.sign(...args);\n    }\n    done() {\n        return this.parent;\n    }\n}\nexport class GeneralSign {\n    constructor(payload) {\n        this._signatures = [];\n        this._payload = payload;\n    }\n    addSignature(key, options) {\n        const signature = new IndividualSignature(this, key, options);\n        this._signatures.push(signature);\n        return signature;\n    }\n    async sign() {\n        if (!this._signatures.length) {\n            throw new JWSInvalid('at least one signature must be added');\n        }\n        const jws = {\n            signatures: [],\n            payload: '',\n        };\n        for (let i = 0; i < this._signatures.length; i++) {\n            const signature = this._signatures[i];\n            const flattened = new FlattenedSign(this._payload);\n            flattened.setProtectedHeader(signature.protectedHeader);\n            flattened.setUnprotectedHeader(signature.unprotectedHeader);\n            const { payload, ...rest } = await flattened.sign(signature.key, signature.options);\n            if (i === 0) {\n                jws.payload = payload;\n            }\n            else if (jws.payload !== payload) {\n                throw new JWSInvalid('inconsistent use of JWS Unencoded Payload (RFC7797)');\n            }\n            jws.signatures.push(rest);\n        }\n        return jws;\n    }\n}\n","import { CompactSign } from '../jws/compact/sign.js';\nimport { JWTInvalid } from '../util/errors.js';\nimport { encoder } from '../lib/buffer_utils.js';\nimport { ProduceJWT } from './produce.js';\nexport class SignJWT extends ProduceJWT {\n    setProtectedHeader(protectedHeader) {\n        this._protectedHeader = protectedHeader;\n        return this;\n    }\n    async sign(key, options) {\n        var _a;\n        const sig = new CompactSign(encoder.encode(JSON.stringify(this._payload)));\n        sig.setProtectedHeader(this._protectedHeader);\n        if (Array.isArray((_a = this._protectedHeader) === null || _a === void 0 ? void 0 : _a.crit) &&\n            this._protectedHeader.crit.includes('b64') &&\n            this._protectedHeader.b64 === false) {\n            throw new JWTInvalid('JWTs MUST NOT use unencoded payload');\n        }\n        return sig.sign(key, options);\n    }\n}\n","import epoch from '../lib/epoch.js';\nimport isObject from '../lib/is_object.js';\nimport secs from '../lib/secs.js';\nexport class ProduceJWT {\n    constructor(payload) {\n        if (!isObject(payload)) {\n            throw new TypeError('JWT Claims Set MUST be an object');\n        }\n        this._payload = payload;\n    }\n    setIssuer(issuer) {\n        this._payload = { ...this._payload, iss: issuer };\n        return this;\n    }\n    setSubject(subject) {\n        this._payload = { ...this._payload, sub: subject };\n        return this;\n    }\n    setAudience(audience) {\n        this._payload = { ...this._payload, aud: audience };\n        return this;\n    }\n    setJti(jwtId) {\n        this._payload = { ...this._payload, jti: jwtId };\n        return this;\n    }\n    setNotBefore(input) {\n        if (typeof input === 'number') {\n            this._payload = { ...this._payload, nbf: input };\n        }\n        else {\n            this._payload = { ...this._payload, nbf: epoch(new Date()) + secs(input) };\n        }\n        return this;\n    }\n    setExpirationTime(input) {\n        if (typeof input === 'number') {\n            this._payload = { ...this._payload, exp: input };\n        }\n        else {\n            this._payload = { ...this._payload, exp: epoch(new Date()) + secs(input) };\n        }\n        return this;\n    }\n    setIssuedAt(input) {\n        if (typeof input === 'undefined') {\n            this._payload = { ...this._payload, iat: epoch(new Date()) };\n        }\n        else {\n            this._payload = { ...this._payload, iat: input };\n        }\n        return this;\n    }\n}\n","import { CompactEncrypt } from '../jwe/compact/encrypt.js';\nimport { encoder } from '../lib/buffer_utils.js';\nimport { ProduceJWT } from './produce.js';\nexport class EncryptJWT extends ProduceJWT {\n    setProtectedHeader(protectedHeader) {\n        if (this._protectedHeader) {\n            throw new TypeError('setProtectedHeader can only be called once');\n        }\n        this._protectedHeader = protectedHeader;\n        return this;\n    }\n    setKeyManagementParameters(parameters) {\n        if (this._keyManagementParameters) {\n            throw new TypeError('setKeyManagementParameters can only be called once');\n        }\n        this._keyManagementParameters = parameters;\n        return this;\n    }\n    setContentEncryptionKey(cek) {\n        if (this._cek) {\n            throw new TypeError('setContentEncryptionKey can only be called once');\n        }\n        this._cek = cek;\n        return this;\n    }\n    setInitializationVector(iv) {\n        if (this._iv) {\n            throw new TypeError('setInitializationVector can only be called once');\n        }\n        this._iv = iv;\n        return this;\n    }\n    replicateIssuerAsHeader() {\n        this._replicateIssuerAsHeader = true;\n        return this;\n    }\n    replicateSubjectAsHeader() {\n        this._replicateSubjectAsHeader = true;\n        return this;\n    }\n    replicateAudienceAsHeader() {\n        this._replicateAudienceAsHeader = true;\n        return this;\n    }\n    async encrypt(key, options) {\n        const enc = new CompactEncrypt(encoder.encode(JSON.stringify(this._payload)));\n        if (this._replicateIssuerAsHeader) {\n            this._protectedHeader = { ...this._protectedHeader, iss: this._payload.iss };\n        }\n        if (this._replicateSubjectAsHeader) {\n            this._protectedHeader = { ...this._protectedHeader, sub: this._payload.sub };\n        }\n        if (this._replicateAudienceAsHeader) {\n            this._protectedHeader = { ...this._protectedHeader, aud: this._payload.aud };\n        }\n        enc.setProtectedHeader(this._protectedHeader);\n        if (this._iv) {\n            enc.setInitializationVector(this._iv);\n        }\n        if (this._cek) {\n            enc.setContentEncryptionKey(this._cek);\n        }\n        if (this._keyManagementParameters) {\n            enc.setKeyManagementParameters(this._keyManagementParameters);\n        }\n        return enc.encrypt(key, options);\n    }\n}\n","import digest from '../runtime/digest.js';\nimport { encode as base64url } from '../runtime/base64url.js';\nimport { JOSENotSupported, JWKInvalid } from '../util/errors.js';\nimport { encoder } from '../lib/buffer_utils.js';\nimport isObject from '../lib/is_object.js';\nconst check = (value, description) => {\n    if (typeof value !== 'string' || !value) {\n        throw new JWKInvalid(`${description} missing or invalid`);\n    }\n};\nexport async function calculateJwkThumbprint(jwk, digestAlgorithm) {\n    if (!isObject(jwk)) {\n        throw new TypeError('JWK must be an object');\n    }\n    digestAlgorithm !== null && digestAlgorithm !== void 0 ? digestAlgorithm : (digestAlgorithm = 'sha256');\n    if (digestAlgorithm !== 'sha256' &&\n        digestAlgorithm !== 'sha384' &&\n        digestAlgorithm !== 'sha512') {\n        throw new TypeError('digestAlgorithm must one of \"sha256\", \"sha384\", or \"sha512\"');\n    }\n    let components;\n    switch (jwk.kty) {\n        case 'EC':\n            check(jwk.crv, '\"crv\" (Curve) Parameter');\n            check(jwk.x, '\"x\" (X Coordinate) Parameter');\n            check(jwk.y, '\"y\" (Y Coordinate) Parameter');\n            components = { crv: jwk.crv, kty: jwk.kty, x: jwk.x, y: jwk.y };\n            break;\n        case 'OKP':\n            check(jwk.crv, '\"crv\" (Subtype of Key Pair) Parameter');\n            check(jwk.x, '\"x\" (Public Key) Parameter');\n            components = { crv: jwk.crv, kty: jwk.kty, x: jwk.x };\n            break;\n        case 'RSA':\n            check(jwk.e, '\"e\" (Exponent) Parameter');\n            check(jwk.n, '\"n\" (Modulus) Parameter');\n            components = { e: jwk.e, kty: jwk.kty, n: jwk.n };\n            break;\n        case 'oct':\n            check(jwk.k, '\"k\" (Key Value) Parameter');\n            components = { k: jwk.k, kty: jwk.kty };\n            break;\n        default:\n            throw new JOSENotSupported('\"kty\" (Key Type) Parameter missing or unsupported');\n    }\n    const data = encoder.encode(JSON.stringify(components));\n    return base64url(await digest(digestAlgorithm, data));\n}\nexport async function calculateJwkThumbprintUri(jwk, digestAlgorithm) {\n    digestAlgorithm !== null && digestAlgorithm !== void 0 ? digestAlgorithm : (digestAlgorithm = 'sha256');\n    const thumbprint = await calculateJwkThumbprint(jwk, digestAlgorithm);\n    return `urn:ietf:params:oauth:jwk-thumbprint:sha-${digestAlgorithm.slice(-3)}:${thumbprint}`;\n}\n","import { importJWK } from '../key/import.js';\nimport isObject from '../lib/is_object.js';\nimport { JWSInvalid } from '../util/errors.js';\nexport async function EmbeddedJWK(protectedHeader, token) {\n    const joseHeader = {\n        ...protectedHeader,\n        ...token === null || token === void 0 ? void 0 : token.header,\n    };\n    if (!isObject(joseHeader.jwk)) {\n        throw new JWSInvalid('\"jwk\" (JSON Web Key) Header Parameter must be a JSON object');\n    }\n    const key = await importJWK({ ...joseHeader.jwk, ext: true }, joseHeader.alg, true);\n    if (key instanceof Uint8Array || key.type !== 'public') {\n        throw new JWSInvalid('\"jwk\" (JSON Web Key) Header Parameter must be a public key');\n    }\n    return key;\n}\n","import { importJWK } from '../key/import.js';\nimport { JWKSInvalid, JOSENotSupported, JWKSNoMatchingKey, JWKSMultipleMatchingKeys, } from '../util/errors.js';\nimport isObject from '../lib/is_object.js';\nfunction getKtyFromAlg(alg) {\n    switch (typeof alg === 'string' && alg.slice(0, 2)) {\n        case 'RS':\n        case 'PS':\n            return 'RSA';\n        case 'ES':\n            return 'EC';\n        case 'Ed':\n            return 'OKP';\n        default:\n            throw new JOSENotSupported('Unsupported \"alg\" value for a JSON Web Key Set');\n    }\n}\nexport function isJWKSLike(jwks) {\n    return (jwks &&\n        typeof jwks === 'object' &&\n        Array.isArray(jwks.keys) &&\n        jwks.keys.every(isJWKLike));\n}\nfunction isJWKLike(key) {\n    return isObject(key);\n}\nfunction clone(obj) {\n    if (typeof structuredClone === 'function') {\n        return structuredClone(obj);\n    }\n    return JSON.parse(JSON.stringify(obj));\n}\nexport class LocalJWKSet {\n    constructor(jwks) {\n        this._cached = new WeakMap();\n        if (!isJWKSLike(jwks)) {\n            throw new JWKSInvalid('JSON Web Key Set malformed');\n        }\n        this._jwks = clone(jwks);\n    }\n    async getKey(protectedHeader, token) {\n        const { alg, kid } = { ...protectedHeader, ...token === null || token === void 0 ? void 0 : token.header };\n        const kty = getKtyFromAlg(alg);\n        const candidates = this._jwks.keys.filter((jwk) => {\n            let candidate = kty === jwk.kty;\n            if (candidate && typeof kid === 'string') {\n                candidate = kid === jwk.kid;\n            }\n            if (candidate && typeof jwk.alg === 'string') {\n                candidate = alg === jwk.alg;\n            }\n            if (candidate && typeof jwk.use === 'string') {\n                candidate = jwk.use === 'sig';\n            }\n            if (candidate && Array.isArray(jwk.key_ops)) {\n                candidate = jwk.key_ops.includes('verify');\n            }\n            if (candidate && alg === 'EdDSA') {\n                candidate = jwk.crv === 'Ed25519' || jwk.crv === 'Ed448';\n            }\n            if (candidate) {\n                switch (alg) {\n                    case 'ES256':\n                        candidate = jwk.crv === 'P-256';\n                        break;\n                    case 'ES256K':\n                        candidate = jwk.crv === 'secp256k1';\n                        break;\n                    case 'ES384':\n                        candidate = jwk.crv === 'P-384';\n                        break;\n                    case 'ES512':\n                        candidate = jwk.crv === 'P-521';\n                        break;\n                }\n            }\n            return candidate;\n        });\n        const { 0: jwk, length } = candidates;\n        if (length === 0) {\n            throw new JWKSNoMatchingKey();\n        }\n        else if (length !== 1) {\n            const error = new JWKSMultipleMatchingKeys();\n            const { _cached } = this;\n            error[Symbol.asyncIterator] = async function* () {\n                for (const jwk of candidates) {\n                    try {\n                        yield await importWithAlgCache(_cached, jwk, alg);\n                    }\n                    catch (_a) {\n                        continue;\n                    }\n                }\n            };\n            throw error;\n        }\n        return importWithAlgCache(this._cached, jwk, alg);\n    }\n}\nasync function importWithAlgCache(cache, jwk, alg) {\n    const cached = cache.get(jwk) || cache.set(jwk, {}).get(jwk);\n    if (cached[alg] === undefined) {\n        const key = await importJWK({ ...jwk, ext: true }, alg);\n        if (key instanceof Uint8Array || key.type !== 'public') {\n            throw new JWKSInvalid('JSON Web Key Set members must be public keys');\n        }\n        cached[alg] = key;\n    }\n    return cached[alg];\n}\nexport function createLocalJWKSet(jwks) {\n    const set = new LocalJWKSet(jwks);\n    return async function (protectedHeader, token) {\n        return set.getKey(protectedHeader, token);\n    };\n}\n","import fetchJwks from '../runtime/fetch_jwks.js';\nimport { JWKSInvalid, JWKSNoMatchingKey } from '../util/errors.js';\nimport { isJWKSLike, LocalJWKSet } from './local.js';\nfunction isCloudflareWorkers() {\n    return (typeof WebSocketPair !== 'undefined' ||\n        (typeof navigator !== 'undefined' && navigator.userAgent === 'Cloudflare-Workers') ||\n        (typeof EdgeRuntime !== 'undefined' && EdgeRuntime === 'vercel'));\n}\nclass RemoteJWKSet extends LocalJWKSet {\n    constructor(url, options) {\n        super({ keys: [] });\n        this._jwks = undefined;\n        if (!(url instanceof URL)) {\n            throw new TypeError('url must be an instance of URL');\n        }\n        this._url = new URL(url.href);\n        this._options = { agent: options === null || options === void 0 ? void 0 : options.agent, headers: options === null || options === void 0 ? void 0 : options.headers };\n        this._timeoutDuration =\n            typeof (options === null || options === void 0 ? void 0 : options.timeoutDuration) === 'number' ? options === null || options === void 0 ? void 0 : options.timeoutDuration : 5000;\n        this._cooldownDuration =\n            typeof (options === null || options === void 0 ? void 0 : options.cooldownDuration) === 'number' ? options === null || options === void 0 ? void 0 : options.cooldownDuration : 30000;\n        this._cacheMaxAge = typeof (options === null || options === void 0 ? void 0 : options.cacheMaxAge) === 'number' ? options === null || options === void 0 ? void 0 : options.cacheMaxAge : 600000;\n    }\n    coolingDown() {\n        return typeof this._jwksTimestamp === 'number'\n            ? Date.now() < this._jwksTimestamp + this._cooldownDuration\n            : false;\n    }\n    fresh() {\n        return typeof this._jwksTimestamp === 'number'\n            ? Date.now() < this._jwksTimestamp + this._cacheMaxAge\n            : false;\n    }\n    async getKey(protectedHeader, token) {\n        if (!this._jwks || !this.fresh()) {\n            await this.reload();\n        }\n        try {\n            return await super.getKey(protectedHeader, token);\n        }\n        catch (err) {\n            if (err instanceof JWKSNoMatchingKey) {\n                if (this.coolingDown() === false) {\n                    await this.reload();\n                    return super.getKey(protectedHeader, token);\n                }\n            }\n            throw err;\n        }\n    }\n    async reload() {\n        if (this._pendingFetch && isCloudflareWorkers()) {\n            this._pendingFetch = undefined;\n        }\n        this._pendingFetch || (this._pendingFetch = fetchJwks(this._url, this._timeoutDuration, this._options)\n            .then((json) => {\n            if (!isJWKSLike(json)) {\n                throw new JWKSInvalid('JSON Web Key Set malformed');\n            }\n            this._jwks = { keys: json.keys };\n            this._jwksTimestamp = Date.now();\n            this._pendingFetch = undefined;\n        })\n            .catch((err) => {\n            this._pendingFetch = undefined;\n            throw err;\n        }));\n        await this._pendingFetch;\n    }\n}\nexport function createRemoteJWKSet(url, options) {\n    const set = new RemoteJWKSet(url, options);\n    return async function (protectedHeader, token) {\n        return set.getKey(protectedHeader, token);\n    };\n}\n","import { JOSEError, JWKSTimeout } from '../util/errors.js';\nconst fetchJwks = async (url, timeout, options) => {\n    let controller;\n    let id;\n    let timedOut = false;\n    if (typeof AbortController === 'function') {\n        controller = new AbortController();\n        id = setTimeout(() => {\n            timedOut = true;\n            controller.abort();\n        }, timeout);\n    }\n    const response = await fetch(url.href, {\n        signal: controller ? controller.signal : undefined,\n        redirect: 'manual',\n        headers: options.headers,\n    }).catch((err) => {\n        if (timedOut)\n            throw new JWKSTimeout();\n        throw err;\n    });\n    if (id !== undefined)\n        clearTimeout(id);\n    if (response.status !== 200) {\n        throw new JOSEError('Expected 200 OK from the JSON Web Key Set HTTP response');\n    }\n    try {\n        return await response.json();\n    }\n    catch (_a) {\n        throw new JOSEError('Failed to parse the JSON Web Key Set HTTP response as JSON');\n    }\n};\nexport default fetchJwks;\n","import * as base64url from '../runtime/base64url.js';\nimport { decoder } from '../lib/buffer_utils.js';\nimport { JWTInvalid } from '../util/errors.js';\nimport jwtPayload from '../lib/jwt_claims_set.js';\nimport { ProduceJWT } from './produce.js';\nexport class UnsecuredJWT extends ProduceJWT {\n    encode() {\n        const header = base64url.encode(JSON.stringify({ alg: 'none' }));\n        const payload = base64url.encode(JSON.stringify(this._payload));\n        return `${header}.${payload}.`;\n    }\n    static decode(jwt, options) {\n        if (typeof jwt !== 'string') {\n            throw new JWTInvalid('Unsecured JWT must be a string');\n        }\n        const { 0: encodedHeader, 1: encodedPayload, 2: signature, length } = jwt.split('.');\n        if (length !== 3 || signature !== '') {\n            throw new JWTInvalid('Invalid Unsecured JWT');\n        }\n        let header;\n        try {\n            header = JSON.parse(decoder.decode(base64url.decode(encodedHeader)));\n            if (header.alg !== 'none')\n                throw new Error();\n        }\n        catch (_a) {\n            throw new JWTInvalid('Invalid Unsecured JWT');\n        }\n        const payload = jwtPayload(header, base64url.decode(encodedPayload), options);\n        return { payload, header };\n    }\n}\n","import { decode as base64url } from './base64url.js';\nimport { decoder } from '../lib/buffer_utils.js';\nimport isObject from '../lib/is_object.js';\nexport function decodeProtectedHeader(token) {\n    let protectedB64u;\n    if (typeof token === 'string') {\n        const parts = token.split('.');\n        if (parts.length === 3 || parts.length === 5) {\n            ;\n            [protectedB64u] = parts;\n        }\n    }\n    else if (typeof token === 'object' && token) {\n        if ('protected' in token) {\n            protectedB64u = token.protected;\n        }\n        else {\n            throw new TypeError('Token does not contain a Protected Header');\n        }\n    }\n    try {\n        if (typeof protectedB64u !== 'string' || !protectedB64u) {\n            throw new Error();\n        }\n        const result = JSON.parse(decoder.decode(base64url(protectedB64u)));\n        if (!isObject(result)) {\n            throw new Error();\n        }\n        return result;\n    }\n    catch (_a) {\n        throw new TypeError('Invalid Token or Protected Header formatting');\n    }\n}\n","import * as base64url from '../runtime/base64url.js';\nexport const encode = base64url.encode;\nexport const decode = base64url.decode;\n","import { decode as base64url } from './base64url.js';\nimport { decoder } from '../lib/buffer_utils.js';\nimport isObject from '../lib/is_object.js';\nimport { JWTInvalid } from './errors.js';\nexport function decodeJwt(jwt) {\n    if (typeof jwt !== 'string')\n        throw new JWTInvalid('JWTs must use Compact JWS serialization, JWT must be a string');\n    const { 1: payload, length } = jwt.split('.');\n    if (length === 5)\n        throw new JWTInvalid('Only JWTs using Compact JWS serialization can be decoded');\n    if (length !== 3)\n        throw new JWTInvalid('Invalid JWT');\n    if (!payload)\n        throw new JWTInvalid('JWTs must contain a payload');\n    let decoded;\n    try {\n        decoded = base64url(payload);\n    }\n    catch (_a) {\n        throw new JWTInvalid('Failed to base64url decode the payload');\n    }\n    let result;\n    try {\n        result = JSON.parse(decoder.decode(decoded));\n    }\n    catch (_b) {\n        throw new JWTInvalid('Failed to parse the decoded payload as JSON');\n    }\n    if (!isObject(result))\n        throw new JWTInvalid('Invalid JWT Claims Set');\n    return result;\n}\n","import { generateKeyPair as generate } from '../runtime/generate.js';\nexport async function generateKeyPair(alg, options) {\n    return generate(alg, options);\n}\n","import crypto from './webcrypto.js';\nimport { JOSENotSupported } from '../util/errors.js';\nimport random from './random.js';\nexport async function generateSecret(alg, options) {\n    var _a;\n    let length;\n    let algorithm;\n    let keyUsages;\n    switch (alg) {\n        case 'HS256':\n        case 'HS384':\n        case 'HS512':\n            length = parseInt(alg.slice(-3), 10);\n            algorithm = { name: 'HMAC', hash: `SHA-${length}`, length };\n            keyUsages = ['sign', 'verify'];\n            break;\n        case 'A128CBC-HS256':\n        case 'A192CBC-HS384':\n        case 'A256CBC-HS512':\n            length = parseInt(alg.slice(-3), 10);\n            return random(new Uint8Array(length >> 3));\n        case 'A128KW':\n        case 'A192KW':\n        case 'A256KW':\n            length = parseInt(alg.slice(1, 4), 10);\n            algorithm = { name: 'AES-KW', length };\n            keyUsages = ['wrapKey', 'unwrapKey'];\n            break;\n        case 'A128GCMKW':\n        case 'A192GCMKW':\n        case 'A256GCMKW':\n        case 'A128GCM':\n        case 'A192GCM':\n        case 'A256GCM':\n            length = parseInt(alg.slice(1, 4), 10);\n            algorithm = { name: 'AES-GCM', length };\n            keyUsages = ['encrypt', 'decrypt'];\n            break;\n        default:\n            throw new JOSENotSupported('Invalid or unsupported JWK \"alg\" (Algorithm) Parameter value');\n    }\n    return crypto.subtle.generateKey(algorithm, (_a = options === null || options === void 0 ? void 0 : options.extractable) !== null && _a !== void 0 ? _a : false, keyUsages);\n}\nfunction getModulusLengthOption(options) {\n    var _a;\n    const modulusLength = (_a = options === null || options === void 0 ? void 0 : options.modulusLength) !== null && _a !== void 0 ? _a : 2048;\n    if (typeof modulusLength !== 'number' || modulusLength < 2048) {\n        throw new JOSENotSupported('Invalid or unsupported modulusLength option provided, 2048 bits or larger keys must be used');\n    }\n    return modulusLength;\n}\nexport async function generateKeyPair(alg, options) {\n    var _a, _b, _c;\n    let algorithm;\n    let keyUsages;\n    switch (alg) {\n        case 'PS256':\n        case 'PS384':\n        case 'PS512':\n            algorithm = {\n                name: 'RSA-PSS',\n                hash: `SHA-${alg.slice(-3)}`,\n                publicExponent: new Uint8Array([0x01, 0x00, 0x01]),\n                modulusLength: getModulusLengthOption(options),\n            };\n            keyUsages = ['sign', 'verify'];\n            break;\n        case 'RS256':\n        case 'RS384':\n        case 'RS512':\n            algorithm = {\n                name: 'RSASSA-PKCS1-v1_5',\n                hash: `SHA-${alg.slice(-3)}`,\n                publicExponent: new Uint8Array([0x01, 0x00, 0x01]),\n                modulusLength: getModulusLengthOption(options),\n            };\n            keyUsages = ['sign', 'verify'];\n            break;\n        case 'RSA-OAEP':\n        case 'RSA-OAEP-256':\n        case 'RSA-OAEP-384':\n        case 'RSA-OAEP-512':\n            algorithm = {\n                name: 'RSA-OAEP',\n                hash: `SHA-${parseInt(alg.slice(-3), 10) || 1}`,\n                publicExponent: new Uint8Array([0x01, 0x00, 0x01]),\n                modulusLength: getModulusLengthOption(options),\n            };\n            keyUsages = ['decrypt', 'unwrapKey', 'encrypt', 'wrapKey'];\n            break;\n        case 'ES256':\n            algorithm = { name: 'ECDSA', namedCurve: 'P-256' };\n            keyUsages = ['sign', 'verify'];\n            break;\n        case 'ES384':\n            algorithm = { name: 'ECDSA', namedCurve: 'P-384' };\n            keyUsages = ['sign', 'verify'];\n            break;\n        case 'ES512':\n            algorithm = { name: 'ECDSA', namedCurve: 'P-521' };\n            keyUsages = ['sign', 'verify'];\n            break;\n        case 'EdDSA':\n            keyUsages = ['sign', 'verify'];\n            const crv = (_a = options === null || options === void 0 ? void 0 : options.crv) !== null && _a !== void 0 ? _a : 'Ed25519';\n            switch (crv) {\n                case 'Ed25519':\n                case 'Ed448':\n                    algorithm = { name: crv };\n                    break;\n                default:\n                    throw new JOSENotSupported('Invalid or unsupported crv option provided');\n            }\n            break;\n        case 'ECDH-ES':\n        case 'ECDH-ES+A128KW':\n        case 'ECDH-ES+A192KW':\n        case 'ECDH-ES+A256KW': {\n            keyUsages = ['deriveKey', 'deriveBits'];\n            const crv = (_b = options === null || options === void 0 ? void 0 : options.crv) !== null && _b !== void 0 ? _b : 'P-256';\n            switch (crv) {\n                case 'P-256':\n                case 'P-384':\n                case 'P-521': {\n                    algorithm = { name: 'ECDH', namedCurve: crv };\n                    break;\n                }\n                case 'X25519':\n                case 'X448':\n                    algorithm = { name: crv };\n                    break;\n                default:\n                    throw new JOSENotSupported('Invalid or unsupported crv option provided, supported values are P-256, P-384, P-521, X25519, and X448');\n            }\n            break;\n        }\n        default:\n            throw new JOSENotSupported('Invalid or unsupported JWK \"alg\" (Algorithm) Parameter value');\n    }\n    return (crypto.subtle.generateKey(algorithm, (_c = options === null || options === void 0 ? void 0 : options.extractable) !== null && _c !== void 0 ? _c : false, keyUsages));\n}\n","import { generateSecret as generate } from '../runtime/generate.js';\nexport async function generateSecret(alg, options) {\n    return generate(alg, options);\n}\n","import value from '../runtime/runtime.js';\nexport default value;\n","export default 'WebCryptoAPI';\n","module.exports = (require(\"./helpers/browser/js-loader\")(require('./helpers/bundle-manifest').resolve(\"joS1N\"))).then(() => module.bundle.root('fRpeL'));","\"use strict\";\n\nvar cacheLoader = require('../cacheLoader');\nmodule.exports = cacheLoader(function (bundle) {\n  return new Promise(function (resolve, reject) {\n    // Don't insert the same script twice (e.g. if it was already in the HTML)\n    var existingScripts = document.getElementsByTagName('script');\n    if ([].concat(existingScripts).some(function isCurrentBundle(script) {\n      return script.src === bundle;\n    })) {\n      resolve();\n      return;\n    }\n    var preloadLink = document.createElement('link');\n    preloadLink.href = bundle;\n    preloadLink.rel = 'preload';\n    preloadLink.as = 'script';\n    document.head.appendChild(preloadLink);\n    var script = document.createElement('script');\n    script.async = true;\n    script.type = 'text/javascript';\n    script.src = bundle;\n    script.onerror = function (e) {\n      var error = new TypeError(\"Failed to fetch dynamically imported module: \".concat(bundle, \". Error: \").concat(e.message));\n      script.onerror = script.onload = null;\n      script.remove();\n      reject(error);\n    };\n    script.onload = function () {\n      script.onerror = script.onload = null;\n      resolve();\n    };\n    document.getElementsByTagName('head')[0].appendChild(script);\n  });\n});","\"use strict\";\n\nvar cachedBundles = {};\nvar cachedPreloads = {};\nvar cachedPrefetches = {};\nfunction getCache(type) {\n  switch (type) {\n    case 'preload':\n      return cachedPreloads;\n    case 'prefetch':\n      return cachedPrefetches;\n    default:\n      return cachedBundles;\n  }\n}\nmodule.exports = function (loader, type) {\n  return function (bundle) {\n    var cache = getCache(type);\n    if (cache[bundle]) {\n      return cache[bundle];\n    }\n    return cache[bundle] = loader.apply(null, arguments).catch(function (e) {\n      delete cache[bundle];\n      throw e;\n    });\n  };\n};","module.exports = (require(\"./helpers/browser/js-loader\")(require('./helpers/bundle-manifest').resolve(\"g9O5g\"))).then(() => module.bundle.root('7jSY4'));"],"names":["modules","entry","mainEntry","parcelRequireName","globalName","globalObject","globalThis","self","window","global","previousRequire","cache","nodeRequire","module","require","bind","newRequire","name","jumped","currentRequire","err","Error","code","localRequire","resolve","x","id","Module","call","exports","res","isParcelRequire","moduleName","bundle","parent","register","Object","defineProperty","get","i","length","mainExports","define","amd","getBundleURL","JSON","parse","mapping","Map","baseUrl","manifest","set","path","resolved","URL","toString","bundleURL","getBaseURL","url","replace","value","matches","stack","match","getOrigin","_auth0Sdk","queue","CIAM","push","fn","getIdToken","getAccessToken","getUserInfo","isAuthenticated","isEmailVerified","showEmailConfirmation","showSilentLoginNotification","sendEmailVerification","getUserSubscriptions","Array","isArray","forEach","document","currentScript","clientId","getAttribute","brand","MEDIAHUIS","config","auth0","title","indexOf","split","getElementById","doc","createElement","body","appendChild","console","warn","parcelHelpers","defineInteropFlag","export","getConfig","getDecodedAccessToken","_cookie","URLSearchParams","getCookie","decodedAccessToken","extractToken","userInfo","email_verified","has","searchParams","client_id","response_type","audience","redirect_uri","location","origin","response_mode","prompt","iframe","Promise","addEventListener","onMessage","event","data","type","removeEventListener","removeChild","verifyEmailRequestURL","append","sub","token","response","access_token","resp","fetch","method","credentials","headers","authorization","stringify","ok","src","el","appendEmailVerificationWall","email","search","includes","parsedUrl","href","delete","history","replaceState","state","undefined","appendNotificationToast","root","className","assign","style","position","top","right","zIndex","requestAnimationFrame","_jose","cookieName","c","cookie","trim","join","decodeJwt","_decryptJs","compactDecrypt","_decryptJs1","flattenedDecrypt","_decryptJs2","generalDecrypt","_encryptJs","GeneralEncrypt","_verifyJs","compactVerify","_verifyJs1","flattenedVerify","_verifyJs2","generalVerify","_verifyJs3","jwtVerify","_decryptJs3","jwtDecrypt","_encryptJs1","CompactEncrypt","_encryptJs2","FlattenedEncrypt","_signJs","CompactSign","_signJs1","FlattenedSign","_signJs2","GeneralSign","_signJs3","SignJWT","_encryptJs3","EncryptJWT","_thumbprintJs","calculateJwkThumbprint","calculateJwkThumbprintUri","_embeddedJs","EmbeddedJWK","_localJs","createLocalJWKSet","_remoteJs","createRemoteJWKSet","_unsecuredJs","UnsecuredJWT","_exportJs","exportPKCS8","exportSPKI","exportJWK","_importJs","importSPKI","importPKCS8","importX509","importJWK","_decodeProtectedHeaderJs","decodeProtectedHeader","_decodeJwtJs","_generateKeyPairJs","generateKeyPair","_generateSecretJs","generateSecret","_runtimeJsDefault","default","_errorsJs","_base64UrlJs","_runtimeJs","interopDefault","_bufferUtilsJs","jwe","key","options","Uint8Array","decoder","decode","JWEInvalid","protectedHeader","encryptedKey","iv","ciphertext","tag","decrypted","protected","encrypted_key","result","plaintext","_decryptJsDefault","_zlibJs","_isDisjointJs","_isDisjointJsDefault","_isObjectJs","_isObjectJsDefault","_decryptKeyManagementJs","_decryptKeyManagementJsDefault","_cekJs","_cekJsDefault","_validateCritJs","_validateCritJsDefault","_validateAlgorithmsJs","_validateAlgorithmsJsDefault","_a","parsedProt","cek","additionalData","header","unprotected","aad","_b","joseHeader","crit","zip","JOSENotSupported","alg","enc","keyManagementAlgorithms","contentEncryptionAlgorithms","JOSEAlgNotAllowed","_c","resolvedKey","TypeError","_d","_e","encoder","encode","concat","_f","inflateRaw","inflate","additionalAuthenticatedData","_g","sharedUnprotectedHeader","unprotectedHeader","encodeBase64","decodeBase64","input","unencoded","arr","String","fromCharCode","apply","subarray","btoa","encoded","binary","atob","bytes","charCodeAt","p2s","uint64be","uint32be","lengthAndInput","concatKdf","_digestJs","_digestJsDefault","TextEncoder","TextDecoder","buffers","size","reduce","acc","buf","buffer","p2sInput","writeUInt32BE","offset","RangeError","MAX_INT32","Math","floor","secret","bits","iterations","ceil","iter","slice","_webcryptoJs","_webcryptoJsDefault","digest","algorithm","subtleDigest","subtle","isCryptoKey","crypto","CryptoKey","a","__esModule","exportAll","source","dest","keys","prototype","hasOwnProperty","enumerable","destName","_checkIvLengthJs","_checkIvLengthJsDefault","_checkCekLengthJs","_checkCekLengthJsDefault","_timingSafeEqualJs","_timingSafeEqualJsDefault","_cryptoKeyJs","_invalidKeyInputJs","_invalidKeyInputJsDefault","_isKeyLikeJs","cbcDecrypt","macCheckPassed","keySize","parseInt","encKey","importKey","macKey","hash","macData","expectedTag","sign","JWEDecryptionFailed","decrypt","gcmDecrypt","checkEncCryptoKey","tagLength","types","_ivJs","bitLength","JOSEError","JWTClaimValidationFailed","JWTExpired","JWSInvalid","JWTInvalid","JWKInvalid","JWKSInvalid","JWKSNoMatchingKey","JWKSMultipleMatchingKeys","JWKSTimeout","JWSSignatureVerificationFailed","constructor","message","captureStackTrace","claim","reason","arguments","_randomJs","_randomJsDefault","getRandomValues","expected","actual","byteLength","b","len","out","unusable","prop","isAlgorithm","getHashLength","checkUsage","usages","some","msg","last","pop","checkSigCryptoKey","getNamedCurve","namedCurve","withAlg","deflate","sources","filter","Boolean","parameters","Set","parameter","add","isObject","getPrototypeOf","proto","_aeskwJs","_ecdhesJs","_pbes2KwJs","_rsaesJs","_checkKeyTypeJs","_checkKeyTypeJsDefault","_aesgcmkwJs","decryptKeyManagement","partyUInfo","partyVInfo","epk","ecdhAllowed","apu","apv","sharedSecret","deriveKey","unwrap","p2c","p2cLimit","maxPBES2Count","wrap","_bogusJs","_bogusJsDefault","checkKeySize","getCryptoKey","usage","cryptoKey","cryptoKeyCek","wrapKey","unwrapKey","exportKey","generateEpk","publicKey","privateKey","keyLength","substr","deriveBits","public","generateKey","encrypt","_checkP2SJs","_checkP2SJsDefault","salt","keylen","subtleAlg","derived","checkP2s","_subtleRsaesJs","_subtleRsaesJsDefault","_checkKeyLengthJs","_checkKeyLengthJsDefault","subtleRsaEs","startsWith","modulusLength","_asn1Js","_jwkToKeyJs","_jwkToKeyJsDefault","spki","fromSPKI","x509","fromX509","pkcs8","fromPKCS8","jwk","octAsKeyObject","kty","k","ext","oth","toSPKI","toPKCS8","_formatPemJs","_formatPemJsDefault","genericExport","keyType","keyFormat","extractable","toUpperCase","findOid","keyData","oid","from","unshift","every","index","genericImport","pem","keyUsages","map","isPublic","getElement","seq","next","nextPart","parseElement","contents","raw","numberOfDigits","getSPKI","spkiFromX509","tbsCertificate","cause","b64","descriptor","newlined","subtleMapping","d","crv","rest","key_ops","use","_isKeyLikeJsDefault","symmetricTypeCheck","asymmetricTypeCheck","test","_encryptJsDefault","_ivJsDefault","jweAlgorithm","cbcEncrypt","gcmEncrypt","encrypted","Err","recognizedDefault","recognizedOption","recognized","entries","option","algorithms","s","recipients","recipient","_encryptKeyManagementJs","_encryptKeyManagementJsDefault","IndividualRecipient","setUnprotectedHeader","addRecipient","args","done","_recipients","_plaintext","setProtectedHeader","_protectedHeader","setSharedUnprotectedHeader","_unprotectedHeader","setAdditionalAuthenticatedData","_aad","deflateRaw","flattened","target","setContentEncryptionKey","setKeyManagementParameters","Symbol","_keyManagementParameters","_sharedUnprotectedHeader","_cek","setInitializationVector","_iv","aadMember","deflated","encryptKeyManagement","providedCek","providedParameters","ephemeralKey","y","kwAlg","_keyToJwkJs","_keyToJwkJsDefault","keyToJWK","jws","payload","signature","verified","_verifyJsDefault","extensions","_subtleDsaJs","_subtleDsaJsDefault","_getSignVerifyKeyJs","_getSignVerifyKeyJsDefault","verify","subtleDsa","saltLength","signatures","_jwtClaimsSetJs","_jwtClaimsSetJsDefault","jwt","_epochJs","_epochJsDefault","_secsJs","_secsJsDefault","normalizeTyp","toLowerCase","checkAudiencePresence","audPayload","audOption","encodedPayload","tolerance","typ","requiredClaims","issuer","subject","maxTokenAge","reverse","iss","aud","clockTolerance","currentDate","now","Date","iat","nbf","exp","age","date","getTime","REGEX","str","matched","exec","parseFloat","round","minute","hour","day","_flattened","_signJsDefault","_payload","IndividualSignature","sig","addSignature","_signatures","_produceJs","ProduceJWT","setIssuer","setSubject","setAudience","setJti","jwtId","jti","setNotBefore","setExpirationTime","setIssuedAt","replicateIssuerAsHeader","_replicateIssuerAsHeader","replicateSubjectAsHeader","_replicateSubjectAsHeader","replicateAudienceAsHeader","_replicateAudienceAsHeader","check","description","digestAlgorithm","components","e","n","thumbprint","isJWKSLike","LocalJWKSet","jwks","isJWKLike","_cached","WeakMap","_jwks","structuredClone","getKey","kid","getKtyFromAlg","candidates","candidate","error","asyncIterator","importWithAlgCache","cached","_fetchJwksJs","_fetchJwksJsDefault","RemoteJWKSet","_url","_options","agent","_timeoutDuration","timeoutDuration","_cooldownDuration","cooldownDuration","_cacheMaxAge","cacheMaxAge","coolingDown","_jwksTimestamp","fresh","reload","_pendingFetch","WebSocketPair","navigator","userAgent","EdgeRuntime","then","json","catch","fetchJwks","timeout","controller","timedOut","AbortController","setTimeout","abort","signal","redirect","clearTimeout","status","encodedHeader","protectedB64u","parts","decoded","_generateJs","getModulusLengthOption","publicExponent","cacheLoader","reject","getElementsByTagName","script","preloadLink","rel","as","head","async","onerror","onload","remove","cachedBundles","cachedPreloads","cachedPrefetches","loader","getCache"],"version":3,"file":"index.js.map"}